{"report_id":"b298c154-69d2-430f-b566-c8516b461694","version":6,"status":"done","tags":[],"date":"2025-07-12T23:15:53Z","url":{"schema":"http","addr":"luck-wonder4.vercel.app/","fqdn":"luck-wonder4.vercel.app","domain":"luck-wonder4.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.131","port":0,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"luck-wonder4.vercel.app/","fqdn":"luck-wonder4.vercel.app","domain":"luck-wonder4.vercel.app","tld":"vercel.app"},"title":"OpenSea.io"},"submit":{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":""},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-09-20T23:15:53Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"luck-wonder4.vercel.app","ip":{"addr":"64.29.17.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2020-01-28","domain_rank":0,"first_seen":"2025-07-08T02:21:56.272066Z","last_seen":"2025-07-08T02:21:56.272066Z","alert_count":54,"request_count":27,"received_data":8205126,"sent_data":12511,"comment":"","tags":null,"fingerprints":null},{"fqdn":"api.ipify.org","ip":{"addr":"104.26.12.205","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2014-01-05","domain_rank":3267,"first_seen":"2014-10-06T12:38:43Z","last_seen":"2025-07-09T23:06:08.652795Z","alert_count":0,"request_count":2,"received_data":939,"sent_data":894,"comment":"","tags":null,"fingerprints":null},{"fqdn":"cdnjs.cloudflare.com","ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-02-17","domain_rank":235,"first_seen":"2012-05-23T12:49:49Z","last_seen":"2025-07-09T15:18:55.375352Z","alert_count":0,"request_count":2,"received_data":798853,"sent_data":916,"comment":"","tags":null,"fingerprints":null},{"fqdn":"bsc.drpc.org","ip":{"addr":"104.18.11.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2005-01-09","domain_rank":0,"first_seen":"2023-11-21T22:39:48Z","last_seen":"2025-07-12T13:58:40.153072Z","alert_count":0,"request_count":2,"received_data":6238,"sent_data":1033,"comment":"","tags":null,"fingerprints":null},{"fqdn":"upload.wikimedia.org","ip":{"addr":"185.15.59.240","port":443,"asn":14907,"as":"WIKIMEDIA","country":"United States","country_code":"US"},"domain_registered":"2003-03-16","domain_rank":2215,"first_seen":"2012-05-21T09:39:45Z","last_seen":"2025-07-10T12:48:12.20381Z","alert_count":0,"request_count":1,"received_data":2508,"sent_data":478,"comment":"","tags":null,"fingerprints":null},{"fqdn":"rpc.ankr.com","ip":{"addr":"216.119.155.40","port":443,"asn":13213,"as":"UK-2 Limited","country":"United States","country_code":"US"},"domain_registered":"2007-04-23","domain_rank":538448,"first_seen":"2021-10-24T12:41:06Z","last_seen":"2025-07-08T13:26:59.53162Z","alert_count":0,"request_count":2,"received_data":1363,"sent_data":1039,"comment":"","tags":null,"fingerprints":null},{"fqdn":"in.greenfields.cc","ip":{"addr":"173.208.138.101","port":443,"asn":32097,"as":"WII","country":"United States","country_code":"US"},"domain_registered":"2024-11-09","domain_rank":0,"first_seen":"2025-04-12T16:35:55.02107Z","last_seen":"2025-07-06T09:09:30.706062Z","alert_count":0,"request_count":1,"received_data":510,"sent_data":479,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":[{"sensor_name":"suricata","title":"","description":"","date":"2025-07-12T23:15:31Z","timestamp":1752362131,"ip_dst":{"addr":"104.26.12.205","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"172.18.0.15","port":37672,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO External IP Address Lookup Domain (ipify .org) in TLS SNI","source":"{\"timestamp\":\"2025-07-12T23:15:31.644237+0000\",\"flow_id\":298194958531949,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.15\",\"src_port\":37672,\"dest_ip\":\"104.26.12.205\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2047703,\"rev\":1,\"signature\":\"ET INFO External IP Address Lookup Domain (ipify .org) in TLS SNI\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"affected_product\":[\"Any\"],\"attack_target\":[\"Client_and_Server\"],\"confidence\":[\"High\"],\"created_at\":[\"2023_08_22\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Low\"],\"reviewed_at\":[\"2023_08_22\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"External_IP_Lookup\"],\"updated_at\":[\"2023_08_22\"]}},\"tls\":{\"sni\":\"api.ipify.org\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"eb1d94daa7e0344597e756a1fb6e7054\",\"string\":\"771,4865,51-43\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":5,\"bytes_toserver\":915,\"bytes_toclient\":3514,\"start\":\"2025-07-12T23:15:31.638317+0000\"}}"},{"sensor_name":"suricata","title":"","description":"","date":"2025-07-12T23:15:31Z","timestamp":1752362131,"ip_dst":{"addr":"104.26.12.205","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"172.18.0.15","port":37680,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO External IP Address Lookup Domain (ipify .org) in TLS SNI","source":"{\"timestamp\":\"2025-07-12T23:15:31.701351+0000\",\"flow_id\":1340596406152959,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.15\",\"src_port\":37680,\"dest_ip\":\"104.26.12.205\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2047703,\"rev\":1,\"signature\":\"ET INFO External IP Address Lookup Domain (ipify .org) in TLS SNI\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"affected_product\":[\"Any\"],\"attack_target\":[\"Client_and_Server\"],\"confidence\":[\"High\"],\"created_at\":[\"2023_08_22\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Low\"],\"reviewed_at\":[\"2023_08_22\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"External_IP_Lookup\"],\"updated_at\":[\"2023_08_22\"]}},\"tls\":{\"sni\":\"api.ipify.org\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"eb1d94daa7e0344597e756a1fb6e7054\",\"string\":\"771,4865,51-43\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":5,\"bytes_toserver\":789,\"bytes_toclient\":3438,\"start\":\"2025-07-12T23:15:31.683775+0000\"}}"},{"sensor_name":"suricata","title":"","description":"","date":"2025-07-12T23:15:31Z","timestamp":1752362131,"ip_dst":{"addr":"104.18.11.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"172.18.0.15","port":39360,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Smart Chain Domain in TLS SNI (bsc .drpc .org)","source":"{\"timestamp\":\"2025-07-12T23:15:31.714391+0000\",\"flow_id\":1573907619609398,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.15\",\"src_port\":39360,\"dest_ip\":\"104.18.11.59\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2058812,\"rev\":1,\"signature\":\"ET INFO Observed Smart Chain Domain in TLS SNI (bsc .drpc .org)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"affected_product\":[\"Windows_XP_Vista_7_8_10_Server_32_64_Bit\"],\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2025_01_03\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2025_01_03\"]}},\"tls\":{\"sni\":\"bsc.drpc.org\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"eb1d94daa7e0344597e756a1fb6e7054\",\"string\":\"771,4865,51-43\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":5,\"bytes_toserver\":914,\"bytes_toclient\":3509,\"start\":\"2025-07-12T23:15:31.686902+0000\"}}"},{"sensor_name":"suricata","title":"","description":"","date":"2025-07-12T23:15:31Z","timestamp":1752362131,"ip_dst":{"addr":"104.18.11.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"172.18.0.15","port":39376,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Smart Chain Domain in TLS SNI (bsc .drpc .org)","source":"{\"timestamp\":\"2025-07-12T23:15:31.734378+0000\",\"flow_id\":428036114840844,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.15\",\"src_port\":39376,\"dest_ip\":\"104.18.11.59\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2058812,\"rev\":1,\"signature\":\"ET INFO Observed Smart Chain Domain in TLS SNI (bsc .drpc .org)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"affected_product\":[\"Windows_XP_Vista_7_8_10_Server_32_64_Bit\"],\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2025_01_03\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2025_01_03\"]}},\"tls\":{\"sni\":\"bsc.drpc.org\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"eb1d94daa7e0344597e756a1fb6e7054\",\"string\":\"771,4865,51-43\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":5,\"bytes_toserver\":789,\"bytes_toclient\":3433,\"start\":\"2025-07-12T23:15:31.687372+0000\"}}"},{"sensor_name":"suricata","title":"","description":"","date":"2025-07-12T23:15:31Z","timestamp":1752362131,"ip_dst":{"addr":"216.119.155.40","port":443,"asn":13213,"as":"UK-2 Limited","country":"United States","country_code":"US"},"ip_src":{"addr":"172.18.0.15","port":42096,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Smart Chain Domain in TLS SNI (rpc .ankr .com)","source":"{\"timestamp\":\"2025-07-12T23:15:31.765658+0000\",\"flow_id\":1965428248378819,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.15\",\"src_port\":42096,\"dest_ip\":\"216.119.155.40\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2058825,\"rev\":1,\"signature\":\"ET INFO Observed Smart Chain Domain in TLS SNI (rpc .ankr .com)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"affected_product\":[\"Windows_XP_Vista_7_8_10_Server_32_64_Bit\"],\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2025_01_03\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2025_01_03\"]}},\"tls\":{\"sni\":\"rpc.ankr.com\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"15af977ce25de452b96affa2addb1036\",\"string\":\"771,4866,43-51\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":4,\"bytes_toserver\":789,\"bytes_toclient\":3028,\"start\":\"2025-07-12T23:15:31.687555+0000\"}}"},{"sensor_name":"suricata","title":"","description":"","date":"2025-07-12T23:15:31Z","timestamp":1752362131,"ip_dst":{"addr":"216.119.155.40","port":443,"asn":13213,"as":"UK-2 Limited","country":"United States","country_code":"US"},"ip_src":{"addr":"172.18.0.15","port":42094,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Smart Chain Domain in TLS SNI (rpc .ankr .com)","source":"{\"timestamp\":\"2025-07-12T23:15:31.775779+0000\",\"flow_id\":768167459912790,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.15\",\"src_port\":42094,\"dest_ip\":\"216.119.155.40\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2058825,\"rev\":1,\"signature\":\"ET INFO Observed Smart Chain Domain in TLS SNI (rpc .ankr .com)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"affected_product\":[\"Windows_XP_Vista_7_8_10_Server_32_64_Bit\"],\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2025_01_03\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2025_01_03\"]}},\"tls\":{\"sni\":\"rpc.ankr.com\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"15af977ce25de452b96affa2addb1036\",\"string\":\"771,4866,43-51\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":5,\"bytes_toserver\":789,\"bytes_toclient\":4434,\"start\":\"2025-07-12T23:15:31.687190+0000\"}}"}]}],"analyzer":[{"sensor_name":"infosec_yara","type":"yara","description":"Public InfoSec YARA rules","link":"","alerts":null},{"sensor_name":"openphish","type":"url","description":"OpenPhish","link":"","alerts":[{"sensor_name":"openphish","sensor_type":"url","title":"","description":"OpenPhish","scan_date":"2025-07-08","alert":"Crypto/Wallet","trigger":"luck-wonder4.vercel.app/","verdict":"phishing","severity":"medium","comment":"Crypto/Wallet","link":"https://openphish.com/","meta":null}]},{"sensor_name":"phishtank","type":"url","description":"PhishTank","link":"","alerts":null},{"sensor_name":"quad9","type":"domain","description":"Quad9 DNS","link":"","alerts":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-07-12","alert":"Sinkholed","trigger":"luck-wonder4.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}]},{"sensor_name":"threatfox","type":"url","description":"ThreatFox","link":"","alerts":null}],"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"luck-wonder4.vercel.app/jquery.min.js","fqdn":"luck-wonder4.vercel.app","domain":"luck-wonder4.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"2c872dbe60f4ba70fb85356113d8b35e","sha1":"ee48592d1fff952fcf06ce0b666ed4785493afdc","sha256":"fc9a93dd241f6b045cbff0481cf4e1901becd0e12fb45166a8f17f95823f0b1a","sha512":"bf6089ed4698cb8270a8b0c8ad9508ff886a7a842278e98064d5c1790ca3a36d5d69d9f047ef196882554fc104da2c88eb5395f1ee8cf0f3f6ff8869408350fe","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKr:sHNwcv9VBQpLl88SMBQ47GKr","tlshash":"3983f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","size":87533,"data":"","first_seen":"2023-08-31T16:03:19Z","last_seen":"2026-08-13T19:45:10.21121Z","times_seen":185500,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"luck-wonder4.vercel.app/10cce595-2b6e-438c-94be-2d3bd657d44e.js","fqdn":"luck-wonder4.vercel.app","domain":"luck-wonder4.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"7988263ea6f5d8c07fc48c122588bbf7","sha1":"076561ebaea8fdd7c7f3fac2f9a4418571bddd88","sha256":"c8847018c62e4bc5861b194fdb00517df0f15435c2d780716b10210621417869","sha512":"d9d5ca4330e2a4ce918573be8c6214364e3f1cbbc628a128c3b5edc06013f83b45d48c517b8fb2bc78262a8935f795116c11d55aa3d10fc5f15755e308bf59ee","ssdeep":"49152:qsd2Qtx4ibeImnYf/uvNZDh8PmYlVYk2tlgt37Qm:3xtl2t+","tlshash":"bc16b73128750096c51e0dabf2e6005ba1d79ee95a8e0bfff34ce46eb788d4158b7163","size":4174341,"data":"","first_seen":"2025-06-21T11:56:31.552562Z","last_seen":"2025-07-18T14:19:56.874114Z","times_seen":53,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"luck-wonder4.vercel.app/","fqdn":"luck-wonder4.vercel.app","domain":"luck-wonder4.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"1b6e672be4e6a70e7f12e89fcef08f18","sha1":"2516f0583a11d03c6042565739f790b8ba6c53bc","sha256":"a52a1154f89c9d12e75623d78e87bdb9c0065942f092d630caac2aa606fb3c64","sha512":"c77d825e3c0a6b1ae8b4b52e6c4ef10cd673bb5c5bdd54532520a8986c431ce1537a1022432c4bbd1af316857de608644960c6705b2e3d563d1d978c08809fa5","ssdeep":"","tlshash":"17d012671ab62d104d6f2095ffcf668c3421040776039e61bf5e8750cf35d4948265ee","size":220,"data":"","first_seen":"2024-10-07T02:32:49Z","last_seen":"2025-11-28T02:39:38.841965Z","times_seen":477,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/crypto-js/4.2.0/crypto-js.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d9c6de0df2bf028d93924aff92487904","sha1":"6596050516dd12af52d9b0e7b18ed837f1d81300","sha256":"769a555de553babc35a3338f344dd7aa16260c93cea2c7db290707c90484e7cc","sha512":"6be4940eec0dcd70efcf85eb21c5c7b827f4f3dfe2240a0de259ab5c9835f179ddb8a2ba6250c73516a5bf8c9dd4de3438a23cd2d162745faba9314a18fa1615","ssdeep":"1536:R8K6Znxmj9rlvCOhI64j7AtSPtNPU9ArHMLlk:RV6+jKOh4z","tlshash":"65535bc0629c5491a3b76480087f740b7073353b0a1d5aacf658faefacacad6907cd39","size":60819,"data":"","first_seen":"2023-11-02T21:20:28Z","last_seen":"2026-08-12T13:49:20.666272Z","times_seen":31896,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"luck-wonder4.vercel.app/","fqdn":"luck-wonder4.vercel.app","domain":"luck-wonder4.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"Function","is_inline":false,"md5":"aa049e2749b8531cb8f233c2f64fc2b2","sha1":"b611a5a62c1813ae5b4763378b3a4a565556530a","sha256":"e52e51d5897d7a179089ddcf8f5de7aeb3ef4f27b054b63e937cf308b685c9e2","sha512":"fa951f3911de780608d6235a597758320388dff58cf18dd584a6941ac88cc36cac7d52caa72b678ee6f4dff47ee23955ab282714d03e713ae2bed4cb73a3c14e","ssdeep":"","tlshash":"71a0128471d6e4004b7320e40437448490396c60348c848051048c721c651108236c1c","size":79,"data":"","first_seen":"2023-04-11T21:38:58Z","last_seen":"2026-08-13T19:46:17.556159Z","times_seen":237661,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/ethers/5.6.9/ethers.umd.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"495a10242d90ae6c8e08a5e5ae7f19f3","sha1":"7866a91e8736398df8f8f14bfb5c8ef06804bb75","sha256":"b3b24d4259d50bdacba65e8f05d8a4ac7e1919575c212c0e01aedc5e7170401a","sha512":"6289d83ed0ca8c08ead7f7b46c43120891bb3c3f940eac23c6b4e89228152e13db5e07c9d8bb4f17590c1d38a08206f56de680d2b31be2c3d2d431961ace766c","ssdeep":"","tlshash":"2a119ec078b4d042122e26fac12b74057c92dcbf83ac6090d56ddefc19b119c26d69ba","size":1000,"data":"","first_seen":"2025-04-07T11:34:31.004438Z","last_seen":"2026-06-01T09:40:57.107347Z","times_seen":1069,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"luck-wonder4.vercel.app/","fqdn":"luck-wonder4.vercel.app","domain":"luck-wonder4.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"Function","is_inline":false,"md5":"29d0c84b9d1d8da446a6062c6a840ad9","sha1":"6d6b3a6065667c7c50d92f3889c85ed65a9ad784","sha256":"3c3cbdb71d0d2c22f504f4d63d8a6ffe8d250cde7e58300619be35b6bbab26a1","sha512":"52cfcbf2f7c3521c5a6c6120099ee6822d16e04ffbc04720da925a11242c8c2050f9cfc8d864a6d39a0036ac599f701080195a29a7c5e8d3e9308b91f9f0390f","ssdeep":"","tlshash":"428004d533c350004753117c04571cc4d034447014444d405040d4531c570315115c7c","size":37,"data":"","first_seen":"2023-04-11T21:31:25Z","last_seen":"2026-08-13T19:50:24.737138Z","times_seen":742978,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"luck-wonder4.vercel.app/js/slick-1.8.1/slick/slick.html","fqdn":"luck-wonder4.vercel.app","domain":"luck-wonder4.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"","requested_by":"https://luck-wonder4.vercel.app/","date":"2025-07-12T23:15:29.811Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Tue, 24 Jun 2025 04:57:32 GMT","end":"Mon, 22 Sep 2025 04:57:31 GMT"},"fingerprint":{"sha1":"81:D3:FA:22:93:E5:25:70:85:9A:59:F7:5D:92:C4:FE:CF:35:0D:C7","sha256":"CF:7D:EA:B1:F6:D3:8D:F4:F7:DA:1F:83:F1:44:C8:1D:E2:58:46:A5:3A:AD:9E:5F:79:E0:C3:92:23:CE:2D:B7"}}},"request":{"raw":"GET /js/slick-1.8.1/slick/slick.html HTTP/1.1\r\nHost: luck-wonder4.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://luck-wonder4.vercel.app/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-type: text/plain; charset=utf-8\r\ndate: Sat, 12 Jul 2025 23:15:29 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-error: NOT_FOUND\r\nx-vercel-id: arn1::nvcct-1752362129798-81e4bb50821e\r\ncontent-length: 79\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":null,"data":{"size":79,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"2e1b8a3020f499ed63401dc317293203","sha1":"910654ae75c3d3667fe7b5267cd51aa22171b3b3","sha256":"0b87741830dcdc91c6460621bd8a4f768dc66b33513e172d34de96cb8dfa2153","sha512":"6f6542fbf68e7eb0fe873345d34235739a3fd45a0872f542ade46282eb4c88661515b0a097559a2013f095fec8bddc02f2e7dd755a1c7e51222e7f6ef4d58b5a","ssdeep":"","tlshash":"caa0240d41dc0d4c77c40404110141370c440113dd53f54003cc151071403cfd301c4c","first_seen":"2025-07-12T23:15:56.889839Z","last_seen":"2025-07-12T23:15:56.889839Z","times_seen":1,"resource_available":false,"data":null}},"time_used":174,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":173,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"openphish","sensor_type":"url","title":"","description":"OpenPhish","scan_date":"2025-07-08","alert":"Crypto/Wallet","trigger":"luck-wonder4.vercel.app/","verdict":"phishing","severity":"medium","comment":"Crypto/Wallet","link":"https://openphish.com/","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-07-12","alert":"Sinkholed","trigger":"luck-wonder4.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"luck-wonder4.vercel.app/img/boath.png","fqdn":"luck-wonder4.vercel.app","domain":"luck-wonder4.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"","requested_by":"https://luck-wonder4.vercel.app/","date":"2025-07-12T23:15:29.830Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Tue, 24 Jun 2025 04:57:32 GMT","end":"Mon, 22 Sep 2025 04:57:31 GMT"},"fingerprint":{"sha1":"81:D3:FA:22:93:E5:25:70:85:9A:59:F7:5D:92:C4:FE:CF:35:0D:C7","sha256":"CF:7D:EA:B1:F6:D3:8D:F4:F7:DA:1F:83:F1:44:C8:1D:E2:58:46:A5:3A:AD:9E:5F:79:E0:C3:92:23:CE:2D:B7"}}},"request":{"raw":"GET /img/boath.png HTTP/1.1\r\nHost: luck-wonder4.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://luck-wonder4.vercel.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 460882\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"boath.png\"\r\ncontent-type: image/png\r\ndate: Sat, 12 Jul 2025 23:15:29 GMT\r\netag: \"645b47955248afb81e536b699a90b608\"\r\nlast-modified: Mon, 07 Jul 2025 15:14:06 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::4c4ls-1752362129808-1155e98cd68a\r\ncontent-length: 40042\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":40042,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit/color RGBA, non-interlaced","md5":"645b47955248afb81e536b699a90b608","sha1":"566fbfa1c58dabc1e632b324e65b9b2789b53cc6","sha256":"a2bb13a575f2efdedd1d13360232476766b48a1eaba698dfae0d13a6f939f684","sha512":"31e5da76933bd95baf73f7558b315b3b693c7f711664fd7d0c82061107b84cbf16eb7babab5b601b28831b51469398982b901b87f7ddbc84b0c0211ed3ff926a","ssdeep":"768:AUVn2loMThPSb6WNOmTP0js8qaSh6Utsv4r2WUdCF+3c1h/:AUd2+MZuJCs8hSh6UthiWBMcv/","tlshash":"d303e017b83684411b1ef7e99cd8e69a1b678cf0d3e49ab49e9c530176312b91f9c0d3","first_seen":"2023-12-29T16:48:33Z","last_seen":"2026-08-10T20:32:07.344397Z","times_seen":1997,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"openphish","sensor_type":"url","title":"","description":"OpenPhish","scan_date":"2025-07-08","alert":"Crypto/Wallet","trigger":"luck-wonder4.vercel.app/","verdict":"phishing","severity":"medium","comment":"Crypto/Wallet","link":"https://openphish.com/","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-07-12","alert":"Sinkholed","trigger":"luck-wonder4.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"luck-wonder4.vercel.app/","fqdn":"luck-wonder4.vercel.app","domain":"luck-wonder4.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"","requested_by":"","date":"2025-07-12T23:15:29.484Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Tue, 24 Jun 2025 04:57:32 GMT","end":"Mon, 22 Sep 2025 04:57:31 GMT"},"fingerprint":{"sha1":"81:D3:FA:22:93:E5:25:70:85:9A:59:F7:5D:92:C4:FE:CF:35:0D:C7","sha256":"CF:7D:EA:B1:F6:D3:8D:F4:F7:DA:1F:83:F1:44:C8:1D:E2:58:46:A5:3A:AD:9E:5F:79:E0:C3:92:23:CE:2D:B7"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: luck-wonder4.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 460883\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline\r\ncontent-encoding: br\r\ncontent-type: text/html; charset=utf-8\r\ndate: Sat, 12 Jul 2025 23:15:29 GMT\r\netag: \"f26cf9d1033651438af13d012f53e92e\"\r\nlast-modified: Mon, 07 Jul 2025 15:14:05 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::ghdqr-1752362129517-67a8921dd4b3\r\ncontent-length: 15991\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":70941,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1611), with CRLF line terminators","md5":"f26cf9d1033651438af13d012f53e92e","sha1":"eb22b2528ee2102aa2f8c018ecce2ee88d32fc70","sha256":"069ac102d539c84e09284d7b1c072dd44a3c6fde9b8da9292470524246ecb4db","sha512":"d3c1f5abf925056428d3bc3ffc96df325ceda4b7b8270d77ef9c701c1457cd558cef3bebd8b879c34a2d8d9066c19971ae40846b578af2c7b241dfc53fb910e2","ssdeep":"768:WhXTt3XN39Z0hv6yYq7OcBCoVJG+hXTYmXNO9beJx:2t90V6yJ7OwZYBeJx","tlshash":"7063d7f997d8a2b2a132d3d4cb214965ff1710e79a42c614b3ec6f9b5fb284d8c5b840","first_seen":"2025-06-21T11:56:31.557454Z","last_seen":"2025-07-18T14:19:56.876886Z","times_seen":54,"resource_available":false,"data":null}},"time_used":104,"timings":{"blocked":31,"dns":1,"connect":1,"send":0,"wait":11,"receive":31,"ssl":26},"alerts":{"ids":null,"analyzer":[{"sensor_name":"openphish","sensor_type":"url","title":"","description":"OpenPhish","scan_date":"2025-07-08","alert":"Crypto/Wallet","trigger":"luck-wonder4.vercel.app/","verdict":"phishing","severity":"medium","comment":"Crypto/Wallet","link":"https://openphish.com","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-07-12","alert":"Sinkholed","trigger":"luck-wonder4.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"luck-wonder4.vercel.app/jquery.min.js","fqdn":"luck-wonder4.vercel.app","domain":"luck-wonder4.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"","requested_by":"https://luck-wonder4.vercel.app/","date":"2025-07-12T23:15:29.837Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Tue, 24 Jun 2025 04:57:32 GMT","end":"Mon, 22 Sep 2025 04:57:31 GMT"},"fingerprint":{"sha1":"81:D3:FA:22:93:E5:25:70:85:9A:59:F7:5D:92:C4:FE:CF:35:0D:C7","sha256":"CF:7D:EA:B1:F6:D3:8D:F4:F7:DA:1F:83:F1:44:C8:1D:E2:58:46:A5:3A:AD:9E:5F:79:E0:C3:92:23:CE:2D:B7"}}},"request":{"raw":"GET /jquery.min.js HTTP/1.1\r\nHost: luck-wonder4.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://luck-wonder4.vercel.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 314834\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"jquery.min.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Sat, 12 Jul 2025 23:15:29 GMT\r\netag: \"2c872dbe60f4ba70fb85356113d8b35e\"\r\nlast-modified: Wed, 09 Jul 2025 07:48:15 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::tcnqb-1752362129811-4abb089ca832\r\ncontent-length: 32127\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":87533,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"2c872dbe60f4ba70fb85356113d8b35e","sha1":"ee48592d1fff952fcf06ce0b666ed4785493afdc","sha256":"fc9a93dd241f6b045cbff0481cf4e1901becd0e12fb45166a8f17f95823f0b1a","sha512":"bf6089ed4698cb8270a8b0c8ad9508ff886a7a842278e98064d5c1790ca3a36d5d69d9f047ef196882554fc104da2c88eb5395f1ee8cf0f3f6ff8869408350fe","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKr:sHNwcv9VBQpLl88SMBQ47GKr","tlshash":"3983f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","first_seen":"2023-08-31T16:03:19Z","last_seen":"2026-08-13T19:45:10.21121Z","times_seen":185500,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"openphish","sensor_type":"url","title":"","description":"OpenPhish","scan_date":"2025-07-08","alert":"Crypto/Wallet","trigger":"luck-wonder4.vercel.app/","verdict":"phishing","severity":"medium","comment":"Crypto/Wallet","link":"https://openphish.com/","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-07-12","alert":"Sinkholed","trigger":"luck-wonder4.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.ipify.org/","fqdn":"api.ipify.org","domain":"ipify.org","tld":"org"},"ip":{"addr":"104.26.12.205","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://luck-wonder4.vercel.app/","date":"2025-07-12T23:15:31.649Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ipify.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Jul 2025 23:06:13 GMT","end":"Mon, 06 Oct 2025 00:05:56 GMT"},"fingerprint":{"sha1":"8A:D4:06:E3:DF:41:70:FA:F8:24:61:06:C6:AD:47:97:37:2F:30:94","sha256":"B1:0C:6E:35:A4:D2:D3:A9:97:48:58:62:89:5F:87:76:31:39:A9:9E:3E:0D:7B:F7:56:58:A6:CB:D8:05:1C:19"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: api.ipify.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://luck-wonder4.vercel.app/\r\nOrigin: https://luck-wonder4.vercel.app\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 12 Jul 2025 23:15:31 GMT\r\ncontent-type: text/plain\r\ncontent-length: 12\r\ncf-ray: 95e43e3bba34569c-OSL\r\naccess-control-allow-origin: *\r\nvary: Origin\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=2767\u0026min_rtt=461\u0026rtt_var=3583\u0026sent=10\u0026recv=13\u0026lost=0\u0026retrans=0\u0026sent_bytes=3636\u0026recv_bytes=1287\u0026delivery_rate=7264214\u0026cwnd=246\u0026unsent_bytes=0\u0026cid=47e353578fadf62b\u0026ts=274\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":12,"size_decoded":0,"mime_type":"text/plain","magic":"ASCII text, with no line terminators","md5":"35b0bce9d250429df012c0426f88d0bd","sha1":"f81d80af9cbeb0011316fbba3da8002b32251f7a","sha256":"da9add592d7eb9cca7705cb4870d7fd4e9718ccd51486c4261a727a8d566960d","sha512":"32c9df1064e730e1a2358dae62aff741118007187d89510bfbdf93efaaa7356b71a570ea8c5d96bdc0b47155bbaa77df86b6847cc4d95d2d1b7fa2a1484a7144","ssdeep":"","tlshash":"dd600003000000000c00c00cc303030303c00003c30f0000ccc00f000c003300300000","first_seen":"2023-03-07T01:19:04Z","last_seen":"2026-06-07T08:12:19.538389Z","times_seen":27001,"resource_available":true,"data":null}},"time_used":391,"timings":{"blocked":144,"dns":14,"connect":4,"send":0,"wait":124,"receive":0,"ssl":92},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"luck-wonder4.vercel.app/img/2.html","fqdn":"luck-wonder4.vercel.app","domain":"luck-wonder4.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"","requested_by":"https://luck-wonder4.vercel.app/","date":"2025-07-12T23:15:29.827Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Tue, 24 Jun 2025 04:57:32 GMT","end":"Mon, 22 Sep 2025 04:57:31 GMT"},"fingerprint":{"sha1":"81:D3:FA:22:93:E5:25:70:85:9A:59:F7:5D:92:C4:FE:CF:35:0D:C7","sha256":"CF:7D:EA:B1:F6:D3:8D:F4:F7:DA:1F:83:F1:44:C8:1D:E2:58:46:A5:3A:AD:9E:5F:79:E0:C3:92:23:CE:2D:B7"}}},"request":{"raw":"GET /img/2.html HTTP/1.1\r\nHost: luck-wonder4.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://luck-wonder4.vercel.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 460883\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"2.html\"\r\ncontent-encoding: br\r\ncontent-type: text/html; charset=utf-8\r\ndate: Sat, 12 Jul 2025 23:15:29 GMT\r\netag: \"0a27a4163254fc8fce870c8cc3a3f94f\"\r\nlast-modified: Mon, 07 Jul 2025 15:14:06 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::tcnqb-1752362129808-e8d84f0ef283\r\ncontent-length: 891\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1808,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"0a27a4163254fc8fce870c8cc3a3f94f","sha1":"f27cf04699668916346eee510eab7e5a17e83997","sha256":"b77b97fe780d35d18248abd1d2f42f444afbabe43f6abcd8fa8ebb3d47825eee","sha512":"552e388db389c5142d303ca531bbe6ec5706864a84e78b91a16e1169b45d08ac1b9b1df576055b86f3a0f9c6668fe3488e3664e191bc1978848594358a256019","ssdeep":"","tlshash":"6c31012b8b915e0ff14740113ac3b7425b59c9076207b63f3e4c9615cf8e466d1e3388","first_seen":"2023-04-05T03:09:34Z","last_seen":"2026-08-13T07:12:51.227795Z","times_seen":4800,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"openphish","sensor_type":"url","title":"","description":"OpenPhish","scan_date":"2025-07-08","alert":"Crypto/Wallet","trigger":"luck-wonder4.vercel.app/","verdict":"phishing","severity":"medium","comment":"Crypto/Wallet","link":"https://openphish.com/","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-07-12","alert":"Sinkholed","trigger":"luck-wonder4.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"luck-wonder4.vercel.app/img/3.html","fqdn":"luck-wonder4.vercel.app","domain":"luck-wonder4.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"","requested_by":"https://luck-wonder4.vercel.app/","date":"2025-07-12T23:15:30.941Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Tue, 24 Jun 2025 04:57:32 GMT","end":"Mon, 22 Sep 2025 04:57:31 GMT"},"fingerprint":{"sha1":"81:D3:FA:22:93:E5:25:70:85:9A:59:F7:5D:92:C4:FE:CF:35:0D:C7","sha256":"CF:7D:EA:B1:F6:D3:8D:F4:F7:DA:1F:83:F1:44:C8:1D:E2:58:46:A5:3A:AD:9E:5F:79:E0:C3:92:23:CE:2D:B7"}}},"request":{"raw":"GET /img/3.html HTTP/1.1\r\nHost: luck-wonder4.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://luck-wonder4.vercel.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 314834\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"3.html\"\r\ncontent-encoding: br\r\ncontent-type: text/html; charset=utf-8\r\ndate: Sat, 12 Jul 2025 23:15:30 GMT\r\netag: \"0a27a4163254fc8fce870c8cc3a3f94f\"\r\nlast-modified: Wed, 09 Jul 2025 07:48:16 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::qldk4-1752362130936-a7be36585582\r\ncontent-length: 891\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1808,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"0a27a4163254fc8fce870c8cc3a3f94f","sha1":"f27cf04699668916346eee510eab7e5a17e83997","sha256":"b77b97fe780d35d18248abd1d2f42f444afbabe43f6abcd8fa8ebb3d47825eee","sha512":"552e388db389c5142d303ca531bbe6ec5706864a84e78b91a16e1169b45d08ac1b9b1df576055b86f3a0f9c6668fe3488e3664e191bc1978848594358a256019","ssdeep":"","tlshash":"6c31012b8b915e0ff14740113ac3b7425b59c9076207b63f3e4c9615cf8e466d1e3388","first_seen":"2023-04-05T03:09:34Z","last_seen":"2026-08-13T07:12:51.227795Z","times_seen":4800,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"openphish","sensor_type":"url","title":"","description":"OpenPhish","scan_date":"2025-07-08","alert":"Crypto/Wallet","trigger":"luck-wonder4.vercel.app/","verdict":"phishing","severity":"medium","comment":"Crypto/Wallet","link":"https://openphish.com/","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-07-12","alert":"Sinkholed","trigger":"luck-wonder4.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"luck-wonder4.vercel.app/fonts/NotoSans-Medium.ttf","fqdn":"luck-wonder4.vercel.app","domain":"luck-wonder4.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"","requested_by":"https://luck-wonder4.vercel.app/","date":"2025-07-12T23:15:31.100Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Tue, 24 Jun 2025 04:57:32 GMT","end":"Mon, 22 Sep 2025 04:57:31 GMT"},"fingerprint":{"sha1":"81:D3:FA:22:93:E5:25:70:85:9A:59:F7:5D:92:C4:FE:CF:35:0D:C7","sha256":"CF:7D:EA:B1:F6:D3:8D:F4:F7:DA:1F:83:F1:44:C8:1D:E2:58:46:A5:3A:AD:9E:5F:79:E0:C3:92:23:CE:2D:B7"}}},"request":{"raw":"GET /fonts/NotoSans-Medium.ttf HTTP/1.1\r\nHost: luck-wonder4.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://luck-wonder4.vercel.app/css/fonts.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 314833\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"NotoSans-Medium.ttf\"\r\ncontent-encoding: br\r\ncontent-type: font/ttf\r\ndate: Sat, 12 Jul 2025 23:15:31 GMT\r\netag: \"f2197cc8a55ba75995cd38d00e8be599\"\r\nlast-modified: Wed, 09 Jul 2025 07:48:17 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::lsltr-1752362131095-c4bcb20966eb\r\ncontent-length: 264891\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":555264,"size_decoded":0,"mime_type":"font/ttf","magic":"TrueType Font data, 15 tables, 1st \"GDEF\", 40 names, Microsoft, language 0x409","md5":"f2197cc8a55ba75995cd38d00e8be599","sha1":"24d2fbcedc876231b51ea8c096f21883d27ece5a","sha256":"ac2c786babb3fd1603d174e6108cc222cede9b0968540a16a7b34ac454467d5e","sha512":"8651854612e80507fdd03f6f3a2a1f9ea69a48e4c1e4f2801d393b96865df7b728a0801e42eb8fd44748f263743e2df56d8524b537fb2f20aa0717ba9bd6aa44","ssdeep":"6144:OblnA0lmqPGmp1tWtupFrJL7FsZhHg1mzmmA1CoVbnKd6TYsSpmUKwbXPYL19:YFLGmFAdgKmmAEObnuQYbpmUKwTi9","tlshash":"8dc49e07e393da4ed3032df8d2a693922395fd7179bf834be6425a6af48f4c04d94294","first_seen":"2023-06-06T21:12:56Z","last_seen":"2026-08-12T11:38:11.644414Z","times_seen":2573,"resource_available":false,"data":null}},"time_used":47,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"openphish","sensor_type":"url","title":"","description":"OpenPhish","scan_date":"2025-07-08","alert":"Crypto/Wallet","trigger":"luck-wonder4.vercel.app/","verdict":"phishing","severity":"medium","comment":"Crypto/Wallet","link":"https://openphish.com/","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-07-12","alert":"Sinkholed","trigger":"luck-wonder4.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/ethers/5.6.9/ethers.umd.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://luck-wonder4.vercel.app/","date":"2025-07-12T23:15:31.279Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 22 May 2025 14:38:44 GMT","end":"Wed, 20 Aug 2025 15:38:38 GMT"},"fingerprint":{"sha1":"4B:06:E9:E2:47:47:F5:3C:33:58:F8:2A:95:70:22:5E:23:19:03:77","sha256":"92:B0:F4:51:5C:E9:3A:03:19:F4:50:36:49:FA:A1:01:1D:F0:A1:91:F7:A3:53:E6:19:AA:C4:FA:3D:C4:31:6E"}}},"request":{"raw":"GET /ajax/libs/ethers/5.6.9/ethers.umd.min.js HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://luck-wonder4.vercel.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 12 Jul 2025 23:15:31 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 125841\r\ncf-ray: 95e43e387ba55684-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"62ad87d5-1eb91\"\r\nlast-modified: Sat, 18 Jun 2022 08:07:49 GMT\r\ncf-cdnjs-via: cfworker/kv\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 587828\r\nexpires: Thu, 02 Jul 2026 23:15:31 GMT\r\naccept-ranges: bytes\r\npriority: u=3,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=JdSuSfYQNR3vuyoT9dhLFwu6EFUNI%2BUv3HtDMktDff33I9%2BXu62bgy1BIo5%2FAFkImdBNTGCnDNh1EDIdO4E6OyTcADQwtQF3dV8uuCeIwwV4r69y1Zf6Oh9Ovtd%2Fj8rjXmzrLr17\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nstrict-transport-security: max-age=15780000\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":735973,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"268d19762594655239a29d058a7e8b44","sha1":"f06da2f7a68114b8dda38a0d782d65ddacc9c0e8","sha256":"95c66625ee20f53d542e23dded002b021b24e9d28c3d193a076d45cba4dc8618","sha512":"55e6b3e48536891a5ad0106b26525e4607c9ece0075ad5496535ef81d1fbb377dfb0b50286594c0aa0b405bf9e791c4696b674ea260813f4772ac7220ab82fdc","ssdeep":"12288:TfLmYQI/yjP+H8Xb29/nNUgE6te1R5WJW:TfCPalnNfE6taD","tlshash":"29f42b80b3b1b0b583c729a4143f6046f63af46a505840a8f659faf279f9d4c957bb3c","first_seen":"2023-03-07T12:58:29Z","last_seen":"2026-08-09T15:35:30.709021Z","times_seen":8490,"resource_available":true,"data":null}},"time_used":95,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":87,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bsc.drpc.org/","fqdn":"bsc.drpc.org","domain":"drpc.org","tld":"org"},"ip":{"addr":"104.18.11.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://luck-wonder4.vercel.app/","date":"2025-07-12T23:15:31.657Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"drpc.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 25 Jun 2025 11:05:37 GMT","end":"Tue, 23 Sep 2025 12:05:32 GMT"},"fingerprint":{"sha1":"EE:63:A4:E6:4E:19:32:30:4F:F9:7E:23:97:D0:25:98:D1:C9:BF:7A","sha256":"EA:5F:7C:2E:45:73:D4:0F:43:6B:96:01:B6:18:83:C6:42:53:23:E1:8E:B8:28:20:99:88:EB:2C:5F:2F:9D:3D"}}},"request":{"raw":"OPTIONS / HTTP/1.1\r\nHost: bsc.drpc.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://luck-wonder4.vercel.app/\r\nOrigin: https://luck-wonder4.vercel.app\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Sat, 12 Jul 2025 23:15:31 GMT\r\ncontent-length: 0\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, PUT, POST, DELETE, PATCH, OPTIONS\r\naccess-control-allow-headers: DNT,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization\r\naccess-control-max-age: 1728000\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\ncf-ray: 95e43e3bccf556c9-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-13T19:51:56.000454Z","times_seen":17875501,"resource_available":true,"data":null}},"time_used":369,"timings":{"blocked":148,"dns":8,"connect":1,"send":0,"wait":95,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"luck-wonder4.vercel.app/img/1.html","fqdn":"luck-wonder4.vercel.app","domain":"luck-wonder4.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"","requested_by":"https://luck-wonder4.vercel.app/","date":"2025-07-12T23:15:30.928Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Tue, 24 Jun 2025 04:57:32 GMT","end":"Mon, 22 Sep 2025 04:57:31 GMT"},"fingerprint":{"sha1":"81:D3:FA:22:93:E5:25:70:85:9A:59:F7:5D:92:C4:FE:CF:35:0D:C7","sha256":"CF:7D:EA:B1:F6:D3:8D:F4:F7:DA:1F:83:F1:44:C8:1D:E2:58:46:A5:3A:AD:9E:5F:79:E0:C3:92:23:CE:2D:B7"}}},"request":{"raw":"GET /img/1.html HTTP/1.1\r\nHost: luck-wonder4.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://luck-wonder4.vercel.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 360858\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"1.html\"\r\ncontent-encoding: br\r\ncontent-type: text/html; charset=utf-8\r\ndate: Sat, 12 Jul 2025 23:15:30 GMT\r\netag: \"0a27a4163254fc8fce870c8cc3a3f94f\"\r\nlast-modified: Tue, 08 Jul 2025 19:01:12 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::qldk4-1752362130924-34e7445894b7\r\ncontent-length: 891\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1808,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"0a27a4163254fc8fce870c8cc3a3f94f","sha1":"f27cf04699668916346eee510eab7e5a17e83997","sha256":"b77b97fe780d35d18248abd1d2f42f444afbabe43f6abcd8fa8ebb3d47825eee","sha512":"552e388db389c5142d303ca531bbe6ec5706864a84e78b91a16e1169b45d08ac1b9b1df576055b86f3a0f9c6668fe3488e3664e191bc1978848594358a256019","ssdeep":"","tlshash":"6c31012b8b915e0ff14740113ac3b7425b59c9076207b63f3e4c9615cf8e466d1e3388","first_seen":"2023-04-05T03:09:34Z","last_seen":"2026-08-13T07:12:51.227795Z","times_seen":4800,"resource_available":true,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"openphish","sensor_type":"url","title":"","description":"OpenPhish","scan_date":"2025-07-08","alert":"Crypto/Wallet","trigger":"luck-wonder4.vercel.app/","verdict":"phishing","severity":"medium","comment":"Crypto/Wallet","link":"https://openphish.com/","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-07-12","alert":"Sinkholed","trigger":"luck-wonder4.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"upload.wikimedia.org/wikipedia/commons/8/82/Telegram_logo.svg","fqdn":"upload.wikimedia.org","domain":"wikimedia.org","tld":"org"},"ip":{"addr":"185.15.59.240","port":443,"asn":14907,"as":"WIKIMEDIA","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"","requested_by":"https://luck-wonder4.vercel.app/","date":"2025-07-12T23:15:29.835Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.wikimedia.org","organization":""},"issuer":{"commonName":"E6","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Jun 2025 07:57:35 GMT","end":"Mon, 15 Sep 2025 07:57:34 GMT"},"fingerprint":{"sha1":"54:2F:E4:BE:E3:58:FD:4E:C1:90:B3:44:8E:41:6C:8C:12:0C:1B:D6","sha256":"4F:57:E1:90:0D:8B:1B:E9:2F:27:10:DE:61:15:05:12:8E:E7:F1:1C:FA:B9:51:6F:A4:10:F6:39:C1:9E:C0:63"}}},"request":{"raw":"GET /wikipedia/commons/8/82/Telegram_logo.svg HTTP/1.1\r\nHost: upload.wikimedia.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://luck-wonder4.vercel.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 12 Jul 2025 07:20:05 GMT\r\nserver: ATS/9.2.11\r\netag: W/73f9a0ede528882146ea4bfe2ae935b5\r\ncontent-type: image/svg+xml\r\nx-object-meta-sha1base36: ckbmw4v3aysu1c0t5q853cmrboncify\r\nlast-modified: Sat, 01 Jan 2022 14:16:45 GMT\r\ncontent-encoding: gzip\r\nage: 57324\r\naccept-ranges: bytes\r\nx-cache: cp3076 hit, cp3076 hit/23391\r\nx-cache-status: hit-front\r\nserver-timing: cache;desc=\"hit-front\", host;desc=\"cp3076\"\r\nstrict-transport-security: max-age=106384710; includeSubDomains; preload\r\nreport-to: { \"group\": \"wm_nel\", \"max_age\": 604800, \"endpoints\": [{ \"url\": \"https://intake-logging.wikimedia.org/v1/events?stream=w3c.reportingapi.network_error\u0026schema_uri=/w3c/reportingapi/network_error/1.0.0\" }] }\r\nnel: { \"report_to\": \"wm_nel\", \"max_age\": 604800, \"failure_fraction\": 0.05, \"success_fraction\": 0.0}\r\nx-client-ip: 91.90.42.154\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Age, Date, Content-Length, Content-Range, X-Content-Duration, X-Cache\r\ntiming-allow-origin: *\r\nset-cookie: WMF-Uniq=aac6YFVx3sTCk1l3G1L10wIuAAAAAFvdIwl-FUqPOYh6vaKcXfHTVJKHgh6fMX9n;Domain=upload.wikimedia.org;Path=/;HttpOnly;secure;SameSite=None;Expires=Sun, 12 Jul 2026 00:00:00 GMT\r\ncontent-length: 688\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1235,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"73f9a0ede528882146ea4bfe2ae935b5","sha1":"6b9013170b87afc220743bd14ace3bc5d5322f5e","sha256":"27829c103cfc0689ebf915133e6424a0a0bc1f97ddcd7e8784dd916d96f7a4d8","sha512":"9b5686c202edc6d2f1726ae0dbb56370a5b6d3febd96f8e6e99ab4c004b6eeec777e00b332adc66c1e26fc39b2bca5fafd853396d768a65c7d42f234aa3e5354","ssdeep":"","tlshash":"012132bae13f5c26e91cc7949fe4307a021d9c8db0a74274db816b4411951fbea28d50","first_seen":"2023-07-06T01:48:16Z","last_seen":"2026-08-12T12:27:29.061398Z","times_seen":1954,"resource_available":false,"data":null}},"time_used":345,"timings":{"blocked":150,"dns":2,"connect":19,"send":0,"wait":16,"receive":1,"ssl":143},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"luck-wonder4.vercel.app/js/slick-1.8.1/slick/slick.min.html","fqdn":"luck-wonder4.vercel.app","domain":"luck-wonder4.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"","requested_by":"https://luck-wonder4.vercel.app/","date":"2025-07-12T23:15:29.838Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Tue, 24 Jun 2025 04:57:32 GMT","end":"Mon, 22 Sep 2025 04:57:31 GMT"},"fingerprint":{"sha1":"81:D3:FA:22:93:E5:25:70:85:9A:59:F7:5D:92:C4:FE:CF:35:0D:C7","sha256":"CF:7D:EA:B1:F6:D3:8D:F4:F7:DA:1F:83:F1:44:C8:1D:E2:58:46:A5:3A:AD:9E:5F:79:E0:C3:92:23:CE:2D:B7"}}},"request":{"raw":"GET /js/slick-1.8.1/slick/slick.min.html HTTP/1.1\r\nHost: luck-wonder4.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://luck-wonder4.vercel.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-type: text/plain; charset=utf-8\r\ndate: Sat, 12 Jul 2025 23:15:29 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-error: NOT_FOUND\r\nx-vercel-id: arn1::zld2s-1752362129811-5c94921a8251\r\ncontent-length: 79\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":null,"data":{"size":79,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"e7ea49a7d93249eb605838d7b76d7ebe","sha1":"7f3a8cb4af016f3adf86e63d5097f159592fb49d","sha256":"68b300f5ec5e0de3a18037b30fa35b448ec630aa1a9f53347da4682adf8953ee","sha512":"bb9e32cca012e084f66a64f16f629202a8f99e947753b3d4535bb4b20c9916f9258069a1c80ffe35af9431c0976eb1575257c87972920250633a5d9184de2d6a","ssdeep":"","tlshash":"f3a0118e0ac20e883ac003002202033aa8000022bea2fa00a288b308220028fa3080ba","first_seen":"2025-07-12T23:15:56.911844Z","last_seen":"2025-07-12T23:15:56.911844Z","times_seen":1,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"openphish","sensor_type":"url","title":"","description":"OpenPhish","scan_date":"2025-07-08","alert":"Crypto/Wallet","trigger":"luck-wonder4.vercel.app/","verdict":"phishing","severity":"medium","comment":"Crypto/Wallet","link":"https://openphish.com/","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-07-12","alert":"Sinkholed","trigger":"luck-wonder4.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"luck-wonder4.vercel.app/img/2.html","fqdn":"luck-wonder4.vercel.app","domain":"luck-wonder4.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"","requested_by":"https://luck-wonder4.vercel.app/","date":"2025-07-12T23:15:30.933Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Tue, 24 Jun 2025 04:57:32 GMT","end":"Mon, 22 Sep 2025 04:57:31 GMT"},"fingerprint":{"sha1":"81:D3:FA:22:93:E5:25:70:85:9A:59:F7:5D:92:C4:FE:CF:35:0D:C7","sha256":"CF:7D:EA:B1:F6:D3:8D:F4:F7:DA:1F:83:F1:44:C8:1D:E2:58:46:A5:3A:AD:9E:5F:79:E0:C3:92:23:CE:2D:B7"}}},"request":{"raw":"GET /img/2.html HTTP/1.1\r\nHost: luck-wonder4.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://luck-wonder4.vercel.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 460884\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"2.html\"\r\ncontent-encoding: br\r\ncontent-type: text/html; charset=utf-8\r\ndate: Sat, 12 Jul 2025 23:15:30 GMT\r\netag: \"0a27a4163254fc8fce870c8cc3a3f94f\"\r\nlast-modified: Mon, 07 Jul 2025 15:14:06 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::qldk4-1752362130927-5b2802632d5b\r\ncontent-length: 891\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1808,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"0a27a4163254fc8fce870c8cc3a3f94f","sha1":"f27cf04699668916346eee510eab7e5a17e83997","sha256":"b77b97fe780d35d18248abd1d2f42f444afbabe43f6abcd8fa8ebb3d47825eee","sha512":"552e388db389c5142d303ca531bbe6ec5706864a84e78b91a16e1169b45d08ac1b9b1df576055b86f3a0f9c6668fe3488e3664e191bc1978848594358a256019","ssdeep":"","tlshash":"6c31012b8b915e0ff14740113ac3b7425b59c9076207b63f3e4c9615cf8e466d1e3388","first_seen":"2023-04-05T03:09:34Z","last_seen":"2026-08-13T07:12:51.227795Z","times_seen":4800,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"openphish","sensor_type":"url","title":"","description":"OpenPhish","scan_date":"2025-07-08","alert":"Crypto/Wallet","trigger":"luck-wonder4.vercel.app/","verdict":"phishing","severity":"medium","comment":"Crypto/Wallet","link":"https://openphish.com/","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-07-12","alert":"Sinkholed","trigger":"luck-wonder4.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"luck-wonder4.vercel.app/fonts/NotoSans-SemiBold.ttf","fqdn":"luck-wonder4.vercel.app","domain":"luck-wonder4.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"","requested_by":"https://luck-wonder4.vercel.app/","date":"2025-07-12T23:15:31.108Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Tue, 24 Jun 2025 04:57:32 GMT","end":"Mon, 22 Sep 2025 04:57:31 GMT"},"fingerprint":{"sha1":"81:D3:FA:22:93:E5:25:70:85:9A:59:F7:5D:92:C4:FE:CF:35:0D:C7","sha256":"CF:7D:EA:B1:F6:D3:8D:F4:F7:DA:1F:83:F1:44:C8:1D:E2:58:46:A5:3A:AD:9E:5F:79:E0:C3:92:23:CE:2D:B7"}}},"request":{"raw":"GET /fonts/NotoSans-SemiBold.ttf HTTP/1.1\r\nHost: luck-wonder4.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://luck-wonder4.vercel.app/css/fonts.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 460883\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"NotoSans-SemiBold.ttf\"\r\ncontent-encoding: br\r\ncontent-type: font/ttf\r\ndate: Sat, 12 Jul 2025 23:15:31 GMT\r\netag: \"63bbc52e6ef89a5b1a50f1c9c4710d1b\"\r\nlast-modified: Mon, 07 Jul 2025 15:14:07 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::vrqvt-1752362131098-a9a638b92dfd\r\ncontent-length: 265892\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":556932,"size_decoded":0,"mime_type":"font/ttf","magic":"TrueType Font data, 15 tables, 1st \"GDEF\", 40 names, Microsoft, language 0x409","md5":"63bbc52e6ef89a5b1a50f1c9c4710d1b","sha1":"b85778134956f02b1c3c20617f14ae29b4680e12","sha256":"3760806c6e1a9d312b3f884e072e6ce043e0118f624d607360b4d57993ce29a2","sha512":"3881de8bd8447464a58bfce6ebb646d260b4fbbb6a2d7015f5afd7bedeb96b2462b6fc51950f68675679385197241a885fb60fa8242f1b3e9667d5c9fd47015c","ssdeep":"6144:KYAdNuqPGmp1XWATstHEMk0QyeP5HVDHzDCfz1nfRgMqksmMiF6wS/jzyYi:KTdjGoTavkCFz1nZgMqkrP6RfU","tlshash":"95c48e07f393ea89c7032cb8c266e3a13356bd7179bf434bea815a6af45f4c04d94694","first_seen":"2023-06-17T22:17:15Z","last_seen":"2026-08-10T20:32:07.341316Z","times_seen":2523,"resource_available":false,"data":null}},"time_used":68,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":53,"receive":15,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"openphish","sensor_type":"url","title":"","description":"OpenPhish","scan_date":"2025-07-08","alert":"Crypto/Wallet","trigger":"luck-wonder4.vercel.app/","verdict":"phishing","severity":"medium","comment":"Crypto/Wallet","link":"https://openphish.com/","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-07-12","alert":"Sinkholed","trigger":"luck-wonder4.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"luck-wonder4.vercel.app/fonts/NotoSans-Bold.ttf","fqdn":"luck-wonder4.vercel.app","domain":"luck-wonder4.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"","requested_by":"https://luck-wonder4.vercel.app/","date":"2025-07-12T23:15:31.097Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Tue, 24 Jun 2025 04:57:32 GMT","end":"Mon, 22 Sep 2025 04:57:31 GMT"},"fingerprint":{"sha1":"81:D3:FA:22:93:E5:25:70:85:9A:59:F7:5D:92:C4:FE:CF:35:0D:C7","sha256":"CF:7D:EA:B1:F6:D3:8D:F4:F7:DA:1F:83:F1:44:C8:1D:E2:58:46:A5:3A:AD:9E:5F:79:E0:C3:92:23:CE:2D:B7"}}},"request":{"raw":"GET /fonts/NotoSans-Bold.ttf HTTP/1.1\r\nHost: luck-wonder4.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://luck-wonder4.vercel.app/css/fonts.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 360856\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"NotoSans-Bold.ttf\"\r\ncontent-encoding: br\r\ncontent-type: font/ttf\r\ndate: Sat, 12 Jul 2025 23:15:31 GMT\r\netag: \"8ac165243fb633296963b149f206a377\"\r\nlast-modified: Tue, 08 Jul 2025 19:01:14 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::vrqvt-1752362131092-38d2e998422b\r\ncontent-length: 258283\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":557380,"size_decoded":0,"mime_type":"font/ttf","magic":"TrueType Font data, 15 tables, 1st \"GDEF\", 38 names, Microsoft, language 0x409","md5":"8ac165243fb633296963b149f206a377","sha1":"20f80dbd99b857c66796321d3f596400d1334ca7","sha256":"5528f4642755845dfc1f7ffff10d1e3887bc9f66d19d6b3ec8ec8d7e58c94c5e","sha512":"945d82992e8690179c3a15cdcab421c7e2cc7a68a379ce9e21a64838a3180eeba6f42f8b6b64982d5af28d481dc97d806dd45b77a1c82effa3bcbf0c06b8cc47","ssdeep":"12288:UGl49NHyzW3aViwhSTjKLWOA0lPTp8tQkfOzp:Hl49NHZaViwSTuWAW/k","tlshash":"f5c48d07e397de8dd7022df8c269d3a12791bd3179bf830be6825a26f49f0d04e94694","first_seen":"2023-05-22T23:56:52Z","last_seen":"2026-08-12T11:38:11.627971Z","times_seen":2656,"resource_available":false,"data":null}},"time_used":38,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":17,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"openphish","sensor_type":"url","title":"","description":"OpenPhish","scan_date":"2025-07-08","alert":"Crypto/Wallet","trigger":"luck-wonder4.vercel.app/","verdict":"phishing","severity":"medium","comment":"Crypto/Wallet","link":"https://openphish.com/","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-07-12","alert":"Sinkholed","trigger":"luck-wonder4.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.ipify.org/","fqdn":"api.ipify.org","domain":"ipify.org","tld":"org"},"ip":{"addr":"104.26.12.205","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://luck-wonder4.vercel.app/","date":"2025-07-12T23:15:31.645Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ipify.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Jul 2025 23:06:13 GMT","end":"Mon, 06 Oct 2025 00:05:56 GMT"},"fingerprint":{"sha1":"8A:D4:06:E3:DF:41:70:FA:F8:24:61:06:C6:AD:47:97:37:2F:30:94","sha256":"B1:0C:6E:35:A4:D2:D3:A9:97:48:58:62:89:5F:87:76:31:39:A9:9E:3E:0D:7B:F7:56:58:A6:CB:D8:05:1C:19"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: api.ipify.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://luck-wonder4.vercel.app/\r\nOrigin: https://luck-wonder4.vercel.app\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 12 Jul 2025 23:15:31 GMT\r\ncontent-type: text/plain\r\ncontent-length: 12\r\ncf-ray: 95e43e3b59f3569c-OSL\r\naccess-control-allow-origin: *\r\nvary: Origin\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=2559\u0026min_rtt=461\u0026rtt_var=4222\u0026sent=8\u0026recv=12\u0026lost=0\u0026retrans=0\u0026sent_bytes=3269\u0026recv_bytes=1287\u0026delivery_rate=7264214\u0026cwnd=244\u0026unsent_bytes=0\u0026cid=47e353578fadf62b\u0026ts=216\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":12,"size_decoded":0,"mime_type":"text/plain","magic":"ASCII text, with no line terminators","md5":"35b0bce9d250429df012c0426f88d0bd","sha1":"f81d80af9cbeb0011316fbba3da8002b32251f7a","sha256":"da9add592d7eb9cca7705cb4870d7fd4e9718ccd51486c4261a727a8d566960d","sha512":"32c9df1064e730e1a2358dae62aff741118007187d89510bfbdf93efaaa7356b71a570ea8c5d96bdc0b47155bbaa77df86b6847cc4d95d2d1b7fa2a1484a7144","ssdeep":"","tlshash":"dd600003000000000c00c00cc303030303c00003c30f0000ccc00f000c003300300000","first_seen":"2023-03-07T01:19:04Z","last_seen":"2026-06-07T08:12:19.538389Z","times_seen":27001,"resource_available":true,"data":null}},"time_used":324,"timings":{"blocked":96,"dns":5,"connect":1,"send":0,"wait":120,"receive":0,"ssl":69},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"luck-wonder4.vercel.app/img/3.html","fqdn":"luck-wonder4.vercel.app","domain":"luck-wonder4.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"","requested_by":"https://luck-wonder4.vercel.app/","date":"2025-07-12T23:15:29.829Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Tue, 24 Jun 2025 04:57:32 GMT","end":"Mon, 22 Sep 2025 04:57:31 GMT"},"fingerprint":{"sha1":"81:D3:FA:22:93:E5:25:70:85:9A:59:F7:5D:92:C4:FE:CF:35:0D:C7","sha256":"CF:7D:EA:B1:F6:D3:8D:F4:F7:DA:1F:83:F1:44:C8:1D:E2:58:46:A5:3A:AD:9E:5F:79:E0:C3:92:23:CE:2D:B7"}}},"request":{"raw":"GET /img/3.html HTTP/1.1\r\nHost: luck-wonder4.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://luck-wonder4.vercel.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 314833\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"3.html\"\r\ncontent-encoding: br\r\ncontent-type: text/html; charset=utf-8\r\ndate: Sat, 12 Jul 2025 23:15:29 GMT\r\netag: \"0a27a4163254fc8fce870c8cc3a3f94f\"\r\nlast-modified: Wed, 09 Jul 2025 07:48:16 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::kqw5g-1752362129808-a58fd1979584\r\ncontent-length: 891\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1808,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"0a27a4163254fc8fce870c8cc3a3f94f","sha1":"f27cf04699668916346eee510eab7e5a17e83997","sha256":"b77b97fe780d35d18248abd1d2f42f444afbabe43f6abcd8fa8ebb3d47825eee","sha512":"552e388db389c5142d303ca531bbe6ec5706864a84e78b91a16e1169b45d08ac1b9b1df576055b86f3a0f9c6668fe3488e3664e191bc1978848594358a256019","ssdeep":"","tlshash":"6c31012b8b915e0ff14740113ac3b7425b59c9076207b63f3e4c9615cf8e466d1e3388","first_seen":"2023-04-05T03:09:34Z","last_seen":"2026-08-13T07:12:51.227795Z","times_seen":4800,"resource_available":true,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"openphish","sensor_type":"url","title":"","description":"OpenPhish","scan_date":"2025-07-08","alert":"Crypto/Wallet","trigger":"luck-wonder4.vercel.app/","verdict":"phishing","severity":"medium","comment":"Crypto/Wallet","link":"https://openphish.com/","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-07-12","alert":"Sinkholed","trigger":"luck-wonder4.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"luck-wonder4.vercel.app/img/boath_png.png","fqdn":"luck-wonder4.vercel.app","domain":"luck-wonder4.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"","requested_by":"https://luck-wonder4.vercel.app/","date":"2025-07-12T23:15:29.833Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Tue, 24 Jun 2025 04:57:32 GMT","end":"Mon, 22 Sep 2025 04:57:31 GMT"},"fingerprint":{"sha1":"81:D3:FA:22:93:E5:25:70:85:9A:59:F7:5D:92:C4:FE:CF:35:0D:C7","sha256":"CF:7D:EA:B1:F6:D3:8D:F4:F7:DA:1F:83:F1:44:C8:1D:E2:58:46:A5:3A:AD:9E:5F:79:E0:C3:92:23:CE:2D:B7"}}},"request":{"raw":"GET /img/boath_png.png HTTP/1.1\r\nHost: luck-wonder4.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://luck-wonder4.vercel.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 179771\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"boath_png.png\"\r\ncontent-type: image/png\r\ndate: Sat, 12 Jul 2025 23:15:29 GMT\r\netag: \"54ecf675c6da3d0ef0b5739789acbe7e\"\r\nlast-modified: Thu, 10 Jul 2025 21:19:18 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::lsltr-1752362129810-cb4c7bde8867\r\ncontent-length: 42785\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":42785,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit/color RGBA, non-interlaced","md5":"54ecf675c6da3d0ef0b5739789acbe7e","sha1":"c228baef8306f2144c0b4ef97f355b45235bfa3c","sha256":"21f2a6aaa2ee98649bc12d7ce4e57d7eb5c2ad7f4f5fc0023559da106c4efc66","sha512":"c54e6092f7eb74b27178b38d0c8e21c8ac0d35543ec83f1e255fb016c576f9a6a7dabedad244ea443e30b07085cfb8911da51d6c6d2974f6b51d1dd25df64089","ssdeep":"768:6vUw1mjdZmVE6a8h+BcNYzHqd8m+u/mOeKKuZp/TSbonSNu:wUw1mjd4Vda8h+Bc4Kdt1mJu72QSNu","tlshash":"0513f143eb09fb5edc8bf4f5892c0c03d81e4bc5bda69c14e75683a86652d98ce23785","first_seen":"2023-12-29T16:48:33Z","last_seen":"2026-08-10T20:32:07.347006Z","times_seen":1980,"resource_available":false,"data":null}},"time_used":54,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":51,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"openphish","sensor_type":"url","title":"","description":"OpenPhish","scan_date":"2025-07-08","alert":"Crypto/Wallet","trigger":"luck-wonder4.vercel.app/","verdict":"phishing","severity":"medium","comment":"Crypto/Wallet","link":"https://openphish.com/","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-07-12","alert":"Sinkholed","trigger":"luck-wonder4.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"luck-wonder4.vercel.app/js/slick-1.8.1/slick/slick.min.html","fqdn":"luck-wonder4.vercel.app","domain":"luck-wonder4.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"","requested_by":"https://luck-wonder4.vercel.app/","date":"2025-07-12T23:15:31.266Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Tue, 24 Jun 2025 04:57:32 GMT","end":"Mon, 22 Sep 2025 04:57:31 GMT"},"fingerprint":{"sha1":"81:D3:FA:22:93:E5:25:70:85:9A:59:F7:5D:92:C4:FE:CF:35:0D:C7","sha256":"CF:7D:EA:B1:F6:D3:8D:F4:F7:DA:1F:83:F1:44:C8:1D:E2:58:46:A5:3A:AD:9E:5F:79:E0:C3:92:23:CE:2D:B7"}}},"request":{"raw":"GET /js/slick-1.8.1/slick/slick.min.html HTTP/1.1\r\nHost: luck-wonder4.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://luck-wonder4.vercel.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-type: text/plain; charset=utf-8\r\ndate: Sat, 12 Jul 2025 23:15:31 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-error: NOT_FOUND\r\nx-vercel-id: arn1::vrqvt-1752362131258-b612e4449aea\r\ncontent-length: 79\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":null,"data":{"size":79,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"6ff609dbb8299cb680f0ade7ac3bf7f3","sha1":"c608b381f1174f0a2a07f1b5ce2bce691c901873","sha256":"c480eae72de444a62ed698f97bd76a1aba3a539696ce4c419a8921b593004d91","sha512":"e3047efccbda32f887b7784ccd5b22701bfca01ac71bcab35e8c88567043ec6daea5b2a60cc7139197bbf127a7bc3574af174c08447eb4a620cde4b4eed88e9c","ssdeep":"","tlshash":"65a0120e10804c8e3284463010815138045901126d56f18020c86610510068e6301195","first_seen":"2025-07-12T23:15:56.917462Z","last_seen":"2025-07-12T23:15:56.917462Z","times_seen":1,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"openphish","sensor_type":"url","title":"","description":"OpenPhish","scan_date":"2025-07-08","alert":"Crypto/Wallet","trigger":"luck-wonder4.vercel.app/","verdict":"phishing","severity":"medium","comment":"Crypto/Wallet","link":"https://openphish.com/","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-07-12","alert":"Sinkholed","trigger":"luck-wonder4.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rpc.ankr.com/bsc","fqdn":"rpc.ankr.com","domain":"ankr.com","tld":"com"},"ip":{"addr":"216.119.155.40","port":443,"asn":13213,"as":"UK-2 Limited","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"","requested_by":"https://luck-wonder4.vercel.app/","date":"2025-07-12T23:15:31.658Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"enterprise.onerpc.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Wed, 25 Jun 2025 10:45:34 GMT","end":"Tue, 23 Sep 2025 10:45:33 GMT"},"fingerprint":{"sha1":"1D:DD:DD:D7:04:E8:B9:45:A8:33:3A:A4:71:E1:4B:83:8B:F9:56:62","sha256":"FF:44:09:BC:0C:16:13:F7:0F:0D:78:8A:30:53:6D:CD:E7:B7:92:FD:D2:12:54:BE:BE:01:8F:31:75:52:CF:6F"}}},"request":{"raw":"OPTIONS /bsc HTTP/1.1\r\nHost: rpc.ankr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://luck-wonder4.vercel.app/\r\nOrigin: https://luck-wonder4.vercel.app\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Sat, 12 Jul 2025 23:15:32 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, PUT, POST, DELETE, PATCH, OPTIONS\r\naccess-control-allow-headers: DNT,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization,solana-client,client-sdk-version,client-sdk-type,client-target-api-version\r\naccess-control-max-age: 1728000\r\ncontent-length: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-13T19:51:56.000454Z","times_seen":17875501,"resource_available":true,"data":null}},"time_used":958,"timings":{"blocked":481,"dns":5,"connect":39,"send":0,"wait":19,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"luck-wonder4.vercel.app/img/load%202.html","fqdn":"luck-wonder4.vercel.app","domain":"luck-wonder4.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"","requested_by":"https://luck-wonder4.vercel.app/","date":"2025-07-12T23:15:29.824Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Tue, 24 Jun 2025 04:57:32 GMT","end":"Mon, 22 Sep 2025 04:57:31 GMT"},"fingerprint":{"sha1":"81:D3:FA:22:93:E5:25:70:85:9A:59:F7:5D:92:C4:FE:CF:35:0D:C7","sha256":"CF:7D:EA:B1:F6:D3:8D:F4:F7:DA:1F:83:F1:44:C8:1D:E2:58:46:A5:3A:AD:9E:5F:79:E0:C3:92:23:CE:2D:B7"}}},"request":{"raw":"GET /img/load%202.html HTTP/1.1\r\nHost: luck-wonder4.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://luck-wonder4.vercel.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 360857\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"load 2.html\"\r\ncontent-encoding: br\r\ncontent-type: text/html; charset=utf-8\r\ndate: Sat, 12 Jul 2025 23:15:29 GMT\r\netag: \"0a27a4163254fc8fce870c8cc3a3f94f\"\r\nlast-modified: Tue, 08 Jul 2025 19:01:12 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::kqw5g-1752362129802-1d5ecb4da0bd\r\ncontent-length: 891\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1808,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"0a27a4163254fc8fce870c8cc3a3f94f","sha1":"f27cf04699668916346eee510eab7e5a17e83997","sha256":"b77b97fe780d35d18248abd1d2f42f444afbabe43f6abcd8fa8ebb3d47825eee","sha512":"552e388db389c5142d303ca531bbe6ec5706864a84e78b91a16e1169b45d08ac1b9b1df576055b86f3a0f9c6668fe3488e3664e191bc1978848594358a256019","ssdeep":"","tlshash":"6c31012b8b915e0ff14740113ac3b7425b59c9076207b63f3e4c9615cf8e466d1e3388","first_seen":"2023-04-05T03:09:34Z","last_seen":"2026-08-13T07:12:51.227795Z","times_seen":4800,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"openphish","sensor_type":"url","title":"","description":"OpenPhish","scan_date":"2025-07-08","alert":"Crypto/Wallet","trigger":"luck-wonder4.vercel.app/","verdict":"phishing","severity":"medium","comment":"Crypto/Wallet","link":"https://openphish.com/","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-07-12","alert":"Sinkholed","trigger":"luck-wonder4.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"luck-wonder4.vercel.app/img/opensea.svg","fqdn":"luck-wonder4.vercel.app","domain":"luck-wonder4.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"","requested_by":"https://luck-wonder4.vercel.app/","date":"2025-07-12T23:15:30.711Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Tue, 24 Jun 2025 04:57:32 GMT","end":"Mon, 22 Sep 2025 04:57:31 GMT"},"fingerprint":{"sha1":"81:D3:FA:22:93:E5:25:70:85:9A:59:F7:5D:92:C4:FE:CF:35:0D:C7","sha256":"CF:7D:EA:B1:F6:D3:8D:F4:F7:DA:1F:83:F1:44:C8:1D:E2:58:46:A5:3A:AD:9E:5F:79:E0:C3:92:23:CE:2D:B7"}}},"request":{"raw":"GET /img/opensea.svg HTTP/1.1\r\nHost: luck-wonder4.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://luck-wonder4.vercel.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 420849\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"opensea.svg\"\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\ndate: Sat, 12 Jul 2025 23:15:30 GMT\r\netag: \"a846574b49eb7960a2ec5b0cd7e72dc3\"\r\nlast-modified: Tue, 08 Jul 2025 02:21:20 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::ghdqr-1752362130714-99f226283ded\r\ncontent-length: 1569\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":3946,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"a846574b49eb7960a2ec5b0cd7e72dc3","sha1":"54c6aa6ed63503eb6e0c29a9c3750026310a9c98","sha256":"f5d861f057e77f4581bc4895bdd62524dfdc625f2dffac278fa76f232d12f69b","sha512":"34d4817be11afc3f2316e16f2e653bb63b9394eaf2ed1fc18768432afca3cee397dab35f250a2d10278f58a43ecb1005d93d1ac445e865662ad7cd74815d734d","ssdeep":"","tlshash":"138154edaba5cc72d1c6e1ecde458424216d41e79682c2a1c3e4bf1e38584d0de1eac6","first_seen":"2024-01-05T04:50:13Z","last_seen":"2026-08-10T20:32:07.339608Z","times_seen":2063,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":15,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"openphish","sensor_type":"url","title":"","description":"OpenPhish","scan_date":"2025-07-08","alert":"Crypto/Wallet","trigger":"luck-wonder4.vercel.app/","verdict":"phishing","severity":"medium","comment":"Crypto/Wallet","link":"https://openphish.com/","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-07-12","alert":"Sinkholed","trigger":"luck-wonder4.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"luck-wonder4.vercel.app/img/load%202.html","fqdn":"luck-wonder4.vercel.app","domain":"luck-wonder4.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"","requested_by":"https://luck-wonder4.vercel.app/","date":"2025-07-12T23:15:30.925Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Tue, 24 Jun 2025 04:57:32 GMT","end":"Mon, 22 Sep 2025 04:57:31 GMT"},"fingerprint":{"sha1":"81:D3:FA:22:93:E5:25:70:85:9A:59:F7:5D:92:C4:FE:CF:35:0D:C7","sha256":"CF:7D:EA:B1:F6:D3:8D:F4:F7:DA:1F:83:F1:44:C8:1D:E2:58:46:A5:3A:AD:9E:5F:79:E0:C3:92:23:CE:2D:B7"}}},"request":{"raw":"GET /img/load%202.html HTTP/1.1\r\nHost: luck-wonder4.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://luck-wonder4.vercel.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 360858\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"load 2.html\"\r\ncontent-encoding: br\r\ncontent-type: text/html; charset=utf-8\r\ndate: Sat, 12 Jul 2025 23:15:30 GMT\r\netag: \"0a27a4163254fc8fce870c8cc3a3f94f\"\r\nlast-modified: Tue, 08 Jul 2025 19:01:12 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::zr7fl-1752362130921-927a0f05d7f9\r\ncontent-length: 891\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1808,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"0a27a4163254fc8fce870c8cc3a3f94f","sha1":"f27cf04699668916346eee510eab7e5a17e83997","sha256":"b77b97fe780d35d18248abd1d2f42f444afbabe43f6abcd8fa8ebb3d47825eee","sha512":"552e388db389c5142d303ca531bbe6ec5706864a84e78b91a16e1169b45d08ac1b9b1df576055b86f3a0f9c6668fe3488e3664e191bc1978848594358a256019","ssdeep":"","tlshash":"6c31012b8b915e0ff14740113ac3b7425b59c9076207b63f3e4c9615cf8e466d1e3388","first_seen":"2023-04-05T03:09:34Z","last_seen":"2026-08-13T07:12:51.227795Z","times_seen":4800,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"openphish","sensor_type":"url","title":"","description":"OpenPhish","scan_date":"2025-07-08","alert":"Crypto/Wallet","trigger":"luck-wonder4.vercel.app/","verdict":"phishing","severity":"medium","comment":"Crypto/Wallet","link":"https://openphish.com/","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-07-12","alert":"Sinkholed","trigger":"luck-wonder4.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"in.greenfields.cc/secureproxy.php?e=ping_proxy","fqdn":"in.greenfields.cc","domain":"greenfields.cc","tld":"cc"},"ip":{"addr":"173.208.138.101","port":443,"asn":32097,"as":"WII","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"","requested_by":"https://luck-wonder4.vercel.app/","date":"2025-07-12T23:15:31.647Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"in.greenfields.cc","organization":""},"issuer":{"commonName":"E6","organization":"Let's Encrypt"},"validity":{"start":"Fri, 20 Jun 2025 23:10:20 GMT","end":"Thu, 18 Sep 2025 23:10:19 GMT"},"fingerprint":{"sha1":"D8:F3:B3:62:9A:23:F5:60:2D:F1:DF:AD:9D:AB:90:01:A4:37:87:B1","sha256":"BE:53:F3:71:AF:0E:B2:D2:89:FE:E7:32:5A:7C:13:EE:5C:5C:26:F2:20:12:3C:FB:4F:F7:A4:4A:8F:CB:0B:88"}}},"request":{"raw":"GET /secureproxy.php?e=ping_proxy HTTP/1.1\r\nHost: in.greenfields.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://luck-wonder4.vercel.app/\r\nOrigin: https://luck-wonder4.vercel.app\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\naccess-control-max-age: 3600\r\ncontent-type: text/plain;charset=UTF-8\r\ncontent-encoding: gzip\r\nvary: Accept-Encoding\r\ncontent-length: 24\r\ndate: Sat, 12 Jul 2025 23:15:31 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":4,"size_decoded":0,"mime_type":"text/plain; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"6fdb087aa3fbfbcb8287a593a0919e61","sha1":"0e514a0662bcb69dc863953d1ce26e3d40e81a87","sha256":"9795c5ff8937f23526ccb207a5684c1fc94a7854e19c021b39d944e51f5baef2","sha512":"be5457d14c930b51b47ab152850c1ceaafe6ef88c8671b48164abbc83410b0c07a1e178540f6cdeac5f2672cadb1d1cbbb3434b3e39bc2c50c4646a2bae57437","ssdeep":"","tlshash":"fe300000300000000000000c0000000000000000000000000000000000300000000000","first_seen":"2023-04-12T09:14:15Z","last_seen":"2026-08-13T05:58:08.703701Z","times_seen":9040,"resource_available":true,"data":null}},"time_used":660,"timings":{"blocked":264,"dns":7,"connect":121,"send":0,"wait":116,"receive":1,"ssl":131},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bsc.drpc.org/","fqdn":"bsc.drpc.org","domain":"drpc.org","tld":"org"},"ip":{"addr":"104.18.11.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://luck-wonder4.vercel.app/","date":"2025-07-12T23:15:31.965Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"drpc.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 25 Jun 2025 11:05:37 GMT","end":"Tue, 23 Sep 2025 12:05:32 GMT"},"fingerprint":{"sha1":"EE:63:A4:E6:4E:19:32:30:4F:F9:7E:23:97:D0:25:98:D1:C9:BF:7A","sha256":"EA:5F:7C:2E:45:73:D4:0F:43:6B:96:01:B6:18:83:C6:42:53:23:E1:8E:B8:28:20:99:88:EB:2C:5F:2F:9D:3D"}}},"request":{"raw":"POST / HTTP/1.1\r\nHost: bsc.drpc.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://luck-wonder4.vercel.app/\r\nContent-Type: application/json\r\nContent-Length: 136\r\nOrigin: https://luck-wonder4.vercel.app\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 12 Jul 2025 23:15:31 GMT\r\ncontent-type: application/json\r\naccess-control-allow-origin: *\r\nvary: Accept-Encoding\r\nx-drpc-owner-id: cb501251-31a8-4028-8b0a-54679f15c385\r\nx-drpc-owner-tier: free\r\nx-drpc-provider-id: drpc-public-multiregion\r\nx-drpc-trace-id: 1ba0271bda4425889e09bbb15659d6b0\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, PUT, POST, DELETE, PATCH, OPTIONS\r\naccess-control-allow-headers: DNT,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization\r\naccess-control-max-age: 1728000\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\ncf-ray: 95e43e3c7d9b56c9-OSL\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":4902,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"c6bfa8fda4c0e071f9d03e47e2109c3c","sha1":"c9cd91f85569f1927c3deb5f4c3469255b6479ca","sha256":"30bd4eeaa66748ea6d936f73a797160ea5ad2aa29caad7e413598ff962780988","sha512":"91972a80a9592ab068cf65c75de6ec5ab6c1e42945c6fe8d5e7356ff5e0dd6e076c1b637908a86991e085becd11a1f743d901412bb9ac6170dfd4da20762cdc4","ssdeep":"96:+igW53TB2SzrZYpTbDaOTkSO6mdSInccYGS9FzelVLY:V5TB2SzAT/7kSRRrze3k","tlshash":"2ca179f0ee02c891f1be4768f2ddbe0461383326eedc5a4604745a991ee5a51bd0dccd","first_seen":"2025-04-16T10:17:39.724523Z","last_seen":"2026-04-30T18:00:51.584548Z","times_seen":621,"resource_available":false,"data":null}},"time_used":58,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":58,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rpc.ankr.com/bsc","fqdn":"rpc.ankr.com","domain":"ankr.com","tld":"com"},"ip":{"addr":"216.119.155.40","port":443,"asn":13213,"as":"UK-2 Limited","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"","requested_by":"https://luck-wonder4.vercel.app/","date":"2025-07-12T23:15:32.441Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"enterprise.onerpc.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Wed, 25 Jun 2025 10:45:34 GMT","end":"Tue, 23 Sep 2025 10:45:33 GMT"},"fingerprint":{"sha1":"1D:DD:DD:D7:04:E8:B9:45:A8:33:3A:A4:71:E1:4B:83:8B:F9:56:62","sha256":"FF:44:09:BC:0C:16:13:F7:0F:0D:78:8A:30:53:6D:CD:E7:B7:92:FD:D2:12:54:BE:BE:01:8F:31:75:52:CF:6F"}}},"request":{"raw":"POST /bsc HTTP/1.1\r\nHost: rpc.ankr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://luck-wonder4.vercel.app/\r\nContent-Type: application/json\r\nContent-Length: 136\r\nOrigin: https://luck-wonder4.vercel.app\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 12 Jul 2025 23:15:32 GMT\r\ncontent-type: application/json\r\ncontent-length: 229\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, PUT, POST, DELETE, PATCH, OPTIONS\r\naccess-control-allow-headers: DNT,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization,solana-client,client-sdk-version,client-sdk-type,client-target-api-version\r\naccess-control-max-age: 1728000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":229,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"42e136a22281d105bd21fa496816706c","sha1":"bc02950079004b0d4f4bea3888dfd4517cddeeff","sha256":"ede226c79ae326ce9e4b099e9f4dbb4e3d7807da2b793bdfadfafeeb84d7175a","sha512":"a41403da8b9e698eb2823bbe0925160b68682c55d4c64e5c8b27193f8fd8bf4fd118179d26eadb446ed41c2c9c12d46523b6f5094caadaae8a03ba3c1d6bade5","ssdeep":"","tlshash":"33d02313c6470537e34f4633371567c4f559705071105f1b4e1c0315024f97b0255351","first_seen":"2025-04-07T11:34:31.00119Z","last_seen":"2026-08-13T13:45:35.183758Z","times_seen":3042,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"luck-wonder4.vercel.app/css/fonts.css","fqdn":"luck-wonder4.vercel.app","domain":"luck-wonder4.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"","requested_by":"https://luck-wonder4.vercel.app/","date":"2025-07-12T23:15:29.816Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Tue, 24 Jun 2025 04:57:32 GMT","end":"Mon, 22 Sep 2025 04:57:31 GMT"},"fingerprint":{"sha1":"81:D3:FA:22:93:E5:25:70:85:9A:59:F7:5D:92:C4:FE:CF:35:0D:C7","sha256":"CF:7D:EA:B1:F6:D3:8D:F4:F7:DA:1F:83:F1:44:C8:1D:E2:58:46:A5:3A:AD:9E:5F:79:E0:C3:92:23:CE:2D:B7"}}},"request":{"raw":"GET /css/fonts.css HTTP/1.1\r\nHost: luck-wonder4.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://luck-wonder4.vercel.app/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 360857\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"fonts.css\"\r\ncontent-type: text/css; charset=utf-8\r\ndate: Sat, 12 Jul 2025 23:15:29 GMT\r\netag: \"cf3a5ae03ac5d33461bf60b1a4c3a09a\"\r\nlast-modified: Tue, 08 Jul 2025 19:01:12 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::tcnqb-1752362129800-ea88428f619c\r\ncontent-length: 485\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":485,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with CRLF line terminators","md5":"cf3a5ae03ac5d33461bf60b1a4c3a09a","sha1":"593d8eefbd561bfcfbc5b24c270093d24b95c0f9","sha256":"03fbca0e823f9491b8604743d0a90c340287e2cacabb7eb027ba17334a839d5f","sha512":"9ca3f25c8a7ad2c35adeb80de30bc563745e2a4b8bb060eb870ee7f4b0a5613e8dc9ae8068fae8329bb49f319551967bd03e4598856c9b51fa44f3ae9862ae66","ssdeep":"","tlshash":"c8f08210900dd432a7b05ddf73973e149b1e604b2205861e72642aa58ff1a7c03b1f6e","first_seen":"2023-12-29T16:48:33Z","last_seen":"2026-08-10T20:32:07.350819Z","times_seen":1798,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"openphish","sensor_type":"url","title":"","description":"OpenPhish","scan_date":"2025-07-08","alert":"Crypto/Wallet","trigger":"luck-wonder4.vercel.app/","verdict":"phishing","severity":"medium","comment":"Crypto/Wallet","link":"https://openphish.com/","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-07-12","alert":"Sinkholed","trigger":"luck-wonder4.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"luck-wonder4.vercel.app/css/index.css","fqdn":"luck-wonder4.vercel.app","domain":"luck-wonder4.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"","requested_by":"https://luck-wonder4.vercel.app/","date":"2025-07-12T23:15:29.817Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Tue, 24 Jun 2025 04:57:32 GMT","end":"Mon, 22 Sep 2025 04:57:31 GMT"},"fingerprint":{"sha1":"81:D3:FA:22:93:E5:25:70:85:9A:59:F7:5D:92:C4:FE:CF:35:0D:C7","sha256":"CF:7D:EA:B1:F6:D3:8D:F4:F7:DA:1F:83:F1:44:C8:1D:E2:58:46:A5:3A:AD:9E:5F:79:E0:C3:92:23:CE:2D:B7"}}},"request":{"raw":"GET /css/index.css HTTP/1.1\r\nHost: luck-wonder4.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://luck-wonder4.vercel.app/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 0\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"index.css\"\r\ncontent-encoding: br\r\ncontent-type: text/css; charset=utf-8\r\ndate: Sat, 12 Jul 2025 23:15:29 GMT\r\netag: \"8d3b53cd40f84d615533d49786d81bc5\"\r\nlast-modified: Sat, 12 Jul 2025 23:15:29 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::jd6ts-1752362129801-7881d9a21e7b\r\ncontent-length: 3485\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":15902,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"Unicode text, UTF-8 text, with CRLF line terminators","md5":"8d3b53cd40f84d615533d49786d81bc5","sha1":"ec1f9dd6c3f4f9dad8f589a2ddb5dcbcf19d76d2","sha256":"97584abbd8ab93af480a871752cb65285b1c1d37d2be517b490d0a68328c0a49","sha512":"0a989f145ffc52803cb93c757c11e4cc4cb903cee474fe54c5c7d899cf4eb2bc5274161ad26141c106d0c43aac93f9224ba2ee73aed1f988a8fa98aa64cf9c6e","ssdeep":"192:XvK4e4TM4u3K4ztM5GxZYm/qO2SPjtd4U4VQY3AQLdnIMeq8zh4ELOvnve3ia86V:fa4m5nqwtnsA","tlshash":"6d62e2b9da102146b333d9982fb04b4ad6ad80839b07516d7fd432884fbb25c9972fdd","first_seen":"2023-12-29T16:48:33Z","last_seen":"2026-08-10T20:32:07.345366Z","times_seen":1783,"resource_available":false,"data":null}},"time_used":183,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":182,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"openphish","sensor_type":"url","title":"","description":"OpenPhish","scan_date":"2025-07-08","alert":"Crypto/Wallet","trigger":"luck-wonder4.vercel.app/","verdict":"phishing","severity":"medium","comment":"Crypto/Wallet","link":"https://openphish.com/","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-07-12","alert":"Sinkholed","trigger":"luck-wonder4.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"luck-wonder4.vercel.app/img/1.html","fqdn":"luck-wonder4.vercel.app","domain":"luck-wonder4.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"","requested_by":"https://luck-wonder4.vercel.app/","date":"2025-07-12T23:15:29.825Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Tue, 24 Jun 2025 04:57:32 GMT","end":"Mon, 22 Sep 2025 04:57:31 GMT"},"fingerprint":{"sha1":"81:D3:FA:22:93:E5:25:70:85:9A:59:F7:5D:92:C4:FE:CF:35:0D:C7","sha256":"CF:7D:EA:B1:F6:D3:8D:F4:F7:DA:1F:83:F1:44:C8:1D:E2:58:46:A5:3A:AD:9E:5F:79:E0:C3:92:23:CE:2D:B7"}}},"request":{"raw":"GET /img/1.html HTTP/1.1\r\nHost: luck-wonder4.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://luck-wonder4.vercel.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 360857\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"1.html\"\r\ncontent-encoding: br\r\ncontent-type: text/html; charset=utf-8\r\ndate: Sat, 12 Jul 2025 23:15:29 GMT\r\netag: \"0a27a4163254fc8fce870c8cc3a3f94f\"\r\nlast-modified: Tue, 08 Jul 2025 19:01:12 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::bqmss-1752362129804-d099cfc696b6\r\ncontent-length: 891\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1808,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"0a27a4163254fc8fce870c8cc3a3f94f","sha1":"f27cf04699668916346eee510eab7e5a17e83997","sha256":"b77b97fe780d35d18248abd1d2f42f444afbabe43f6abcd8fa8ebb3d47825eee","sha512":"552e388db389c5142d303ca531bbe6ec5706864a84e78b91a16e1169b45d08ac1b9b1df576055b86f3a0f9c6668fe3488e3664e191bc1978848594358a256019","ssdeep":"","tlshash":"6c31012b8b915e0ff14740113ac3b7425b59c9076207b63f3e4c9615cf8e466d1e3388","first_seen":"2023-04-05T03:09:34Z","last_seen":"2026-08-13T07:12:51.227795Z","times_seen":4800,"resource_available":true,"data":null}},"time_used":169,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":168,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"openphish","sensor_type":"url","title":"","description":"OpenPhish","scan_date":"2025-07-08","alert":"Crypto/Wallet","trigger":"luck-wonder4.vercel.app/","verdict":"phishing","severity":"medium","comment":"Crypto/Wallet","link":"https://openphish.com/","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-07-12","alert":"Sinkholed","trigger":"luck-wonder4.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"luck-wonder4.vercel.app/js/index.html","fqdn":"luck-wonder4.vercel.app","domain":"luck-wonder4.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"","requested_by":"https://luck-wonder4.vercel.app/","date":"2025-07-12T23:15:29.843Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Tue, 24 Jun 2025 04:57:32 GMT","end":"Mon, 22 Sep 2025 04:57:31 GMT"},"fingerprint":{"sha1":"81:D3:FA:22:93:E5:25:70:85:9A:59:F7:5D:92:C4:FE:CF:35:0D:C7","sha256":"CF:7D:EA:B1:F6:D3:8D:F4:F7:DA:1F:83:F1:44:C8:1D:E2:58:46:A5:3A:AD:9E:5F:79:E0:C3:92:23:CE:2D:B7"}}},"request":{"raw":"GET /js/index.html HTTP/1.1\r\nHost: luck-wonder4.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://luck-wonder4.vercel.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-type: text/plain; charset=utf-8\r\ndate: Sat, 12 Jul 2025 23:15:29 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-error: NOT_FOUND\r\nx-vercel-id: arn1::4c4ls-1752362129813-7d714b2ff416\r\ncontent-length: 79\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":null,"data":{"size":79,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"20dbb38b67d1548e91c4e46bc37fa8f3","sha1":"41f4e345c5ca27fb34666ab173085ae67aaa829e","sha256":"3483dac692d8bf4f9f3128edbca50984cc8a04eea35359bd71f43a7f068b843d","sha512":"f34362050ff1a49c847bd1b555e0962ab6da0ac418e613f8085ab847e7328431305735f866c185f712c9f0281f0a0747d64f8a59af63b430009b1eb0783289bb","ssdeep":"","tlshash":"1ba0124d06f50c8c32c0011020524139100104115d15f940518c2b20160668e9700089","first_seen":"2025-07-12T23:15:56.9255Z","last_seen":"2025-07-12T23:15:56.9255Z","times_seen":1,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"openphish","sensor_type":"url","title":"","description":"OpenPhish","scan_date":"2025-07-08","alert":"Crypto/Wallet","trigger":"luck-wonder4.vercel.app/","verdict":"phishing","severity":"medium","comment":"Crypto/Wallet","link":"https://openphish.com/","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-07-12","alert":"Sinkholed","trigger":"luck-wonder4.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/crypto-js/4.2.0/crypto-js.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://luck-wonder4.vercel.app/","date":"2025-07-12T23:15:30.892Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 22 May 2025 14:38:44 GMT","end":"Wed, 20 Aug 2025 15:38:38 GMT"},"fingerprint":{"sha1":"4B:06:E9:E2:47:47:F5:3C:33:58:F8:2A:95:70:22:5E:23:19:03:77","sha256":"92:B0:F4:51:5C:E9:3A:03:19:F4:50:36:49:FA:A1:01:1D:F0:A1:91:F7:A3:53:E6:19:AA:C4:FA:3D:C4:31:6E"}}},"request":{"raw":"GET /ajax/libs/crypto-js/4.2.0/crypto-js.min.js HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://luck-wonder4.vercel.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 12 Jul 2025 23:15:30 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 19621\r\ncf-ray: 95e43e363b4d56c3-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"65384d58-4ca5\"\r\nlast-modified: Tue, 24 Oct 2023 23:03:52 GMT\r\ncf-cdnjs-via: cfworker/kv\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 166030\r\nexpires: Thu, 02 Jul 2026 23:15:30 GMT\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=jxFFX2ek7v1p3maHBfunco7QpecOYfLbhwyFjNy9ZkrwZr80vYSHvpPxgF92yhYq1KazP15WQ9q6swMYWNVw4Jo3%2FBKDztPn4ChMHtKLh4OMLRhvRQg%2Bfwgbm6Hy07GKD2qYyMln\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nstrict-transport-security: max-age=15780000\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":60819,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (60819), with no line terminators","md5":"d9c6de0df2bf028d93924aff92487904","sha1":"6596050516dd12af52d9b0e7b18ed837f1d81300","sha256":"769a555de553babc35a3338f344dd7aa16260c93cea2c7db290707c90484e7cc","sha512":"6be4940eec0dcd70efcf85eb21c5c7b827f4f3dfe2240a0de259ab5c9835f179ddb8a2ba6250c73516a5bf8c9dd4de3438a23cd2d162745faba9314a18fa1615","ssdeep":"1536:R8K6Znxmj9rlvCOhI64j7AtSPtNPU9ArHMLlk:RV6+jKOh4z","tlshash":"65535bc0629c5491a3b76480087f740b7073353b0a1d5aacf658faefacacad6907cd39","first_seen":"2023-11-02T21:20:28Z","last_seen":"2026-08-12T13:49:20.666272Z","times_seen":31896,"resource_available":true,"data":null}},"time_used":76,"timings":{"blocked":29,"dns":2,"connect":2,"send":0,"wait":12,"receive":2,"ssl":23},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"luck-wonder4.vercel.app/img/high.mp4","fqdn":"luck-wonder4.vercel.app","domain":"luck-wonder4.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"","requested_by":"https://luck-wonder4.vercel.app/","date":"2025-07-12T23:15:31.270Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Tue, 24 Jun 2025 04:57:32 GMT","end":"Mon, 22 Sep 2025 04:57:31 GMT"},"fingerprint":{"sha1":"81:D3:FA:22:93:E5:25:70:85:9A:59:F7:5D:92:C4:FE:CF:35:0D:C7","sha256":"CF:7D:EA:B1:F6:D3:8D:F4:F7:DA:1F:83:F1:44:C8:1D:E2:58:46:A5:3A:AD:9E:5F:79:E0:C3:92:23:CE:2D:B7"}}},"request":{"raw":"GET /img/high.mp4 HTTP/1.1\r\nHost: luck-wonder4.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://luck-wonder4.vercel.app/\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 206 Partial Content\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 460884\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"high.mp4\"\r\ncontent-range: bytes 0-1461297/1461298\r\ncontent-type: video/mp4\r\ndate: Sat, 12 Jul 2025 23:15:31 GMT\r\netag: \"c90ca846f46fb1e8b04807ed1cd85774\"\r\nlast-modified: Mon, 07 Jul 2025 15:14:07 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::vrqvt-1752362131263-9518c25a5b88\r\ncontent-length: 1461298\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":null,"data":{"size":1409024,"size_decoded":0,"mime_type":"video/mp4","magic":"ISO Media, MP4 v2 [ISO 14496-14]","md5":"83e4a96c8740cdc6c2ef6315ce776a1f","sha1":"40e40926e610c72573b07cb460366e5179754644","sha256":"40da2aa8d7905d9b282e6369797a123aa508ccb01a9d5a02a43d1fdd6fa80e3f","sha512":"33c7cea1707ddab3d49d4c9bc6879bfe1a204a03052d7c6fc8477e40b3b1830a782bde55e272d753e488ffa59db5340dba11d531cab546e51d83bfefe6340151","ssdeep":"24576:7zGcNycaceYInbmfavawO5zSltGRztBfYUHQDiLa+QSpu:7zg1BhnbIavtYel8VsDiLzQ/","tlshash":"086522d4bed0d833f68515ba8682d71308667e98c5a0dfcb399d08c60bf4ac26f64b17","first_seen":"2025-04-23T11:15:45.483853Z","last_seen":"2025-07-22T16:03:09.796369Z","times_seen":27,"resource_available":false,"data":null}},"time_used":98,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":83,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"openphish","sensor_type":"url","title":"","description":"OpenPhish","scan_date":"2025-07-08","alert":"Crypto/Wallet","trigger":"luck-wonder4.vercel.app/","verdict":"phishing","severity":"medium","comment":"Crypto/Wallet","link":"https://openphish.com/","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-07-12","alert":"Sinkholed","trigger":"luck-wonder4.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"luck-wonder4.vercel.app/js/index.html","fqdn":"luck-wonder4.vercel.app","domain":"luck-wonder4.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"","requested_by":"https://luck-wonder4.vercel.app/","date":"2025-07-12T23:15:31.628Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Tue, 24 Jun 2025 04:57:32 GMT","end":"Mon, 22 Sep 2025 04:57:31 GMT"},"fingerprint":{"sha1":"81:D3:FA:22:93:E5:25:70:85:9A:59:F7:5D:92:C4:FE:CF:35:0D:C7","sha256":"CF:7D:EA:B1:F6:D3:8D:F4:F7:DA:1F:83:F1:44:C8:1D:E2:58:46:A5:3A:AD:9E:5F:79:E0:C3:92:23:CE:2D:B7"}}},"request":{"raw":"GET /js/index.html HTTP/1.1\r\nHost: luck-wonder4.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://luck-wonder4.vercel.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-type: text/plain; charset=utf-8\r\ndate: Sat, 12 Jul 2025 23:15:31 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-error: NOT_FOUND\r\nx-vercel-id: arn1::h4hlr-1752362131605-354e32566700\r\ncontent-length: 79\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":null,"data":{"size":79,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"a309e95ec128a5f8d8a6dfb2a88741d4","sha1":"fb3d661939572300ba499ad4176cd67e132bbbdc","sha256":"f725090e30f3722138faf2b5fc1edb4b59a6c737408dd9d0cc5cfb965a7b3d5a","sha512":"9a96a0751909e91910fff4c2b21fd51354a1449b2d83e0e25963feb1f5ff27bbadaf5dd6bdee368e7a49d285a6186139428d5e4160fbdfc36384c6568fc9cfb7","ssdeep":"","tlshash":"3ea011ae00c888c83388082220a202ba28a03022aeaab300028822082200acfa3000ca","first_seen":"2025-07-12T23:15:56.932194Z","last_seen":"2025-07-12T23:15:56.932194Z","times_seen":1,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"openphish","sensor_type":"url","title":"","description":"OpenPhish","scan_date":"2025-07-08","alert":"Crypto/Wallet","trigger":"luck-wonder4.vercel.app/","verdict":"phishing","severity":"medium","comment":"Crypto/Wallet","link":"https://openphish.com/","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-07-12","alert":"Sinkholed","trigger":"luck-wonder4.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"luck-wonder4.vercel.app/css/drops.css","fqdn":"luck-wonder4.vercel.app","domain":"luck-wonder4.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"","requested_by":"https://luck-wonder4.vercel.app/","date":"2025-07-12T23:15:29.813Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Tue, 24 Jun 2025 04:57:32 GMT","end":"Mon, 22 Sep 2025 04:57:31 GMT"},"fingerprint":{"sha1":"81:D3:FA:22:93:E5:25:70:85:9A:59:F7:5D:92:C4:FE:CF:35:0D:C7","sha256":"CF:7D:EA:B1:F6:D3:8D:F4:F7:DA:1F:83:F1:44:C8:1D:E2:58:46:A5:3A:AD:9E:5F:79:E0:C3:92:23:CE:2D:B7"}}},"request":{"raw":"GET /css/drops.css HTTP/1.1\r\nHost: luck-wonder4.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://luck-wonder4.vercel.app/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 314834\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"drops.css\"\r\ncontent-type: text/css; charset=utf-8\r\ndate: Sat, 12 Jul 2025 23:15:29 GMT\r\netag: \"080956b8390da3afbba148f08e28d4b2\"\r\nlast-modified: Wed, 09 Jul 2025 07:48:15 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::vrqvt-1752362129801-6e881e938570\r\ncontent-length: 858\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":858,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"Unicode text, UTF-8 text, with CRLF line terminators","md5":"080956b8390da3afbba148f08e28d4b2","sha1":"ba7c30b88efc976dd954c3179320c7e6e70ded77","sha256":"33276e688f392e16df4088e7f6988047690be6777596c240f33f3dfa7d48f485","sha512":"0f91948ba1108587f477f4b0bc6b9c7a441a59fb0657f5763760ca87abd70df7793b2c3e101683cd5c98e07af7b56f4b21cdb4c51a772a912aa6ee8f4c903f3b","ssdeep":"","tlshash":"3b11eb26bf0254c5a326c9b8b3f28f75ee220220ca1a60b4b1f5a805c74375f17dd786","first_seen":"2023-06-08T14:23:55Z","last_seen":"2026-08-10T20:32:07.343185Z","times_seen":1955,"resource_available":false,"data":null}},"time_used":93,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":68,"receive":25,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"openphish","sensor_type":"url","title":"","description":"OpenPhish","scan_date":"2025-07-08","alert":"Crypto/Wallet","trigger":"luck-wonder4.vercel.app/","verdict":"phishing","severity":"medium","comment":"Crypto/Wallet","link":"https://openphish.com/","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-07-12","alert":"Sinkholed","trigger":"luck-wonder4.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"luck-wonder4.vercel.app/389-9bec97c22fa2e411.gif","fqdn":"luck-wonder4.vercel.app","domain":"luck-wonder4.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"","requested_by":"https://luck-wonder4.vercel.app/","date":"2025-07-12T23:15:29.844Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Tue, 24 Jun 2025 04:57:32 GMT","end":"Mon, 22 Sep 2025 04:57:31 GMT"},"fingerprint":{"sha1":"81:D3:FA:22:93:E5:25:70:85:9A:59:F7:5D:92:C4:FE:CF:35:0D:C7","sha256":"CF:7D:EA:B1:F6:D3:8D:F4:F7:DA:1F:83:F1:44:C8:1D:E2:58:46:A5:3A:AD:9E:5F:79:E0:C3:92:23:CE:2D:B7"}}},"request":{"raw":"GET /389-9bec97c22fa2e411.gif HTTP/1.1\r\nHost: luck-wonder4.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://luck-wonder4.vercel.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 428740\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"389-9bec97c22fa2e411.gif\"\r\ncontent-type: image/gif\r\ndate: Sat, 12 Jul 2025 23:15:29 GMT\r\netag: \"b9f393bd75705f60c29e15ceddfd2db9\"\r\nlast-modified: Tue, 08 Jul 2025 00:09:49 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::kqw5g-1752362129814-7ea6deac46bc\r\ncontent-length: 660432\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":660432,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 87a, 750 x 750","md5":"b9f393bd75705f60c29e15ceddfd2db9","sha1":"9b3c4261f673b54903d47a5df6b6c981cdd1276e","sha256":"09268325243816ed6fe7a556c9e33ff179eae6e4a1e9de2194f590aef36d905e","sha512":"9b01dd59ed87b5d36299b07ea6f5c185c33732b2ad2a461c7f562e7859156391725b7898fcdb018ce8f4695c24095a4748fedef2f47bbd9c1485b342d83571dd","ssdeep":"12288:4qRRfCKpf2pLLpuXr0NjO/J4wEymLAR4pRQpUbbkV0Os3dymTa6lgbkv8O3hjdp+:4+RfnpiLIXr0EKyjR4pyAOs3dymTmbz7","tlshash":"8ae423fac354e16d7279a9f8509f291b3d0d9c6d458c8d428c046f7af9848f8e72ca62","first_seen":"2023-10-26T15:01:35Z","last_seen":"2026-08-10T20:32:07.353011Z","times_seen":3192,"resource_available":false,"data":null}},"time_used":79,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":42,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"openphish","sensor_type":"url","title":"","description":"OpenPhish","scan_date":"2025-07-08","alert":"Crypto/Wallet","trigger":"luck-wonder4.vercel.app/","verdict":"phishing","severity":"medium","comment":"Crypto/Wallet","link":"https://openphish.com/","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-07-12","alert":"Sinkholed","trigger":"luck-wonder4.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"luck-wonder4.vercel.app/10cce595-2b6e-438c-94be-2d3bd657d44e.js","fqdn":"luck-wonder4.vercel.app","domain":"luck-wonder4.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"","requested_by":"https://luck-wonder4.vercel.app/","date":"2025-07-12T23:15:29.821Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Tue, 24 Jun 2025 04:57:32 GMT","end":"Mon, 22 Sep 2025 04:57:31 GMT"},"fingerprint":{"sha1":"81:D3:FA:22:93:E5:25:70:85:9A:59:F7:5D:92:C4:FE:CF:35:0D:C7","sha256":"CF:7D:EA:B1:F6:D3:8D:F4:F7:DA:1F:83:F1:44:C8:1D:E2:58:46:A5:3A:AD:9E:5F:79:E0:C3:92:23:CE:2D:B7"}}},"request":{"raw":"GET /10cce595-2b6e-438c-94be-2d3bd657d44e.js HTTP/1.1\r\nHost: luck-wonder4.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://luck-wonder4.vercel.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 314834\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"10cce595-2b6e-438c-94be-2d3bd657d44e.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Sat, 12 Jul 2025 23:15:29 GMT\r\netag: \"7988263ea6f5d8c07fc48c122588bbf7\"\r\nlast-modified: Wed, 09 Jul 2025 07:48:15 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::qldk4-1752362129801-c2e8750c3e78\r\ncontent-length: 1517079\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":4174341,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65472)","md5":"7988263ea6f5d8c07fc48c122588bbf7","sha1":"076561ebaea8fdd7c7f3fac2f9a4418571bddd88","sha256":"c8847018c62e4bc5861b194fdb00517df0f15435c2d780716b10210621417869","sha512":"d9d5ca4330e2a4ce918573be8c6214364e3f1cbbc628a128c3b5edc06013f83b45d48c517b8fb2bc78262a8935f795116c11d55aa3d10fc5f15755e308bf59ee","ssdeep":"49152:qsd2Qtx4ibeImnYf/uvNZDh8PmYlVYk2tlgt37Qm:3xtl2t+","tlshash":"bc16b73128750096c51e0dabf2e6005ba1d79ee95a8e0bfff34ce46eb788d4158b7163","first_seen":"2025-06-21T11:56:31.552562Z","last_seen":"2025-07-18T14:19:56.874114Z","times_seen":53,"resource_available":true,"data":null}},"time_used":158,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":44,"receive":114,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"openphish","sensor_type":"url","title":"","description":"OpenPhish","scan_date":"2025-07-08","alert":"Crypto/Wallet","trigger":"luck-wonder4.vercel.app/","verdict":"phishing","severity":"medium","comment":"Crypto/Wallet","link":"https://openphish.com/","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-07-12","alert":"Sinkholed","trigger":"luck-wonder4.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}}]}