{"report_id":"59851852-c446-4f02-92c3-6d27caaf389e","version":0,"status":"done","tags":[],"date":"2026-08-22T06:32:45Z","url":{"schema":"http","addr":"xeloris-luckyreward.click/","fqdn":"xeloris-luckyreward.click","domain":"xeloris-luckyreward.click","tld":"click"},"ip":{"addr":"104.21.59.96","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"xeloris-luckyreward.click/c19087e6-c1b9-4946-a21f-45b8103dde60/en/?lead_info=bGVhZF91dWlkPWIyZWRiODg3LTU5M2YtNDAxYS04OGYwLTEyY2FkOTE1YTM2MiZvcz1XaW5kb3dzJmxhbmd1YWdlPWVuLVVTJm9mZmVyX3VybD1odHRwczovL21vbmV5bG9vdC5vbmxpbmUvMjY1ND9sZWFkX2lkPWIyZWRiODg3LTU5M2YtNDAxYS04OGYwLTEyY2FkOTE1YTM2MiZzdWIxPXtzdWIxfSZzdWIyPXtzdWIyfSZzdWIzPXtzdWIzfSZzdWI0PXtzdWI0fSZzdWI1PXtzdWI1fSZzdWI2PXtzdWI2fSZzdWI3PXtzdWI3fSZzdWI4PXtzdWI4fSZ0cmFjZV9pZD1jM2IwYTAzOS1kMjk1LTRiOWMtYTIzZi1lNDAyMWIwNGFjNTM\u0026is_webview=false\u0026pixel=\u0026fbclid=","fqdn":"xeloris-luckyreward.click","domain":"xeloris-luckyreward.click","tld":"click"},"title":"SUPRIME HOT","dom":{"size":161559,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (38286)","md5":"b8299b2a3f2c5a68ddb5fbbc44953477","sha1":"73a504e8c14d37bd59ace3e12051526897fa9cb1","sha256":"6d5a35ed9d00187fe5608a43225ef96ac1834a5225e8465a05a3c1dae6030692","sha512":"76d5fafe5c6440f79b5f1ad6637b76d2e762a01f25d0e6d4b78c147fa4c5326825b807a724596b25cbe76660665a8cf682954e96bedfcf3a0827185d0b7521ca","ssdeep":"3072:7v0xsXTJ6+nUWZVkeJanfdexsXTJ6+nUWZVkeJanfd3U2Ovlga0:XjJ/foeJazjJ/foeJaO2T","tlshash":"e0f3cf20a4f2647305d3a1966a126b0b6ce9f603d947874577bcc3d0afe7e92ed1315c","dom_hash":"domhashc86744975c37205264a40b6d605a2572","first_seen":"2026-08-22T06:32:48.723638Z","last_seen":"2026-08-22T06:32:48.723638Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"xeloris-luckyreward.click/","fqdn":"xeloris-luckyreward.click","domain":"xeloris-luckyreward.click","tld":"click"},"ip":{"addr":"104.21.59.96","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-09-26T06:32:45Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-22","alert":"Phishing Block","trigger":"xeloris-luckyreward.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null},"summary":[{"fqdn":"xeloris-luckyreward.click","ip":{"addr":"172.67.174.191","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-08-22T06:29:40.515195Z","last_seen":"2026-08-22T06:29:40.515195Z","alert_count":30,"request_count":30,"received_data":1341172,"sent_data":29124,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}]},{"fqdn":"easy-image.b-cdn.net","ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"domain_registered":"2016-04-25","domain_rank":0,"first_seen":"2024-10-22T20:51:12.623208Z","last_seen":"2026-08-21T03:09:04.983843Z","alert_count":0,"request_count":7,"received_data":216115,"sent_data":3945,"comment":"","tags":null,"fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"xeloris-luckyreward.click/c19087e6-c1b9-4946-a21f-45b8103dde60/en/firebase-prewarm.js","fqdn":"xeloris-luckyreward.click","domain":"xeloris-luckyreward.click","tld":"click"},"ip":{"addr":"172.67.174.191","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"98f6624f3b06d19e150a3ba54c6aea64","sha1":"5d048957e7d4d912a918520e5f266481007283d6","sha256":"56d236c1f22ec636017694031d58e458d3a53ce2ba4c06c76626c5189220094b","sha512":"0937f3065b315946f17a02d30991c7f62e637badc12fa26a6e7a68aec12d97c8fdd91d4effa092bc41145df86c8b8f14ac8c4560c1ebdc8cd2e6efcdcdea69ae","ssdeep":"","tlshash":"4f51fd4a599bb06b4f2370beca4f6105f5bb000b4d0ecb05795eaa615fb267403b2acd","size":2474,"data":"","first_seen":"2026-07-25T05:49:00.120428Z","last_seen":"2026-08-22T06:32:48.733491Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xeloris-luckyreward.click/c19087e6-c1b9-4946-a21f-45b8103dde60/en/?lead_info=bGVhZF91dWlkPWIyZWRiODg3LTU5M2YtNDAxYS04OGYwLTEyY2FkOTE1YTM2MiZvcz1XaW5kb3dzJmxhbmd1YWdlPWVuLVVTJm9mZmVyX3VybD1odHRwczovL21vbmV5bG9vdC5vbmxpbmUvMjY1ND9sZWFkX2lkPWIyZWRiODg3LTU5M2YtNDAxYS04OGYwLTEyY2FkOTE1YTM2MiZzdWIxPXtzdWIxfSZzdWIyPXtzdWIyfSZzdWIzPXtzdWIzfSZzdWI0PXtzdWI0fSZzdWI1PXtzdWI1fSZzdWI2PXtzdWI2fSZzdWI3PXtzdWI3fSZzdWI4PXtzdWI4fSZ0cmFjZV9pZD1jM2IwYTAzOS1kMjk1LTRiOWMtYTIzZi1lNDAyMWIwNGFjNTM\u0026is_webview=false\u0026pixel=\u0026fbclid=","fqdn":"xeloris-luckyreward.click","domain":"xeloris-luckyreward.click","tld":"click"},"ip":{"addr":"172.67.174.191","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"b589be404f1aebfb51aba740282147c8","sha1":"35f6f60a65631bc47f26bf574c2c32df02a72b11","sha256":"173bc745ac8eced99ab4d8ae1d1663a539e89bf33a2f952683dafe7057f3a15f","sha512":"1bd0fe9c5bdede9048953449ff547709a9904802035d8c3beea4023ab35640535f930cc66e76e311ad315a78fc1ad946c90cf5cae1bdbd7aea540fe094b4f797","ssdeep":"","tlshash":"3f8000080a2302a002b33b30222baf00323a808082802220a880e22a28238830a820a0","size":29,"data":"","first_seen":"2026-07-28T03:06:16.220159Z","last_seen":"2026-08-22T06:32:48.777559Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xeloris-luckyreward.click/c19087e6-c1b9-4946-a21f-45b8103dde60/en/?lead_info=bGVhZF91dWlkPWIyZWRiODg3LTU5M2YtNDAxYS04OGYwLTEyY2FkOTE1YTM2MiZvcz1XaW5kb3dzJmxhbmd1YWdlPWVuLVVTJm9mZmVyX3VybD1odHRwczovL21vbmV5bG9vdC5vbmxpbmUvMjY1ND9sZWFkX2lkPWIyZWRiODg3LTU5M2YtNDAxYS04OGYwLTEyY2FkOTE1YTM2MiZzdWIxPXtzdWIxfSZzdWIyPXtzdWIyfSZzdWIzPXtzdWIzfSZzdWI0PXtzdWI0fSZzdWI1PXtzdWI1fSZzdWI2PXtzdWI2fSZzdWI3PXtzdWI3fSZzdWI4PXtzdWI4fSZ0cmFjZV9pZD1jM2IwYTAzOS1kMjk1LTRiOWMtYTIzZi1lNDAyMWIwNGFjNTM\u0026is_webview=false\u0026pixel=\u0026fbclid=","fqdn":"xeloris-luckyreward.click","domain":"xeloris-luckyreward.click","tld":"click"},"ip":{"addr":"172.67.174.191","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"9bc2d0b525d86e29a54e8eab81895875","sha1":"6af36f48a6f610babfa37cb956df7c3c7422344b","sha256":"c3e14b772f74daa9ea5654f065b6fdfd84da79ee5ec29cf2e87f1b316911f35f","sha512":"97198486a8af193480875dc1b92ac2463c7b8ebd7327fe4f63688633e6eda3bb0135d9a2bde5be4ec4e09d47cb9800fbc3f6e77e8f140b03440ee0257f8fef58","ssdeep":"","tlshash":"b28000002e020c2332f32c3a223aaf08a2af80020b020800ba80c0bb280300302003a2","size":29,"data":"","first_seen":"2026-07-28T03:06:16.221075Z","last_seen":"2026-08-22T06:32:48.778355Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xeloris-luckyreward.click/c19087e6-c1b9-4946-a21f-45b8103dde60/en/?lead_info=bGVhZF91dWlkPWIyZWRiODg3LTU5M2YtNDAxYS04OGYwLTEyY2FkOTE1YTM2MiZvcz1XaW5kb3dzJmxhbmd1YWdlPWVuLVVTJm9mZmVyX3VybD1odHRwczovL21vbmV5bG9vdC5vbmxpbmUvMjY1ND9sZWFkX2lkPWIyZWRiODg3LTU5M2YtNDAxYS04OGYwLTEyY2FkOTE1YTM2MiZzdWIxPXtzdWIxfSZzdWIyPXtzdWIyfSZzdWIzPXtzdWIzfSZzdWI0PXtzdWI0fSZzdWI1PXtzdWI1fSZzdWI2PXtzdWI2fSZzdWI3PXtzdWI3fSZzdWI4PXtzdWI4fSZ0cmFjZV9pZD1jM2IwYTAzOS1kMjk1LTRiOWMtYTIzZi1lNDAyMWIwNGFjNTM\u0026is_webview=false\u0026pixel=\u0026fbclid=","fqdn":"xeloris-luckyreward.click","domain":"xeloris-luckyreward.click","tld":"click"},"ip":{"addr":"172.67.174.191","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"9cbbdc827b31aa23402aba75c76ac5d8","sha1":"a0787357bde61ee567cbdac80cb12be4a70c05c2","sha256":"41977c4800070169970cc2ccfd440c2368732cde341cdd912cc13f0fa4ddb77c","sha512":"3efc205af1e93d64b36ae8841f54d46558c472e04327bc396fc4e4cb22debae84393011404500ff1559a08bfcde6e04b0d635ce73ebf5e894bd9bf3541773f06","ssdeep":"","tlshash":"6d8000002e020823a2b32c2a223aaf20a2af800a0a000800aa80e03b282300302203b2","size":29,"data":"","first_seen":"2026-07-28T03:06:16.222037Z","last_seen":"2026-08-22T06:32:48.779115Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xeloris-luckyreward.click/c19087e6-c1b9-4946-a21f-45b8103dde60/en/?lead_info=bGVhZF91dWlkPWIyZWRiODg3LTU5M2YtNDAxYS04OGYwLTEyY2FkOTE1YTM2MiZvcz1XaW5kb3dzJmxhbmd1YWdlPWVuLVVTJm9mZmVyX3VybD1odHRwczovL21vbmV5bG9vdC5vbmxpbmUvMjY1ND9sZWFkX2lkPWIyZWRiODg3LTU5M2YtNDAxYS04OGYwLTEyY2FkOTE1YTM2MiZzdWIxPXtzdWIxfSZzdWIyPXtzdWIyfSZzdWIzPXtzdWIzfSZzdWI0PXtzdWI0fSZzdWI1PXtzdWI1fSZzdWI2PXtzdWI2fSZzdWI3PXtzdWI3fSZzdWI4PXtzdWI4fSZ0cmFjZV9pZD1jM2IwYTAzOS1kMjk1LTRiOWMtYTIzZi1lNDAyMWIwNGFjNTM\u0026is_webview=false\u0026pixel=\u0026fbclid=","fqdn":"xeloris-luckyreward.click","domain":"xeloris-luckyreward.click","tld":"click"},"ip":{"addr":"172.67.174.191","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"230bb8ccc497dd96309abb995fef4031","sha1":"0269939db434cb46118fa6b0ae802bf935963d81","sha256":"2841551c92374559286f1db761324e29d6cedeced8e84f6b3fd14e678f3b90fb","sha512":"b3b2a78aee755e59371ac460c21f1c409a166a8a69031538105cb35d03e2a0f7e8379034ca8f34bd3044f0dd36cae0ef5ebaffe79e3282742d7eeecef27e71b2","ssdeep":"","tlshash":"e48004050501037d0173155153533f00173573404d100040d440c51734430330510454","size":35,"data":"","first_seen":"2026-07-25T05:49:00.166915Z","last_seen":"2026-08-22T06:32:48.779845Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xeloris-luckyreward.click/c19087e6-c1b9-4946-a21f-45b8103dde60/en/?lead_info=bGVhZF91dWlkPWIyZWRiODg3LTU5M2YtNDAxYS04OGYwLTEyY2FkOTE1YTM2MiZvcz1XaW5kb3dzJmxhbmd1YWdlPWVuLVVTJm9mZmVyX3VybD1odHRwczovL21vbmV5bG9vdC5vbmxpbmUvMjY1ND9sZWFkX2lkPWIyZWRiODg3LTU5M2YtNDAxYS04OGYwLTEyY2FkOTE1YTM2MiZzdWIxPXtzdWIxfSZzdWIyPXtzdWIyfSZzdWIzPXtzdWIzfSZzdWI0PXtzdWI0fSZzdWI1PXtzdWI1fSZzdWI2PXtzdWI2fSZzdWI3PXtzdWI3fSZzdWI4PXtzdWI4fSZ0cmFjZV9pZD1jM2IwYTAzOS1kMjk1LTRiOWMtYTIzZi1lNDAyMWIwNGFjNTM\u0026is_webview=false\u0026pixel=\u0026fbclid=","fqdn":"xeloris-luckyreward.click","domain":"xeloris-luckyreward.click","tld":"click"},"ip":{"addr":"172.67.174.191","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"52f429bc0ff959ca84b120e863e7f879","sha1":"e333f9187ae229b218c197feb057c520841ed7d6","sha256":"bd27bd0f4859361086c57e00be599e94197119d8d9cd3a6f69076a9a65756983","sha512":"b45f32e510570be46d5696f0074970cfa730186f78f2b9cbb9f5a8ec208a18917cfb6e2d615ade8a1ca13a8fd6b7fd9a29fc207ce94ee5059f4491f2ed1e0048","ssdeep":"192:wY3BAEtuAVt+SwHe3/rQrH8fPeTEfuXC55PsASfhRy17/A09A0WST:wq/zfmTEfukPsti","tlshash":"5df1224c40b7a1a106f760bc5b4b6225b5b650133109cd447e6cdb80bf99e2daaf3bde","size":7755,"data":"","first_seen":"2026-08-22T06:29:58.991337Z","last_seen":"2026-08-22T06:32:48.780592Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xeloris-luckyreward.click/c19087e6-c1b9-4946-a21f-45b8103dde60/en/?lead_info=bGVhZF91dWlkPWIyZWRiODg3LTU5M2YtNDAxYS04OGYwLTEyY2FkOTE1YTM2MiZvcz1XaW5kb3dzJmxhbmd1YWdlPWVuLVVTJm9mZmVyX3VybD1odHRwczovL21vbmV5bG9vdC5vbmxpbmUvMjY1ND9sZWFkX2lkPWIyZWRiODg3LTU5M2YtNDAxYS04OGYwLTEyY2FkOTE1YTM2MiZzdWIxPXtzdWIxfSZzdWIyPXtzdWIyfSZzdWIzPXtzdWIzfSZzdWI0PXtzdWI0fSZzdWI1PXtzdWI1fSZzdWI2PXtzdWI2fSZzdWI3PXtzdWI3fSZzdWI4PXtzdWI4fSZ0cmFjZV9pZD1jM2IwYTAzOS1kMjk1LTRiOWMtYTIzZi1lNDAyMWIwNGFjNTM\u0026is_webview=false\u0026pixel=\u0026fbclid=","fqdn":"xeloris-luckyreward.click","domain":"xeloris-luckyreward.click","tld":"click"},"ip":{"addr":"172.67.174.191","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"97a717da8ebf63780899f410c2b7c245","sha1":"62d14930710ab932c733ef266e97797cac5f0ca0","sha256":"a1f6f441f1f4d434e1070cf4585fc3a7f7bd7ffac25663bdc4650280fac2ebe5","sha512":"089d92bb2bf915d4eb255a4c33c2445c6fce7a68bf147756c1d61a3fe22d1c07c3746fa54317a2c4205a5729ee1303e6276465252a35fb7fd5bf5a042c883d8a","ssdeep":"","tlshash":"1901237d1895b0e633f93975d65b662d72fa0b103001d4049d65c0003c7dc6b1c16ccf","size":677,"data":"","first_seen":"2026-06-24T20:08:35.142067Z","last_seen":"2026-08-22T06:32:48.781835Z","times_seen":21,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xeloris-luckyreward.click/c19087e6-c1b9-4946-a21f-45b8103dde60/en/js/prompt.js","fqdn":"xeloris-luckyreward.click","domain":"xeloris-luckyreward.click","tld":"click"},"ip":{"addr":"172.67.174.191","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"44ebc534ff78e60f1b65bf973fce02e0","sha1":"cf48af00a3fefee9965b4ac1b8857f4036a2a252","sha256":"ff398de885567f110214c619e2421fd329a9aa4b873f2480a953acc6cc61f898","sha512":"6bd669dab5a3c5daa5e34b892b3a7b156afea0bec86c91ae9ce6b46946300a65ea26d2fb8edf361bd89739f377457a12b5f93b07cf193be60a8e862c0bad8518","ssdeep":"","tlshash":"cdf022200baa18b1a01b336e8f1f1e84233174a72d225d203d5d4c8dcf816a842b2be7","size":453,"data":"","first_seen":"2025-11-01T11:14:12.483716Z","last_seen":"2026-08-22T06:32:48.768837Z","times_seen":87,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xeloris-luckyreward.click/c19087e6-c1b9-4946-a21f-45b8103dde60/en/js/reviewsLazyLoad.js","fqdn":"xeloris-luckyreward.click","domain":"xeloris-luckyreward.click","tld":"click"},"ip":{"addr":"172.67.174.191","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"205197aa6d691dd228f197aa9d4115f0","sha1":"e9c9c886cc3209eaad1e522cf8e7d3f01d2903a4","sha256":"176ca8d96461c63d4f054becf7d443c9f45f10e5e2461be2a6364f2e216b628b","sha512":"b2223d578957c6e0435ed8c976d49478e22d520bbb5a20c3b3da589cba0973f7cfa076c237524cae25b4c1bd6f8dfd25a2451b13d0c69dff2ecb5b132d70ffa9","ssdeep":"192:Iq+mVwgeuAu9F5prXMjQpUdeUdnXcYLtckCD+fUKPQx4iH9AMOSN5kp29HSnuQLr:IBswSAi5pM/79vLtckURdHkkpc","tlshash":"00529324319361366213e0ee5a8f5355b934f2133207c818b64d975c6febd2d83aaafc","size":14481,"data":"","first_seen":"2026-07-25T05:49:00.113621Z","last_seen":"2026-08-22T06:32:48.752214Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xeloris-luckyreward.click/c19087e6-c1b9-4946-a21f-45b8103dde60/en/js/main-function.js","fqdn":"xeloris-luckyreward.click","domain":"xeloris-luckyreward.click","tld":"click"},"ip":{"addr":"172.67.174.191","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d8d61c69ac5c1ea2b82ced516e33098b","sha1":"8566994f87ca929b00724367a4ba81bc54d4c054","sha256":"c5ddbcc300c186e0f2ade6304d64fef9013f645a5432655ee695f98a05f3d60a","sha512":"82b1a2e80a63e706fcad9d64950c2c889d96a25c1410b66305bcdf1c6d9e2ab40745c12161608c71c3f37228ded6a4109c3a7bc309eba82cc7c8cdfadf369d72","ssdeep":"384:SRh+xRlYlTlLoq/TQnyk/OvyG29P2Ih7BoxesD/puVS7lefp+n7kxwJ5oAVRap+P:Sb+LlYlRz/TQc29MtisEw4LTQrXsZbKd","tlshash":"a0e2514c66fb11664267b06e4f8b61043637a00b385dde287e2d4b806fd193d81e6feb","size":33974,"data":"","first_seen":"2026-08-22T06:29:58.950396Z","last_seen":"2026-08-22T06:32:48.759042Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xeloris-luckyreward.click/c19087e6-c1b9-4946-a21f-45b8103dde60/en/js/jquery.min.js","fqdn":"xeloris-luckyreward.click","domain":"xeloris-luckyreward.click","tld":"click"},"ip":{"addr":"172.67.174.191","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"c9771cc3e90e18f5336eedbd0fffb2cf","sha1":"6ee8aaa3ac1f4e0ae18717a3fd26892e9f0e4cc5","sha256":"3e7501d15c3630e791c8b20392eb9dee31a9f65ce3efdde76cef5c710141ab24","sha512":"c503341fa3a7176fd10bd8cd7a5717c8faf971f87fa0c158f2d94fcd484ae3ed5031f49414dae833fb806b7365b5699c21d2e655376f69adb052b22f6f6982a7","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GK7:sHNwcv9VBQpLl88SMBQ47GK7","tlshash":"8083f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","size":87532,"data":"","first_seen":"2023-10-13T22:05:06Z","last_seen":"2026-08-22T11:10:38.647184Z","times_seen":31292,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xeloris-luckyreward.click/c19087e6-c1b9-4946-a21f-45b8103dde60/en/js/sendUpdateLead.js","fqdn":"xeloris-luckyreward.click","domain":"xeloris-luckyreward.click","tld":"click"},"ip":{"addr":"172.67.174.191","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"31f3459d3d3be8cd0f19cfb34193178f","sha1":"3b968948d510bdc3fbdf270785afaae440242c73","sha256":"7d5c014457152dd766b6ec4de8c795ba6b20cfd67c74753a5662bb8f027562e6","sha512":"a1cd93e1ecb2ceb233dc1d925f6995f187eea04051334148140f068c3fcdf548b738c3fdfb099e0f30d45d2398626de813e5edf84237ae3db8f110289d0fe676","ssdeep":"","tlshash":"7971334468a775c9a4f320a997df114ab1b6406b1065d0447c0cef44afe4a3e26fefdd","size":3703,"data":"","first_seen":"2026-08-22T06:29:58.977284Z","last_seen":"2026-08-22T06:32:48.746795Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xeloris-luckyreward.click/c19087e6-c1b9-4946-a21f-45b8103dde60/en/js/uaParser.js","fqdn":"xeloris-luckyreward.click","domain":"xeloris-luckyreward.click","tld":"click"},"ip":{"addr":"172.67.174.191","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"fae74f6b710e428ad5ca0378fc339859","sha1":"0d8f92bc5fcfb0ef72ee329f0a0763524443b5bd","sha256":"9735a83f5152c01eefe3ca9457e3b440502b60246d60f232196eb36c126f2125","sha512":"092f093612174c0f84c491a2e9ff03b4ee160ae90aa16ebd5f83e80a7c128efb6e8099629c9c88d7a330f9313a1a3d78e561d295b4fdb446dd18266fe75e46ff","ssdeep":"384:69M5d42wb/6iOD0tRqwkdZISkzVBv2ETttl9rsATHskN:69CKyzDYRqZduSAZ5tl9rsAT1","tlshash":"0b92da3ed365bf2093bee589c51790002d3a5c3adb41b0f99ae4b540e8d6db1129f7b2","size":19383,"data":"","first_seen":"2024-04-25T09:45:56Z","last_seen":"2026-08-22T06:32:48.768234Z","times_seen":290,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xeloris-luckyreward.click/c19087e6-c1b9-4946-a21f-45b8103dde60/en/js/translate.js","fqdn":"xeloris-luckyreward.click","domain":"xeloris-luckyreward.click","tld":"click"},"ip":{"addr":"172.67.174.191","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"99c0d4f9a645bf2c48bcf1789692ff1a","sha1":"90ccdd603c5035a69c77d340db76e503d6efb48c","sha256":"5d8725968df266c2a1d0d513b9e02a52d2c68ea48b23733a5b7103dbe1abca87","sha512":"04cbbe9e8ecdae18b08e3a21264e15c37efd00313e7f9cb5847fa681c25a879657e82d2a6938e17fe32454849503612a226ebd1f5dd2d9e133228fc58270d98e","ssdeep":"","tlshash":"5271974cb0f2010d5993b02efbeb6895b224985b0265fe183f5e45436fe393dd39e689","size":3637,"data":"","first_seen":"2026-04-10T07:45:47.001447Z","last_seen":"2026-08-22T06:32:48.765945Z","times_seen":80,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"warn","text":"jQuery.Deferred exception: can't access property \"toLowerCase\", language is nullregexpLanguageBrowser@https://xeloris-luckyreward.click/c19087e6-c1b9-4946-a21f-45b8103dde60/en/js/translate.js:17:36\ngetUserBrowserLanguage@https://xeloris-luckyreward.click/c19087e6-c1b9-4946-a21f-45b8103dde60/en/js/translate.js:22:25\ninit@https://xeloris-luckyreward.click/c19087e6-c1b9-4946-a21f-45b8103dde60/en/js/translate.js:7:14\n@https://xeloris-luckyreward.click/c19087e6-c1b9-4946-a21f-45b8103dde60/en/js/translate.js:90:15\ne@https://xeloris-luckyreward.click/c19087e6-c1b9-4946-a21f-45b8103dde60/en/js/jquery.min.js:2:27028\nDeferred/then/l/\u003c/t\u003c@https://xeloris-luckyreward.click/c19087e6-c1b9-4946-a21f-45b8103dde60/en/js/jquery.min.js:2:27330\nsetTimeout handler*Deferred/then/l/\u003c@https://xeloris-luckyreward.click/c19087e6-c1b9-4946-a21f-45b8103dde60/en/js/jquery.min.js:2:27594\nc@https://xeloris-luckyreward.click/c19087e6-c1b9-4946-a21f-45b8103dde60/en/js/jquery.min.js:2:25304\nfireWith@https://xeloris-luckyreward.click/c19087e6-c1b9-4946-a21f-45b8103dde60/en/js/jquery.min.js:2:26053\nfire@https://xeloris-luckyreward.click/c19087e6-c1b9-4946-a21f-45b8103dde60/en/js/jquery.min.js:2:26089\nc@https://xeloris-luckyreward.click/c19087e6-c1b9-4946-a21f-45b8103dde60/en/js/jquery.min.js:2:25304\nfireWith@https://xeloris-luckyreward.click/c19087e6-c1b9-4946-a21f-45b8103dde60/en/js/jquery.min.js:2:26053\nready@https://xeloris-luckyreward.click/c19087e6-c1b9-4946-a21f-45b8103dde60/en/js/jquery.min.js:2:29112\nP@https://xeloris-luckyreward.click/c19087e6-c1b9-4946-a21f-45b8103dde60/en/js/jquery.min.js:2:28884\nEventListener.handleEvent*@https://xeloris-luckyreward.click/c19087e6-c1b9-4946-a21f-45b8103dde60/en/js/jquery.min.js:2:29264\n@https://xeloris-luckyreward.click/c19087e6-c1b9-4946-a21f-45b8103dde60/en/js/jquery.min.js:2:220\n@https://xeloris-luckyreward.click/c19087e6-c1b9-4946-a21f-45b8103dde60/en/js/jquery.min.js:2:225\nmap[type:undefined]","filename":"https://xeloris-luckyreward.click/c19087e6-c1b9-4946-a21f-45b8103dde60/en/js/jquery.min.js","line_number":2,"column_number":28648},{"level":"log","text":"ServiceWorker registration successful with scope: https://xeloris-luckyreward.click/c19087e6-c1b9-4946-a21f-45b8103dde60/en/?lead_info=bGVhZF91dWlkPWIyZWRiODg3LTU5M2YtNDAxYS04OGYwLTEyY2FkOTE1YTM2MiZvcz1XaW5kb3dzJmxhbmd1YWdlPWVuLVVTJm9mZmVyX3VybD1odHRwczovL21vbmV5bG9vdC5vbmxpbmUvMjY1ND9sZWFkX2lkPWIyZWRiODg3LTU5M2YtNDAxYS04OGYwLTEyY2FkOTE1YTM2MiZzdWIxPXtzdWIxfSZzdWIyPXtzdWIyfSZzdWIzPXtzdWIzfSZzdWI0PXtzdWI0fSZzdWI1PXtzdWI1fSZzdWI2PXtzdWI2fSZzdWI3PXtzdWI3fSZzdWI4PXtzdWI4fSZ0cmFjZV9pZD1jM2IwYTAzOS1kMjk1LTRiOWMtYTIzZi1lNDAyMWIwNGFjNTM\u0026is_webview=false\u0026pixel=\u0026fbclid=","filename":"https://xeloris-luckyreward.click/c19087e6-c1b9-4946-a21f-45b8103dde60/en/?lead_info=bGVhZF91dWlkPWIyZWRiODg3LTU5M2YtNDAxYS04OGYwLTEyY2FkOTE1YTM2MiZvcz1XaW5kb3dzJmxhbmd1YWdlPWVuLVVTJm9mZmVyX3VybD1odHRwczovL21vbmV5bG9vdC5vbmxpbmUvMjY1ND9sZWFkX2lkPWIyZWRiODg3LTU5M2YtNDAxYS04OGYwLTEyY2FkOTE1YTM2MiZzdWIxPXtzdWIxfSZzdWIyPXtzdWIyfSZzdWIzPXtzdWIzfSZzdWI0PXtzdWI0fSZzdWI1PXtzdWI1fSZzdWI2PXtzdWI2fSZzdWI3PXtzdWI3fSZzdWI4PXtzdWI4fSZ0cmFjZV9pZD1jM2IwYTAzOS1kMjk1LTRiOWMtYTIzZi1lNDAyMWIwNGFjNTM\u0026is_webview=false\u0026pixel=\u0026fbclid=","line_number":10,"column_number":27}]},"http":[{"url":{"schema":"https","addr":"xeloris-luckyreward.click/c19087e6-c1b9-4946-a21f-45b8103dde60/en/images/security_icon_n-1.webp","fqdn":"xeloris-luckyreward.click","domain":"xeloris-luckyreward.click","tld":"click"},"ip":{"addr":"172.67.174.191","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xeloris-luckyreward.click/c19087e6-c1b9-4946-a21f-45b8103dde60/en/?lead_info=bGVhZF91dWlkPWIyZWRiODg3LTU5M2YtNDAxYS04OGYwLTEyY2FkOTE1YTM2MiZvcz1XaW5kb3dzJmxhbmd1YWdlPWVuLVVTJm9mZmVyX3VybD1odHRwczovL21vbmV5bG9vdC5vbmxpbmUvMjY1ND9sZWFkX2lkPWIyZWRiODg3LTU5M2YtNDAxYS04OGYwLTEyY2FkOTE1YTM2MiZzdWIxPXtzdWIxfSZzdWIyPXtzdWIyfSZzdWIzPXtzdWIzfSZzdWI0PXtzdWI0fSZzdWI1PXtzdWI1fSZzdWI2PXtzdWI2fSZzdWI3PXtzdWI3fSZzdWI4PXtzdWI4fSZ0cmFjZV9pZD1jM2IwYTAzOS1kMjk1LTRiOWMtYTIzZi1lNDAyMWIwNGFjNTM\u0026is_webview=false\u0026pixel=\u0026fbclid=","date":"2026-08-22T06:32:18.471Z","timestamp":1787380338471,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xeloris-luckyreward.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 20 Aug 2026 19:24:52 GMT","end":"Wed, 18 Nov 2026 20:23:24 GMT"},"fingerprint":{"sha1":"A1:AA:F5:8E:D6:B5:05:C7:2C:20:02:6A:E0:0B:D0:F3:41:1E:ED:C3","sha256":"EE:D6:F5:6C:A9:E9:8D:96:F7:FE:1A:66:D7:D0:03:16:50:B1:7A:AC:62:DB:AB:1B:C9:E2:E0:63:DA:AD:D2:A3"}}},"request":{"raw":"GET /c19087e6-c1b9-4946-a21f-45b8103dde60/en/images/security_icon_n-1.webp HTTP/1.1\r\nHost: xeloris-luckyreward.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xeloris-luckyreward.click/c19087e6-c1b9-4946-a21f-45b8103dde60/en/?lead_info=bGVhZF91dWlkPWIyZWRiODg3LTU5M2YtNDAxYS04OGYwLTEyY2FkOTE1YTM2MiZvcz1XaW5kb3dzJmxhbmd1YWdlPWVuLVVTJm9mZmVyX3VybD1odHRwczovL21vbmV5bG9vdC5vbmxpbmUvMjY1ND9sZWFkX2lkPWIyZWRiODg3LTU5M2YtNDAxYS04OGYwLTEyY2FkOTE1YTM2MiZzdWIxPXtzdWIxfSZzdWIyPXtzdWIyfSZzdWIzPXtzdWIzfSZzdWI0PXtzdWI0fSZzdWI1PXtzdWI1fSZzdWI2PXtzdWI2fSZzdWI3PXtzdWI3fSZzdWI4PXtzdWI4fSZ0cmFjZV9pZD1jM2IwYTAzOS1kMjk1LTRiOWMtYTIzZi1lNDAyMWIwNGFjNTM\u0026is_webview=false\u0026pixel=\u0026fbclid=\r\nCookie: cl_st=b\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Sat, 22 Aug 2026 06:32:18 GMT\r\ncontent-type: image/webp\r\npriority: u=5,i\r\ncf-ray: a2efd6eb6fec2678-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 393\r\ncache-control: max-age=14400\r\netag: \"6a87d5cf-23e\"\r\nlast-modified: Fri, 21 Aug 2026 04:36:31 GMT\r\nserver: cloudflare\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GgsF3k1UNdxb%2FeoAaM5ec%2FwcdR5LyvClN3aOjb1qnzYsCg3CwHK1SPkeUbgIXdIi2PswO6AJJvkpsMcPEX5xn1YWanqoNKlzCbl0eISkn0T6LlA448ZS%2BkFyXGvhQ3Sb%2BUniuFba%2F%2B8QKQab\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 574\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":574,"size_decoded":1286,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"16735dee72b009f6085c85bf194c313b","sha1":"0f7409a79c4926442e1ed59d10dbb87f290ea0a5","sha256":"3244abdb32f757760de0676e5a5c71e45558014437b3e3f437efd110a722dd22","sha512":"d280b78c80f8541ca9617dd50969109b38c2488f125dab50b5fd5bcfe5329fbb7fe28f7f09cdd52df7deb65c1f147f2b071beab7ce23bfc39104121c142bd606","ssdeep":"","tlshash":"eff041cbdb8e2ee4238b68600da0191601af340281000a840e04682367a03f8b9dc497","first_seen":"2024-10-04T10:42:22.386228Z","last_seen":"2026-08-22T06:32:48.727943Z","times_seen":171,"resource_available":false,"data":null}},"time_used":79,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":79,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-22","alert":"Phishing Block","trigger":"xeloris-luckyreward.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xeloris-luckyreward.click/c19087e6-c1b9-4946-a21f-45b8103dde60/en/images/security_icon_n-2.webp","fqdn":"xeloris-luckyreward.click","domain":"xeloris-luckyreward.click","tld":"click"},"ip":{"addr":"172.67.174.191","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xeloris-luckyreward.click/c19087e6-c1b9-4946-a21f-45b8103dde60/en/?lead_info=bGVhZF91dWlkPWIyZWRiODg3LTU5M2YtNDAxYS04OGYwLTEyY2FkOTE1YTM2MiZvcz1XaW5kb3dzJmxhbmd1YWdlPWVuLVVTJm9mZmVyX3VybD1odHRwczovL21vbmV5bG9vdC5vbmxpbmUvMjY1ND9sZWFkX2lkPWIyZWRiODg3LTU5M2YtNDAxYS04OGYwLTEyY2FkOTE1YTM2MiZzdWIxPXtzdWIxfSZzdWIyPXtzdWIyfSZzdWIzPXtzdWIzfSZzdWI0PXtzdWI0fSZzdWI1PXtzdWI1fSZzdWI2PXtzdWI2fSZzdWI3PXtzdWI3fSZzdWI4PXtzdWI4fSZ0cmFjZV9pZD1jM2IwYTAzOS1kMjk1LTRiOWMtYTIzZi1lNDAyMWIwNGFjNTM\u0026is_webview=false\u0026pixel=\u0026fbclid=","date":"2026-08-22T06:32:18.472Z","timestamp":1787380338472,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xeloris-luckyreward.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 20 Aug 2026 19:24:52 GMT","end":"Wed, 18 Nov 2026 20:23:24 GMT"},"fingerprint":{"sha1":"A1:AA:F5:8E:D6:B5:05:C7:2C:20:02:6A:E0:0B:D0:F3:41:1E:ED:C3","sha256":"EE:D6:F5:6C:A9:E9:8D:96:F7:FE:1A:66:D7:D0:03:16:50:B1:7A:AC:62:DB:AB:1B:C9:E2:E0:63:DA:AD:D2:A3"}}},"request":{"raw":"GET /c19087e6-c1b9-4946-a21f-45b8103dde60/en/images/security_icon_n-2.webp HTTP/1.1\r\nHost: xeloris-luckyreward.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xeloris-luckyreward.click/c19087e6-c1b9-4946-a21f-45b8103dde60/en/?lead_info=bGVhZF91dWlkPWIyZWRiODg3LTU5M2YtNDAxYS04OGYwLTEyY2FkOTE1YTM2MiZvcz1XaW5kb3dzJmxhbmd1YWdlPWVuLVVTJm9mZmVyX3VybD1odHRwczovL21vbmV5bG9vdC5vbmxpbmUvMjY1ND9sZWFkX2lkPWIyZWRiODg3LTU5M2YtNDAxYS04OGYwLTEyY2FkOTE1YTM2MiZzdWIxPXtzdWIxfSZzdWIyPXtzdWIyfSZzdWIzPXtzdWIzfSZzdWI0PXtzdWI0fSZzdWI1PXtzdWI1fSZzdWI2PXtzdWI2fSZzdWI3PXtzdWI3fSZzdWI4PXtzdWI4fSZ0cmFjZV9pZD1jM2IwYTAzOS1kMjk1LTRiOWMtYTIzZi1lNDAyMWIwNGFjNTM\u0026is_webview=false\u0026pixel=\u0026fbclid=\r\nCookie: cl_st=b\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Sat, 22 Aug 2026 06:32:18 GMT\r\ncontent-type: image/webp\r\npriority: u=5,i\r\ncf-ray: a2efd6eb7fed2678-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 393\r\ncache-control: max-age=14400\r\netag: \"6a87d5cf-c6\"\r\nlast-modified: Fri, 21 Aug 2026 04:36:31 GMT\r\nserver: cloudflare\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZmgUos0B62h%2FzPJZBNZraj4VjHSs1Z7CMhFPWQSMJ500rWNKWq7G7bAfC%2BClohsaB5Idktbbc%2FXLHkIF8ezUIP0QpfXXGr97q6BSLblXOo9PMysLS%2FAaSFDGjbwGRD8YVBSoSyrr1v9Huz%2FL\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 198\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":198,"size_decoded":907,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"3ac1664b06f112ae930716445d9765a9","sha1":"064752fdedd5ba2d38ef36617111de68133cf6b7","sha256":"c55aa588c9480ee7851d578b3306c80f5548f9ae5b3bc9afb5d126e5ef0652f0","sha512":"c00d5d5cb2e5e0afcf3b315a2649da2611ae0e3b75e5677aaf6e851bcb8afd49582161a06c80374e3b47942258ab54379cbfaa8a6ea772b2ad97a33a18fe69cc","ssdeep":"","tlshash":"dad02292cf2508280a732c0a0240442511f3589c20c3ea31a6a62cfa4c3f74b666aa00","first_seen":"2025-06-13T11:43:17.267674Z","last_seen":"2026-08-22T06:32:48.731319Z","times_seen":149,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-22","alert":"Phishing Block","trigger":"xeloris-luckyreward.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xeloris-luckyreward.click/c19087e6-c1b9-4946-a21f-45b8103dde60/en/firebase-prewarm.js","fqdn":"xeloris-luckyreward.click","domain":"xeloris-luckyreward.click","tld":"click"},"ip":{"addr":"172.67.174.191","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xeloris-luckyreward.click/c19087e6-c1b9-4946-a21f-45b8103dde60/en/?lead_info=bGVhZF91dWlkPWIyZWRiODg3LTU5M2YtNDAxYS04OGYwLTEyY2FkOTE1YTM2MiZvcz1XaW5kb3dzJmxhbmd1YWdlPWVuLVVTJm9mZmVyX3VybD1odHRwczovL21vbmV5bG9vdC5vbmxpbmUvMjY1ND9sZWFkX2lkPWIyZWRiODg3LTU5M2YtNDAxYS04OGYwLTEyY2FkOTE1YTM2MiZzdWIxPXtzdWIxfSZzdWIyPXtzdWIyfSZzdWIzPXtzdWIzfSZzdWI0PXtzdWI0fSZzdWI1PXtzdWI1fSZzdWI2PXtzdWI2fSZzdWI3PXtzdWI3fSZzdWI4PXtzdWI4fSZ0cmFjZV9pZD1jM2IwYTAzOS1kMjk1LTRiOWMtYTIzZi1lNDAyMWIwNGFjNTM\u0026is_webview=false\u0026pixel=\u0026fbclid=","date":"2026-08-22T06:32:18.232Z","timestamp":1787380338232,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xeloris-luckyreward.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 20 Aug 2026 19:24:52 GMT","end":"Wed, 18 Nov 2026 20:23:24 GMT"},"fingerprint":{"sha1":"A1:AA:F5:8E:D6:B5:05:C7:2C:20:02:6A:E0:0B:D0:F3:41:1E:ED:C3","sha256":"EE:D6:F5:6C:A9:E9:8D:96:F7:FE:1A:66:D7:D0:03:16:50:B1:7A:AC:62:DB:AB:1B:C9:E2:E0:63:DA:AD:D2:A3"}}},"request":{"raw":"GET /c19087e6-c1b9-4946-a21f-45b8103dde60/en/firebase-prewarm.js HTTP/1.1\r\nHost: xeloris-luckyreward.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xeloris-luckyreward.click/c19087e6-c1b9-4946-a21f-45b8103dde60/en/?lead_info=bGVhZF91dWlkPWIyZWRiODg3LTU5M2YtNDAxYS04OGYwLTEyY2FkOTE1YTM2MiZvcz1XaW5kb3dzJmxhbmd1YWdlPWVuLVVTJm9mZmVyX3VybD1odHRwczovL21vbmV5bG9vdC5vbmxpbmUvMjY1ND9sZWFkX2lkPWIyZWRiODg3LTU5M2YtNDAxYS04OGYwLTEyY2FkOTE1YTM2MiZzdWIxPXtzdWIxfSZzdWIyPXtzdWIyfSZzdWIzPXtzdWIzfSZzdWI0PXtzdWI0fSZzdWI1PXtzdWI1fSZzdWI2PXtzdWI2fSZzdWI3PXtzdWI3fSZzdWI4PXtzdWI4fSZ0cmFjZV9pZD1jM2IwYTAzOS1kMjk1LTRiOWMtYTIzZi1lNDAyMWIwNGFjNTM\u0026is_webview=false\u0026pixel=\u0026fbclid=\r\nCookie: cl_st=b\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gjuAPZTyKcxoH8H6zq2pVb9VhD7bjGD6lACQW7RK%2B8bkVZbmYNf54QoGUXXPFInpcztuEfPMMPSYe1vo7Gq05HJZZMtqJ%2FJneHkrMtOXkuA5tDauMsBYLMtZtu%2B5RYf0m%2BxkVUO0lsrm6b0A\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Sat, 22 Aug 2026 06:32:18 GMT\r\ncontent-type: application/javascript\r\ncontent-encoding: zstd\r\ncf-ray: a2efd6e9efd22678-OSL\r\ncf-cache-status: HIT\r\npriority: u=2,i=?0\r\nage: 397\r\ncache-control: max-age=14400\r\netag: W/\"6a87d5cf-9aa\"\r\nlast-modified: Fri, 21 Aug 2026 04:36:31 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2474,"size_decoded":1905,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (305)","md5":"98f6624f3b06d19e150a3ba54c6aea64","sha1":"5d048957e7d4d912a918520e5f266481007283d6","sha256":"56d236c1f22ec636017694031d58e458d3a53ce2ba4c06c76626c5189220094b","sha512":"0937f3065b315946f17a02d30991c7f62e637badc12fa26a6e7a68aec12d97c8fdd91d4effa092bc41145df86c8b8f14ac8c4560c1ebdc8cd2e6efcdcdea69ae","ssdeep":"","tlshash":"4f51fd4a599bb06b4f2370beca4f6105f5bb000b4d0ecb05795eaa615fb267403b2acd","first_seen":"2026-07-25T05:49:00.120428Z","last_seen":"2026-08-22T06:32:48.733491Z","times_seen":8,"resource_available":true,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-22","alert":"Phishing Block","trigger":"xeloris-luckyreward.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xeloris-luckyreward.click/c19087e6-c1b9-4946-a21f-45b8103dde60/en/style/style.css","fqdn":"xeloris-luckyreward.click","domain":"xeloris-luckyreward.click","tld":"click"},"ip":{"addr":"172.67.174.191","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://xeloris-luckyreward.click/c19087e6-c1b9-4946-a21f-45b8103dde60/en/?lead_info=bGVhZF91dWlkPWIyZWRiODg3LTU5M2YtNDAxYS04OGYwLTEyY2FkOTE1YTM2MiZvcz1XaW5kb3dzJmxhbmd1YWdlPWVuLVVTJm9mZmVyX3VybD1odHRwczovL21vbmV5bG9vdC5vbmxpbmUvMjY1ND9sZWFkX2lkPWIyZWRiODg3LTU5M2YtNDAxYS04OGYwLTEyY2FkOTE1YTM2MiZzdWIxPXtzdWIxfSZzdWIyPXtzdWIyfSZzdWIzPXtzdWIzfSZzdWI0PXtzdWI0fSZzdWI1PXtzdWI1fSZzdWI2PXtzdWI2fSZzdWI3PXtzdWI3fSZzdWI4PXtzdWI4fSZ0cmFjZV9pZD1jM2IwYTAzOS1kMjk1LTRiOWMtYTIzZi1lNDAyMWIwNGFjNTM\u0026is_webview=false\u0026pixel=\u0026fbclid=","date":"2026-08-22T06:32:18.235Z","timestamp":1787380338235,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xeloris-luckyreward.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 20 Aug 2026 19:24:52 GMT","end":"Wed, 18 Nov 2026 20:23:24 GMT"},"fingerprint":{"sha1":"A1:AA:F5:8E:D6:B5:05:C7:2C:20:02:6A:E0:0B:D0:F3:41:1E:ED:C3","sha256":"EE:D6:F5:6C:A9:E9:8D:96:F7:FE:1A:66:D7:D0:03:16:50:B1:7A:AC:62:DB:AB:1B:C9:E2:E0:63:DA:AD:D2:A3"}}},"request":{"raw":"GET /c19087e6-c1b9-4946-a21f-45b8103dde60/en/style/style.css HTTP/1.1\r\nHost: xeloris-luckyreward.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xeloris-luckyreward.click/c19087e6-c1b9-4946-a21f-45b8103dde60/en/?lead_info=bGVhZF91dWlkPWIyZWRiODg3LTU5M2YtNDAxYS04OGYwLTEyY2FkOTE1YTM2MiZvcz1XaW5kb3dzJmxhbmd1YWdlPWVuLVVTJm9mZmVyX3VybD1odHRwczovL21vbmV5bG9vdC5vbmxpbmUvMjY1ND9sZWFkX2lkPWIyZWRiODg3LTU5M2YtNDAxYS04OGYwLTEyY2FkOTE1YTM2MiZzdWIxPXtzdWIxfSZzdWIyPXtzdWIyfSZzdWIzPXtzdWIzfSZzdWI0PXtzdWI0fSZzdWI1PXtzdWI1fSZzdWI2PXtzdWI2fSZzdWI3PXtzdWI3fSZzdWI4PXtzdWI4fSZ0cmFjZV9pZD1jM2IwYTAzOS1kMjk1LTRiOWMtYTIzZi1lNDAyMWIwNGFjNTM\u0026is_webview=false\u0026pixel=\u0026fbclid=\r\nCookie: cl_st=b\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8NBzwjI1W12%2FMfe1j%2BxenYsM5exNQV90d5Sbnw2xcE8vcglLodqqSlKiZtudSlGs0mevVPDbnSzoNLmCFLDHbsCQiGasmxBTXEhsA4w9XAEcj4NgASvdpC5EZu4dK5rN4CCPXIpos0pUbRmr\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Sat, 22 Aug 2026 06:32:18 GMT\r\ncontent-type: text/css\r\ncontent-encoding: zstd\r\ncf-ray: a2efd6e9ffd32678-OSL\r\ncf-cache-status: HIT\r\npriority: u=2,i=?0\r\nage: 397\r\ncache-control: max-age=14400\r\netag: W/\"6a87d5cf-8c02\"\r\nlast-modified: Fri, 21 Aug 2026 04:36:31 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":35842,"size_decoded":8949,"mime_type":"text/css","magic":"Unicode text, UTF-8 text","md5":"672be63be984e640047ded4e0755cace","sha1":"7d90283dd50230f63bde0d19cf649020fc6b1856","sha256":"953c0c0aad55de84b096497e5e46fbd7b0086354f30950158368dd6473ada13d","sha512":"f81e4d7e6e122e40ef78e3b4d0ec3e665f0db3037193775232e3089584618d45971ae4bc18c2d52f2399774b20ea47fca7ce821e635eb863fc83ad89ad0ab446","ssdeep":"768:XyyOgh0FwE92m14JEtPeqFcFTTDiC3LcUOuFZBpXFVWM/wprtzP1NyNEFHwVBeYn:Xfh0m0X6JeeqydTDiGLlzjXzWKwprtzk","tlshash":"1bf25182957429247917d8457e63af91333da183820ed9b8fbd4306cdfca3d59852bce","first_seen":"2026-08-07T08:55:42.37373Z","last_seen":"2026-08-22T06:32:48.737343Z","times_seen":4,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-22","alert":"Phishing Block","trigger":"xeloris-luckyreward.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"easy-image.b-cdn.net/users/female/3.jpg","fqdn":"easy-image.b-cdn.net","domain":"b-cdn.net","tld":"net"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xeloris-luckyreward.click/c19087e6-c1b9-4946-a21f-45b8103dde60/en/?lead_info=bGVhZF91dWlkPWIyZWRiODg3LTU5M2YtNDAxYS04OGYwLTEyY2FkOTE1YTM2MiZvcz1XaW5kb3dzJmxhbmd1YWdlPWVuLVVTJm9mZmVyX3VybD1odHRwczovL21vbmV5bG9vdC5vbmxpbmUvMjY1ND9sZWFkX2lkPWIyZWRiODg3LTU5M2YtNDAxYS04OGYwLTEyY2FkOTE1YTM2MiZzdWIxPXtzdWIxfSZzdWIyPXtzdWIyfSZzdWIzPXtzdWIzfSZzdWI0PXtzdWI0fSZzdWI1PXtzdWI1fSZzdWI2PXtzdWI2fSZzdWI3PXtzdWI3fSZzdWI4PXtzdWI4fSZ0cmFjZV9pZD1jM2IwYTAzOS1kMjk1LTRiOWMtYTIzZi1lNDAyMWIwNGFjNTM\u0026is_webview=false\u0026pixel=\u0026fbclid=","date":"2026-08-22T06:32:18.477Z","timestamp":1787380338477,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.b-cdn.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 06 Nov 2025 00:00:00 GMT","end":"Wed, 11 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"92:9B:37:29:B4:2D:AB:EB:68:07:7B:03:B2:80:2E:5B:53:CE:AD:E7","sha256":"51:6F:86:36:A1:23:32:72:AA:0F:28:1A:81:F4:92:F8:82:35:42:13:BA:4C:21:2D:80:C5:BB:BF:19:04:1D:32"}}},"request":{"raw":"GET /users/female/3.jpg HTTP/1.1\r\nHost: easy-image.b-cdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xeloris-luckyreward.click/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 22 Aug 2026 06:32:18 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 19305\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 2442763\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=0\r\netag: \"67ed0460-4b69\"\r\nlast-modified: Wed, 02 Apr 2025 09:33:20 GMT\r\ncdn-storageserver: SE-582\r\ncdn-fileserver: 344\r\ncdn-proxyver: 1.61\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 08/20/2026 19:45:51\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 2bfc02f415140ccda2ac7a0c08b13aec\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":19305,"size_decoded":20240,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 250x375, components 3","md5":"f43bc2f0099834f279ec38c617d1c719","sha1":"290a891ae298b557479cc4e2879aa0aad724e1be","sha256":"589916655936a718cd2b4c7d95bc85d665d8fd17e06655bd2efaa9c0f639dba5","sha512":"310227dda11ee474568ad47aa336c95c98d60421027beb55e705a34a7ee3fc2782090165d313b184436dfb1d66874d591055243d58cbb673ea6aa4938f9a45bd","ssdeep":"384:55NSLGGhKRwwprDt/Tc97aGD4qagjsQ2pGVVKl/bdRK:zsLxhKOwprx7c97aGD/ZsYXyK","tlshash":"ad82e11912f41824cca448f6d783db744b7d2dab7d39212eae11e8e84ce39c0af4921f","first_seen":"2025-04-06T10:47:32.14767Z","last_seen":"2026-08-22T06:32:48.739353Z","times_seen":29,"resource_available":false,"data":null}},"time_used":3,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xeloris-luckyreward.click/c19087e6-c1b9-4946-a21f-45b8103dde60/en/images/icon_close.png","fqdn":"xeloris-luckyreward.click","domain":"xeloris-luckyreward.click","tld":"click"},"ip":{"addr":"172.67.174.191","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xeloris-luckyreward.click/c19087e6-c1b9-4946-a21f-45b8103dde60/en/?lead_info=bGVhZF91dWlkPWIyZWRiODg3LTU5M2YtNDAxYS04OGYwLTEyY2FkOTE1YTM2MiZvcz1XaW5kb3dzJmxhbmd1YWdlPWVuLVVTJm9mZmVyX3VybD1odHRwczovL21vbmV5bG9vdC5vbmxpbmUvMjY1ND9sZWFkX2lkPWIyZWRiODg3LTU5M2YtNDAxYS04OGYwLTEyY2FkOTE1YTM2MiZzdWIxPXtzdWIxfSZzdWIyPXtzdWIyfSZzdWIzPXtzdWIzfSZzdWI0PXtzdWI0fSZzdWI1PXtzdWI1fSZzdWI2PXtzdWI2fSZzdWI3PXtzdWI3fSZzdWI4PXtzdWI4fSZ0cmFjZV9pZD1jM2IwYTAzOS1kMjk1LTRiOWMtYTIzZi1lNDAyMWIwNGFjNTM\u0026is_webview=false\u0026pixel=\u0026fbclid=","date":"2026-08-22T06:32:18.479Z","timestamp":1787380338479,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xeloris-luckyreward.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 20 Aug 2026 19:24:52 GMT","end":"Wed, 18 Nov 2026 20:23:24 GMT"},"fingerprint":{"sha1":"A1:AA:F5:8E:D6:B5:05:C7:2C:20:02:6A:E0:0B:D0:F3:41:1E:ED:C3","sha256":"EE:D6:F5:6C:A9:E9:8D:96:F7:FE:1A:66:D7:D0:03:16:50:B1:7A:AC:62:DB:AB:1B:C9:E2:E0:63:DA:AD:D2:A3"}}},"request":{"raw":"GET /c19087e6-c1b9-4946-a21f-45b8103dde60/en/images/icon_close.png HTTP/1.1\r\nHost: xeloris-luckyreward.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xeloris-luckyreward.click/c19087e6-c1b9-4946-a21f-45b8103dde60/en/?lead_info=bGVhZF91dWlkPWIyZWRiODg3LTU5M2YtNDAxYS04OGYwLTEyY2FkOTE1YTM2MiZvcz1XaW5kb3dzJmxhbmd1YWdlPWVuLVVTJm9mZmVyX3VybD1odHRwczovL21vbmV5bG9vdC5vbmxpbmUvMjY1ND9sZWFkX2lkPWIyZWRiODg3LTU5M2YtNDAxYS04OGYwLTEyY2FkOTE1YTM2MiZzdWIxPXtzdWIxfSZzdWIyPXtzdWIyfSZzdWIzPXtzdWIzfSZzdWI0PXtzdWI0fSZzdWI1PXtzdWI1fSZzdWI2PXtzdWI2fSZzdWI3PXtzdWI3fSZzdWI4PXtzdWI4fSZ0cmFjZV9pZD1jM2IwYTAzOS1kMjk1LTRiOWMtYTIzZi1lNDAyMWIwNGFjNTM\u0026is_webview=false\u0026pixel=\u0026fbclid=\r\nCookie: cl_st=b\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Sat, 22 Aug 2026 06:32:18 GMT\r\ncontent-type: image/png\r\npriority: u=5,i\r\ncf-ray: a2efd6eb8fee2678-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 393\r\ncache-control: max-age=14400\r\netag: \"6a87d5cf-1ab\"\r\nlast-modified: Fri, 21 Aug 2026 04:36:31 GMT\r\nserver: cloudflare\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Qs1qU6RwI9uOJEe3OKT%2FcZsUL%2FOq1BFD9HdXJyRuc9Tfc77ZtgS4wobfXnoYPgF%2BvR6kjrud765QojS0dRi9eqCPQ168J1pSd8FidqnGj3VHRrKLrh9gTlRGaz1wKsETzjp%2FsE2ZDdpVLFQG\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 427\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":427,"size_decoded":1134,"mime_type":"image/png","magic":"PNG image data, 96 x 96, 4-bit colormap, non-interlaced","md5":"26e9ae28962f669b44198d28293dbe30","sha1":"27b6e3581b6c98fc5934f4e4af1698cab270ef7e","sha256":"f67d193e6472e73251254135e0eee99f529bb8d14c4e434d40d9e7a53a37ce9e","sha512":"dc5c4c572e3094a73106b7f014ba89fa0f27aa9b1c2603c21656eeb5f930cbc353f08f4d9a3a2e295063404f0f1d44920f4b88b401577557c2a7feaf0bfdfda5","ssdeep":"","tlshash":"82e02b8af33849bad677a09ea2353a67bb689e6564580019c41671bd47701869106056","first_seen":"2024-04-25T09:45:56Z","last_seen":"2026-08-22T06:32:48.741198Z","times_seen":289,"resource_available":false,"data":null}},"time_used":68,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":68,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-22","alert":"Phishing Block","trigger":"xeloris-luckyreward.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xeloris-luckyreward.click/c19087e6-c1b9-4946-a21f-45b8103dde60/en/fonts/Roboto-Regular.ttf","fqdn":"xeloris-luckyreward.click","domain":"xeloris-luckyreward.click","tld":"click"},"ip":{"addr":"172.67.174.191","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://xeloris-luckyreward.click/c19087e6-c1b9-4946-a21f-45b8103dde60/en/?lead_info=bGVhZF91dWlkPWIyZWRiODg3LTU5M2YtNDAxYS04OGYwLTEyY2FkOTE1YTM2MiZvcz1XaW5kb3dzJmxhbmd1YWdlPWVuLVVTJm9mZmVyX3VybD1odHRwczovL21vbmV5bG9vdC5vbmxpbmUvMjY1ND9sZWFkX2lkPWIyZWRiODg3LTU5M2YtNDAxYS04OGYwLTEyY2FkOTE1YTM2MiZzdWIxPXtzdWIxfSZzdWIyPXtzdWIyfSZzdWIzPXtzdWIzfSZzdWI0PXtzdWI0fSZzdWI1PXtzdWI1fSZzdWI2PXtzdWI2fSZzdWI3PXtzdWI3fSZzdWI4PXtzdWI4fSZ0cmFjZV9pZD1jM2IwYTAzOS1kMjk1LTRiOWMtYTIzZi1lNDAyMWIwNGFjNTM\u0026is_webview=false\u0026pixel=\u0026fbclid=","date":"2026-08-22T06:32:18.525Z","timestamp":1787380338525,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xeloris-luckyreward.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 20 Aug 2026 19:24:52 GMT","end":"Wed, 18 Nov 2026 20:23:24 GMT"},"fingerprint":{"sha1":"A1:AA:F5:8E:D6:B5:05:C7:2C:20:02:6A:E0:0B:D0:F3:41:1E:ED:C3","sha256":"EE:D6:F5:6C:A9:E9:8D:96:F7:FE:1A:66:D7:D0:03:16:50:B1:7A:AC:62:DB:AB:1B:C9:E2:E0:63:DA:AD:D2:A3"}}},"request":{"raw":"GET /c19087e6-c1b9-4946-a21f-45b8103dde60/en/fonts/Roboto-Regular.ttf HTTP/1.1\r\nHost: xeloris-luckyreward.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xeloris-luckyreward.click/c19087e6-c1b9-4946-a21f-45b8103dde60/en/style/style.css\r\nCookie: cl_st=b\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Sat, 22 Aug 2026 06:32:18 GMT\r\ncontent-type: application/octet-stream\r\npriority: u=3,i=?0\r\ncf-ray: a2efd6ebcff12678-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 196\r\ncache-control: max-age=14400\r\netag: \"6a87d5cf-29144\"\r\nlast-modified: Fri, 21 Aug 2026 04:36:31 GMT\r\nserver: cloudflare\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XzAtKlVMmOadwrDqFCZA%2BHkw1M1sa%2Bl1rES35AZMc8YJV358KIak51N6dwXzX870mrsrgQhZFrLlMl4EI1CLUlOCBvgHFYxRwSaI%2FxZxl5l1VGsR6%2FoiZcz4fJLQeiwiLpS12nnILv5OlzU1\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 168260\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":168260,"size_decoded":168990,"mime_type":"application/octet-stream","magic":"TrueType Font data, 18 tables, 1st \"GDEF\", 13 names, Microsoft, language 0x409, Copyright 2011 Google Inc. All Rights Reserved.RobotoRegularVersion 2.137; 2017Roboto-RegularRob","md5":"8a36205bd9b83e03af0591a004bc97f4","sha1":"56c5c0d38bde4c1f1549dda43db37b09c608aad3","sha256":"4e147ab64b9fdf6d89d01f6b8c3ca0b3cddc59d608a8e2218f9a2504b5c98e14","sha512":"e96b43b0ca3fd7775d75a702f44cd1b0dfd325e1db317f7cba84efdf572571fe7594068f9132a937251aab8bd1f68783213677d4953aca197195fbe5db1f90d7","ssdeep":"3072:5y2goL/sAQRuzzlPrvRwhRFUzMWlYfxJVBxV+aYT3qPXI0yH4yDuNOIOU7og2NE/:xOmCeu+bqPeHr0WUMxNE/","tlshash":"83f3d601d642aa19c6d6b2787c7cb3be4c75e82dfd4a602734e5af2115c8c05ec69bbc","first_seen":"2023-04-07T15:31:36Z","last_seen":"2026-08-22T11:25:27.588828Z","times_seen":10684,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-22","alert":"Phishing Block","trigger":"xeloris-luckyreward.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xeloris-luckyreward.click/c19087e6-c1b9-4946-a21f-45b8103dde60/en/fonts/Roboto-Medium.ttf","fqdn":"xeloris-luckyreward.click","domain":"xeloris-luckyreward.click","tld":"click"},"ip":{"addr":"172.67.174.191","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://xeloris-luckyreward.click/c19087e6-c1b9-4946-a21f-45b8103dde60/en/?lead_info=bGVhZF91dWlkPWIyZWRiODg3LTU5M2YtNDAxYS04OGYwLTEyY2FkOTE1YTM2MiZvcz1XaW5kb3dzJmxhbmd1YWdlPWVuLVVTJm9mZmVyX3VybD1odHRwczovL21vbmV5bG9vdC5vbmxpbmUvMjY1ND9sZWFkX2lkPWIyZWRiODg3LTU5M2YtNDAxYS04OGYwLTEyY2FkOTE1YTM2MiZzdWIxPXtzdWIxfSZzdWIyPXtzdWIyfSZzdWIzPXtzdWIzfSZzdWI0PXtzdWI0fSZzdWI1PXtzdWI1fSZzdWI2PXtzdWI2fSZzdWI3PXtzdWI3fSZzdWI4PXtzdWI4fSZ0cmFjZV9pZD1jM2IwYTAzOS1kMjk1LTRiOWMtYTIzZi1lNDAyMWIwNGFjNTM\u0026is_webview=false\u0026pixel=\u0026fbclid=","date":"2026-08-22T06:32:18.594Z","timestamp":1787380338594,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xeloris-luckyreward.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 20 Aug 2026 19:24:52 GMT","end":"Wed, 18 Nov 2026 20:23:24 GMT"},"fingerprint":{"sha1":"A1:AA:F5:8E:D6:B5:05:C7:2C:20:02:6A:E0:0B:D0:F3:41:1E:ED:C3","sha256":"EE:D6:F5:6C:A9:E9:8D:96:F7:FE:1A:66:D7:D0:03:16:50:B1:7A:AC:62:DB:AB:1B:C9:E2:E0:63:DA:AD:D2:A3"}}},"request":{"raw":"GET /c19087e6-c1b9-4946-a21f-45b8103dde60/en/fonts/Roboto-Medium.ttf HTTP/1.1\r\nHost: xeloris-luckyreward.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xeloris-luckyreward.click/c19087e6-c1b9-4946-a21f-45b8103dde60/en/style/style.css\r\nCookie: cl_st=b\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Sat, 22 Aug 2026 06:32:18 GMT\r\ncontent-type: application/octet-stream\r\npriority: u=3,i=?0\r\ncf-ray: a2efd6ec3ff42678-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 196\r\ncache-control: max-age=14400\r\netag: \"6a87d5cf-292c4\"\r\nlast-modified: Fri, 21 Aug 2026 04:36:31 GMT\r\nserver: cloudflare\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RE6H9FubcFsC%2B1uHY%2BWfTPNk7%2FnSOiBBfVxvCZDE3il5ATYhcrc9AtmV4u9pHMcTSt3hX9mgiZiiW3myAFdLKsY%2FdDA7y3Fg0vzLfldPsYu1veeY6SERRAIdCMY0x2XH3g6CLt0wSrd89UnT\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 168644\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":168644,"size_decoded":169374,"mime_type":"application/octet-stream","magic":"TrueType Font data, 18 tables, 1st \"GDEF\", 15 names, Microsoft, language 0x409, Copyright 2011 Google Inc. All Rights Reserved.Roboto MediumRegularVersion 2.137; 2017Roboto-Med","md5":"68ea4734cf86bd544650aee05137d7bb","sha1":"3c6a09fcc6a454924c81af7dff94fc6d399ed79b","sha256":"9d0d55a303bfd13b79a87721f65185e93f235e2d77fe398b2dca67ac519915f5","sha512":"5d55a41b845f3a3ae9b08cee5258348dfd83dac5f0a0e48159cd85c141c614a02f8f474fa683d2bfbc451d49dd3b749820662d403b2e3fd3f16a242eaca64115","ssdeep":"3072:wqmtn5wkex8r6Qym7KCkygAKuXylCC9ptSUXl8j/6afWRCgqdhASD/80/:n25wklN7T3QtSUXz7XfST80/","tlshash":"73f3d701d241bf25cac6b6787c7c93be4cb5e41abc4aa52730d9ab3159c8805ec58bfd","first_seen":"2023-04-05T23:29:00Z","last_seen":"2026-08-22T06:32:48.744097Z","times_seen":2126,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-22","alert":"Phishing Block","trigger":"xeloris-luckyreward.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xeloris-luckyreward.click/c19087e6-c1b9-4946-a21f-45b8103dde60/en/fonts/Roboto-Light.ttf","fqdn":"xeloris-luckyreward.click","domain":"xeloris-luckyreward.click","tld":"click"},"ip":{"addr":"172.67.174.191","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://xeloris-luckyreward.click/c19087e6-c1b9-4946-a21f-45b8103dde60/en/?lead_info=bGVhZF91dWlkPWIyZWRiODg3LTU5M2YtNDAxYS04OGYwLTEyY2FkOTE1YTM2MiZvcz1XaW5kb3dzJmxhbmd1YWdlPWVuLVVTJm9mZmVyX3VybD1odHRwczovL21vbmV5bG9vdC5vbmxpbmUvMjY1ND9sZWFkX2lkPWIyZWRiODg3LTU5M2YtNDAxYS04OGYwLTEyY2FkOTE1YTM2MiZzdWIxPXtzdWIxfSZzdWIyPXtzdWIyfSZzdWIzPXtzdWIzfSZzdWI0PXtzdWI0fSZzdWI1PXtzdWI1fSZzdWI2PXtzdWI2fSZzdWI3PXtzdWI3fSZzdWI4PXtzdWI4fSZ0cmFjZV9pZD1jM2IwYTAzOS1kMjk1LTRiOWMtYTIzZi1lNDAyMWIwNGFjNTM\u0026is_webview=false\u0026pixel=\u0026fbclid=","date":"2026-08-22T06:32:18.598Z","timestamp":1787380338598,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xeloris-luckyreward.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 20 Aug 2026 19:24:52 GMT","end":"Wed, 18 Nov 2026 20:23:24 GMT"},"fingerprint":{"sha1":"A1:AA:F5:8E:D6:B5:05:C7:2C:20:02:6A:E0:0B:D0:F3:41:1E:ED:C3","sha256":"EE:D6:F5:6C:A9:E9:8D:96:F7:FE:1A:66:D7:D0:03:16:50:B1:7A:AC:62:DB:AB:1B:C9:E2:E0:63:DA:AD:D2:A3"}}},"request":{"raw":"GET /c19087e6-c1b9-4946-a21f-45b8103dde60/en/fonts/Roboto-Light.ttf HTTP/1.1\r\nHost: xeloris-luckyreward.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xeloris-luckyreward.click/c19087e6-c1b9-4946-a21f-45b8103dde60/en/style/style.css\r\nCookie: cl_st=b\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Sat, 22 Aug 2026 06:32:18 GMT\r\ncontent-type: application/octet-stream\r\npriority: u=3,i=?0\r\ncf-ray: a2efd6ec3ff62678-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 196\r\ncache-control: max-age=14400\r\netag: \"6a87d5cf-28c58\"\r\nlast-modified: Fri, 21 Aug 2026 04:36:31 GMT\r\nserver: cloudflare\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=n%2BxK0FvjLMz6gLjV5jTUb2nxa67JEJD4N4iGiqCLB3y%2B%2FX%2BeSGZL4sAoTlhqHMqdNjytGw5QZQckKwNaJiCdXylG%2FRF2U9LtZYwrjoM6sWzl2zBQfu87diYCcZyQY28EKP9Rpaa8%2Bcvikxks\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 167000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":167000,"size_decoded":167734,"mime_type":"application/octet-stream","magic":"TrueType Font data, 18 tables, 1st \"GDEF\", 15 names, Microsoft, language 0x409, Copyright 2011 Google Inc. All Rights Reserved.Roboto LightRegularVersion 2.137; 2017Roboto-Ligh","md5":"881e150ab929e26d1f812c4342c15a7c","sha1":"18788c5d630fa695f9283f6393bfa541b2031508","sha256":"c576c50642271bcdbfffed04f92dc8d6a981daf300914d0a20c8a5a5a57015c7","sha512":"af18febdf3e0d5fc8111e6335bd8cc4fc8dd944910db8a4f3ebae284e3d1064eb793a25588007e3d1cee24051e11cf3328951a3f708375856d54176a53701b49","ssdeep":"3072:BXlLgbEmk0/Dv6QKwRr4T2EUtxq2FquPte/TxDuNOIOU7og2NE/:3qXpSIE6Ey/ux0WUMxNE/","tlshash":"daf3e501d245aa3dcad6f2787c7cb3be4875e429fd5a652730d6ab3255c4800ec68bbc","first_seen":"2023-05-08T00:29:25Z","last_seen":"2026-08-22T08:52:43.201666Z","times_seen":1053,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-22","alert":"Phishing Block","trigger":"xeloris-luckyreward.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xeloris-luckyreward.click/c19087e6-c1b9-4946-a21f-45b8103dde60/en/js/sendUpdateLead.js","fqdn":"xeloris-luckyreward.click","domain":"xeloris-luckyreward.click","tld":"click"},"ip":{"addr":"172.67.174.191","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xeloris-luckyreward.click/c19087e6-c1b9-4946-a21f-45b8103dde60/en/?lead_info=bGVhZF91dWlkPWIyZWRiODg3LTU5M2YtNDAxYS04OGYwLTEyY2FkOTE1YTM2MiZvcz1XaW5kb3dzJmxhbmd1YWdlPWVuLVVTJm9mZmVyX3VybD1odHRwczovL21vbmV5bG9vdC5vbmxpbmUvMjY1ND9sZWFkX2lkPWIyZWRiODg3LTU5M2YtNDAxYS04OGYwLTEyY2FkOTE1YTM2MiZzdWIxPXtzdWIxfSZzdWIyPXtzdWIyfSZzdWIzPXtzdWIzfSZzdWI0PXtzdWI0fSZzdWI1PXtzdWI1fSZzdWI2PXtzdWI2fSZzdWI3PXtzdWI3fSZzdWI4PXtzdWI4fSZ0cmFjZV9pZD1jM2IwYTAzOS1kMjk1LTRiOWMtYTIzZi1lNDAyMWIwNGFjNTM\u0026is_webview=false\u0026pixel=\u0026fbclid=","date":"2026-08-22T06:32:18.230Z","timestamp":1787380338230,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xeloris-luckyreward.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 20 Aug 2026 19:24:52 GMT","end":"Wed, 18 Nov 2026 20:23:24 GMT"},"fingerprint":{"sha1":"A1:AA:F5:8E:D6:B5:05:C7:2C:20:02:6A:E0:0B:D0:F3:41:1E:ED:C3","sha256":"EE:D6:F5:6C:A9:E9:8D:96:F7:FE:1A:66:D7:D0:03:16:50:B1:7A:AC:62:DB:AB:1B:C9:E2:E0:63:DA:AD:D2:A3"}}},"request":{"raw":"GET /c19087e6-c1b9-4946-a21f-45b8103dde60/en/js/sendUpdateLead.js HTTP/1.1\r\nHost: xeloris-luckyreward.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xeloris-luckyreward.click/c19087e6-c1b9-4946-a21f-45b8103dde60/en/?lead_info=bGVhZF91dWlkPWIyZWRiODg3LTU5M2YtNDAxYS04OGYwLTEyY2FkOTE1YTM2MiZvcz1XaW5kb3dzJmxhbmd1YWdlPWVuLVVTJm9mZmVyX3VybD1odHRwczovL21vbmV5bG9vdC5vbmxpbmUvMjY1ND9sZWFkX2lkPWIyZWRiODg3LTU5M2YtNDAxYS04OGYwLTEyY2FkOTE1YTM2MiZzdWIxPXtzdWIxfSZzdWIyPXtzdWIyfSZzdWIzPXtzdWIzfSZzdWI0PXtzdWI0fSZzdWI1PXtzdWI1fSZzdWI2PXtzdWI2fSZzdWI3PXtzdWI3fSZzdWI4PXtzdWI4fSZ0cmFjZV9pZD1jM2IwYTAzOS1kMjk1LTRiOWMtYTIzZi1lNDAyMWIwNGFjNTM\u0026is_webview=false\u0026pixel=\u0026fbclid=\r\nCookie: cl_st=b\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=I6rOOh4cj086%2BQq83OizKp9QtuIbPx3I4Ssb%2FxiydTq7NoiaBHWsYDiMMo0d1BHybZN9%2FAeZDD7NrZNjLMYy%2Ffg3X6eI3cwVeXICN7nLuLTmgzhBSBxwLCyyraUf%2F2eP6CrI%2FLtCus8i97Lx\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Sat, 22 Aug 2026 06:32:18 GMT\r\ncontent-type: application/javascript\r\ncontent-encoding: zstd\r\ncf-ray: a2efd6e9efd12678-OSL\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nage: 397\r\ncache-control: max-age=14400\r\netag: W/\"6a87d5cf-e77\"\r\nlast-modified: Fri, 21 Aug 2026 04:36:31 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3703,"size_decoded":2150,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"31f3459d3d3be8cd0f19cfb34193178f","sha1":"3b968948d510bdc3fbdf270785afaae440242c73","sha256":"7d5c014457152dd766b6ec4de8c795ba6b20cfd67c74753a5662bb8f027562e6","sha512":"a1cd93e1ecb2ceb233dc1d925f6995f187eea04051334148140f068c3fcdf548b738c3fdfb099e0f30d45d2398626de813e5edf84237ae3db8f110289d0fe676","ssdeep":"","tlshash":"7971334468a775c9a4f320a997df114ab1b6406b1065d0447c0cef44afe4a3e26fefdd","first_seen":"2026-08-22T06:29:58.977284Z","last_seen":"2026-08-22T06:32:48.746795Z","times_seen":2,"resource_available":true,"data":null}},"time_used":67,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":67,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-22","alert":"Phishing Block","trigger":"xeloris-luckyreward.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xeloris-luckyreward.click/c19087e6-c1b9-4946-a21f-45b8103dde60/en/js/jquery.min.js","fqdn":"xeloris-luckyreward.click","domain":"xeloris-luckyreward.click","tld":"click"},"ip":{"addr":"172.67.174.191","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xeloris-luckyreward.click/c19087e6-c1b9-4946-a21f-45b8103dde60/en/?lead_info=bGVhZF91dWlkPWIyZWRiODg3LTU5M2YtNDAxYS04OGYwLTEyY2FkOTE1YTM2MiZvcz1XaW5kb3dzJmxhbmd1YWdlPWVuLVVTJm9mZmVyX3VybD1odHRwczovL21vbmV5bG9vdC5vbmxpbmUvMjY1ND9sZWFkX2lkPWIyZWRiODg3LTU5M2YtNDAxYS04OGYwLTEyY2FkOTE1YTM2MiZzdWIxPXtzdWIxfSZzdWIyPXtzdWIyfSZzdWIzPXtzdWIzfSZzdWI0PXtzdWI0fSZzdWI1PXtzdWI1fSZzdWI2PXtzdWI2fSZzdWI3PXtzdWI3fSZzdWI4PXtzdWI4fSZ0cmFjZV9pZD1jM2IwYTAzOS1kMjk1LTRiOWMtYTIzZi1lNDAyMWIwNGFjNTM\u0026is_webview=false\u0026pixel=\u0026fbclid=","date":"2026-08-22T06:32:18.436Z","timestamp":1787380338436,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xeloris-luckyreward.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 20 Aug 2026 19:24:52 GMT","end":"Wed, 18 Nov 2026 20:23:24 GMT"},"fingerprint":{"sha1":"A1:AA:F5:8E:D6:B5:05:C7:2C:20:02:6A:E0:0B:D0:F3:41:1E:ED:C3","sha256":"EE:D6:F5:6C:A9:E9:8D:96:F7:FE:1A:66:D7:D0:03:16:50:B1:7A:AC:62:DB:AB:1B:C9:E2:E0:63:DA:AD:D2:A3"}}},"request":{"raw":"GET /c19087e6-c1b9-4946-a21f-45b8103dde60/en/js/jquery.min.js HTTP/1.1\r\nHost: xeloris-luckyreward.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xeloris-luckyreward.click/c19087e6-c1b9-4946-a21f-45b8103dde60/en/?lead_info=bGVhZF91dWlkPWIyZWRiODg3LTU5M2YtNDAxYS04OGYwLTEyY2FkOTE1YTM2MiZvcz1XaW5kb3dzJmxhbmd1YWdlPWVuLVVTJm9mZmVyX3VybD1odHRwczovL21vbmV5bG9vdC5vbmxpbmUvMjY1ND9sZWFkX2lkPWIyZWRiODg3LTU5M2YtNDAxYS04OGYwLTEyY2FkOTE1YTM2MiZzdWIxPXtzdWIxfSZzdWIyPXtzdWIyfSZzdWIzPXtzdWIzfSZzdWI0PXtzdWI0fSZzdWI1PXtzdWI1fSZzdWI2PXtzdWI2fSZzdWI3PXtzdWI3fSZzdWI4PXtzdWI4fSZ0cmFjZV9pZD1jM2IwYTAzOS1kMjk1LTRiOWMtYTIzZi1lNDAyMWIwNGFjNTM\u0026is_webview=false\u0026pixel=\u0026fbclid=\r\nCookie: cl_st=b\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nOJN9XObRxe9bWKG4LD3mB66qp%2B3BXXrYmt%2FHOrwxSmYjUEZq9Cvf5nuGN64sJmR%2BQvVdbgqHgGUWGHyg%2Fz%2FXXEm7RyWtthRarmrASbYwW7GPXN41q%2FLve%2F9RQjR%2FHIhhbYnBq3YIPkh2pq1\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Sat, 22 Aug 2026 06:32:18 GMT\r\ncontent-type: application/javascript\r\ncontent-encoding: zstd\r\ncf-ray: a2efd6eb3fda2678-OSL\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nage: 396\r\ncache-control: max-age=14400\r\netag: W/\"6a87d5cf-155ec\"\r\nlast-modified: Fri, 21 Aug 2026 04:36:31 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":87532,"size_decoded":33106,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"c9771cc3e90e18f5336eedbd0fffb2cf","sha1":"6ee8aaa3ac1f4e0ae18717a3fd26892e9f0e4cc5","sha256":"3e7501d15c3630e791c8b20392eb9dee31a9f65ce3efdde76cef5c710141ab24","sha512":"c503341fa3a7176fd10bd8cd7a5717c8faf971f87fa0c158f2d94fcd484ae3ed5031f49414dae833fb806b7365b5699c21d2e655376f69adb052b22f6f6982a7","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GK7:sHNwcv9VBQpLl88SMBQ47GK7","tlshash":"8083f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","first_seen":"2023-10-13T22:05:06Z","last_seen":"2026-08-22T11:10:38.647184Z","times_seen":31292,"resource_available":true,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-22","alert":"Phishing Block","trigger":"xeloris-luckyreward.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xeloris-luckyreward.click/c19087e6-c1b9-4946-a21f-45b8103dde60/en/images/security_icon_n-3.webp","fqdn":"xeloris-luckyreward.click","domain":"xeloris-luckyreward.click","tld":"click"},"ip":{"addr":"172.67.174.191","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xeloris-luckyreward.click/c19087e6-c1b9-4946-a21f-45b8103dde60/en/?lead_info=bGVhZF91dWlkPWIyZWRiODg3LTU5M2YtNDAxYS04OGYwLTEyY2FkOTE1YTM2MiZvcz1XaW5kb3dzJmxhbmd1YWdlPWVuLVVTJm9mZmVyX3VybD1odHRwczovL21vbmV5bG9vdC5vbmxpbmUvMjY1ND9sZWFkX2lkPWIyZWRiODg3LTU5M2YtNDAxYS04OGYwLTEyY2FkOTE1YTM2MiZzdWIxPXtzdWIxfSZzdWIyPXtzdWIyfSZzdWIzPXtzdWIzfSZzdWI0PXtzdWI0fSZzdWI1PXtzdWI1fSZzdWI2PXtzdWI2fSZzdWI3PXtzdWI3fSZzdWI4PXtzdWI4fSZ0cmFjZV9pZD1jM2IwYTAzOS1kMjk1LTRiOWMtYTIzZi1lNDAyMWIwNGFjNTM\u0026is_webview=false\u0026pixel=\u0026fbclid=","date":"2026-08-22T06:32:18.469Z","timestamp":1787380338469,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xeloris-luckyreward.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 20 Aug 2026 19:24:52 GMT","end":"Wed, 18 Nov 2026 20:23:24 GMT"},"fingerprint":{"sha1":"A1:AA:F5:8E:D6:B5:05:C7:2C:20:02:6A:E0:0B:D0:F3:41:1E:ED:C3","sha256":"EE:D6:F5:6C:A9:E9:8D:96:F7:FE:1A:66:D7:D0:03:16:50:B1:7A:AC:62:DB:AB:1B:C9:E2:E0:63:DA:AD:D2:A3"}}},"request":{"raw":"GET /c19087e6-c1b9-4946-a21f-45b8103dde60/en/images/security_icon_n-3.webp HTTP/1.1\r\nHost: xeloris-luckyreward.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xeloris-luckyreward.click/c19087e6-c1b9-4946-a21f-45b8103dde60/en/?lead_info=bGVhZF91dWlkPWIyZWRiODg3LTU5M2YtNDAxYS04OGYwLTEyY2FkOTE1YTM2MiZvcz1XaW5kb3dzJmxhbmd1YWdlPWVuLVVTJm9mZmVyX3VybD1odHRwczovL21vbmV5bG9vdC5vbmxpbmUvMjY1ND9sZWFkX2lkPWIyZWRiODg3LTU5M2YtNDAxYS04OGYwLTEyY2FkOTE1YTM2MiZzdWIxPXtzdWIxfSZzdWIyPXtzdWIyfSZzdWIzPXtzdWIzfSZzdWI0PXtzdWI0fSZzdWI1PXtzdWI1fSZzdWI2PXtzdWI2fSZzdWI3PXtzdWI3fSZzdWI4PXtzdWI4fSZ0cmFjZV9pZD1jM2IwYTAzOS1kMjk1LTRiOWMtYTIzZi1lNDAyMWIwNGFjNTM\u0026is_webview=false\u0026pixel=\u0026fbclid=\r\nCookie: cl_st=b\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Sat, 22 Aug 2026 06:32:18 GMT\r\ncontent-type: image/webp\r\npriority: u=5,i\r\ncf-ray: a2efd6eb6fea2678-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 394\r\ncache-control: max-age=14400\r\netag: \"6a87d5cf-c8\"\r\nlast-modified: Fri, 21 Aug 2026 04:36:31 GMT\r\nserver: cloudflare\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=P8nCosuCJ8ZKqRsUmmBSs0kTuFeFDAGxZNDkM90GZDsMsykFgxeaz2xVLnB7Uj4JZ3JXDeOv4A1LBJs1biuHywua0wDHt6XuuV7uwqs2V%2BESOGFPqe8jNSIOOS%2BOwGALnVNOJACPofV4dZ1z\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 200\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":200,"size_decoded":903,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"26ae874f3b7051bc5b112960c251080f","sha1":"1d6b38f7fe58dc79cc66cc0a3ee42caaa096b686","sha256":"8c66b3cb207515328ac21bdbbda1b90a74d7cac66267352048bfd7e4e1efe627","sha512":"88dbfe63b9a7374528308bd4ac891535c310ffc2277c3a44004772accea7115d8a1df77ecb56edf573000df4afc79e7e9524b4fb8c8e8dbac2384860306f0c31","ssdeep":"","tlshash":"2fd0224aeeae8a646d29fcb53453e630123aca8a21a4b0b0c85702e941b04f02e01c8b","first_seen":"2024-06-06T20:30:57Z","last_seen":"2026-08-22T06:32:48.750405Z","times_seen":997,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-22","alert":"Phishing Block","trigger":"xeloris-luckyreward.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"easy-image.b-cdn.net/users/female/78.jpg","fqdn":"easy-image.b-cdn.net","domain":"b-cdn.net","tld":"net"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xeloris-luckyreward.click/c19087e6-c1b9-4946-a21f-45b8103dde60/en/?lead_info=bGVhZF91dWlkPWIyZWRiODg3LTU5M2YtNDAxYS04OGYwLTEyY2FkOTE1YTM2MiZvcz1XaW5kb3dzJmxhbmd1YWdlPWVuLVVTJm9mZmVyX3VybD1odHRwczovL21vbmV5bG9vdC5vbmxpbmUvMjY1ND9sZWFkX2lkPWIyZWRiODg3LTU5M2YtNDAxYS04OGYwLTEyY2FkOTE1YTM2MiZzdWIxPXtzdWIxfSZzdWIyPXtzdWIyfSZzdWIzPXtzdWIzfSZzdWI0PXtzdWI0fSZzdWI1PXtzdWI1fSZzdWI2PXtzdWI2fSZzdWI3PXtzdWI3fSZzdWI4PXtzdWI4fSZ0cmFjZV9pZD1jM2IwYTAzOS1kMjk1LTRiOWMtYTIzZi1lNDAyMWIwNGFjNTM\u0026is_webview=false\u0026pixel=\u0026fbclid=","date":"2026-08-22T06:32:18.476Z","timestamp":1787380338476,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.b-cdn.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 06 Nov 2025 00:00:00 GMT","end":"Wed, 11 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"92:9B:37:29:B4:2D:AB:EB:68:07:7B:03:B2:80:2E:5B:53:CE:AD:E7","sha256":"51:6F:86:36:A1:23:32:72:AA:0F:28:1A:81:F4:92:F8:82:35:42:13:BA:4C:21:2D:80:C5:BB:BF:19:04:1D:32"}}},"request":{"raw":"GET /users/female/78.jpg HTTP/1.1\r\nHost: easy-image.b-cdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xeloris-luckyreward.click/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 22 Aug 2026 06:32:18 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 14895\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 2442763\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=0\r\netag: \"67ed046b-3a2f\"\r\nlast-modified: Wed, 02 Apr 2025 09:33:31 GMT\r\ncdn-storageserver: SE-583\r\ncdn-fileserver: 1028\r\ncdn-proxyver: 1.61\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 08/22/2026 06:29:01\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 303f27b869a70dca9cc8af9ef6d312be\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":14895,"size_decoded":15831,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 360x240, components 3","md5":"74134aa47f5eaf8884ee297fb8087ee7","sha1":"788c8e34e5a602e481fd37de3da0da74c2783d58","sha256":"5fefe06f1364b947d07bccde51c20b67e00d0983975fe25e6b16928a5bc2f214","sha512":"69c75b46c33b45b999c99888f54d2ff81b78ffc91c2287f646ebdd77e2d5d1f440ba793a933aedda0124eae126e6459a7354e3c84461a5ddd4349fe870ab6999","ssdeep":"384:RlhKOWBwbX4ROy2YHXX+2wY5fd7h06W4CqmLI:RpWB8KZXvw81has","tlshash":"4a62d0212304fc1ad3ae52e2483cdfc7910e391e96d28a71c17d7b4359e9d999d0d688","first_seen":"2025-06-19T06:56:57.165167Z","last_seen":"2026-08-22T06:32:48.751438Z","times_seen":26,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":4,"connect":1,"send":0,"wait":5,"receive":0,"ssl":6},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xeloris-luckyreward.click/c19087e6-c1b9-4946-a21f-45b8103dde60/en/js/reviewsLazyLoad.js","fqdn":"xeloris-luckyreward.click","domain":"xeloris-luckyreward.click","tld":"click"},"ip":{"addr":"172.67.174.191","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xeloris-luckyreward.click/c19087e6-c1b9-4946-a21f-45b8103dde60/en/?lead_info=bGVhZF91dWlkPWIyZWRiODg3LTU5M2YtNDAxYS04OGYwLTEyY2FkOTE1YTM2MiZvcz1XaW5kb3dzJmxhbmd1YWdlPWVuLVVTJm9mZmVyX3VybD1odHRwczovL21vbmV5bG9vdC5vbmxpbmUvMjY1ND9sZWFkX2lkPWIyZWRiODg3LTU5M2YtNDAxYS04OGYwLTEyY2FkOTE1YTM2MiZzdWIxPXtzdWIxfSZzdWIyPXtzdWIyfSZzdWIzPXtzdWIzfSZzdWI0PXtzdWI0fSZzdWI1PXtzdWI1fSZzdWI2PXtzdWI2fSZzdWI3PXtzdWI3fSZzdWI4PXtzdWI4fSZ0cmFjZV9pZD1jM2IwYTAzOS1kMjk1LTRiOWMtYTIzZi1lNDAyMWIwNGFjNTM\u0026is_webview=false\u0026pixel=\u0026fbclid=","date":"2026-08-22T06:32:18.446Z","timestamp":1787380338446,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xeloris-luckyreward.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 20 Aug 2026 19:24:52 GMT","end":"Wed, 18 Nov 2026 20:23:24 GMT"},"fingerprint":{"sha1":"A1:AA:F5:8E:D6:B5:05:C7:2C:20:02:6A:E0:0B:D0:F3:41:1E:ED:C3","sha256":"EE:D6:F5:6C:A9:E9:8D:96:F7:FE:1A:66:D7:D0:03:16:50:B1:7A:AC:62:DB:AB:1B:C9:E2:E0:63:DA:AD:D2:A3"}}},"request":{"raw":"GET /c19087e6-c1b9-4946-a21f-45b8103dde60/en/js/reviewsLazyLoad.js HTTP/1.1\r\nHost: xeloris-luckyreward.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xeloris-luckyreward.click/c19087e6-c1b9-4946-a21f-45b8103dde60/en/?lead_info=bGVhZF91dWlkPWIyZWRiODg3LTU5M2YtNDAxYS04OGYwLTEyY2FkOTE1YTM2MiZvcz1XaW5kb3dzJmxhbmd1YWdlPWVuLVVTJm9mZmVyX3VybD1odHRwczovL21vbmV5bG9vdC5vbmxpbmUvMjY1ND9sZWFkX2lkPWIyZWRiODg3LTU5M2YtNDAxYS04OGYwLTEyY2FkOTE1YTM2MiZzdWIxPXtzdWIxfSZzdWIyPXtzdWIyfSZzdWIzPXtzdWIzfSZzdWI0PXtzdWI0fSZzdWI1PXtzdWI1fSZzdWI2PXtzdWI2fSZzdWI3PXtzdWI3fSZzdWI4PXtzdWI4fSZ0cmFjZV9pZD1jM2IwYTAzOS1kMjk1LTRiOWMtYTIzZi1lNDAyMWIwNGFjNTM\u0026is_webview=false\u0026pixel=\u0026fbclid=\r\nCookie: cl_st=b\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=o0X9LSz9kOYrPTruCezdfc1v6RQhOhm7t5RQiCI%2BkfbP316onByvJhN3nkGjLDbhvxoMhVGoooRdhTQqpLwVpQAgF0Dd3T697wiUgAIidPL9OnOFUjOya1DufozhHAPJNv1HfhCFZomwC%2Bef\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Sat, 22 Aug 2026 06:32:18 GMT\r\ncontent-type: application/javascript\r\ncontent-encoding: zstd\r\ncf-ray: a2efd6eb4fe12678-OSL\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nage: 395\r\ncache-control: max-age=14400\r\netag: W/\"6a87d5cf-3917\"\r\nlast-modified: Fri, 21 Aug 2026 04:36:31 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14615,"size_decoded":6077,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"205197aa6d691dd228f197aa9d4115f0","sha1":"e9c9c886cc3209eaad1e522cf8e7d3f01d2903a4","sha256":"176ca8d96461c63d4f054becf7d443c9f45f10e5e2461be2a6364f2e216b628b","sha512":"b2223d578957c6e0435ed8c976d49478e22d520bbb5a20c3b3da589cba0973f7cfa076c237524cae25b4c1bd6f8dfd25a2451b13d0c69dff2ecb5b132d70ffa9","ssdeep":"192:Iq+mVwgeuAu9F5prXMjQpUdeUdnXcYLtckCD+fUKPQx4iH9AMOSN5kp29HSnuQLr:IBswSAi5pM/79vLtckURdHkkpc","tlshash":"00529324319361366213e0ee5a8f5355b934f2133207c818b64d975c6febd2d83aaafc","first_seen":"2026-07-25T05:49:00.113621Z","last_seen":"2026-08-22T06:32:48.752214Z","times_seen":8,"resource_available":true,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-22","alert":"Phishing Block","trigger":"xeloris-luckyreward.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"easy-image.b-cdn.net/icon/icon_18.webp","fqdn":"easy-image.b-cdn.net","domain":"b-cdn.net","tld":"net"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xeloris-luckyreward.click/c19087e6-c1b9-4946-a21f-45b8103dde60/en/?lead_info=bGVhZF91dWlkPWIyZWRiODg3LTU5M2YtNDAxYS04OGYwLTEyY2FkOTE1YTM2MiZvcz1XaW5kb3dzJmxhbmd1YWdlPWVuLVVTJm9mZmVyX3VybD1odHRwczovL21vbmV5bG9vdC5vbmxpbmUvMjY1ND9sZWFkX2lkPWIyZWRiODg3LTU5M2YtNDAxYS04OGYwLTEyY2FkOTE1YTM2MiZzdWIxPXtzdWIxfSZzdWIyPXtzdWIyfSZzdWIzPXtzdWIzfSZzdWI0PXtzdWI0fSZzdWI1PXtzdWI1fSZzdWI2PXtzdWI2fSZzdWI3PXtzdWI3fSZzdWI4PXtzdWI4fSZ0cmFjZV9pZD1jM2IwYTAzOS1kMjk1LTRiOWMtYTIzZi1lNDAyMWIwNGFjNTM\u0026is_webview=false\u0026pixel=\u0026fbclid=","date":"2026-08-22T06:32:18.464Z","timestamp":1787380338464,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.b-cdn.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 06 Nov 2025 00:00:00 GMT","end":"Wed, 11 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"92:9B:37:29:B4:2D:AB:EB:68:07:7B:03:B2:80:2E:5B:53:CE:AD:E7","sha256":"51:6F:86:36:A1:23:32:72:AA:0F:28:1A:81:F4:92:F8:82:35:42:13:BA:4C:21:2D:80:C5:BB:BF:19:04:1D:32"}}},"request":{"raw":"GET /icon/icon_18.webp HTTP/1.1\r\nHost: easy-image.b-cdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xeloris-luckyreward.click/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 22 Aug 2026 06:32:18 GMT\r\ncontent-type: image/webp\r\ncontent-length: 372\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 2442763\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=0\r\netag: \"66bf22e9-174\"\r\nlast-modified: Fri, 16 Aug 2024 09:59:05 GMT\r\ncdn-storageserver: SE-583\r\ncdn-fileserver: 884\r\ncdn-proxyver: 1.33\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 08/09/2025 14:29:58\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 240447d6420eb081d7814aa31d24431d\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":372,"size_decoded":1304,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"5f486e9cbe8211f66adc8b17c0f0d6c8","sha1":"9bff2faaadb43aa410a39b09c32e1f38cbc393ea","sha256":"d189311ea5cbefe56171921828cbc8f1c9d573c99832d801cce072d830523161","sha512":"8df29019097617c82b65a8b916cdb1078cfa16c0cca4d65ab41a82606cddadf04e31fd337c8a04b6a721aaddfc5b36b39f670a6447098e640ddc86cc40c46340","ssdeep":"","tlshash":"d1e0f8006f2a0927cc0899032a624c48d23363a6e8f3b40097eab0c6f8764ab6540c1d","first_seen":"2025-03-26T16:41:42.39254Z","last_seen":"2026-08-22T06:32:48.752918Z","times_seen":231,"resource_available":false,"data":null}},"time_used":241,"timings":{"blocked":-1,"dns":9,"connect":5,"send":0,"wait":6,"receive":0,"ssl":218},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xeloris-luckyreward.click/c19087e6-c1b9-4946-a21f-45b8103dde60/en/images/screen_3.webp?options=content","fqdn":"xeloris-luckyreward.click","domain":"xeloris-luckyreward.click","tld":"click"},"ip":{"addr":"172.67.174.191","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xeloris-luckyreward.click/c19087e6-c1b9-4946-a21f-45b8103dde60/en/?lead_info=bGVhZF91dWlkPWIyZWRiODg3LTU5M2YtNDAxYS04OGYwLTEyY2FkOTE1YTM2MiZvcz1XaW5kb3dzJmxhbmd1YWdlPWVuLVVTJm9mZmVyX3VybD1odHRwczovL21vbmV5bG9vdC5vbmxpbmUvMjY1ND9sZWFkX2lkPWIyZWRiODg3LTU5M2YtNDAxYS04OGYwLTEyY2FkOTE1YTM2MiZzdWIxPXtzdWIxfSZzdWIyPXtzdWIyfSZzdWIzPXtzdWIzfSZzdWI0PXtzdWI0fSZzdWI1PXtzdWI1fSZzdWI2PXtzdWI2fSZzdWI3PXtzdWI3fSZzdWI4PXtzdWI4fSZ0cmFjZV9pZD1jM2IwYTAzOS1kMjk1LTRiOWMtYTIzZi1lNDAyMWIwNGFjNTM\u0026is_webview=false\u0026pixel=\u0026fbclid=","date":"2026-08-22T06:32:18.467Z","timestamp":1787380338467,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xeloris-luckyreward.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 20 Aug 2026 19:24:52 GMT","end":"Wed, 18 Nov 2026 20:23:24 GMT"},"fingerprint":{"sha1":"A1:AA:F5:8E:D6:B5:05:C7:2C:20:02:6A:E0:0B:D0:F3:41:1E:ED:C3","sha256":"EE:D6:F5:6C:A9:E9:8D:96:F7:FE:1A:66:D7:D0:03:16:50:B1:7A:AC:62:DB:AB:1B:C9:E2:E0:63:DA:AD:D2:A3"}}},"request":{"raw":"GET /c19087e6-c1b9-4946-a21f-45b8103dde60/en/images/screen_3.webp?options=content HTTP/1.1\r\nHost: xeloris-luckyreward.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xeloris-luckyreward.click/c19087e6-c1b9-4946-a21f-45b8103dde60/en/?lead_info=bGVhZF91dWlkPWIyZWRiODg3LTU5M2YtNDAxYS04OGYwLTEyY2FkOTE1YTM2MiZvcz1XaW5kb3dzJmxhbmd1YWdlPWVuLVVTJm9mZmVyX3VybD1odHRwczovL21vbmV5bG9vdC5vbmxpbmUvMjY1ND9sZWFkX2lkPWIyZWRiODg3LTU5M2YtNDAxYS04OGYwLTEyY2FkOTE1YTM2MiZzdWIxPXtzdWIxfSZzdWIyPXtzdWIyfSZzdWIzPXtzdWIzfSZzdWI0PXtzdWI0fSZzdWI1PXtzdWI1fSZzdWI2PXtzdWI2fSZzdWI3PXtzdWI3fSZzdWI4PXtzdWI4fSZ0cmFjZV9pZD1jM2IwYTAzOS1kMjk1LTRiOWMtYTIzZi1lNDAyMWIwNGFjNTM\u0026is_webview=false\u0026pixel=\u0026fbclid=\r\nCookie: cl_st=b\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Sat, 22 Aug 2026 06:32:18 GMT\r\ncontent-type: image/webp\r\npriority: u=5,i\r\ncf-ray: a2efd6eb6fe92678-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 396\r\ncache-control: max-age=14400\r\netag: \"6a87d5cf-df4e\"\r\nlast-modified: Fri, 21 Aug 2026 04:36:31 GMT\r\nserver: cloudflare\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=h%2FhNzhJr1Y39OWhmACVoXkB%2FMiFoMZvWxWIgZ7kYpoyyb3fCo%2BnRdwr%2FyNF9DYhybohC5bvNdVViDMRRYUhsyMYagwTC7AvPAQ3%2FMjVaIPKxvVPAhIjKXCgppPbIpSW7KAj1B%2BNHl8suCWHp\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 57166\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":57166,"size_decoded":57881,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 432x768, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"09d4a813c296e128b405b5a3056ef844","sha1":"19db28e900973649f1786dc5574e7a367b98ff31","sha256":"3fe93478eede6c230c70f5eda79c3869003172f08d7a577e0a3d01f50bd0d736","sha512":"62bd995210b5d0b8165d46926e9c61849e8d74052b0ad5ef69a62671997c06c5748eb04b831271c125f7c320ceb3b24982a54752db767e886513ce7b7e249358","ssdeep":"1536:Tu3ytG+hhns94DfhAS5O8wRJBp0swXtftr9+b:TD0+hhzwB+swXBa","tlshash":"4c4302601ec7ed2e04c82cdac7625acbe44d020ad0e36795194c27c4dfd29feaedb956","first_seen":"2026-08-22T06:29:58.979721Z","last_seen":"2026-08-22T06:32:48.75423Z","times_seen":2,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-22","alert":"Phishing Block","trigger":"xeloris-luckyreward.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xeloris-luckyreward.click/c19087e6-c1b9-4946-a21f-45b8103dde60/en/images/security_icon_n-4.webp","fqdn":"xeloris-luckyreward.click","domain":"xeloris-luckyreward.click","tld":"click"},"ip":{"addr":"172.67.174.191","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xeloris-luckyreward.click/c19087e6-c1b9-4946-a21f-45b8103dde60/en/?lead_info=bGVhZF91dWlkPWIyZWRiODg3LTU5M2YtNDAxYS04OGYwLTEyY2FkOTE1YTM2MiZvcz1XaW5kb3dzJmxhbmd1YWdlPWVuLVVTJm9mZmVyX3VybD1odHRwczovL21vbmV5bG9vdC5vbmxpbmUvMjY1ND9sZWFkX2lkPWIyZWRiODg3LTU5M2YtNDAxYS04OGYwLTEyY2FkOTE1YTM2MiZzdWIxPXtzdWIxfSZzdWIyPXtzdWIyfSZzdWIzPXtzdWIzfSZzdWI0PXtzdWI0fSZzdWI1PXtzdWI1fSZzdWI2PXtzdWI2fSZzdWI3PXtzdWI3fSZzdWI4PXtzdWI4fSZ0cmFjZV9pZD1jM2IwYTAzOS1kMjk1LTRiOWMtYTIzZi1lNDAyMWIwNGFjNTM\u0026is_webview=false\u0026pixel=\u0026fbclid=","date":"2026-08-22T06:32:18.470Z","timestamp":1787380338470,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xeloris-luckyreward.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 20 Aug 2026 19:24:52 GMT","end":"Wed, 18 Nov 2026 20:23:24 GMT"},"fingerprint":{"sha1":"A1:AA:F5:8E:D6:B5:05:C7:2C:20:02:6A:E0:0B:D0:F3:41:1E:ED:C3","sha256":"EE:D6:F5:6C:A9:E9:8D:96:F7:FE:1A:66:D7:D0:03:16:50:B1:7A:AC:62:DB:AB:1B:C9:E2:E0:63:DA:AD:D2:A3"}}},"request":{"raw":"GET /c19087e6-c1b9-4946-a21f-45b8103dde60/en/images/security_icon_n-4.webp HTTP/1.1\r\nHost: xeloris-luckyreward.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xeloris-luckyreward.click/c19087e6-c1b9-4946-a21f-45b8103dde60/en/?lead_info=bGVhZF91dWlkPWIyZWRiODg3LTU5M2YtNDAxYS04OGYwLTEyY2FkOTE1YTM2MiZvcz1XaW5kb3dzJmxhbmd1YWdlPWVuLVVTJm9mZmVyX3VybD1odHRwczovL21vbmV5bG9vdC5vbmxpbmUvMjY1ND9sZWFkX2lkPWIyZWRiODg3LTU5M2YtNDAxYS04OGYwLTEyY2FkOTE1YTM2MiZzdWIxPXtzdWIxfSZzdWIyPXtzdWIyfSZzdWIzPXtzdWIzfSZzdWI0PXtzdWI0fSZzdWI1PXtzdWI1fSZzdWI2PXtzdWI2fSZzdWI3PXtzdWI3fSZzdWI4PXtzdWI4fSZ0cmFjZV9pZD1jM2IwYTAzOS1kMjk1LTRiOWMtYTIzZi1lNDAyMWIwNGFjNTM\u0026is_webview=false\u0026pixel=\u0026fbclid=\r\nCookie: cl_st=b\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Sat, 22 Aug 2026 06:32:18 GMT\r\ncontent-type: image/webp\r\npriority: u=5,i\r\ncf-ray: a2efd6eb6feb2678-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 394\r\ncache-control: max-age=14400\r\netag: \"6a87d5cf-c8\"\r\nlast-modified: Fri, 21 Aug 2026 04:36:31 GMT\r\nserver: cloudflare\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=idrV9tQzSw0yk2rWeL7k5h22%2FqY6SfGnEah9me8BNJn81V0GxboEjfPZZVk7qFbZb0oAdha2r0chf9EGE%2FUuqSypH%2FsSFodmB2rL%2FSzsd1J92CRj9yhIl4zQWWNV8YDRUHtiAmPpTkot3HdG\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 200\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":200,"size_decoded":907,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"df61c422ecae7409b8697262192a44fc","sha1":"d402d28a126d995638a2f434ddbd2b276887b599","sha256":"329ad3c7ac436f964c7a8cfcc6a74c859b51cdabd8974a65f0836410b11f2dc5","sha512":"32b50246ff38917d79c18c2750fdddafd991ebb72f9b1eadf0ff928fa0f083ee1c6ba74f697549e50743e89e1e9fb547e666a895801669c7ac65219691492562","ssdeep":"","tlshash":"63d023089d27c1984e281f1d15b145941e748d547102836d1111c5d8e0304102e5698d","first_seen":"2024-07-13T05:31:04Z","last_seen":"2026-08-22T06:32:48.755781Z","times_seen":852,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-22","alert":"Phishing Block","trigger":"xeloris-luckyreward.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xeloris-luckyreward.click/api/leads/link/b2edb887-593f-401a-88f0-12cad915a362/event","fqdn":"xeloris-luckyreward.click","domain":"xeloris-luckyreward.click","tld":"click"},"ip":{"addr":"172.67.174.191","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://xeloris-luckyreward.click/c19087e6-c1b9-4946-a21f-45b8103dde60/en/?lead_info=bGVhZF91dWlkPWIyZWRiODg3LTU5M2YtNDAxYS04OGYwLTEyY2FkOTE1YTM2MiZvcz1XaW5kb3dzJmxhbmd1YWdlPWVuLVVTJm9mZmVyX3VybD1odHRwczovL21vbmV5bG9vdC5vbmxpbmUvMjY1ND9sZWFkX2lkPWIyZWRiODg3LTU5M2YtNDAxYS04OGYwLTEyY2FkOTE1YTM2MiZzdWIxPXtzdWIxfSZzdWIyPXtzdWIyfSZzdWIzPXtzdWIzfSZzdWI0PXtzdWI0fSZzdWI1PXtzdWI1fSZzdWI2PXtzdWI2fSZzdWI3PXtzdWI3fSZzdWI4PXtzdWI4fSZ0cmFjZV9pZD1jM2IwYTAzOS1kMjk1LTRiOWMtYTIzZi1lNDAyMWIwNGFjNTM\u0026is_webview=false\u0026pixel=\u0026fbclid=","date":"2026-08-22T06:32:18.640Z","timestamp":1787380338640,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xeloris-luckyreward.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 20 Aug 2026 19:24:52 GMT","end":"Wed, 18 Nov 2026 20:23:24 GMT"},"fingerprint":{"sha1":"A1:AA:F5:8E:D6:B5:05:C7:2C:20:02:6A:E0:0B:D0:F3:41:1E:ED:C3","sha256":"EE:D6:F5:6C:A9:E9:8D:96:F7:FE:1A:66:D7:D0:03:16:50:B1:7A:AC:62:DB:AB:1B:C9:E2:E0:63:DA:AD:D2:A3"}}},"request":{"raw":"POST /api/leads/link/b2edb887-593f-401a-88f0-12cad915a362/event HTTP/1.1\r\nHost: xeloris-luckyreward.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://xeloris-luckyreward.click/c19087e6-c1b9-4946-a21f-45b8103dde60/en/?lead_info=bGVhZF91dWlkPWIyZWRiODg3LTU5M2YtNDAxYS04OGYwLTEyY2FkOTE1YTM2MiZvcz1XaW5kb3dzJmxhbmd1YWdlPWVuLVVTJm9mZmVyX3VybD1odHRwczovL21vbmV5bG9vdC5vbmxpbmUvMjY1ND9sZWFkX2lkPWIyZWRiODg3LTU5M2YtNDAxYS04OGYwLTEyY2FkOTE1YTM2MiZzdWIxPXtzdWIxfSZzdWIyPXtzdWIyfSZzdWIzPXtzdWIzfSZzdWI0PXtzdWI0fSZzdWI1PXtzdWI1fSZzdWI2PXtzdWI2fSZzdWI3PXtzdWI3fSZzdWI4PXtzdWI4fSZ0cmFjZV9pZD1jM2IwYTAzOS1kMjk1LTRiOWMtYTIzZi1lNDAyMWIwNGFjNTM\u0026is_webview=false\u0026pixel=\u0026fbclid=\r\nContent-Type: application/json\r\nContent-Length: 154\r\nOrigin: https://xeloris-luckyreward.click\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: cl_st=b\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":154,"data":"{\"events\":[{\"name\":\"full_page_loaded\",\"datetime\":\"2026-08-22T06:32:18.630Z\"},{\"name\":\"update_lead\",\"datetime\":\"2026-08-22T06:32:18.630Z\",\"is_bot\":false}]}"}},"response":{"raw":"HTTP/3 200 \r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ndate: Sat, 22 Aug 2026 06:32:18 GMT\r\ncontent-type: application/json\r\ncontent-encoding: zstd\r\ncf-ray: a2efd6ec7ff82678-OSL\r\ncf-cache-status: DYNAMIC\r\naccess-control-allow-origin: https://xeloris-luckyreward.click\r\nserver: cloudflare\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2lv4TcfRQQafRl1nopFX6KptnMJdJxLu3ZQFIxFrKJbmB8G83qweKMPp%2FM%2BNKtbtONjNKuGOrbd710bUdOd%2BwOi%2BOYfhcPkSRZgJaDZX6fZvt%2BuuqWoNofWd62m6O%2BZg6WzXkYZeeXyNt2mt\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1454,"size_decoded":1519,"mime_type":"application/json","magic":"JSON text data","md5":"d040908cbbad5e86cf0a06ca492c5d2d","sha1":"8fb911ea9c421607c15f24689cbdcffddfdd3f41","sha256":"dde6c071558d4588ca79610de5babbca3b692593dae32fc765590e8d9662f0ec","sha512":"0d684c48207b8f47df1509987ad53365ff69422d879235b6f3cfb639f07c9f5b2ed43e0a97c9ac328a4b415dcf6527364205d10dcd995e6bf87e2688e21bc475","ssdeep":"","tlshash":"6631540f8055dcf36cda9613aa4abc055ded4d7b60832c38d2746f24a8de1f93285433","first_seen":"2026-08-22T06:29:58.946608Z","last_seen":"2026-08-22T06:32:48.756489Z","times_seen":2,"resource_available":false,"data":null}},"time_used":144,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":144,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-22","alert":"Phishing Block","trigger":"xeloris-luckyreward.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xeloris-luckyreward.click/c19087e6-c1b9-4946-a21f-45b8103dde60/en/icon.webp?options=content","fqdn":"xeloris-luckyreward.click","domain":"xeloris-luckyreward.click","tld":"click"},"ip":{"addr":"172.67.174.191","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xeloris-luckyreward.click/c19087e6-c1b9-4946-a21f-45b8103dde60/en/?lead_info=bGVhZF91dWlkPWIyZWRiODg3LTU5M2YtNDAxYS04OGYwLTEyY2FkOTE1YTM2MiZvcz1XaW5kb3dzJmxhbmd1YWdlPWVuLVVTJm9mZmVyX3VybD1odHRwczovL21vbmV5bG9vdC5vbmxpbmUvMjY1ND9sZWFkX2lkPWIyZWRiODg3LTU5M2YtNDAxYS04OGYwLTEyY2FkOTE1YTM2MiZzdWIxPXtzdWIxfSZzdWIyPXtzdWIyfSZzdWIzPXtzdWIzfSZzdWI0PXtzdWI0fSZzdWI1PXtzdWI1fSZzdWI2PXtzdWI2fSZzdWI3PXtzdWI3fSZzdWI4PXtzdWI4fSZ0cmFjZV9pZD1jM2IwYTAzOS1kMjk1LTRiOWMtYTIzZi1lNDAyMWIwNGFjNTM\u0026is_webview=false\u0026pixel=\u0026fbclid=","date":"2026-08-22T06:32:18.799Z","timestamp":1787380338799,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xeloris-luckyreward.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 20 Aug 2026 19:24:52 GMT","end":"Wed, 18 Nov 2026 20:23:24 GMT"},"fingerprint":{"sha1":"A1:AA:F5:8E:D6:B5:05:C7:2C:20:02:6A:E0:0B:D0:F3:41:1E:ED:C3","sha256":"EE:D6:F5:6C:A9:E9:8D:96:F7:FE:1A:66:D7:D0:03:16:50:B1:7A:AC:62:DB:AB:1B:C9:E2:E0:63:DA:AD:D2:A3"}}},"request":{"raw":"GET /c19087e6-c1b9-4946-a21f-45b8103dde60/en/icon.webp?options=content HTTP/1.1\r\nHost: xeloris-luckyreward.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xeloris-luckyreward.click/c19087e6-c1b9-4946-a21f-45b8103dde60/en/?lead_info=bGVhZF91dWlkPWIyZWRiODg3LTU5M2YtNDAxYS04OGYwLTEyY2FkOTE1YTM2MiZvcz1XaW5kb3dzJmxhbmd1YWdlPWVuLVVTJm9mZmVyX3VybD1odHRwczovL21vbmV5bG9vdC5vbmxpbmUvMjY1ND9sZWFkX2lkPWIyZWRiODg3LTU5M2YtNDAxYS04OGYwLTEyY2FkOTE1YTM2MiZzdWIxPXtzdWIxfSZzdWIyPXtzdWIyfSZzdWIzPXtzdWIzfSZzdWI0PXtzdWI0fSZzdWI1PXtzdWI1fSZzdWI2PXtzdWI2fSZzdWI3PXtzdWI3fSZzdWI4PXtzdWI4fSZ0cmFjZV9pZD1jM2IwYTAzOS1kMjk1LTRiOWMtYTIzZi1lNDAyMWIwNGFjNTM\u0026is_webview=false\u0026pixel=\u0026fbclid=\r\nCookie: cl_st=b\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Sat, 22 Aug 2026 06:32:18 GMT\r\ncontent-type: image/webp\r\npriority: u=6,i=?0\r\ncf-ray: a2efd6ed7fff2678-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 5522\r\ncache-control: max-age=14400\r\netag: \"6a87d5cf-b0fe\"\r\nlast-modified: Fri, 21 Aug 2026 04:36:31 GMT\r\nserver: cloudflare\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9vW%2BhG44ChJnaJzlpVy0wjwog3O1%2BQBHpXAaFvBQ7Bk0l7gdFMeCd%2BOAxmUZOKOHSL7%2BwX6DcLUOAdGxUKmnlaxcgY%2BXjlCmnLeJizHmn6Qnb%2B38yQbwrHtttzZf1Phsf5Jsr5q6saQmny6H\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 45310\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":45310,"size_decoded":46029,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 512x512, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"67ae970c57ca540444120ddae1e060e3","sha1":"773907337ff45bcbbafa503009631f269b4e2ad7","sha256":"fab3f5752d64db10b9d02d1ca990dc7fdbdf758fa364f30947b98bf9ed011e64","sha512":"955df0a6635a910f9e50dfbcb47780a297c652f531b17c607cc4f6acce4d9722e8e2c0207913df30b32209ea55f026362873725c692dc75ece2443c18438fa6d","ssdeep":"768:3mSvjNWLTJWyEJna8wTs8rjkdi5IYFdRB8tK6ziGToRqY+l/IYFjWvjbnkI9T:bvBWhWxJXATrodiXTbqK+FoRP+B7wvHB","tlshash":"7a13f1ced114d1c8d7c9b835f26b9592d4b3236690a6aa757aeb014f0275d3f722b801","first_seen":"2026-08-22T06:29:58.95304Z","last_seen":"2026-08-22T06:32:48.757405Z","times_seen":2,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-22","alert":"Phishing Block","trigger":"xeloris-luckyreward.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xeloris-luckyreward.click/","fqdn":"xeloris-luckyreward.click","domain":"xeloris-luckyreward.click","tld":"click"},"ip":{"addr":"172.67.174.191","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-22T06:32:17.580Z","timestamp":1787380337580,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xeloris-luckyreward.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 20 Aug 2026 19:24:52 GMT","end":"Wed, 18 Nov 2026 20:23:24 GMT"},"fingerprint":{"sha1":"A1:AA:F5:8E:D6:B5:05:C7:2C:20:02:6A:E0:0B:D0:F3:41:1E:ED:C3","sha256":"EE:D6:F5:6C:A9:E9:8D:96:F7:FE:1A:66:D7:D0:03:16:50:B1:7A:AC:62:DB:AB:1B:C9:E2:E0:63:DA:AD:D2:A3"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: xeloris-luckyreward.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 302 \r\ndate: Sat, 22 Aug 2026 06:32:17 GMT\r\nserver-timing: cfExtPri\r\nlocation: https://xeloris-luckyreward.click/c19087e6-c1b9-4946-a21f-45b8103dde60/en/?lead_info=bGVhZF91dWlkPWIyZWRiODg3LTU5M2YtNDAxYS04OGYwLTEyY2FkOTE1YTM2MiZvcz1XaW5kb3dzJmxhbmd1YWdlPWVuLVVTJm9mZmVyX3VybD1odHRwczovL21vbmV5bG9vdC5vbmxpbmUvMjY1ND9sZWFkX2lkPWIyZWRiODg3LTU5M2YtNDAxYS04OGYwLTEyY2FkOTE1YTM2MiZzdWIxPXtzdWIxfSZzdWIyPXtzdWIyfSZzdWIzPXtzdWIzfSZzdWI0PXtzdWI0fSZzdWI1PXtzdWI1fSZzdWI2PXtzdWI2fSZzdWI3PXtzdWI3fSZzdWI4PXtzdWI4fSZ0cmFjZV9pZD1jM2IwYTAzOS1kMjk1LTRiOWMtYTIzZi1lNDAyMWIwNGFjNTM\u0026is_webview=false\u0026pixel=\u0026fbclid=\r\nserver: cloudflare\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fCj4xZS9GuLnIv93WbRFV8blKLs0q9vwEQKv7g02Q2jWIxTzOuE1ow7Yc%2BIABLzazkpmDxQrhEV7Qs2Ahulz7Ncsd%2BNjI5NEw%2FYo1X%2BRHq31JP0%2FH1iETCrGFePEDolrXv6tpaqliBsq0AXw\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=0,i\r\ncf-ray: a2efd6e5ffc92678-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 0\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-22T11:26:47.687319Z","times_seen":18033980,"resource_available":true,"data":null}},"time_used":270,"timings":{"blocked":0,"dns":3,"connect":15,"send":0,"wait":251,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-22","alert":"Phishing Block","trigger":"xeloris-luckyreward.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xeloris-luckyreward.click/c19087e6-c1b9-4946-a21f-45b8103dde60/en/js/main-function.js","fqdn":"xeloris-luckyreward.click","domain":"xeloris-luckyreward.click","tld":"click"},"ip":{"addr":"172.67.174.191","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xeloris-luckyreward.click/c19087e6-c1b9-4946-a21f-45b8103dde60/en/?lead_info=bGVhZF91dWlkPWIyZWRiODg3LTU5M2YtNDAxYS04OGYwLTEyY2FkOTE1YTM2MiZvcz1XaW5kb3dzJmxhbmd1YWdlPWVuLVVTJm9mZmVyX3VybD1odHRwczovL21vbmV5bG9vdC5vbmxpbmUvMjY1ND9sZWFkX2lkPWIyZWRiODg3LTU5M2YtNDAxYS04OGYwLTEyY2FkOTE1YTM2MiZzdWIxPXtzdWIxfSZzdWIyPXtzdWIyfSZzdWIzPXtzdWIzfSZzdWI0PXtzdWI0fSZzdWI1PXtzdWI1fSZzdWI2PXtzdWI2fSZzdWI3PXtzdWI3fSZzdWI4PXtzdWI4fSZ0cmFjZV9pZD1jM2IwYTAzOS1kMjk1LTRiOWMtYTIzZi1lNDAyMWIwNGFjNTM\u0026is_webview=false\u0026pixel=\u0026fbclid=","date":"2026-08-22T06:32:18.444Z","timestamp":1787380338444,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xeloris-luckyreward.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 20 Aug 2026 19:24:52 GMT","end":"Wed, 18 Nov 2026 20:23:24 GMT"},"fingerprint":{"sha1":"A1:AA:F5:8E:D6:B5:05:C7:2C:20:02:6A:E0:0B:D0:F3:41:1E:ED:C3","sha256":"EE:D6:F5:6C:A9:E9:8D:96:F7:FE:1A:66:D7:D0:03:16:50:B1:7A:AC:62:DB:AB:1B:C9:E2:E0:63:DA:AD:D2:A3"}}},"request":{"raw":"GET /c19087e6-c1b9-4946-a21f-45b8103dde60/en/js/main-function.js HTTP/1.1\r\nHost: xeloris-luckyreward.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xeloris-luckyreward.click/c19087e6-c1b9-4946-a21f-45b8103dde60/en/?lead_info=bGVhZF91dWlkPWIyZWRiODg3LTU5M2YtNDAxYS04OGYwLTEyY2FkOTE1YTM2MiZvcz1XaW5kb3dzJmxhbmd1YWdlPWVuLVVTJm9mZmVyX3VybD1odHRwczovL21vbmV5bG9vdC5vbmxpbmUvMjY1ND9sZWFkX2lkPWIyZWRiODg3LTU5M2YtNDAxYS04OGYwLTEyY2FkOTE1YTM2MiZzdWIxPXtzdWIxfSZzdWIyPXtzdWIyfSZzdWIzPXtzdWIzfSZzdWI0PXtzdWI0fSZzdWI1PXtzdWI1fSZzdWI2PXtzdWI2fSZzdWI3PXtzdWI3fSZzdWI4PXtzdWI4fSZ0cmFjZV9pZD1jM2IwYTAzOS1kMjk1LTRiOWMtYTIzZi1lNDAyMWIwNGFjNTM\u0026is_webview=false\u0026pixel=\u0026fbclid=\r\nCookie: cl_st=b\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nNet%2BPqj%2FWmHSOn0vb7iodhHMaathPSUV9a4Bd3zEMEJ9gr5nel1jeWdwCjUFplfXg6wyAoW5vL31%2BIko5JlRDEU%2B2uIhJVbRA5VnSQW4zGOPr92%2FOYiNMYIKpeIb6U1EcRuVMxopIh1IC80\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Sat, 22 Aug 2026 06:32:18 GMT\r\ncontent-type: application/javascript\r\ncontent-encoding: zstd\r\ncf-ray: a2efd6eb4fe02678-OSL\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nage: 225\r\ncache-control: max-age=14400\r\netag: W/\"6a87d5cf-84de\"\r\nlast-modified: Fri, 21 Aug 2026 04:36:31 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":34014,"size_decoded":10189,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"d8d61c69ac5c1ea2b82ced516e33098b","sha1":"8566994f87ca929b00724367a4ba81bc54d4c054","sha256":"c5ddbcc300c186e0f2ade6304d64fef9013f645a5432655ee695f98a05f3d60a","sha512":"82b1a2e80a63e706fcad9d64950c2c889d96a25c1410b66305bcdf1c6d9e2ab40745c12161608c71c3f37228ded6a4109c3a7bc309eba82cc7c8cdfadf369d72","ssdeep":"384:SRh+xRlYlTlLoq/TQnyk/OvyG29P2Ih7BoxesD/puVS7lefp+n7kxwJ5oAVRap+P:Sb+LlYlRz/TQc29MtisEw4LTQrXsZbKd","tlshash":"a0e2514c66fb11664267b06e4f8b61043637a00b385dde287e2d4b806fd193d81e6feb","first_seen":"2026-08-22T06:29:58.950396Z","last_seen":"2026-08-22T06:32:48.759042Z","times_seen":2,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-22","alert":"Phishing Block","trigger":"xeloris-luckyreward.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xeloris-luckyreward.click/c19087e6-c1b9-4946-a21f-45b8103dde60/en/fonts/Roboto-Bold.ttf","fqdn":"xeloris-luckyreward.click","domain":"xeloris-luckyreward.click","tld":"click"},"ip":{"addr":"172.67.174.191","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://xeloris-luckyreward.click/c19087e6-c1b9-4946-a21f-45b8103dde60/en/?lead_info=bGVhZF91dWlkPWIyZWRiODg3LTU5M2YtNDAxYS04OGYwLTEyY2FkOTE1YTM2MiZvcz1XaW5kb3dzJmxhbmd1YWdlPWVuLVVTJm9mZmVyX3VybD1odHRwczovL21vbmV5bG9vdC5vbmxpbmUvMjY1ND9sZWFkX2lkPWIyZWRiODg3LTU5M2YtNDAxYS04OGYwLTEyY2FkOTE1YTM2MiZzdWIxPXtzdWIxfSZzdWIyPXtzdWIyfSZzdWIzPXtzdWIzfSZzdWI0PXtzdWI0fSZzdWI1PXtzdWI1fSZzdWI2PXtzdWI2fSZzdWI3PXtzdWI3fSZzdWI4PXtzdWI4fSZ0cmFjZV9pZD1jM2IwYTAzOS1kMjk1LTRiOWMtYTIzZi1lNDAyMWIwNGFjNTM\u0026is_webview=false\u0026pixel=\u0026fbclid=","date":"2026-08-22T06:32:18.596Z","timestamp":1787380338596,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xeloris-luckyreward.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 20 Aug 2026 19:24:52 GMT","end":"Wed, 18 Nov 2026 20:23:24 GMT"},"fingerprint":{"sha1":"A1:AA:F5:8E:D6:B5:05:C7:2C:20:02:6A:E0:0B:D0:F3:41:1E:ED:C3","sha256":"EE:D6:F5:6C:A9:E9:8D:96:F7:FE:1A:66:D7:D0:03:16:50:B1:7A:AC:62:DB:AB:1B:C9:E2:E0:63:DA:AD:D2:A3"}}},"request":{"raw":"GET /c19087e6-c1b9-4946-a21f-45b8103dde60/en/fonts/Roboto-Bold.ttf HTTP/1.1\r\nHost: xeloris-luckyreward.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xeloris-luckyreward.click/c19087e6-c1b9-4946-a21f-45b8103dde60/en/style/style.css\r\nCookie: cl_st=b\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Sat, 22 Aug 2026 06:32:18 GMT\r\ncontent-type: application/octet-stream\r\npriority: u=3,i=?0\r\ncf-ray: a2efd6ec3ff52678-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 196\r\ncache-control: max-age=14400\r\netag: \"6a87d5cf-28da8\"\r\nlast-modified: Fri, 21 Aug 2026 04:36:31 GMT\r\nserver: cloudflare\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OOez1B1OO%2F2C2QwLYzwVHL0opT8yY2h32xMlmxrE9anXHppRVXGjfJCgEzr%2BsUsJ7BKzN5qTKW3chlQdVXZ523fJsdJy5%2BRVedid5f4QWs5Og5Lfn6vXvpiEXbCEjp1NTiTWQ%2FHj1XEjr%2FeW\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 167336\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":167336,"size_decoded":168068,"mime_type":"application/octet-stream","magic":"TrueType Font data, 18 tables, 1st \"GDEF\", 13 names, Microsoft, language 0x409, Copyright 2011 Google Inc. All Rights Reserved.RobotoBoldRoboto BoldVersion 2.137; 2017Roboto-Bo","md5":"b8e42971dec8d49207a8c8e2b919a6ac","sha1":"62442a18a9fe9457c1afeabf683d263a691b7798","sha256":"ec685a46105296fe46c8744da4a11cf8118ba6c11271941766f7a546df6aa7c7","sha512":"3bd40ac788d44626fd640ec67ef04ab0364816b5e8c831f2077bff8805cfe6890ca29274b476f933f6e96ddaa16f4e2f3f66c616dff7cd88cdcaff7dae8ca5e5","ssdeep":"3072:VBa9dX3CyiSB1/R7O0aXjC1YHeA9bOuPUPT9mYZK9K4N09PJ4X4HXYXXXXXXLnqT:uX6XiuMPT/eK9cnfST80/","tlshash":"29f3f501d2479629cac6b2787c3cd3be1970e429bc6ba11735e4af3149c8945ec69bfc","first_seen":"2023-04-11T21:48:33Z","last_seen":"2026-08-22T06:32:48.759925Z","times_seen":6379,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-22","alert":"Phishing Block","trigger":"xeloris-luckyreward.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"easy-image.b-cdn.net/icon/verify-dev.webp","fqdn":"easy-image.b-cdn.net","domain":"b-cdn.net","tld":"net"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xeloris-luckyreward.click/c19087e6-c1b9-4946-a21f-45b8103dde60/en/?lead_info=bGVhZF91dWlkPWIyZWRiODg3LTU5M2YtNDAxYS04OGYwLTEyY2FkOTE1YTM2MiZvcz1XaW5kb3dzJmxhbmd1YWdlPWVuLVVTJm9mZmVyX3VybD1odHRwczovL21vbmV5bG9vdC5vbmxpbmUvMjY1ND9sZWFkX2lkPWIyZWRiODg3LTU5M2YtNDAxYS04OGYwLTEyY2FkOTE1YTM2MiZzdWIxPXtzdWIxfSZzdWIyPXtzdWIyfSZzdWIzPXtzdWIzfSZzdWI0PXtzdWI0fSZzdWI1PXtzdWI1fSZzdWI2PXtzdWI2fSZzdWI3PXtzdWI3fSZzdWI4PXtzdWI4fSZ0cmFjZV9pZD1jM2IwYTAzOS1kMjk1LTRiOWMtYTIzZi1lNDAyMWIwNGFjNTM\u0026is_webview=false\u0026pixel=\u0026fbclid=","date":"2026-08-22T06:32:18.461Z","timestamp":1787380338461,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.b-cdn.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 06 Nov 2025 00:00:00 GMT","end":"Wed, 11 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"92:9B:37:29:B4:2D:AB:EB:68:07:7B:03:B2:80:2E:5B:53:CE:AD:E7","sha256":"51:6F:86:36:A1:23:32:72:AA:0F:28:1A:81:F4:92:F8:82:35:42:13:BA:4C:21:2D:80:C5:BB:BF:19:04:1D:32"}}},"request":{"raw":"GET /icon/verify-dev.webp HTTP/1.1\r\nHost: easy-image.b-cdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xeloris-luckyreward.click/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 22 Aug 2026 06:32:18 GMT\r\ncontent-type: image/webp\r\ncontent-length: 153554\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 2442763\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=0\r\netag: \"6a6991b1-257d2\"\r\nlast-modified: Wed, 29 Jul 2026 05:37:53 GMT\r\ncdn-storageserver: SE-904\r\ncdn-fileserver: 582\r\ncdn-proxyver: 1.58\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 07/31/2026 22:09:41\r\ncdn-edgestorageid: 830\r\ncdn-requestid: e231d3ac46290dee58149804f4d5ab2d\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":153554,"size_decoded":154491,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"752088d18b9187515deee402d722eea7","sha1":"099152f601d20b9f51ab7ba219451678324af8f1","sha256":"24d8fe55458411889035da5302e4fba047d9370d566692774a6aaff2ebaf84cf","sha512":"7be56f083a072fdc20c8d288cfa5441148593dfbfc76ce31f9fff9b9e9a5f5492b1d611c2002ea650b00adab0b300f34f3b378afe0475abf6c2a8949a2055b40","ssdeep":"3072:Yl61k7W9TJM7ye/3t5Onfy9/x5ZGtj3T/klJV2RbtxbuBA:l12UJZOzyf8/Q9wJV2fxbb","tlshash":"48e312a10f237b4ac335013b44cd0a554bc12764922f897176bf16566be2cba3fb326e","first_seen":"2026-08-07T08:55:42.39751Z","last_seen":"2026-08-22T06:32:48.760954Z","times_seen":4,"resource_available":false,"data":null}},"time_used":247,"timings":{"blocked":-1,"dns":12,"connect":1,"send":0,"wait":7,"receive":2,"ssl":222},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xeloris-luckyreward.click/c19087e6-c1b9-4946-a21f-45b8103dde60/en/images/screen_1.webp?options=content","fqdn":"xeloris-luckyreward.click","domain":"xeloris-luckyreward.click","tld":"click"},"ip":{"addr":"172.67.174.191","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xeloris-luckyreward.click/c19087e6-c1b9-4946-a21f-45b8103dde60/en/?lead_info=bGVhZF91dWlkPWIyZWRiODg3LTU5M2YtNDAxYS04OGYwLTEyY2FkOTE1YTM2MiZvcz1XaW5kb3dzJmxhbmd1YWdlPWVuLVVTJm9mZmVyX3VybD1odHRwczovL21vbmV5bG9vdC5vbmxpbmUvMjY1ND9sZWFkX2lkPWIyZWRiODg3LTU5M2YtNDAxYS04OGYwLTEyY2FkOTE1YTM2MiZzdWIxPXtzdWIxfSZzdWIyPXtzdWIyfSZzdWIzPXtzdWIzfSZzdWI0PXtzdWI0fSZzdWI1PXtzdWI1fSZzdWI2PXtzdWI2fSZzdWI3PXtzdWI3fSZzdWI4PXtzdWI4fSZ0cmFjZV9pZD1jM2IwYTAzOS1kMjk1LTRiOWMtYTIzZi1lNDAyMWIwNGFjNTM\u0026is_webview=false\u0026pixel=\u0026fbclid=","date":"2026-08-22T06:32:18.465Z","timestamp":1787380338465,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xeloris-luckyreward.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 20 Aug 2026 19:24:52 GMT","end":"Wed, 18 Nov 2026 20:23:24 GMT"},"fingerprint":{"sha1":"A1:AA:F5:8E:D6:B5:05:C7:2C:20:02:6A:E0:0B:D0:F3:41:1E:ED:C3","sha256":"EE:D6:F5:6C:A9:E9:8D:96:F7:FE:1A:66:D7:D0:03:16:50:B1:7A:AC:62:DB:AB:1B:C9:E2:E0:63:DA:AD:D2:A3"}}},"request":{"raw":"GET /c19087e6-c1b9-4946-a21f-45b8103dde60/en/images/screen_1.webp?options=content HTTP/1.1\r\nHost: xeloris-luckyreward.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xeloris-luckyreward.click/c19087e6-c1b9-4946-a21f-45b8103dde60/en/?lead_info=bGVhZF91dWlkPWIyZWRiODg3LTU5M2YtNDAxYS04OGYwLTEyY2FkOTE1YTM2MiZvcz1XaW5kb3dzJmxhbmd1YWdlPWVuLVVTJm9mZmVyX3VybD1odHRwczovL21vbmV5bG9vdC5vbmxpbmUvMjY1ND9sZWFkX2lkPWIyZWRiODg3LTU5M2YtNDAxYS04OGYwLTEyY2FkOTE1YTM2MiZzdWIxPXtzdWIxfSZzdWIyPXtzdWIyfSZzdWIzPXtzdWIzfSZzdWI0PXtzdWI0fSZzdWI1PXtzdWI1fSZzdWI2PXtzdWI2fSZzdWI3PXtzdWI3fSZzdWI4PXtzdWI4fSZ0cmFjZV9pZD1jM2IwYTAzOS1kMjk1LTRiOWMtYTIzZi1lNDAyMWIwNGFjNTM\u0026is_webview=false\u0026pixel=\u0026fbclid=\r\nCookie: cl_st=b\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Sat, 22 Aug 2026 06:32:18 GMT\r\ncontent-type: image/webp\r\npriority: u=5,i\r\ncf-ray: a2efd6eb6fe72678-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 396\r\ncache-control: max-age=14400\r\netag: \"6a87d5cf-ce82\"\r\nlast-modified: Fri, 21 Aug 2026 04:36:31 GMT\r\nserver: cloudflare\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3xN1fp4Z8bECa3kM66OnT9etQJXxSGjtNEhTsadEvGf%2B%2BHLbsKmiI5a6nIrG4mZsoP0bnq54M1Q%2F7JxmPpuThWlcM%2FQcDO23748SN0XJF961MCPhVC8gA4mqMk1xEWqiB8ocit%2Ftug4jFgV7\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 52866\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":52866,"size_decoded":53579,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 432x768, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"2092dd8d6bc6e8e373e86c69bbccb7c1","sha1":"1aa9ffd7dc9d40be921b20d4a66e4ce873df1697","sha256":"7bc32a445ae6e45e315769315229cf8fe44305b60e378deb87c1f4949d049fdc","sha512":"7ae9898c77deec2a8128726f7f933416a7194aa2c83532dc6c24f3187f15ecd480dd4f45a63b7ebd274c4dc00a3d41a1d143a635dd0467727b87334aff0646af","ssdeep":"768:gg0HWEdpdHFr+ebgyi+2yr16vC08tsc5t3yKxz3JtPNtOpz///McKIqKud/RVbiL:N0DdHFrHg8wvC08tbvdlepz0DDVbM","tlshash":"1e3302434f7a85a0f9df9c555ec4c99c84b8fcae8d6d4c247ad12b4b9f582a17ec3088","first_seen":"2026-08-22T06:29:58.954546Z","last_seen":"2026-08-22T06:32:48.761564Z","times_seen":2,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-22","alert":"Phishing Block","trigger":"xeloris-luckyreward.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"easy-image.b-cdn.net/users/male/12.jpg","fqdn":"easy-image.b-cdn.net","domain":"b-cdn.net","tld":"net"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xeloris-luckyreward.click/c19087e6-c1b9-4946-a21f-45b8103dde60/en/?lead_info=bGVhZF91dWlkPWIyZWRiODg3LTU5M2YtNDAxYS04OGYwLTEyY2FkOTE1YTM2MiZvcz1XaW5kb3dzJmxhbmd1YWdlPWVuLVVTJm9mZmVyX3VybD1odHRwczovL21vbmV5bG9vdC5vbmxpbmUvMjY1ND9sZWFkX2lkPWIyZWRiODg3LTU5M2YtNDAxYS04OGYwLTEyY2FkOTE1YTM2MiZzdWIxPXtzdWIxfSZzdWIyPXtzdWIyfSZzdWIzPXtzdWIzfSZzdWI0PXtzdWI0fSZzdWI1PXtzdWI1fSZzdWI2PXtzdWI2fSZzdWI3PXtzdWI3fSZzdWI4PXtzdWI4fSZ0cmFjZV9pZD1jM2IwYTAzOS1kMjk1LTRiOWMtYTIzZi1lNDAyMWIwNGFjNTM\u0026is_webview=false\u0026pixel=\u0026fbclid=","date":"2026-08-22T06:32:18.474Z","timestamp":1787380338474,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.b-cdn.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 06 Nov 2025 00:00:00 GMT","end":"Wed, 11 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"92:9B:37:29:B4:2D:AB:EB:68:07:7B:03:B2:80:2E:5B:53:CE:AD:E7","sha256":"51:6F:86:36:A1:23:32:72:AA:0F:28:1A:81:F4:92:F8:82:35:42:13:BA:4C:21:2D:80:C5:BB:BF:19:04:1D:32"}}},"request":{"raw":"GET /users/male/12.jpg HTTP/1.1\r\nHost: easy-image.b-cdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xeloris-luckyreward.click/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 22 Aug 2026 06:32:18 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 20633\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 2442763\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=0\r\netag: \"67ed0548-5099\"\r\nlast-modified: Wed, 02 Apr 2025 09:37:12 GMT\r\ncdn-storageserver: SE-582\r\ncdn-fileserver: 1029\r\ncdn-proxyver: 1.61\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 08/17/2026 18:45:07\r\ncdn-edgestorageid: 830\r\ncdn-requestid: a4f872dbcc1e10e66b8dec689a0c1b34\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":20633,"size_decoded":21569,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 228x342, components 3","md5":"adbc08ca5a6f482d60b2e027644be382","sha1":"0842d20a626b59f831b23f169d1d55b8a8164bc3","sha256":"845b9b76e34df587f1355cf90c8465e5341c119253c320700069f434075e8e52","sha512":"a5a364c68637ab6d76fc660bf5fd53adc7cbd849ab9fd6506246cfe4fd745bbead14f181ba99d2a1eff1d647027190fee0b70769d9e0240f0d5d046695c9c67f","ssdeep":"384:rsZHCn0l8UhOkC0eMJ3OH8WdTGiNJh0PWDsQSudIcDyBLe6h8jS:4En0vBneMJFCNJq+gNHThQS","tlshash":"1292d01dca9b770f891c02bb15ec0712f94c579484faa638a3ed5ae498b35df21d0935","first_seen":"2025-04-06T10:47:32.159892Z","last_seen":"2026-08-22T06:32:48.762537Z","times_seen":19,"resource_available":false,"data":null}},"time_used":234,"timings":{"blocked":-1,"dns":0,"connect":5,"send":0,"wait":9,"receive":0,"ssl":217},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xeloris-luckyreward.click/c19087e6-c1b9-4946-a21f-45b8103dde60/en/images/icon_arrow.svg","fqdn":"xeloris-luckyreward.click","domain":"xeloris-luckyreward.click","tld":"click"},"ip":{"addr":"172.67.174.191","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xeloris-luckyreward.click/c19087e6-c1b9-4946-a21f-45b8103dde60/en/?lead_info=bGVhZF91dWlkPWIyZWRiODg3LTU5M2YtNDAxYS04OGYwLTEyY2FkOTE1YTM2MiZvcz1XaW5kb3dzJmxhbmd1YWdlPWVuLVVTJm9mZmVyX3VybD1odHRwczovL21vbmV5bG9vdC5vbmxpbmUvMjY1ND9sZWFkX2lkPWIyZWRiODg3LTU5M2YtNDAxYS04OGYwLTEyY2FkOTE1YTM2MiZzdWIxPXtzdWIxfSZzdWIyPXtzdWIyfSZzdWIzPXtzdWIzfSZzdWI0PXtzdWI0fSZzdWI1PXtzdWI1fSZzdWI2PXtzdWI2fSZzdWI3PXtzdWI3fSZzdWI4PXtzdWI4fSZ0cmFjZV9pZD1jM2IwYTAzOS1kMjk1LTRiOWMtYTIzZi1lNDAyMWIwNGFjNTM\u0026is_webview=false\u0026pixel=\u0026fbclid=","date":"2026-08-22T06:32:18.448Z","timestamp":1787380338448,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xeloris-luckyreward.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 20 Aug 2026 19:24:52 GMT","end":"Wed, 18 Nov 2026 20:23:24 GMT"},"fingerprint":{"sha1":"A1:AA:F5:8E:D6:B5:05:C7:2C:20:02:6A:E0:0B:D0:F3:41:1E:ED:C3","sha256":"EE:D6:F5:6C:A9:E9:8D:96:F7:FE:1A:66:D7:D0:03:16:50:B1:7A:AC:62:DB:AB:1B:C9:E2:E0:63:DA:AD:D2:A3"}}},"request":{"raw":"GET /c19087e6-c1b9-4946-a21f-45b8103dde60/en/images/icon_arrow.svg HTTP/1.1\r\nHost: xeloris-luckyreward.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xeloris-luckyreward.click/c19087e6-c1b9-4946-a21f-45b8103dde60/en/?lead_info=bGVhZF91dWlkPWIyZWRiODg3LTU5M2YtNDAxYS04OGYwLTEyY2FkOTE1YTM2MiZvcz1XaW5kb3dzJmxhbmd1YWdlPWVuLVVTJm9mZmVyX3VybD1odHRwczovL21vbmV5bG9vdC5vbmxpbmUvMjY1ND9sZWFkX2lkPWIyZWRiODg3LTU5M2YtNDAxYS04OGYwLTEyY2FkOTE1YTM2MiZzdWIxPXtzdWIxfSZzdWIyPXtzdWIyfSZzdWIzPXtzdWIzfSZzdWI0PXtzdWI0fSZzdWI1PXtzdWI1fSZzdWI2PXtzdWI2fSZzdWI3PXtzdWI3fSZzdWI4PXtzdWI4fSZ0cmFjZV9pZD1jM2IwYTAzOS1kMjk1LTRiOWMtYTIzZi1lNDAyMWIwNGFjNTM\u0026is_webview=false\u0026pixel=\u0026fbclid=\r\nCookie: cl_st=b\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WSZoBmBGo00JxqHB%2Frqezxf4L85nmoXIeBpp0W1n7bNYBiJAIoDtm1TLHtIQ4oakQ4OKtS0%2BuXn5zElX2sb%2FeoyqX7YkAFjrIGlUOhlP2qIt6LeyE%2FcdXCIWj9lqa3eWYrjf1UT83ITXvrTY\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Sat, 22 Aug 2026 06:32:18 GMT\r\ncontent-type: image/svg+xml\r\ncontent-encoding: zstd\r\ncf-ray: a2efd6eb4fe22678-OSL\r\ncf-cache-status: HIT\r\npriority: u=5,i\r\nage: 397\r\ncache-control: max-age=14400\r\netag: W/\"6a87d5cf-db\"\r\nlast-modified: Fri, 21 Aug 2026 04:36:31 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":219,"size_decoded":866,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"b43d99f133288e69bbbf4086d2e6ef32","sha1":"f405ed0c6a2240746d942d4af0014a310a058d44","sha256":"ac79cfa70fe0b3820fa22be89a4220bfa05de2b99f3ee68bb10a7a35937c245c","sha512":"1ebc17375039ba8c9aeccef936efcff9785c1b12995b9d18fe5d3f0ffc545595c5ebc728ab4cd3dc1cb54108a45849920c922e6feafff9f30e6c35bdb248d7e1","ssdeep":"","tlshash":"efd0a7be554c990145044f525d59316772b674cd53c804b9e54175e07ce00d79d5dd78","first_seen":"2024-08-19T13:45:40.065042Z","last_seen":"2026-08-22T06:32:48.76326Z","times_seen":278,"resource_available":false,"data":null}},"time_used":38,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":38,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-22","alert":"Phishing Block","trigger":"xeloris-luckyreward.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xeloris-luckyreward.click/c19087e6-c1b9-4946-a21f-45b8103dde60/en/manifest.json","fqdn":"xeloris-luckyreward.click","domain":"xeloris-luckyreward.click","tld":"click"},"ip":{"addr":"172.67.174.191","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://xeloris-luckyreward.click/c19087e6-c1b9-4946-a21f-45b8103dde60/en/?lead_info=bGVhZF91dWlkPWIyZWRiODg3LTU5M2YtNDAxYS04OGYwLTEyY2FkOTE1YTM2MiZvcz1XaW5kb3dzJmxhbmd1YWdlPWVuLVVTJm9mZmVyX3VybD1odHRwczovL21vbmV5bG9vdC5vbmxpbmUvMjY1ND9sZWFkX2lkPWIyZWRiODg3LTU5M2YtNDAxYS04OGYwLTEyY2FkOTE1YTM2MiZzdWIxPXtzdWIxfSZzdWIyPXtzdWIyfSZzdWIzPXtzdWIzfSZzdWI0PXtzdWI0fSZzdWI1PXtzdWI1fSZzdWI2PXtzdWI2fSZzdWI3PXtzdWI3fSZzdWI4PXtzdWI4fSZ0cmFjZV9pZD1jM2IwYTAzOS1kMjk1LTRiOWMtYTIzZi1lNDAyMWIwNGFjNTM\u0026is_webview=false\u0026pixel=\u0026fbclid=","date":"2026-08-22T06:32:18.573Z","timestamp":1787380338573,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xeloris-luckyreward.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 20 Aug 2026 19:24:52 GMT","end":"Wed, 18 Nov 2026 20:23:24 GMT"},"fingerprint":{"sha1":"A1:AA:F5:8E:D6:B5:05:C7:2C:20:02:6A:E0:0B:D0:F3:41:1E:ED:C3","sha256":"EE:D6:F5:6C:A9:E9:8D:96:F7:FE:1A:66:D7:D0:03:16:50:B1:7A:AC:62:DB:AB:1B:C9:E2:E0:63:DA:AD:D2:A3"}}},"request":{"raw":"GET /c19087e6-c1b9-4946-a21f-45b8103dde60/en/manifest.json HTTP/1.1\r\nHost: xeloris-luckyreward.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://xeloris-luckyreward.click/c19087e6-c1b9-4946-a21f-45b8103dde60/en/?lead_info=bGVhZF91dWlkPWIyZWRiODg3LTU5M2YtNDAxYS04OGYwLTEyY2FkOTE1YTM2MiZvcz1XaW5kb3dzJmxhbmd1YWdlPWVuLVVTJm9mZmVyX3VybD1odHRwczovL21vbmV5bG9vdC5vbmxpbmUvMjY1ND9sZWFkX2lkPWIyZWRiODg3LTU5M2YtNDAxYS04OGYwLTEyY2FkOTE1YTM2MiZzdWIxPXtzdWIxfSZzdWIyPXtzdWIyfSZzdWIzPXtzdWIzfSZzdWI0PXtzdWI0fSZzdWI1PXtzdWI1fSZzdWI2PXtzdWI2fSZzdWI3PXtzdWI3fSZzdWI4PXtzdWI4fSZ0cmFjZV9pZD1jM2IwYTAzOS1kMjk1LTRiOWMtYTIzZi1lNDAyMWIwNGFjNTM\u0026is_webview=false\u0026pixel=\u0026fbclid=\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: cl_st=b\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lOipIsIzedvdavSaaofpXQrABWTe2Vt24EWBNDnMJwuLEAhTFsk995OIf2vHJjfAxH%2BfEkCpVk3Y6dUPkYwhEIh0MGZyB2qPI69%2F19KwDRkRaSb61jS0rmAMbeM3rOPjcZ%2FwJh6zh6tGrNsu\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Sat, 22 Aug 2026 06:32:18 GMT\r\ncontent-type: application/json\r\ncontent-encoding: zstd\r\ncf-ray: a2efd6ec1ff32678-OSL\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\netag: W/\"6a87d5cf-3e8\"\r\nlast-modified: Fri, 21 Aug 2026 04:36:31 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1000,"size_decoded":992,"mime_type":"application/json","magic":"JSON text data","md5":"dad8f17f960c70ee96804b8dc1df3d99","sha1":"a47e7461f90e19add0c9bb19d0d97da997111636","sha256":"591dc8e1405c48fba7737b1c7b68d13efcf0ea97db575968237ec9525b6a8b46","sha512":"7c8f80dceaefeef11b38583862c255d37f0b3e2a90188a8017d11f2980c515e9c7acf7055618b638bc4b0251f7bf6cffb0c0b3925b98782eb73ba9508a7ca1b8","ssdeep":"","tlshash":"8a117d61d8340d53b7fa81a54989110366b6c81bdcd03a0db30e04dc0fee6ea707ab7d","first_seen":"2026-08-22T06:29:58.944188Z","last_seen":"2026-08-22T06:32:48.764029Z","times_seen":2,"resource_available":false,"data":null}},"time_used":112,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":112,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-22","alert":"Phishing Block","trigger":"xeloris-luckyreward.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xeloris-luckyreward.click/c19087e6-c1b9-4946-a21f-45b8103dde60/en/?lead_info=bGVhZF91dWlkPWIyZWRiODg3LTU5M2YtNDAxYS04OGYwLTEyY2FkOTE1YTM2MiZvcz1XaW5kb3dzJmxhbmd1YWdlPWVuLVVTJm9mZmVyX3VybD1odHRwczovL21vbmV5bG9vdC5vbmxpbmUvMjY1ND9sZWFkX2lkPWIyZWRiODg3LTU5M2YtNDAxYS04OGYwLTEyY2FkOTE1YTM2MiZzdWIxPXtzdWIxfSZzdWIyPXtzdWIyfSZzdWIzPXtzdWIzfSZzdWI0PXtzdWI0fSZzdWI1PXtzdWI1fSZzdWI2PXtzdWI2fSZzdWI3PXtzdWI3fSZzdWI4PXtzdWI4fSZ0cmFjZV9pZD1jM2IwYTAzOS1kMjk1LTRiOWMtYTIzZi1lNDAyMWIwNGFjNTM\u0026is_webview=false\u0026pixel=\u0026fbclid=","fqdn":"xeloris-luckyreward.click","domain":"xeloris-luckyreward.click","tld":"click"},"ip":{"addr":"172.67.174.191","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-22T06:32:17.858Z","timestamp":1787380337858,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xeloris-luckyreward.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 20 Aug 2026 19:24:52 GMT","end":"Wed, 18 Nov 2026 20:23:24 GMT"},"fingerprint":{"sha1":"A1:AA:F5:8E:D6:B5:05:C7:2C:20:02:6A:E0:0B:D0:F3:41:1E:ED:C3","sha256":"EE:D6:F5:6C:A9:E9:8D:96:F7:FE:1A:66:D7:D0:03:16:50:B1:7A:AC:62:DB:AB:1B:C9:E2:E0:63:DA:AD:D2:A3"}}},"request":{"raw":"GET /c19087e6-c1b9-4946-a21f-45b8103dde60/en/?lead_info=bGVhZF91dWlkPWIyZWRiODg3LTU5M2YtNDAxYS04OGYwLTEyY2FkOTE1YTM2MiZvcz1XaW5kb3dzJmxhbmd1YWdlPWVuLVVTJm9mZmVyX3VybD1odHRwczovL21vbmV5bG9vdC5vbmxpbmUvMjY1ND9sZWFkX2lkPWIyZWRiODg3LTU5M2YtNDAxYS04OGYwLTEyY2FkOTE1YTM2MiZzdWIxPXtzdWIxfSZzdWIyPXtzdWIyfSZzdWIzPXtzdWIzfSZzdWI0PXtzdWI0fSZzdWI1PXtzdWI1fSZzdWI2PXtzdWI2fSZzdWI3PXtzdWI3fSZzdWI4PXtzdWI4fSZ0cmFjZV9pZD1jM2IwYTAzOS1kMjk1LTRiOWMtYTIzZi1lNDAyMWIwNGFjNTM\u0026is_webview=false\u0026pixel=\u0026fbclid= HTTP/1.1\r\nHost: xeloris-luckyreward.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=0,i\r\ndate: Sat, 22 Aug 2026 06:32:18 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-encoding: zstd\r\ncf-ray: a2efd6e79fcb2678-OSL\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\nset-cookie: cl_st=b; expires=Sun, 23 Aug 2026 06:32:17 GMT; Max-Age=86400; path=/\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DWERU%2B%2FhtM6fAhfZQBoyP6XA%2B2L4zDbMBveePgy8ENI4YCG%2B9l6VPJS5vlYhM9cInjGgmI%2B7UiS4jt8zXxh83yU%2BQJAvNDp85c0WHBBsoaDGSsFea8JV2FvEdlIwxhqR2kB6OtDsRJHNkqQ0\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":[{"name":"cl_st","value":"b","quoted":false,"path":"/","expires":"2026-08-23T06:32:17Z","raw_expires":"Sun, 23 Aug 2026 06:32:17 GMT","max_age":86400,"secure":false,"http_only":false,"same_site":"","partitioned":false,"raw":"cl_st=b; expires=Sun, 23 Aug 2026 06:32:17 GMT; Max-Age=86400; path=/"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}],"data":{"size":161656,"size_decoded":57047,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (38189)","md5":"cd955f5ffae9e22e8c8f20df1e9345d7","sha1":"5b41f784b33a0a7a0f94a6f62a89005f5bf6373f","sha256":"470b3c13a606681b3dbef1a044aa423828b5f06cb5fa6fe7dde3cd000826b4ee","sha512":"19ecd353244e6a1a4284402a301e9f77403ae315835e8c3fc94b95a46a350b7fdb99fba246bc278a881f54e82eb62b0609f05ee2dd86610d760ba11767d8c51b","ssdeep":"3072:X8NxsXTJ6+nUWZVkeJanfdexsXTJ6+nUWZVkeJanfd3U2Ovlga0:ljJ/foeJazjJ/foeJaO2T","tlshash":"4df3cf20a8f2647301d3a1966a126b4b6ce8f603e947974577bcc3d0afe7e92ed1315c","first_seen":"2026-08-22T06:29:58.956759Z","last_seen":"2026-08-22T06:32:48.764991Z","times_seen":2,"resource_available":false,"data":null}},"time_used":175,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":151,"receive":24,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-22","alert":"Phishing Block","trigger":"xeloris-luckyreward.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xeloris-luckyreward.click/c19087e6-c1b9-4946-a21f-45b8103dde60/en/js/translate.js","fqdn":"xeloris-luckyreward.click","domain":"xeloris-luckyreward.click","tld":"click"},"ip":{"addr":"172.67.174.191","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xeloris-luckyreward.click/c19087e6-c1b9-4946-a21f-45b8103dde60/en/?lead_info=bGVhZF91dWlkPWIyZWRiODg3LTU5M2YtNDAxYS04OGYwLTEyY2FkOTE1YTM2MiZvcz1XaW5kb3dzJmxhbmd1YWdlPWVuLVVTJm9mZmVyX3VybD1odHRwczovL21vbmV5bG9vdC5vbmxpbmUvMjY1ND9sZWFkX2lkPWIyZWRiODg3LTU5M2YtNDAxYS04OGYwLTEyY2FkOTE1YTM2MiZzdWIxPXtzdWIxfSZzdWIyPXtzdWIyfSZzdWIzPXtzdWIzfSZzdWI0PXtzdWI0fSZzdWI1PXtzdWI1fSZzdWI2PXtzdWI2fSZzdWI3PXtzdWI3fSZzdWI4PXtzdWI4fSZ0cmFjZV9pZD1jM2IwYTAzOS1kMjk1LTRiOWMtYTIzZi1lNDAyMWIwNGFjNTM\u0026is_webview=false\u0026pixel=\u0026fbclid=","date":"2026-08-22T06:32:18.441Z","timestamp":1787380338441,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xeloris-luckyreward.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 20 Aug 2026 19:24:52 GMT","end":"Wed, 18 Nov 2026 20:23:24 GMT"},"fingerprint":{"sha1":"A1:AA:F5:8E:D6:B5:05:C7:2C:20:02:6A:E0:0B:D0:F3:41:1E:ED:C3","sha256":"EE:D6:F5:6C:A9:E9:8D:96:F7:FE:1A:66:D7:D0:03:16:50:B1:7A:AC:62:DB:AB:1B:C9:E2:E0:63:DA:AD:D2:A3"}}},"request":{"raw":"GET /c19087e6-c1b9-4946-a21f-45b8103dde60/en/js/translate.js HTTP/1.1\r\nHost: xeloris-luckyreward.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xeloris-luckyreward.click/c19087e6-c1b9-4946-a21f-45b8103dde60/en/?lead_info=bGVhZF91dWlkPWIyZWRiODg3LTU5M2YtNDAxYS04OGYwLTEyY2FkOTE1YTM2MiZvcz1XaW5kb3dzJmxhbmd1YWdlPWVuLVVTJm9mZmVyX3VybD1odHRwczovL21vbmV5bG9vdC5vbmxpbmUvMjY1ND9sZWFkX2lkPWIyZWRiODg3LTU5M2YtNDAxYS04OGYwLTEyY2FkOTE1YTM2MiZzdWIxPXtzdWIxfSZzdWIyPXtzdWIyfSZzdWIzPXtzdWIzfSZzdWI0PXtzdWI0fSZzdWI1PXtzdWI1fSZzdWI2PXtzdWI2fSZzdWI3PXtzdWI3fSZzdWI4PXtzdWI4fSZ0cmFjZV9pZD1jM2IwYTAzOS1kMjk1LTRiOWMtYTIzZi1lNDAyMWIwNGFjNTM\u0026is_webview=false\u0026pixel=\u0026fbclid=\r\nCookie: cl_st=b\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zexcdoLrttHatED6nT4AUv5IWLUf0L1KtpRltYCbUzjSd18zO1YJR1UOm%2B8bbA9x57dWyHY%2BSHk8tLOCF6EdrC3lns9MuhYyJZoRGIJt%2FTO8%2FR%2FCTUV7h6uK7aIAr2OaztNSd1I9iXf1kvM1\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Sat, 22 Aug 2026 06:32:18 GMT\r\ncontent-type: application/javascript\r\ncontent-encoding: zstd\r\ncf-ray: a2efd6eb3fdd2678-OSL\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nage: 196\r\ncache-control: max-age=14400\r\netag: W/\"6a87d5cf-e35\"\r\nlast-modified: Fri, 21 Aug 2026 04:36:31 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3637,"size_decoded":1739,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"99c0d4f9a645bf2c48bcf1789692ff1a","sha1":"90ccdd603c5035a69c77d340db76e503d6efb48c","sha256":"5d8725968df266c2a1d0d513b9e02a52d2c68ea48b23733a5b7103dbe1abca87","sha512":"04cbbe9e8ecdae18b08e3a21264e15c37efd00313e7f9cb5847fa681c25a879657e82d2a6938e17fe32454849503612a226ebd1f5dd2d9e133228fc58270d98e","ssdeep":"","tlshash":"5271974cb0f2010d5993b02efbeb6895b224985b0265fe183f5e45436fe393dd39e689","first_seen":"2026-04-10T07:45:47.001447Z","last_seen":"2026-08-22T06:32:48.765945Z","times_seen":80,"resource_available":true,"data":null}},"time_used":57,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":57,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-22","alert":"Phishing Block","trigger":"xeloris-luckyreward.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xeloris-luckyreward.click/c19087e6-c1b9-4946-a21f-45b8103dde60/en/images/icon_point.svg","fqdn":"xeloris-luckyreward.click","domain":"xeloris-luckyreward.click","tld":"click"},"ip":{"addr":"172.67.174.191","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xeloris-luckyreward.click/c19087e6-c1b9-4946-a21f-45b8103dde60/en/?lead_info=bGVhZF91dWlkPWIyZWRiODg3LTU5M2YtNDAxYS04OGYwLTEyY2FkOTE1YTM2MiZvcz1XaW5kb3dzJmxhbmd1YWdlPWVuLVVTJm9mZmVyX3VybD1odHRwczovL21vbmV5bG9vdC5vbmxpbmUvMjY1ND9sZWFkX2lkPWIyZWRiODg3LTU5M2YtNDAxYS04OGYwLTEyY2FkOTE1YTM2MiZzdWIxPXtzdWIxfSZzdWIyPXtzdWIyfSZzdWIzPXtzdWIzfSZzdWI0PXtzdWI0fSZzdWI1PXtzdWI1fSZzdWI2PXtzdWI2fSZzdWI3PXtzdWI3fSZzdWI4PXtzdWI4fSZ0cmFjZV9pZD1jM2IwYTAzOS1kMjk1LTRiOWMtYTIzZi1lNDAyMWIwNGFjNTM\u0026is_webview=false\u0026pixel=\u0026fbclid=","date":"2026-08-22T06:32:18.451Z","timestamp":1787380338451,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xeloris-luckyreward.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 20 Aug 2026 19:24:52 GMT","end":"Wed, 18 Nov 2026 20:23:24 GMT"},"fingerprint":{"sha1":"A1:AA:F5:8E:D6:B5:05:C7:2C:20:02:6A:E0:0B:D0:F3:41:1E:ED:C3","sha256":"EE:D6:F5:6C:A9:E9:8D:96:F7:FE:1A:66:D7:D0:03:16:50:B1:7A:AC:62:DB:AB:1B:C9:E2:E0:63:DA:AD:D2:A3"}}},"request":{"raw":"GET /c19087e6-c1b9-4946-a21f-45b8103dde60/en/images/icon_point.svg HTTP/1.1\r\nHost: xeloris-luckyreward.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xeloris-luckyreward.click/c19087e6-c1b9-4946-a21f-45b8103dde60/en/?lead_info=bGVhZF91dWlkPWIyZWRiODg3LTU5M2YtNDAxYS04OGYwLTEyY2FkOTE1YTM2MiZvcz1XaW5kb3dzJmxhbmd1YWdlPWVuLVVTJm9mZmVyX3VybD1odHRwczovL21vbmV5bG9vdC5vbmxpbmUvMjY1ND9sZWFkX2lkPWIyZWRiODg3LTU5M2YtNDAxYS04OGYwLTEyY2FkOTE1YTM2MiZzdWIxPXtzdWIxfSZzdWIyPXtzdWIyfSZzdWIzPXtzdWIzfSZzdWI0PXtzdWI0fSZzdWI1PXtzdWI1fSZzdWI2PXtzdWI2fSZzdWI3PXtzdWI3fSZzdWI4PXtzdWI4fSZ0cmFjZV9pZD1jM2IwYTAzOS1kMjk1LTRiOWMtYTIzZi1lNDAyMWIwNGFjNTM\u0026is_webview=false\u0026pixel=\u0026fbclid=\r\nCookie: cl_st=b\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WHPLoqBpuBV%2FkBmql3gt%2Bnl2PUaPvbX40RA%2FI4DKSkD0UmRAx6wgfFH6rtNq3RLtlSxS04Q7Fdk0ow5dX2r9G1jmpfQPquvfyMDibXKHeZQp04IrajPnH6xouztDVcY8Nxs%2Fbm6SzCNFqbAt\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Sat, 22 Aug 2026 06:32:18 GMT\r\ncontent-type: image/svg+xml\r\ncontent-encoding: zstd\r\ncf-ray: a2efd6eb4fe42678-OSL\r\ncf-cache-status: HIT\r\npriority: u=5,i\r\nage: 396\r\ncache-control: max-age=14400\r\netag: W/\"6a87d5cf-3b5\"\r\nlast-modified: Fri, 21 Aug 2026 04:36:31 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":949,"size_decoded":1090,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"0b8d819ea14a41d457702cc80af95fdc","sha1":"42648c53f7d9efd1447fc7f63ff43b7b36866012","sha256":"2cf31df5b105adeee79efb9d94fb767c0cb05a552d231835ef8c258d05fbc977","sha512":"5931f2ea2a9164cbc339d8c9ec6305db92781b9cf4f19838f749faebdeea725e3a450d963825ad47b4c55f607e8ff1410c68470eeea7802d0ecc5e9980aec695","ssdeep":"","tlshash":"c71108f3fc6a06dbda57b303ad8618a407bfb8f91347a18c5818cf3ba294154c795b20","first_seen":"2024-08-19T13:45:40.065888Z","last_seen":"2026-08-22T06:32:48.766548Z","times_seen":278,"resource_available":false,"data":null}},"time_used":55,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":55,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-22","alert":"Phishing Block","trigger":"xeloris-luckyreward.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"easy-image.b-cdn.net/icon/icon_star_black.svg","fqdn":"easy-image.b-cdn.net","domain":"b-cdn.net","tld":"net"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xeloris-luckyreward.click/c19087e6-c1b9-4946-a21f-45b8103dde60/en/?lead_info=bGVhZF91dWlkPWIyZWRiODg3LTU5M2YtNDAxYS04OGYwLTEyY2FkOTE1YTM2MiZvcz1XaW5kb3dzJmxhbmd1YWdlPWVuLVVTJm9mZmVyX3VybD1odHRwczovL21vbmV5bG9vdC5vbmxpbmUvMjY1ND9sZWFkX2lkPWIyZWRiODg3LTU5M2YtNDAxYS04OGYwLTEyY2FkOTE1YTM2MiZzdWIxPXtzdWIxfSZzdWIyPXtzdWIyfSZzdWIzPXtzdWIzfSZzdWI0PXtzdWI0fSZzdWI1PXtzdWI1fSZzdWI2PXtzdWI2fSZzdWI3PXtzdWI3fSZzdWI4PXtzdWI4fSZ0cmFjZV9pZD1jM2IwYTAzOS1kMjk1LTRiOWMtYTIzZi1lNDAyMWIwNGFjNTM\u0026is_webview=false\u0026pixel=\u0026fbclid=","date":"2026-08-22T06:32:18.462Z","timestamp":1787380338462,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.b-cdn.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 06 Nov 2025 00:00:00 GMT","end":"Wed, 11 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"92:9B:37:29:B4:2D:AB:EB:68:07:7B:03:B2:80:2E:5B:53:CE:AD:E7","sha256":"51:6F:86:36:A1:23:32:72:AA:0F:28:1A:81:F4:92:F8:82:35:42:13:BA:4C:21:2D:80:C5:BB:BF:19:04:1D:32"}}},"request":{"raw":"GET /icon/icon_star_black.svg HTTP/1.1\r\nHost: easy-image.b-cdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xeloris-luckyreward.click/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 22 Aug 2026 06:32:18 GMT\r\ncontent-type: image/svg+xml\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 2442763\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=0\r\ncontent-encoding: zstd\r\netag: \"67ae0046-fc\"\r\nlast-modified: Thu, 13 Feb 2025 14:23:02 GMT\r\ncdn-storageserver: SE-582\r\ncdn-fileserver: 318\r\ncdn-proxyver: 1.50\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 04/16/2026 05:28:52\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 0e3a4a32e342166d7697758dd456f389\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":252,"size_decoded":1130,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"fd7c9a36b018cd09c80d3c69bb83579b","sha1":"0b7c5758965fabcb509db70b94e2ecc62592a331","sha256":"5a29eb18c76586c2f55eedce4c2b46fa158df9148af71ade04a7934f9c5d312f","sha512":"ea7c5bd48d77a405845f935d5eaa3d373c246679f7404888b96d29ef2acfd38f64fe6fb54e75f77c6fc101f72310d6889a9d25cc95a6980dad9d7c1e7fa26f96","ssdeep":"","tlshash":"93d095752034da58cc55c651f2f75cfe6497d0db71c500c29549731170c086f4c59974","first_seen":"2024-10-12T23:01:03.367525Z","last_seen":"2026-08-22T06:32:48.767556Z","times_seen":180,"resource_available":false,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":11,"connect":1,"send":0,"wait":2,"receive":0,"ssl":21},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xeloris-luckyreward.click/c19087e6-c1b9-4946-a21f-45b8103dde60/en/js/uaParser.js","fqdn":"xeloris-luckyreward.click","domain":"xeloris-luckyreward.click","tld":"click"},"ip":{"addr":"172.67.174.191","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xeloris-luckyreward.click/c19087e6-c1b9-4946-a21f-45b8103dde60/en/?lead_info=bGVhZF91dWlkPWIyZWRiODg3LTU5M2YtNDAxYS04OGYwLTEyY2FkOTE1YTM2MiZvcz1XaW5kb3dzJmxhbmd1YWdlPWVuLVVTJm9mZmVyX3VybD1odHRwczovL21vbmV5bG9vdC5vbmxpbmUvMjY1ND9sZWFkX2lkPWIyZWRiODg3LTU5M2YtNDAxYS04OGYwLTEyY2FkOTE1YTM2MiZzdWIxPXtzdWIxfSZzdWIyPXtzdWIyfSZzdWIzPXtzdWIzfSZzdWI0PXtzdWI0fSZzdWI1PXtzdWI1fSZzdWI2PXtzdWI2fSZzdWI3PXtzdWI3fSZzdWI4PXtzdWI4fSZ0cmFjZV9pZD1jM2IwYTAzOS1kMjk1LTRiOWMtYTIzZi1lNDAyMWIwNGFjNTM\u0026is_webview=false\u0026pixel=\u0026fbclid=","date":"2026-08-22T06:32:18.438Z","timestamp":1787380338438,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xeloris-luckyreward.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 20 Aug 2026 19:24:52 GMT","end":"Wed, 18 Nov 2026 20:23:24 GMT"},"fingerprint":{"sha1":"A1:AA:F5:8E:D6:B5:05:C7:2C:20:02:6A:E0:0B:D0:F3:41:1E:ED:C3","sha256":"EE:D6:F5:6C:A9:E9:8D:96:F7:FE:1A:66:D7:D0:03:16:50:B1:7A:AC:62:DB:AB:1B:C9:E2:E0:63:DA:AD:D2:A3"}}},"request":{"raw":"GET /c19087e6-c1b9-4946-a21f-45b8103dde60/en/js/uaParser.js HTTP/1.1\r\nHost: xeloris-luckyreward.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xeloris-luckyreward.click/c19087e6-c1b9-4946-a21f-45b8103dde60/en/?lead_info=bGVhZF91dWlkPWIyZWRiODg3LTU5M2YtNDAxYS04OGYwLTEyY2FkOTE1YTM2MiZvcz1XaW5kb3dzJmxhbmd1YWdlPWVuLVVTJm9mZmVyX3VybD1odHRwczovL21vbmV5bG9vdC5vbmxpbmUvMjY1ND9sZWFkX2lkPWIyZWRiODg3LTU5M2YtNDAxYS04OGYwLTEyY2FkOTE1YTM2MiZzdWIxPXtzdWIxfSZzdWIyPXtzdWIyfSZzdWIzPXtzdWIzfSZzdWI0PXtzdWI0fSZzdWI1PXtzdWI1fSZzdWI2PXtzdWI2fSZzdWI3PXtzdWI3fSZzdWI4PXtzdWI4fSZ0cmFjZV9pZD1jM2IwYTAzOS1kMjk1LTRiOWMtYTIzZi1lNDAyMWIwNGFjNTM\u0026is_webview=false\u0026pixel=\u0026fbclid=\r\nCookie: cl_st=b\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pzPy%2FYnmqbbpcbr20bKJF9NfieUUColFv2RQtmncKD%2Bwkz%2BIoes69cKCitRI9LavR3SCf6i1MzPX8s%2BRs83EhCWakeCaIMdFHZmCvMPi%2FdwpLxXruQH0COsN6nZEjyY6OL8whPIJ%2F3eE9xra\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Sat, 22 Aug 2026 06:32:18 GMT\r\ncontent-type: application/javascript\r\ncontent-encoding: zstd\r\ncf-ray: a2efd6eb3fdb2678-OSL\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nage: 396\r\ncache-control: max-age=14400\r\netag: W/\"6a87d5cf-4bbc\"\r\nlast-modified: Fri, 21 Aug 2026 04:36:31 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19388,"size_decoded":8724,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (19275)","md5":"fae74f6b710e428ad5ca0378fc339859","sha1":"0d8f92bc5fcfb0ef72ee329f0a0763524443b5bd","sha256":"9735a83f5152c01eefe3ca9457e3b440502b60246d60f232196eb36c126f2125","sha512":"092f093612174c0f84c491a2e9ff03b4ee160ae90aa16ebd5f83e80a7c128efb6e8099629c9c88d7a330f9313a1a3d78e561d295b4fdb446dd18266fe75e46ff","ssdeep":"384:69M5d42wb/6iOD0tRqwkdZISkzVBv2ETttl9rsATHskN:69CKyzDYRqZduSAZ5tl9rsAT1","tlshash":"0b92da3ed365bf2093bee589c51790002d3a5c3adb41b0f99ae4b540e8d6db1129f7b2","first_seen":"2024-04-25T09:45:56Z","last_seen":"2026-08-22T06:32:48.768234Z","times_seen":290,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-22","alert":"Phishing Block","trigger":"xeloris-luckyreward.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xeloris-luckyreward.click/c19087e6-c1b9-4946-a21f-45b8103dde60/en/js/prompt.js","fqdn":"xeloris-luckyreward.click","domain":"xeloris-luckyreward.click","tld":"click"},"ip":{"addr":"172.67.174.191","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xeloris-luckyreward.click/c19087e6-c1b9-4946-a21f-45b8103dde60/en/?lead_info=bGVhZF91dWlkPWIyZWRiODg3LTU5M2YtNDAxYS04OGYwLTEyY2FkOTE1YTM2MiZvcz1XaW5kb3dzJmxhbmd1YWdlPWVuLVVTJm9mZmVyX3VybD1odHRwczovL21vbmV5bG9vdC5vbmxpbmUvMjY1ND9sZWFkX2lkPWIyZWRiODg3LTU5M2YtNDAxYS04OGYwLTEyY2FkOTE1YTM2MiZzdWIxPXtzdWIxfSZzdWIyPXtzdWIyfSZzdWIzPXtzdWIzfSZzdWI0PXtzdWI0fSZzdWI1PXtzdWI1fSZzdWI2PXtzdWI2fSZzdWI3PXtzdWI3fSZzdWI4PXtzdWI4fSZ0cmFjZV9pZD1jM2IwYTAzOS1kMjk1LTRiOWMtYTIzZi1lNDAyMWIwNGFjNTM\u0026is_webview=false\u0026pixel=\u0026fbclid=","date":"2026-08-22T06:32:18.442Z","timestamp":1787380338442,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xeloris-luckyreward.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 20 Aug 2026 19:24:52 GMT","end":"Wed, 18 Nov 2026 20:23:24 GMT"},"fingerprint":{"sha1":"A1:AA:F5:8E:D6:B5:05:C7:2C:20:02:6A:E0:0B:D0:F3:41:1E:ED:C3","sha256":"EE:D6:F5:6C:A9:E9:8D:96:F7:FE:1A:66:D7:D0:03:16:50:B1:7A:AC:62:DB:AB:1B:C9:E2:E0:63:DA:AD:D2:A3"}}},"request":{"raw":"GET /c19087e6-c1b9-4946-a21f-45b8103dde60/en/js/prompt.js HTTP/1.1\r\nHost: xeloris-luckyreward.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xeloris-luckyreward.click/c19087e6-c1b9-4946-a21f-45b8103dde60/en/?lead_info=bGVhZF91dWlkPWIyZWRiODg3LTU5M2YtNDAxYS04OGYwLTEyY2FkOTE1YTM2MiZvcz1XaW5kb3dzJmxhbmd1YWdlPWVuLVVTJm9mZmVyX3VybD1odHRwczovL21vbmV5bG9vdC5vbmxpbmUvMjY1ND9sZWFkX2lkPWIyZWRiODg3LTU5M2YtNDAxYS04OGYwLTEyY2FkOTE1YTM2MiZzdWIxPXtzdWIxfSZzdWIyPXtzdWIyfSZzdWIzPXtzdWIzfSZzdWI0PXtzdWI0fSZzdWI1PXtzdWI1fSZzdWI2PXtzdWI2fSZzdWI3PXtzdWI3fSZzdWI4PXtzdWI4fSZ0cmFjZV9pZD1jM2IwYTAzOS1kMjk1LTRiOWMtYTIzZi1lNDAyMWIwNGFjNTM\u0026is_webview=false\u0026pixel=\u0026fbclid=\r\nCookie: cl_st=b\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VjlNCVhy%2BI8ClWkirnGVEwu6uftIaeMC0XsfcCkDz6n69aLIgCWJEPx8x9LOo%2B5kfMB0AeL4YqymAfMRusVdQn99hbh0Ahk%2BT6xcN8u9%2Bc4ldz%2BHJ28hni3WEdPVCMVSSsNrNcOMakWTZa%2Bz\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Sat, 22 Aug 2026 06:32:18 GMT\r\ncontent-type: application/javascript\r\ncontent-encoding: zstd\r\ncf-ray: a2efd6eb3fde2678-OSL\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nage: 196\r\ncache-control: max-age=14400\r\netag: W/\"6a87d5cf-1c5\"\r\nlast-modified: Fri, 21 Aug 2026 04:36:31 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":453,"size_decoded":935,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"44ebc534ff78e60f1b65bf973fce02e0","sha1":"cf48af00a3fefee9965b4ac1b8857f4036a2a252","sha256":"ff398de885567f110214c619e2421fd329a9aa4b873f2480a953acc6cc61f898","sha512":"6bd669dab5a3c5daa5e34b892b3a7b156afea0bec86c91ae9ce6b46946300a65ea26d2fb8edf361bd89739f377457a12b5f93b07cf193be60a8e862c0bad8518","ssdeep":"","tlshash":"cdf022200baa18b1a01b336e8f1f1e84233174a72d225d203d5d4c8dcf816a842b2be7","first_seen":"2025-11-01T11:14:12.483716Z","last_seen":"2026-08-22T06:32:48.768837Z","times_seen":87,"resource_available":true,"data":null}},"time_used":66,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":66,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-22","alert":"Phishing Block","trigger":"xeloris-luckyreward.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xeloris-luckyreward.click/c19087e6-c1b9-4946-a21f-45b8103dde60/en/images/icon_zoom.svg","fqdn":"xeloris-luckyreward.click","domain":"xeloris-luckyreward.click","tld":"click"},"ip":{"addr":"172.67.174.191","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xeloris-luckyreward.click/c19087e6-c1b9-4946-a21f-45b8103dde60/en/?lead_info=bGVhZF91dWlkPWIyZWRiODg3LTU5M2YtNDAxYS04OGYwLTEyY2FkOTE1YTM2MiZvcz1XaW5kb3dzJmxhbmd1YWdlPWVuLVVTJm9mZmVyX3VybD1odHRwczovL21vbmV5bG9vdC5vbmxpbmUvMjY1ND9sZWFkX2lkPWIyZWRiODg3LTU5M2YtNDAxYS04OGYwLTEyY2FkOTE1YTM2MiZzdWIxPXtzdWIxfSZzdWIyPXtzdWIyfSZzdWIzPXtzdWIzfSZzdWI0PXtzdWI0fSZzdWI1PXtzdWI1fSZzdWI2PXtzdWI2fSZzdWI3PXtzdWI3fSZzdWI4PXtzdWI4fSZ0cmFjZV9pZD1jM2IwYTAzOS1kMjk1LTRiOWMtYTIzZi1lNDAyMWIwNGFjNTM\u0026is_webview=false\u0026pixel=\u0026fbclid=","date":"2026-08-22T06:32:18.450Z","timestamp":1787380338450,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xeloris-luckyreward.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 20 Aug 2026 19:24:52 GMT","end":"Wed, 18 Nov 2026 20:23:24 GMT"},"fingerprint":{"sha1":"A1:AA:F5:8E:D6:B5:05:C7:2C:20:02:6A:E0:0B:D0:F3:41:1E:ED:C3","sha256":"EE:D6:F5:6C:A9:E9:8D:96:F7:FE:1A:66:D7:D0:03:16:50:B1:7A:AC:62:DB:AB:1B:C9:E2:E0:63:DA:AD:D2:A3"}}},"request":{"raw":"GET /c19087e6-c1b9-4946-a21f-45b8103dde60/en/images/icon_zoom.svg HTTP/1.1\r\nHost: xeloris-luckyreward.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xeloris-luckyreward.click/c19087e6-c1b9-4946-a21f-45b8103dde60/en/?lead_info=bGVhZF91dWlkPWIyZWRiODg3LTU5M2YtNDAxYS04OGYwLTEyY2FkOTE1YTM2MiZvcz1XaW5kb3dzJmxhbmd1YWdlPWVuLVVTJm9mZmVyX3VybD1odHRwczovL21vbmV5bG9vdC5vbmxpbmUvMjY1ND9sZWFkX2lkPWIyZWRiODg3LTU5M2YtNDAxYS04OGYwLTEyY2FkOTE1YTM2MiZzdWIxPXtzdWIxfSZzdWIyPXtzdWIyfSZzdWIzPXtzdWIzfSZzdWI0PXtzdWI0fSZzdWI1PXtzdWI1fSZzdWI2PXtzdWI2fSZzdWI3PXtzdWI3fSZzdWI4PXtzdWI4fSZ0cmFjZV9pZD1jM2IwYTAzOS1kMjk1LTRiOWMtYTIzZi1lNDAyMWIwNGFjNTM\u0026is_webview=false\u0026pixel=\u0026fbclid=\r\nCookie: cl_st=b\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ppHd5%2BbvgDK40WWoInaxaCz%2FVyB%2BvOTq4%2BLPnlEvMt92yBTpW6RYLhZ2EIykZIshKug0kBQCrEiSg4G30fI9CjFR2tqA%2FWRBB0lU3M4x6eBAE0TVhUpOJcvbCbN6tzzNvJ5GQ%2BVBSuBMjNwU\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Sat, 22 Aug 2026 06:32:18 GMT\r\ncontent-type: image/svg+xml\r\ncontent-encoding: zstd\r\ncf-ray: a2efd6eb4fe32678-OSL\r\ncf-cache-status: HIT\r\npriority: u=5,i\r\nage: 396\r\ncache-control: max-age=14400\r\netag: W/\"6a87d5cf-3f2\"\r\nlast-modified: Fri, 21 Aug 2026 04:36:31 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1010,"size_decoded":1116,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"8d00e097c840d9f1d02b5d70bdd6b4c6","sha1":"324c3df851e8cc590e6bf7ca4993268012773a06","sha256":"ebd6e763c431a2c5af2d04463719b7002f112f9539e9b1b0a90269a229f50314","sha512":"6363bf519581cd82a76cb62e344f1cdffe1bf5c6753d8c555e4104cbf456201c569abc49171c296d91cb1ef6c01e195f4bac6bec5752de3acac258548345be9b","ssdeep":"","tlshash":"081178969013d7c88d434af4fc37584e8d2919bea7a4b2fa40443e9cb4df4d8d9578e0","first_seen":"2024-10-12T23:01:03.386102Z","last_seen":"2026-08-22T06:32:48.769498Z","times_seen":278,"resource_available":false,"data":null}},"time_used":55,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":55,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-22","alert":"Phishing Block","trigger":"xeloris-luckyreward.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xeloris-luckyreward.click/c19087e6-c1b9-4946-a21f-45b8103dde60/en/icon.webp?options=content","fqdn":"xeloris-luckyreward.click","domain":"xeloris-luckyreward.click","tld":"click"},"ip":{"addr":"172.67.174.191","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xeloris-luckyreward.click/c19087e6-c1b9-4946-a21f-45b8103dde60/en/?lead_info=bGVhZF91dWlkPWIyZWRiODg3LTU5M2YtNDAxYS04OGYwLTEyY2FkOTE1YTM2MiZvcz1XaW5kb3dzJmxhbmd1YWdlPWVuLVVTJm9mZmVyX3VybD1odHRwczovL21vbmV5bG9vdC5vbmxpbmUvMjY1ND9sZWFkX2lkPWIyZWRiODg3LTU5M2YtNDAxYS04OGYwLTEyY2FkOTE1YTM2MiZzdWIxPXtzdWIxfSZzdWIyPXtzdWIyfSZzdWIzPXtzdWIzfSZzdWI0PXtzdWI0fSZzdWI1PXtzdWI1fSZzdWI2PXtzdWI2fSZzdWI3PXtzdWI3fSZzdWI4PXtzdWI4fSZ0cmFjZV9pZD1jM2IwYTAzOS1kMjk1LTRiOWMtYTIzZi1lNDAyMWIwNGFjNTM\u0026is_webview=false\u0026pixel=\u0026fbclid=","date":"2026-08-22T06:32:18.452Z","timestamp":1787380338452,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xeloris-luckyreward.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 20 Aug 2026 19:24:52 GMT","end":"Wed, 18 Nov 2026 20:23:24 GMT"},"fingerprint":{"sha1":"A1:AA:F5:8E:D6:B5:05:C7:2C:20:02:6A:E0:0B:D0:F3:41:1E:ED:C3","sha256":"EE:D6:F5:6C:A9:E9:8D:96:F7:FE:1A:66:D7:D0:03:16:50:B1:7A:AC:62:DB:AB:1B:C9:E2:E0:63:DA:AD:D2:A3"}}},"request":{"raw":"GET /c19087e6-c1b9-4946-a21f-45b8103dde60/en/icon.webp?options=content HTTP/1.1\r\nHost: xeloris-luckyreward.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xeloris-luckyreward.click/c19087e6-c1b9-4946-a21f-45b8103dde60/en/?lead_info=bGVhZF91dWlkPWIyZWRiODg3LTU5M2YtNDAxYS04OGYwLTEyY2FkOTE1YTM2MiZvcz1XaW5kb3dzJmxhbmd1YWdlPWVuLVVTJm9mZmVyX3VybD1odHRwczovL21vbmV5bG9vdC5vbmxpbmUvMjY1ND9sZWFkX2lkPWIyZWRiODg3LTU5M2YtNDAxYS04OGYwLTEyY2FkOTE1YTM2MiZzdWIxPXtzdWIxfSZzdWIyPXtzdWIyfSZzdWIzPXtzdWIzfSZzdWI0PXtzdWI0fSZzdWI1PXtzdWI1fSZzdWI2PXtzdWI2fSZzdWI3PXtzdWI3fSZzdWI4PXtzdWI4fSZ0cmFjZV9pZD1jM2IwYTAzOS1kMjk1LTRiOWMtYTIzZi1lNDAyMWIwNGFjNTM\u0026is_webview=false\u0026pixel=\u0026fbclid=\r\nCookie: cl_st=b\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Sat, 22 Aug 2026 06:32:18 GMT\r\ncontent-type: image/webp\r\npriority: u=5,i\r\ncf-ray: a2efd6eb4fe52678-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 5521\r\ncache-control: max-age=14400\r\netag: \"6a87d5cf-b0fe\"\r\nlast-modified: Fri, 21 Aug 2026 04:36:31 GMT\r\nserver: cloudflare\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=esX4xArTUhfs88D4YAVb6KrOdAJ9z2NOAptzkNqrBRPkyXqdAdOuivfRYJ501jn6TNJ0AEyIayUKAevkivRh6TgOP8v2TnKPOtzMcdwofR%2BPsHMqpyDVV5RVOpgK7LyUjz85X72JjmrIjsf0\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 45310\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":45310,"size_decoded":46016,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 512x512, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"67ae970c57ca540444120ddae1e060e3","sha1":"773907337ff45bcbbafa503009631f269b4e2ad7","sha256":"fab3f5752d64db10b9d02d1ca990dc7fdbdf758fa364f30947b98bf9ed011e64","sha512":"955df0a6635a910f9e50dfbcb47780a297c652f531b17c607cc4f6acce4d9722e8e2c0207913df30b32209ea55f026362873725c692dc75ece2443c18438fa6d","ssdeep":"768:3mSvjNWLTJWyEJna8wTs8rjkdi5IYFdRB8tK6ziGToRqY+l/IYFjWvjbnkI9T:bvBWhWxJXATrodiXTbqK+FoRP+B7wvHB","tlshash":"7a13f1ced114d1c8d7c9b835f26b9592d4b3236690a6aa757aeb014f0275d3f722b801","first_seen":"2026-08-22T06:29:58.95304Z","last_seen":"2026-08-22T06:32:48.757405Z","times_seen":2,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-22","alert":"Phishing Block","trigger":"xeloris-luckyreward.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"easy-image.b-cdn.net/icon/icon_download.svg","fqdn":"easy-image.b-cdn.net","domain":"b-cdn.net","tld":"net"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xeloris-luckyreward.click/c19087e6-c1b9-4946-a21f-45b8103dde60/en/?lead_info=bGVhZF91dWlkPWIyZWRiODg3LTU5M2YtNDAxYS04OGYwLTEyY2FkOTE1YTM2MiZvcz1XaW5kb3dzJmxhbmd1YWdlPWVuLVVTJm9mZmVyX3VybD1odHRwczovL21vbmV5bG9vdC5vbmxpbmUvMjY1ND9sZWFkX2lkPWIyZWRiODg3LTU5M2YtNDAxYS04OGYwLTEyY2FkOTE1YTM2MiZzdWIxPXtzdWIxfSZzdWIyPXtzdWIyfSZzdWIzPXtzdWIzfSZzdWI0PXtzdWI0fSZzdWI1PXtzdWI1fSZzdWI2PXtzdWI2fSZzdWI3PXtzdWI3fSZzdWI4PXtzdWI4fSZ0cmFjZV9pZD1jM2IwYTAzOS1kMjk1LTRiOWMtYTIzZi1lNDAyMWIwNGFjNTM\u0026is_webview=false\u0026pixel=\u0026fbclid=","date":"2026-08-22T06:32:18.463Z","timestamp":1787380338463,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.b-cdn.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 06 Nov 2025 00:00:00 GMT","end":"Wed, 11 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"92:9B:37:29:B4:2D:AB:EB:68:07:7B:03:B2:80:2E:5B:53:CE:AD:E7","sha256":"51:6F:86:36:A1:23:32:72:AA:0F:28:1A:81:F4:92:F8:82:35:42:13:BA:4C:21:2D:80:C5:BB:BF:19:04:1D:32"}}},"request":{"raw":"GET /icon/icon_download.svg HTTP/1.1\r\nHost: easy-image.b-cdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xeloris-luckyreward.click/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 22 Aug 2026 06:32:18 GMT\r\ncontent-type: image/svg+xml\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 2442763\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=0\r\ncontent-encoding: zstd\r\netag: \"67adffaa-226\"\r\nlast-modified: Thu, 13 Feb 2025 14:20:26 GMT\r\ncdn-storageserver: SE-904\r\ncdn-fileserver: 1028\r\ncdn-proxyver: 1.50\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 04/16/2026 05:28:52\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 925370ceb66fe84b397d7fdf2f0dd551\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":550,"size_decoded":1287,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"359c897b8171e46840e87873725ca8a0","sha1":"b8dc0aa03d7e3d78ee971dfdc384730bbca08412","sha256":"1266bd734a167b46b287221ff03697cf323e198d441a3ab274fad08f35ea016e","sha512":"6d8b6a95b5de2f4d2e2e82d8f0e9c394c52dd9ad7267f9d7ec82aac4f61fb938c53deb9b5628646a6382ae996efbfda42e4e6a859872132d83f8a7ca2ac292eb","ssdeep":"","tlshash":"30f08b2470ffc5c6db08c61396e0b0ff773267c412498424f19359e921dc6c56d38599","first_seen":"2024-08-19T13:45:40.062311Z","last_seen":"2026-08-22T06:32:48.775481Z","times_seen":280,"resource_available":false,"data":null}},"time_used":244,"timings":{"blocked":-1,"dns":10,"connect":1,"send":0,"wait":10,"receive":0,"ssl":218},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xeloris-luckyreward.click/c19087e6-c1b9-4946-a21f-45b8103dde60/en/images/screen_2.webp?options=content","fqdn":"xeloris-luckyreward.click","domain":"xeloris-luckyreward.click","tld":"click"},"ip":{"addr":"172.67.174.191","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xeloris-luckyreward.click/c19087e6-c1b9-4946-a21f-45b8103dde60/en/?lead_info=bGVhZF91dWlkPWIyZWRiODg3LTU5M2YtNDAxYS04OGYwLTEyY2FkOTE1YTM2MiZvcz1XaW5kb3dzJmxhbmd1YWdlPWVuLVVTJm9mZmVyX3VybD1odHRwczovL21vbmV5bG9vdC5vbmxpbmUvMjY1ND9sZWFkX2lkPWIyZWRiODg3LTU5M2YtNDAxYS04OGYwLTEyY2FkOTE1YTM2MiZzdWIxPXtzdWIxfSZzdWIyPXtzdWIyfSZzdWIzPXtzdWIzfSZzdWI0PXtzdWI0fSZzdWI1PXtzdWI1fSZzdWI2PXtzdWI2fSZzdWI3PXtzdWI3fSZzdWI4PXtzdWI4fSZ0cmFjZV9pZD1jM2IwYTAzOS1kMjk1LTRiOWMtYTIzZi1lNDAyMWIwNGFjNTM\u0026is_webview=false\u0026pixel=\u0026fbclid=","date":"2026-08-22T06:32:18.466Z","timestamp":1787380338466,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xeloris-luckyreward.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 20 Aug 2026 19:24:52 GMT","end":"Wed, 18 Nov 2026 20:23:24 GMT"},"fingerprint":{"sha1":"A1:AA:F5:8E:D6:B5:05:C7:2C:20:02:6A:E0:0B:D0:F3:41:1E:ED:C3","sha256":"EE:D6:F5:6C:A9:E9:8D:96:F7:FE:1A:66:D7:D0:03:16:50:B1:7A:AC:62:DB:AB:1B:C9:E2:E0:63:DA:AD:D2:A3"}}},"request":{"raw":"GET /c19087e6-c1b9-4946-a21f-45b8103dde60/en/images/screen_2.webp?options=content HTTP/1.1\r\nHost: xeloris-luckyreward.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xeloris-luckyreward.click/c19087e6-c1b9-4946-a21f-45b8103dde60/en/?lead_info=bGVhZF91dWlkPWIyZWRiODg3LTU5M2YtNDAxYS04OGYwLTEyY2FkOTE1YTM2MiZvcz1XaW5kb3dzJmxhbmd1YWdlPWVuLVVTJm9mZmVyX3VybD1odHRwczovL21vbmV5bG9vdC5vbmxpbmUvMjY1ND9sZWFkX2lkPWIyZWRiODg3LTU5M2YtNDAxYS04OGYwLTEyY2FkOTE1YTM2MiZzdWIxPXtzdWIxfSZzdWIyPXtzdWIyfSZzdWIzPXtzdWIzfSZzdWI0PXtzdWI0fSZzdWI1PXtzdWI1fSZzdWI2PXtzdWI2fSZzdWI3PXtzdWI3fSZzdWI4PXtzdWI4fSZ0cmFjZV9pZD1jM2IwYTAzOS1kMjk1LTRiOWMtYTIzZi1lNDAyMWIwNGFjNTM\u0026is_webview=false\u0026pixel=\u0026fbclid=\r\nCookie: cl_st=b\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Sat, 22 Aug 2026 06:32:18 GMT\r\ncontent-type: image/webp\r\npriority: u=5,i\r\ncf-ray: a2efd6eb6fe82678-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 396\r\ncache-control: max-age=14400\r\netag: \"6a87d5cf-13120\"\r\nlast-modified: Fri, 21 Aug 2026 04:36:31 GMT\r\nserver: cloudflare\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VZ0z0fIMaErUlQl2oI%2FfRrUxZFELOkZZ7DPBZmKhE2d%2Fvk2bdUyBqZ8mjz%2Bx43d%2BsC3PwjmPFT8c1M9YGKDTqPXI76TjbuZMvL4cuPe5VRlYQNJhveqTtcqNHUk96ErQwdXRAO3Eg3HGb%2BpW\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 78112\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":78112,"size_decoded":78826,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 432x768, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"25ec312b605eeec08830cff08fc3bd17","sha1":"396ee229a9d15d63c6764952906909f9d21d0e84","sha256":"11b66eac40feffc26af077ffc751c3c15cc662b8f89cb6356095a671b24ef7a9","sha512":"a4254c52247ce156cf6c870d5216e124f96ea8bbb18431b093313c4aaa78e38832a5b3d550636aec2e49119b1c69f1f200bee38f266fc8aaf0e095d85f8bf27d","ssdeep":"1536:rddSU3I9U/aUTHImcFMK6GOufCKMuQ/WC9bgZV+KT00V643b:rdIUkUigHXcFMK6a5tQ/WCiZVBnV643b","tlshash":"a07302b2690381c6e697d123dd423786a7b67ef28c6447fd806ce866f0661707ab7cd0","first_seen":"2026-08-22T06:29:58.963254Z","last_seen":"2026-08-22T06:32:48.776318Z","times_seen":2,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-22","alert":"Phishing Block","trigger":"xeloris-luckyreward.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}}]}