{"report_id":"fcc20264-bf9f-4d9e-ba0b-749000ed37df","version":6,"status":"done","tags":[],"date":"2026-04-15T05:01:32Z","url":{"schema":"https","addr":"spinmax-portal.xyz/","fqdn":"spinmax-portal.xyz","domain":"spinmax-portal.xyz","tld":"xyz"},"ip":{"addr":"104.21.63.205","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"spinmax-portal.xyz/rrrausz?lead_id=1sjos4f.640f.1ar405c\u0026sub1=\u0026sub2=\u0026sub3=\u0026sub4=\u0026sub5=\u0026sub6=\u0026sub15=\u0026sub16=\u0026sub17=\u0026sub18=\u0026sub19=\u0026sub20=\u0026key=\u0026ln=EN\u0026sub_id_30=open_pwa","fqdn":"spinmax-portal.xyz","domain":"spinmax-portal.xyz","tld":"xyz"},"title":"Chicken Road","dom":{"size":87108,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (322)","md5":"524e04844af59d183984e54e7cb18a5f","sha1":"6a9cbcaf416e82536ca6e58260a8715f6afe6e4d","sha256":"1b50d783fee40b52ae8b080549b103731f9f59865b3a7d262ebcb77fdc53672f","sha512":"a41b0449ecba49f702339920e89d7c2431a7436af20c7725c1cf1de061311f52c6a9c04cf4be9cf2b80be7ed0187cedd146b19c4471c3cda802e0e891305ef14","ssdeep":"768:TjXvfaQqicsjQcCCxB9tO5cxG7SYWvlgH:Tj/faQql2uGxG7SYWvlgH","tlshash":"7f835a30a8f354330053d0d5ae668b1a6ee0f6079a4a4705bbfc4be46fdae86ed0755c","dom_hash":"domhash080ce7d7aea1928790666cd2d15592e8","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"spinmax-portal.xyz/","fqdn":"spinmax-portal.xyz","domain":"spinmax-portal.xyz","tld":"xyz"},"ip":{"addr":"104.21.63.205","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-05-20T05:01:32Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"spinmax-portal.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null},"summary":[{"fqdn":"easy-image.b-cdn.net","ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"domain_registered":"2016-04-25","domain_rank":0,"first_seen":"2024-10-22T20:51:12.623208Z","last_seen":"2026-04-08T12:59:36.316818Z","alert_count":0,"request_count":41,"received_data":2205331,"sent_data":18568,"comment":"","tags":null,"fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}]},{"fqdn":"spinmax-portal.xyz","ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":28,"request_count":28,"received_data":1452443,"sent_data":20756,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"OneSignal","description":"OneSignal is a customer engagement messaging solution.","website":"https://onesignal.com","common_platform_enumeration":"","icon":"OneSignal.svg","categories":["Marketing automation","A/B Testing"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}]},{"fqdn":"cdn.onesignal.com","ip":{"addr":"104.16.160.145","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2011-09-10","domain_rank":31060,"first_seen":"2015-04-22T13:41:50Z","last_seen":"2026-04-08T17:04:30.62322Z","alert_count":0,"request_count":1,"received_data":1428,"sent_data":442,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"spinmax-portal.xyz/lander/template-2025-06-16_15-51-22/js/uaParser.js","fqdn":"spinmax-portal.xyz","domain":"spinmax-portal.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"fae74f6b710e428ad5ca0378fc339859","sha1":"0d8f92bc5fcfb0ef72ee329f0a0763524443b5bd","sha256":"9735a83f5152c01eefe3ca9457e3b440502b60246d60f232196eb36c126f2125","sha512":"092f093612174c0f84c491a2e9ff03b4ee160ae90aa16ebd5f83e80a7c128efb6e8099629c9c88d7a330f9313a1a3d78e561d295b4fdb446dd18266fe75e46ff","ssdeep":"384:69M5d42wb/6iOD0tRqwkdZISkzVBv2ETttl9rsATHskN:69CKyzDYRqZduSAZ5tl9rsAT1","tlshash":"0b92da3ed365bf2093bee589c51790002d3a5c3adb41b0f99ae4b540e8d6db1129f7b2","size":19383,"data":"","first_seen":"2024-04-25T09:45:56Z","last_seen":"2026-06-08T12:52:08.38276Z","times_seen":255,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"spinmax-portal.xyz/rrrausz?lead_id=1sjos4f.640f.1ar405c\u0026sub1=\u0026sub2=\u0026sub3=\u0026sub4=\u0026sub5=\u0026sub6=\u0026sub15=\u0026sub16=\u0026sub17=\u0026sub18=\u0026sub19=\u0026sub20=\u0026key=\u0026ln=EN\u0026sub_id_30=open_pwa","fqdn":"spinmax-portal.xyz","domain":"spinmax-portal.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"71d6aa2a06cc179ebadaf8a705636436","sha1":"f3bded0eab5c59bbeaef9c4652c93966eeaf13d8","sha256":"c7ec553608e928b4d1b3d446011fe7d83435e1cf158a220ffa4f5af40b18a063","sha512":"b4b15c810334ac552bacba3068e820db36474b6a854048e3a02534bab8761b80e51f4e5ced0bca0eb152582884ce898d9ca0a80e7dae8e697773da272b4cbe4b","ssdeep":"","tlshash":"d841dd5d00b3f1d105f760ba4b1bb321317614237000dc867a9d8b803f5ae5ea9678ec","size":2244,"data":"","first_seen":"2025-09-30T09:03:51.533137Z","last_seen":"2026-04-15T05:04:05.246062Z","times_seen":25,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"spinmax-portal.xyz/lander/template-2025-06-16_15-51-22/js/prompt.js","fqdn":"spinmax-portal.xyz","domain":"spinmax-portal.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d8ad11cfedd19f6e2c146d898449535f","sha1":"f1c8215c68a90f72bbda0fac88c213228b9fb65c","sha256":"92ff6cf8d4767431e38e31bf578c7e120509ad06cd69bff6fe83175a90690ac1","sha512":"13392612ab5dd92c4681dc42544ecd60f50b18d7c9ca52f6b271b846d5e7713bdf8a282bdf655eb3afe85a4b6f366736cf9958ab3f66f124ad723f5acfd48621","ssdeep":"","tlshash":"53f05c24079a18b4a01b736e4f1f0e44233170972d225d203d5d4d89cf802780172beb","size":497,"data":"","first_seen":"2025-03-17T11:16:11.26647Z","last_seen":"2026-06-08T12:52:08.372031Z","times_seen":165,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"spinmax-portal.xyz/lander/template-2025-06-16_15-51-22/js/translate.js","fqdn":"spinmax-portal.xyz","domain":"spinmax-portal.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"2ea86f83fe23567f14148288c5528dbc","sha1":"5190e1381424cad1c2b11141f83011dc4a6bc06d","sha256":"9272cf8e32fa50126ccacba832b56f3c70e28cc9c15b19d749880df68d52e293","sha512":"69412c4c4dd65e4a89efd0c4e25553a283b55ca665c1beb691fa8207f6a08eff7518d0945c2307d754ebd1a14c1b95160a5e8f61cd330454e873793020bcc5e9","ssdeep":"","tlshash":"2d718848f0f6010d1983b02efbeb6895b220985b0265fe183f5e45436fd353dd39e689","size":3579,"data":"","first_seen":"2025-03-17T11:16:11.268136Z","last_seen":"2026-06-08T12:52:08.370049Z","times_seen":165,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"spinmax-portal.xyz/lander/template-2025-06-16_15-51-22/js/jquery.min.js","fqdn":"spinmax-portal.xyz","domain":"spinmax-portal.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"c9771cc3e90e18f5336eedbd0fffb2cf","sha1":"6ee8aaa3ac1f4e0ae18717a3fd26892e9f0e4cc5","sha256":"3e7501d15c3630e791c8b20392eb9dee31a9f65ce3efdde76cef5c710141ab24","sha512":"c503341fa3a7176fd10bd8cd7a5717c8faf971f87fa0c158f2d94fcd484ae3ed5031f49414dae833fb806b7365b5699c21d2e655376f69adb052b22f6f6982a7","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GK7:sHNwcv9VBQpLl88SMBQ47GK7","tlshash":"8083f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","size":87532,"data":"","first_seen":"2023-10-13T22:05:06Z","last_seen":"2026-06-08T18:02:44.181167Z","times_seen":27597,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"spinmax-portal.xyz/lander/template-2025-06-16_15-51-22/js/main-function.js","fqdn":"spinmax-portal.xyz","domain":"spinmax-portal.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"6062c012ba93ffcc55732a0fd17ec926","sha1":"9b53314fc76d6d6da6c9cf21b0fc8029aaade04f","sha256":"85b3da02098db84adf0cf28f31f9548bdbc7e366e774af129347369318cc272e","sha512":"6271d11198c255133ee899a6d0c8e485933cbf5f98927928eb08ee3413028f592db7efba35686a31ba993965029350358dee0a10f015f7bdc2e9d00458838dde","ssdeep":"384:oxs1Sxs9R2Iuox1/puM7Qfp+87Kxe5x5oAVRap+dgTTS4ihzXUgwtWAMr74f7Kx/:oO1gs9lfe5wWhU/WA5c/","tlshash":"55a22f8d27fb4121966761bd4f5b21143632100f280aed2d7d6d8ac0af91a6e45e3ffb","size":23119,"data":"","first_seen":"2026-04-15T05:01:39.450055Z","last_seen":"2026-04-15T05:04:05.232211Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"spinmax-portal.xyz/lander/template-2025-06-16_15-51-22/index.min.js?v20180913","fqdn":"spinmax-portal.xyz","domain":"spinmax-portal.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"c780aa9db2a8a46309a61957b54425d6","sha1":"205c916947589f394fb330a2169fcdfabe2fc487","sha256":"d966f66421e2e3fc4918ccc41eb02f3e2b3d8eb70eccba027b7cfbfcee89aa90","sha512":"37d2f235ced0655807dd1b4790b2e343d9eae2d10fdabb15c7ade30075b0d0e6df15d1d3bf3a23968e3b480159033c10b358f62617c3970b376c221127cb2966","ssdeep":"","tlshash":"7101db165b81c8a737ee4d9ff93459b85d6241aff8e43243571e794a065b053e1c1037","size":791,"data":"","first_seen":"2023-03-12T07:32:29Z","last_seen":"2026-06-08T12:52:08.378937Z","times_seen":164,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.onesignal.com/sdks/web/v16/OneSignalSDK.page.js","fqdn":"cdn.onesignal.com","domain":"onesignal.com","tld":"com"},"ip":{"addr":"104.16.160.145","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"a00076bd699df812e779da9a4115e447","sha1":"f34870bb42ddf743ecf904561fc2ad6fafdf74d1","sha256":"b654b653e01469d2098282d49bf728c4d90d0f736c02618f72a78d0d6089e86d","sha512":"1b0cc0e49200c254915e559359051db46a437aa8c50d105ed559a10f8f563039377f16d80eba84131dfeef677630056aa11df27785ae10103c5fee1ff1a1797f","ssdeep":"","tlshash":"77f0e18b5b702a24266d488a673384496332a12cd8f690d1b7cb485c3011fa6879be3a","size":590,"data":"","first_seen":"2026-04-01T02:18:52.83901Z","last_seen":"2026-06-04T08:24:54.233954Z","times_seen":2103,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"spinmax-portal.xyz/lander/template-2025-06-16_15-51-22/js/push-method.js","fqdn":"spinmax-portal.xyz","domain":"spinmax-portal.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"6f4e7af8121c2963d5161df686f2e358","sha1":"d263ff12f0f6a1fb8d85a52d731067d64a37847b","sha256":"ce21e7fdfae95b18accdde3c4386ce59575480db75de0585da154668b1488c52","sha512":"c7b22b332bc5ddac209b527d1c5db0bf6f555b0e97895e14c1ad0e34a7d52e01698749c77addf873e0ae9ac5dbcaa2055736bddc4346256afee3be832702e95b","ssdeep":"","tlshash":"5b61cd4b75f75170551bf83d9a2f50453232460724aeee0dfe9d62818f817b580b1fda","size":3386,"data":"","first_seen":"2026-04-15T05:01:39.418321Z","last_seen":"2026-04-15T05:04:05.232871Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"easy-image.b-cdn.net/app-icon/hell_hot.webp","fqdn":"easy-image.b-cdn.net","domain":"b-cdn.net","tld":"net"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://spinmax-portal.xyz/rrrausz?lead_id=1sjos4f.640f.1ar405c\u0026sub1=\u0026sub2=\u0026sub3=\u0026sub4=\u0026sub5=\u0026sub6=\u0026sub15=\u0026sub16=\u0026sub17=\u0026sub18=\u0026sub19=\u0026sub20=\u0026key=\u0026ln=EN\u0026sub_id_30=open_pwa","date":"2026-04-15T05:01:22.775Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.b-cdn.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 06 Nov 2025 00:00:00 GMT","end":"Wed, 11 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"92:9B:37:29:B4:2D:AB:EB:68:07:7B:03:B2:80:2E:5B:53:CE:AD:E7","sha256":"51:6F:86:36:A1:23:32:72:AA:0F:28:1A:81:F4:92:F8:82:35:42:13:BA:4C:21:2D:80:C5:BB:BF:19:04:1D:32"}}},"request":{"raw":"GET /app-icon/hell_hot.webp HTTP/1.1\r\nHost: easy-image.b-cdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://spinmax-portal.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 15 Apr 2026 05:01:22 GMT\r\ncontent-type: image/webp\r\ncontent-length: 65726\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 2442763\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=0\r\netag: \"66bf2845-100be\"\r\nlast-modified: Fri, 16 Aug 2024 10:21:57 GMT\r\ncdn-storageserver: SE-583\r\ncdn-fileserver: 583\r\ncdn-proxyver: 1.49\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 04/03/2026 09:40:51\r\ncdn-edgestorageid: 830\r\ncdn-requestid: f987e39aede84285317040c1697e0da0\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":65726,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"b53307a4a9c17d96b5c1f2607bd36345","sha1":"5591d01007451a5a1938d54f900b1bbcfbf095f1","sha256":"971ded65329751674860c9a5056affdb9cb7f54dd915ce30a00e2c841014119d","sha512":"d17e9bea231864061dd0b322c7cbe7283c0e3e30c175d72c2583cb32946a071049da106d71710f7512569bea91549c9a55e292d0e796904baf20d3ac7d78df7d","ssdeep":"768:O0+M/IJUmTaMpn8aoi11WBDgCAJgN1izO5U/+rZNO+GNT+5yuXYN7fALJtAwvl:OXMAdTv18MiFtLiSueZkLq5/Xq7ILJt3","tlshash":"45530268d41c0258f344bfb1e85cf5bc8039f214a0685dbaad03b13d6ddb7c6a9b985e","first_seen":"2025-03-26T16:41:42.423961Z","last_seen":"2026-05-17T04:16:50.243915Z","times_seen":47,"resource_available":false,"data":null}},"time_used":182,"timings":{"blocked":47,"dns":0,"connect":0,"send":0,"wait":85,"receive":50,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"spinmax-portal.xyz/lander/template-2025-06-16_15-51-22/script/manifest.php?start_url=https%3A%2F%2Fspinmax-portal.xyz%2Frrrausz","fqdn":"spinmax-portal.xyz","domain":"spinmax-portal.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://spinmax-portal.xyz/rrrausz?lead_id=1sjos4f.640f.1ar405c\u0026sub1=\u0026sub2=\u0026sub3=\u0026sub4=\u0026sub5=\u0026sub6=\u0026sub15=\u0026sub16=\u0026sub17=\u0026sub18=\u0026sub19=\u0026sub20=\u0026key=\u0026ln=EN\u0026sub_id_30=open_pwa","date":"2026-04-15T05:01:23.435Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"spinmax-portal.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 06 Apr 2026 23:06:25 GMT","end":"Mon, 06 Jul 2026 00:06:01 GMT"},"fingerprint":{"sha1":"0C:40:1A:B1:A1:36:AB:9B:6F:07:86:4D:57:6A:D9:D6:55:B9:32:56","sha256":"6C:0E:1C:B5:16:D5:EB:A1:7B:CA:88:49:AF:B3:F8:44:42:06:84:A9:8F:03:E7:B8:54:EE:98:C4:43:B8:CE:55"}}},"request":{"raw":"GET /lander/template-2025-06-16_15-51-22/script/manifest.php?start_url=https%3A%2F%2Fspinmax-portal.xyz%2Frrrausz HTTP/1.1\r\nHost: spinmax-portal.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/javascript, */*; q=0.01\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Requested-With: XMLHttpRequest\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://spinmax-portal.xyz/rrrausz?lead_id=1sjos4f.640f.1ar405c\u0026sub1=\u0026sub2=\u0026sub3=\u0026sub4=\u0026sub5=\u0026sub6=\u0026sub15=\u0026sub16=\u0026sub17=\u0026sub18=\u0026sub19=\u0026sub20=\u0026key=\u0026ln=EN\u0026sub_id_30=open_pwa\r\nCookie: e3b0c4_25615=3s90e142c4vf73; _token=3s90e142c4vf73.1776306149.7.e92eca5748914ba4fa973422f028bcd2; _subid=1sjos4f.640f.1ar407e\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 15 Apr 2026 05:01:26 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncache-control: no-cache, no-store, must-revalidate\r\nexpires: Wed, 15 Apr 2026 05:01:25 GMT\r\nx-content-type-options: nosniff\r\ncf-cache-status: DYNAMIC\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4O0JfcoApaxMRwlM66RGPYsqvqBdrblSc1CZsr7kzF3tH02cTuGMEhf4y2IlRxRJcpR0AETYPyyQ%2BiNfNxE5zIv7KqorINlpw8BL%2BaK3mUUjoic%2FWW0X4bEfvSs3hBiZsO2bSbs%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9ec8645d694f120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":362,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"JSON text data","md5":"7d4ca5437d2d858edfe5ec0f7301f13d","sha1":"013ff8d6aced7e88ec382fae8d1aa99b3e297ac7","sha256":"04539c1ee78e87589bddf07f437ecdf5fb6e963a162157510d2dfdbcefdde318","sha512":"3eda383c44fc1db6ff160db6b53c6f6d2c7d9bbf6fa9375c686b8681e1cad82366f1eb5a8cf45ff6ca59a05d34eb9ac2552ee24372b998cc4357aa8728d619ae","ssdeep":"","tlshash":"3ce07d95c4106d57335d80250c81020a741491078c803d057b9cd4ee4fae9ff04b737d","first_seen":"2026-04-15T05:01:39.393602Z","last_seen":"2026-04-15T05:04:05.237268Z","times_seen":2,"resource_available":false,"data":null}},"time_used":2646,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2645,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"spinmax-portal.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"spinmax-portal.xyz/lander/template-2025-06-16_15-51-22/images/new_icon_downloads.svg","fqdn":"spinmax-portal.xyz","domain":"spinmax-portal.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://spinmax-portal.xyz/rrrausz?lead_id=1sjos4f.640f.1ar405c\u0026sub1=\u0026sub2=\u0026sub3=\u0026sub4=\u0026sub5=\u0026sub6=\u0026sub15=\u0026sub16=\u0026sub17=\u0026sub18=\u0026sub19=\u0026sub20=\u0026key=\u0026ln=EN\u0026sub_id_30=open_pwa","date":"2026-04-15T05:01:22.714Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"spinmax-portal.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 06 Apr 2026 23:06:25 GMT","end":"Mon, 06 Jul 2026 00:06:01 GMT"},"fingerprint":{"sha1":"0C:40:1A:B1:A1:36:AB:9B:6F:07:86:4D:57:6A:D9:D6:55:B9:32:56","sha256":"6C:0E:1C:B5:16:D5:EB:A1:7B:CA:88:49:AF:B3:F8:44:42:06:84:A9:8F:03:E7:B8:54:EE:98:C4:43:B8:CE:55"}}},"request":{"raw":"GET /lander/template-2025-06-16_15-51-22/images/new_icon_downloads.svg HTTP/1.1\r\nHost: spinmax-portal.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://spinmax-portal.xyz/rrrausz?lead_id=1sjos4f.640f.1ar405c\u0026sub1=\u0026sub2=\u0026sub3=\u0026sub4=\u0026sub5=\u0026sub6=\u0026sub15=\u0026sub16=\u0026sub17=\u0026sub18=\u0026sub19=\u0026sub20=\u0026key=\u0026ln=EN\u0026sub_id_30=open_pwa\r\nCookie: e3b0c4_25615=3s90e142c4vf73; _token=3s90e142c4vf73.1776306149.7.e92eca5748914ba4fa973422f028bcd2; _subid=1sjos4f.640f.1ar407e\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 15 Apr 2026 05:01:23 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nlast-modified: Mon, 16 Jun 2025 15:55:09 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-content-type-options: nosniff\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NmetG1RWljmdNEIh31k1skzEnb2rIqKefn4m%2FAYAPXMNHQ5Nyax9QABYTyub%2FpDsOzsHhx%2BvfqnqmhEwdbaI%2BqcJndeZPLz8bicvUaW0G6LZTWJiqyjMl30KVJvQd%2BXZvDOqkts%3D\"}]}\r\netag: W/\"68503e5d-226\"\r\ncontent-encoding: br\r\ncf-ray: 9ec864588e1d120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":550,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"359c897b8171e46840e87873725ca8a0","sha1":"b8dc0aa03d7e3d78ee971dfdc384730bbca08412","sha256":"1266bd734a167b46b287221ff03697cf323e198d441a3ab274fad08f35ea016e","sha512":"6d8b6a95b5de2f4d2e2e82d8f0e9c394c52dd9ad7267f9d7ec82aac4f61fb938c53deb9b5628646a6382ae996efbfda42e4e6a859872132d83f8a7ca2ac292eb","ssdeep":"","tlshash":"30f08b2470ffc5c6db08c61396e0b0ff773267c412498424f19359e921dc6c56d38599","first_seen":"2024-08-19T13:45:40.062311Z","last_seen":"2026-06-08T12:52:08.37052Z","times_seen":245,"resource_available":false,"data":null}},"time_used":378,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":378,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"spinmax-portal.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"spinmax-portal.xyz/lander/template-2025-06-16_15-51-22/images/icon_star_black.svg","fqdn":"spinmax-portal.xyz","domain":"spinmax-portal.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://spinmax-portal.xyz/rrrausz?lead_id=1sjos4f.640f.1ar405c\u0026sub1=\u0026sub2=\u0026sub3=\u0026sub4=\u0026sub5=\u0026sub6=\u0026sub15=\u0026sub16=\u0026sub17=\u0026sub18=\u0026sub19=\u0026sub20=\u0026key=\u0026ln=EN\u0026sub_id_30=open_pwa","date":"2026-04-15T05:01:23.195Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"spinmax-portal.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 06 Apr 2026 23:06:25 GMT","end":"Mon, 06 Jul 2026 00:06:01 GMT"},"fingerprint":{"sha1":"0C:40:1A:B1:A1:36:AB:9B:6F:07:86:4D:57:6A:D9:D6:55:B9:32:56","sha256":"6C:0E:1C:B5:16:D5:EB:A1:7B:CA:88:49:AF:B3:F8:44:42:06:84:A9:8F:03:E7:B8:54:EE:98:C4:43:B8:CE:55"}}},"request":{"raw":"GET /lander/template-2025-06-16_15-51-22/images/icon_star_black.svg HTTP/1.1\r\nHost: spinmax-portal.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://spinmax-portal.xyz/lander/template-2025-06-16_15-51-22/style/style.css\r\nCookie: e3b0c4_25615=3s90e142c4vf73; _token=3s90e142c4vf73.1776306149.7.e92eca5748914ba4fa973422f028bcd2; _subid=1sjos4f.640f.1ar407e\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 15 Apr 2026 05:01:23 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nlast-modified: Mon, 16 Jun 2025 15:55:09 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-content-type-options: nosniff\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lZV6InpIHPh1iPrdCnrJHBDHS5nhILTDMHE49U1qcGFY9d5cT%2BfFJ5yH%2BnXbXch617V%2F3bV64u6cdFzvYklCARfnyT522rgsis3rMJHEwjG94V8QEUrhXmbV3MaUCyVv1NpWaF8%3D\"}]}\r\netag: W/\"68503e5d-fc\"\r\ncontent-encoding: br\r\ncf-ray: 9ec8645bfe50120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":252,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"fd7c9a36b018cd09c80d3c69bb83579b","sha1":"0b7c5758965fabcb509db70b94e2ecc62592a331","sha256":"5a29eb18c76586c2f55eedce4c2b46fa158df9148af71ade04a7934f9c5d312f","sha512":"ea7c5bd48d77a405845f935d5eaa3d373c246679f7404888b96d29ef2acfd38f64fe6fb54e75f77c6fc101f72310d6889a9d25cc95a6980dad9d7c1e7fa26f96","ssdeep":"","tlshash":"93d095752034da58cc55c651f2f75cfe6497d0db71c500c29549731170c086f4c59974","first_seen":"2024-10-12T23:01:03.367525Z","last_seen":"2026-06-06T22:10:36.489056Z","times_seen":151,"resource_available":false,"data":null}},"time_used":377,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":377,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"spinmax-portal.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"spinmax-portal.xyz/lander/template-2025-06-16_15-51-22/images/icon_point.svg","fqdn":"spinmax-portal.xyz","domain":"spinmax-portal.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://spinmax-portal.xyz/rrrausz?lead_id=1sjos4f.640f.1ar405c\u0026sub1=\u0026sub2=\u0026sub3=\u0026sub4=\u0026sub5=\u0026sub6=\u0026sub15=\u0026sub16=\u0026sub17=\u0026sub18=\u0026sub19=\u0026sub20=\u0026key=\u0026ln=EN\u0026sub_id_30=open_pwa","date":"2026-04-15T05:01:22.705Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"spinmax-portal.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 06 Apr 2026 23:06:25 GMT","end":"Mon, 06 Jul 2026 00:06:01 GMT"},"fingerprint":{"sha1":"0C:40:1A:B1:A1:36:AB:9B:6F:07:86:4D:57:6A:D9:D6:55:B9:32:56","sha256":"6C:0E:1C:B5:16:D5:EB:A1:7B:CA:88:49:AF:B3:F8:44:42:06:84:A9:8F:03:E7:B8:54:EE:98:C4:43:B8:CE:55"}}},"request":{"raw":"GET /lander/template-2025-06-16_15-51-22/images/icon_point.svg HTTP/1.1\r\nHost: spinmax-portal.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://spinmax-portal.xyz/rrrausz?lead_id=1sjos4f.640f.1ar405c\u0026sub1=\u0026sub2=\u0026sub3=\u0026sub4=\u0026sub5=\u0026sub6=\u0026sub15=\u0026sub16=\u0026sub17=\u0026sub18=\u0026sub19=\u0026sub20=\u0026key=\u0026ln=EN\u0026sub_id_30=open_pwa\r\nCookie: e3b0c4_25615=3s90e142c4vf73; _token=3s90e142c4vf73.1776306149.7.e92eca5748914ba4fa973422f028bcd2; _subid=1sjos4f.640f.1ar407e\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 15 Apr 2026 05:01:23 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nlast-modified: Mon, 16 Jun 2025 15:55:09 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-content-type-options: nosniff\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1RD3D%2BO7WDSaCaCFrjf70EkNRbRFSuSJSFdwcXN1K0Ap4Mbw6tDasrTOH%2FVrjm5OBWQbIeC%2F8NtoNCtUMwHzScY5D%2Bq2%2FxqX3DmrRI9FyDWJsirStuc59dvageLBfIp6G7wN8OI%3D\"}]}\r\netag: W/\"68503e5d-3b5\"\r\ncontent-encoding: br\r\ncf-ray: 9ec864588e11120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":949,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"0b8d819ea14a41d457702cc80af95fdc","sha1":"42648c53f7d9efd1447fc7f63ff43b7b36866012","sha256":"2cf31df5b105adeee79efb9d94fb767c0cb05a552d231835ef8c258d05fbc977","sha512":"5931f2ea2a9164cbc339d8c9ec6305db92781b9cf4f19838f749faebdeea725e3a450d963825ad47b4c55f607e8ff1410c68470eeea7802d0ecc5e9980aec695","ssdeep":"","tlshash":"c71108f3fc6a06dbda57b303ad8618a407bfb8f91347a18c5818cf3ba294154c795b20","first_seen":"2024-08-19T13:45:40.065888Z","last_seen":"2026-06-08T12:52:08.375947Z","times_seen":243,"resource_available":false,"data":null}},"time_used":396,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":395,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"spinmax-portal.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"easy-image.b-cdn.net/icon/verify-dev.webp","fqdn":"easy-image.b-cdn.net","domain":"b-cdn.net","tld":"net"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://spinmax-portal.xyz/rrrausz?lead_id=1sjos4f.640f.1ar405c\u0026sub1=\u0026sub2=\u0026sub3=\u0026sub4=\u0026sub5=\u0026sub6=\u0026sub15=\u0026sub16=\u0026sub17=\u0026sub18=\u0026sub19=\u0026sub20=\u0026key=\u0026ln=EN\u0026sub_id_30=open_pwa","date":"2026-04-15T05:01:22.708Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.b-cdn.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 06 Nov 2025 00:00:00 GMT","end":"Wed, 11 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"92:9B:37:29:B4:2D:AB:EB:68:07:7B:03:B2:80:2E:5B:53:CE:AD:E7","sha256":"51:6F:86:36:A1:23:32:72:AA:0F:28:1A:81:F4:92:F8:82:35:42:13:BA:4C:21:2D:80:C5:BB:BF:19:04:1D:32"}}},"request":{"raw":"GET /icon/verify-dev.webp HTTP/1.1\r\nHost: easy-image.b-cdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://spinmax-portal.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 15 Apr 2026 05:01:22 GMT\r\ncontent-type: image/webp\r\ncontent-length: 5200\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 2442763\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=0\r\netag: \"66bf247d-1450\"\r\nlast-modified: Fri, 16 Aug 2024 10:05:49 GMT\r\ncdn-storageserver: SE-582\r\ncdn-fileserver: 582\r\ncdn-proxyver: 1.33\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 08/09/2025 14:29:58\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 907140923f1c087ad0a8aa4242440ed2\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":5200,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 512x512, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"24320f300aafbe3211b8b6a9a8f8dba6","sha1":"fa8ca7b908c4de4f51a45c1ef7f79582dc2fab22","sha256":"8e30d059ae297c9c231e28ccb6637a6fa5a95f8d29643a76c36ac63180d617e7","sha512":"8cb2f54d1b422833925d29a93f30b2fa9b42288550fe11de555d270c81a05609528806c98c78f6a5d0eac4b1792651a0a73dc4a0db0ae0e1ccb075d4743de0cd","ssdeep":"96:2gBnsssqWq3S22mN0yavi97D+Xw+nw8a47T7Yj99EVcw/:XnsnI3S2EJvo7D18aSH89WV","tlshash":"10b17cb7352842ccc1b86964b4275943d2204e12831e2af59b1812d7ca2a76cfad2b13","first_seen":"2025-03-26T16:41:42.434031Z","last_seen":"2026-06-06T22:10:36.479151Z","times_seen":211,"resource_available":false,"data":null}},"time_used":424,"timings":{"blocked":128,"dns":58,"connect":17,"send":0,"wait":73,"receive":35,"ssl":109},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"easy-image.b-cdn.net/users/female/76.jpg","fqdn":"easy-image.b-cdn.net","domain":"b-cdn.net","tld":"net"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://spinmax-portal.xyz/rrrausz?lead_id=1sjos4f.640f.1ar405c\u0026sub1=\u0026sub2=\u0026sub3=\u0026sub4=\u0026sub5=\u0026sub6=\u0026sub15=\u0026sub16=\u0026sub17=\u0026sub18=\u0026sub19=\u0026sub20=\u0026key=\u0026ln=EN\u0026sub_id_30=open_pwa","date":"2026-04-15T05:01:22.736Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.b-cdn.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 06 Nov 2025 00:00:00 GMT","end":"Wed, 11 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"92:9B:37:29:B4:2D:AB:EB:68:07:7B:03:B2:80:2E:5B:53:CE:AD:E7","sha256":"51:6F:86:36:A1:23:32:72:AA:0F:28:1A:81:F4:92:F8:82:35:42:13:BA:4C:21:2D:80:C5:BB:BF:19:04:1D:32"}}},"request":{"raw":"GET /users/female/76.jpg HTTP/1.1\r\nHost: easy-image.b-cdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://spinmax-portal.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 15 Apr 2026 05:01:22 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 30315\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 2442763\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=0\r\netag: \"67ed046a-766b\"\r\nlast-modified: Wed, 02 Apr 2025 09:33:30 GMT\r\ncdn-storageserver: SE-582\r\ncdn-fileserver: 318\r\ncdn-proxyver: 1.50\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 04/15/2026 05:01:22\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 18a276b68e2497b3a6f052bb174512ad\r\ncdn-cache: MISS\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":30315,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 332x497, components 3","md5":"97115c23d779eaea1bb712c67db38970","sha1":"10ac34077aae52a48336e80cab00663fa7ebc568","sha256":"8d6c25181937de4c0c0b4a5dfec87044be64f81664837659dc0bf85c3563d1b2","sha512":"c0bdf000849090660a20130ee1dc5caa064e670da7529e3acb48dc3266f509a0a3d02abc7f28afc5035ffcf9358a5c0f1e9d24699e3a683c8ad571c3ed34fc13","ssdeep":"768:A6n6r2CWAcmSqr2eJS9nxcMlq4/vA6zcl6xemGvS:rnTIcD+RJqnxcMw43AMcSGK","tlshash":"75d2e1385642d06ca7fa75177b36aff93fa20e3426c26720bc64a6e3c7044e153625f9","first_seen":"2025-06-03T02:54:05.967613Z","last_seen":"2026-05-20T10:32:36.634071Z","times_seen":22,"resource_available":false,"data":null}},"time_used":214,"timings":{"blocked":82,"dns":0,"connect":0,"send":0,"wait":99,"receive":33,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"easy-image.b-cdn.net/users/female/56.jpg","fqdn":"easy-image.b-cdn.net","domain":"b-cdn.net","tld":"net"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://spinmax-portal.xyz/rrrausz?lead_id=1sjos4f.640f.1ar405c\u0026sub1=\u0026sub2=\u0026sub3=\u0026sub4=\u0026sub5=\u0026sub6=\u0026sub15=\u0026sub16=\u0026sub17=\u0026sub18=\u0026sub19=\u0026sub20=\u0026key=\u0026ln=EN\u0026sub_id_30=open_pwa","date":"2026-04-15T05:01:22.739Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.b-cdn.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 06 Nov 2025 00:00:00 GMT","end":"Wed, 11 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"92:9B:37:29:B4:2D:AB:EB:68:07:7B:03:B2:80:2E:5B:53:CE:AD:E7","sha256":"51:6F:86:36:A1:23:32:72:AA:0F:28:1A:81:F4:92:F8:82:35:42:13:BA:4C:21:2D:80:C5:BB:BF:19:04:1D:32"}}},"request":{"raw":"GET /users/female/56.jpg HTTP/1.1\r\nHost: easy-image.b-cdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://spinmax-portal.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 15 Apr 2026 05:01:22 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 36149\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 2442763\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=0\r\netag: \"67ed0468-8d35\"\r\nlast-modified: Wed, 02 Apr 2025 09:33:28 GMT\r\ncdn-storageserver: SE-582\r\ncdn-fileserver: 1028\r\ncdn-proxyver: 1.39\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 10/25/2025 08:55:05\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 995a57fb13c5435a12cf3a56ff0dbc68\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":36149,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 250x375, components 3","md5":"48879d328db5fb428d0fa8ef9b1e25ef","sha1":"acc47c4a97e24cc4a5ab80e240bc48b39aae8438","sha256":"e5e40a266dfc0fc757ae26d6a748e445f90c9a69e48d130c317e6d3ceba9cbc3","sha512":"bb531eb2c1fd840c377460811ae0c898d2aac3fa6fa5e22bd581c5d1df370d919a638f2c6f011f5e9639e2a58bb6ae74796d20d9dfe3dfb64a676b081f3e06ff","ssdeep":"768:acKsJfYHz6dsSGW77vcexxHLvxfFmx6D1d+QPRfEDppD2ZvTw/:NLsSG4bxJLJtz1klppKZvi","tlshash":"67f2f22d065b0f9ef03fdb985a3729744acdab4db8e6dd8c006135d97b68d22e2940f1","first_seen":"2025-08-03T23:29:43.390653Z","last_seen":"2026-05-17T04:16:31.187783Z","times_seen":21,"resource_available":false,"data":null}},"time_used":149,"timings":{"blocked":79,"dns":0,"connect":0,"send":0,"wait":67,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"easy-image.b-cdn.net/users/female/42.jpg","fqdn":"easy-image.b-cdn.net","domain":"b-cdn.net","tld":"net"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://spinmax-portal.xyz/rrrausz?lead_id=1sjos4f.640f.1ar405c\u0026sub1=\u0026sub2=\u0026sub3=\u0026sub4=\u0026sub5=\u0026sub6=\u0026sub15=\u0026sub16=\u0026sub17=\u0026sub18=\u0026sub19=\u0026sub20=\u0026key=\u0026ln=EN\u0026sub_id_30=open_pwa","date":"2026-04-15T05:01:22.740Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.b-cdn.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 06 Nov 2025 00:00:00 GMT","end":"Wed, 11 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"92:9B:37:29:B4:2D:AB:EB:68:07:7B:03:B2:80:2E:5B:53:CE:AD:E7","sha256":"51:6F:86:36:A1:23:32:72:AA:0F:28:1A:81:F4:92:F8:82:35:42:13:BA:4C:21:2D:80:C5:BB:BF:19:04:1D:32"}}},"request":{"raw":"GET /users/female/42.jpg HTTP/1.1\r\nHost: easy-image.b-cdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://spinmax-portal.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 15 Apr 2026 05:01:22 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 10701\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 2442763\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=0\r\netag: \"67ed0465-29cd\"\r\nlast-modified: Wed, 02 Apr 2025 09:33:25 GMT\r\ncdn-storageserver: SE-904\r\ncdn-fileserver: 1028\r\ncdn-proxyver: 1.49\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 03/30/2026 16:59:29\r\ncdn-edgestorageid: 830\r\ncdn-requestid: d2e43cac8837f84506f7276aae49671b\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":10701,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 216x324, components 3","md5":"a48657a2fe089ad36f30f4059a55c93a","sha1":"fb2bd4ab1cf6eecdba919fb0795e32455d16dcab","sha256":"a44b16fecb2a81545d6ddf0b4d0b983dfa9e47157c9cb7bb42f8d2cc70ccf157","sha512":"ce52dde1cdebcf91488a817ee675587b6176af6248d9e96c2baf73db3ea27d9869a26b26735a5f5ad033ed1ae3a4731ddbc6c6c7ccfcd6ab8428758f18dc357b","ssdeep":"192:d9exgVAzdtE12zzNEhhgGPInf9RrDomgEz1yYYu6gleSdtCT19kZp:dwuA3EsEhhgGwf9RrDJgEzwHgleSrS9E","tlshash":"2922bf58aea07cd8e4d53a345c96d92eef3cb9858e1380ced46abadd5c0451e0fb408e","first_seen":"2025-08-03T23:29:43.472396Z","last_seen":"2026-05-17T04:13:43.966932Z","times_seen":22,"resource_available":false,"data":null}},"time_used":206,"timings":{"blocked":79,"dns":0,"connect":0,"send":0,"wait":91,"receive":36,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"easy-image.b-cdn.net/app-icon/aviator.webp","fqdn":"easy-image.b-cdn.net","domain":"b-cdn.net","tld":"net"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://spinmax-portal.xyz/rrrausz?lead_id=1sjos4f.640f.1ar405c\u0026sub1=\u0026sub2=\u0026sub3=\u0026sub4=\u0026sub5=\u0026sub6=\u0026sub15=\u0026sub16=\u0026sub17=\u0026sub18=\u0026sub19=\u0026sub20=\u0026key=\u0026ln=EN\u0026sub_id_30=open_pwa","date":"2026-04-15T05:01:22.747Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.b-cdn.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 06 Nov 2025 00:00:00 GMT","end":"Wed, 11 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"92:9B:37:29:B4:2D:AB:EB:68:07:7B:03:B2:80:2E:5B:53:CE:AD:E7","sha256":"51:6F:86:36:A1:23:32:72:AA:0F:28:1A:81:F4:92:F8:82:35:42:13:BA:4C:21:2D:80:C5:BB:BF:19:04:1D:32"}}},"request":{"raw":"GET /app-icon/aviator.webp HTTP/1.1\r\nHost: easy-image.b-cdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://spinmax-portal.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 15 Apr 2026 05:01:22 GMT\r\ncontent-type: image/webp\r\ncontent-length: 79408\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 2442763\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=0\r\netag: \"66bf2844-13630\"\r\nlast-modified: Fri, 16 Aug 2024 10:21:56 GMT\r\ncdn-storageserver: SE-583\r\ncdn-fileserver: 883\r\ncdn-proxyver: 1.50\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 04/14/2026 13:02:33\r\ncdn-edgestorageid: 830\r\ncdn-requestid: de20f2f689300fc2d81c8824f8e7feec\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":79408,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1080x1080, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"fdc9f198b77f3769797a5b339451c61d","sha1":"2a6089645563bd677d4a471fc090a4063c647ccd","sha256":"eace3bb3e76ba68da01bbe4ef5602f153a66a0022ebb4501d5b57885c7da3af9","sha512":"1d6dcf15ff1e4351bedea21ed001112622d7ae209cc83e4793a8a69f894b4c82b85e1085130dd1c369c171133351bbc1777ae0d3e992ca1a39a26cc102b7c912","ssdeep":"1536:bzvqwFrw/c2aFIeyr+KH72GpK88eMLhjP1Kajpjwi78OyEgrzkjCJ0yJoM:bzC0w/NaFjKHFUVX0i7NyEgrJH","tlshash":"ce7312327a125014f672f3f86aab0e9d34fbbb95b93fcc45c0690916ebc8e15566f002","first_seen":"2025-07-04T00:17:04.611968Z","last_seen":"2026-05-17T04:16:50.265079Z","times_seen":34,"resource_available":false,"data":null}},"time_used":206,"timings":{"blocked":73,"dns":0,"connect":0,"send":0,"wait":87,"receive":46,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"easy-image.b-cdn.net/users/female/22.jpg","fqdn":"easy-image.b-cdn.net","domain":"b-cdn.net","tld":"net"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://spinmax-portal.xyz/rrrausz?lead_id=1sjos4f.640f.1ar405c\u0026sub1=\u0026sub2=\u0026sub3=\u0026sub4=\u0026sub5=\u0026sub6=\u0026sub15=\u0026sub16=\u0026sub17=\u0026sub18=\u0026sub19=\u0026sub20=\u0026key=\u0026ln=EN\u0026sub_id_30=open_pwa","date":"2026-04-15T05:01:22.731Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.b-cdn.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 06 Nov 2025 00:00:00 GMT","end":"Wed, 11 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"92:9B:37:29:B4:2D:AB:EB:68:07:7B:03:B2:80:2E:5B:53:CE:AD:E7","sha256":"51:6F:86:36:A1:23:32:72:AA:0F:28:1A:81:F4:92:F8:82:35:42:13:BA:4C:21:2D:80:C5:BB:BF:19:04:1D:32"}}},"request":{"raw":"GET /users/female/22.jpg HTTP/1.1\r\nHost: easy-image.b-cdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://spinmax-portal.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 15 Apr 2026 05:01:22 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 25389\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 2442763\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=0\r\netag: \"67ed0461-632d\"\r\nlast-modified: Wed, 02 Apr 2025 09:33:21 GMT\r\ncdn-storageserver: SE-904\r\ncdn-fileserver: 1028\r\ncdn-proxyver: 1.50\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 04/15/2026 05:01:22\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 13260861da07c0a8b0ac2349180cae08\r\ncdn-cache: MISS\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":25389,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 250x375, components 3","md5":"01281ef0941fe70bc2d39bb3e2f94074","sha1":"8c26714e698f2b76d2558748c435c1c6383b6c8a","sha256":"fc804dc02ca1e1f0dbaa8dd492858975544fc52108959bc99f4c244d865fada8","sha512":"14ddd2576693fafded0aa0367075cf5c5b095136ac0d37c508e2e940c4fc276f55368bd1f70b19a8a69065adcbf409d33e0b82d2b092c40ab26e73ed4d138ad1","ssdeep":"384:9ZKJzdcHUlcQsi/LFwiP45xepmgCb7MxUWVaxEu/OcHSqUNo/dpeNIK:KG0GQs0LD4mAhb7mUXTlRTpxK","tlshash":"43b2d0580c6bd03d5bde0c39d42b40387e21bb4c489c36e2a4b905d00beabcd96ad58f","first_seen":"2025-08-04T09:14:47.417374Z","last_seen":"2026-05-09T09:21:05.270586Z","times_seen":19,"resource_available":false,"data":null}},"time_used":214,"timings":{"blocked":86,"dns":0,"connect":0,"send":0,"wait":92,"receive":36,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"spinmax-portal.xyz/lander/template-2025-06-16_15-51-22/images/icon_share.svg","fqdn":"spinmax-portal.xyz","domain":"spinmax-portal.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://spinmax-portal.xyz/rrrausz?lead_id=1sjos4f.640f.1ar405c\u0026sub1=\u0026sub2=\u0026sub3=\u0026sub4=\u0026sub5=\u0026sub6=\u0026sub15=\u0026sub16=\u0026sub17=\u0026sub18=\u0026sub19=\u0026sub20=\u0026key=\u0026ln=EN\u0026sub_id_30=open_pwa","date":"2026-04-15T05:01:22.721Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"spinmax-portal.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 06 Apr 2026 23:06:25 GMT","end":"Mon, 06 Jul 2026 00:06:01 GMT"},"fingerprint":{"sha1":"0C:40:1A:B1:A1:36:AB:9B:6F:07:86:4D:57:6A:D9:D6:55:B9:32:56","sha256":"6C:0E:1C:B5:16:D5:EB:A1:7B:CA:88:49:AF:B3:F8:44:42:06:84:A9:8F:03:E7:B8:54:EE:98:C4:43:B8:CE:55"}}},"request":{"raw":"GET /lander/template-2025-06-16_15-51-22/images/icon_share.svg HTTP/1.1\r\nHost: spinmax-portal.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://spinmax-portal.xyz/rrrausz?lead_id=1sjos4f.640f.1ar405c\u0026sub1=\u0026sub2=\u0026sub3=\u0026sub4=\u0026sub5=\u0026sub6=\u0026sub15=\u0026sub16=\u0026sub17=\u0026sub18=\u0026sub19=\u0026sub20=\u0026key=\u0026ln=EN\u0026sub_id_30=open_pwa\r\nCookie: e3b0c4_25615=3s90e142c4vf73; _token=3s90e142c4vf73.1776306149.7.e92eca5748914ba4fa973422f028bcd2; _subid=1sjos4f.640f.1ar407e\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 15 Apr 2026 05:01:23 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nlast-modified: Mon, 16 Jun 2025 15:55:09 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-content-type-options: nosniff\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Tppn5wodxB22bvRveKB7GR0rZNiOsjMaaejiAVuinM5DrpaY03r1K2LcTLhgcONg1YCd2ZDANKFrsfaHOEk4KZRNa0dhGxbNTky1YPEJ2URQzRDgCB43ntj9UYySy8RZOiH%2FS7U%3D\"}]}\r\netag: W/\"68503e5d-a8d\"\r\ncontent-encoding: br\r\ncf-ray: 9ec864589e3e120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2701,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"8fab7329022a8061b2cee58fec76c2b3","sha1":"ff64a80490a99ed175b41155a3212971f1d9b6df","sha256":"0aff23b6c4ee6f36ee8e6d6de0e03ef346def4789521296e75023c1d9986df1f","sha512":"8bd3a283e1c8a5b97222d37f7d989c7a1d8c98a007a3903ae29f2f76a1a04ab9da9e62f9508c68cf20106bc46cb30c23047f6b9e91f633a4425b893af1e6ffdc","ssdeep":"","tlshash":"ae5100f5b1f822c8e30b538bb2e128b9765f287d13b48fc813e086c158798a4e7d49d4","first_seen":"2025-04-20T09:00:58.028476Z","last_seen":"2026-06-08T12:52:08.379417Z","times_seen":178,"resource_available":false,"data":null}},"time_used":387,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":387,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"spinmax-portal.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.onesignal.com/sdks/web/v16/OneSignalSDK.page.js","fqdn":"cdn.onesignal.com","domain":"onesignal.com","tld":"com"},"ip":{"addr":"104.16.160.145","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://spinmax-portal.xyz/rrrausz?lead_id=1sjos4f.640f.1ar405c\u0026sub1=\u0026sub2=\u0026sub3=\u0026sub4=\u0026sub5=\u0026sub6=\u0026sub15=\u0026sub16=\u0026sub17=\u0026sub18=\u0026sub19=\u0026sub20=\u0026key=\u0026ln=EN\u0026sub_id_30=open_pwa","date":"2026-04-15T05:01:22.690Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.onesignal.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Feb 2026 14:02:55 GMT","end":"Sat, 16 May 2026 15:02:54 GMT"},"fingerprint":{"sha1":"89:3E:A6:43:B5:73:4B:81:54:88:8C:2D:F3:65:96:D4:59:17:F6:9B","sha256":"93:10:10:A6:0B:4D:88:14:6B:3B:DB:F8:35:0A:7E:B6:D3:00:8F:00:D0:25:50:0A:55:D2:97:8F:C5:9E:0F:1B"}}},"request":{"raw":"GET /sdks/web/v16/OneSignalSDK.page.js HTTP/1.1\r\nHost: cdn.onesignal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://spinmax-portal.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 15 Apr 2026 05:01:22 GMT\r\ncontent-type: application/javascript\r\netag: W/\"a00076bd699df812e779da9a4115e447\"\r\naccess-control-allow-headers: OneSignal-Subscription-Id\r\nserver: cloudflare\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=86400\r\nvary: accept-encoding\r\nset-cookie: __cf_bm=yo2bFcEwx_wV54CHWFymPBfK3jlFtyZkqRx2Sdui6Hw-1776229282.6756506-1.0.1.1-s5oGgXAKaBm2gfk9xyl8WEC.ahG.EQDRxQcdEPY3pnhjdGR6ypV5Cb5dqJQwml.MzssobhjU57wAUwleLx0mVACAUCVniOGpaVHZu1Bx66RGm_Ng26V8.N8jpYG1Swhw; HttpOnly; Secure; Path=/; Domain=onesignal.com; Expires=Wed, 15 Apr 2026 05:31:22 GMT\r\nage: 136\r\nexpires: Sat, 18 Apr 2026 05:01:22 GMT\r\ncache-control: public, max-age=259200\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=15552000; includeSubDomains\r\ncontent-encoding: br\r\ncf-ray: 9ec86458b90256c7-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":590,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (544)","md5":"a00076bd699df812e779da9a4115e447","sha1":"f34870bb42ddf743ecf904561fc2ad6fafdf74d1","sha256":"b654b653e01469d2098282d49bf728c4d90d0f736c02618f72a78d0d6089e86d","sha512":"1b0cc0e49200c254915e559359051db46a437aa8c50d105ed559a10f8f563039377f16d80eba84131dfeef677630056aa11df27785ae10103c5fee1ff1a1797f","ssdeep":"","tlshash":"77f0e18b5b702a24266d488a673384496332a12cd8f690d1b7cb485c3011fa6879be3a","first_seen":"2026-04-01T02:18:52.83901Z","last_seen":"2026-06-04T08:24:54.233954Z","times_seen":2103,"resource_available":true,"data":null}},"time_used":47,"timings":{"blocked":-1,"dns":19,"connect":1,"send":0,"wait":8,"receive":0,"ssl":15},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"spinmax-portal.xyz/lander/template-2025-06-16_15-51-22/js/push-method.js","fqdn":"spinmax-portal.xyz","domain":"spinmax-portal.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://spinmax-portal.xyz/rrrausz?lead_id=1sjos4f.640f.1ar405c\u0026sub1=\u0026sub2=\u0026sub3=\u0026sub4=\u0026sub5=\u0026sub6=\u0026sub15=\u0026sub16=\u0026sub17=\u0026sub18=\u0026sub19=\u0026sub20=\u0026key=\u0026ln=EN\u0026sub_id_30=open_pwa","date":"2026-04-15T05:01:22.693Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"spinmax-portal.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 06 Apr 2026 23:06:25 GMT","end":"Mon, 06 Jul 2026 00:06:01 GMT"},"fingerprint":{"sha1":"0C:40:1A:B1:A1:36:AB:9B:6F:07:86:4D:57:6A:D9:D6:55:B9:32:56","sha256":"6C:0E:1C:B5:16:D5:EB:A1:7B:CA:88:49:AF:B3:F8:44:42:06:84:A9:8F:03:E7:B8:54:EE:98:C4:43:B8:CE:55"}}},"request":{"raw":"GET /lander/template-2025-06-16_15-51-22/js/push-method.js HTTP/1.1\r\nHost: spinmax-portal.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://spinmax-portal.xyz/rrrausz?lead_id=1sjos4f.640f.1ar405c\u0026sub1=\u0026sub2=\u0026sub3=\u0026sub4=\u0026sub5=\u0026sub6=\u0026sub15=\u0026sub16=\u0026sub17=\u0026sub18=\u0026sub19=\u0026sub20=\u0026key=\u0026ln=EN\u0026sub_id_30=open_pwa\r\nCookie: e3b0c4_25615=3s90e142c4vf73; _token=3s90e142c4vf73.1776306149.7.e92eca5748914ba4fa973422f028bcd2; _subid=1sjos4f.640f.1ar407e\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 15 Apr 2026 05:01:23 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nlast-modified: Mon, 16 Jun 2025 15:55:09 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-content-type-options: nosniff\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rBBxiKBZRif%2B5xIfkAe1bgYAlqAwlGQfCRrUlO77M1VXmJLrWe6TpWQ1IsoPrxIKKdNY0MWdFp4I7CqUplCncOmzYTfsJbbucBbUtUhVGdyZDTfIdddCtY6IGxMG5QFWIsvw0hU%3D\"}]}\r\netag: W/\"68503e5d-d3a\"\r\ncontent-encoding: br\r\ncf-ray: 9ec864587df6120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3386,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"6f4e7af8121c2963d5161df686f2e358","sha1":"d263ff12f0f6a1fb8d85a52d731067d64a37847b","sha256":"ce21e7fdfae95b18accdde3c4386ce59575480db75de0585da154668b1488c52","sha512":"c7b22b332bc5ddac209b527d1c5db0bf6f555b0e97895e14c1ad0e34a7d52e01698749c77addf873e0ae9ac5dbcaa2055736bddc4346256afee3be832702e95b","ssdeep":"","tlshash":"5b61cd4b75f75170551bf83d9a2f50453232460724aeee0dfe9d62818f817b580b1fda","first_seen":"2026-04-15T05:01:39.418321Z","last_seen":"2026-04-15T05:04:05.232871Z","times_seen":2,"resource_available":true,"data":null}},"time_used":388,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":388,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"spinmax-portal.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"easy-image.b-cdn.net/users/female/35.jpg","fqdn":"easy-image.b-cdn.net","domain":"b-cdn.net","tld":"net"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://spinmax-portal.xyz/rrrausz?lead_id=1sjos4f.640f.1ar405c\u0026sub1=\u0026sub2=\u0026sub3=\u0026sub4=\u0026sub5=\u0026sub6=\u0026sub15=\u0026sub16=\u0026sub17=\u0026sub18=\u0026sub19=\u0026sub20=\u0026key=\u0026ln=EN\u0026sub_id_30=open_pwa","date":"2026-04-15T05:01:22.724Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.b-cdn.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 06 Nov 2025 00:00:00 GMT","end":"Wed, 11 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"92:9B:37:29:B4:2D:AB:EB:68:07:7B:03:B2:80:2E:5B:53:CE:AD:E7","sha256":"51:6F:86:36:A1:23:32:72:AA:0F:28:1A:81:F4:92:F8:82:35:42:13:BA:4C:21:2D:80:C5:BB:BF:19:04:1D:32"}}},"request":{"raw":"GET /users/female/35.jpg HTTP/1.1\r\nHost: easy-image.b-cdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://spinmax-portal.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 15 Apr 2026 05:01:22 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 5347\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 2442763\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=0\r\netag: \"67ed0464-14e3\"\r\nlast-modified: Wed, 02 Apr 2025 09:33:24 GMT\r\ncdn-storageserver: SE-583\r\ncdn-fileserver: 344\r\ncdn-proxyver: 1.49\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 03/28/2026 17:19:53\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 19fff045188ad7ef5548a3ea6686cb57\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":5347,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 157x220, components 3","md5":"943de235f5696c1be4ec1c5e5c5d1c5d","sha1":"ee37383e31a2c9ea1673ed0fd76a0e9cf97339e0","sha256":"1cc2616043aefee5efa8b209936fa15ebb6a289f30285a946a815528615179ce","sha512":"cf43ab58bfd0999971833a03636ce96d6986a61fee7148cf51b9024f0fcb4025e1f252c269d81434e534ed11a229843002ceb950a61a3eefe0d368fba1c021e6","ssdeep":"96:Me7/nJp0Uq9/HF9ha9xO38s5gc1qqmqvH/8jknWdRxWS/+pCOHl:Me7BeUa/zDBT1qqV0jknYRd+plF","tlshash":"12b17d0e52650259ecb113f11dd315106bc57791b8b62e4a14bc2efcc2b17c2e615a9f","first_seen":"2025-10-31T09:11:04.467976Z","last_seen":"2026-05-09T07:38:03.152536Z","times_seen":32,"resource_available":false,"data":null}},"time_used":285,"timings":{"blocked":93,"dns":56,"connect":19,"send":0,"wait":26,"receive":0,"ssl":87},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"easy-image.b-cdn.net/users/female/6.jpg","fqdn":"easy-image.b-cdn.net","domain":"b-cdn.net","tld":"net"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://spinmax-portal.xyz/rrrausz?lead_id=1sjos4f.640f.1ar405c\u0026sub1=\u0026sub2=\u0026sub3=\u0026sub4=\u0026sub5=\u0026sub6=\u0026sub15=\u0026sub16=\u0026sub17=\u0026sub18=\u0026sub19=\u0026sub20=\u0026key=\u0026ln=EN\u0026sub_id_30=open_pwa","date":"2026-04-15T05:01:22.725Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.b-cdn.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 06 Nov 2025 00:00:00 GMT","end":"Wed, 11 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"92:9B:37:29:B4:2D:AB:EB:68:07:7B:03:B2:80:2E:5B:53:CE:AD:E7","sha256":"51:6F:86:36:A1:23:32:72:AA:0F:28:1A:81:F4:92:F8:82:35:42:13:BA:4C:21:2D:80:C5:BB:BF:19:04:1D:32"}}},"request":{"raw":"GET /users/female/6.jpg HTTP/1.1\r\nHost: easy-image.b-cdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://spinmax-portal.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 15 Apr 2026 05:01:22 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 14501\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 2442763\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=0\r\netag: \"67ed045f-38a5\"\r\nlast-modified: Wed, 02 Apr 2025 09:33:19 GMT\r\ncdn-storageserver: SE-583\r\ncdn-fileserver: 344\r\ncdn-proxyver: 1.50\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 04/15/2026 05:01:22\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 1c518916da115c91b688e07a1a8cc45f\r\ncdn-cache: MISS\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":14501,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 252x316, components 3","md5":"cebabd9852642d43036b137a68248990","sha1":"41747badfdaf37e585a98d9f2a7f033fc5abe6f2","sha256":"f8fd719ac5c28d4b9874ab8484aa04ed29980d3c67588a0a93cb34bbb628f2b8","sha512":"4ae3c222903eaf7a42baae1ee597bbecf466b1d241646adcef470625f950f09753b18857712598451c951107f05979dc50063c696955f81b412229fe13c36e08","ssdeep":"384:UFQHuATqYdpov4+hTWUjPIhZTJNXURtkC1ybTrSVWL:UFUr3ITTWi2TJNa/kTrnL","tlshash":"7f52c0a5fe53ec0681220ef5eb5517bcc06fb5c7ac0adb8884d922f451eb2d8306685e","first_seen":"2025-04-06T10:47:32.171403Z","last_seen":"2026-05-28T07:37:54.469748Z","times_seen":33,"resource_available":false,"data":null}},"time_used":437,"timings":{"blocked":143,"dns":46,"connect":19,"send":0,"wait":53,"receive":34,"ssl":135},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"easy-image.b-cdn.net/users/female/67.jpg","fqdn":"easy-image.b-cdn.net","domain":"b-cdn.net","tld":"net"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://spinmax-portal.xyz/rrrausz?lead_id=1sjos4f.640f.1ar405c\u0026sub1=\u0026sub2=\u0026sub3=\u0026sub4=\u0026sub5=\u0026sub6=\u0026sub15=\u0026sub16=\u0026sub17=\u0026sub18=\u0026sub19=\u0026sub20=\u0026key=\u0026ln=EN\u0026sub_id_30=open_pwa","date":"2026-04-15T05:01:22.740Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.b-cdn.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 06 Nov 2025 00:00:00 GMT","end":"Wed, 11 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"92:9B:37:29:B4:2D:AB:EB:68:07:7B:03:B2:80:2E:5B:53:CE:AD:E7","sha256":"51:6F:86:36:A1:23:32:72:AA:0F:28:1A:81:F4:92:F8:82:35:42:13:BA:4C:21:2D:80:C5:BB:BF:19:04:1D:32"}}},"request":{"raw":"GET /users/female/67.jpg HTTP/1.1\r\nHost: easy-image.b-cdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://spinmax-portal.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 15 Apr 2026 05:01:22 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 16230\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 2442763\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=0\r\netag: \"67ed0469-3f66\"\r\nlast-modified: Wed, 02 Apr 2025 09:33:29 GMT\r\ncdn-storageserver: SE-583\r\ncdn-fileserver: 318\r\ncdn-proxyver: 1.50\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 04/13/2026 04:09:05\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 019ccbb1499f35b98519f021cc50470e\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":16230,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 250x375, components 3","md5":"36e2022fb8317165e3a5b8b917701af9","sha1":"c3defe7f0e69e4b3a26138c6fc8e0db97d3be844","sha256":"14b70144a78a19fd26da5c7c28eb10488395489cdb30d162a81fddd206bd1e93","sha512":"0fd39dcbc870a4b25a5bf43057457e06b5774a034dd1f53cd488e02771af41439941c5dc5492e4cfbd54d7af7ca41cf51b98b2781ee8f4e6a9e9a1f0ebe8168a","ssdeep":"384:OHSMzdfVY/4ClFQoMjDvR3ob8aXs6sm28vPsPA:TMpS/4/vZZaCgPUA","tlshash":"f572d05af193e8198bf8e47979809f4c8a6e8d2b53ed0d5edc9217f2ac3f447211d4a0","first_seen":"2025-04-06T10:47:32.164323Z","last_seen":"2026-06-06T22:10:36.481297Z","times_seen":15,"resource_available":false,"data":null}},"time_used":163,"timings":{"blocked":78,"dns":0,"connect":0,"send":0,"wait":82,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"easy-image.b-cdn.net/users/male/6.jpg","fqdn":"easy-image.b-cdn.net","domain":"b-cdn.net","tld":"net"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://spinmax-portal.xyz/rrrausz?lead_id=1sjos4f.640f.1ar405c\u0026sub1=\u0026sub2=\u0026sub3=\u0026sub4=\u0026sub5=\u0026sub6=\u0026sub15=\u0026sub16=\u0026sub17=\u0026sub18=\u0026sub19=\u0026sub20=\u0026key=\u0026ln=EN\u0026sub_id_30=open_pwa","date":"2026-04-15T05:01:22.745Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.b-cdn.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 06 Nov 2025 00:00:00 GMT","end":"Wed, 11 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"92:9B:37:29:B4:2D:AB:EB:68:07:7B:03:B2:80:2E:5B:53:CE:AD:E7","sha256":"51:6F:86:36:A1:23:32:72:AA:0F:28:1A:81:F4:92:F8:82:35:42:13:BA:4C:21:2D:80:C5:BB:BF:19:04:1D:32"}}},"request":{"raw":"GET /users/male/6.jpg HTTP/1.1\r\nHost: easy-image.b-cdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://spinmax-portal.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 15 Apr 2026 05:01:22 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 14599\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 2442763\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=0\r\netag: \"67ed0546-3907\"\r\nlast-modified: Wed, 02 Apr 2025 09:37:10 GMT\r\ncdn-storageserver: SE-583\r\ncdn-fileserver: 966\r\ncdn-proxyver: 1.49\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 03/30/2026 06:57:39\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 41a67f77856eff36bd827af38e18ea5c\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":14599,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 308x204, components 3","md5":"c635a17407f647215b35a3f35fdd20e4","sha1":"9647dc91ed8bf674f538a850dbd9e362c260c2f5","sha256":"985251d83eca058f7c60d88232c7735ce6cceeda17c78e6386720b332f2667ec","sha512":"2b2c5a2f7a6bd4de89bb710cc3b6083b6d29a0cbc20d9f9670cb62beb83cf85708e091ee42c47957038cbb6874892bab1634cbd98ec00e6dc924ad3b50f491ea","ssdeep":"384:Q8glB1HoG8/aSoyDkKx02DfGlUwO0nzsgmm:Q1lBY/aGkKx02DfS6gmm","tlshash":"ab62d1d9d0581e98f2300df415d26f27e724f3000ffc65a8559ba9ee063b7acba17111","first_seen":"2025-04-20T09:00:58.03416Z","last_seen":"2026-05-17T04:15:01.926342Z","times_seen":20,"resource_available":false,"data":null}},"time_used":166,"timings":{"blocked":74,"dns":0,"connect":0,"send":0,"wait":87,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"easy-image.b-cdn.net/app-icon/big_bass.webp","fqdn":"easy-image.b-cdn.net","domain":"b-cdn.net","tld":"net"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://spinmax-portal.xyz/rrrausz?lead_id=1sjos4f.640f.1ar405c\u0026sub1=\u0026sub2=\u0026sub3=\u0026sub4=\u0026sub5=\u0026sub6=\u0026sub15=\u0026sub16=\u0026sub17=\u0026sub18=\u0026sub19=\u0026sub20=\u0026key=\u0026ln=EN\u0026sub_id_30=open_pwa","date":"2026-04-15T05:01:22.749Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.b-cdn.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 06 Nov 2025 00:00:00 GMT","end":"Wed, 11 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"92:9B:37:29:B4:2D:AB:EB:68:07:7B:03:B2:80:2E:5B:53:CE:AD:E7","sha256":"51:6F:86:36:A1:23:32:72:AA:0F:28:1A:81:F4:92:F8:82:35:42:13:BA:4C:21:2D:80:C5:BB:BF:19:04:1D:32"}}},"request":{"raw":"GET /app-icon/big_bass.webp HTTP/1.1\r\nHost: easy-image.b-cdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://spinmax-portal.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 15 Apr 2026 05:01:22 GMT\r\ncontent-type: image/webp\r\ncontent-length: 83540\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 2442763\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=0\r\netag: \"66bf2845-14654\"\r\nlast-modified: Fri, 16 Aug 2024 10:21:57 GMT\r\ncdn-storageserver: SE-904\r\ncdn-fileserver: 884\r\ncdn-proxyver: 1.50\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 04/15/2026 04:22:15\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 451a91351ee1e4956fc750f11448e125\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":83540,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"160f3df3444691f8d4cd64548c1a55e6","sha1":"5960b875a1456af18f4c22ef7eacf000b3459313","sha256":"10231a4d0dcc5ce61b743462f20bf3c8c6fb2b5bd5394b73ae6ed9495569a1c4","sha512":"ec66b704fb3614e37c22e69a37c875d495e9e2881938cea12b6d382ca1e6b6ea44218547a59148b5d776a7c8fb56a8e2855cbb940ca49a59d74402f2156dca78","ssdeep":"1536:OeAPFjM+H5DW/a01AZVhy5ZyiCidhXZaO12vvDI2tvi92WfHbj5me/vmoTajG:OrPFjMrA45E+d9lADI2piIuHbgcNKG","tlshash":"778302ec175e8798c2a20ff4c9c201d3f68277558663d1293f9f512a00dd799ea3e3a9","first_seen":"2025-03-26T16:41:42.411759Z","last_seen":"2026-06-06T22:10:36.482471Z","times_seen":57,"resource_available":false,"data":null}},"time_used":206,"timings":{"blocked":72,"dns":0,"connect":0,"send":0,"wait":86,"receive":48,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"easy-image.b-cdn.net/app-icon/book_of_ra.webp","fqdn":"easy-image.b-cdn.net","domain":"b-cdn.net","tld":"net"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://spinmax-portal.xyz/rrrausz?lead_id=1sjos4f.640f.1ar405c\u0026sub1=\u0026sub2=\u0026sub3=\u0026sub4=\u0026sub5=\u0026sub6=\u0026sub15=\u0026sub16=\u0026sub17=\u0026sub18=\u0026sub19=\u0026sub20=\u0026key=\u0026ln=EN\u0026sub_id_30=open_pwa","date":"2026-04-15T05:01:22.749Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.b-cdn.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 06 Nov 2025 00:00:00 GMT","end":"Wed, 11 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"92:9B:37:29:B4:2D:AB:EB:68:07:7B:03:B2:80:2E:5B:53:CE:AD:E7","sha256":"51:6F:86:36:A1:23:32:72:AA:0F:28:1A:81:F4:92:F8:82:35:42:13:BA:4C:21:2D:80:C5:BB:BF:19:04:1D:32"}}},"request":{"raw":"GET /app-icon/book_of_ra.webp HTTP/1.1\r\nHost: easy-image.b-cdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://spinmax-portal.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 15 Apr 2026 05:01:22 GMT\r\ncontent-type: image/webp\r\ncontent-length: 179446\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 2442763\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=0\r\netag: \"66bf2844-2bcf6\"\r\nlast-modified: Fri, 16 Aug 2024 10:21:56 GMT\r\ncdn-storageserver: SE-582\r\ncdn-fileserver: 583\r\ncdn-proxyver: 1.50\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 04/09/2026 11:39:28\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 3005d354c1a37acd96e75c38d65f999a\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":179446,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1080x1080, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"5e34752edfa8ff55bbf5c2e2f1048612","sha1":"565eedd24fadc3d873dd2cc065637e86704b6812","sha256":"12f896383679cbdd332b993d3083ca9d5e83d1c73afa27fd1ecbcb20ad519ed4","sha512":"ea8dd42f9ce35f3cf4106f40c8b55e1660fca267bad3bd919da6380036fc4eb7b37a06411182f74859d71f555dfda3a13c23f1047d73446be97f21878e1a60d6","ssdeep":"3072:yjpqBXZh/6ctuEdYdXcK5khjHedHEftp7NTsDlvNFMLJvt282QeBko6:KpgT/XtzKM+RMpRTsDx7m+82Qeux","tlshash":"3004238302189ac896a33f519e89c17ff755f272474bb40323ae596e64bdd93c83762c","first_seen":"2025-08-04T09:14:47.411763Z","last_seen":"2026-05-28T13:22:51.596935Z","times_seen":62,"resource_available":false,"data":null}},"time_used":223,"timings":{"blocked":72,"dns":0,"connect":0,"send":0,"wait":86,"receive":65,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"spinmax-portal.xyz/rrrausz?lead_id=1sjos4f.640f.1ar405c\u0026sub1=\u0026sub2=\u0026sub3=\u0026sub4=\u0026sub5=\u0026sub6=\u0026sub15=\u0026sub16=\u0026sub17=\u0026sub18=\u0026sub19=\u0026sub20=\u0026key=\u0026ln=EN\u0026sub_id_30=open_pwa","fqdn":"spinmax-portal.xyz","domain":"spinmax-portal.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-04-15T05:01:18.897Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"spinmax-portal.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 06 Apr 2026 23:06:25 GMT","end":"Mon, 06 Jul 2026 00:06:01 GMT"},"fingerprint":{"sha1":"0C:40:1A:B1:A1:36:AB:9B:6F:07:86:4D:57:6A:D9:D6:55:B9:32:56","sha256":"6C:0E:1C:B5:16:D5:EB:A1:7B:CA:88:49:AF:B3:F8:44:42:06:84:A9:8F:03:E7:B8:54:EE:98:C4:43:B8:CE:55"}}},"request":{"raw":"GET /rrrausz?lead_id=1sjos4f.640f.1ar405c\u0026sub1=\u0026sub2=\u0026sub3=\u0026sub4=\u0026sub5=\u0026sub6=\u0026sub15=\u0026sub16=\u0026sub17=\u0026sub18=\u0026sub19=\u0026sub20=\u0026key=\u0026ln=EN\u0026sub_id_30=open_pwa HTTP/1.1\r\nHost: spinmax-portal.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: e3b0c4_25615=3s90e142c4vf73\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 15 Apr 2026 05:01:22 GMT\r\ncontent-type: text/html; charset=utf-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: no-cache, no-store, must-revalidate\r\nexpires: Wed, 15 Apr 2026 05:01:21 GMT\r\nset-cookie: e3b0c4_25615=3s90e142c4vf73; expires=Thu, 16 Apr 2026 02:22:29 GMT; path=/; domain=spinmax-portal.xyz; secure; httponly; samesite=none\n_token=3s90e142c4vf73.1776306149.7.e92eca5748914ba4fa973422f028bcd2; expires=Thu, 16 Apr 2026 02:22:29 GMT; path=/; domain=spinmax-portal.xyz; secure; httponly; samesite=none\n_subid=1sjos4f.640f.1ar407e; expires=Thu, 16 Apr 2026 02:22:29 GMT; path=/; domain=spinmax-portal.xyz; secure; httponly; samesite=none\r\naccess-control-allow-origin: *\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9%2Fm33Tx%2FCftjFt5gFi5X4GyNg2fAZ5gUJyqx1W7CKcS7i6PKp1sC%2BKbFRnpkx7hhWTqKve%2FXbdFkaW50Ii7WyNflU7knsgSzdx88Yb6igLj0jsRo%2BgYwMEOgPPVkjvJ4YUvG26A%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncf-ray: 9ec864411cd0b503-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"OneSignal","description":"OneSignal is a customer engagement messaging solution.","website":"https://onesignal.com","common_platform_enumeration":"","icon":"OneSignal.svg","categories":["Marketing automation","A/B Testing"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}],"data":{"size":92178,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (322)","md5":"b58b122b4daa998b41a3ec68eaec5d03","sha1":"7372ac3966f8fbaf207d3d2b752a490e90a0bd52","sha256":"9bbbb2e308bf1dd1719d20a075ede983bdf05195a185a3762970684e2c8160b7","sha512":"cab0a9bbbc6eb9964e9d85d0f3ca2fabea0193fbc4e9e5f893767cd1f47bf4787fb184faff891f7face91de2fc142fb1e65dae047fb272ef254b465f63cb6479","ssdeep":"384:DjXzTtomwfa0Fqm5yPJ10J1AJrJ45JqJ2XJVJrIJDJoJ3kJpTJA4JjQNJJJhdJL9:DjX+faQqmcrWzjsOQQW/n4xG7SVWvlgH","tlshash":"97938930a8f250370153d0d5af668b1a6ee0fa039a464705bbfd47e46fdae86ed0764c","first_seen":"2026-04-15T05:01:39.430241Z","last_seen":"2026-04-15T05:04:05.242632Z","times_seen":2,"resource_available":false,"data":null}},"time_used":3523,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":3523,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"spinmax-portal.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"spinmax-portal.xyz/lander/template-2025-06-16_15-51-22/icon.png","fqdn":"spinmax-portal.xyz","domain":"spinmax-portal.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://spinmax-portal.xyz/rrrausz?lead_id=1sjos4f.640f.1ar405c\u0026sub1=\u0026sub2=\u0026sub3=\u0026sub4=\u0026sub5=\u0026sub6=\u0026sub15=\u0026sub16=\u0026sub17=\u0026sub18=\u0026sub19=\u0026sub20=\u0026key=\u0026ln=EN\u0026sub_id_30=open_pwa","date":"2026-04-15T05:01:22.707Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"spinmax-portal.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 06 Apr 2026 23:06:25 GMT","end":"Mon, 06 Jul 2026 00:06:01 GMT"},"fingerprint":{"sha1":"0C:40:1A:B1:A1:36:AB:9B:6F:07:86:4D:57:6A:D9:D6:55:B9:32:56","sha256":"6C:0E:1C:B5:16:D5:EB:A1:7B:CA:88:49:AF:B3:F8:44:42:06:84:A9:8F:03:E7:B8:54:EE:98:C4:43:B8:CE:55"}}},"request":{"raw":"GET /lander/template-2025-06-16_15-51-22/icon.png HTTP/1.1\r\nHost: spinmax-portal.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://spinmax-portal.xyz/rrrausz?lead_id=1sjos4f.640f.1ar405c\u0026sub1=\u0026sub2=\u0026sub3=\u0026sub4=\u0026sub5=\u0026sub6=\u0026sub15=\u0026sub16=\u0026sub17=\u0026sub18=\u0026sub19=\u0026sub20=\u0026key=\u0026ln=EN\u0026sub_id_30=open_pwa\r\nCookie: e3b0c4_25615=3s90e142c4vf73; _token=3s90e142c4vf73.1776306149.7.e92eca5748914ba4fa973422f028bcd2; _subid=1sjos4f.640f.1ar407e\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 15 Apr 2026 05:01:23 GMT\r\ncontent-type: image/png\r\ncontent-length: 404070\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nlast-modified: Mon, 16 Jun 2025 15:55:09 GMT\r\netag: \"68503e5d-62a66\"\r\nx-content-type-options: nosniff\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NXda5gJ7sv6wRDOm8EvlUh%2B55FVuGosxZUooS%2Fs2zlVWdZKbP2Lo5RpiuIRlpcG0PEOaDpGNJp4qg3FhpQPTWqKv4tW87j5RbXOPe%2FW%2FBdKhmXKDbWn4W38eKnIG8K8CQ8ZWsvc%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ec864588e13120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":212716,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 512 x 512, 8-bit/color RGB, non-interlaced","md5":"a93430d89db2f435dff5b441dd57fd6d","sha1":"7e1a180bfd4f95a66e71504c9bead642d94bb474","sha256":"66a23038f5292917abf750cbe4a55528a6519c8cfdb014ed689a6ca9138d0a1d","sha512":"c77c9f51fb54a5bc35afcf8853ad9e1ca5bbcf05910de82f23ace43b29a52bced3d806bd3dd36be8b3d014c5d6986ccc24dc83be3597ffa68c775a8fe2f7041e","ssdeep":"6144:owcs4WKtdiS3WMQEJqB30+Aic8BhK7LXrptIt4BO2S:AskDieWY02tHXttJsv","tlshash":"b624228e03ed68b399d1b3fd2f4a6c0701b058434dd28eeec469adfa6d5e94702543e6","first_seen":"2026-04-15T05:01:39.432207Z","last_seen":"2026-04-15T05:01:39.432207Z","times_seen":1,"resource_available":false,"data":null}},"time_used":762,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":528,"receive":234,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"spinmax-portal.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"easy-image.b-cdn.net/users/male/65.jpg","fqdn":"easy-image.b-cdn.net","domain":"b-cdn.net","tld":"net"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://spinmax-portal.xyz/rrrausz?lead_id=1sjos4f.640f.1ar405c\u0026sub1=\u0026sub2=\u0026sub3=\u0026sub4=\u0026sub5=\u0026sub6=\u0026sub15=\u0026sub16=\u0026sub17=\u0026sub18=\u0026sub19=\u0026sub20=\u0026key=\u0026ln=EN\u0026sub_id_30=open_pwa","date":"2026-04-15T05:01:22.743Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.b-cdn.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 06 Nov 2025 00:00:00 GMT","end":"Wed, 11 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"92:9B:37:29:B4:2D:AB:EB:68:07:7B:03:B2:80:2E:5B:53:CE:AD:E7","sha256":"51:6F:86:36:A1:23:32:72:AA:0F:28:1A:81:F4:92:F8:82:35:42:13:BA:4C:21:2D:80:C5:BB:BF:19:04:1D:32"}}},"request":{"raw":"GET /users/male/65.jpg HTTP/1.1\r\nHost: easy-image.b-cdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://spinmax-portal.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 15 Apr 2026 05:01:22 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 25307\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 2442763\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=0\r\netag: \"67ed054f-62db\"\r\nlast-modified: Wed, 02 Apr 2025 09:37:19 GMT\r\ncdn-storageserver: SE-582\r\ncdn-fileserver: 966\r\ncdn-proxyver: 1.50\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 04/15/2026 05:01:22\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 9a8e0b8dd8aaaca3e797507992f35679\r\ncdn-cache: MISS\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":25307,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 250x375, components 3","md5":"c06933a75ff7468dd52697e72d165f90","sha1":"4cfb9acbd4a6fb922af15452c6fbd579fbb8d4db","sha256":"43cb7c4608778c37b2cafa8f66ec04393c7fc00508f7539e6b7544b190bf484f","sha512":"1f2f797c72ff7cbe17001541b5e14582a57784e30e069dc7152b1dcd8671cd11f2be24a886504c9c1fc07da6758b1a757818cc6d289d485402b904665f7f9128","ssdeep":"768:JLvZE+u8ulgFY+bhc1+P5lIPQWfX8XStZtciXQxIDTvRS:NvYlmFYJ4lIoWf8DigxIDTA","tlshash":"06b2e12e219caf4dd4242d32a7f64aab01105fdb9f95f9822f617edb052323492dc6e4","first_seen":"2025-06-19T06:56:57.169673Z","last_seen":"2026-05-17T04:16:31.724254Z","times_seen":17,"resource_available":false,"data":null}},"time_used":205,"timings":{"blocked":76,"dns":0,"connect":0,"send":0,"wait":91,"receive":38,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"easy-image.b-cdn.net/app-icon/burning.webp","fqdn":"easy-image.b-cdn.net","domain":"b-cdn.net","tld":"net"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://spinmax-portal.xyz/rrrausz?lead_id=1sjos4f.640f.1ar405c\u0026sub1=\u0026sub2=\u0026sub3=\u0026sub4=\u0026sub5=\u0026sub6=\u0026sub15=\u0026sub16=\u0026sub17=\u0026sub18=\u0026sub19=\u0026sub20=\u0026key=\u0026ln=EN\u0026sub_id_30=open_pwa","date":"2026-04-15T05:01:22.773Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.b-cdn.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 06 Nov 2025 00:00:00 GMT","end":"Wed, 11 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"92:9B:37:29:B4:2D:AB:EB:68:07:7B:03:B2:80:2E:5B:53:CE:AD:E7","sha256":"51:6F:86:36:A1:23:32:72:AA:0F:28:1A:81:F4:92:F8:82:35:42:13:BA:4C:21:2D:80:C5:BB:BF:19:04:1D:32"}}},"request":{"raw":"GET /app-icon/burning.webp HTTP/1.1\r\nHost: easy-image.b-cdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://spinmax-portal.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 15 Apr 2026 05:01:22 GMT\r\ncontent-type: image/webp\r\ncontent-length: 146802\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 2442763\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=0\r\netag: \"66bf2844-23d72\"\r\nlast-modified: Fri, 16 Aug 2024 10:21:56 GMT\r\ncdn-storageserver: SE-582\r\ncdn-fileserver: 583\r\ncdn-proxyver: 1.50\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 04/15/2026 00:06:20\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 2076b22e570185304a2575319a3e404f\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":146802,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1080x1080, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"b96a4d003eb406ed472acbf32e8feaff","sha1":"4d54f36e64956d45454c6b60e1f8ea144f28c8d6","sha256":"8e56ad797f4bce1d63b734842a57dc3e02eecaa9d817fc4871dd2e5acd395d7d","sha512":"b5b231d2293541aa4ec85c810211cd3b8558dfc38cf71ff046c33f7fdcd877d78c95ed340922acc46c233a6a49c14488eecc7a142b6833515cc4313bc349c055","ssdeep":"3072:Uek3AYl1NgiOmR+eBBAlW3ksFdh26msOa/4OM9/Ut3UU3GFHVCJ2CmLdDW:U7wYl1ereHF036mDaO9/WUU3aHIXedC","tlshash":"14e31247e2b40866e5031f27c3791751cba9d82938f8d5b1e421ecdef9ce181726abe4","first_seen":"2025-08-04T09:14:47.316042Z","last_seen":"2026-05-28T07:37:54.386443Z","times_seen":47,"resource_available":false,"data":null}},"time_used":203,"timings":{"blocked":49,"dns":0,"connect":0,"send":0,"wait":86,"receive":68,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"easy-image.b-cdn.net/app-icon/crown.webp","fqdn":"easy-image.b-cdn.net","domain":"b-cdn.net","tld":"net"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://spinmax-portal.xyz/rrrausz?lead_id=1sjos4f.640f.1ar405c\u0026sub1=\u0026sub2=\u0026sub3=\u0026sub4=\u0026sub5=\u0026sub6=\u0026sub15=\u0026sub16=\u0026sub17=\u0026sub18=\u0026sub19=\u0026sub20=\u0026key=\u0026ln=EN\u0026sub_id_30=open_pwa","date":"2026-04-15T05:01:22.782Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.b-cdn.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 06 Nov 2025 00:00:00 GMT","end":"Wed, 11 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"92:9B:37:29:B4:2D:AB:EB:68:07:7B:03:B2:80:2E:5B:53:CE:AD:E7","sha256":"51:6F:86:36:A1:23:32:72:AA:0F:28:1A:81:F4:92:F8:82:35:42:13:BA:4C:21:2D:80:C5:BB:BF:19:04:1D:32"}}},"request":{"raw":"GET /app-icon/crown.webp HTTP/1.1\r\nHost: easy-image.b-cdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://spinmax-portal.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 15 Apr 2026 05:01:22 GMT\r\ncontent-type: image/webp\r\ncontent-length: 81760\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 2442763\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=0\r\netag: \"67b7cca2-13f60\"\r\nlast-modified: Fri, 21 Feb 2025 00:45:22 GMT\r\ncdn-storageserver: SE-582\r\ncdn-fileserver: 884\r\ncdn-proxyver: 1.50\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 04/15/2026 05:01:22\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 91cd80500e728a8d1ba3e05abc005f54\r\ncdn-cache: MISS\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":81760,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"848fa1f789169a626828a82d9c0d76da","sha1":"ab94e203b562c6f3f6c7c3f93745d87f54aa8205","sha256":"3d8ec7c466455386a1af7488b118b645800e00ba6a9b0a6eb46ef13f4a907736","sha512":"8eea87de5e4b47e3c6701bafd749d6f54cdfbb94352e84d8c9616f8d11f3b8cdfd20744c7418d5860f7568cccd4adfd678cb55e5275a0e8855101c15cfdf519e","ssdeep":"1536:h7G/vdMLpvhG75VT8oLBO03c5Bm7wCvojoeh3R:hnrs5VT3O0s5BRcI","tlshash":"fb8302122f6f791bd54a62fc13d71f1132199f10a3d15cae4ee237022a5b096be35cae","first_seen":"2025-03-26T16:41:42.41338Z","last_seen":"2026-05-28T07:37:54.468402Z","times_seen":52,"resource_available":false,"data":null}},"time_used":217,"timings":{"blocked":42,"dns":0,"connect":0,"send":0,"wait":167,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"spinmax-portal.xyz/lander/template-2025-06-16_15-51-22/js/jquery.min.js","fqdn":"spinmax-portal.xyz","domain":"spinmax-portal.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://spinmax-portal.xyz/rrrausz?lead_id=1sjos4f.640f.1ar405c\u0026sub1=\u0026sub2=\u0026sub3=\u0026sub4=\u0026sub5=\u0026sub6=\u0026sub15=\u0026sub16=\u0026sub17=\u0026sub18=\u0026sub19=\u0026sub20=\u0026key=\u0026ln=EN\u0026sub_id_30=open_pwa","date":"2026-04-15T05:01:22.785Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"spinmax-portal.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 06 Apr 2026 23:06:25 GMT","end":"Mon, 06 Jul 2026 00:06:01 GMT"},"fingerprint":{"sha1":"0C:40:1A:B1:A1:36:AB:9B:6F:07:86:4D:57:6A:D9:D6:55:B9:32:56","sha256":"6C:0E:1C:B5:16:D5:EB:A1:7B:CA:88:49:AF:B3:F8:44:42:06:84:A9:8F:03:E7:B8:54:EE:98:C4:43:B8:CE:55"}}},"request":{"raw":"GET /lander/template-2025-06-16_15-51-22/js/jquery.min.js HTTP/1.1\r\nHost: spinmax-portal.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://spinmax-portal.xyz/rrrausz?lead_id=1sjos4f.640f.1ar405c\u0026sub1=\u0026sub2=\u0026sub3=\u0026sub4=\u0026sub5=\u0026sub6=\u0026sub15=\u0026sub16=\u0026sub17=\u0026sub18=\u0026sub19=\u0026sub20=\u0026key=\u0026ln=EN\u0026sub_id_30=open_pwa\r\nCookie: e3b0c4_25615=3s90e142c4vf73; _token=3s90e142c4vf73.1776306149.7.e92eca5748914ba4fa973422f028bcd2; _subid=1sjos4f.640f.1ar407e\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 15 Apr 2026 05:01:23 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nlast-modified: Mon, 16 Jun 2025 15:55:09 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-content-type-options: nosniff\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LOqnCFqFbFUUh%2Fh4TCWUL8Ru41mbXR19y1sAFwMNF5NnKrDeHzjOY4k9sIYgrUchpgvR%2FSdpBZ18Z8H0CxX1wYhhsmh3NCVxKE8Ke1ppWEkE1BpJaffPD5bdt7KMO%2FT2hoFD5uw%3D\"}]}\r\netag: W/\"68503e5d-155ec\"\r\ncontent-encoding: br\r\ncf-ray: 9ec86458dec6120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":87532,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"c9771cc3e90e18f5336eedbd0fffb2cf","sha1":"6ee8aaa3ac1f4e0ae18717a3fd26892e9f0e4cc5","sha256":"3e7501d15c3630e791c8b20392eb9dee31a9f65ce3efdde76cef5c710141ab24","sha512":"c503341fa3a7176fd10bd8cd7a5717c8faf971f87fa0c158f2d94fcd484ae3ed5031f49414dae833fb806b7365b5699c21d2e655376f69adb052b22f6f6982a7","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GK7:sHNwcv9VBQpLl88SMBQ47GK7","tlshash":"8083f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","first_seen":"2023-10-13T22:05:06Z","last_seen":"2026-06-08T18:02:44.181167Z","times_seen":27597,"resource_available":true,"data":null}},"time_used":618,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":527,"receive":91,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"spinmax-portal.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"easy-image.b-cdn.net/users/male/76.jpg","fqdn":"easy-image.b-cdn.net","domain":"b-cdn.net","tld":"net"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://spinmax-portal.xyz/rrrausz?lead_id=1sjos4f.640f.1ar405c\u0026sub1=\u0026sub2=\u0026sub3=\u0026sub4=\u0026sub5=\u0026sub6=\u0026sub15=\u0026sub16=\u0026sub17=\u0026sub18=\u0026sub19=\u0026sub20=\u0026key=\u0026ln=EN\u0026sub_id_30=open_pwa","date":"2026-04-15T05:01:22.746Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.b-cdn.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 06 Nov 2025 00:00:00 GMT","end":"Wed, 11 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"92:9B:37:29:B4:2D:AB:EB:68:07:7B:03:B2:80:2E:5B:53:CE:AD:E7","sha256":"51:6F:86:36:A1:23:32:72:AA:0F:28:1A:81:F4:92:F8:82:35:42:13:BA:4C:21:2D:80:C5:BB:BF:19:04:1D:32"}}},"request":{"raw":"GET /users/male/76.jpg HTTP/1.1\r\nHost: easy-image.b-cdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://spinmax-portal.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 15 Apr 2026 05:01:22 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 28139\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 2442763\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=0\r\netag: \"67ed0551-6deb\"\r\nlast-modified: Wed, 02 Apr 2025 09:37:21 GMT\r\ncdn-storageserver: SE-583\r\ncdn-fileserver: 1029\r\ncdn-proxyver: 1.49\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 03/31/2026 17:54:37\r\ncdn-edgestorageid: 830\r\ncdn-requestid: a46920623c3fda4774c79ac44e733586\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":28139,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 375x250, components 3","md5":"6649d84077cadafbdfdf6e891a172628","sha1":"b51956e4a85861f851e3b777ff5a746254ed0049","sha256":"bb27fadf1508d95d6e4228c6518d2a7b3f736fb1b446ed03cf8dfde135f7689b","sha512":"76d4a78fea7716470738255c0d0d3194bd160e2dd8d6b7a09bf51d08c77ddbd4559025e49e359655a9c7e5053073e36b7f7298bd75652092c22947fad3ec2fc9","ssdeep":"768:oT5tZ4BulXn0ifBZ+m9b86bnfycXOAFz9peMKq:o/FlEw9Y6bnfyUhFzOMp","tlshash":"7dc2f1c14fc559bcd1ca1dcf1423060b3d996e665a36b5ee8ccbb5e045f708052cf495","first_seen":"2025-09-21T02:38:11.425783Z","last_seen":"2026-05-15T00:41:56.940235Z","times_seen":18,"resource_available":false,"data":null}},"time_used":166,"timings":{"blocked":73,"dns":0,"connect":0,"send":0,"wait":87,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"spinmax-portal.xyz/lander/template-2025-06-16_15-51-22/index.min.js?v20180913","fqdn":"spinmax-portal.xyz","domain":"spinmax-portal.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://spinmax-portal.xyz/rrrausz?lead_id=1sjos4f.640f.1ar405c\u0026sub1=\u0026sub2=\u0026sub3=\u0026sub4=\u0026sub5=\u0026sub6=\u0026sub15=\u0026sub16=\u0026sub17=\u0026sub18=\u0026sub19=\u0026sub20=\u0026key=\u0026ln=EN\u0026sub_id_30=open_pwa","date":"2026-04-15T05:01:22.784Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"spinmax-portal.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 06 Apr 2026 23:06:25 GMT","end":"Mon, 06 Jul 2026 00:06:01 GMT"},"fingerprint":{"sha1":"0C:40:1A:B1:A1:36:AB:9B:6F:07:86:4D:57:6A:D9:D6:55:B9:32:56","sha256":"6C:0E:1C:B5:16:D5:EB:A1:7B:CA:88:49:AF:B3:F8:44:42:06:84:A9:8F:03:E7:B8:54:EE:98:C4:43:B8:CE:55"}}},"request":{"raw":"GET /lander/template-2025-06-16_15-51-22/index.min.js?v20180913 HTTP/1.1\r\nHost: spinmax-portal.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://spinmax-portal.xyz/rrrausz?lead_id=1sjos4f.640f.1ar405c\u0026sub1=\u0026sub2=\u0026sub3=\u0026sub4=\u0026sub5=\u0026sub6=\u0026sub15=\u0026sub16=\u0026sub17=\u0026sub18=\u0026sub19=\u0026sub20=\u0026key=\u0026ln=EN\u0026sub_id_30=open_pwa\r\nCookie: e3b0c4_25615=3s90e142c4vf73; _token=3s90e142c4vf73.1776306149.7.e92eca5748914ba4fa973422f028bcd2; _subid=1sjos4f.640f.1ar407e\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 15 Apr 2026 05:01:23 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nlast-modified: Mon, 16 Jun 2025 15:55:09 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-content-type-options: nosniff\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ot7N4np2kAERnvw%2F6EGQDh1rgm%2FvDWGMKMLifS4PGT1ctNC6Xj5fR%2BlkvWMDSPxoDvS0GlDTKWVOgbBcixa8w6r21YBbc0C%2FmWjNMPIS2zBIvnZoprFNKAZU3KBK%2BH4a5ATdprg%3D\"}]}\r\netag: W/\"68503e5d-317\"\r\ncontent-encoding: br\r\ncf-ray: 9ec86458dec3120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":791,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (791), with no line terminators","md5":"c780aa9db2a8a46309a61957b54425d6","sha1":"205c916947589f394fb330a2169fcdfabe2fc487","sha256":"d966f66421e2e3fc4918ccc41eb02f3e2b3d8eb70eccba027b7cfbfcee89aa90","sha512":"37d2f235ced0655807dd1b4790b2e343d9eae2d10fdabb15c7ade30075b0d0e6df15d1d3bf3a23968e3b480159033c10b358f62617c3970b376c221127cb2966","ssdeep":"","tlshash":"7101db165b81c8a737ee4d9ff93459b85d6241aff8e43243571e794a065b053e1c1037","first_seen":"2023-03-12T07:32:29Z","last_seen":"2026-06-08T12:52:08.378937Z","times_seen":164,"resource_available":true,"data":null}},"time_used":369,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":369,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"spinmax-portal.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"spinmax-portal.xyz/lander/template-2025-06-16_15-51-22/fonts/Roboto-Regular.ttf","fqdn":"spinmax-portal.xyz","domain":"spinmax-portal.xyz","tld":"xyz"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://spinmax-portal.xyz/rrrausz?lead_id=1sjos4f.640f.1ar405c\u0026sub1=\u0026sub2=\u0026sub3=\u0026sub4=\u0026sub5=\u0026sub6=\u0026sub15=\u0026sub16=\u0026sub17=\u0026sub18=\u0026sub19=\u0026sub20=\u0026key=\u0026ln=EN\u0026sub_id_30=open_pwa","date":"2026-04-15T05:01:23.203Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"spinmax-portal.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 06 Apr 2026 23:06:25 GMT","end":"Mon, 06 Jul 2026 00:06:01 GMT"},"fingerprint":{"sha1":"0C:40:1A:B1:A1:36:AB:9B:6F:07:86:4D:57:6A:D9:D6:55:B9:32:56","sha256":"6C:0E:1C:B5:16:D5:EB:A1:7B:CA:88:49:AF:B3:F8:44:42:06:84:A9:8F:03:E7:B8:54:EE:98:C4:43:B8:CE:55"}}},"request":{"raw":"GET /lander/template-2025-06-16_15-51-22/fonts/Roboto-Regular.ttf HTTP/1.1\r\nHost: spinmax-portal.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://spinmax-portal.xyz/lander/template-2025-06-16_15-51-22/style/style.css\r\nCookie: e3b0c4_25615=3s90e142c4vf73; _token=3s90e142c4vf73.1776306149.7.e92eca5748914ba4fa973422f028bcd2; _subid=1sjos4f.640f.1ar407e\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-08T18:34:25.971921Z","times_seen":16246822,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"spinmax-portal.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"spinmax-portal.xyz/lander/template-2025-06-16_15-51-22/images/icon_zoom.svg","fqdn":"spinmax-portal.xyz","domain":"spinmax-portal.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://spinmax-portal.xyz/rrrausz?lead_id=1sjos4f.640f.1ar405c\u0026sub1=\u0026sub2=\u0026sub3=\u0026sub4=\u0026sub5=\u0026sub6=\u0026sub15=\u0026sub16=\u0026sub17=\u0026sub18=\u0026sub19=\u0026sub20=\u0026key=\u0026ln=EN\u0026sub_id_30=open_pwa","date":"2026-04-15T05:01:22.704Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"spinmax-portal.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 06 Apr 2026 23:06:25 GMT","end":"Mon, 06 Jul 2026 00:06:01 GMT"},"fingerprint":{"sha1":"0C:40:1A:B1:A1:36:AB:9B:6F:07:86:4D:57:6A:D9:D6:55:B9:32:56","sha256":"6C:0E:1C:B5:16:D5:EB:A1:7B:CA:88:49:AF:B3:F8:44:42:06:84:A9:8F:03:E7:B8:54:EE:98:C4:43:B8:CE:55"}}},"request":{"raw":"GET /lander/template-2025-06-16_15-51-22/images/icon_zoom.svg HTTP/1.1\r\nHost: spinmax-portal.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://spinmax-portal.xyz/rrrausz?lead_id=1sjos4f.640f.1ar405c\u0026sub1=\u0026sub2=\u0026sub3=\u0026sub4=\u0026sub5=\u0026sub6=\u0026sub15=\u0026sub16=\u0026sub17=\u0026sub18=\u0026sub19=\u0026sub20=\u0026key=\u0026ln=EN\u0026sub_id_30=open_pwa\r\nCookie: e3b0c4_25615=3s90e142c4vf73; _token=3s90e142c4vf73.1776306149.7.e92eca5748914ba4fa973422f028bcd2; _subid=1sjos4f.640f.1ar407e\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 15 Apr 2026 05:01:23 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nlast-modified: Mon, 16 Jun 2025 15:55:09 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-content-type-options: nosniff\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ed24F3YhQG02kafcnMcX%2FjL2sLR%2FCRkr%2BuEbvVcKRf1cQLVHU2HDW%2BRK%2BOJ0RtCyRCamRaDfmqJJ%2F%2F1jeb7zq9GCwJufAARhy4X23SWRPpC4h%2Fohh2HYyWojrimbFtdR81DF%2B6g%3D\"}]}\r\netag: W/\"68503e5d-3f2\"\r\ncontent-encoding: br\r\ncf-ray: 9ec864588e0b120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1010,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"8d00e097c840d9f1d02b5d70bdd6b4c6","sha1":"324c3df851e8cc590e6bf7ca4993268012773a06","sha256":"ebd6e763c431a2c5af2d04463719b7002f112f9539e9b1b0a90269a229f50314","sha512":"6363bf519581cd82a76cb62e344f1cdffe1bf5c6753d8c555e4104cbf456201c569abc49171c296d91cb1ef6c01e195f4bac6bec5752de3acac258548345be9b","ssdeep":"","tlshash":"081178969013d7c88d434af4fc37584e8d2919bea7a4b2fa40443e9cb4df4d8d9578e0","first_seen":"2024-10-12T23:01:03.386102Z","last_seen":"2026-06-08T12:52:08.375436Z","times_seen":243,"resource_available":false,"data":null}},"time_used":378,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":378,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"spinmax-portal.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"spinmax-portal.xyz/lander/template-2025-06-16_15-51-22/images/screen_2.png","fqdn":"spinmax-portal.xyz","domain":"spinmax-portal.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://spinmax-portal.xyz/rrrausz?lead_id=1sjos4f.640f.1ar405c\u0026sub1=\u0026sub2=\u0026sub3=\u0026sub4=\u0026sub5=\u0026sub6=\u0026sub15=\u0026sub16=\u0026sub17=\u0026sub18=\u0026sub19=\u0026sub20=\u0026key=\u0026ln=EN\u0026sub_id_30=open_pwa","date":"2026-04-15T05:01:22.718Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"spinmax-portal.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 06 Apr 2026 23:06:25 GMT","end":"Mon, 06 Jul 2026 00:06:01 GMT"},"fingerprint":{"sha1":"0C:40:1A:B1:A1:36:AB:9B:6F:07:86:4D:57:6A:D9:D6:55:B9:32:56","sha256":"6C:0E:1C:B5:16:D5:EB:A1:7B:CA:88:49:AF:B3:F8:44:42:06:84:A9:8F:03:E7:B8:54:EE:98:C4:43:B8:CE:55"}}},"request":{"raw":"GET /lander/template-2025-06-16_15-51-22/images/screen_2.png HTTP/1.1\r\nHost: spinmax-portal.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://spinmax-portal.xyz/rrrausz?lead_id=1sjos4f.640f.1ar405c\u0026sub1=\u0026sub2=\u0026sub3=\u0026sub4=\u0026sub5=\u0026sub6=\u0026sub15=\u0026sub16=\u0026sub17=\u0026sub18=\u0026sub19=\u0026sub20=\u0026key=\u0026ln=EN\u0026sub_id_30=open_pwa\r\nCookie: e3b0c4_25615=3s90e142c4vf73; _token=3s90e142c4vf73.1776306149.7.e92eca5748914ba4fa973422f028bcd2; _subid=1sjos4f.640f.1ar407e\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 15 Apr 2026 05:01:23 GMT\r\ncontent-type: image/png\r\ncontent-length: 229105\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nlast-modified: Mon, 16 Jun 2025 15:55:09 GMT\r\netag: \"68503e5d-37ef1\"\r\nx-content-type-options: nosniff\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oa%2BxdZmVia1erBoQxREZ0XR6NO1SuoCuayT4mFxXtyoHdSXXOXOVYO03DvolFfToegUdxABcs2ZtFC5BVrNkl9IYtOehht8rh4t8jytMUxqfvg02XutE7b1b3zhf0SEgbfus3X0%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ec864589e29120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":229105,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 540 x 1080, 8-bit/color RGB, non-interlaced","md5":"1f9fb93962ff714f5ed0c27d4e26d0de","sha1":"cb1b597328eb0023d101f9d9ec3b44904f7bc6be","sha256":"a24967c5a2950c6a9ae2da05ba43a59d9bc0b5128dd21342a48526fcd282f742","sha512":"e874079f7f85043abe0244736bba9eeae7cfaf7c83c5fa5e7ceaebeec038f1d1c672f0129bc396af35eea89abfd934b85d08bfdbfbc57294e2efe8c8e43c1ba4","ssdeep":"6144:vFuLBOSt24Qbl1lYKmLA5ZkgVNOaLubQx/KiGyIZJ5B2:0LBAHlaLA5Zmc/KiSZJD2","tlshash":"3224233ca78945420d3b11c5193e03c87e66f9623ae635e7724d1abb3b6f8969bc80c1","first_seen":"2026-04-15T05:01:39.44266Z","last_seen":"2026-04-15T05:04:05.240347Z","times_seen":2,"resource_available":false,"data":null}},"time_used":744,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":513,"receive":231,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"spinmax-portal.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"easy-image.b-cdn.net/users/male/54.jpg","fqdn":"easy-image.b-cdn.net","domain":"b-cdn.net","tld":"net"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://spinmax-portal.xyz/rrrausz?lead_id=1sjos4f.640f.1ar405c\u0026sub1=\u0026sub2=\u0026sub3=\u0026sub4=\u0026sub5=\u0026sub6=\u0026sub15=\u0026sub16=\u0026sub17=\u0026sub18=\u0026sub19=\u0026sub20=\u0026key=\u0026ln=EN\u0026sub_id_30=open_pwa","date":"2026-04-15T05:01:22.741Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.b-cdn.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 06 Nov 2025 00:00:00 GMT","end":"Wed, 11 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"92:9B:37:29:B4:2D:AB:EB:68:07:7B:03:B2:80:2E:5B:53:CE:AD:E7","sha256":"51:6F:86:36:A1:23:32:72:AA:0F:28:1A:81:F4:92:F8:82:35:42:13:BA:4C:21:2D:80:C5:BB:BF:19:04:1D:32"}}},"request":{"raw":"GET /users/male/54.jpg HTTP/1.1\r\nHost: easy-image.b-cdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://spinmax-portal.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 15 Apr 2026 05:01:22 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 12788\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 2442763\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=0\r\netag: \"67ed054e-31f4\"\r\nlast-modified: Wed, 02 Apr 2025 09:37:18 GMT\r\ncdn-storageserver: SE-904\r\ncdn-fileserver: 966\r\ncdn-proxyver: 1.50\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 04/15/2026 03:01:46\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 8ef1e9b8e5412227104100f5369ed8b6\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":12788,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 157x236, components 3","md5":"844231b66634f19bf6be00bc34b08425","sha1":"63211a97b3072a013842593496c4eaaa007f117b","sha256":"44b3b0c05022361d3a5ed87634b4fbb13c880b26bb612355725dea0fc55a402f","sha512":"b47ce22fb722730a29062aa30333c416e4ec51f9367409b0b78c0520b8e9ed5ea4f7f9598271ef8196fa7b1fbf2d22210d97aefc9c812d1e4bcc17cbad08d05f","ssdeep":"384:jAYs7QOFeCLEQ/hGBj4B1cujFdZa8f2HNSHREmogOy:jVxOHgyGSB1cCi8utcogOy","tlshash":"e442bf016a27b41b9c9837d17c3a2b19edb337362a9e3f7b245ba1cc5011a851f4935a","first_seen":"2025-04-06T10:47:32.166079Z","last_seen":"2026-05-15T00:41:56.949808Z","times_seen":21,"resource_available":false,"data":null}},"time_used":158,"timings":{"blocked":78,"dns":0,"connect":0,"send":0,"wait":80,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"spinmax-portal.xyz/lander/template-2025-06-16_15-51-22/js/translate.js","fqdn":"spinmax-portal.xyz","domain":"spinmax-portal.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://spinmax-portal.xyz/rrrausz?lead_id=1sjos4f.640f.1ar405c\u0026sub1=\u0026sub2=\u0026sub3=\u0026sub4=\u0026sub5=\u0026sub6=\u0026sub15=\u0026sub16=\u0026sub17=\u0026sub18=\u0026sub19=\u0026sub20=\u0026key=\u0026ln=EN\u0026sub_id_30=open_pwa","date":"2026-04-15T05:01:22.787Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"spinmax-portal.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 06 Apr 2026 23:06:25 GMT","end":"Mon, 06 Jul 2026 00:06:01 GMT"},"fingerprint":{"sha1":"0C:40:1A:B1:A1:36:AB:9B:6F:07:86:4D:57:6A:D9:D6:55:B9:32:56","sha256":"6C:0E:1C:B5:16:D5:EB:A1:7B:CA:88:49:AF:B3:F8:44:42:06:84:A9:8F:03:E7:B8:54:EE:98:C4:43:B8:CE:55"}}},"request":{"raw":"GET /lander/template-2025-06-16_15-51-22/js/translate.js HTTP/1.1\r\nHost: spinmax-portal.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://spinmax-portal.xyz/rrrausz?lead_id=1sjos4f.640f.1ar405c\u0026sub1=\u0026sub2=\u0026sub3=\u0026sub4=\u0026sub5=\u0026sub6=\u0026sub15=\u0026sub16=\u0026sub17=\u0026sub18=\u0026sub19=\u0026sub20=\u0026key=\u0026ln=EN\u0026sub_id_30=open_pwa\r\nCookie: e3b0c4_25615=3s90e142c4vf73; _token=3s90e142c4vf73.1776306149.7.e92eca5748914ba4fa973422f028bcd2; _subid=1sjos4f.640f.1ar407e\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 15 Apr 2026 05:01:23 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nlast-modified: Mon, 16 Jun 2025 15:55:09 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-content-type-options: nosniff\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kJ48ZJU1cWvLGBwOduBAuXdxMRewwSLMv7m2Rr%2F0CU59E56PXmKUE0p9IFcp%2BvgXwKbxLUNQ%2FnZbpyXJP%2F%2Bp93H07%2FEIUQd4Sn%2FaJbIBw8aQPIQctXF%2FxptcOHdiGCepQ%2F%2BoBjE%3D\"}]}\r\netag: W/\"68503e5d-dfb\"\r\ncontent-encoding: br\r\ncf-ray: 9ec86458eed6120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3579,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"2ea86f83fe23567f14148288c5528dbc","sha1":"5190e1381424cad1c2b11141f83011dc4a6bc06d","sha256":"9272cf8e32fa50126ccacba832b56f3c70e28cc9c15b19d749880df68d52e293","sha512":"69412c4c4dd65e4a89efd0c4e25553a283b55ca665c1beb691fa8207f6a08eff7518d0945c2307d754ebd1a14c1b95160a5e8f61cd330454e873793020bcc5e9","ssdeep":"","tlshash":"2d718848f0f6010d1983b02efbeb6895b220985b0265fe183f5e45436fd353dd39e689","first_seen":"2025-03-17T11:16:11.268136Z","last_seen":"2026-06-08T12:52:08.370049Z","times_seen":165,"resource_available":true,"data":null}},"time_used":365,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":365,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"spinmax-portal.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"easy-image.b-cdn.net/users/female/16.jpg","fqdn":"easy-image.b-cdn.net","domain":"b-cdn.net","tld":"net"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://spinmax-portal.xyz/rrrausz?lead_id=1sjos4f.640f.1ar405c\u0026sub1=\u0026sub2=\u0026sub3=\u0026sub4=\u0026sub5=\u0026sub6=\u0026sub15=\u0026sub16=\u0026sub17=\u0026sub18=\u0026sub19=\u0026sub20=\u0026key=\u0026ln=EN\u0026sub_id_30=open_pwa","date":"2026-04-15T05:01:22.733Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.b-cdn.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 06 Nov 2025 00:00:00 GMT","end":"Wed, 11 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"92:9B:37:29:B4:2D:AB:EB:68:07:7B:03:B2:80:2E:5B:53:CE:AD:E7","sha256":"51:6F:86:36:A1:23:32:72:AA:0F:28:1A:81:F4:92:F8:82:35:42:13:BA:4C:21:2D:80:C5:BB:BF:19:04:1D:32"}}},"request":{"raw":"GET /users/female/16.jpg HTTP/1.1\r\nHost: easy-image.b-cdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://spinmax-portal.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 15 Apr 2026 05:01:22 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 17050\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 2442763\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=0\r\netag: \"67ed0461-429a\"\r\nlast-modified: Wed, 02 Apr 2025 09:33:21 GMT\r\ncdn-storageserver: SE-582\r\ncdn-fileserver: 582\r\ncdn-proxyver: 1.50\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 04/15/2026 05:01:22\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 7eae2492f5e66436fab7d11c80e9e2be\r\ncdn-cache: MISS\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":17050,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 219x328, components 3","md5":"6673c64ede425f2f21c14684cf04bffa","sha1":"e6d1b98886e655cae557ad6cd17c22c87807771e","sha256":"947ae3684bc3b9b5be493b7b35148ef43ff6d508965bb128e7e8d935b3bf81fd","sha512":"33b976cec85c44ebdc608d1eb3b7aaa058b275dcdd809a711f273a84dc5135bb5c470d94c4f9a7658d8bef12e4e6ae259f9682fe7455c73ee2eb80a47c1b475e","ssdeep":"384:wUFa3tHhKXAxoDGjmumUdWctfrlJAGpdE+:UtHhwRDPBUdWExJ2+","tlshash":"a672d19b911e2c3ba8303ee1ef143b51689fcad2274032ca525dd0cd6d916329e3948d","first_seen":"2025-10-18T10:04:02.419807Z","last_seen":"2026-06-02T07:48:29.124271Z","times_seen":21,"resource_available":false,"data":null}},"time_used":217,"timings":{"blocked":84,"dns":0,"connect":0,"send":0,"wait":99,"receive":34,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"easy-image.b-cdn.net/app-icon/elvis_frog.webp","fqdn":"easy-image.b-cdn.net","domain":"b-cdn.net","tld":"net"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://spinmax-portal.xyz/rrrausz?lead_id=1sjos4f.640f.1ar405c\u0026sub1=\u0026sub2=\u0026sub3=\u0026sub4=\u0026sub5=\u0026sub6=\u0026sub15=\u0026sub16=\u0026sub17=\u0026sub18=\u0026sub19=\u0026sub20=\u0026key=\u0026ln=EN\u0026sub_id_30=open_pwa","date":"2026-04-15T05:01:22.774Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.b-cdn.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 06 Nov 2025 00:00:00 GMT","end":"Wed, 11 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"92:9B:37:29:B4:2D:AB:EB:68:07:7B:03:B2:80:2E:5B:53:CE:AD:E7","sha256":"51:6F:86:36:A1:23:32:72:AA:0F:28:1A:81:F4:92:F8:82:35:42:13:BA:4C:21:2D:80:C5:BB:BF:19:04:1D:32"}}},"request":{"raw":"GET /app-icon/elvis_frog.webp HTTP/1.1\r\nHost: easy-image.b-cdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://spinmax-portal.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 15 Apr 2026 05:01:22 GMT\r\ncontent-type: image/webp\r\ncontent-length: 193236\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 2442763\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=0\r\netag: \"66bf2844-2f2d4\"\r\nlast-modified: Fri, 16 Aug 2024 10:21:56 GMT\r\ncdn-storageserver: SE-582\r\ncdn-fileserver: 583\r\ncdn-proxyver: 1.50\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 04/15/2026 05:01:22\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 1a8e3dc6ec6630df5a139159f77f5236\r\ncdn-cache: MISS\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":193236,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1080x1080, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"a8006892e21041a0dba05702f829d593","sha1":"604801563a320bca8523e5233c583fd866208dbd","sha256":"5cdfd83c50b3314b1c6cd78d33fceebf25290fbac1c263ba972664d08c30bc7f","sha512":"8a0c18f7bd412e8b4a9999a0ede772500571f7f2dd843bf6b1c67fd3fa47c66dfdb263b236e649fd89fd3d63b607de5cd23621f9ef44590a4a8397fc1bd714b0","ssdeep":"3072:5D1wWP0Dxtbr/NRxlbo3VBZDKGHqvyZSqfwvcDWGGIDcJJSgOITLsQUvJLjQIM/n:5D1RStbr/NRxlbSVHRHqvywvSWGTIJJD","tlshash":"231412387c652fc54c174bff23376c86de6baa0704cba0bd1aca5ed960a504686d9738","first_seen":"2025-07-04T00:17:04.652842Z","last_seen":"2026-05-28T13:22:51.597777Z","times_seen":42,"resource_available":false,"data":null}},"time_used":217,"timings":{"blocked":48,"dns":0,"connect":0,"send":0,"wait":95,"receive":74,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"easy-image.b-cdn.net/app-icon/sweet_bonanza.webp","fqdn":"easy-image.b-cdn.net","domain":"b-cdn.net","tld":"net"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://spinmax-portal.xyz/rrrausz?lead_id=1sjos4f.640f.1ar405c\u0026sub1=\u0026sub2=\u0026sub3=\u0026sub4=\u0026sub5=\u0026sub6=\u0026sub15=\u0026sub16=\u0026sub17=\u0026sub18=\u0026sub19=\u0026sub20=\u0026key=\u0026ln=EN\u0026sub_id_30=open_pwa","date":"2026-04-15T05:01:22.778Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.b-cdn.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 06 Nov 2025 00:00:00 GMT","end":"Wed, 11 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"92:9B:37:29:B4:2D:AB:EB:68:07:7B:03:B2:80:2E:5B:53:CE:AD:E7","sha256":"51:6F:86:36:A1:23:32:72:AA:0F:28:1A:81:F4:92:F8:82:35:42:13:BA:4C:21:2D:80:C5:BB:BF:19:04:1D:32"}}},"request":{"raw":"GET /app-icon/sweet_bonanza.webp HTTP/1.1\r\nHost: easy-image.b-cdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://spinmax-portal.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 15 Apr 2026 05:01:22 GMT\r\ncontent-type: image/webp\r\ncontent-length: 88304\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 2442763\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=0\r\netag: \"66bf2845-158f0\"\r\nlast-modified: Fri, 16 Aug 2024 10:21:57 GMT\r\ncdn-storageserver: SE-904\r\ncdn-fileserver: 582\r\ncdn-proxyver: 1.50\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 04/09/2026 12:11:00\r\ncdn-edgestorageid: 830\r\ncdn-requestid: f22ae6d2807dd7bbb3dc8476512bec13\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":88304,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"869cd3c56bf90dff1800f9d15c570331","sha1":"a2ded4502224f3f51b010ff8f9d4768e9d536afa","sha256":"7befff9e0259bba05ae796e2bc198bd44a534f563365c20935b6c39339399dde","sha512":"764998cee89bcf28d5187684603ad4081448772336af2291a71e2ac437a6a513812c9f741e6436fc815a54fa5ec6372e66927fe9911ff3c267c630a7df1eb240","ssdeep":"1536:4UjB+ih0mpgfrYSbOVBUT/aYWjQLK+Gte1ckYGzOG+PC8j0QrjMa8Ht:4YSmpGUTVBUT/ejQLYte1clk+Xj0Wu","tlshash":"3d83025556a3fe47eb15f07951e930104061b37f022b69cbb23a13c1dad3c6cba263a6","first_seen":"2025-07-04T00:17:04.645939Z","last_seen":"2026-06-06T22:10:36.487561Z","times_seen":69,"resource_available":false,"data":null}},"time_used":184,"timings":{"blocked":44,"dns":0,"connect":0,"send":0,"wait":86,"receive":54,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"spinmax-portal.xyz/lander/template-2025-06-16_15-51-22/js/prompt.js","fqdn":"spinmax-portal.xyz","domain":"spinmax-portal.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://spinmax-portal.xyz/rrrausz?lead_id=1sjos4f.640f.1ar405c\u0026sub1=\u0026sub2=\u0026sub3=\u0026sub4=\u0026sub5=\u0026sub6=\u0026sub15=\u0026sub16=\u0026sub17=\u0026sub18=\u0026sub19=\u0026sub20=\u0026key=\u0026ln=EN\u0026sub_id_30=open_pwa","date":"2026-04-15T05:01:22.789Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"spinmax-portal.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 06 Apr 2026 23:06:25 GMT","end":"Mon, 06 Jul 2026 00:06:01 GMT"},"fingerprint":{"sha1":"0C:40:1A:B1:A1:36:AB:9B:6F:07:86:4D:57:6A:D9:D6:55:B9:32:56","sha256":"6C:0E:1C:B5:16:D5:EB:A1:7B:CA:88:49:AF:B3:F8:44:42:06:84:A9:8F:03:E7:B8:54:EE:98:C4:43:B8:CE:55"}}},"request":{"raw":"GET /lander/template-2025-06-16_15-51-22/js/prompt.js HTTP/1.1\r\nHost: spinmax-portal.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://spinmax-portal.xyz/rrrausz?lead_id=1sjos4f.640f.1ar405c\u0026sub1=\u0026sub2=\u0026sub3=\u0026sub4=\u0026sub5=\u0026sub6=\u0026sub15=\u0026sub16=\u0026sub17=\u0026sub18=\u0026sub19=\u0026sub20=\u0026key=\u0026ln=EN\u0026sub_id_30=open_pwa\r\nCookie: e3b0c4_25615=3s90e142c4vf73; _token=3s90e142c4vf73.1776306149.7.e92eca5748914ba4fa973422f028bcd2; _subid=1sjos4f.640f.1ar407e\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 15 Apr 2026 05:01:23 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nlast-modified: Mon, 16 Jun 2025 15:55:09 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-content-type-options: nosniff\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cposnkEFbxpt9NAjjemRk85FDq5QcatzMqBu%2BEdq2nu1ev0%2F%2BBGg1UOweLOD2%2FTa2%2BU5jT6uCCKRMPi6a8v9xUMycfqZYvmDZd%2FlrSt4Ic29x7qw7bPH5hZJ9CXNaBoES%2FRFPys%3D\"}]}\r\netag: W/\"68503e5d-1f1\"\r\ncontent-encoding: br\r\ncf-ray: 9ec86458eed9120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":497,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"d8ad11cfedd19f6e2c146d898449535f","sha1":"f1c8215c68a90f72bbda0fac88c213228b9fb65c","sha256":"92ff6cf8d4767431e38e31bf578c7e120509ad06cd69bff6fe83175a90690ac1","sha512":"13392612ab5dd92c4681dc42544ecd60f50b18d7c9ca52f6b271b846d5e7713bdf8a282bdf655eb3afe85a4b6f366736cf9958ab3f66f124ad723f5acfd48621","ssdeep":"","tlshash":"53f05c24079a18b4a01b736e4f1f0e44233170972d225d203d5d4d89cf802780172beb","first_seen":"2025-03-17T11:16:11.26647Z","last_seen":"2026-06-08T12:52:08.372031Z","times_seen":165,"resource_available":true,"data":null}},"time_used":390,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":390,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"spinmax-portal.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"spinmax-portal.xyz/lander/template-2025-06-16_15-51-22/js/main-function.js","fqdn":"spinmax-portal.xyz","domain":"spinmax-portal.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://spinmax-portal.xyz/rrrausz?lead_id=1sjos4f.640f.1ar405c\u0026sub1=\u0026sub2=\u0026sub3=\u0026sub4=\u0026sub5=\u0026sub6=\u0026sub15=\u0026sub16=\u0026sub17=\u0026sub18=\u0026sub19=\u0026sub20=\u0026key=\u0026ln=EN\u0026sub_id_30=open_pwa","date":"2026-04-15T05:01:22.790Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"spinmax-portal.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 06 Apr 2026 23:06:25 GMT","end":"Mon, 06 Jul 2026 00:06:01 GMT"},"fingerprint":{"sha1":"0C:40:1A:B1:A1:36:AB:9B:6F:07:86:4D:57:6A:D9:D6:55:B9:32:56","sha256":"6C:0E:1C:B5:16:D5:EB:A1:7B:CA:88:49:AF:B3:F8:44:42:06:84:A9:8F:03:E7:B8:54:EE:98:C4:43:B8:CE:55"}}},"request":{"raw":"GET /lander/template-2025-06-16_15-51-22/js/main-function.js HTTP/1.1\r\nHost: spinmax-portal.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://spinmax-portal.xyz/rrrausz?lead_id=1sjos4f.640f.1ar405c\u0026sub1=\u0026sub2=\u0026sub3=\u0026sub4=\u0026sub5=\u0026sub6=\u0026sub15=\u0026sub16=\u0026sub17=\u0026sub18=\u0026sub19=\u0026sub20=\u0026key=\u0026ln=EN\u0026sub_id_30=open_pwa\r\nCookie: e3b0c4_25615=3s90e142c4vf73; _token=3s90e142c4vf73.1776306149.7.e92eca5748914ba4fa973422f028bcd2; _subid=1sjos4f.640f.1ar407e\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 15 Apr 2026 05:01:23 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nlast-modified: Mon, 16 Jun 2025 15:55:09 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-content-type-options: nosniff\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PJuur1j%2FdBBxOD4WyUTc1dtU0Wb0rpJao4HaftRMPoiqrrTDk4izGx8%2F8GCdC1Vwedc%2Ftvey1IlAXOIH8gqX0%2By9JERv%2FwVn4kQ3pD1tlg2KEV07zPhHauB%2BQCRT1As62Ns%2B9YU%3D\"}]}\r\netag: W/\"68503e5d-5a4f\"\r\ncontent-encoding: br\r\ncf-ray: 9ec86458eee0120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":23119,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (324)","md5":"6062c012ba93ffcc55732a0fd17ec926","sha1":"9b53314fc76d6d6da6c9cf21b0fc8029aaade04f","sha256":"85b3da02098db84adf0cf28f31f9548bdbc7e366e774af129347369318cc272e","sha512":"6271d11198c255133ee899a6d0c8e485933cbf5f98927928eb08ee3413028f592db7efba35686a31ba993965029350358dee0a10f015f7bdc2e9d00458838dde","ssdeep":"384:oxs1Sxs9R2Iuox1/puM7Qfp+87Kxe5x5oAVRap+dgTTS4ihzXUgwtWAMr74f7Kx/:oO1gs9lfe5wWhU/WA5c/","tlshash":"55a22f8d27fb4121966761bd4f5b21143632100f280aed2d7d6d8ac0af91a6e45e3ffb","first_seen":"2026-04-15T05:01:39.450055Z","last_seen":"2026-04-15T05:04:05.232211Z","times_seen":2,"resource_available":true,"data":null}},"time_used":527,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":527,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"spinmax-portal.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"easy-image.b-cdn.net/translate/text-translate.json","fqdn":"easy-image.b-cdn.net","domain":"b-cdn.net","tld":"net"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://spinmax-portal.xyz/rrrausz?lead_id=1sjos4f.640f.1ar405c\u0026sub1=\u0026sub2=\u0026sub3=\u0026sub4=\u0026sub5=\u0026sub6=\u0026sub15=\u0026sub16=\u0026sub17=\u0026sub18=\u0026sub19=\u0026sub20=\u0026key=\u0026ln=EN\u0026sub_id_30=open_pwa","date":"2026-04-15T05:01:23.445Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.b-cdn.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 06 Nov 2025 00:00:00 GMT","end":"Wed, 11 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"92:9B:37:29:B4:2D:AB:EB:68:07:7B:03:B2:80:2E:5B:53:CE:AD:E7","sha256":"51:6F:86:36:A1:23:32:72:AA:0F:28:1A:81:F4:92:F8:82:35:42:13:BA:4C:21:2D:80:C5:BB:BF:19:04:1D:32"}}},"request":{"raw":"GET /translate/text-translate.json HTTP/1.1\r\nHost: easy-image.b-cdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://spinmax-portal.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://spinmax-portal.xyz/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 15 Apr 2026 05:01:23 GMT\r\ncontent-type: application/json\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 2442763\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccept-ranges: bytes\r\ncache-control: public, max-age=0\r\ncontent-encoding: br\r\netag: \"6735f49a-c5e4\"\r\nlast-modified: Thu, 14 Nov 2024 13:01:14 GMT\r\ncdn-storageserver: SE-904\r\ncdn-fileserver: 904\r\ncdn-proxyver: 1.50\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 04/15/2026 05:01:23\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 86e13100bec36e993e16f39f6312dbed\r\ncdn-cache: MISS\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":50660,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"c4929711f6ac9b02e1bd9ed7a781e6b9","sha1":"335759dd326eb0a8f5b1190a804cc8db76683f6a","sha256":"e481e71102af8cb70e6cc6343c86891ff0126fa1b3f189b1df38a6bd164a5d6d","sha512":"b458852acc94b7aa1dc81a4b7e8d9be372668af2bdb1162a532ae03f5ffb301fb53dc574f4c4674eae52e55369b21ed126c4dadce043a997642a869386254c00","ssdeep":"384:2McQn6KrJissKZJiCKWiKWpPw+G4W7DO0UYAVhVlyR7PXwa4rgA3zY+OgDeVUgcl:DnTJpsXNWMw+YCmR7PHO8c4jWsCHKS","tlshash":"91331164e82a4d6b1592b60f6e5fa6132064a11b3f80b9147f59a2cc1f6f93f503b31f","first_seen":"2025-04-20T09:00:58.030174Z","last_seen":"2026-06-06T22:10:36.48955Z","times_seen":136,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"easy-image.b-cdn.net/app-icon/balloon.webp","fqdn":"easy-image.b-cdn.net","domain":"b-cdn.net","tld":"net"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://spinmax-portal.xyz/rrrausz?lead_id=1sjos4f.640f.1ar405c\u0026sub1=\u0026sub2=\u0026sub3=\u0026sub4=\u0026sub5=\u0026sub6=\u0026sub15=\u0026sub16=\u0026sub17=\u0026sub18=\u0026sub19=\u0026sub20=\u0026key=\u0026ln=EN\u0026sub_id_30=open_pwa","date":"2026-04-15T05:01:22.747Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.b-cdn.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 06 Nov 2025 00:00:00 GMT","end":"Wed, 11 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"92:9B:37:29:B4:2D:AB:EB:68:07:7B:03:B2:80:2E:5B:53:CE:AD:E7","sha256":"51:6F:86:36:A1:23:32:72:AA:0F:28:1A:81:F4:92:F8:82:35:42:13:BA:4C:21:2D:80:C5:BB:BF:19:04:1D:32"}}},"request":{"raw":"GET /app-icon/balloon.webp HTTP/1.1\r\nHost: easy-image.b-cdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://spinmax-portal.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 15 Apr 2026 05:01:22 GMT\r\ncontent-type: image/webp\r\ncontent-length: 97768\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 2442763\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=0\r\netag: \"66bf2844-17de8\"\r\nlast-modified: Fri, 16 Aug 2024 10:21:56 GMT\r\ncdn-storageserver: SE-583\r\ncdn-fileserver: 883\r\ncdn-proxyver: 1.50\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 04/15/2026 05:01:22\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 3c68c1faeefe43a9cddb50833983639a\r\ncdn-cache: MISS\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":97768,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1080x1080, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"bae4a62181fedc56b16fc38bf3b1e053","sha1":"e596a1ded42f28d46cb3e43819a4505563fa35b4","sha256":"6812285596d3c48a770f0b23c4d21c38e424d04aa5b60d89ebedd1e2d1ee9d2b","sha512":"cddcee392a8875bacd52b5d4e2a104c8eb404b0be8656f81356b9f5ddd70728190498e4ee8519ada3a95b7cad29217744ea4cd2937a10c5a033a6719d6b1c53a","ssdeep":"1536:AnwB+YKhRfLlDant5mlzL2rZF4lmuHtoJD2ajub5Faysa2vUKv+LjvsYfgSf3Sne:AwChnADWMFUmuNoJRY5FI8Kv+LjEYfg4","tlshash":"dda302166fbc5c2db5cbd1f0fb5892e39247112b1ef1ba915c2cb9b28d813638678538","first_seen":"2025-08-04T09:14:47.339346Z","last_seen":"2026-06-06T22:10:36.500875Z","times_seen":36,"resource_available":false,"data":null}},"time_used":219,"timings":{"blocked":73,"dns":0,"connect":0,"send":0,"wait":90,"receive":56,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"easy-image.b-cdn.net/app-icon/joker.webp","fqdn":"easy-image.b-cdn.net","domain":"b-cdn.net","tld":"net"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://spinmax-portal.xyz/rrrausz?lead_id=1sjos4f.640f.1ar405c\u0026sub1=\u0026sub2=\u0026sub3=\u0026sub4=\u0026sub5=\u0026sub6=\u0026sub15=\u0026sub16=\u0026sub17=\u0026sub18=\u0026sub19=\u0026sub20=\u0026key=\u0026ln=EN\u0026sub_id_30=open_pwa","date":"2026-04-15T05:01:22.776Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.b-cdn.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 06 Nov 2025 00:00:00 GMT","end":"Wed, 11 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"92:9B:37:29:B4:2D:AB:EB:68:07:7B:03:B2:80:2E:5B:53:CE:AD:E7","sha256":"51:6F:86:36:A1:23:32:72:AA:0F:28:1A:81:F4:92:F8:82:35:42:13:BA:4C:21:2D:80:C5:BB:BF:19:04:1D:32"}}},"request":{"raw":"GET /app-icon/joker.webp HTTP/1.1\r\nHost: easy-image.b-cdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://spinmax-portal.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 15 Apr 2026 05:01:22 GMT\r\ncontent-type: image/webp\r\ncontent-length: 100540\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 2442763\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=0\r\netag: \"66bf2845-188bc\"\r\nlast-modified: Fri, 16 Aug 2024 10:21:57 GMT\r\ncdn-storageserver: SE-583\r\ncdn-fileserver: 884\r\ncdn-proxyver: 1.49\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 03/22/2026 21:13:51\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 447e11577fe8421de1b5ed73e683f4e1\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":100540,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"5db3b114e4ef7291b41f9b7844698123","sha1":"82abd882c3f81f04064c7efc5567cee09bd930c6","sha256":"2565f22d64f5ee93da486cbacb48a6c9bc1d84c08e9033082564e92391fddb1b","sha512":"dc04e76a3227c1979955dab9790a35733d2b6cf1fd4dbd5a1f0b069819a45f2897fd1ff50ada5a81ac190a2930ba3606e712d5d19321a6971e80e1b31844abd1","ssdeep":"3072:0XqsEOUO4mzB/9A1UdpzV3Azqf600doYYS5ZGdt:0XVEOAmzd99R3Ahx6t","tlshash":"2fa312d10922c10bcb1db277e7d46b8b77323a550eed5ac14ad1e19867dd6ae2116308","first_seen":"2025-07-04T00:17:04.650617Z","last_seen":"2026-05-28T13:22:51.568721Z","times_seen":47,"resource_available":false,"data":null}},"time_used":184,"timings":{"blocked":46,"dns":0,"connect":0,"send":0,"wait":86,"receive":52,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"spinmax-portal.xyz/lander/template-2025-06-16_15-51-22/images/screen_4.png","fqdn":"spinmax-portal.xyz","domain":"spinmax-portal.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://spinmax-portal.xyz/rrrausz?lead_id=1sjos4f.640f.1ar405c\u0026sub1=\u0026sub2=\u0026sub3=\u0026sub4=\u0026sub5=\u0026sub6=\u0026sub15=\u0026sub16=\u0026sub17=\u0026sub18=\u0026sub19=\u0026sub20=\u0026key=\u0026ln=EN\u0026sub_id_30=open_pwa","date":"2026-04-15T05:01:22.720Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"spinmax-portal.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 06 Apr 2026 23:06:25 GMT","end":"Mon, 06 Jul 2026 00:06:01 GMT"},"fingerprint":{"sha1":"0C:40:1A:B1:A1:36:AB:9B:6F:07:86:4D:57:6A:D9:D6:55:B9:32:56","sha256":"6C:0E:1C:B5:16:D5:EB:A1:7B:CA:88:49:AF:B3:F8:44:42:06:84:A9:8F:03:E7:B8:54:EE:98:C4:43:B8:CE:55"}}},"request":{"raw":"GET /lander/template-2025-06-16_15-51-22/images/screen_4.png HTTP/1.1\r\nHost: spinmax-portal.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://spinmax-portal.xyz/rrrausz?lead_id=1sjos4f.640f.1ar405c\u0026sub1=\u0026sub2=\u0026sub3=\u0026sub4=\u0026sub5=\u0026sub6=\u0026sub15=\u0026sub16=\u0026sub17=\u0026sub18=\u0026sub19=\u0026sub20=\u0026key=\u0026ln=EN\u0026sub_id_30=open_pwa\r\nCookie: e3b0c4_25615=3s90e142c4vf73; _token=3s90e142c4vf73.1776306149.7.e92eca5748914ba4fa973422f028bcd2; _subid=1sjos4f.640f.1ar407e\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 15 Apr 2026 05:01:23 GMT\r\ncontent-type: image/png\r\ncontent-length: 233627\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nlast-modified: Mon, 16 Jun 2025 15:55:09 GMT\r\netag: \"68503e5d-3909b\"\r\nx-content-type-options: nosniff\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=t0VLpduJ6ENrcTp2y5gMzjWncT%2FCRXikZWQH8CclmGZgQ5xoEjBH%2FICSXBPs52AYvStxQUjBYaGIy50jPxIyV9zwZztlyxy3y%2Bx1POkM0Re0uuEH0XxrV%2BuT2Gek91OC%2FFiOTSE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ec864589e37120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":212716,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 540 x 1080, 8-bit/color RGB, non-interlaced","md5":"25928cd78779038ce1a7f8d63fde1f1f","sha1":"eb601826fcaf6c2923de207c2f594978dffbbb14","sha256":"7e46e7188625cb80f9273e7f2fe5be9476c2427da82126f926a061506b964326","sha512":"bcc56b8b5b717b64a9d7ebc7f4b14274f7e9436cb5b9fcbd78711db29327168eb6ab80f39876fb587efa4b889bface5221ffba54ebb11678546c14621722a2fe","ssdeep":"6144:AFOoclOJBwGIquYxMq9QFhi2V6hANcOPExrxbVZG:AbCWwPqJMp7V6hLfVZG","tlshash":"8424237b4ca23693b43e95ee4642c3a7d0fe479f0bdc26d4c6178997c0dd0269cda226","first_seen":"2026-04-15T05:01:39.454853Z","last_seen":"2026-04-15T05:01:39.454853Z","times_seen":1,"resource_available":false,"data":null}},"time_used":756,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":520,"receive":236,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"spinmax-portal.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"easy-image.b-cdn.net/users/female/75.jpg","fqdn":"easy-image.b-cdn.net","domain":"b-cdn.net","tld":"net"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://spinmax-portal.xyz/rrrausz?lead_id=1sjos4f.640f.1ar405c\u0026sub1=\u0026sub2=\u0026sub3=\u0026sub4=\u0026sub5=\u0026sub6=\u0026sub15=\u0026sub16=\u0026sub17=\u0026sub18=\u0026sub19=\u0026sub20=\u0026key=\u0026ln=EN\u0026sub_id_30=open_pwa","date":"2026-04-15T05:01:22.726Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.b-cdn.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 06 Nov 2025 00:00:00 GMT","end":"Wed, 11 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"92:9B:37:29:B4:2D:AB:EB:68:07:7B:03:B2:80:2E:5B:53:CE:AD:E7","sha256":"51:6F:86:36:A1:23:32:72:AA:0F:28:1A:81:F4:92:F8:82:35:42:13:BA:4C:21:2D:80:C5:BB:BF:19:04:1D:32"}}},"request":{"raw":"GET /users/female/75.jpg HTTP/1.1\r\nHost: easy-image.b-cdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://spinmax-portal.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 15 Apr 2026 05:01:22 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 15484\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 2442763\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=0\r\netag: \"67ed046a-3c7c\"\r\nlast-modified: Wed, 02 Apr 2025 09:33:30 GMT\r\ncdn-storageserver: SE-582\r\ncdn-fileserver: 966\r\ncdn-proxyver: 1.50\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 04/15/2026 05:01:22\r\ncdn-edgestorageid: 830\r\ncdn-requestid: e6973a51ada85d0e97ebda842ef9a688\r\ncdn-cache: MISS\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":15484,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 192x288, components 3","md5":"418c0afb57c976048fa769abd9eb87e9","sha1":"aa383af4c5a98ae7b8251c6c416ea9be07b4339d","sha256":"5e5af589ce825b2f7189033eb6cd9a26ad19bfe065cbd29a0a1b9991905cb596","sha512":"9182397379c93c6d3dff41b4247f82f60afdba8f2f2ee85d5261598812f143af2370cbdfe5415ebc49db53dacd28a327189b48ebb7fcd017c197fbe86084efde","ssdeep":"384:7KK+Sb9x7UpEi+T5HLQe9MRMw7A2LASQmLZWn:p5x7++TxUeqRxrLHQyW","tlshash":"3562d0f785a8e87ef2721ad191827d019d20da5867f0cc98382135f0602ee4f40f2b5e","first_seen":"2025-06-03T02:54:05.964717Z","last_seen":"2026-05-09T07:41:03.968476Z","times_seen":20,"resource_available":false,"data":null}},"time_used":414,"timings":{"blocked":116,"dns":46,"connect":19,"send":0,"wait":92,"receive":25,"ssl":107},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"easy-image.b-cdn.net/users/female/78.jpg","fqdn":"easy-image.b-cdn.net","domain":"b-cdn.net","tld":"net"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://spinmax-portal.xyz/rrrausz?lead_id=1sjos4f.640f.1ar405c\u0026sub1=\u0026sub2=\u0026sub3=\u0026sub4=\u0026sub5=\u0026sub6=\u0026sub15=\u0026sub16=\u0026sub17=\u0026sub18=\u0026sub19=\u0026sub20=\u0026key=\u0026ln=EN\u0026sub_id_30=open_pwa","date":"2026-04-15T05:01:22.730Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.b-cdn.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 06 Nov 2025 00:00:00 GMT","end":"Wed, 11 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"92:9B:37:29:B4:2D:AB:EB:68:07:7B:03:B2:80:2E:5B:53:CE:AD:E7","sha256":"51:6F:86:36:A1:23:32:72:AA:0F:28:1A:81:F4:92:F8:82:35:42:13:BA:4C:21:2D:80:C5:BB:BF:19:04:1D:32"}}},"request":{"raw":"GET /users/female/78.jpg HTTP/1.1\r\nHost: easy-image.b-cdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://spinmax-portal.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 15 Apr 2026 05:01:22 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 14895\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 2442763\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=0\r\netag: \"67ed046b-3a2f\"\r\nlast-modified: Wed, 02 Apr 2025 09:33:31 GMT\r\ncdn-storageserver: SE-583\r\ncdn-fileserver: 1028\r\ncdn-proxyver: 1.50\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 04/15/2026 05:01:22\r\ncdn-edgestorageid: 830\r\ncdn-requestid: b81c4b2af12e0184c05d25c1c6805976\r\ncdn-cache: MISS\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":14895,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 360x240, components 3","md5":"74134aa47f5eaf8884ee297fb8087ee7","sha1":"788c8e34e5a602e481fd37de3da0da74c2783d58","sha256":"5fefe06f1364b947d07bccde51c20b67e00d0983975fe25e6b16928a5bc2f214","sha512":"69c75b46c33b45b999c99888f54d2ff81b78ffc91c2287f646ebdd77e2d5d1f440ba793a933aedda0124eae126e6459a7354e3c84461a5ddd4349fe870ab6999","ssdeep":"384:RlhKOWBwbX4ROy2YHXX+2wY5fd7h06W4CqmLI:RpWB8KZXvw81has","tlshash":"4a62d0212304fc1ad3ae52e2483cdfc7910e391e96d28a71c17d7b4359e9d999d0d688","first_seen":"2025-06-19T06:56:57.165167Z","last_seen":"2026-05-17T04:13:56.244512Z","times_seen":19,"resource_available":false,"data":null}},"time_used":222,"timings":{"blocked":87,"dns":0,"connect":0,"send":0,"wait":100,"receive":35,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"easy-image.b-cdn.net/app-icon/plinko.webp","fqdn":"easy-image.b-cdn.net","domain":"b-cdn.net","tld":"net"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://spinmax-portal.xyz/rrrausz?lead_id=1sjos4f.640f.1ar405c\u0026sub1=\u0026sub2=\u0026sub3=\u0026sub4=\u0026sub5=\u0026sub6=\u0026sub15=\u0026sub16=\u0026sub17=\u0026sub18=\u0026sub19=\u0026sub20=\u0026key=\u0026ln=EN\u0026sub_id_30=open_pwa","date":"2026-04-15T05:01:22.777Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.b-cdn.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 06 Nov 2025 00:00:00 GMT","end":"Wed, 11 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"92:9B:37:29:B4:2D:AB:EB:68:07:7B:03:B2:80:2E:5B:53:CE:AD:E7","sha256":"51:6F:86:36:A1:23:32:72:AA:0F:28:1A:81:F4:92:F8:82:35:42:13:BA:4C:21:2D:80:C5:BB:BF:19:04:1D:32"}}},"request":{"raw":"GET /app-icon/plinko.webp HTTP/1.1\r\nHost: easy-image.b-cdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://spinmax-portal.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 15 Apr 2026 05:01:22 GMT\r\ncontent-type: image/webp\r\ncontent-length: 48554\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 2442763\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=0\r\netag: \"66bf2845-bdaa\"\r\nlast-modified: Fri, 16 Aug 2024 10:21:57 GMT\r\ncdn-storageserver: SE-582\r\ncdn-fileserver: 582\r\ncdn-proxyver: 1.50\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 04/14/2026 13:02:34\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 45b8a80b494708f166e54883f0d15c05\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":48554,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"2a9da53c8f289c64f60f067e601e16c3","sha1":"964337e0c87cd24b2fcf3cd0aa509027b2be2ca3","sha256":"4d34072018d7657f0a6e05ec5a155fb7d7772bc49b1c3e1b6943f872aef27083","sha512":"1e4e80b3c9fa62d2510aa44dee277384092d70fb34ea7a474785c762abbd48084b07204ae5a316b3987c07a08fc5a00fb1b74ea725b27745406aaaa17813fa4c","ssdeep":"768:44JACK4nSPxEfbOK9C5aALo4r2y93iO+QBgWVlD1hvkxpAXuICOrmguS+:4uK4nQobx0hLB93iO+ygKzSxevHSS+","tlshash":"242301379f727211f7436af027857eda5a3d5d9bb4191bf3f1529a0c060223d2c2ba0a","first_seen":"2025-03-26T16:41:42.388003Z","last_seen":"2026-06-06T22:10:36.473717Z","times_seen":55,"resource_available":false,"data":null}},"time_used":159,"timings":{"blocked":46,"dns":0,"connect":0,"send":0,"wait":85,"receive":28,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"spinmax-portal.xyz/lander/template-2025-06-16_15-51-22/js/uaParser.js","fqdn":"spinmax-portal.xyz","domain":"spinmax-portal.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://spinmax-portal.xyz/rrrausz?lead_id=1sjos4f.640f.1ar405c\u0026sub1=\u0026sub2=\u0026sub3=\u0026sub4=\u0026sub5=\u0026sub6=\u0026sub15=\u0026sub16=\u0026sub17=\u0026sub18=\u0026sub19=\u0026sub20=\u0026key=\u0026ln=EN\u0026sub_id_30=open_pwa","date":"2026-04-15T05:01:22.786Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"spinmax-portal.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 06 Apr 2026 23:06:25 GMT","end":"Mon, 06 Jul 2026 00:06:01 GMT"},"fingerprint":{"sha1":"0C:40:1A:B1:A1:36:AB:9B:6F:07:86:4D:57:6A:D9:D6:55:B9:32:56","sha256":"6C:0E:1C:B5:16:D5:EB:A1:7B:CA:88:49:AF:B3:F8:44:42:06:84:A9:8F:03:E7:B8:54:EE:98:C4:43:B8:CE:55"}}},"request":{"raw":"GET /lander/template-2025-06-16_15-51-22/js/uaParser.js HTTP/1.1\r\nHost: spinmax-portal.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://spinmax-portal.xyz/rrrausz?lead_id=1sjos4f.640f.1ar405c\u0026sub1=\u0026sub2=\u0026sub3=\u0026sub4=\u0026sub5=\u0026sub6=\u0026sub15=\u0026sub16=\u0026sub17=\u0026sub18=\u0026sub19=\u0026sub20=\u0026key=\u0026ln=EN\u0026sub_id_30=open_pwa\r\nCookie: e3b0c4_25615=3s90e142c4vf73; _token=3s90e142c4vf73.1776306149.7.e92eca5748914ba4fa973422f028bcd2; _subid=1sjos4f.640f.1ar407e\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 15 Apr 2026 05:01:23 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nlast-modified: Mon, 16 Jun 2025 15:55:09 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-content-type-options: nosniff\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gox1oOvrnTcGzucfEOzekKGm0x%2BbE2j41p3pAZvEDvOvdEj4GGRO4nL2XVeGiYibUJKIAHZf0%2Bwm10u5OgYSnBydszPpupgSIoM4XFSK%2BCtIcjwH%2BGyQAxHAPTgi9hrjTfDbzhg%3D\"}]}\r\netag: W/\"68503e5d-4bbc\"\r\ncontent-encoding: br\r\ncf-ray: 9ec86458deca120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19388,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (19275)","md5":"fae74f6b710e428ad5ca0378fc339859","sha1":"0d8f92bc5fcfb0ef72ee329f0a0763524443b5bd","sha256":"9735a83f5152c01eefe3ca9457e3b440502b60246d60f232196eb36c126f2125","sha512":"092f093612174c0f84c491a2e9ff03b4ee160ae90aa16ebd5f83e80a7c128efb6e8099629c9c88d7a330f9313a1a3d78e561d295b4fdb446dd18266fe75e46ff","ssdeep":"384:69M5d42wb/6iOD0tRqwkdZISkzVBv2ETttl9rsATHskN:69CKyzDYRqZduSAZ5tl9rsAT1","tlshash":"0b92da3ed365bf2093bee589c51790002d3a5c3adb41b0f99ae4b540e8d6db1129f7b2","first_seen":"2024-04-25T09:45:56Z","last_seen":"2026-06-08T12:52:08.38276Z","times_seen":255,"resource_available":true,"data":null}},"time_used":540,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":540,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"spinmax-portal.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"spinmax-portal.xyz/lander/template-2025-06-16_15-51-22/images/screen_1.png","fqdn":"spinmax-portal.xyz","domain":"spinmax-portal.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://spinmax-portal.xyz/rrrausz?lead_id=1sjos4f.640f.1ar405c\u0026sub1=\u0026sub2=\u0026sub3=\u0026sub4=\u0026sub5=\u0026sub6=\u0026sub15=\u0026sub16=\u0026sub17=\u0026sub18=\u0026sub19=\u0026sub20=\u0026key=\u0026ln=EN\u0026sub_id_30=open_pwa","date":"2026-04-15T05:01:22.716Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"spinmax-portal.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 06 Apr 2026 23:06:25 GMT","end":"Mon, 06 Jul 2026 00:06:01 GMT"},"fingerprint":{"sha1":"0C:40:1A:B1:A1:36:AB:9B:6F:07:86:4D:57:6A:D9:D6:55:B9:32:56","sha256":"6C:0E:1C:B5:16:D5:EB:A1:7B:CA:88:49:AF:B3:F8:44:42:06:84:A9:8F:03:E7:B8:54:EE:98:C4:43:B8:CE:55"}}},"request":{"raw":"GET /lander/template-2025-06-16_15-51-22/images/screen_1.png HTTP/1.1\r\nHost: spinmax-portal.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://spinmax-portal.xyz/rrrausz?lead_id=1sjos4f.640f.1ar405c\u0026sub1=\u0026sub2=\u0026sub3=\u0026sub4=\u0026sub5=\u0026sub6=\u0026sub15=\u0026sub16=\u0026sub17=\u0026sub18=\u0026sub19=\u0026sub20=\u0026key=\u0026ln=EN\u0026sub_id_30=open_pwa\r\nCookie: e3b0c4_25615=3s90e142c4vf73; _token=3s90e142c4vf73.1776306149.7.e92eca5748914ba4fa973422f028bcd2; _subid=1sjos4f.640f.1ar407e\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 15 Apr 2026 05:01:23 GMT\r\ncontent-type: image/png\r\ncontent-length: 259139\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nlast-modified: Mon, 16 Jun 2025 15:55:09 GMT\r\netag: \"68503e5d-3f443\"\r\nx-content-type-options: nosniff\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tLPPT%2BmS%2FF1IbzUAYZCO0AJuzwqmzL496q8cfnBzcPk35Kp2xNKaHJtncP2%2Fo8dzx%2Br7ELRey0SPVV%2BKvISeDvHMXkGjdBjUoR3TBjchZJsYuMlEMwuSuKHIVjDcIMHTkujEjLk%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ec864589e25120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":212716,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 540 x 1080, 8-bit/color RGB, non-interlaced","md5":"70b8536264df527fea1481b2ecf5410a","sha1":"5d0fae83074a21ac9e5c10ffc1d9d1ccb400ae88","sha256":"7b39f79b21b366068cfacda6e195f42f49514fe69c16b7284260d407a96390d0","sha512":"3d1dc15fe9787e92024c774fe48cd9786a1426978b5da8c109f2dcddd87bc0169f905f7466151ef44a8c896fd35ef044234c4ee93bc811f340d111869b80e45f","ssdeep":"6144:H1iNNtmlt/ZYIHojW8ZRo4lEwVC95ztaSPXSe:wNNstKII6So4lEIOaHe","tlshash":"a42423d31fff16171ed2b11d1e40a23a596b61b6332b3178aa62e450ae546c0e307bf5","first_seen":"2026-04-15T05:01:39.461525Z","last_seen":"2026-04-15T05:01:39.461525Z","times_seen":1,"resource_available":false,"data":null}},"time_used":758,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":532,"receive":226,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"spinmax-portal.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"spinmax-portal.xyz/lander/template-2025-06-16_15-51-22/images/icon_lock.svg","fqdn":"spinmax-portal.xyz","domain":"spinmax-portal.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://spinmax-portal.xyz/rrrausz?lead_id=1sjos4f.640f.1ar405c\u0026sub1=\u0026sub2=\u0026sub3=\u0026sub4=\u0026sub5=\u0026sub6=\u0026sub15=\u0026sub16=\u0026sub17=\u0026sub18=\u0026sub19=\u0026sub20=\u0026key=\u0026ln=EN\u0026sub_id_30=open_pwa","date":"2026-04-15T05:01:22.722Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"spinmax-portal.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 06 Apr 2026 23:06:25 GMT","end":"Mon, 06 Jul 2026 00:06:01 GMT"},"fingerprint":{"sha1":"0C:40:1A:B1:A1:36:AB:9B:6F:07:86:4D:57:6A:D9:D6:55:B9:32:56","sha256":"6C:0E:1C:B5:16:D5:EB:A1:7B:CA:88:49:AF:B3:F8:44:42:06:84:A9:8F:03:E7:B8:54:EE:98:C4:43:B8:CE:55"}}},"request":{"raw":"GET /lander/template-2025-06-16_15-51-22/images/icon_lock.svg HTTP/1.1\r\nHost: spinmax-portal.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://spinmax-portal.xyz/rrrausz?lead_id=1sjos4f.640f.1ar405c\u0026sub1=\u0026sub2=\u0026sub3=\u0026sub4=\u0026sub5=\u0026sub6=\u0026sub15=\u0026sub16=\u0026sub17=\u0026sub18=\u0026sub19=\u0026sub20=\u0026key=\u0026ln=EN\u0026sub_id_30=open_pwa\r\nCookie: e3b0c4_25615=3s90e142c4vf73; _token=3s90e142c4vf73.1776306149.7.e92eca5748914ba4fa973422f028bcd2; _subid=1sjos4f.640f.1ar407e\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 15 Apr 2026 05:01:23 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nlast-modified: Mon, 16 Jun 2025 15:55:09 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-content-type-options: nosniff\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FcYwsXRvo0zjZRtrBg%2BMgOq8F9D6Q03Z7MntbB%2Fz%2BjpIElbbACvZHIybC6GxeODkEbN2FcGAbakI0%2FNgARoYqXFwhS8NNdTs%2BKESeBD0Wc4gmQAJF8vg9LPCawLfcvZbJIObOMs%3D\"}]}\r\netag: W/\"68503e5d-3f5\"\r\ncontent-encoding: br\r\ncf-ray: 9ec864589e45120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1013,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"d950dd16c0657b1c82b02f16fafed968","sha1":"45a3fbe15926951f49def8ab64eb85cde3fc0d70","sha256":"932533fb9bf574bb1b71e61ff42d99c7309fe23e8cb8d522e5b5b87934689a62","sha512":"a3ffee25ee734ea20b45e1344de330b34276e4e1d273debe83a62d8f72d18df29d9e0ad6c0f42766413668d692f945a0d8d7269808d0e22ab88cab6a31619e35","ssdeep":"","tlshash":"6a119ef6b9d256c29797b793f48025a53c7e3e7a43e3849004081febe15999ccb88cd8","first_seen":"2024-04-25T09:45:56Z","last_seen":"2026-06-08T12:52:08.377044Z","times_seen":179,"resource_available":false,"data":null}},"time_used":385,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":385,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"spinmax-portal.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"easy-image.b-cdn.net/users/female/44.jpg","fqdn":"easy-image.b-cdn.net","domain":"b-cdn.net","tld":"net"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://spinmax-portal.xyz/rrrausz?lead_id=1sjos4f.640f.1ar405c\u0026sub1=\u0026sub2=\u0026sub3=\u0026sub4=\u0026sub5=\u0026sub6=\u0026sub15=\u0026sub16=\u0026sub17=\u0026sub18=\u0026sub19=\u0026sub20=\u0026key=\u0026ln=EN\u0026sub_id_30=open_pwa","date":"2026-04-15T05:01:22.729Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.b-cdn.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 06 Nov 2025 00:00:00 GMT","end":"Wed, 11 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"92:9B:37:29:B4:2D:AB:EB:68:07:7B:03:B2:80:2E:5B:53:CE:AD:E7","sha256":"51:6F:86:36:A1:23:32:72:AA:0F:28:1A:81:F4:92:F8:82:35:42:13:BA:4C:21:2D:80:C5:BB:BF:19:04:1D:32"}}},"request":{"raw":"GET /users/female/44.jpg HTTP/1.1\r\nHost: easy-image.b-cdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://spinmax-portal.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 15 Apr 2026 05:01:22 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 7365\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 2442763\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=0\r\netag: \"67ed0465-1cc5\"\r\nlast-modified: Wed, 02 Apr 2025 09:33:25 GMT\r\ncdn-storageserver: SE-582\r\ncdn-fileserver: 966\r\ncdn-proxyver: 1.50\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 04/15/2026 03:01:46\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 8e824b954cb2ae3eb17af4b6ec13139a\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":7365,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 243x319, components 3","md5":"b8a5f2b2b2789ccb7b9209a3c8276e03","sha1":"b337904b493e8d9a006668698049585fb248e07b","sha256":"f05132ba3911566be3e19e3535b0a2790edebc6e7076320614006bfeb138d65c","sha512":"4979a9316b13d89d9adbc329ac2a0e77879e2f69e44dda488955e338788199f8fd7d1d043186d690a4d2e44b401c4b4b41dc56317e88c72f9bcc27b22fd6e932","ssdeep":"192:7P33NXLJIT3gGfOuEbs6E5TA2ZRYkY6hBBSyVgqklsJujq:rZLiMGfOuEbx2YABBSeHH","tlshash":"8be19e76176e4c17ba7537309ef8abb45543e8d947244362f689a2ff53a218f4073822","first_seen":"2025-06-03T02:54:05.982767Z","last_seen":"2026-05-28T07:37:54.401168Z","times_seen":27,"resource_available":false,"data":null}},"time_used":139,"timings":{"blocked":88,"dns":0,"connect":0,"send":0,"wait":50,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"easy-image.b-cdn.net/users/female/25.jpg","fqdn":"easy-image.b-cdn.net","domain":"b-cdn.net","tld":"net"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://spinmax-portal.xyz/rrrausz?lead_id=1sjos4f.640f.1ar405c\u0026sub1=\u0026sub2=\u0026sub3=\u0026sub4=\u0026sub5=\u0026sub6=\u0026sub15=\u0026sub16=\u0026sub17=\u0026sub18=\u0026sub19=\u0026sub20=\u0026key=\u0026ln=EN\u0026sub_id_30=open_pwa","date":"2026-04-15T05:01:22.732Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.b-cdn.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 06 Nov 2025 00:00:00 GMT","end":"Wed, 11 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"92:9B:37:29:B4:2D:AB:EB:68:07:7B:03:B2:80:2E:5B:53:CE:AD:E7","sha256":"51:6F:86:36:A1:23:32:72:AA:0F:28:1A:81:F4:92:F8:82:35:42:13:BA:4C:21:2D:80:C5:BB:BF:19:04:1D:32"}}},"request":{"raw":"GET /users/female/25.jpg HTTP/1.1\r\nHost: easy-image.b-cdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://spinmax-portal.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 15 Apr 2026 05:01:22 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 36872\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 2442763\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=0\r\netag: \"67ed0462-9008\"\r\nlast-modified: Wed, 02 Apr 2025 09:33:22 GMT\r\ncdn-storageserver: SE-904\r\ncdn-fileserver: 966\r\ncdn-proxyver: 1.50\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 04/15/2026 05:01:22\r\ncdn-edgestorageid: 830\r\ncdn-requestid: aae912c191ceb56b513fc4322f501f6b\r\ncdn-cache: MISS\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":36872,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 420x280, components 3","md5":"731d998e4ae651cb1661536e10f477eb","sha1":"0582b3fed7b4c3c40c1a446b6d85d4e22f866971","sha256":"2582d3a9825e1ede18effd01d22333006e37497d22dcc7e579136f46a120233b","sha512":"7db0c1545a9c044a7acdc62387fc1619c0327346cecb9ba3e9b44778d99f4eb9fab852df8f5efa829c8076a3e76a192ad1ceb17d8a2860e0f937b765970a7aab","ssdeep":"768:mbdNhY2F9reY9wipGK1guQ6AIR1oWOZNWs4brj5r:QDdfrer2GBN6AI8W2grV","tlshash":"2cf2f20c36f83567eb169bbf01e963a3181b821326837dd081fa16d8a8f37bd5241783","first_seen":"2025-10-13T17:06:19.591044Z","last_seen":"2026-05-28T07:37:54.446463Z","times_seen":15,"resource_available":false,"data":null}},"time_used":164,"timings":{"blocked":85,"dns":0,"connect":0,"send":0,"wait":75,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"easy-image.b-cdn.net/users/female/51.jpg","fqdn":"easy-image.b-cdn.net","domain":"b-cdn.net","tld":"net"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://spinmax-portal.xyz/rrrausz?lead_id=1sjos4f.640f.1ar405c\u0026sub1=\u0026sub2=\u0026sub3=\u0026sub4=\u0026sub5=\u0026sub6=\u0026sub15=\u0026sub16=\u0026sub17=\u0026sub18=\u0026sub19=\u0026sub20=\u0026key=\u0026ln=EN\u0026sub_id_30=open_pwa","date":"2026-04-15T05:01:22.738Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.b-cdn.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 06 Nov 2025 00:00:00 GMT","end":"Wed, 11 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"92:9B:37:29:B4:2D:AB:EB:68:07:7B:03:B2:80:2E:5B:53:CE:AD:E7","sha256":"51:6F:86:36:A1:23:32:72:AA:0F:28:1A:81:F4:92:F8:82:35:42:13:BA:4C:21:2D:80:C5:BB:BF:19:04:1D:32"}}},"request":{"raw":"GET /users/female/51.jpg HTTP/1.1\r\nHost: easy-image.b-cdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://spinmax-portal.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 15 Apr 2026 05:01:22 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 17143\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 2442763\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=0\r\netag: \"67ed0466-42f7\"\r\nlast-modified: Wed, 02 Apr 2025 09:33:26 GMT\r\ncdn-storageserver: SE-583\r\ncdn-fileserver: 582\r\ncdn-proxyver: 1.50\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 04/14/2026 23:30:40\r\ncdn-edgestorageid: 830\r\ncdn-requestid: ee3344c9033232e1e6c5b888370e4230\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":17143,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 250x374, components 3","md5":"e0cc8ed30c9f09b175101769b52ce0c3","sha1":"6dfb7abd0afad97751fae22ccaaa9d8c6702f58d","sha256":"9c9a6f4a3000d93eb584ecee50a7d10220c4497d3148b05d4daa2ef146ff0816","sha512":"0ec1c8a2c1d46e2dbeb13e95ecde289452e0ed49246ee17f96aa0d09fc70cd300db346b6c4c5f5e0d1597e2c0d9dd09ffec3d9d21fb6553a4fec85dc90509861","ssdeep":"384:O1IEUweUtye3Z1jZGpNoYtlvwMJQCkk4I5IgbOs4Q:O1Idwy2bYtlvbJQS5334Q","tlshash":"df72d0ce653a5422f9ec78bc110273ac5e5b602e5baf0e95489b11c0cb846b04f69be4","first_seen":"2025-08-03T23:29:43.469215Z","last_seen":"2026-05-11T06:26:02.130963Z","times_seen":17,"resource_available":false,"data":null}},"time_used":153,"timings":{"blocked":80,"dns":0,"connect":0,"send":0,"wait":72,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"easy-image.b-cdn.net/app-icon/wolf.webp","fqdn":"easy-image.b-cdn.net","domain":"b-cdn.net","tld":"net"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://spinmax-portal.xyz/rrrausz?lead_id=1sjos4f.640f.1ar405c\u0026sub1=\u0026sub2=\u0026sub3=\u0026sub4=\u0026sub5=\u0026sub6=\u0026sub15=\u0026sub16=\u0026sub17=\u0026sub18=\u0026sub19=\u0026sub20=\u0026key=\u0026ln=EN\u0026sub_id_30=open_pwa","date":"2026-04-15T05:01:22.779Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.b-cdn.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 06 Nov 2025 00:00:00 GMT","end":"Wed, 11 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"92:9B:37:29:B4:2D:AB:EB:68:07:7B:03:B2:80:2E:5B:53:CE:AD:E7","sha256":"51:6F:86:36:A1:23:32:72:AA:0F:28:1A:81:F4:92:F8:82:35:42:13:BA:4C:21:2D:80:C5:BB:BF:19:04:1D:32"}}},"request":{"raw":"GET /app-icon/wolf.webp HTTP/1.1\r\nHost: easy-image.b-cdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://spinmax-portal.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 15 Apr 2026 05:01:22 GMT\r\ncontent-type: image/webp\r\ncontent-length: 137564\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 2442763\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=0\r\netag: \"66bf2845-2195c\"\r\nlast-modified: Fri, 16 Aug 2024 10:21:57 GMT\r\ncdn-storageserver: SE-582\r\ncdn-fileserver: 884\r\ncdn-proxyver: 1.50\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 04/10/2026 05:55:48\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 1d695271a6ea7ae50e4af61f03355847\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":137564,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"ef8df6e855e45f74c02cb4859599217f","sha1":"d7b73f4c1d923758431dee5078f33eacbd7fdb58","sha256":"f8689ccf0837be953f3a23c301235a6b0a65c9df28f2f03b42717dbde532d553","sha512":"5ade7656026bf9b96f0c532071fc9041716d419b90e87cda3c86279b1b6f7fc0ab91b2211876d8fb10394dcf7d48582fecb330b18abd8ad09ecfe3fc30e8ac50","ssdeep":"3072:scsx66esCxJ1PChLSTnZIx21LsG0KCNEu2jr29WH6+P8Gl:hXzjdP4LEnZIwr07NEu2jr2KfD","tlshash":"31d31296b330826cfc41f337aaccbfc5776166b8c1143841e6927f71a670168c9b969a","first_seen":"2025-03-26T16:41:42.431484Z","last_seen":"2026-06-06T22:10:36.488108Z","times_seen":33,"resource_available":false,"data":null}},"time_used":199,"timings":{"blocked":43,"dns":0,"connect":0,"send":0,"wait":86,"receive":70,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"easy-image.b-cdn.net/app-icon/zeus.webp","fqdn":"easy-image.b-cdn.net","domain":"b-cdn.net","tld":"net"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://spinmax-portal.xyz/rrrausz?lead_id=1sjos4f.640f.1ar405c\u0026sub1=\u0026sub2=\u0026sub3=\u0026sub4=\u0026sub5=\u0026sub6=\u0026sub15=\u0026sub16=\u0026sub17=\u0026sub18=\u0026sub19=\u0026sub20=\u0026key=\u0026ln=EN\u0026sub_id_30=open_pwa","date":"2026-04-15T05:01:22.780Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.b-cdn.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 06 Nov 2025 00:00:00 GMT","end":"Wed, 11 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"92:9B:37:29:B4:2D:AB:EB:68:07:7B:03:B2:80:2E:5B:53:CE:AD:E7","sha256":"51:6F:86:36:A1:23:32:72:AA:0F:28:1A:81:F4:92:F8:82:35:42:13:BA:4C:21:2D:80:C5:BB:BF:19:04:1D:32"}}},"request":{"raw":"GET /app-icon/zeus.webp HTTP/1.1\r\nHost: easy-image.b-cdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://spinmax-portal.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 15 Apr 2026 05:01:22 GMT\r\ncontent-type: image/webp\r\ncontent-length: 136852\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 2442763\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=0\r\netag: \"66bf2845-21694\"\r\nlast-modified: Fri, 16 Aug 2024 10:21:57 GMT\r\ncdn-storageserver: SE-904\r\ncdn-fileserver: 582\r\ncdn-proxyver: 1.50\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 04/10/2026 05:55:43\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 396e0701682932f48ac76d1d9587a71b\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":136852,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"ea40266545caa22557c38d644075dd6f","sha1":"15c73b4fd8ec8182caa19db4361fedb248ed37d0","sha256":"149221b0e9dbfc51a1c26bce5cc7938ba8aba81f45edf42d2457a111d6b1e07f","sha512":"4333ac13d48c21a5d2032de6b63ee13795db53efb38f5aa79e148d8a687a22cb833a1ea3ea9c79cd91604794e9ef433193c548886dd8ee417410c751e5317a52","ssdeep":"3072:hHfIdAMQuTI0wjLlm/eg0hC3IZy9CY5nuyhfXjOpEtfM:BfIdAMn6ueBaIZy9/uaPapE9M","tlshash":"39d31242e102d104e791b1b348c88f27a1fb75393c1316ea1f7a4ade45f7b8a6a5f1d4","first_seen":"2025-08-04T09:14:47.347312Z","last_seen":"2026-05-17T04:16:50.301485Z","times_seen":48,"resource_available":false,"data":null}},"time_used":200,"timings":{"blocked":42,"dns":0,"connect":0,"send":0,"wait":86,"receive":72,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"spinmax-portal.xyz/lander/template-2025-06-16_15-51-22/images/icon_arrow.svg","fqdn":"spinmax-portal.xyz","domain":"spinmax-portal.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://spinmax-portal.xyz/rrrausz?lead_id=1sjos4f.640f.1ar405c\u0026sub1=\u0026sub2=\u0026sub3=\u0026sub4=\u0026sub5=\u0026sub6=\u0026sub15=\u0026sub16=\u0026sub17=\u0026sub18=\u0026sub19=\u0026sub20=\u0026key=\u0026ln=EN\u0026sub_id_30=open_pwa","date":"2026-04-15T05:01:22.702Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"spinmax-portal.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 06 Apr 2026 23:06:25 GMT","end":"Mon, 06 Jul 2026 00:06:01 GMT"},"fingerprint":{"sha1":"0C:40:1A:B1:A1:36:AB:9B:6F:07:86:4D:57:6A:D9:D6:55:B9:32:56","sha256":"6C:0E:1C:B5:16:D5:EB:A1:7B:CA:88:49:AF:B3:F8:44:42:06:84:A9:8F:03:E7:B8:54:EE:98:C4:43:B8:CE:55"}}},"request":{"raw":"GET /lander/template-2025-06-16_15-51-22/images/icon_arrow.svg HTTP/1.1\r\nHost: spinmax-portal.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://spinmax-portal.xyz/rrrausz?lead_id=1sjos4f.640f.1ar405c\u0026sub1=\u0026sub2=\u0026sub3=\u0026sub4=\u0026sub5=\u0026sub6=\u0026sub15=\u0026sub16=\u0026sub17=\u0026sub18=\u0026sub19=\u0026sub20=\u0026key=\u0026ln=EN\u0026sub_id_30=open_pwa\r\nCookie: e3b0c4_25615=3s90e142c4vf73; _token=3s90e142c4vf73.1776306149.7.e92eca5748914ba4fa973422f028bcd2; _subid=1sjos4f.640f.1ar407e\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 15 Apr 2026 05:01:23 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nlast-modified: Mon, 16 Jun 2025 15:55:09 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-content-type-options: nosniff\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FAI0myM6nd%2BfJ%2Fh3ulY5HutHM5%2B36eTBl6oZd1%2F48hOadZqRHFbQjcYwwlsQSDJr9j5xv1Iu2bzXgDzicuERZ5v350SiHDXhRraMX5AZ8xOVEcBLrj1jElQuVVA9zkractVQLhs%3D\"}]}\r\netag: W/\"68503e5d-db\"\r\ncontent-encoding: br\r\ncf-ray: 9ec864588e09120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":219,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"b43d99f133288e69bbbf4086d2e6ef32","sha1":"f405ed0c6a2240746d942d4af0014a310a058d44","sha256":"ac79cfa70fe0b3820fa22be89a4220bfa05de2b99f3ee68bb10a7a35937c245c","sha512":"1ebc17375039ba8c9aeccef936efcff9785c1b12995b9d18fe5d3f0ffc545595c5ebc728ab4cd3dc1cb54108a45849920c922e6feafff9f30e6c35bdb248d7e1","ssdeep":"","tlshash":"efd0a7be554c990145044f525d59316772b674cd53c804b9e54175e07ce00d79d5dd78","first_seen":"2024-08-19T13:45:40.065042Z","last_seen":"2026-06-08T12:52:08.374Z","times_seen":243,"resource_available":false,"data":null}},"time_used":371,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":371,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"spinmax-portal.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"easy-image.b-cdn.net/users/female/15.jpg","fqdn":"easy-image.b-cdn.net","domain":"b-cdn.net","tld":"net"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://spinmax-portal.xyz/rrrausz?lead_id=1sjos4f.640f.1ar405c\u0026sub1=\u0026sub2=\u0026sub3=\u0026sub4=\u0026sub5=\u0026sub6=\u0026sub15=\u0026sub16=\u0026sub17=\u0026sub18=\u0026sub19=\u0026sub20=\u0026key=\u0026ln=EN\u0026sub_id_30=open_pwa","date":"2026-04-15T05:01:22.728Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.b-cdn.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 06 Nov 2025 00:00:00 GMT","end":"Wed, 11 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"92:9B:37:29:B4:2D:AB:EB:68:07:7B:03:B2:80:2E:5B:53:CE:AD:E7","sha256":"51:6F:86:36:A1:23:32:72:AA:0F:28:1A:81:F4:92:F8:82:35:42:13:BA:4C:21:2D:80:C5:BB:BF:19:04:1D:32"}}},"request":{"raw":"GET /users/female/15.jpg HTTP/1.1\r\nHost: easy-image.b-cdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://spinmax-portal.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 15 Apr 2026 05:01:22 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 25305\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 2442763\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=0\r\netag: \"67ed0461-62d9\"\r\nlast-modified: Wed, 02 Apr 2025 09:33:21 GMT\r\ncdn-storageserver: SE-582\r\ncdn-fileserver: 1028\r\ncdn-proxyver: 1.41\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 12/08/2025 06:32:54\r\ncdn-edgestorageid: 830\r\ncdn-requestid: ea47fbc81a40fd63928d45c351d45120\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":25305,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 250x375, components 3","md5":"b4a1f83f73f1484d01019ebd722df9f4","sha1":"80e3d0d2c0475cc24ef48fb83c5856360c42f99c","sha256":"0717d1765be7d42e0be66b86d7ac3f25f60fdf01ceddbda6e04878a9050ad711","sha512":"dc3b17a0f9664d510c25e93121618454e5ade2e1532bfdae1ef04ac817fb1e1613a514b7b67549f6fdc4354e76195e360055346886198b255794d24aae67b048","ssdeep":"384:KNepcl5Q4IJcf/uNDpmXmBy3IL6HEKsP60B5ooAAfvRGNKk5Cb8L5QgyIOTB5/r:Kspck+/UFskwJgJbAKk5azgyFt5T","tlshash":"46b2e10fb7c10e9f1552a5b81e28ebba8b9d850eb22c317d742167c98d2bfd95033d12","first_seen":"2025-10-13T17:06:19.60978Z","last_seen":"2026-06-02T07:48:29.096398Z","times_seen":17,"resource_available":false,"data":null}},"time_used":387,"timings":{"blocked":99,"dns":50,"connect":19,"send":0,"wait":83,"receive":35,"ssl":88},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"easy-image.b-cdn.net/users/male/51.jpg","fqdn":"easy-image.b-cdn.net","domain":"b-cdn.net","tld":"net"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://spinmax-portal.xyz/rrrausz?lead_id=1sjos4f.640f.1ar405c\u0026sub1=\u0026sub2=\u0026sub3=\u0026sub4=\u0026sub5=\u0026sub6=\u0026sub15=\u0026sub16=\u0026sub17=\u0026sub18=\u0026sub19=\u0026sub20=\u0026key=\u0026ln=EN\u0026sub_id_30=open_pwa","date":"2026-04-15T05:01:22.742Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.b-cdn.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 06 Nov 2025 00:00:00 GMT","end":"Wed, 11 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"92:9B:37:29:B4:2D:AB:EB:68:07:7B:03:B2:80:2E:5B:53:CE:AD:E7","sha256":"51:6F:86:36:A1:23:32:72:AA:0F:28:1A:81:F4:92:F8:82:35:42:13:BA:4C:21:2D:80:C5:BB:BF:19:04:1D:32"}}},"request":{"raw":"GET /users/male/51.jpg HTTP/1.1\r\nHost: easy-image.b-cdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://spinmax-portal.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 15 Apr 2026 05:01:22 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 15568\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 2442763\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=0\r\netag: \"67ed054d-3cd0\"\r\nlast-modified: Wed, 02 Apr 2025 09:37:17 GMT\r\ncdn-storageserver: SE-582\r\ncdn-fileserver: 1029\r\ncdn-proxyver: 1.50\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 04/14/2026 23:30:40\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 518d566ab1b4beda37371564dd817520\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":15568,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 250x375, components 3","md5":"199a5bb72da8887aeb44fb15c0f4218d","sha1":"5d3eee5be89a262ad3abeec36627936480781534","sha256":"eed91025ed27b35866c9c5a886f723066e49205558a044c00b1289b248a5c0be","sha512":"b2554b5e4718b10950e6227ab34b8884e54d270073895d4bd4d7039d6392ae0bf0d13df103e9fb3cf8a342d36515f60b58781a5cc3d86a4b30be98ef85c9387c","ssdeep":"384:oMXQXI7Hduh5/IUo4qbm8u/hus3S98t4XzGmkNh3N6u:oikI7Hg5/9o4qS75uF98t4XK5fL","tlshash":"b762c01973071a04fc7d04e2ab5725872b0b07dce616fd4b8a2a2ef121c4ad6f4e894f","first_seen":"2025-10-05T13:23:19.531903Z","last_seen":"2026-05-17T04:16:31.703753Z","times_seen":14,"resource_available":false,"data":null}},"time_used":162,"timings":{"blocked":77,"dns":0,"connect":0,"send":0,"wait":85,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"spinmax-portal.xyz/lander/template-2025-06-16_15-51-22/fonts/Roboto-Medium.ttf","fqdn":"spinmax-portal.xyz","domain":"spinmax-portal.xyz","tld":"xyz"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://spinmax-portal.xyz/rrrausz?lead_id=1sjos4f.640f.1ar405c\u0026sub1=\u0026sub2=\u0026sub3=\u0026sub4=\u0026sub5=\u0026sub6=\u0026sub15=\u0026sub16=\u0026sub17=\u0026sub18=\u0026sub19=\u0026sub20=\u0026key=\u0026ln=EN\u0026sub_id_30=open_pwa","date":"2026-04-15T05:01:23.209Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"spinmax-portal.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 06 Apr 2026 23:06:25 GMT","end":"Mon, 06 Jul 2026 00:06:01 GMT"},"fingerprint":{"sha1":"0C:40:1A:B1:A1:36:AB:9B:6F:07:86:4D:57:6A:D9:D6:55:B9:32:56","sha256":"6C:0E:1C:B5:16:D5:EB:A1:7B:CA:88:49:AF:B3:F8:44:42:06:84:A9:8F:03:E7:B8:54:EE:98:C4:43:B8:CE:55"}}},"request":{"raw":"GET /lander/template-2025-06-16_15-51-22/fonts/Roboto-Medium.ttf HTTP/1.1\r\nHost: spinmax-portal.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://spinmax-portal.xyz/lander/template-2025-06-16_15-51-22/style/style.css\r\nCookie: e3b0c4_25615=3s90e142c4vf73; _token=3s90e142c4vf73.1776306149.7.e92eca5748914ba4fa973422f028bcd2; _subid=1sjos4f.640f.1ar407e\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-08T18:34:25.971921Z","times_seen":16246822,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"spinmax-portal.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"easy-image.b-cdn.net/users/female/21.jpg","fqdn":"easy-image.b-cdn.net","domain":"b-cdn.net","tld":"net"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://spinmax-portal.xyz/rrrausz?lead_id=1sjos4f.640f.1ar405c\u0026sub1=\u0026sub2=\u0026sub3=\u0026sub4=\u0026sub5=\u0026sub6=\u0026sub15=\u0026sub16=\u0026sub17=\u0026sub18=\u0026sub19=\u0026sub20=\u0026key=\u0026ln=EN\u0026sub_id_30=open_pwa","date":"2026-04-15T05:01:22.735Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.b-cdn.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 06 Nov 2025 00:00:00 GMT","end":"Wed, 11 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"92:9B:37:29:B4:2D:AB:EB:68:07:7B:03:B2:80:2E:5B:53:CE:AD:E7","sha256":"51:6F:86:36:A1:23:32:72:AA:0F:28:1A:81:F4:92:F8:82:35:42:13:BA:4C:21:2D:80:C5:BB:BF:19:04:1D:32"}}},"request":{"raw":"GET /users/female/21.jpg HTTP/1.1\r\nHost: easy-image.b-cdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://spinmax-portal.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 15 Apr 2026 05:01:22 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 16431\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 2442763\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=0\r\netag: \"67ed0462-402f\"\r\nlast-modified: Wed, 02 Apr 2025 09:33:22 GMT\r\ncdn-storageserver: SE-583\r\ncdn-fileserver: 966\r\ncdn-proxyver: 1.50\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 04/14/2026 02:58:35\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 7213b20b4806c4e540fb6bebf543fa15\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":16431,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 216x288, components 3","md5":"8ec6504c45d784a607a9c902d3fe8a7e","sha1":"dc2f25414eb66297453431a433b87e473917240e","sha256":"7ca951ff27ce448fbea839a960fe10e83cce017f706165a8723aec4e58c61cec","sha512":"67c60b612d279d2981221789a7d3f85373bc7dc23a22251a276b9c0a6f47f2584e7ec9b65ae746f28885334c8d0903e33ad7955b8d207df3e8856ba83a862cb2","ssdeep":"384:M1RM9vk5exw9Fcdz1w9UMhkru9d+hzilyrtvc:MTM9vYexUoK9UMOQMViEZc","tlshash":"1572c09b4129e766c168ee22780f076074342fda2e1916cd04db9efb86bd1e596083b8","first_seen":"2025-10-11T09:20:45.388653Z","last_seen":"2026-05-17T04:15:01.978228Z","times_seen":18,"resource_available":false,"data":null}},"time_used":131,"timings":{"blocked":82,"dns":0,"connect":0,"send":0,"wait":48,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"spinmax-portal.xyz/lander/template-2025-06-16_15-51-22/style/style.css","fqdn":"spinmax-portal.xyz","domain":"spinmax-portal.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://spinmax-portal.xyz/rrrausz?lead_id=1sjos4f.640f.1ar405c\u0026sub1=\u0026sub2=\u0026sub3=\u0026sub4=\u0026sub5=\u0026sub6=\u0026sub15=\u0026sub16=\u0026sub17=\u0026sub18=\u0026sub19=\u0026sub20=\u0026key=\u0026ln=EN\u0026sub_id_30=open_pwa","date":"2026-04-15T05:01:22.684Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"spinmax-portal.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 06 Apr 2026 23:06:25 GMT","end":"Mon, 06 Jul 2026 00:06:01 GMT"},"fingerprint":{"sha1":"0C:40:1A:B1:A1:36:AB:9B:6F:07:86:4D:57:6A:D9:D6:55:B9:32:56","sha256":"6C:0E:1C:B5:16:D5:EB:A1:7B:CA:88:49:AF:B3:F8:44:42:06:84:A9:8F:03:E7:B8:54:EE:98:C4:43:B8:CE:55"}}},"request":{"raw":"GET /lander/template-2025-06-16_15-51-22/style/style.css HTTP/1.1\r\nHost: spinmax-portal.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://spinmax-portal.xyz/rrrausz?lead_id=1sjos4f.640f.1ar405c\u0026sub1=\u0026sub2=\u0026sub3=\u0026sub4=\u0026sub5=\u0026sub6=\u0026sub15=\u0026sub16=\u0026sub17=\u0026sub18=\u0026sub19=\u0026sub20=\u0026key=\u0026ln=EN\u0026sub_id_30=open_pwa\r\nCookie: e3b0c4_25615=3s90e142c4vf73; _token=3s90e142c4vf73.1776306149.7.e92eca5748914ba4fa973422f028bcd2; _subid=1sjos4f.640f.1ar407e\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 15 Apr 2026 05:01:23 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\npriority: u=2,i=?0\r\nlast-modified: Mon, 16 Jun 2025 15:55:09 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-content-type-options: nosniff\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=au19lPP51TBraD0oc2bkH4BOOIH1kTfylT1xvoAqPsTwy7GumLclw%2FDzuIW0Tgne6QDcagMx0zC%2BRC6fTklPAnAHRcUqADUyCKi%2F1lw1P9gjB4QA%2F3QibszsjSotJYd6nS1r%2F%2F4%3D\"}]}\r\netag: W/\"68503e5d-52f9\"\r\ncontent-encoding: br\r\ncf-ray: 9ec864587de2120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21241,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text","md5":"17faaa4aaace0b8aa843484c62c3728d","sha1":"f09d72f126735e02a02fd49dd462b7ad7a1fe6e9","sha256":"b5987e0da63da2f5c584aff4e462c5a91ab04000a09c30ef9367d369421c5a01","sha512":"3103b9e06b7b9d1b60e8fc506a6988427b9809f14dc21a2fd9ec26ccdee6b019f826dc5e8192c7ddfcedaa1e327d2821f90e21c751673f59fb81152441c8c764","ssdeep":"384:HyydFPFTXcgLuOFwKnq7ygwMRJ4qPeqFcFtEBMkLEyvsQrUOuFZBvtFVWM/wpllZ:HyyOgqOFwKqugwMRJ4qPeqFcFEMkoyvN","tlshash":"899263d16a686104b917d8547e639f11736c9443a10fccbdebe0345cceca3da96a3b8e","first_seen":"2025-07-04T00:17:04.601161Z","last_seen":"2026-06-08T12:52:08.369023Z","times_seen":118,"resource_available":false,"data":null}},"time_used":528,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":528,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"spinmax-portal.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"spinmax-portal.xyz/lander/template-2025-06-16_15-51-22/images/gplay-logo.svg","fqdn":"spinmax-portal.xyz","domain":"spinmax-portal.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://spinmax-portal.xyz/rrrausz?lead_id=1sjos4f.640f.1ar405c\u0026sub1=\u0026sub2=\u0026sub3=\u0026sub4=\u0026sub5=\u0026sub6=\u0026sub15=\u0026sub16=\u0026sub17=\u0026sub18=\u0026sub19=\u0026sub20=\u0026key=\u0026ln=EN\u0026sub_id_30=open_pwa","date":"2026-04-15T05:01:22.699Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"spinmax-portal.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 06 Apr 2026 23:06:25 GMT","end":"Mon, 06 Jul 2026 00:06:01 GMT"},"fingerprint":{"sha1":"0C:40:1A:B1:A1:36:AB:9B:6F:07:86:4D:57:6A:D9:D6:55:B9:32:56","sha256":"6C:0E:1C:B5:16:D5:EB:A1:7B:CA:88:49:AF:B3:F8:44:42:06:84:A9:8F:03:E7:B8:54:EE:98:C4:43:B8:CE:55"}}},"request":{"raw":"GET /lander/template-2025-06-16_15-51-22/images/gplay-logo.svg HTTP/1.1\r\nHost: spinmax-portal.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://spinmax-portal.xyz/rrrausz?lead_id=1sjos4f.640f.1ar405c\u0026sub1=\u0026sub2=\u0026sub3=\u0026sub4=\u0026sub5=\u0026sub6=\u0026sub15=\u0026sub16=\u0026sub17=\u0026sub18=\u0026sub19=\u0026sub20=\u0026key=\u0026ln=EN\u0026sub_id_30=open_pwa\r\nCookie: e3b0c4_25615=3s90e142c4vf73; _token=3s90e142c4vf73.1776306149.7.e92eca5748914ba4fa973422f028bcd2; _subid=1sjos4f.640f.1ar407e\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 15 Apr 2026 05:01:23 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nlast-modified: Mon, 16 Jun 2025 15:55:09 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-content-type-options: nosniff\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=g5xR4LjsIEhiXaL9m9%2FSkAflkYe2%2FhF3Rb3ygbdqN8bCmk7xn9Lo30C7wLZPjcwsMzSpYjO2TXZXvn0ogfzqFhH2qrtfWpH8lDRyq7fdUNpV%2BUpUqa2oNHVXHkyxM6awZ3sSu%2Fw%3D\"}]}\r\netag: W/\"68503e5d-8c5\"\r\ncontent-encoding: br\r\ncf-ray: 9ec864588e01120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2245,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"f15b2aa41a6caf7fcc0180cce8ec6798","sha1":"c2d6557a6b6bbce45244aec82f18412670b28277","sha256":"abdee0633471180e7ccd2240d42b9cbdb242ca13609234795ff816c3984d3997","sha512":"59f8244c22c3f8c3acc4359aa8ffd6e71de77c1236bf1dac868202ea9a4bf34b6041a089a707f1f9f622ed3b204ad9008d50273d675d885223b5447279a84326","ssdeep":"","tlshash":"a541fcf2a68d159c64434e64cf3754712b2f60bcba5683e8d91cc3b26407ea0d1c385e","first_seen":"2025-07-04T00:08:39.096669Z","last_seen":"2026-06-08T12:52:08.37353Z","times_seen":157,"resource_available":false,"data":null}},"time_used":377,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":377,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"spinmax-portal.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"easy-image.b-cdn.net/icon/icon_18.webp","fqdn":"easy-image.b-cdn.net","domain":"b-cdn.net","tld":"net"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://spinmax-portal.xyz/rrrausz?lead_id=1sjos4f.640f.1ar405c\u0026sub1=\u0026sub2=\u0026sub3=\u0026sub4=\u0026sub5=\u0026sub6=\u0026sub15=\u0026sub16=\u0026sub17=\u0026sub18=\u0026sub19=\u0026sub20=\u0026key=\u0026ln=EN\u0026sub_id_30=open_pwa","date":"2026-04-15T05:01:22.715Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.b-cdn.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 06 Nov 2025 00:00:00 GMT","end":"Wed, 11 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"92:9B:37:29:B4:2D:AB:EB:68:07:7B:03:B2:80:2E:5B:53:CE:AD:E7","sha256":"51:6F:86:36:A1:23:32:72:AA:0F:28:1A:81:F4:92:F8:82:35:42:13:BA:4C:21:2D:80:C5:BB:BF:19:04:1D:32"}}},"request":{"raw":"GET /icon/icon_18.webp HTTP/1.1\r\nHost: easy-image.b-cdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://spinmax-portal.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 15 Apr 2026 05:01:22 GMT\r\ncontent-type: image/webp\r\ncontent-length: 372\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 2442763\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=0\r\netag: \"66bf22e9-174\"\r\nlast-modified: Fri, 16 Aug 2024 09:59:05 GMT\r\ncdn-storageserver: SE-583\r\ncdn-fileserver: 884\r\ncdn-proxyver: 1.33\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 08/09/2025 14:29:58\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 0b53c83771b2b5e4fb59f2d96743f0c8\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":372,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"5f486e9cbe8211f66adc8b17c0f0d6c8","sha1":"9bff2faaadb43aa410a39b09c32e1f38cbc393ea","sha256":"d189311ea5cbefe56171921828cbc8f1c9d573c99832d801cce072d830523161","sha512":"8df29019097617c82b65a8b916cdb1078cfa16c0cca4d65ab41a82606cddadf04e31fd337c8a04b6a721aaddfc5b36b39f670a6447098e640ddc86cc40c46340","ssdeep":"","tlshash":"d1e0f8006f2a0927cc0899032a624c48d23363a6e8f3b40097eab0c6f8764ab6540c1d","first_seen":"2025-03-26T16:41:42.39254Z","last_seen":"2026-06-06T22:10:36.483086Z","times_seen":197,"resource_available":false,"data":null}},"time_used":415,"timings":{"blocked":127,"dns":50,"connect":19,"send":0,"wait":67,"receive":35,"ssl":114},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"easy-image.b-cdn.net/users/female/74.jpg","fqdn":"easy-image.b-cdn.net","domain":"b-cdn.net","tld":"net"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://spinmax-portal.xyz/rrrausz?lead_id=1sjos4f.640f.1ar405c\u0026sub1=\u0026sub2=\u0026sub3=\u0026sub4=\u0026sub5=\u0026sub6=\u0026sub15=\u0026sub16=\u0026sub17=\u0026sub18=\u0026sub19=\u0026sub20=\u0026key=\u0026ln=EN\u0026sub_id_30=open_pwa","date":"2026-04-15T05:01:22.737Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.b-cdn.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 06 Nov 2025 00:00:00 GMT","end":"Wed, 11 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"92:9B:37:29:B4:2D:AB:EB:68:07:7B:03:B2:80:2E:5B:53:CE:AD:E7","sha256":"51:6F:86:36:A1:23:32:72:AA:0F:28:1A:81:F4:92:F8:82:35:42:13:BA:4C:21:2D:80:C5:BB:BF:19:04:1D:32"}}},"request":{"raw":"GET /users/female/74.jpg HTTP/1.1\r\nHost: easy-image.b-cdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://spinmax-portal.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 15 Apr 2026 05:01:22 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 22283\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 2442763\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=0\r\netag: \"67ed046a-570b\"\r\nlast-modified: Wed, 02 Apr 2025 09:33:30 GMT\r\ncdn-storageserver: SE-582\r\ncdn-fileserver: 1028\r\ncdn-proxyver: 1.41\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 12/08/2025 02:44:21\r\ncdn-edgestorageid: 830\r\ncdn-requestid: d6ad1762294698ef32e77888bbed0c25\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":22283,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 250x376, components 3","md5":"67f82f8509efb614f16ce662d8bc04d0","sha1":"bba21f2c525b615c5a18fb7b3e69d7c609e09632","sha256":"aa36f9f035f8847f3d4fe16588eaa9f3da08f9c3655872340deb9a87edbaea8d","sha512":"892eb18f6d64d9d664967df01d7f027930c7f49c58e050191c55270817df7ea8f1f6c2c5d7dd4da8ec375c4a7255953cfa7d0ebbcd3acfb1ae5b5b35961f4425","ssdeep":"384:SWdpI9aZTKnncoFWa0Pi0cUCA8F43/MH2e0mypOfjQ56tk5Bxz8+cJK4lFCwN/p1:SW3BZ8hF8Tz8yUH2e0myp2jQ6y5vGjl1","tlshash":"64a2f19d8f475a32cb32327488edd815451d450db3a52c786dafb8fcacf592530728e9","first_seen":"2025-11-07T14:13:50.811587Z","last_seen":"2026-05-17T04:16:31.192803Z","times_seen":24,"resource_available":false,"data":null}},"time_used":136,"timings":{"blocked":81,"dns":0,"connect":0,"send":0,"wait":53,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"easy-image.b-cdn.net/users/male/77.jpg","fqdn":"easy-image.b-cdn.net","domain":"b-cdn.net","tld":"net"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://spinmax-portal.xyz/rrrausz?lead_id=1sjos4f.640f.1ar405c\u0026sub1=\u0026sub2=\u0026sub3=\u0026sub4=\u0026sub5=\u0026sub6=\u0026sub15=\u0026sub16=\u0026sub17=\u0026sub18=\u0026sub19=\u0026sub20=\u0026key=\u0026ln=EN\u0026sub_id_30=open_pwa","date":"2026-04-15T05:01:22.742Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.b-cdn.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 06 Nov 2025 00:00:00 GMT","end":"Wed, 11 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"92:9B:37:29:B4:2D:AB:EB:68:07:7B:03:B2:80:2E:5B:53:CE:AD:E7","sha256":"51:6F:86:36:A1:23:32:72:AA:0F:28:1A:81:F4:92:F8:82:35:42:13:BA:4C:21:2D:80:C5:BB:BF:19:04:1D:32"}}},"request":{"raw":"GET /users/male/77.jpg HTTP/1.1\r\nHost: easy-image.b-cdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://spinmax-portal.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 15 Apr 2026 05:01:22 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 26225\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 2442763\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=0\r\netag: \"67ed0551-6671\"\r\nlast-modified: Wed, 02 Apr 2025 09:37:21 GMT\r\ncdn-storageserver: SE-904\r\ncdn-fileserver: 1028\r\ncdn-proxyver: 1.50\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 04/15/2026 05:01:22\r\ncdn-edgestorageid: 830\r\ncdn-requestid: d5466348d41b32d20c04d9d60a705f8d\r\ncdn-cache: MISS\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":26225,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 260x390, components 3","md5":"523ea17282ee613fc9093ed92d0fdff1","sha1":"f031ed90eff840a0de70a55124b1493b1ae1eba9","sha256":"5c7272eaddc7fb6ba410590724781b7d95bab0f4c3977450407136f89281008a","sha512":"84ed62f3a7b79daf2e3bd10860b7f482a4a1dd61a1d90473be18507cc8677d954f56e0925319923bbba2803b927af808bd6c923800b837f2a767f8dbce9ed7ff","ssdeep":"768:XCFxDmxGxzDP0UmrQaOXOuW1FlsAAZzhopbHL5FgzrWFp:X+xP0J46+h2LGrG","tlshash":"dac2e1eeed23947ae258231c09361155ccb02dbdbe3665f07ae370e8667363313b494a","first_seen":"2025-09-21T02:38:11.434777Z","last_seen":"2026-05-17T04:15:01.951007Z","times_seen":20,"resource_available":false,"data":null}},"time_used":204,"timings":{"blocked":77,"dns":0,"connect":0,"send":0,"wait":91,"receive":36,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"spinmax-portal.xyz/lander/template-2025-06-16_15-51-22/images/icon_close.png","fqdn":"spinmax-portal.xyz","domain":"spinmax-portal.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://spinmax-portal.xyz/rrrausz?lead_id=1sjos4f.640f.1ar405c\u0026sub1=\u0026sub2=\u0026sub3=\u0026sub4=\u0026sub5=\u0026sub6=\u0026sub15=\u0026sub16=\u0026sub17=\u0026sub18=\u0026sub19=\u0026sub20=\u0026key=\u0026ln=EN\u0026sub_id_30=open_pwa","date":"2026-04-15T05:01:22.783Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"spinmax-portal.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 06 Apr 2026 23:06:25 GMT","end":"Mon, 06 Jul 2026 00:06:01 GMT"},"fingerprint":{"sha1":"0C:40:1A:B1:A1:36:AB:9B:6F:07:86:4D:57:6A:D9:D6:55:B9:32:56","sha256":"6C:0E:1C:B5:16:D5:EB:A1:7B:CA:88:49:AF:B3:F8:44:42:06:84:A9:8F:03:E7:B8:54:EE:98:C4:43:B8:CE:55"}}},"request":{"raw":"GET /lander/template-2025-06-16_15-51-22/images/icon_close.png HTTP/1.1\r\nHost: spinmax-portal.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://spinmax-portal.xyz/rrrausz?lead_id=1sjos4f.640f.1ar405c\u0026sub1=\u0026sub2=\u0026sub3=\u0026sub4=\u0026sub5=\u0026sub6=\u0026sub15=\u0026sub16=\u0026sub17=\u0026sub18=\u0026sub19=\u0026sub20=\u0026key=\u0026ln=EN\u0026sub_id_30=open_pwa\r\nCookie: e3b0c4_25615=3s90e142c4vf73; _token=3s90e142c4vf73.1776306149.7.e92eca5748914ba4fa973422f028bcd2; _subid=1sjos4f.640f.1ar407e\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 15 Apr 2026 05:01:23 GMT\r\ncontent-type: image/png\r\ncontent-length: 427\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nlast-modified: Mon, 16 Jun 2025 15:55:09 GMT\r\netag: \"68503e5d-1ab\"\r\nx-content-type-options: nosniff\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Dv3go0bLwy1JAa7GQ97oeMEnGJmikUrJFCE7lnAXvhe4yhbE2nab6IL5Qwc59GTRb4JRQCsU4iXsxG8Mztze%2FuCNf7mOoL57HBcNXsKWWW4SMJaiqV4MipcjzTj%2BeFOaAwXOddU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ec86458dec2120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":427,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 96 x 96, 4-bit colormap, non-interlaced","md5":"26e9ae28962f669b44198d28293dbe30","sha1":"27b6e3581b6c98fc5934f4e4af1698cab270ef7e","sha256":"f67d193e6472e73251254135e0eee99f529bb8d14c4e434d40d9e7a53a37ce9e","sha512":"dc5c4c572e3094a73106b7f014ba89fa0f27aa9b1c2603c21656eeb5f930cbc353f08f4d9a3a2e295063404f0f1d44920f4b88b401577557c2a7feaf0bfdfda5","ssdeep":"","tlshash":"82e02b8af33849bad677a09ea2353a67bb689e6564580019c41671bd47701869106056","first_seen":"2024-04-25T09:45:56Z","last_seen":"2026-06-08T12:52:08.366863Z","times_seen":254,"resource_available":false,"data":null}},"time_used":368,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":367,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"spinmax-portal.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"spinmax-portal.xyz/lander/template-2025-06-16_15-51-22/fonts/Roboto-Bold.ttf","fqdn":"spinmax-portal.xyz","domain":"spinmax-portal.xyz","tld":"xyz"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://spinmax-portal.xyz/rrrausz?lead_id=1sjos4f.640f.1ar405c\u0026sub1=\u0026sub2=\u0026sub3=\u0026sub4=\u0026sub5=\u0026sub6=\u0026sub15=\u0026sub16=\u0026sub17=\u0026sub18=\u0026sub19=\u0026sub20=\u0026key=\u0026ln=EN\u0026sub_id_30=open_pwa","date":"2026-04-15T05:01:23.207Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"spinmax-portal.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 06 Apr 2026 23:06:25 GMT","end":"Mon, 06 Jul 2026 00:06:01 GMT"},"fingerprint":{"sha1":"0C:40:1A:B1:A1:36:AB:9B:6F:07:86:4D:57:6A:D9:D6:55:B9:32:56","sha256":"6C:0E:1C:B5:16:D5:EB:A1:7B:CA:88:49:AF:B3:F8:44:42:06:84:A9:8F:03:E7:B8:54:EE:98:C4:43:B8:CE:55"}}},"request":{"raw":"GET /lander/template-2025-06-16_15-51-22/fonts/Roboto-Bold.ttf HTTP/1.1\r\nHost: spinmax-portal.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://spinmax-portal.xyz/lander/template-2025-06-16_15-51-22/style/style.css\r\nCookie: e3b0c4_25615=3s90e142c4vf73; _token=3s90e142c4vf73.1776306149.7.e92eca5748914ba4fa973422f028bcd2; _subid=1sjos4f.640f.1ar407e\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-08T18:34:25.971921Z","times_seen":16246822,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"spinmax-portal.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"spinmax-portal.xyz/","fqdn":"spinmax-portal.xyz","domain":"spinmax-portal.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-04-15T05:01:10.399Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"spinmax-portal.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 06 Apr 2026 23:06:25 GMT","end":"Mon, 06 Jul 2026 00:06:01 GMT"},"fingerprint":{"sha1":"0C:40:1A:B1:A1:36:AB:9B:6F:07:86:4D:57:6A:D9:D6:55:B9:32:56","sha256":"6C:0E:1C:B5:16:D5:EB:A1:7B:CA:88:49:AF:B3:F8:44:42:06:84:A9:8F:03:E7:B8:54:EE:98:C4:43:B8:CE:55"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: spinmax-portal.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ndate: Wed, 15 Apr 2026 05:01:18 GMT\r\ncontent-type: text/html; charset=utf-8\r\nlocation: https://spinmax-portal.xyz/rrrausz?lead_id=1sjos4f.640f.1ar405c\u0026sub1=\u0026sub2=\u0026sub3=\u0026sub4=\u0026sub5=\u0026sub6=\u0026sub15=\u0026sub16=\u0026sub17=\u0026sub18=\u0026sub19=\u0026sub20=\u0026key=\u0026ln=EN\u0026sub_id_30=open_pwa\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: no-cache, no-store, must-revalidate\r\nexpires: Wed, 15 Apr 2026 05:01:18 GMT\r\nset-cookie: e3b0c4_25615=3s90e142c4vf73; expires=Thu, 16 Apr 2026 02:22:28 GMT; path=/; domain=spinmax-portal.xyz; secure; httponly; samesite=none\r\naccess-control-allow-origin: *\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eLLX9jjXi0LxSrFo8soq329IklXp8L4qTDZi9EzlZ4LQitihKeWRkyPUZsUMIiLgP7g2YmAJk%2BpocgKceCp6vJ1AczKBjiO%2B66J9pgdLi%2F017mflh5NGjwrwdqaXU0P8rOsOqg0%3D\"}]}\r\ncf-ray: 9ec8640ca91fb503-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":92178,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-08T18:34:25.971921Z","times_seen":16246822,"resource_available":true,"data":null}},"time_used":8600,"timings":{"blocked":106,"dns":89,"connect":1,"send":0,"wait":8385,"receive":0,"ssl":15},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"spinmax-portal.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"spinmax-portal.xyz/lander/template-2025-06-16_15-51-22/images/screen_3.png","fqdn":"spinmax-portal.xyz","domain":"spinmax-portal.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://spinmax-portal.xyz/rrrausz?lead_id=1sjos4f.640f.1ar405c\u0026sub1=\u0026sub2=\u0026sub3=\u0026sub4=\u0026sub5=\u0026sub6=\u0026sub15=\u0026sub16=\u0026sub17=\u0026sub18=\u0026sub19=\u0026sub20=\u0026key=\u0026ln=EN\u0026sub_id_30=open_pwa","date":"2026-04-15T05:01:22.719Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"spinmax-portal.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 06 Apr 2026 23:06:25 GMT","end":"Mon, 06 Jul 2026 00:06:01 GMT"},"fingerprint":{"sha1":"0C:40:1A:B1:A1:36:AB:9B:6F:07:86:4D:57:6A:D9:D6:55:B9:32:56","sha256":"6C:0E:1C:B5:16:D5:EB:A1:7B:CA:88:49:AF:B3:F8:44:42:06:84:A9:8F:03:E7:B8:54:EE:98:C4:43:B8:CE:55"}}},"request":{"raw":"GET /lander/template-2025-06-16_15-51-22/images/screen_3.png HTTP/1.1\r\nHost: spinmax-portal.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://spinmax-portal.xyz/rrrausz?lead_id=1sjos4f.640f.1ar405c\u0026sub1=\u0026sub2=\u0026sub3=\u0026sub4=\u0026sub5=\u0026sub6=\u0026sub15=\u0026sub16=\u0026sub17=\u0026sub18=\u0026sub19=\u0026sub20=\u0026key=\u0026ln=EN\u0026sub_id_30=open_pwa\r\nCookie: e3b0c4_25615=3s90e142c4vf73; _token=3s90e142c4vf73.1776306149.7.e92eca5748914ba4fa973422f028bcd2; _subid=1sjos4f.640f.1ar407e\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 15 Apr 2026 05:01:23 GMT\r\ncontent-type: image/png\r\ncontent-length: 254660\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nlast-modified: Mon, 16 Jun 2025 15:55:09 GMT\r\netag: \"68503e5d-3e2c4\"\r\nx-content-type-options: nosniff\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XPL3K9uO%2Bo%2B12rn3gzdTyFWR2hbwCbAdOQcbuxmeCXH7tqE4KuqPyA4QpJtcqRJ4CpsW2o62npITG%2FcG5yPnCQKAKXlW2tB%2FU8mCw9pqeIITDkfCskXh4z9VzHoyBB58XOMioy8%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ec864589e32120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":212716,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 540 x 1080, 8-bit/color RGB, non-interlaced","md5":"c6354286c241cdb01cce82176d4b551e","sha1":"e2087be42aeef28dd86b2000849ee415cc434578","sha256":"849aa9934df0100eb971e0b9af8e98bb0b982f1581ff6d17501b52875e473d60","sha512":"381986e08cabd458d3605cb419e4218947bbd71fa91bb5dcde613d0bc27fdb5dd9f09cfadc84c0d7b419cbe530eeb55cc4a4122c32a64a67ae5aedbbfed35017","ssdeep":"6144:mRaU5ZdtKjYWQ7NPmt+Yt04tsXEkrhzV8PdIqzkUGenZs41L:uJ+Q7dm8YtZ6XE2hSPrzBmq","tlshash":"ba2422b1f4015aa1c25c4f941a4aedf0843cec8b5b199c21eddaa81f3d7bd7509dd938","first_seen":"2026-04-15T05:01:39.4897Z","last_seen":"2026-04-15T05:01:39.4897Z","times_seen":1,"resource_available":false,"data":null}},"time_used":757,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":543,"receive":214,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"spinmax-portal.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"easy-image.b-cdn.net/users/female/26.jpg","fqdn":"easy-image.b-cdn.net","domain":"b-cdn.net","tld":"net"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://spinmax-portal.xyz/rrrausz?lead_id=1sjos4f.640f.1ar405c\u0026sub1=\u0026sub2=\u0026sub3=\u0026sub4=\u0026sub5=\u0026sub6=\u0026sub15=\u0026sub16=\u0026sub17=\u0026sub18=\u0026sub19=\u0026sub20=\u0026key=\u0026ln=EN\u0026sub_id_30=open_pwa","date":"2026-04-15T05:01:22.734Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.b-cdn.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 06 Nov 2025 00:00:00 GMT","end":"Wed, 11 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"92:9B:37:29:B4:2D:AB:EB:68:07:7B:03:B2:80:2E:5B:53:CE:AD:E7","sha256":"51:6F:86:36:A1:23:32:72:AA:0F:28:1A:81:F4:92:F8:82:35:42:13:BA:4C:21:2D:80:C5:BB:BF:19:04:1D:32"}}},"request":{"raw":"GET /users/female/26.jpg HTTP/1.1\r\nHost: easy-image.b-cdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://spinmax-portal.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 15 Apr 2026 05:01:22 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 16256\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 2442763\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=0\r\netag: \"67ed0464-3f80\"\r\nlast-modified: Wed, 02 Apr 2025 09:33:24 GMT\r\ncdn-storageserver: SE-904\r\ncdn-fileserver: 582\r\ncdn-proxyver: 1.50\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 04/10/2026 02:24:15\r\ncdn-edgestorageid: 830\r\ncdn-requestid: fc692ec7c7dd8bc54c136872c1b795f3\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":16256,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 234x351, components 3","md5":"2ae0f7b634e6a47af06d395a55f54fff","sha1":"e7955e55dcd83b173bf2ef45d5bc055e7824cca7","sha256":"e0573654f649a91005c7927a318dc3499f4090652ce2a532a3f2b68fb229ea2b","sha512":"c826986627f2246c7f3ef90b4771bf2b77fa7cc9e19d6fdbaf15a6e48da58dbb747280b406e25899525f10d7582b158e7a8bf8ccbf9336aee680e604f243d1d7","ssdeep":"384:W4dL/Wd27JjMlrTnPJdHcbWsdtj1dTEXpnSHSTHzrdL67DS:hL/WdMjMFnx+b91dIQHOTH","tlshash":"d172d0835efc6010d9580cbf26e5ab8d1fda30342db9b1ba0757e1ed6b0c02c9a52d97","first_seen":"2025-08-04T05:48:20.948656Z","last_seen":"2026-05-17T04:16:31.136329Z","times_seen":22,"resource_available":false,"data":null}},"time_used":118,"timings":{"blocked":83,"dns":0,"connect":0,"send":0,"wait":34,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"easy-image.b-cdn.net/users/male/88.jpg","fqdn":"easy-image.b-cdn.net","domain":"b-cdn.net","tld":"net"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://spinmax-portal.xyz/rrrausz?lead_id=1sjos4f.640f.1ar405c\u0026sub1=\u0026sub2=\u0026sub3=\u0026sub4=\u0026sub5=\u0026sub6=\u0026sub15=\u0026sub16=\u0026sub17=\u0026sub18=\u0026sub19=\u0026sub20=\u0026key=\u0026ln=EN\u0026sub_id_30=open_pwa","date":"2026-04-15T05:01:22.745Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.b-cdn.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 06 Nov 2025 00:00:00 GMT","end":"Wed, 11 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"92:9B:37:29:B4:2D:AB:EB:68:07:7B:03:B2:80:2E:5B:53:CE:AD:E7","sha256":"51:6F:86:36:A1:23:32:72:AA:0F:28:1A:81:F4:92:F8:82:35:42:13:BA:4C:21:2D:80:C5:BB:BF:19:04:1D:32"}}},"request":{"raw":"GET /users/male/88.jpg HTTP/1.1\r\nHost: easy-image.b-cdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://spinmax-portal.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 15 Apr 2026 05:01:22 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 32580\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 2442763\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=0\r\netag: \"67ed0553-7f44\"\r\nlast-modified: Wed, 02 Apr 2025 09:37:23 GMT\r\ncdn-storageserver: SE-904\r\ncdn-fileserver: 966\r\ncdn-proxyver: 1.50\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 04/15/2026 05:01:22\r\ncdn-edgestorageid: 830\r\ncdn-requestid: fdd7db3dca309d4ade08eb0bff9c3c65\r\ncdn-cache: MISS\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":32580,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 342x228, components 3","md5":"23f73105e197fcc7b8c59e5cc6cd9e6e","sha1":"79ae0156cfabc8873eef1a010a9ccaa60c9f1020","sha256":"1d051c4ea64c660eacc7691f26c3005e0d3c8e868a62c5ab8883a115a50a2f20","sha512":"c5582276a5dcab9f6ef0efc064d89c8d64b52ff1a859fd67705e539d3016641830950aa20c5a15336405915fb088b6d20437842dbeee740d25ede8f6c9fc88ab","ssdeep":"768:Re2EKedaB7kj7JwYxjVcm0a/8lINjFubeknPYkoDyrJz:R38daBk/GYtV/NjFUnwyz","tlshash":"94e2e0634432dfe9bf8d4674269187f8b96b2bd46507430097c8aeca27f139809f3d66","first_seen":"2025-08-04T09:14:47.356601Z","last_seen":"2026-05-09T14:42:03.186073Z","times_seen":26,"resource_available":false,"data":null}},"time_used":203,"timings":{"blocked":74,"dns":0,"connect":0,"send":0,"wait":92,"receive":37,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"easy-image.b-cdn.net/app-icon/bandidos.webp","fqdn":"easy-image.b-cdn.net","domain":"b-cdn.net","tld":"net"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://spinmax-portal.xyz/rrrausz?lead_id=1sjos4f.640f.1ar405c\u0026sub1=\u0026sub2=\u0026sub3=\u0026sub4=\u0026sub5=\u0026sub6=\u0026sub15=\u0026sub16=\u0026sub17=\u0026sub18=\u0026sub19=\u0026sub20=\u0026key=\u0026ln=EN\u0026sub_id_30=open_pwa","date":"2026-04-15T05:01:22.748Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.b-cdn.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 06 Nov 2025 00:00:00 GMT","end":"Wed, 11 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"92:9B:37:29:B4:2D:AB:EB:68:07:7B:03:B2:80:2E:5B:53:CE:AD:E7","sha256":"51:6F:86:36:A1:23:32:72:AA:0F:28:1A:81:F4:92:F8:82:35:42:13:BA:4C:21:2D:80:C5:BB:BF:19:04:1D:32"}}},"request":{"raw":"GET /app-icon/bandidos.webp HTTP/1.1\r\nHost: easy-image.b-cdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://spinmax-portal.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 15 Apr 2026 05:01:22 GMT\r\ncontent-type: image/webp\r\ncontent-length: 188194\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 2442763\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=0\r\netag: \"66bf2844-2df22\"\r\nlast-modified: Fri, 16 Aug 2024 10:21:56 GMT\r\ncdn-storageserver: SE-904\r\ncdn-fileserver: 883\r\ncdn-proxyver: 1.50\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 04/15/2026 05:01:22\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 5549b4694002f20de05d08aadd81006f\r\ncdn-cache: MISS\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":188194,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1080x1080, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"37287497604cf78034242690430823ea","sha1":"c33816cd0f03e740eff309d511e00cf8dfcef663","sha256":"f30590bb086d3fa111881f686941f96235af94781b62970f5d54d27c4450cbf6","sha512":"3628bfccb0db0ac946302625ac2372726921760f300b2b2985feb80d50c6927089e6526ad57b05d5d2b322f4957a9bb7e4db39a7ec2623ab4c49dca49bdf6401","ssdeep":"3072:662evVAAfRb79Uh3qeMPIb7Nh+1UGs7q64RX6GHoAodczOkCEdoufSIK5T/5ckLd:66LVA2ZZM3NMP67P+Fs7yX6G3oevCkoj","tlshash":"610412521513dce8fc216a639f3ea578fcdc6e01b46993a07fa52d1b49832d4f0ba474","first_seen":"2025-07-04T00:17:04.607626Z","last_seen":"2026-06-06T22:10:36.495777Z","times_seen":32,"resource_available":false,"data":null}},"time_used":238,"timings":{"blocked":73,"dns":0,"connect":0,"send":0,"wait":96,"receive":69,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}