{"report_id":"a01f7550-7106-47e7-b5d3-7e9e060e596c","version":6,"status":"done","tags":[],"date":"2026-03-29T15:49:16Z","url":{"schema":"https","addr":"ph.lucky-boxx.com/","fqdn":"ph.lucky-boxx.com","domain":"lucky-boxx.com","tld":"com"},"ip":{"addr":"104.21.57.254","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"ph.lucky-boxx.com/","fqdn":"ph.lucky-boxx.com","domain":"lucky-boxx.com","tld":"com"},"title":"Claim Your Reward!","dom":{"size":8043,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"cf71e927116b74641c26fe9e57527195","sha1":"890d80eed2aeb1402227e92515d6796cc824bdf8","sha256":"f913305ea8359b8af9f0e143a04a404db3575bccfb092725928f681c1a33e899","sha512":"f307200f03eda001ed0f6dab48772721f746266cb6afc441a25cc7c431de6dcebeab39f82dc438841d3faa9c97804d0a8489d134d37268949b99d3378770ec2b","ssdeep":"96:zTKhMazfNi2V8uYt/kckHDuyL0auUDyp4YzdAHj1BAT5:XKhMaTNi2VOKyUDE4GADnAT5","tlshash":"bff1360168f6e9bb3063649bf722ffc53ed84347c817899836fd54a12fa1e82465742d","dom_hash":"domhash124382603a016f20c5955f71ad75f7d9","first_seen":"2026-03-29T11:45:35.978025Z","last_seen":"2026-03-29T15:49:17.050446Z","times_seen":3,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"ph.lucky-boxx.com/","fqdn":"ph.lucky-boxx.com","domain":"lucky-boxx.com","tld":"com"},"ip":{"addr":"104.21.57.254","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-05-03T15:49:16Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-29","alert":"Sinkholed","trigger":"wow-l.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"wuytl.com","ip":{"addr":"104.21.0.254","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2022-07-04","domain_rank":0,"first_seen":"2025-09-25T19:46:22.32251Z","last_seen":"2026-03-24T03:08:27.712994Z","alert_count":0,"request_count":1,"received_data":1247,"sent_data":465,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"wow-l.com","ip":{"addr":"139.45.197.121","port":443,"asn":9002,"as":"RETN Limited","country":"United Kingdom","country_code":"GB"},"domain_registered":"2021-04-07","domain_rank":0,"first_seen":"2025-08-11T14:39:14.597614Z","last_seen":"2026-03-25T20:09:26.847908Z","alert_count":5,"request_count":5,"received_data":51602,"sent_data":2588,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"ph.lucky-boxx.com","ip":{"addr":"172.67.196.74","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-11-16","domain_rank":0,"first_seen":"2026-03-29T15:41:52.473045Z","last_seen":"2026-03-29T15:41:52.473045Z","alert_count":0,"request_count":17,"received_data":131835,"sent_data":7782,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"ph.lucky-boxx.com/","fqdn":"ph.lucky-boxx.com","domain":"lucky-boxx.com","tld":"com"},"ip":{"addr":"172.67.196.74","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"847593dd96a5201c027a6eb100d59904","sha1":"a44e0a51b35e6b45a91f0c4ed47db634a9307846","sha256":"a0ef3ac9ccc3041a6b113fb1047a9dc941e9516798b83d3f6b62bbae721db2a6","sha512":"d296bdadc52f7889f977ae847d47258f25f48f1efce2ac94d570d7777ff67e482d380f34e50e873d73ffc3dc0d25417a394d1ca3b5784223f57c4ea82382988b","ssdeep":"","tlshash":"d30126d94a138dbcc8221a3d1e1dfdd332ec32272c2060ee31ce40581ba4251aa9d19f","size":682,"data":"","first_seen":"2025-11-05T16:34:28.93175Z","last_seen":"2026-03-29T15:49:17.067375Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ph.lucky-boxx.com/","fqdn":"ph.lucky-boxx.com","domain":"lucky-boxx.com","tld":"com"},"ip":{"addr":"172.67.196.74","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"2a960808c66023e908d3155409586fe2","sha1":"c6d5a9038c2215e446790b6dad285139645df2ac","sha256":"5812b66e7385637f0824c0da24e1c835a55840f3d517c41aef07e53efae9a367","sha512":"a5ae21778773ffcd0e32a399af181380398df1cef69f2a9f6fee385f7b9b3d206cd2003c5f1e4e6a6e2cb4174da055fc6038fb6311d4287eedc60c59e1907df8","ssdeep":"","tlshash":"26f02b9c3c62b0633bf93a38c323cb6b33a2070131839a24c646cc2828608c70886d8e","size":448,"data":"","first_seen":"2025-11-05T16:34:28.932812Z","last_seen":"2026-05-04T21:28:34.160885Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ph.lucky-boxx.com/assets/scripts/common.js","fqdn":"ph.lucky-boxx.com","domain":"lucky-boxx.com","tld":"com"},"ip":{"addr":"172.67.196.74","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"8180d955526178b103e81f959c10c803","sha1":"4641a124b8e0baee50ce10514ee7ddccabd7a1ea","sha256":"8bc4ec146334256e7a23d3b6a0ead513ae632a1dfe1c21005f5f136606de7e90","sha512":"758eb388f16085bfbbe42c089c4279eba2f3b91a2477a2f5d0fcb7b527934fa9a1594d8d4d2ad721e638a16751ca41e4dfd66fcc93098f18ccdb6313aed5d7f4","ssdeep":"192:XBfyOgPTwZ4AIn4OKxU62R4RYHTJtmXgO0VixJZC+BaFhd5H/pC2:kV0Z84bK62R4RkHfdVixJNsp/pC2","tlshash":"7432f6be0620d53a05f9148fb14de762b1382b6a3c54d490716ecc28712ce8f5bb3ba9","size":11453,"data":"","first_seen":"2025-11-05T16:34:28.916625Z","last_seen":"2026-05-04T21:28:34.133331Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wow-l.com/pns.js?rhd=1\u0026btz=UTC\u0026bto=0\u0026cmeta=eyJkYXRhVmVyIjoicHJvZHVjdGlvbi1hcmNoaXZlLXYwLjAuODMiLCJsYW5kaW5nTmFtZSI6Ikx1Y2t5Qm94In0%3D\u0026zoneid=9746849\u0026z=9746849\u0026sw=.%2Fsw.js","fqdn":"wow-l.com","domain":"wow-l.com","tld":"com"},"ip":{"addr":"139.45.197.121","port":443,"asn":9002,"as":"RETN Limited","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":false,"md5":"45345f4987c538e05b9c3498942c42a5","sha1":"4e9f2f8c66ed5eefd056fedffc11728ad9e1dedd","sha256":"49f1867d92f60ebda1e70fd506b70d062a87cfb6ace6a045f2c9d6f67a4845ea","sha512":"f6637cb4d54afd02804a2d9cc12c52d0b0d5b4968b81f8b626ed186e7778b485ac691cb412f8317bdd45f49a5977f5a02068c2673a4b9ea6a9e263c48b3ed2a6","ssdeep":"768:eA0vqF6siDnENrVXCtd4LLCflW0tfm9tIsTy4+pH++frJ2dIsfwdK6+S4v2XCAkD:R0LX9mhJsHd2asIc60CpWm+6AlDk4Kgt","tlshash":"f723e7877cbab9be07d114c6883f898483baed60b41fc8d5e009699215b740673b7fb5","size":48835,"data":"","first_seen":"2026-03-29T15:49:17.061927Z","last_seen":"2026-03-29T15:49:17.061927Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"ph.lucky-boxx.com/","fqdn":"ph.lucky-boxx.com","domain":"lucky-boxx.com","tld":"com"},"ip":{"addr":"172.67.196.74","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-29T15:48:54.968Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ph.lucky-boxx.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 28 Mar 2026 13:12:40 GMT","end":"Fri, 26 Jun 2026 14:12:28 GMT"},"fingerprint":{"sha1":"9E:50:7F:11:16:41:CB:59:D3:B2:9B:45:8A:9A:93:28:A9:50:F5:47","sha256":"A2:8F:86:78:B4:7D:91:98:84:76:A8:C7:6D:1E:6D:5E:5A:B8:37:9E:4B:9B:E9:8B:40:A5:E3:23:25:26:37:55"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: ph.lucky-boxx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 29 Mar 2026 15:48:55 GMT\r\ncontent-type: text/html; charset=utf-8\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Sgz2kyBDgrXEQQAmh%2F81bOGb9sWD81X9vNtQnAnKrYkN4o722Lx29rEjRel%2B6psprdgO1jqR4yHVZ6bugEt9akjNkKq70DbhUfkj7GYJGfqll2erKsdbjiasr1D7hZimOpAl0Q%3D%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncf-ray: 9e400583dfe8b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8053,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"33e6d1d6f8659fbe2a16910793f92178","sha1":"feba0a5784b471fa11bf18d0cf7e4835ed42de8b","sha256":"15f337bc50c28f1539f6ea563c382b7e47c2b6b9a0a16b0d6a8c48eb6b074b44","sha512":"ad3017ade4b2fa7301748f3bdf7eed0176d84d7321fd06c7e6b2e54bf02464c1612983499d4253ece7925c66fdc3135f3fa4bdf17bd27b7acf9b9a2c8673e7b4","ssdeep":"96:ehMazfNi2VTuVRVXtFckHDuyLQHM3GdwHM7aBw+M:ehMaTNi2VoVnmsWwHMsw+M","tlshash":"fbf1040068f6eab7306325abe722ff857ec88387c51b499832fd54a52f91e81476706d","first_seen":"2026-03-29T11:45:35.993731Z","last_seen":"2026-03-29T15:49:17.051163Z","times_seen":3,"resource_available":false,"data":null}},"time_used":130,"timings":{"blocked":44,"dns":28,"connect":1,"send":0,"wait":38,"receive":0,"ssl":17},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ph.lucky-boxx.com/assets/styles/style.css","fqdn":"ph.lucky-boxx.com","domain":"lucky-boxx.com","tld":"com"},"ip":{"addr":"172.67.196.74","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ph.lucky-boxx.com/","date":"2026-03-29T15:48:55.321Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ph.lucky-boxx.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 28 Mar 2026 13:12:40 GMT","end":"Fri, 26 Jun 2026 14:12:28 GMT"},"fingerprint":{"sha1":"9E:50:7F:11:16:41:CB:59:D3:B2:9B:45:8A:9A:93:28:A9:50:F5:47","sha256":"A2:8F:86:78:B4:7D:91:98:84:76:A8:C7:6D:1E:6D:5E:5A:B8:37:9E:4B:9B:E9:8B:40:A5:E3:23:25:26:37:55"}}},"request":{"raw":"GET /assets/styles/style.css HTTP/1.1\r\nHost: ph.lucky-boxx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ph.lucky-boxx.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\ncontent-type: text/css; charset=utf-8\r\ncf-cache-status: REVALIDATED\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\ndate: Sun, 29 Mar 2026 15:48:55 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kmdcgIwsOJlfCQpK1WQID4M%2BKUbl7iP35h0zlsbAqvSR1xHHvxCnKUpPfk96D8UCZkNbWpy94KFA0x7NDsIGlIfDp0QyqVJCryzpKrv0zhTtX6V51tVKxuMSzmwvPUbPXYL5Jg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"939420023bf0b90f670666cb60cd247c\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9e400585ad4eb28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6937,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"224f67a64fc23e7626b897a3145e7770","sha1":"50aed4086d38749deaf902c1f626eb15d0941ac7","sha256":"d83d870ebe1c1bd998b13a83ff2abef485dc8850e897641473036aec368ab86e","sha512":"cdc6d77fbe4ebf3db0e39ee963ea504b43cc2c97b4aab8ac201afb197d791ff831b85c417e91ef24c2148d56ac7cdbf5255b04978a1c5efbbabb7c879b03b1ca","ssdeep":"192:NyemdhJTZJnaXmxM4dM46ChenCp8RIulg7:NyVvU2xjh4uuw","tlshash":"93e143584bb8aa04b46fc1a57991ebc8632c40c1de0fcd5d97f378a85e8839535a3fc9","first_seen":"2025-11-05T16:34:28.912985Z","last_seen":"2026-08-07T18:33:48.565558Z","times_seen":39,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ph.lucky-boxx.com/assets/images/cloud-right-1.webp","fqdn":"ph.lucky-boxx.com","domain":"lucky-boxx.com","tld":"com"},"ip":{"addr":"172.67.196.74","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ph.lucky-boxx.com/","date":"2026-03-29T15:48:55.329Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ph.lucky-boxx.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 28 Mar 2026 13:12:40 GMT","end":"Fri, 26 Jun 2026 14:12:28 GMT"},"fingerprint":{"sha1":"9E:50:7F:11:16:41:CB:59:D3:B2:9B:45:8A:9A:93:28:A9:50:F5:47","sha256":"A2:8F:86:78:B4:7D:91:98:84:76:A8:C7:6D:1E:6D:5E:5A:B8:37:9E:4B:9B:E9:8B:40:A5:E3:23:25:26:37:55"}}},"request":{"raw":"GET /assets/images/cloud-right-1.webp HTTP/1.1\r\nHost: ph.lucky-boxx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ph.lucky-boxx.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 3690\r\ncf-cache-status: REVALIDATED\r\ncontent-type: image/webp\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"ffb3a052c56cbf1126a112b23ad55453\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KdVI6v5jZT7zrtLAwkRUFld0tBsFP3XCzFHR8K1hlOiZHEsNfy75G%2FCloYx9tW%2Fm65M%2Brj4kcboVrE3dWzzqq8aTE8L1dbxpUJ8%2B3uqzPlYMtqXylrN%2Fu3M%2ByWeTrMd5OWdbUg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Sun, 29 Mar 2026 15:48:55 GMT\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncf-ray: 9e400585bd57b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3690,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"2416052edb8b7780d5d58d358402cc0a","sha1":"1eaff7a3df5ced62949db161da2cef401557b317","sha256":"4f78513050899ef3b46a71cf2e3f536e88a1ceb0893b96480b9d135004952c1c","sha512":"03f0a6190731d4c4ac9f28f1be1d03000ce265d25e8fe3abaae0c634f113040a20daea0d6e35d7ff470929293c0a70d1198025b6d96851c92dec0babacfa19d3","ssdeep":"","tlshash":"01716d806302776ec19016f220e81310ee56faf047d394035667a61a6fcc374cb5ccde","first_seen":"2025-09-17T22:26:52.930096Z","last_seen":"2026-08-07T18:33:48.569106Z","times_seen":57,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ph.lucky-boxx.com/assets/images/cloud-left-4.webp","fqdn":"ph.lucky-boxx.com","domain":"lucky-boxx.com","tld":"com"},"ip":{"addr":"172.67.196.74","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ph.lucky-boxx.com/","date":"2026-03-29T15:48:55.328Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ph.lucky-boxx.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 28 Mar 2026 13:12:40 GMT","end":"Fri, 26 Jun 2026 14:12:28 GMT"},"fingerprint":{"sha1":"9E:50:7F:11:16:41:CB:59:D3:B2:9B:45:8A:9A:93:28:A9:50:F5:47","sha256":"A2:8F:86:78:B4:7D:91:98:84:76:A8:C7:6D:1E:6D:5E:5A:B8:37:9E:4B:9B:E9:8B:40:A5:E3:23:25:26:37:55"}}},"request":{"raw":"GET /assets/images/cloud-left-4.webp HTTP/1.1\r\nHost: ph.lucky-boxx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ph.lucky-boxx.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 2042\r\ncf-cache-status: REVALIDATED\r\ncontent-type: image/webp\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"d98b815be4bdc4b4d9cfdbc5e2051f54\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=q4k5nTGe9ZpfkMd2owVhK1yrelPWX75Wu41HjrO2y%2F%2BqxqEcFjSpnmjj2zoRL8is4yUW367Ye1NzE0F%2FgK%2BFR%2FjH22rQfODrignO0bmDNTjJ%2FqSMQpRT0Uuwq%2FNOqI3ckqhrZw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Sun, 29 Mar 2026 15:48:55 GMT\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncf-ray: 9e400585bd56b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2042,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"adcabd6f278889f1e1c73a77d6fa6e08","sha1":"c414b093e48114f84e6c038a577857f110a30031","sha256":"3925b87d2aec26251d1e56893cd43f5fb8e5cfd30c07b90ce6a2746d60d7bb6c","sha512":"ee7f60e6bffcbd010888db6a665a26dedb28299dfb3cdbf66ccba3261e9dafd1c7d1a10f682c1f332b26b9282b3932231cc7e1f606b436020d65255f8d6061a2","ssdeep":"","tlshash":"2b411a1a5129544afa3d4b4d1b36e4e1559b0008ff079d69f4c6080de69f805df49fdc","first_seen":"2025-06-27T08:10:52.427087Z","last_seen":"2026-08-07T18:33:48.57728Z","times_seen":221,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ph.lucky-boxx.com/assets/images/hand.webp","fqdn":"ph.lucky-boxx.com","domain":"lucky-boxx.com","tld":"com"},"ip":{"addr":"172.67.196.74","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ph.lucky-boxx.com/","date":"2026-03-29T15:48:55.337Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ph.lucky-boxx.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 28 Mar 2026 13:12:40 GMT","end":"Fri, 26 Jun 2026 14:12:28 GMT"},"fingerprint":{"sha1":"9E:50:7F:11:16:41:CB:59:D3:B2:9B:45:8A:9A:93:28:A9:50:F5:47","sha256":"A2:8F:86:78:B4:7D:91:98:84:76:A8:C7:6D:1E:6D:5E:5A:B8:37:9E:4B:9B:E9:8B:40:A5:E3:23:25:26:37:55"}}},"request":{"raw":"GET /assets/images/hand.webp HTTP/1.1\r\nHost: ph.lucky-boxx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ph.lucky-boxx.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 2822\r\ncf-cache-status: REVALIDATED\r\ncontent-type: image/webp\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"56459073b8a1ef23034c3b99d018545e\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wydrttpcJ7sY%2B9m%2FcdpuQJ9m9aLrOhGcnfgUPGX0ofcyrjMi36eMb8OGThY%2FtJrZ7XuRlkSHZEWEM8tu1J7%2F9l%2FeCvlKOw%2B4bIDpPGfef0vcQn7WgyTg6B9zoVUE1cA9Ppm6DA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Sun, 29 Mar 2026 15:48:55 GMT\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncf-ray: 9e400585bd5fb28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2822,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"d97b733d27b3d23b94f366abe4949987","sha1":"2864ceb8b1e13a08f4148ee00a914a3cae8382c6","sha256":"a73037b7383c7541863999285ed16cd2001918251e4d75d4f2a5e5fdc429ae8e","sha512":"6fdfe1c40444471feed324990f371f410defca6ab2a191d430742610123304e388e1fa71556b77a3b96426af67faead5c24ad1c6c322c8c47ac4c6c182bee9e3","ssdeep":"","tlshash":"66514c2c535f7910da8eac0c77a1874f0c474ed5807b9b3c14666615a72beb908fcb52","first_seen":"2025-06-27T08:10:52.459129Z","last_seen":"2026-08-07T18:33:48.563262Z","times_seen":294,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ph.lucky-boxx.com/locales/en.json","fqdn":"ph.lucky-boxx.com","domain":"lucky-boxx.com","tld":"com"},"ip":{"addr":"172.67.196.74","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://ph.lucky-boxx.com/","date":"2026-03-29T15:48:55.392Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ph.lucky-boxx.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 28 Mar 2026 13:12:40 GMT","end":"Fri, 26 Jun 2026 14:12:28 GMT"},"fingerprint":{"sha1":"9E:50:7F:11:16:41:CB:59:D3:B2:9B:45:8A:9A:93:28:A9:50:F5:47","sha256":"A2:8F:86:78:B4:7D:91:98:84:76:A8:C7:6D:1E:6D:5E:5A:B8:37:9E:4B:9B:E9:8B:40:A5:E3:23:25:26:37:55"}}},"request":{"raw":"GET /locales/en.json HTTP/1.1\r\nHost: ph.lucky-boxx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ph.lucky-boxx.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\ncontent-type: application/json\r\ncf-cache-status: DYNAMIC\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\ndate: Sun, 29 Mar 2026 15:48:55 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bdkM8FzRPXvMV%2BJ0XlDraXXIOCWdWgObN6h3uY5sMDLpXEBTUUdmlaCSAqarwZjrfWmyMxzeNoj8OLv%2BllJXkSElRBM97jCiglUPWwU4KkmQgYLN5sYR2O25GpXCfDmJD%2B4LuQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"e80a0f2becaf73e36bf91d9ad89374cf\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9e4005863d80b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":546,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"d50f6f3b3bc77b1e580aec23099ceaa5","sha1":"931a0901bb03a6c8aeda4d1a957fd308bccb7f71","sha256":"7fe15a33a80d6a56ad770a7485f312ac94caed45c296bf93bf3ec5b6f82495aa","sha512":"257a7f94bd04de8683c50b8918a02c82056507d7a2754342c345398ac96671143ade3e880878ff63e75edb69578083646f4e1dd86e0a0697da9ed37df79cc8f1","ssdeep":"","tlshash":"0cf02b85f5514a6208f17e2252677e41a448034b0a7c38386f982dfc2b7c53f61be80f","first_seen":"2026-03-29T11:45:35.997306Z","last_seen":"2026-03-29T15:49:17.054633Z","times_seen":3,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ph.lucky-boxx.com/assets/favicon/favicon.svg","fqdn":"ph.lucky-boxx.com","domain":"lucky-boxx.com","tld":"com"},"ip":{"addr":"172.67.196.74","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ph.lucky-boxx.com/","date":"2026-03-29T15:48:55.548Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ph.lucky-boxx.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 28 Mar 2026 13:12:40 GMT","end":"Fri, 26 Jun 2026 14:12:28 GMT"},"fingerprint":{"sha1":"9E:50:7F:11:16:41:CB:59:D3:B2:9B:45:8A:9A:93:28:A9:50:F5:47","sha256":"A2:8F:86:78:B4:7D:91:98:84:76:A8:C7:6D:1E:6D:5E:5A:B8:37:9E:4B:9B:E9:8B:40:A5:E3:23:25:26:37:55"}}},"request":{"raw":"GET /assets/favicon/favicon.svg HTTP/1.1\r\nHost: ph.lucky-boxx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ph.lucky-boxx.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: accept-encoding\r\npriority: u=6,i=?0\r\ncontent-type: image/svg+xml\r\ncf-cache-status: REVALIDATED\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\ndate: Sun, 29 Mar 2026 15:48:55 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tt7alkCNf6UEdb0t%2FIzkS2eFWHnppGrwu3npP6sj7e8RbXpF6CzH6owooSXNfhUU3IPng4llVg5eUxUb2nYMWfKtAHr3VQxaa%2BNXMc7%2Bx7rVRXErw9n5Efz%2BDVEr71T1QC8mYA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"189e7334853ad622d206cc849d331f91\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9e4005872d9cb28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6268,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"85a40338dd75fbd04becc6975903601e","sha1":"ced19085c8439b0912826befa2e2d63f20fed84b","sha256":"e7aa25ab3dd669396e91f06b44da8f4ade94bfef84ef9a2b56465c5fc0b481da","sha512":"eb657ef6aebb1e7a0206dea3eaf91e60df2b72e9dda29ff609746225bff627907ad923fc128d8faca73c1ab3832231a4f9852139ac84448ccdba36bec707ee40","ssdeep":"96:FdUxsSGbFWSBPiQLftsZA9eW74+tMoLkc5mkUoWdtuGqA/W5stKraFd+f3u9lOBT:zUYW4aAWZBW74+tlP5Pro9tKr01c","tlshash":"40d19e3c982c69035e116210402cf248dc31aea10bdf768a77ac2e9d6385d4cdf238ed","first_seen":"2025-11-05T16:34:28.922471Z","last_seen":"2026-08-07T18:33:48.55466Z","times_seen":44,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ph.lucky-boxx.com/assets/scripts/common.js","fqdn":"ph.lucky-boxx.com","domain":"lucky-boxx.com","tld":"com"},"ip":{"addr":"172.67.196.74","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ph.lucky-boxx.com/","date":"2026-03-29T15:48:55.322Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ph.lucky-boxx.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 28 Mar 2026 13:12:40 GMT","end":"Fri, 26 Jun 2026 14:12:28 GMT"},"fingerprint":{"sha1":"9E:50:7F:11:16:41:CB:59:D3:B2:9B:45:8A:9A:93:28:A9:50:F5:47","sha256":"A2:8F:86:78:B4:7D:91:98:84:76:A8:C7:6D:1E:6D:5E:5A:B8:37:9E:4B:9B:E9:8B:40:A5:E3:23:25:26:37:55"}}},"request":{"raw":"GET /assets/scripts/common.js HTTP/1.1\r\nHost: ph.lucky-boxx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ph.lucky-boxx.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\ncontent-type: text/javascript; charset=utf-8\r\ncf-cache-status: REVALIDATED\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\ndate: Sun, 29 Mar 2026 15:48:55 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3ZzOpiAR%2BnVsOSzgCpFP3bJ48%2Br2hh4sFnlKOvGr5oGLTY75NAgewC50Q9%2F7I9kaJ8Wpr3xtg4Zo4ADbFDddpN6LnwruCQF9up2jiScgCYNyIYU1rFir10llHhVT4HlTaXX5ug%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"fcdc7719b5962df9f5b24dc21a49c8d5\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9e400585ad4fb28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11453,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (5829)","md5":"8180d955526178b103e81f959c10c803","sha1":"4641a124b8e0baee50ce10514ee7ddccabd7a1ea","sha256":"8bc4ec146334256e7a23d3b6a0ead513ae632a1dfe1c21005f5f136606de7e90","sha512":"758eb388f16085bfbbe42c089c4279eba2f3b91a2477a2f5d0fcb7b527934fa9a1594d8d4d2ad721e638a16751ca41e4dfd66fcc93098f18ccdb6313aed5d7f4","ssdeep":"192:XBfyOgPTwZ4AIn4OKxU62R4RYHTJtmXgO0VixJZC+BaFhd5H/pC2:kV0Z84bK62R4RkHfdVixJNsp/pC2","tlshash":"7432f6be0620d53a05f9148fb14de762b1382b6a3c54d490716ecc28712ce8f5bb3ba9","first_seen":"2025-11-05T16:34:28.916625Z","last_seen":"2026-05-04T21:28:34.133331Z","times_seen":6,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ph.lucky-boxx.com/assets/images/cloud-left-2.webp","fqdn":"ph.lucky-boxx.com","domain":"lucky-boxx.com","tld":"com"},"ip":{"addr":"172.67.196.74","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ph.lucky-boxx.com/","date":"2026-03-29T15:48:55.324Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ph.lucky-boxx.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 28 Mar 2026 13:12:40 GMT","end":"Fri, 26 Jun 2026 14:12:28 GMT"},"fingerprint":{"sha1":"9E:50:7F:11:16:41:CB:59:D3:B2:9B:45:8A:9A:93:28:A9:50:F5:47","sha256":"A2:8F:86:78:B4:7D:91:98:84:76:A8:C7:6D:1E:6D:5E:5A:B8:37:9E:4B:9B:E9:8B:40:A5:E3:23:25:26:37:55"}}},"request":{"raw":"GET /assets/images/cloud-left-2.webp HTTP/1.1\r\nHost: ph.lucky-boxx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ph.lucky-boxx.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 2268\r\ncf-cache-status: REVALIDATED\r\ncontent-type: image/webp\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"4ff812cbea69e13bb1fabc0c0bc50b04\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EXLqpJciyTLwHYoNlpw%2FiWoga0YbSU6%2B%2BWsPsjXUjMrdd5NitbbFbmoIFWGCxqouIwwziIEn7xCVWW4DWfNBZdq0bvvXBrFXm65r5Tf6jhwRfLVIDIiUkl31CQw28POKmmtg8g%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Sun, 29 Mar 2026 15:48:55 GMT\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncf-ray: 9e400585ad52b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2268,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"35e4c6e712ea741379180333c9eda6a1","sha1":"640ee747797bce5f4d45283edb5bc994bd25ff73","sha256":"3242a5bb7bf12882f4a48c286b2a23d59cfe516a8808333e8119b55c16fc92c8","sha512":"cfd9230c3e6c1fd2b0550dbfd66ee4d43debc0a73ed54da9feed7a85764faac7a84e9b79551af9e2276b83f37decc675a25659e02da7234677acd49e0d891d65","ssdeep":"","tlshash":"a841e9334b120bc7e5bd02f86c419b22d6377f410e5593af62c282275fc59d1ae0a6cc","first_seen":"2025-09-17T22:26:52.897889Z","last_seen":"2026-08-07T18:33:48.586956Z","times_seen":57,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ph.lucky-boxx.com/assets/images/cloud-left-1.webp","fqdn":"ph.lucky-boxx.com","domain":"lucky-boxx.com","tld":"com"},"ip":{"addr":"172.67.196.74","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ph.lucky-boxx.com/","date":"2026-03-29T15:48:55.323Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ph.lucky-boxx.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 28 Mar 2026 13:12:40 GMT","end":"Fri, 26 Jun 2026 14:12:28 GMT"},"fingerprint":{"sha1":"9E:50:7F:11:16:41:CB:59:D3:B2:9B:45:8A:9A:93:28:A9:50:F5:47","sha256":"A2:8F:86:78:B4:7D:91:98:84:76:A8:C7:6D:1E:6D:5E:5A:B8:37:9E:4B:9B:E9:8B:40:A5:E3:23:25:26:37:55"}}},"request":{"raw":"GET /assets/images/cloud-left-1.webp HTTP/1.1\r\nHost: ph.lucky-boxx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ph.lucky-boxx.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 2696\r\ncf-cache-status: REVALIDATED\r\ncontent-type: image/webp\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"0a525d18021e1b71dd3a1dde4c7104cd\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yFuf4ygGbPZyJKqaDu7u6XY7FMBdE4FExLAE0B67U%2FLN73tjf8zqqgEf3xd5zM7vYiorLn6a8s0NeRvjWLoqMA78Gfyhy7XNvTQQfsg7IECE4YYP9mfKSf05ErlmYr3lp%2Bf02Q%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Sun, 29 Mar 2026 15:48:55 GMT\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncf-ray: 9e400585ad51b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2696,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"1d44fd2b18f49855ac378ec502fce4c8","sha1":"ea7a361176c62cbb1d4043446f05e589c8503ee0","sha256":"610993397c2b29c04cf514cf09daa9653f55d1b446645ea82e78eff3c53890c3","sha512":"45752f1e3e7c81f2b13ad91c159ac4e79a8bd32433f2b574f7e9f02c1efb489d3eec5b4a391f659f81ea41173f2343084ff04f13c1bc9b3a9c12d95e692c649b","ssdeep":"","tlshash":"36511a39c32c5f56c04025ba1b544346db05bf211597ab666b024d459e809d2b98e1da","first_seen":"2025-09-17T22:26:52.941729Z","last_seen":"2026-08-07T18:33:48.557296Z","times_seen":57,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ph.lucky-boxx.com/assets/images/cloud-left-3.webp","fqdn":"ph.lucky-boxx.com","domain":"lucky-boxx.com","tld":"com"},"ip":{"addr":"172.67.196.74","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ph.lucky-boxx.com/","date":"2026-03-29T15:48:55.326Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ph.lucky-boxx.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 28 Mar 2026 13:12:40 GMT","end":"Fri, 26 Jun 2026 14:12:28 GMT"},"fingerprint":{"sha1":"9E:50:7F:11:16:41:CB:59:D3:B2:9B:45:8A:9A:93:28:A9:50:F5:47","sha256":"A2:8F:86:78:B4:7D:91:98:84:76:A8:C7:6D:1E:6D:5E:5A:B8:37:9E:4B:9B:E9:8B:40:A5:E3:23:25:26:37:55"}}},"request":{"raw":"GET /assets/images/cloud-left-3.webp HTTP/1.1\r\nHost: ph.lucky-boxx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ph.lucky-boxx.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 3834\r\ncf-cache-status: REVALIDATED\r\ncontent-type: image/webp\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"568b1d21bba153eeee5d6a9a7ceb97f1\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QPaJNC5ZHS0K6cgs9DOjUtxfHOkGKBcPSyqw7HD7e3utOIBTYIFSNu%2Bx8CkEABb6TYHcXLxPB7sWbji12tHIH7WeywtQL6QZBWFLm8uG7iTceGEjUxiNT%2FDkR6SkWzdh6cg5vQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Sun, 29 Mar 2026 15:48:55 GMT\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncf-ray: 9e400585bd55b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3834,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"ddc379023c0cb5feafe0420f410727fa","sha1":"39f7090fcf1b15042f427a80d1a26dc570d89da2","sha256":"81e197c469516968d7d7872e4a113179dcbc9ecea6b5a689c491369666d7f766","sha512":"e3b8d75a0894a93184ad1e91ce5f37273f4696d068a481ab2a4e7c673f12ef090681007d68be53be87e54b81853407a1096abc1401d95d0ab0612ae235704d07","ssdeep":"","tlshash":"f6816d73eb92e43cb12d204100cb387155f69414726f94f91e66f0280fd4f7978626f9","first_seen":"2025-06-27T08:10:52.488618Z","last_seen":"2026-08-07T18:33:48.558546Z","times_seen":222,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ph.lucky-boxx.com/assets/images/cloud-right-2.webp","fqdn":"ph.lucky-boxx.com","domain":"lucky-boxx.com","tld":"com"},"ip":{"addr":"172.67.196.74","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ph.lucky-boxx.com/","date":"2026-03-29T15:48:55.330Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ph.lucky-boxx.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 28 Mar 2026 13:12:40 GMT","end":"Fri, 26 Jun 2026 14:12:28 GMT"},"fingerprint":{"sha1":"9E:50:7F:11:16:41:CB:59:D3:B2:9B:45:8A:9A:93:28:A9:50:F5:47","sha256":"A2:8F:86:78:B4:7D:91:98:84:76:A8:C7:6D:1E:6D:5E:5A:B8:37:9E:4B:9B:E9:8B:40:A5:E3:23:25:26:37:55"}}},"request":{"raw":"GET /assets/images/cloud-right-2.webp HTTP/1.1\r\nHost: ph.lucky-boxx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ph.lucky-boxx.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 4738\r\ncf-cache-status: REVALIDATED\r\ncontent-type: image/webp\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"a9dcca2fc3bd53d568d8f83e5034bac3\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=e7zjFxoEHFQE6p2WOQK4CIQpnVfGwMgTBi2aVa%2FZQvID4l7UDBVV5AS%2B4%2BDjvDrZ3hOZQUHodRGnaYNt2LkBXTMkMqSJmsOMoRbPLNh0SNCUDuhh6DWVCaveLVPwLl%2BP9%2Fb%2FKQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Sun, 29 Mar 2026 15:48:55 GMT\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncf-ray: 9e400585bd59b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4738,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"ea363c4eb09396dbb86e7738437dc580","sha1":"24eefdc07cd0a817cddb40633f31e75de8f3e6c5","sha256":"898586343f351fad0511a99a06de347447c66118c3a0ba254135a804d99b362e","sha512":"eb6f111499255cc4025714847f6594b9f10ba17980dd34f25ca150729930f1a0e68723f02f16e325b92da1df6f443197ec50361a14c03a12ad73913b9d574dda","ssdeep":"96:G0zruaEmQxYIQP8lqul01fG8uUKdLpXwtDl8NnHEp:7zruRmQxfzl01DatlwtDGlw","tlshash":"88a16ca60b40d3d3cde42ab8d945670dc25979512750d3fbe70311778e452f06ebd2ad","first_seen":"2025-09-17T22:26:52.911432Z","last_seen":"2026-08-07T18:33:48.57903Z","times_seen":57,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ph.lucky-boxx.com/assets/images/cloud-right-3.webp","fqdn":"ph.lucky-boxx.com","domain":"lucky-boxx.com","tld":"com"},"ip":{"addr":"172.67.196.74","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ph.lucky-boxx.com/","date":"2026-03-29T15:48:55.331Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ph.lucky-boxx.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 28 Mar 2026 13:12:40 GMT","end":"Fri, 26 Jun 2026 14:12:28 GMT"},"fingerprint":{"sha1":"9E:50:7F:11:16:41:CB:59:D3:B2:9B:45:8A:9A:93:28:A9:50:F5:47","sha256":"A2:8F:86:78:B4:7D:91:98:84:76:A8:C7:6D:1E:6D:5E:5A:B8:37:9E:4B:9B:E9:8B:40:A5:E3:23:25:26:37:55"}}},"request":{"raw":"GET /assets/images/cloud-right-3.webp HTTP/1.1\r\nHost: ph.lucky-boxx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ph.lucky-boxx.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 1852\r\ncf-cache-status: REVALIDATED\r\ncontent-type: image/webp\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"19f013ba09937366cc0f44593342569a\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BacGw9%2BIoSCSSFfNORpV90%2Bix%2FEYc0VWCNtpOmRHVKA23nKQzGm%2F0qLrO9FyG7pHpgIxkkK%2BVZeZMTIVAiblWmrrK4%2Bu3EAc23CWSEhLxfiASq57uXu7UkAscuuAd3P5cW9rpg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Sun, 29 Mar 2026 15:48:55 GMT\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncf-ray: 9e400585bd5bb28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1852,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"c6211162e103961458f3c19bcc9a2571","sha1":"d2722f202b70ef0ef50177be3698e8876c17f176","sha256":"2f16c95955b132c9f8c6495fb5e4b7fb6988789240ddf779e022fe4458830b63","sha512":"95f94240c16e78753782d17532f8058b335d478f25867d98f55d02502edd5bc323de431c743345030528ba4b1c324c0771747f173460659dff7050bb9d1acdf7","ssdeep":"","tlshash":"153119d90db897558b28861230978d4a679900ecac81ff07288cd65b2709d9f012fa8b","first_seen":"2025-06-27T08:10:52.442966Z","last_seen":"2026-08-07T18:33:48.569978Z","times_seen":221,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ph.lucky-boxx.com/assets/images/star-five-pointed.png","fqdn":"ph.lucky-boxx.com","domain":"lucky-boxx.com","tld":"com"},"ip":{"addr":"172.67.196.74","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ph.lucky-boxx.com/","date":"2026-03-29T15:48:55.333Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ph.lucky-boxx.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 28 Mar 2026 13:12:40 GMT","end":"Fri, 26 Jun 2026 14:12:28 GMT"},"fingerprint":{"sha1":"9E:50:7F:11:16:41:CB:59:D3:B2:9B:45:8A:9A:93:28:A9:50:F5:47","sha256":"A2:8F:86:78:B4:7D:91:98:84:76:A8:C7:6D:1E:6D:5E:5A:B8:37:9E:4B:9B:E9:8B:40:A5:E3:23:25:26:37:55"}}},"request":{"raw":"GET /assets/images/star-five-pointed.png HTTP/1.1\r\nHost: ph.lucky-boxx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ph.lucky-boxx.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 2526\r\ncf-cache-status: REVALIDATED\r\ncontent-type: image/png\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"626b8fa5781ae2a3f2b16a533357c21b\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=O4AxSnyUDgAIGcZFwVSMJZrjDh0xT9D0zMhfpFWBXxwWhJ1ic9kKYxvZid8QvMQPvQBFvwB3jZe5awzt9o7KGz6uIIzpqFLY9kJ0HTqcepozFeOJ5su4DNP3uTiIjwU%2F6Ld%2BVw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Sun, 29 Mar 2026 15:48:55 GMT\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncf-ray: 9e400585bd5cb28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2526,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 50 x 50, 8-bit colormap, non-interlaced","md5":"dde25af8f6e613bcac9caba903e4decd","sha1":"703915b72fd0a9d286559058b2be94e3b02caf34","sha256":"000a7c1a533d1aa23f52a7111b162d2cf4bde64bb4420198174645ca6ffc843b","sha512":"895f129ee2e75cc92b1423a16ca12a73983ec71c2e714dc5983e2d22584356859a2f2fb4b1a2765df30fc9c5d2e53fe6f57cff6b1a62b6b9fffd3d97cd4363bd","ssdeep":"","tlshash":"64512c93edb97a5600df273d0c3a1c5f8861d6218926ad45960e6a1cbbef50b046f0ff","first_seen":"2026-03-29T11:45:35.991554Z","last_seen":"2026-05-04T21:28:34.119456Z","times_seen":5,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wuytl.com/sync-metrics","fqdn":"wuytl.com","domain":"wuytl.com","tld":"com"},"ip":{"addr":"104.21.0.254","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://ph.lucky-boxx.com/","date":"2026-03-29T15:48:55.397Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wuytl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 13 Mar 2026 12:28:36 GMT","end":"Thu, 11 Jun 2026 13:25:07 GMT"},"fingerprint":{"sha1":"32:20:1E:19:98:A5:B9:7A:6D:A4:04:5F:6B:E3:C5:16:5E:FC:2B:B6","sha256":"CA:B8:F7:EB:EF:5B:FA:6A:DB:CF:A8:F4:A5:DB:D6:D0:9C:9C:B5:B8:53:FB:91:67:C0:B0:79:92:33:77:F1:CA"}}},"request":{"raw":"POST /sync-metrics HTTP/1.1\r\nHost: wuytl.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ph.lucky-boxx.com/\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 247\r\nOrigin: https://ph.lucky-boxx.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":247,"data":"[{\"app\":\"landings-constructor\",\"event\":\"start\",\"landing_name\":\"LuckyBox\",\"data_ver\":\"production-archive-v0.0.83\",\"landing_domain\":\"ph.lucky-boxx.com\",\"current_url\":\"https://ph.lucky-boxx.com/\",\"exit_zone_id\":null,\"should_log_to_prometheus\":false}]"}},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 29 Mar 2026 15:48:55 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 16\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-trace-id: 305c5d1cad49c5d2cfd5c1b2663c9a83\r\naccept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model\r\naccess-control-allow-origin: https://ph.lucky-boxx.com\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace\r\npragma: no-cache\r\ncache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0\r\nexpires: Tue, 11 Jan 1994 10:00:00 GMT\r\ntiming-allow-origin: *\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DUeEbW%2FC0hdeq8HwTPCGPg5gYcqrnFb0Y%2BksZs%2F2qQXUcOCP%2B1upN1KNZk6rXxCHxWLSk%2BCdJxf%2Bl0TR24XzINB2OO%2BKX2vWpGPud6fUX0yvv2%2FpAkOy5363CkI%3D\"}]}\r\ncf-ray: 9e4005867cf876ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-11T18:56:41.252218Z","times_seen":17841592,"resource_available":true,"data":null}},"time_used":117,"timings":{"blocked":40,"dns":23,"connect":1,"send":0,"wait":34,"receive":0,"ssl":16},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wow-l.com/pns.js?rhd=1\u0026btz=UTC\u0026bto=0\u0026cmeta=eyJkYXRhVmVyIjoicHJvZHVjdGlvbi1hcmNoaXZlLXYwLjAuODMiLCJsYW5kaW5nTmFtZSI6Ikx1Y2t5Qm94In0%3D\u0026zoneid=9746849\u0026z=9746849\u0026sw=.%2Fsw.js","fqdn":"wow-l.com","domain":"wow-l.com","tld":"com"},"ip":{"addr":"139.45.197.121","port":443,"asn":9002,"as":"RETN Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ph.lucky-boxx.com/","date":"2026-03-29T15:48:55.398Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wow-l.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 27 Mar 2026 05:08:23 GMT","end":"Thu, 25 Jun 2026 05:08:22 GMT"},"fingerprint":{"sha1":"0A:F6:23:48:34:23:C2:BC:16:7C:DA:E7:CA:EB:FD:A4:66:E8:9C:6F","sha256":"9F:2E:7C:53:92:55:44:73:EB:4B:6D:CD:E5:DA:5A:92:DD:07:06:2C:BA:C7:6C:7B:45:6C:64:1B:EA:EC:61:42"}}},"request":{"raw":"GET /pns.js?rhd=1\u0026btz=UTC\u0026bto=0\u0026cmeta=eyJkYXRhVmVyIjoicHJvZHVjdGlvbi1hcmNoaXZlLXYwLjAuODMiLCJsYW5kaW5nTmFtZSI6Ikx1Y2t5Qm94In0%3D\u0026zoneid=9746849\u0026z=9746849\u0026sw=.%2Fsw.js HTTP/1.1\r\nHost: wow-l.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ph.lucky-boxx.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 29 Mar 2026 15:48:55 GMT\r\ncontent-type: application/javascript\r\naccept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Origin, X-Requested-With, X-Oaid, Content-Type, Accept\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":48835,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (48835), with no line terminators","md5":"45345f4987c538e05b9c3498942c42a5","sha1":"4e9f2f8c66ed5eefd056fedffc11728ad9e1dedd","sha256":"49f1867d92f60ebda1e70fd506b70d062a87cfb6ace6a045f2c9d6f67a4845ea","sha512":"f6637cb4d54afd02804a2d9cc12c52d0b0d5b4968b81f8b626ed186e7778b485ac691cb412f8317bdd45f49a5977f5a02068c2673a4b9ea6a9e263c48b3ed2a6","ssdeep":"768:eA0vqF6siDnENrVXCtd4LLCflW0tfm9tIsTy4+pH++frJ2dIsfwdK6+S4v2XCAkD:R0LX9mhJsHd2asIc60CpWm+6AlDk4Kgt","tlshash":"f723e7877cbab9be07d114c6883f898483baed60b41fc8d5e009699215b740673b7fb5","first_seen":"2026-03-29T15:49:17.061927Z","last_seen":"2026-03-29T15:49:17.061927Z","times_seen":1,"resource_available":true,"data":null}},"time_used":189,"timings":{"blocked":67,"dns":1,"connect":30,"send":0,"wait":52,"receive":0,"ssl":36},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-29","alert":"Sinkholed","trigger":"wow-l.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wow-l.com/event","fqdn":"wow-l.com","domain":"wow-l.com","tld":"com"},"ip":{"addr":"139.45.197.121","port":443,"asn":9002,"as":"RETN Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://ph.lucky-boxx.com/","date":"2026-03-29T15:48:55.703Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wow-l.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 27 Mar 2026 05:08:23 GMT","end":"Thu, 25 Jun 2026 05:08:22 GMT"},"fingerprint":{"sha1":"0A:F6:23:48:34:23:C2:BC:16:7C:DA:E7:CA:EB:FD:A4:66:E8:9C:6F","sha256":"9F:2E:7C:53:92:55:44:73:EB:4B:6D:CD:E5:DA:5A:92:DD:07:06:2C:BA:C7:6C:7B:45:6C:64:1B:EA:EC:61:42"}}},"request":{"raw":"POST /event HTTP/1.1\r\nHost: wow-l.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ph.lucky-boxx.com/\r\nContent-Type: application/json\r\nContent-Length: 353\r\nOrigin: https://ph.lucky-boxx.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":353,"data":"{\"code\":\"error_json\",\"sw_version\":\"3.1.647\",\"error_message\":\"subscrDb_get_all_subs:, message: error-obj: {}, error-msg: A mutation operation was attempted on a database that did not allow mutations., error-name: InvalidStateError, error-code: 11, error-ctx: {}\",\"error_location\":\"https://ph.lucky-boxx.com/\",\"error_stack\":\"\\\"unknown\\\"\",\"timeOrigin\":648}"}},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 29 Mar 2026 15:48:55 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 81\r\naccept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model\r\naccess-control-allow-origin: https://ph.lucky-boxx.com\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Origin, X-Requested-With, X-Oaid, Content-Type, Accept\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":81,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"a5ae14d52eeafa08f91aadf9aed95299","sha1":"456d71f550fc0d7a692095d525122596791c3964","sha256":"31d44fb7a37203345d13e8b6866232cd5521de051f71884dc446beded6c7e06c","sha512":"75af8d7d4442e58da807365e4cbc72711c2867acba32fd72a4412e7c1e64561b97239cb99104668d8d92f855ee8cf35c6524380fa227a348517063ae16450d5a","ssdeep":"","tlshash":"83a01240840c0c8cd08450040c954e1166bd442295102436dc0c3c1441082810249003","first_seen":"2026-03-29T15:49:17.062772Z","last_seen":"2026-03-29T15:49:17.062772Z","times_seen":1,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-29","alert":"Sinkholed","trigger":"wow-l.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ph.lucky-boxx.com/assets/images/treasure-chest.webp","fqdn":"ph.lucky-boxx.com","domain":"lucky-boxx.com","tld":"com"},"ip":{"addr":"172.67.196.74","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ph.lucky-boxx.com/","date":"2026-03-29T15:48:55.336Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ph.lucky-boxx.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 28 Mar 2026 13:12:40 GMT","end":"Fri, 26 Jun 2026 14:12:28 GMT"},"fingerprint":{"sha1":"9E:50:7F:11:16:41:CB:59:D3:B2:9B:45:8A:9A:93:28:A9:50:F5:47","sha256":"A2:8F:86:78:B4:7D:91:98:84:76:A8:C7:6D:1E:6D:5E:5A:B8:37:9E:4B:9B:E9:8B:40:A5:E3:23:25:26:37:55"}}},"request":{"raw":"GET /assets/images/treasure-chest.webp HTTP/1.1\r\nHost: ph.lucky-boxx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ph.lucky-boxx.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 9634\r\ncf-cache-status: REVALIDATED\r\ncontent-type: image/webp\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"761ff9d3f2b65b64c2528efc3e4caabe\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dVFzGAn0AsTRAHf%2FwsJljk5%2FZ8tyA47TXQKHAypIVieGVYoNHYvIC92uKW7Ykpec7a2D3S%2FTo7wWn2DKgScETt0Zk1GpgEsT4xEcQ7EbxY%2FjWEJemYoUg3F4MSXZCb7l2y29ig%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Sun, 29 Mar 2026 15:48:55 GMT\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncf-ray: 9e400585bd5eb28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9634,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"3c5f84142165c83ebe07b92fd915b766","sha1":"4fc740bce87038a3487c8b26dac4c74aa60c0b42","sha256":"477857618cf5ceacbca3fd2a9c4832a379367522c00c3c8c4a7dfd4c00ae154d","sha512":"972b45d54818fe0e37aa0e9f5144edba92c42e696d7860b15de5488f6345e8d1f7fc4338a710396270e64cd52e00c3f5246ad8a50d2835ee48842630a9d8841d","ssdeep":"192:QzrXoONKS80ZzKZMWjjegJpungh20//DLf85OwSYh5Nz6PdVpzQX6Fr6av+um:QzboGKoZXWjj7pggX05OhYPNz0pzc64j","tlshash":"f912afa27d8d5601c86720b5d3b87329e58efc3f4de9df1ad4414a4119068a26abd38b","first_seen":"2025-09-17T22:26:52.934914Z","last_seen":"2026-08-07T18:33:48.559672Z","times_seen":57,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ph.lucky-boxx.com/assets/images/star-four-pointed.png","fqdn":"ph.lucky-boxx.com","domain":"lucky-boxx.com","tld":"com"},"ip":{"addr":"172.67.196.74","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ph.lucky-boxx.com/","date":"2026-03-29T15:48:55.335Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ph.lucky-boxx.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 28 Mar 2026 13:12:40 GMT","end":"Fri, 26 Jun 2026 14:12:28 GMT"},"fingerprint":{"sha1":"9E:50:7F:11:16:41:CB:59:D3:B2:9B:45:8A:9A:93:28:A9:50:F5:47","sha256":"A2:8F:86:78:B4:7D:91:98:84:76:A8:C7:6D:1E:6D:5E:5A:B8:37:9E:4B:9B:E9:8B:40:A5:E3:23:25:26:37:55"}}},"request":{"raw":"GET /assets/images/star-four-pointed.png HTTP/1.1\r\nHost: ph.lucky-boxx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ph.lucky-boxx.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 2526\r\ncf-cache-status: REVALIDATED\r\ncontent-type: image/png\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"626b8fa5781ae2a3f2b16a533357c21b\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Zcy2xky4yQLpmWu13RMWlOZuM7V9z4ilZu5tUmqvw3o%2FuYZogz2mBtMwZT5rreW9b5qpZz%2FlUDI85aClu0QnsAL4QH3PldKjHD2G8BTfpgWALLmdUSm%2F4gYDVQm5tR%2BVYniD7g%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Sun, 29 Mar 2026 15:48:55 GMT\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncf-ray: 9e400585bd5db28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2526,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 50 x 50, 8-bit colormap, non-interlaced","md5":"dde25af8f6e613bcac9caba903e4decd","sha1":"703915b72fd0a9d286559058b2be94e3b02caf34","sha256":"000a7c1a533d1aa23f52a7111b162d2cf4bde64bb4420198174645ca6ffc843b","sha512":"895f129ee2e75cc92b1423a16ca12a73983ec71c2e714dc5983e2d22584356859a2f2fb4b1a2765df30fc9c5d2e53fe6f57cff6b1a62b6b9fffd3d97cd4363bd","ssdeep":"","tlshash":"64512c93edb97a5600df273d0c3a1c5f8861d6218926ad45960e6a1cbbef50b046f0ff","first_seen":"2026-03-29T11:45:35.991554Z","last_seen":"2026-05-04T21:28:34.119456Z","times_seen":5,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ph.lucky-boxx.com/assets/favicon/apple-touch-icon.png","fqdn":"ph.lucky-boxx.com","domain":"lucky-boxx.com","tld":"com"},"ip":{"addr":"172.67.196.74","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ph.lucky-boxx.com/","date":"2026-03-29T15:48:55.545Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ph.lucky-boxx.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 28 Mar 2026 13:12:40 GMT","end":"Fri, 26 Jun 2026 14:12:28 GMT"},"fingerprint":{"sha1":"9E:50:7F:11:16:41:CB:59:D3:B2:9B:45:8A:9A:93:28:A9:50:F5:47","sha256":"A2:8F:86:78:B4:7D:91:98:84:76:A8:C7:6D:1E:6D:5E:5A:B8:37:9E:4B:9B:E9:8B:40:A5:E3:23:25:26:37:55"}}},"request":{"raw":"GET /assets/favicon/apple-touch-icon.png HTTP/1.1\r\nHost: ph.lucky-boxx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ph.lucky-boxx.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 45998\r\ncf-cache-status: REVALIDATED\r\ncontent-type: image/png\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"ec15621aba8e341b874e99f87e877aeb\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XpHBReFPZPxol%2BG76VQIFyNx5sVusFv6OSuFph5IEyMDQkpGxgOi34RYnKcOVY8z%2BYTRutIX6tEsK5FyD9crzb0lsBT4UsI07GPVkRyF3PhUnaXXV%2FQgGNwunmkoOFqYrXSgvw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Sun, 29 Mar 2026 15:48:55 GMT\r\nserver: cloudflare\r\npriority: u=6,i=?0\r\ncf-ray: 9e4005872d9bb28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":45998,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 180 x 180, 8-bit/color RGBA, non-interlaced","md5":"2d5bca56b2de1ba1160582fcf62dd434","sha1":"dcadbc1651cddb6cafbef5b9e038adf645ff8f89","sha256":"c925593ada652324440e14239b92581bdd85349e004b8c3c2e67575a08d2d166","sha512":"9b792ecad10d8b284c6018f53a55ab1b0897ebca87c87be979c6bd77da126f2b6a6b92bdb80397f656e1758fc69942a814534d7810940c5c6f4d82e775ac9c61","ssdeep":"768:wJE0sDhzCcxLc0VSVus5TunEzuXnm+I/Mk5WDVn7uSNrvqFzui0FxaNkCjpuj8bl:wJE0sDEcxLjVE6n2EVn7uSNTqJuijjp/","tlshash":"a42302d5444087b4109bce5c7b95800cfb5591a6bfe21020adb7ec8f93d2aac27d4fa9","first_seen":"2025-11-05T16:34:28.927642Z","last_seen":"2026-08-07T18:33:48.57472Z","times_seen":42,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wow-l.com/event","fqdn":"wow-l.com","domain":"wow-l.com","tld":"com"},"ip":{"addr":"139.45.197.121","port":443,"asn":9002,"as":"RETN Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://ph.lucky-boxx.com/","date":"2026-03-29T15:48:55.610Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wow-l.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 27 Mar 2026 05:08:23 GMT","end":"Thu, 25 Jun 2026 05:08:22 GMT"},"fingerprint":{"sha1":"0A:F6:23:48:34:23:C2:BC:16:7C:DA:E7:CA:EB:FD:A4:66:E8:9C:6F","sha256":"9F:2E:7C:53:92:55:44:73:EB:4B:6D:CD:E5:DA:5A:92:DD:07:06:2C:BA:C7:6C:7B:45:6C:64:1B:EA:EC:61:42"}}},"request":{"raw":"OPTIONS /event HTTP/1.1\r\nHost: wow-l.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://ph.lucky-boxx.com/\r\nOrigin: https://ph.lucky-boxx.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 29 Mar 2026 15:48:55 GMT\r\ncontent-type: text/plain; charset=utf-8\r\ncontent-length: 0\r\naccess-control-allow-origin: https://ph.lucky-boxx.com\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization-Token,X-Oaid\r\naccess-control-max-age: 86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-11T18:56:41.252218Z","times_seen":17841592,"resource_available":true,"data":null}},"time_used":154,"timings":{"blocked":64,"dns":1,"connect":26,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-29","alert":"Sinkholed","trigger":"wow-l.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wow-l.com/event","fqdn":"wow-l.com","domain":"wow-l.com","tld":"com"},"ip":{"addr":"139.45.197.121","port":443,"asn":9002,"as":"RETN Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://ph.lucky-boxx.com/","date":"2026-03-29T15:48:55.608Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wow-l.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 27 Mar 2026 05:08:23 GMT","end":"Thu, 25 Jun 2026 05:08:22 GMT"},"fingerprint":{"sha1":"0A:F6:23:48:34:23:C2:BC:16:7C:DA:E7:CA:EB:FD:A4:66:E8:9C:6F","sha256":"9F:2E:7C:53:92:55:44:73:EB:4B:6D:CD:E5:DA:5A:92:DD:07:06:2C:BA:C7:6C:7B:45:6C:64:1B:EA:EC:61:42"}}},"request":{"raw":"OPTIONS /event HTTP/1.1\r\nHost: wow-l.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://ph.lucky-boxx.com/\r\nOrigin: https://ph.lucky-boxx.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 29 Mar 2026 15:48:55 GMT\r\ncontent-type: text/plain; charset=utf-8\r\ncontent-length: 0\r\naccess-control-allow-origin: https://ph.lucky-boxx.com\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization-Token,X-Oaid\r\naccess-control-max-age: 86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-11T18:56:41.252218Z","times_seen":17841592,"resource_available":true,"data":null}},"time_used":156,"timings":{"blocked":64,"dns":1,"connect":26,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-29","alert":"Sinkholed","trigger":"wow-l.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wow-l.com/event","fqdn":"wow-l.com","domain":"wow-l.com","tld":"com"},"ip":{"addr":"139.45.197.121","port":443,"asn":9002,"as":"RETN Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://ph.lucky-boxx.com/","date":"2026-03-29T15:48:55.704Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wow-l.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 27 Mar 2026 05:08:23 GMT","end":"Thu, 25 Jun 2026 05:08:22 GMT"},"fingerprint":{"sha1":"0A:F6:23:48:34:23:C2:BC:16:7C:DA:E7:CA:EB:FD:A4:66:E8:9C:6F","sha256":"9F:2E:7C:53:92:55:44:73:EB:4B:6D:CD:E5:DA:5A:92:DD:07:06:2C:BA:C7:6C:7B:45:6C:64:1B:EA:EC:61:42"}}},"request":{"raw":"POST /event HTTP/1.1\r\nHost: wow-l.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ph.lucky-boxx.com/\r\nContent-Type: application/json\r\nContent-Length: 1100\r\nOrigin: https://ph.lucky-boxx.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":1100,"data":"{\"code\":\"error_json\",\"sw_version\":\"3.1.647\",\"error_message\":\"pns_tag_push_unsupported:, message: error-obj: {}, error-msg: no-message, error-name: Error, error-code: no-code, error-ctx: {\\\"installer_type\\\":\\\"pns\\\",\\\"zone_id\\\":9746849}\",\"error_location\":\"https://ph.lucky-boxx.com/\",\"error_stack\":\"\\\"e\u003c/t[K.Yr]@https://wow-l.com/pns.js?rhd=1\u0026btz=UTC\u0026bto=0\u0026cmeta=eyJkYXRhVmVyIjoicHJvZHVjdGlvbi1hcmNoaXZlLXYwLjAuODMiLCJsYW5kaW5nTmFtZSI6Ikx1Y2t5Qm94In0%3D\u0026zoneid=9746849\u0026z=9746849\u0026sw=.%2Fsw.js:1:29011\\\\nasync*@https://wow-l.com/pns.js?rhd=1\u0026btz=UTC\u0026bto=0\u0026cmeta=eyJkYXRhVmVyIjoicHJvZHVjdGlvbi1hcmNoaXZlLXYwLjAuODMiLCJsYW5kaW5nTmFtZSI6Ikx1Y2t5Qm94In0%3D\u0026zoneid=9746849\u0026z=9746849\u0026sw=.%2Fsw.js:1:35969\\\\n@https://wow-l.com/pns.js?rhd=1\u0026btz=UTC\u0026bto=0\u0026cmeta=eyJkYXRhVmVyIjoicHJvZHVjdGlvbi1hcmNoaXZlLXYwLjAuODMiLCJsYW5kaW5nTmFtZSI6Ikx1Y2t5Qm94In0%3D\u0026zoneid=9746849\u0026z=9746849\u0026sw=.%2Fsw.js:1:36265\\\\n@https://wow-l.com/pns.js?rhd=1\u0026btz=UTC\u0026bto=0\u0026cmeta=eyJkYXRhVmVyIjoicHJvZHVjdGlvbi1hcmNoaXZlLXYwLjAuODMiLCJsYW5kaW5nTmFtZSI6Ikx1Y2t5Qm94In0%3D\u0026zoneid=9746849\u0026z=9746849\u0026sw=.%2Fsw.js:1:36268\\\\n\\\"\",\"timeOrigin\":651}"}},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 29 Mar 2026 15:48:55 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 81\r\naccept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model\r\naccess-control-allow-origin: https://ph.lucky-boxx.com\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Origin, X-Requested-With, X-Oaid, Content-Type, Accept\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":81,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"8bdc757209cbf36030e52cd237dbfb81","sha1":"45e9725b52159eb2944bc92ee6fff5bf83da0928","sha256":"d5ac0a631c776978ffe4126a30bbaef1b180a113a4e54751ebab1bfaa31075de","sha512":"31909200fe82bfb0c5b9bb390ec5842604f81a27a5cf6fa8fba3a7729d62630eba2ebd3bf6c7a01bc43a9ead05fb049a56a771eff42c758ac3f8a3e8f52191b9","ssdeep":"","tlshash":"29a02441000c0c1d00d1444cc1f0dd503c7cc313d5341051d40c3d14013c33150d7453","first_seen":"2026-03-29T15:49:17.065706Z","last_seen":"2026-03-29T15:49:17.065706Z","times_seen":1,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-29","alert":"Sinkholed","trigger":"wow-l.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}