{"report_id":"e4c766f0-b294-44ad-9552-f733c3a36c12","version":6,"status":"done","tags":[],"date":"2025-08-06T14:03:11Z","url":{"schema":"https","addr":"lucky-box21.vercel.app/","fqdn":"lucky-box21.vercel.app","domain":"lucky-box21.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.195","port":0,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"lucky-box21.vercel.app/","fqdn":"lucky-box21.vercel.app","domain":"lucky-box21.vercel.app","tld":"vercel.app"},"title":"OpenSea.io"},"submit":{"url":{"schema":"https","addr":"lucky-box21.vercel.app/","fqdn":"lucky-box21.vercel.app","domain":"lucky-box21.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.195","port":0,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-09-10T14:03:11Z","useragent":"Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":3}},"detection":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-06","alert":"Sinkholed","trigger":"lucky-box21.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-08-06","alert":"Phishing - Crypto/Wallet","trigger":"lucky-box21.vercel.app","verdict":"phishing","severity":"medium","comment":"Crypto/Wallet","link":"https://openphish.com/","meta":null},{"sensor_name":"openphish","sensor_type":"url","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-08-06","alert":"Phishing - Crypto/Wallet","trigger":"lucky-box21.vercel.app/","verdict":"phishing","severity":"medium","comment":"Crypto/Wallet","link":"https://openphish.com","meta":null}],"urlquery":null},"summary":[{"fqdn":"lucky-box21.vercel.app","ip":{"addr":"216.198.79.195","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2020-01-28","domain_rank":0,"first_seen":"2025-08-05T12:30:33.951104Z","last_seen":"2025-08-05T12:30:33.951104Z","alert_count":54,"request_count":27,"received_data":8370480,"sent_data":12114,"comment":"","tags":null,"fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}]},{"fqdn":"cdnjs.cloudflare.com","ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-02-17","domain_rank":235,"first_seen":"2012-05-23T12:49:49Z","last_seen":"2025-07-30T15:19:50.250092Z","alert_count":0,"request_count":2,"received_data":798852,"sent_data":890,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":null}],"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"lucky-box21.vercel.app/jquery.min.js","fqdn":"lucky-box21.vercel.app","domain":"lucky-box21.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.195","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"2c872dbe60f4ba70fb85356113d8b35e","sha1":"ee48592d1fff952fcf06ce0b666ed4785493afdc","sha256":"fc9a93dd241f6b045cbff0481cf4e1901becd0e12fb45166a8f17f95823f0b1a","sha512":"bf6089ed4698cb8270a8b0c8ad9508ff886a7a842278e98064d5c1790ca3a36d5d69d9f047ef196882554fc104da2c88eb5395f1ee8cf0f3f6ff8869408350fe","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKr:sHNwcv9VBQpLl88SMBQ47GKr","tlshash":"3983f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","size":87533,"data":"","first_seen":"2023-08-31T16:03:19Z","last_seen":"2026-08-15T12:46:29.230054Z","times_seen":185847,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lucky-box21.vercel.app/2176db40-6d1e-4b81-8bbe-2164e2e9722f","fqdn":"lucky-box21.vercel.app","domain":"lucky-box21.vercel.app","tld":"vercel.app"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"24f1243d18e02c79eaf9463fd521b6a8","sha1":"f7e8748513e596f77addf887cc85173d676f36bf","sha256":"70633a82352ef52a4cf733ec699414d61577b6a92c53f4863bce2d6b051b923a","sha512":"361896668aefcacae578f1952d0b4f30eaf359927f95df4b33cb0541e159efe1d8016aaa8e5d302c85b1e0bffa353d59df244a554e98d1a65e84c895861bde0f","ssdeep":"","tlshash":"be112da3305ce6e3029ae9cff86d51c1f23546bc54a9f8a057d4c8f4844100734daa77","size":1000,"data":"","first_seen":"2025-04-19T11:59:30.147948Z","last_seen":"2026-02-13T10:36:27.96524Z","times_seen":74,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lucky-box21.vercel.app/","fqdn":"lucky-box21.vercel.app","domain":"lucky-box21.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.195","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"Function","is_inline":false,"md5":"aa049e2749b8531cb8f233c2f64fc2b2","sha1":"b611a5a62c1813ae5b4763378b3a4a565556530a","sha256":"e52e51d5897d7a179089ddcf8f5de7aeb3ef4f27b054b63e937cf308b685c9e2","sha512":"fa951f3911de780608d6235a597758320388dff58cf18dd584a6941ac88cc36cac7d52caa72b678ee6f4dff47ee23955ab282714d03e713ae2bed4cb73a3c14e","ssdeep":"","tlshash":"71a0128471d6e4004b7320e40437448490396c60348c848051048c721c651108236c1c","size":79,"data":"","first_seen":"2023-04-11T21:38:58Z","last_seen":"2026-08-15T11:58:40.445065Z","times_seen":237782,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lucky-box21.vercel.app/b5a7789d-f78b-412c-83e3-e4e16e864b16","fqdn":"lucky-box21.vercel.app","domain":"lucky-box21.vercel.app","tld":"vercel.app"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"05997da4a9c3d58ef33a7cf3d716af57","sha1":"3a7a7913c31aa2787a11dc6ba6fb5b5f2c525ac1","sha256":"e268ded9f58238c3885b4e0e83ddf10ea9552c488dd25538c8569ec2beff7eb9","sha512":"83413571115e6b39abe7e3b6573a81b3198125b35ae13e31d14c7cb3c81790b24a11cd81531a58922386bbf6e2d41ab6e449fc3206c8b7f20932820cdf58aefe","ssdeep":"49152:D+2KKNjyR5WP4CQjNn9GU6lCLsSPOnLUfJ8KZTcbQQqG7r8aQO/iSJNHoRO2sxSQ:RD8ew45JV","tlshash":"20f591496bf660358213f0795e6f8801b234a40b2949ed5c7e9c92f09f4953c8bf6fe9","size":3517001,"data":"","first_seen":"2025-07-12T22:38:09.134446Z","last_seen":"2026-08-09T15:35:30.742787Z","times_seen":4177,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lucky-box21.vercel.app/","fqdn":"lucky-box21.vercel.app","domain":"lucky-box21.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.195","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"Function","is_inline":false,"md5":"29d0c84b9d1d8da446a6062c6a840ad9","sha1":"6d6b3a6065667c7c50d92f3889c85ed65a9ad784","sha256":"3c3cbdb71d0d2c22f504f4d63d8a6ffe8d250cde7e58300619be35b6bbab26a1","sha512":"52cfcbf2f7c3521c5a6c6120099ee6822d16e04ffbc04720da925a11242c8c2050f9cfc8d864a6d39a0036ac599f701080195a29a7c5e8d3e9308b91f9f0390f","ssdeep":"","tlshash":"428004d533c350004753117c04571cc4d034447014444d405040d4531c570315115c7c","size":37,"data":"","first_seen":"2023-04-11T21:31:25Z","last_seen":"2026-08-15T12:44:57.17535Z","times_seen":743853,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lucky-box21.vercel.app/","fqdn":"lucky-box21.vercel.app","domain":"lucky-box21.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.195","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"ac833e2f73af3c1b6f06bd571d412a65","sha1":"c02095c5b90aa482cb4ececc39706812e7891b4d","sha256":"993a5e2cca7f133ee0234d6a691002a62b68f2acdf39739756f1e7b57e34b4e7","sha512":"c2f98cbb3d3e8958863b56de9e57182448e52e4bddef04e63ec6b33e16380f3e61c1771beff112699476451075e1c0024eb3c7d43e1c1c11ff2077967036fef7","ssdeep":"","tlshash":"fcc012df3eab131006ce642745ae174c3830c00d4c4516052d788ae04961eb63c27888","size":191,"data":"","first_seen":"2025-04-28T13:51:37.805758Z","last_seen":"2026-05-03T14:33:13.070005Z","times_seen":1178,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lucky-box21.vercel.app/","fqdn":"lucky-box21.vercel.app","domain":"lucky-box21.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.195","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"ecb7f2f385b9fdbc6d43876a58325474","sha1":"0b7205215fd2343593f059c191d27b38971a269d","sha256":"f52d4aeef354cba526a8e6f46af08dd691d1d2b5b257d7b0d4f173310bf8b39b","sha512":"159a4656dacd118a65ee39ad0b8efcfd5932660288afb7894b0cd63d5c774181141570d8dd8a2fca01ec8c9f8430731ce25c6569de981710e207cedfd2edd080","ssdeep":"","tlshash":"77f0e219bca2c1220e6a1007237ef248202050278309e40a38eb8f5c4f60fe45c21dd6","size":470,"data":"","first_seen":"2025-04-25T09:17:06.98773Z","last_seen":"2026-05-03T14:33:13.070949Z","times_seen":460,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lucky-box21.vercel.app/b29def00-1d18-46b5-9583-f9f5a8ef2835","fqdn":"lucky-box21.vercel.app","domain":"lucky-box21.vercel.app","tld":"vercel.app"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"ec26a722169cb2cef03353fcf8dd144a","sha1":"6eec6673abcde3d29547796a38361256d9efde1c","sha256":"01861fcd47bc63bb7be76c480bad4c6cc987c8996ab0e023a4e692b68c94b05c","sha512":"c885e5d94bd96fa4a573524356e0ca7398b1489f5a39fc1120cf7f4e469950630ad3e9f48dd0392acd36da390c27a4be1e81da943d1d9ecd48890d1691e416cf","ssdeep":"6144:Ufg7z90bnvLZqnWTI9esVTMuyEvtzXNglxQP92L:VzBe6kEdOxQoL","tlshash":"bf740980b261b07247da24e10477540af339e96c744a40acf6a8d8fb7dbd589957ff38","size":357754,"data":"","first_seen":"2025-07-12T22:38:09.13306Z","last_seen":"2026-08-09T15:35:30.742044Z","times_seen":5092,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lucky-box21.vercel.app/57c4fb9d-de7f-4ef1-880c-160f68af18e5","fqdn":"lucky-box21.vercel.app","domain":"lucky-box21.vercel.app","tld":"vercel.app"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"f11bcdc7b7757c117a8de0db3a4c25b8","sha1":"962e4d08a960106c829d0f9d492d7b891927adab","sha256":"b60b89c0c92cf57329c8590a2c5540cece4def64e4e7bf04f2d39b8ffa3b2748","sha512":"7461553dadb09db423bda8c47a58f8cdade82aa710a0f4415cde912e7a88cd4471ea86aa58a2e5097c90e2cb45ac410104019c56a04c35955e827f0bb0796040","ssdeep":"6144:vkWGL6BSn5NGCk3zi0mCw8wLPNU2HZjGfty3:cjkSnv1k20mCwFnHRGfty3","tlshash":"1044810609ac4f7986ec22e015f72cc401794e0ad9dc3cbfb9ada1579e25bd6e0c279d","size":259964,"data":"","first_seen":"2025-07-13T03:04:16.940864Z","last_seen":"2026-08-13T18:03:54.375268Z","times_seen":5113,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lucky-box21.vercel.app/a10695b6-3724-4f17-a27a-aeedd7ce88d6","fqdn":"lucky-box21.vercel.app","domain":"lucky-box21.vercel.app","tld":"vercel.app"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"5583699bb98c20ba476a3aaaaa839bb6","sha1":"54e3d71fe13eb8321edf2f7db4b791dfedba1031","sha256":"d98fb7c5e71057f445968621b8be5b4cd24c0a99397c84f3e224afb7e1a26923","sha512":"d5caafa9b5b96ac258f3c09d3a8c9548b58f6dffc87df05da1608479c00da692747625cffa0a94a5d339797822b59dcf5f0f3d621ff8f4cf938b959f3d396007","ssdeep":"24576:M2th90xeQBmeqgFhjaR6NhI8GiNNrgmeZKXgYg1PFOXZ:OxvmghHNJgmjWI","tlshash":"6436628ed9196cf28cad828f1231c484840176daf98e516df61cfe9d6389b57cc9db32","size":4874043,"data":"","first_seen":"2025-08-02T14:31:55.253271Z","last_seen":"2025-08-07T13:26:28.480635Z","times_seen":30,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"lucky-box21.vercel.app/img/1.html","fqdn":"lucky-box21.vercel.app","domain":"lucky-box21.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.195","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lucky-box21.vercel.app/","date":"2025-08-06T14:02:53.300Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Tue, 24 Jun 2025 04:57:32 GMT","end":"Mon, 22 Sep 2025 04:57:31 GMT"},"fingerprint":{"sha1":"81:D3:FA:22:93:E5:25:70:85:9A:59:F7:5D:92:C4:FE:CF:35:0D:C7","sha256":"CF:7D:EA:B1:F6:D3:8D:F4:F7:DA:1F:83:F1:44:C8:1D:E2:58:46:A5:3A:AD:9E:5F:79:E0:C3:92:23:CE:2D:B7"}}},"request":{"raw":"GET /img/1.html HTTP/1.1\r\nHost: lucky-box21.vercel.app\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://lucky-box21.vercel.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 60818\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"1.html\"\r\ncontent-encoding: br\r\ncontent-type: text/html; charset=utf-8\r\ndate: Wed, 06 Aug 2025 14:02:53 GMT\r\netag: \"0a27a4163254fc8fce870c8cc3a3f94f\"\r\nlast-modified: Tue, 05 Aug 2025 21:09:14 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::q7jzs-1754488973278-5fc63473f5dd\r\ncontent-length: 891\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1808,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"0a27a4163254fc8fce870c8cc3a3f94f","sha1":"f27cf04699668916346eee510eab7e5a17e83997","sha256":"b77b97fe780d35d18248abd1d2f42f444afbabe43f6abcd8fa8ebb3d47825eee","sha512":"552e388db389c5142d303ca531bbe6ec5706864a84e78b91a16e1169b45d08ac1b9b1df576055b86f3a0f9c6668fe3488e3664e191bc1978848594358a256019","ssdeep":"","tlshash":"6c31012b8b915e0ff14740113ac3b7425b59c9076207b63f3e4c9615cf8e466d1e3388","first_seen":"2023-04-05T03:09:34Z","last_seen":"2026-08-13T07:12:51.227795Z","times_seen":4800,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-06","alert":"Sinkholed","trigger":"lucky-box21.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-08-06","alert":"Phishing - Crypto/Wallet","trigger":"lucky-box21.vercel.app","verdict":"phishing","severity":"medium","comment":"Crypto/Wallet","link":"https://openphish.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lucky-box21.vercel.app/fonts/NotoSans-SemiBold.ttf","fqdn":"lucky-box21.vercel.app","domain":"lucky-box21.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.195","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://lucky-box21.vercel.app/","date":"2025-08-06T14:02:53.461Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Tue, 24 Jun 2025 04:57:32 GMT","end":"Mon, 22 Sep 2025 04:57:31 GMT"},"fingerprint":{"sha1":"81:D3:FA:22:93:E5:25:70:85:9A:59:F7:5D:92:C4:FE:CF:35:0D:C7","sha256":"CF:7D:EA:B1:F6:D3:8D:F4:F7:DA:1F:83:F1:44:C8:1D:E2:58:46:A5:3A:AD:9E:5F:79:E0:C3:92:23:CE:2D:B7"}}},"request":{"raw":"GET /fonts/NotoSans-SemiBold.ttf HTTP/1.1\r\nHost: lucky-box21.vercel.app\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://lucky-box21.vercel.app/css/fonts.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 0\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"NotoSans-SemiBold.ttf\"\r\ncontent-encoding: br\r\ncontent-type: font/ttf\r\ndate: Wed, 06 Aug 2025 14:02:53 GMT\r\netag: \"63bbc52e6ef89a5b1a50f1c9c4710d1b\"\r\nlast-modified: Wed, 06 Aug 2025 14:02:53 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::6pbqg-1754488973452-0a2c2b9f801c\r\ncontent-length: 265892\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":556932,"size_decoded":0,"mime_type":"font/ttf","magic":"TrueType Font data, 15 tables, 1st \"GDEF\", 40 names, Microsoft, language 0x409","md5":"63bbc52e6ef89a5b1a50f1c9c4710d1b","sha1":"b85778134956f02b1c3c20617f14ae29b4680e12","sha256":"3760806c6e1a9d312b3f884e072e6ce043e0118f624d607360b4d57993ce29a2","sha512":"3881de8bd8447464a58bfce6ebb646d260b4fbbb6a2d7015f5afd7bedeb96b2462b6fc51950f68675679385197241a885fb60fa8242f1b3e9667d5c9fd47015c","ssdeep":"6144:KYAdNuqPGmp1XWATstHEMk0QyeP5HVDHzDCfz1nfRgMqksmMiF6wS/jzyYi:KTdjGoTavkCFz1nZgMqkrP6RfU","tlshash":"95c48e07f393ea89c7032cb8c266e3a13356bd7179bf434bea815a6af45f4c04d94694","first_seen":"2023-06-17T22:17:15Z","last_seen":"2026-08-10T20:32:07.341316Z","times_seen":2523,"resource_available":false,"data":null}},"time_used":319,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":300,"receive":19,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-06","alert":"Sinkholed","trigger":"lucky-box21.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-08-06","alert":"Phishing - Crypto/Wallet","trigger":"lucky-box21.vercel.app","verdict":"phishing","severity":"medium","comment":"Crypto/Wallet","link":"https://openphish.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lucky-box21.vercel.app/389-9bec97c22fa2e411.gif","fqdn":"lucky-box21.vercel.app","domain":"lucky-box21.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.195","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lucky-box21.vercel.app/","date":"2025-08-06T14:02:47.037Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Tue, 24 Jun 2025 04:57:32 GMT","end":"Mon, 22 Sep 2025 04:57:31 GMT"},"fingerprint":{"sha1":"81:D3:FA:22:93:E5:25:70:85:9A:59:F7:5D:92:C4:FE:CF:35:0D:C7","sha256":"CF:7D:EA:B1:F6:D3:8D:F4:F7:DA:1F:83:F1:44:C8:1D:E2:58:46:A5:3A:AD:9E:5F:79:E0:C3:92:23:CE:2D:B7"}}},"request":{"raw":"GET /389-9bec97c22fa2e411.gif HTTP/1.1\r\nHost: lucky-box21.vercel.app\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://lucky-box21.vercel.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 0\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"389-9bec97c22fa2e411.gif\"\r\ncontent-type: image/gif\r\ndate: Wed, 06 Aug 2025 14:02:47 GMT\r\netag: \"b9f393bd75705f60c29e15ceddfd2db9\"\r\nlast-modified: Wed, 06 Aug 2025 14:02:47 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::j7cjp-1754488966990-0dd31d2a9c57\r\ncontent-length: 660432\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":660432,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 87a, 750 x 750","md5":"b9f393bd75705f60c29e15ceddfd2db9","sha1":"9b3c4261f673b54903d47a5df6b6c981cdd1276e","sha256":"09268325243816ed6fe7a556c9e33ff179eae6e4a1e9de2194f590aef36d905e","sha512":"9b01dd59ed87b5d36299b07ea6f5c185c33732b2ad2a461c7f562e7859156391725b7898fcdb018ce8f4695c24095a4748fedef2f47bbd9c1485b342d83571dd","ssdeep":"12288:4qRRfCKpf2pLLpuXr0NjO/J4wEymLAR4pRQpUbbkV0Os3dymTa6lgbkv8O3hjdp+:4+RfnpiLIXr0EKyjR4pyAOs3dymTmbz7","tlshash":"8ae423fac354e16d7279a9f8509f291b3d0d9c6d458c8d428c046f7af9848f8e72ca62","first_seen":"2023-10-26T15:01:35Z","last_seen":"2026-08-10T20:32:07.353011Z","times_seen":3192,"resource_available":false,"data":null}},"time_used":358,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":332,"receive":26,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-06","alert":"Sinkholed","trigger":"lucky-box21.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-08-06","alert":"Phishing - Crypto/Wallet","trigger":"lucky-box21.vercel.app","verdict":"phishing","severity":"medium","comment":"Crypto/Wallet","link":"https://openphish.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lucky-box21.vercel.app/js/index.html","fqdn":"lucky-box21.vercel.app","domain":"lucky-box21.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.195","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://lucky-box21.vercel.app/","date":"2025-08-06T14:02:54.116Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Tue, 24 Jun 2025 04:57:32 GMT","end":"Mon, 22 Sep 2025 04:57:31 GMT"},"fingerprint":{"sha1":"81:D3:FA:22:93:E5:25:70:85:9A:59:F7:5D:92:C4:FE:CF:35:0D:C7","sha256":"CF:7D:EA:B1:F6:D3:8D:F4:F7:DA:1F:83:F1:44:C8:1D:E2:58:46:A5:3A:AD:9E:5F:79:E0:C3:92:23:CE:2D:B7"}}},"request":{"raw":"GET /js/index.html HTTP/1.1\r\nHost: lucky-box21.vercel.app\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://lucky-box21.vercel.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-type: text/plain; charset=utf-8\r\ndate: Wed, 06 Aug 2025 14:02:54 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-error: NOT_FOUND\r\nx-vercel-id: arn1::6cpwf-1754488974129-1b0b8659ccfe\r\ncontent-length: 79\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":79,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"c87c404741d068b6ae2c4281a0f5c203","sha1":"e59e2985ae45e359ba8be24e4dfddfdb81c64c26","sha256":"91cd9eae9396581ee4cfeb0b0ef2c5eee8b36794942cb44ad8353e01dd56d7ee","sha512":"f0190f0ac4dff8cc96615804069029396c8c7d654f8b5744d8aaa1f5ee3c8cb9f0ecae8ccd3f3214a97efe068094585843a3035e4c2d38674b41e5fe2d916260","ssdeep":"","tlshash":"43a0124d3b4d080c36c0240061060137000601625e90d10041a82554231c2cd6700041","first_seen":"2025-08-06T14:03:16.334741Z","last_seen":"2025-08-06T14:03:16.334741Z","times_seen":1,"resource_available":false,"data":null}},"time_used":60,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":59,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-06","alert":"Sinkholed","trigger":"lucky-box21.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-08-06","alert":"Phishing - Crypto/Wallet","trigger":"lucky-box21.vercel.app","verdict":"phishing","severity":"medium","comment":"Crypto/Wallet","link":"https://openphish.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lucky-box21.vercel.app/","fqdn":"lucky-box21.vercel.app","domain":"lucky-box21.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.195","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-08-06T14:02:46.638Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Tue, 24 Jun 2025 04:57:32 GMT","end":"Mon, 22 Sep 2025 04:57:31 GMT"},"fingerprint":{"sha1":"81:D3:FA:22:93:E5:25:70:85:9A:59:F7:5D:92:C4:FE:CF:35:0D:C7","sha256":"CF:7D:EA:B1:F6:D3:8D:F4:F7:DA:1F:83:F1:44:C8:1D:E2:58:46:A5:3A:AD:9E:5F:79:E0:C3:92:23:CE:2D:B7"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: lucky-box21.vercel.app\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 13284\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline\r\ncontent-encoding: br\r\ncontent-type: text/html; charset=utf-8\r\ndate: Wed, 06 Aug 2025 14:02:46 GMT\r\netag: \"3050f9598a945deedccc4c24f4444549\"\r\nlast-modified: Wed, 06 Aug 2025 10:21:22 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::q7jzs-1754488966675-7b3af9c7cb8d\r\ncontent-length: 15732\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}],"data":{"size":70321,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1611), with CRLF line terminators","md5":"3050f9598a945deedccc4c24f4444549","sha1":"1a031941da134e26cc43dc3e0c85c3c69e36a82a","sha256":"29df9eeeeb6e08eb9b59da1ebc10130145bc657b80ca642eea414bba9bc16aac","sha512":"5443ab37b322c4bff1b6000e16e7355c965bd0e49282a90dd5c5dfba828612226bee6ad0851c475a5eb5e80a05144d07b9fafddbb1566ded2617e171558f6c59","ssdeep":"768:EhXTt3XN39Z0hv6yYqcOcBCoyGyhXTYmXNO9beJx:8t90V6yJcOdYBeJx","tlshash":"1463c7f897d8a2b2a132d3d4db214965ff1711e79a42c614b3ec6f9b5fb284d8c4b840","first_seen":"2025-08-02T14:31:55.232008Z","last_seen":"2025-08-07T13:26:28.461976Z","times_seen":32,"resource_available":false,"data":null}},"time_used":120,"timings":{"blocked":32,"dns":1,"connect":1,"send":0,"wait":11,"receive":45,"ssl":27},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-06","alert":"Sinkholed","trigger":"lucky-box21.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"openphish","sensor_type":"url","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-08-06","alert":"Phishing - Crypto/Wallet","trigger":"lucky-box21.vercel.app/","verdict":"phishing","severity":"medium","comment":"Crypto/Wallet","link":"https://openphish.com","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lucky-box21.vercel.app/js/slick-1.8.1/slick/slick.min.html","fqdn":"lucky-box21.vercel.app","domain":"lucky-box21.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.195","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://lucky-box21.vercel.app/","date":"2025-08-06T14:02:47.020Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Tue, 24 Jun 2025 04:57:32 GMT","end":"Mon, 22 Sep 2025 04:57:31 GMT"},"fingerprint":{"sha1":"81:D3:FA:22:93:E5:25:70:85:9A:59:F7:5D:92:C4:FE:CF:35:0D:C7","sha256":"CF:7D:EA:B1:F6:D3:8D:F4:F7:DA:1F:83:F1:44:C8:1D:E2:58:46:A5:3A:AD:9E:5F:79:E0:C3:92:23:CE:2D:B7"}}},"request":{"raw":"GET /js/slick-1.8.1/slick/slick.min.html HTTP/1.1\r\nHost: lucky-box21.vercel.app\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://lucky-box21.vercel.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-type: text/plain; charset=utf-8\r\ndate: Wed, 06 Aug 2025 14:02:46 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-error: NOT_FOUND\r\nx-vercel-id: arn1::6pbqg-1754488966984-b19df25d74cf\r\ncontent-length: 79\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":79,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"3e1ba314554fffda36e7cfed08857a3c","sha1":"ff8bc9a1a99edfa7a4a5d8dba93fe9ccedf8e1d3","sha256":"502d4f0dbb596afa51bcf8456ddb96c9d125bee4946ce41f3f7e8e0154260c0a","sha512":"2b318c3d9116a7eb57ba46ca15fda4749b8fec11a32558dd30d9bee8f89fd6a2397aae87a4b6b2bfc2093aab85e2577ce90cc8be757f7289163225a07e4a24cd","ssdeep":"","tlshash":"7da0110e0a8008a833c802003002023aa0088022aab2aa8080ccb2002a28a8fa380c88","first_seen":"2025-08-06T14:03:16.337317Z","last_seen":"2025-08-06T14:03:16.337317Z","times_seen":1,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-06","alert":"Sinkholed","trigger":"lucky-box21.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-08-06","alert":"Phishing - Crypto/Wallet","trigger":"lucky-box21.vercel.app","verdict":"phishing","severity":"medium","comment":"Crypto/Wallet","link":"https://openphish.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lucky-box21.vercel.app/fonts/NotoSans-Medium.ttf","fqdn":"lucky-box21.vercel.app","domain":"lucky-box21.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.195","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://lucky-box21.vercel.app/","date":"2025-08-06T14:02:53.458Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Tue, 24 Jun 2025 04:57:32 GMT","end":"Mon, 22 Sep 2025 04:57:31 GMT"},"fingerprint":{"sha1":"81:D3:FA:22:93:E5:25:70:85:9A:59:F7:5D:92:C4:FE:CF:35:0D:C7","sha256":"CF:7D:EA:B1:F6:D3:8D:F4:F7:DA:1F:83:F1:44:C8:1D:E2:58:46:A5:3A:AD:9E:5F:79:E0:C3:92:23:CE:2D:B7"}}},"request":{"raw":"GET /fonts/NotoSans-Medium.ttf HTTP/1.1\r\nHost: lucky-box21.vercel.app\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://lucky-box21.vercel.app/css/fonts.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 60816\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"NotoSans-Medium.ttf\"\r\ncontent-encoding: br\r\ncontent-type: font/ttf\r\ndate: Wed, 06 Aug 2025 14:02:53 GMT\r\netag: \"f2197cc8a55ba75995cd38d00e8be599\"\r\nlast-modified: Tue, 05 Aug 2025 21:09:17 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::m6zjt-1754488973452-faaa441fb209\r\ncontent-length: 264891\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":555264,"size_decoded":0,"mime_type":"font/ttf","magic":"TrueType Font data, 15 tables, 1st \"GDEF\", 40 names, Microsoft, language 0x409","md5":"f2197cc8a55ba75995cd38d00e8be599","sha1":"24d2fbcedc876231b51ea8c096f21883d27ece5a","sha256":"ac2c786babb3fd1603d174e6108cc222cede9b0968540a16a7b34ac454467d5e","sha512":"8651854612e80507fdd03f6f3a2a1f9ea69a48e4c1e4f2801d393b96865df7b728a0801e42eb8fd44748f263743e2df56d8524b537fb2f20aa0717ba9bd6aa44","ssdeep":"6144:OblnA0lmqPGmp1tWtupFrJL7FsZhHg1mzmmA1CoVbnKd6TYsSpmUKwbXPYL19:YFLGmFAdgKmmAEObnuQYbpmUKwTi9","tlshash":"8dc49e07e393da4ed3032df8d2a693922395fd7179bf834be6425a6af48f4c04d94294","first_seen":"2023-06-06T21:12:56Z","last_seen":"2026-08-12T11:38:11.644414Z","times_seen":2573,"resource_available":false,"data":null}},"time_used":60,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":39,"receive":21,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-06","alert":"Sinkholed","trigger":"lucky-box21.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-08-06","alert":"Phishing - Crypto/Wallet","trigger":"lucky-box21.vercel.app","verdict":"phishing","severity":"medium","comment":"Crypto/Wallet","link":"https://openphish.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lucky-box21.vercel.app/img/3.html","fqdn":"lucky-box21.vercel.app","domain":"lucky-box21.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.195","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lucky-box21.vercel.app/","date":"2025-08-06T14:02:53.353Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Tue, 24 Jun 2025 04:57:32 GMT","end":"Mon, 22 Sep 2025 04:57:31 GMT"},"fingerprint":{"sha1":"81:D3:FA:22:93:E5:25:70:85:9A:59:F7:5D:92:C4:FE:CF:35:0D:C7","sha256":"CF:7D:EA:B1:F6:D3:8D:F4:F7:DA:1F:83:F1:44:C8:1D:E2:58:46:A5:3A:AD:9E:5F:79:E0:C3:92:23:CE:2D:B7"}}},"request":{"raw":"GET /img/3.html HTTP/1.1\r\nHost: lucky-box21.vercel.app\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://lucky-box21.vercel.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 49956\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"3.html\"\r\ncontent-encoding: br\r\ncontent-type: text/html; charset=utf-8\r\ndate: Wed, 06 Aug 2025 14:02:53 GMT\r\netag: \"0a27a4163254fc8fce870c8cc3a3f94f\"\r\nlast-modified: Wed, 06 Aug 2025 00:10:17 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::6cpwf-1754488973293-ea40c5b195b6\r\ncontent-length: 891\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":1808,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"0a27a4163254fc8fce870c8cc3a3f94f","sha1":"f27cf04699668916346eee510eab7e5a17e83997","sha256":"b77b97fe780d35d18248abd1d2f42f444afbabe43f6abcd8fa8ebb3d47825eee","sha512":"552e388db389c5142d303ca531bbe6ec5706864a84e78b91a16e1169b45d08ac1b9b1df576055b86f3a0f9c6668fe3488e3664e191bc1978848594358a256019","ssdeep":"","tlshash":"6c31012b8b915e0ff14740113ac3b7425b59c9076207b63f3e4c9615cf8e466d1e3388","first_seen":"2023-04-05T03:09:34Z","last_seen":"2026-08-13T07:12:51.227795Z","times_seen":4800,"resource_available":true,"data":null}},"time_used":48,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":47,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-06","alert":"Sinkholed","trigger":"lucky-box21.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-08-06","alert":"Phishing - Crypto/Wallet","trigger":"lucky-box21.vercel.app","verdict":"phishing","severity":"medium","comment":"Crypto/Wallet","link":"https://openphish.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lucky-box21.vercel.app/fonts/NotoSans-Bold.ttf","fqdn":"lucky-box21.vercel.app","domain":"lucky-box21.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.195","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://lucky-box21.vercel.app/","date":"2025-08-06T14:02:53.450Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Tue, 24 Jun 2025 04:57:32 GMT","end":"Mon, 22 Sep 2025 04:57:31 GMT"},"fingerprint":{"sha1":"81:D3:FA:22:93:E5:25:70:85:9A:59:F7:5D:92:C4:FE:CF:35:0D:C7","sha256":"CF:7D:EA:B1:F6:D3:8D:F4:F7:DA:1F:83:F1:44:C8:1D:E2:58:46:A5:3A:AD:9E:5F:79:E0:C3:92:23:CE:2D:B7"}}},"request":{"raw":"GET /fonts/NotoSans-Bold.ttf HTTP/1.1\r\nHost: lucky-box21.vercel.app\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://lucky-box21.vercel.app/css/fonts.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 49956\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"NotoSans-Bold.ttf\"\r\ncontent-encoding: br\r\ncontent-type: font/ttf\r\ndate: Wed, 06 Aug 2025 14:02:53 GMT\r\netag: \"8ac165243fb633296963b149f206a377\"\r\nlast-modified: Wed, 06 Aug 2025 00:10:17 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::m6zjt-1754488973443-7385aae1325a\r\ncontent-length: 258283\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":557380,"size_decoded":0,"mime_type":"font/ttf","magic":"TrueType Font data, 15 tables, 1st \"GDEF\", 38 names, Microsoft, language 0x409","md5":"8ac165243fb633296963b149f206a377","sha1":"20f80dbd99b857c66796321d3f596400d1334ca7","sha256":"5528f4642755845dfc1f7ffff10d1e3887bc9f66d19d6b3ec8ec8d7e58c94c5e","sha512":"945d82992e8690179c3a15cdcab421c7e2cc7a68a379ce9e21a64838a3180eeba6f42f8b6b64982d5af28d481dc97d806dd45b77a1c82effa3bcbf0c06b8cc47","ssdeep":"12288:UGl49NHyzW3aViwhSTjKLWOA0lPTp8tQkfOzp:Hl49NHZaViwSTuWAW/k","tlshash":"f5c48d07e397de8dd7022df8c269d3a12791bd3179bf830be6825a26f49f0d04e94694","first_seen":"2023-05-22T23:56:52Z","last_seen":"2026-08-14T03:28:20.450213Z","times_seen":2658,"resource_available":false,"data":null}},"time_used":44,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":29,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-06","alert":"Sinkholed","trigger":"lucky-box21.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-08-06","alert":"Phishing - Crypto/Wallet","trigger":"lucky-box21.vercel.app","verdict":"phishing","severity":"medium","comment":"Crypto/Wallet","link":"https://openphish.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lucky-box21.vercel.app/css/drops.css","fqdn":"lucky-box21.vercel.app","domain":"lucky-box21.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.195","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://lucky-box21.vercel.app/","date":"2025-08-06T14:02:46.972Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Tue, 24 Jun 2025 04:57:32 GMT","end":"Mon, 22 Sep 2025 04:57:31 GMT"},"fingerprint":{"sha1":"81:D3:FA:22:93:E5:25:70:85:9A:59:F7:5D:92:C4:FE:CF:35:0D:C7","sha256":"CF:7D:EA:B1:F6:D3:8D:F4:F7:DA:1F:83:F1:44:C8:1D:E2:58:46:A5:3A:AD:9E:5F:79:E0:C3:92:23:CE:2D:B7"}}},"request":{"raw":"GET /css/drops.css HTTP/1.1\r\nHost: lucky-box21.vercel.app\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://lucky-box21.vercel.app/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 262178\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"drops.css\"\r\ncontent-type: text/css; charset=utf-8\r\ndate: Wed, 06 Aug 2025 14:02:47 GMT\r\netag: \"080956b8390da3afbba148f08e28d4b2\"\r\nlast-modified: Sun, 03 Aug 2025 13:13:08 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::r8fcg-1754488966959-08dcf66ec770\r\ncontent-length: 858\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":858,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"Unicode text, UTF-8 text, with CRLF line terminators","md5":"080956b8390da3afbba148f08e28d4b2","sha1":"ba7c30b88efc976dd954c3179320c7e6e70ded77","sha256":"33276e688f392e16df4088e7f6988047690be6777596c240f33f3dfa7d48f485","sha512":"0f91948ba1108587f477f4b0bc6b9c7a441a59fb0657f5763760ca87abd70df7793b2c3e101683cd5c98e07af7b56f4b21cdb4c51a772a912aa6ee8f4c903f3b","ssdeep":"","tlshash":"3b11eb26bf0254c5a326c9b8b3f28f75ee220220ca1a60b4b1f5a805c74375f17dd786","first_seen":"2023-06-08T14:23:55Z","last_seen":"2026-08-10T20:32:07.343185Z","times_seen":1955,"resource_available":false,"data":null}},"time_used":362,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":362,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-06","alert":"Sinkholed","trigger":"lucky-box21.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-08-06","alert":"Phishing - Crypto/Wallet","trigger":"lucky-box21.vercel.app","verdict":"phishing","severity":"medium","comment":"Crypto/Wallet","link":"https://openphish.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lucky-box21.vercel.app/img/load%202.html","fqdn":"lucky-box21.vercel.app","domain":"lucky-box21.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.195","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lucky-box21.vercel.app/","date":"2025-08-06T14:02:46.994Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Tue, 24 Jun 2025 04:57:32 GMT","end":"Mon, 22 Sep 2025 04:57:31 GMT"},"fingerprint":{"sha1":"81:D3:FA:22:93:E5:25:70:85:9A:59:F7:5D:92:C4:FE:CF:35:0D:C7","sha256":"CF:7D:EA:B1:F6:D3:8D:F4:F7:DA:1F:83:F1:44:C8:1D:E2:58:46:A5:3A:AD:9E:5F:79:E0:C3:92:23:CE:2D:B7"}}},"request":{"raw":"GET /img/load%202.html HTTP/1.1\r\nHost: lucky-box21.vercel.app\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://lucky-box21.vercel.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 49954\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"load 2.html\"\r\ncontent-encoding: br\r\ncontent-type: text/html; charset=utf-8\r\ndate: Wed, 06 Aug 2025 14:02:47 GMT\r\netag: \"0a27a4163254fc8fce870c8cc3a3f94f\"\r\nlast-modified: Wed, 06 Aug 2025 00:10:13 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::fwwbn-1754488966969-470dfbd10dd7\r\ncontent-length: 891\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1808,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"0a27a4163254fc8fce870c8cc3a3f94f","sha1":"f27cf04699668916346eee510eab7e5a17e83997","sha256":"b77b97fe780d35d18248abd1d2f42f444afbabe43f6abcd8fa8ebb3d47825eee","sha512":"552e388db389c5142d303ca531bbe6ec5706864a84e78b91a16e1169b45d08ac1b9b1df576055b86f3a0f9c6668fe3488e3664e191bc1978848594358a256019","ssdeep":"","tlshash":"6c31012b8b915e0ff14740113ac3b7425b59c9076207b63f3e4c9615cf8e466d1e3388","first_seen":"2023-04-05T03:09:34Z","last_seen":"2026-08-13T07:12:51.227795Z","times_seen":4800,"resource_available":true,"data":null}},"time_used":211,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":210,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-06","alert":"Sinkholed","trigger":"lucky-box21.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-08-06","alert":"Phishing - Crypto/Wallet","trigger":"lucky-box21.vercel.app","verdict":"phishing","severity":"medium","comment":"Crypto/Wallet","link":"https://openphish.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lucky-box21.vercel.app/img/high.mp4","fqdn":"lucky-box21.vercel.app","domain":"lucky-box21.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.195","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://lucky-box21.vercel.app/","date":"2025-08-06T14:02:53.648Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Tue, 24 Jun 2025 04:57:32 GMT","end":"Mon, 22 Sep 2025 04:57:31 GMT"},"fingerprint":{"sha1":"81:D3:FA:22:93:E5:25:70:85:9A:59:F7:5D:92:C4:FE:CF:35:0D:C7","sha256":"CF:7D:EA:B1:F6:D3:8D:F4:F7:DA:1F:83:F1:44:C8:1D:E2:58:46:A5:3A:AD:9E:5F:79:E0:C3:92:23:CE:2D:B7"}}},"request":{"raw":"GET /img/high.mp4 HTTP/1.1\r\nHost: lucky-box21.vercel.app\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://lucky-box21.vercel.app/\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 206 Partial Content\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 262181\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"high.mp4\"\r\ncontent-range: bytes 0-1461297/1461298\r\ncontent-type: video/mp4\r\ndate: Wed, 06 Aug 2025 14:02:53 GMT\r\netag: \"c90ca846f46fb1e8b04807ed1cd85774\"\r\nlast-modified: Sun, 03 Aug 2025 13:13:11 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::m6zjt-1754488973656-3149b8e2b616\r\ncontent-length: 1461298\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1072237,"size_decoded":0,"mime_type":"video/mp4","magic":"ISO Media, MP4 v2 [ISO 14496-14]","md5":"3c99b647f081d42c395cd7d328b2327e","sha1":"1d3312e8f38363483336ff27a4b23880165f6f10","sha256":"f71d8b88ac80ccfb3b864d8bbcf431bb7bbc68bbefea053e0d3f4b729378159e","sha512":"b81c9229a2123d8df65acde38c5f0cac31466e4a8b95582a9eb9a4ebc0bb3c70aa63942d1b7bc97d3cc6c15fef4443e728202ed1e05c9ac3fd22a7dcda986d4e","ssdeep":"24576:7zGcNycaceYInbmfavawO5zSltGRztBfYUH7:7zg1BhnbIavtYel8VH","tlshash":"872522e4bdd0d833e74415bb9646db2208617a94c5a0dfc77aad08c60bf4ac26f68f17","first_seen":"2024-01-07T05:50:31Z","last_seen":"2026-08-10T20:32:07.348607Z","times_seen":1064,"resource_available":false,"data":null}},"time_used":237,"timings":{"blocked":2,"dns":0,"connect":0,"send":0,"wait":16,"receive":219,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-06","alert":"Sinkholed","trigger":"lucky-box21.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-08-06","alert":"Phishing - Crypto/Wallet","trigger":"lucky-box21.vercel.app","verdict":"phishing","severity":"medium","comment":"Crypto/Wallet","link":"https://openphish.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lucky-box21.vercel.app/svelte-1.5.4.min.js","fqdn":"lucky-box21.vercel.app","domain":"lucky-box21.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.195","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://lucky-box21.vercel.app/","date":"2025-08-06T14:02:46.987Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Tue, 24 Jun 2025 04:57:32 GMT","end":"Mon, 22 Sep 2025 04:57:31 GMT"},"fingerprint":{"sha1":"81:D3:FA:22:93:E5:25:70:85:9A:59:F7:5D:92:C4:FE:CF:35:0D:C7","sha256":"CF:7D:EA:B1:F6:D3:8D:F4:F7:DA:1F:83:F1:44:C8:1D:E2:58:46:A5:3A:AD:9E:5F:79:E0:C3:92:23:CE:2D:B7"}}},"request":{"raw":"GET /svelte-1.5.4.min.js HTTP/1.1\r\nHost: lucky-box21.vercel.app\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://lucky-box21.vercel.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 60811\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"svelte-1.5.4.min.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Wed, 06 Aug 2025 14:02:46 GMT\r\netag: \"dfb04536f5a0b850b55bcd6290f8660b\"\r\nlast-modified: Tue, 05 Aug 2025 21:09:15 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::8bnwr-1754488966969-1f54d1b1e69a\r\ncontent-length: 3408825\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4677158,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"950bb58847f1ca5108fda3cc7c3cb3b2","sha1":"6d14317823a721d2b746f9da28e1402e8b712d39","sha256":"4491ed21a9465bbf7689db245bc111536e749c6509b4f94057efcc74e99206cb","sha512":"164e43d74ea63d1c7671a4824dea5519e1a962c60bcfc6888ae4954373b5d1a40aec61c84fe397f60b1cad4b6d46b95726ee5b005f8bb5508efef7fd23f5f4d3","ssdeep":"24576:3g8b/YWmLkwsOukzMSPbg+lsVo5/Cr0OSzcfUjel7M0R4:3gyGkwdNZngkO54","tlshash":"222501de6e46404e8b6cf7e65cbe1f8e9b018d21498c25a7e805df43b568fb040d366e","first_seen":"2025-08-02T14:31:55.238284Z","last_seen":"2025-08-07T13:26:28.463542Z","times_seen":32,"resource_available":false,"data":null}},"time_used":352,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":320,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-06","alert":"Sinkholed","trigger":"lucky-box21.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-08-06","alert":"Phishing - Crypto/Wallet","trigger":"lucky-box21.vercel.app","verdict":"phishing","severity":"medium","comment":"Crypto/Wallet","link":"https://openphish.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lucky-box21.vercel.app/img/opensea.svg","fqdn":"lucky-box21.vercel.app","domain":"lucky-box21.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.195","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lucky-box21.vercel.app/","date":"2025-08-06T14:02:47.951Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Tue, 24 Jun 2025 04:57:32 GMT","end":"Mon, 22 Sep 2025 04:57:31 GMT"},"fingerprint":{"sha1":"81:D3:FA:22:93:E5:25:70:85:9A:59:F7:5D:92:C4:FE:CF:35:0D:C7","sha256":"CF:7D:EA:B1:F6:D3:8D:F4:F7:DA:1F:83:F1:44:C8:1D:E2:58:46:A5:3A:AD:9E:5F:79:E0:C3:92:23:CE:2D:B7"}}},"request":{"raw":"GET /img/opensea.svg HTTP/1.1\r\nHost: lucky-box21.vercel.app\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://lucky-box21.vercel.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 0\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"opensea.svg\"\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\ndate: Wed, 06 Aug 2025 14:02:48 GMT\r\netag: \"a846574b49eb7960a2ec5b0cd7e72dc3\"\r\nlast-modified: Wed, 06 Aug 2025 14:02:48 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::6pbqg-1754488967957-e299482c21e6\r\ncontent-length: 1569\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":3946,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"a846574b49eb7960a2ec5b0cd7e72dc3","sha1":"54c6aa6ed63503eb6e0c29a9c3750026310a9c98","sha256":"f5d861f057e77f4581bc4895bdd62524dfdc625f2dffac278fa76f232d12f69b","sha512":"34d4817be11afc3f2316e16f2e653bb63b9394eaf2ed1fc18768432afca3cee397dab35f250a2d10278f58a43ecb1005d93d1ac445e865662ad7cd74815d734d","ssdeep":"","tlshash":"138154edaba5cc72d1c6e1ecde458424216d41e79682c2a1c3e4bf1e38584d0de1eac6","first_seen":"2024-01-05T04:50:13Z","last_seen":"2026-08-10T20:32:07.339608Z","times_seen":2063,"resource_available":false,"data":null}},"time_used":180,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":180,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-06","alert":"Sinkholed","trigger":"lucky-box21.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-08-06","alert":"Phishing - Crypto/Wallet","trigger":"lucky-box21.vercel.app","verdict":"phishing","severity":"medium","comment":"Crypto/Wallet","link":"https://openphish.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/crypto-js/4.2.0/crypto-js.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://lucky-box21.vercel.app/","date":"2025-08-06T14:02:56.269Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 20 Jul 2025 17:08:10 GMT","end":"Sat, 18 Oct 2025 18:08:03 GMT"},"fingerprint":{"sha1":"66:D5:51:E0:8E:D7:2C:D1:E3:98:58:99:22:9B:73:C4:6F:32:FD:EC","sha256":"52:CD:3D:83:E5:5A:57:37:9F:D9:0B:EB:C3:EA:67:B7:4C:F1:74:93:B7:C9:E8:0B:E3:E8:CB:2E:7A:94:A2:78"}}},"request":{"raw":"GET /ajax/libs/crypto-js/4.2.0/crypto-js.min.js HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://lucky-box21.vercel.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 06 Aug 2025 14:02:56 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 19621\r\ncf-ray: 96af1325ee195684-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"65384d58-4ca5\"\r\nlast-modified: Tue, 24 Oct 2023 23:03:52 GMT\r\ncf-cdnjs-via: cfworker/kv\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 632073\r\nexpires: Mon, 27 Jul 2026 14:02:56 GMT\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=bmnTLp2FGhP68y1A%2BoVKiOMq1B1ZPvKfNHkboV4W4MUAs844EKop60oFNYbKH9SZoosSU3Qvj06H8etnWjIPYdKvZ%2FMnWyt0WSGXB967XqRxNXtGYuDhnUzkuU27gThYkU3JauB2\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nstrict-transport-security: max-age=15780000\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":60819,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (60819), with no line terminators","md5":"d9c6de0df2bf028d93924aff92487904","sha1":"6596050516dd12af52d9b0e7b18ed837f1d81300","sha256":"769a555de553babc35a3338f344dd7aa16260c93cea2c7db290707c90484e7cc","sha512":"6be4940eec0dcd70efcf85eb21c5c7b827f4f3dfe2240a0de259ab5c9835f179ddb8a2ba6250c73516a5bf8c9dd4de3438a23cd2d162745faba9314a18fa1615","ssdeep":"1536:R8K6Znxmj9rlvCOhI64j7AtSPtNPU9ArHMLlk:RV6+jKOh4z","tlshash":"65535bc0629c5491a3b76480087f740b7073353b0a1d5aacf658faefacacad6907cd39","first_seen":"2023-11-02T21:20:28Z","last_seen":"2026-08-15T09:45:40.120652Z","times_seen":31904,"resource_available":true,"data":null}},"time_used":120,"timings":{"blocked":38,"dns":2,"connect":7,"send":0,"wait":31,"receive":7,"ssl":31},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/ethers/5.6.9/ethers.umd.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://lucky-box21.vercel.app/","date":"2025-08-06T14:02:57.424Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 20 Jul 2025 17:08:10 GMT","end":"Sat, 18 Oct 2025 18:08:03 GMT"},"fingerprint":{"sha1":"66:D5:51:E0:8E:D7:2C:D1:E3:98:58:99:22:9B:73:C4:6F:32:FD:EC","sha256":"52:CD:3D:83:E5:5A:57:37:9F:D9:0B:EB:C3:EA:67:B7:4C:F1:74:93:B7:C9:E8:0B:E3:E8:CB:2E:7A:94:A2:78"}}},"request":{"raw":"GET /ajax/libs/ethers/5.6.9/ethers.umd.min.js HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://lucky-box21.vercel.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 06 Aug 2025 14:02:57 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 125841\r\ncf-ray: 96af132c2ef10b3d-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"62ad87d5-1eb91\"\r\nlast-modified: Sat, 18 Jun 2022 08:07:49 GMT\r\ncf-cdnjs-via: cfworker/kv\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 1288813\r\nexpires: Mon, 27 Jul 2026 14:02:57 GMT\r\naccept-ranges: bytes\r\npriority: u=3,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=ED5X%2BXx6lctfVmII5fkCOplyQDr1vvw8VnVefs0TJfhuHc%2FgOPMlFYDe7ws4FnQuZG1he3By5aXY1QZ9H4cZx52hiQL1VwSpD3Kk2F2Dv1QYZVUo04lB4v9oqm%2F5jcLnLeFm6Hkh\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nstrict-transport-security: max-age=15780000\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":735973,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"268d19762594655239a29d058a7e8b44","sha1":"f06da2f7a68114b8dda38a0d782d65ddacc9c0e8","sha256":"95c66625ee20f53d542e23dded002b021b24e9d28c3d193a076d45cba4dc8618","sha512":"55e6b3e48536891a5ad0106b26525e4607c9ece0075ad5496535ef81d1fbb377dfb0b50286594c0aa0b405bf9e791c4696b674ea260813f4772ac7220ab82fdc","ssdeep":"12288:TfLmYQI/yjP+H8Xb29/nNUgE6te1R5WJW:TfCPalnNfE6taD","tlshash":"29f42b80b3b1b0b583c729a4143f6046f63af46a505840a8f659faf279f9d4c957bb3c","first_seen":"2023-03-07T12:58:29Z","last_seen":"2026-08-14T05:15:44.121492Z","times_seen":8491,"resource_available":true,"data":null}},"time_used":64,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":46,"receive":18,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lucky-box21.vercel.app/img/3.html","fqdn":"lucky-box21.vercel.app","domain":"lucky-box21.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.195","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lucky-box21.vercel.app/","date":"2025-08-06T14:02:47.007Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Tue, 24 Jun 2025 04:57:32 GMT","end":"Mon, 22 Sep 2025 04:57:31 GMT"},"fingerprint":{"sha1":"81:D3:FA:22:93:E5:25:70:85:9A:59:F7:5D:92:C4:FE:CF:35:0D:C7","sha256":"CF:7D:EA:B1:F6:D3:8D:F4:F7:DA:1F:83:F1:44:C8:1D:E2:58:46:A5:3A:AD:9E:5F:79:E0:C3:92:23:CE:2D:B7"}}},"request":{"raw":"GET /img/3.html HTTP/1.1\r\nHost: lucky-box21.vercel.app\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://lucky-box21.vercel.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 49949\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"3.html\"\r\ncontent-encoding: br\r\ncontent-type: text/html; charset=utf-8\r\ndate: Wed, 06 Aug 2025 14:02:46 GMT\r\netag: \"0a27a4163254fc8fce870c8cc3a3f94f\"\r\nlast-modified: Wed, 06 Aug 2025 00:10:17 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::6pbqg-1754488966977-d6f7bf48484c\r\ncontent-length: 891\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1808,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"0a27a4163254fc8fce870c8cc3a3f94f","sha1":"f27cf04699668916346eee510eab7e5a17e83997","sha256":"b77b97fe780d35d18248abd1d2f42f444afbabe43f6abcd8fa8ebb3d47825eee","sha512":"552e388db389c5142d303ca531bbe6ec5706864a84e78b91a16e1169b45d08ac1b9b1df576055b86f3a0f9c6668fe3488e3664e191bc1978848594358a256019","ssdeep":"","tlshash":"6c31012b8b915e0ff14740113ac3b7425b59c9076207b63f3e4c9615cf8e466d1e3388","first_seen":"2023-04-05T03:09:34Z","last_seen":"2026-08-13T07:12:51.227795Z","times_seen":4800,"resource_available":true,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-06","alert":"Sinkholed","trigger":"lucky-box21.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-08-06","alert":"Phishing - Crypto/Wallet","trigger":"lucky-box21.vercel.app","verdict":"phishing","severity":"medium","comment":"Crypto/Wallet","link":"https://openphish.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lucky-box21.vercel.app/js/slick-1.8.1/slick/slick.min.html","fqdn":"lucky-box21.vercel.app","domain":"lucky-box21.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.195","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://lucky-box21.vercel.app/","date":"2025-08-06T14:02:53.639Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Tue, 24 Jun 2025 04:57:32 GMT","end":"Mon, 22 Sep 2025 04:57:31 GMT"},"fingerprint":{"sha1":"81:D3:FA:22:93:E5:25:70:85:9A:59:F7:5D:92:C4:FE:CF:35:0D:C7","sha256":"CF:7D:EA:B1:F6:D3:8D:F4:F7:DA:1F:83:F1:44:C8:1D:E2:58:46:A5:3A:AD:9E:5F:79:E0:C3:92:23:CE:2D:B7"}}},"request":{"raw":"GET /js/slick-1.8.1/slick/slick.min.html HTTP/1.1\r\nHost: lucky-box21.vercel.app\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://lucky-box21.vercel.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-type: text/plain; charset=utf-8\r\ndate: Wed, 06 Aug 2025 14:02:53 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-error: NOT_FOUND\r\nx-vercel-id: arn1::mw6gp-1754488973656-1f0f3029f91c\r\ncontent-length: 79\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":79,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"9c0c55c363d7ad828b4a011e54afe353","sha1":"ce9c35a34d3a4f20ff5d7c1c22fb98b3b3dcb0ea","sha256":"bc5703c1934b6eecaae4d850c5ea3d60fe6037d0104dc9d8f9349c850de0a6c0","sha512":"d97330dd5dbf533d58bea1a2876ebb5fa29ef364168c42d8d2c3dfd5e887ad4ebc9485646947d595c43ff05f7a8fc4349426235673652c2f074d585c6f54d3cd","ssdeep":"","tlshash":"60a0220f08820e8c33c80e20208b033fa0800032aea8eb00c3ccf30820003cfa3000ce","first_seen":"2025-08-06T14:03:16.345267Z","last_seen":"2025-08-06T14:03:16.345267Z","times_seen":1,"resource_available":false,"data":null}},"time_used":46,"timings":{"blocked":10,"dns":0,"connect":0,"send":0,"wait":35,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-06","alert":"Sinkholed","trigger":"lucky-box21.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-08-06","alert":"Phishing - Crypto/Wallet","trigger":"lucky-box21.vercel.app","verdict":"phishing","severity":"medium","comment":"Crypto/Wallet","link":"https://openphish.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lucky-box21.vercel.app/img/1.html","fqdn":"lucky-box21.vercel.app","domain":"lucky-box21.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.195","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lucky-box21.vercel.app/","date":"2025-08-06T14:02:46.996Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Tue, 24 Jun 2025 04:57:32 GMT","end":"Mon, 22 Sep 2025 04:57:31 GMT"},"fingerprint":{"sha1":"81:D3:FA:22:93:E5:25:70:85:9A:59:F7:5D:92:C4:FE:CF:35:0D:C7","sha256":"CF:7D:EA:B1:F6:D3:8D:F4:F7:DA:1F:83:F1:44:C8:1D:E2:58:46:A5:3A:AD:9E:5F:79:E0:C3:92:23:CE:2D:B7"}}},"request":{"raw":"GET /img/1.html HTTP/1.1\r\nHost: lucky-box21.vercel.app\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://lucky-box21.vercel.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 60812\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"1.html\"\r\ncontent-encoding: br\r\ncontent-type: text/html; charset=utf-8\r\ndate: Wed, 06 Aug 2025 14:02:47 GMT\r\netag: \"0a27a4163254fc8fce870c8cc3a3f94f\"\r\nlast-modified: Tue, 05 Aug 2025 21:09:14 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::44ct9-1754488966970-93aa9a83dc3a\r\ncontent-length: 891\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1808,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"0a27a4163254fc8fce870c8cc3a3f94f","sha1":"f27cf04699668916346eee510eab7e5a17e83997","sha256":"b77b97fe780d35d18248abd1d2f42f444afbabe43f6abcd8fa8ebb3d47825eee","sha512":"552e388db389c5142d303ca531bbe6ec5706864a84e78b91a16e1169b45d08ac1b9b1df576055b86f3a0f9c6668fe3488e3664e191bc1978848594358a256019","ssdeep":"","tlshash":"6c31012b8b915e0ff14740113ac3b7425b59c9076207b63f3e4c9615cf8e466d1e3388","first_seen":"2023-04-05T03:09:34Z","last_seen":"2026-08-13T07:12:51.227795Z","times_seen":4800,"resource_available":true,"data":null}},"time_used":214,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":214,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-06","alert":"Sinkholed","trigger":"lucky-box21.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-08-06","alert":"Phishing - Crypto/Wallet","trigger":"lucky-box21.vercel.app","verdict":"phishing","severity":"medium","comment":"Crypto/Wallet","link":"https://openphish.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lucky-box21.vercel.app/img/boath.png","fqdn":"lucky-box21.vercel.app","domain":"lucky-box21.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.195","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lucky-box21.vercel.app/","date":"2025-08-06T14:02:47.010Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Tue, 24 Jun 2025 04:57:32 GMT","end":"Mon, 22 Sep 2025 04:57:31 GMT"},"fingerprint":{"sha1":"81:D3:FA:22:93:E5:25:70:85:9A:59:F7:5D:92:C4:FE:CF:35:0D:C7","sha256":"CF:7D:EA:B1:F6:D3:8D:F4:F7:DA:1F:83:F1:44:C8:1D:E2:58:46:A5:3A:AD:9E:5F:79:E0:C3:92:23:CE:2D:B7"}}},"request":{"raw":"GET /img/boath.png HTTP/1.1\r\nHost: lucky-box21.vercel.app\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://lucky-box21.vercel.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 262177\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"boath.png\"\r\ncontent-type: image/png\r\ndate: Wed, 06 Aug 2025 14:02:46 GMT\r\netag: \"645b47955248afb81e536b699a90b608\"\r\nlast-modified: Sun, 03 Aug 2025 13:13:09 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::nnk65-1754488966977-1f4dde216c69\r\ncontent-length: 40042\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":40042,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit/color RGBA, non-interlaced","md5":"645b47955248afb81e536b699a90b608","sha1":"566fbfa1c58dabc1e632b324e65b9b2789b53cc6","sha256":"a2bb13a575f2efdedd1d13360232476766b48a1eaba698dfae0d13a6f939f684","sha512":"31e5da76933bd95baf73f7558b315b3b693c7f711664fd7d0c82061107b84cbf16eb7babab5b601b28831b51469398982b901b87f7ddbc84b0c0211ed3ff926a","ssdeep":"768:AUVn2loMThPSb6WNOmTP0js8qaSh6Utsv4r2WUdCF+3c1h/:AUd2+MZuJCs8hSh6UthiWBMcv/","tlshash":"d303e017b83684411b1ef7e99cd8e69a1b678cf0d3e49ab49e9c530176312b91f9c0d3","first_seen":"2023-12-29T16:48:33Z","last_seen":"2026-08-10T20:32:07.344397Z","times_seen":1997,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-06","alert":"Sinkholed","trigger":"lucky-box21.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-08-06","alert":"Phishing - Crypto/Wallet","trigger":"lucky-box21.vercel.app","verdict":"phishing","severity":"medium","comment":"Crypto/Wallet","link":"https://openphish.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lucky-box21.vercel.app/jquery.min.js","fqdn":"lucky-box21.vercel.app","domain":"lucky-box21.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.195","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://lucky-box21.vercel.app/","date":"2025-08-06T14:02:47.017Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Tue, 24 Jun 2025 04:57:32 GMT","end":"Mon, 22 Sep 2025 04:57:31 GMT"},"fingerprint":{"sha1":"81:D3:FA:22:93:E5:25:70:85:9A:59:F7:5D:92:C4:FE:CF:35:0D:C7","sha256":"CF:7D:EA:B1:F6:D3:8D:F4:F7:DA:1F:83:F1:44:C8:1D:E2:58:46:A5:3A:AD:9E:5F:79:E0:C3:92:23:CE:2D:B7"}}},"request":{"raw":"GET /jquery.min.js HTTP/1.1\r\nHost: lucky-box21.vercel.app\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://lucky-box21.vercel.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 60812\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"jquery.min.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Wed, 06 Aug 2025 14:02:46 GMT\r\netag: \"02dac702d59a8dd935d0072d331e5bbb\"\r\nlast-modified: Tue, 05 Aug 2025 21:09:14 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::j7cjp-1754488966981-422c8481fe0f\r\ncontent-length: 32131\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":87533,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"2c872dbe60f4ba70fb85356113d8b35e","sha1":"ee48592d1fff952fcf06ce0b666ed4785493afdc","sha256":"fc9a93dd241f6b045cbff0481cf4e1901becd0e12fb45166a8f17f95823f0b1a","sha512":"bf6089ed4698cb8270a8b0c8ad9508ff886a7a842278e98064d5c1790ca3a36d5d69d9f047ef196882554fc104da2c88eb5395f1ee8cf0f3f6ff8869408350fe","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKr:sHNwcv9VBQpLl88SMBQ47GKr","tlshash":"3983f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","first_seen":"2023-08-31T16:03:19Z","last_seen":"2026-08-15T12:46:29.230054Z","times_seen":185847,"resource_available":true,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-06","alert":"Sinkholed","trigger":"lucky-box21.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-08-06","alert":"Phishing - Crypto/Wallet","trigger":"lucky-box21.vercel.app","verdict":"phishing","severity":"medium","comment":"Crypto/Wallet","link":"https://openphish.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lucky-box21.vercel.app/img/load%202.html","fqdn":"lucky-box21.vercel.app","domain":"lucky-box21.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.195","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lucky-box21.vercel.app/","date":"2025-08-06T14:02:53.295Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Tue, 24 Jun 2025 04:57:32 GMT","end":"Mon, 22 Sep 2025 04:57:31 GMT"},"fingerprint":{"sha1":"81:D3:FA:22:93:E5:25:70:85:9A:59:F7:5D:92:C4:FE:CF:35:0D:C7","sha256":"CF:7D:EA:B1:F6:D3:8D:F4:F7:DA:1F:83:F1:44:C8:1D:E2:58:46:A5:3A:AD:9E:5F:79:E0:C3:92:23:CE:2D:B7"}}},"request":{"raw":"GET /img/load%202.html HTTP/1.1\r\nHost: lucky-box21.vercel.app\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://lucky-box21.vercel.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 49960\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"load 2.html\"\r\ncontent-encoding: br\r\ncontent-type: text/html; charset=utf-8\r\ndate: Wed, 06 Aug 2025 14:02:53 GMT\r\netag: \"0a27a4163254fc8fce870c8cc3a3f94f\"\r\nlast-modified: Wed, 06 Aug 2025 00:10:13 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::q7jzs-1754488973274-b5163a5f1edc\r\ncontent-length: 891\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1808,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"0a27a4163254fc8fce870c8cc3a3f94f","sha1":"f27cf04699668916346eee510eab7e5a17e83997","sha256":"b77b97fe780d35d18248abd1d2f42f444afbabe43f6abcd8fa8ebb3d47825eee","sha512":"552e388db389c5142d303ca531bbe6ec5706864a84e78b91a16e1169b45d08ac1b9b1df576055b86f3a0f9c6668fe3488e3664e191bc1978848594358a256019","ssdeep":"","tlshash":"6c31012b8b915e0ff14740113ac3b7425b59c9076207b63f3e4c9615cf8e466d1e3388","first_seen":"2023-04-05T03:09:34Z","last_seen":"2026-08-13T07:12:51.227795Z","times_seen":4800,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-06","alert":"Sinkholed","trigger":"lucky-box21.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-08-06","alert":"Phishing - Crypto/Wallet","trigger":"lucky-box21.vercel.app","verdict":"phishing","severity":"medium","comment":"Crypto/Wallet","link":"https://openphish.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lucky-box21.vercel.app/img/2.html","fqdn":"lucky-box21.vercel.app","domain":"lucky-box21.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.195","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lucky-box21.vercel.app/","date":"2025-08-06T14:02:53.304Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Tue, 24 Jun 2025 04:57:32 GMT","end":"Mon, 22 Sep 2025 04:57:31 GMT"},"fingerprint":{"sha1":"81:D3:FA:22:93:E5:25:70:85:9A:59:F7:5D:92:C4:FE:CF:35:0D:C7","sha256":"CF:7D:EA:B1:F6:D3:8D:F4:F7:DA:1F:83:F1:44:C8:1D:E2:58:46:A5:3A:AD:9E:5F:79:E0:C3:92:23:CE:2D:B7"}}},"request":{"raw":"GET /img/2.html HTTP/1.1\r\nHost: lucky-box21.vercel.app\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://lucky-box21.vercel.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 6\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"2.html\"\r\ncontent-encoding: br\r\ncontent-type: text/html; charset=utf-8\r\ndate: Wed, 06 Aug 2025 14:02:53 GMT\r\netag: \"0a27a4163254fc8fce870c8cc3a3f94f\"\r\nlast-modified: Wed, 06 Aug 2025 14:02:47 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::6pbqg-1754488973291-a61611b5dffb\r\ncontent-length: 891\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1808,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"0a27a4163254fc8fce870c8cc3a3f94f","sha1":"f27cf04699668916346eee510eab7e5a17e83997","sha256":"b77b97fe780d35d18248abd1d2f42f444afbabe43f6abcd8fa8ebb3d47825eee","sha512":"552e388db389c5142d303ca531bbe6ec5706864a84e78b91a16e1169b45d08ac1b9b1df576055b86f3a0f9c6668fe3488e3664e191bc1978848594358a256019","ssdeep":"","tlshash":"6c31012b8b915e0ff14740113ac3b7425b59c9076207b63f3e4c9615cf8e466d1e3388","first_seen":"2023-04-05T03:09:34Z","last_seen":"2026-08-13T07:12:51.227795Z","times_seen":4800,"resource_available":true,"data":null}},"time_used":52,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":51,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-06","alert":"Sinkholed","trigger":"lucky-box21.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-08-06","alert":"Phishing - Crypto/Wallet","trigger":"lucky-box21.vercel.app","verdict":"phishing","severity":"medium","comment":"Crypto/Wallet","link":"https://openphish.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lucky-box21.vercel.app/js/slick-1.8.1/slick/slick.html","fqdn":"lucky-box21.vercel.app","domain":"lucky-box21.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.195","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://lucky-box21.vercel.app/","date":"2025-08-06T14:02:46.963Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Tue, 24 Jun 2025 04:57:32 GMT","end":"Mon, 22 Sep 2025 04:57:31 GMT"},"fingerprint":{"sha1":"81:D3:FA:22:93:E5:25:70:85:9A:59:F7:5D:92:C4:FE:CF:35:0D:C7","sha256":"CF:7D:EA:B1:F6:D3:8D:F4:F7:DA:1F:83:F1:44:C8:1D:E2:58:46:A5:3A:AD:9E:5F:79:E0:C3:92:23:CE:2D:B7"}}},"request":{"raw":"GET /js/slick-1.8.1/slick/slick.html HTTP/1.1\r\nHost: lucky-box21.vercel.app\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://lucky-box21.vercel.app/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-type: text/plain; charset=utf-8\r\ndate: Wed, 06 Aug 2025 14:02:47 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-error: NOT_FOUND\r\nx-vercel-id: arn1::6pbqg-1754488966957-4d7578992d4b\r\ncontent-length: 79\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":79,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"0fbad75e863c0415f71bbe3efd23577d","sha1":"37e5ad17cdaed34a69e4922e4fe189ec93dac2ed","sha256":"9cd62d0aa821092885e978bc5f5de7e3fd1437065877b3b8d8451cdd73b61e99","sha512":"e326e5849e3f523c02e9004cffc049204380b170a4c2b5bbf1769d037103e1885074abd14e250e0e7e640eb283d54152e6278a86bb55db9cd664f845697973df","ssdeep":"","tlshash":"e6a0110e08a2088833c0030020020a3aa02800a2aaa2aa2000ceb2882228a8fa300088","first_seen":"2025-08-06T14:03:16.350006Z","last_seen":"2025-08-06T14:03:16.350006Z","times_seen":1,"resource_available":false,"data":null}},"time_used":225,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":224,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-06","alert":"Sinkholed","trigger":"lucky-box21.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-08-06","alert":"Phishing - Crypto/Wallet","trigger":"lucky-box21.vercel.app","verdict":"phishing","severity":"medium","comment":"Crypto/Wallet","link":"https://openphish.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lucky-box21.vercel.app/css/index.css","fqdn":"lucky-box21.vercel.app","domain":"lucky-box21.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.195","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://lucky-box21.vercel.app/","date":"2025-08-06T14:02:46.984Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Tue, 24 Jun 2025 04:57:32 GMT","end":"Mon, 22 Sep 2025 04:57:31 GMT"},"fingerprint":{"sha1":"81:D3:FA:22:93:E5:25:70:85:9A:59:F7:5D:92:C4:FE:CF:35:0D:C7","sha256":"CF:7D:EA:B1:F6:D3:8D:F4:F7:DA:1F:83:F1:44:C8:1D:E2:58:46:A5:3A:AD:9E:5F:79:E0:C3:92:23:CE:2D:B7"}}},"request":{"raw":"GET /css/index.css HTTP/1.1\r\nHost: lucky-box21.vercel.app\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://lucky-box21.vercel.app/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 262178\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"index.css\"\r\ncontent-encoding: br\r\ncontent-type: text/css; charset=utf-8\r\ndate: Wed, 06 Aug 2025 14:02:46 GMT\r\netag: \"1a1c7621306cc07482d7e87337bab796\"\r\nlast-modified: Sun, 03 Aug 2025 13:13:08 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::6pbqg-1754488966963-d753c92dc8d4\r\ncontent-length: 3491\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":15902,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"Unicode text, UTF-8 text, with CRLF line terminators","md5":"8d3b53cd40f84d615533d49786d81bc5","sha1":"ec1f9dd6c3f4f9dad8f589a2ddb5dcbcf19d76d2","sha256":"97584abbd8ab93af480a871752cb65285b1c1d37d2be517b490d0a68328c0a49","sha512":"0a989f145ffc52803cb93c757c11e4cc4cb903cee474fe54c5c7d899cf4eb2bc5274161ad26141c106d0c43aac93f9224ba2ee73aed1f988a8fa98aa64cf9c6e","ssdeep":"192:XvK4e4TM4u3K4ztM5GxZYm/qO2SPjtd4U4VQY3AQLdnIMeq8zh4ELOvnve3ia86V:fa4m5nqwtnsA","tlshash":"6d62e2b9da102146b333d9982fb04b4ad6ad80839b07516d7fd432884fbb25c9972fdd","first_seen":"2023-12-29T16:48:33Z","last_seen":"2026-08-10T20:32:07.345366Z","times_seen":1783,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-06","alert":"Sinkholed","trigger":"lucky-box21.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-08-06","alert":"Phishing - Crypto/Wallet","trigger":"lucky-box21.vercel.app","verdict":"phishing","severity":"medium","comment":"Crypto/Wallet","link":"https://openphish.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lucky-box21.vercel.app/img/boath_png.png","fqdn":"lucky-box21.vercel.app","domain":"lucky-box21.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.195","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lucky-box21.vercel.app/","date":"2025-08-06T14:02:47.013Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Tue, 24 Jun 2025 04:57:32 GMT","end":"Mon, 22 Sep 2025 04:57:31 GMT"},"fingerprint":{"sha1":"81:D3:FA:22:93:E5:25:70:85:9A:59:F7:5D:92:C4:FE:CF:35:0D:C7","sha256":"CF:7D:EA:B1:F6:D3:8D:F4:F7:DA:1F:83:F1:44:C8:1D:E2:58:46:A5:3A:AD:9E:5F:79:E0:C3:92:23:CE:2D:B7"}}},"request":{"raw":"GET /img/boath_png.png HTTP/1.1\r\nHost: lucky-box21.vercel.app\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://lucky-box21.vercel.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 0\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"boath_png.png\"\r\ncontent-type: image/png\r\ndate: Wed, 06 Aug 2025 14:02:47 GMT\r\netag: \"54ecf675c6da3d0ef0b5739789acbe7e\"\r\nlast-modified: Wed, 06 Aug 2025 14:02:47 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::lgkvw-1754488966978-547c85039ac1\r\ncontent-length: 42785\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":42785,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit/color RGBA, non-interlaced","md5":"54ecf675c6da3d0ef0b5739789acbe7e","sha1":"c228baef8306f2144c0b4ef97f355b45235bfa3c","sha256":"21f2a6aaa2ee98649bc12d7ce4e57d7eb5c2ad7f4f5fc0023559da106c4efc66","sha512":"c54e6092f7eb74b27178b38d0c8e21c8ac0d35543ec83f1e255fb016c576f9a6a7dabedad244ea443e30b07085cfb8911da51d6c6d2974f6b51d1dd25df64089","ssdeep":"768:6vUw1mjdZmVE6a8h+BcNYzHqd8m+u/mOeKKuZp/TSbonSNu:wUw1mjd4Vda8h+Bc4Kdt1mJu72QSNu","tlshash":"0513f143eb09fb5edc8bf4f5892c0c03d81e4bc5bda69c14e75683a86652d98ce23785","first_seen":"2023-12-29T16:48:33Z","last_seen":"2026-08-10T20:32:07.347006Z","times_seen":1980,"resource_available":false,"data":null}},"time_used":206,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":204,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-06","alert":"Sinkholed","trigger":"lucky-box21.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-08-06","alert":"Phishing - Crypto/Wallet","trigger":"lucky-box21.vercel.app","verdict":"phishing","severity":"medium","comment":"Crypto/Wallet","link":"https://openphish.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lucky-box21.vercel.app/js/index.html","fqdn":"lucky-box21.vercel.app","domain":"lucky-box21.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.195","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://lucky-box21.vercel.app/","date":"2025-08-06T14:02:47.035Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Tue, 24 Jun 2025 04:57:32 GMT","end":"Mon, 22 Sep 2025 04:57:31 GMT"},"fingerprint":{"sha1":"81:D3:FA:22:93:E5:25:70:85:9A:59:F7:5D:92:C4:FE:CF:35:0D:C7","sha256":"CF:7D:EA:B1:F6:D3:8D:F4:F7:DA:1F:83:F1:44:C8:1D:E2:58:46:A5:3A:AD:9E:5F:79:E0:C3:92:23:CE:2D:B7"}}},"request":{"raw":"GET /js/index.html HTTP/1.1\r\nHost: lucky-box21.vercel.app\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://lucky-box21.vercel.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-type: text/plain; charset=utf-8\r\ndate: Wed, 06 Aug 2025 14:02:46 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-error: NOT_FOUND\r\nx-vercel-id: arn1::j7cjp-1754488966988-aac4d6df6ea2\r\ncontent-length: 79\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":79,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"c0508f82e0512fc3a00cd0255003a2d4","sha1":"98686be33d80ffe26b0a51b52a46a78568cf221b","sha256":"2c5d4d3e9eacb31970b8ba60ba4f958ad0062cebfaba7d5eeed27c5eafa8a786","sha512":"76e783c60aec5f5cd8b5831602baad63ce2cc41dc2fb00902cd42674b0f6c6403726fc7bf5f7ff91a7c00f6ff6d599faae50fe9e01b51c994171484174de447a","ssdeep":"","tlshash":"0aa0220f28c00c8c3bca80202283233f80000233afb2f2a0a0ceba8c22302cfb302080","first_seen":"2025-08-06T14:03:16.35304Z","last_seen":"2025-08-06T14:03:16.35304Z","times_seen":1,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-06","alert":"Sinkholed","trigger":"lucky-box21.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-08-06","alert":"Phishing - Crypto/Wallet","trigger":"lucky-box21.vercel.app","verdict":"phishing","severity":"medium","comment":"Crypto/Wallet","link":"https://openphish.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lucky-box21.vercel.app/css/fonts.css","fqdn":"lucky-box21.vercel.app","domain":"lucky-box21.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.195","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://lucky-box21.vercel.app/","date":"2025-08-06T14:02:46.977Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Tue, 24 Jun 2025 04:57:32 GMT","end":"Mon, 22 Sep 2025 04:57:31 GMT"},"fingerprint":{"sha1":"81:D3:FA:22:93:E5:25:70:85:9A:59:F7:5D:92:C4:FE:CF:35:0D:C7","sha256":"CF:7D:EA:B1:F6:D3:8D:F4:F7:DA:1F:83:F1:44:C8:1D:E2:58:46:A5:3A:AD:9E:5F:79:E0:C3:92:23:CE:2D:B7"}}},"request":{"raw":"GET /css/fonts.css HTTP/1.1\r\nHost: lucky-box21.vercel.app\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://lucky-box21.vercel.app/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 262178\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"fonts.css\"\r\ncontent-type: text/css; charset=utf-8\r\ndate: Wed, 06 Aug 2025 14:02:46 GMT\r\netag: \"cf3a5ae03ac5d33461bf60b1a4c3a09a\"\r\nlast-modified: Sun, 03 Aug 2025 13:13:08 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::m6zjt-1754488966962-afe2c36b4316\r\ncontent-length: 485\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":485,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with CRLF line terminators","md5":"cf3a5ae03ac5d33461bf60b1a4c3a09a","sha1":"593d8eefbd561bfcfbc5b24c270093d24b95c0f9","sha256":"03fbca0e823f9491b8604743d0a90c340287e2cacabb7eb027ba17334a839d5f","sha512":"9ca3f25c8a7ad2c35adeb80de30bc563745e2a4b8bb060eb870ee7f4b0a5613e8dc9ae8068fae8329bb49f319551967bd03e4598856c9b51fa44f3ae9862ae66","ssdeep":"","tlshash":"c8f08210900dd432a7b05ddf73973e149b1e604b2205861e72642aa58ff1a7c03b1f6e","first_seen":"2023-12-29T16:48:33Z","last_seen":"2026-08-10T20:32:07.350819Z","times_seen":1798,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-06","alert":"Sinkholed","trigger":"lucky-box21.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-08-06","alert":"Phishing - Crypto/Wallet","trigger":"lucky-box21.vercel.app","verdict":"phishing","severity":"medium","comment":"Crypto/Wallet","link":"https://openphish.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lucky-box21.vercel.app/img/2.html","fqdn":"lucky-box21.vercel.app","domain":"lucky-box21.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.195","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lucky-box21.vercel.app/","date":"2025-08-06T14:02:47.000Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Tue, 24 Jun 2025 04:57:32 GMT","end":"Mon, 22 Sep 2025 04:57:31 GMT"},"fingerprint":{"sha1":"81:D3:FA:22:93:E5:25:70:85:9A:59:F7:5D:92:C4:FE:CF:35:0D:C7","sha256":"CF:7D:EA:B1:F6:D3:8D:F4:F7:DA:1F:83:F1:44:C8:1D:E2:58:46:A5:3A:AD:9E:5F:79:E0:C3:92:23:CE:2D:B7"}}},"request":{"raw":"GET /img/2.html HTTP/1.1\r\nHost: lucky-box21.vercel.app\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://lucky-box21.vercel.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 0\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"2.html\"\r\ncontent-encoding: br\r\ncontent-type: text/html; charset=utf-8\r\ndate: Wed, 06 Aug 2025 14:02:47 GMT\r\netag: \"0a27a4163254fc8fce870c8cc3a3f94f\"\r\nlast-modified: Wed, 06 Aug 2025 14:02:47 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::m6zjt-1754488966974-3c2002a25d7d\r\ncontent-length: 891\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1808,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"0a27a4163254fc8fce870c8cc3a3f94f","sha1":"f27cf04699668916346eee510eab7e5a17e83997","sha256":"b77b97fe780d35d18248abd1d2f42f444afbabe43f6abcd8fa8ebb3d47825eee","sha512":"552e388db389c5142d303ca531bbe6ec5706864a84e78b91a16e1169b45d08ac1b9b1df576055b86f3a0f9c6668fe3488e3664e191bc1978848594358a256019","ssdeep":"","tlshash":"6c31012b8b915e0ff14740113ac3b7425b59c9076207b63f3e4c9615cf8e466d1e3388","first_seen":"2023-04-05T03:09:34Z","last_seen":"2026-08-13T07:12:51.227795Z","times_seen":4800,"resource_available":true,"data":null}},"time_used":177,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":176,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-06","alert":"Sinkholed","trigger":"lucky-box21.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-08-06","alert":"Phishing - Crypto/Wallet","trigger":"lucky-box21.vercel.app","verdict":"phishing","severity":"medium","comment":"Crypto/Wallet","link":"https://openphish.com/","meta":null}],"urlquery":null}}]}