{"report_id":"fd65bbe5-bdb5-4efd-95c0-6c7c0bb4a2a6","version":6,"status":"done","tags":[],"date":"2026-04-15T05:39:12Z","url":{"schema":"https","addr":"fortune-slotdriftzone.click/","fqdn":"fortune-slotdriftzone.click","domain":"fortune-slotdriftzone.click","tld":"click"},"ip":{"addr":"104.21.91.227","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"fortune-slotdriftzone.click/410e1faa-4edb-4d26-b541-0490fbe9aa2f/en/?lead_info=bGVhZF91dWlkPTIwYjZiMDQ1LWEzYjAtNDMwZS05YmM0LTI4NGU4YzdjZTRiNyZvcz1XaW5kb3dzJmxhbmd1YWdlPWVuLVVTJm9mZmVyX3VybD1odHRwczovL3NhcG9nLm9ubGluZS9jbGljaz9rZXk9NjI5MGU0MmMyODUzNDVkYzk5MGEyNTQzNTJiZTA4YzUmbGVhZF9pZD0yMGI2YjA0NS1hM2IwLTQzMGUtOWJjNC0yODRlOGM3Y2U0YjcmdXRtX2NhbXBhaWduPXtzdWIxfSZ1dG1fc291cmNlPXtzdWIyfSZhY2NfaWQ9e3N1YjN9JnV0bV9jb250ZW50PXtzdWI0fSZ1dG1fbWVkaXVtPXtzdWI1fSZ1dG1fdGVybXM9e3N1YjZ9JmFkX2lkPXtzdWI3fSZmYmNsaWQ9e2ZiY2xpZH0mcGl4ZWw9e3BpeGVsfQ\u0026is_webview=false\u0026pixel=\u0026fbclid=","fqdn":"fortune-slotdriftzone.click","domain":"fortune-slotdriftzone.click","tld":"click"},"title":"Amazon Slots","dom":{"size":102106,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (17970)","md5":"7864e958b9ec87b2afc553d0e3d46317","sha1":"4bb8cfa5a823b15579b2f5b2acc6875ce728d7a5","sha256":"a3c20d3c913458e6191ebb5057d853d068f2e13432eb80975cfcf3e4b8fc2686","sha512":"f4b80bda14b0ac3b8e38ca844231f769fc18d105d1237cbf50b6711b0a6f2bfe0fd38e15b983651a3260044c8754b2235ef6fead813c0c8b8d7f8051e6124c33","ssdeep":"1536:lUP4hpw3K2pI8/v/oOaS4LJNXjDMAHqYckTnNbb4hpw3K2pI8/v/oOaS4YHZ9spr:GPcB2pIUMbxcB2pIUMYHbvlgH","tlshash":"7ca37130a9f214270143d191af669b1b6ee0fa038a4a4705bbbd87e46fdbd87ed0355c","dom_hash":"domhashf41cf68a85fc1a83c66562f49536e03b","first_seen":"2026-04-15T05:39:18.247149Z","last_seen":"2026-04-15T05:39:18.247149Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"fortune-slotdriftzone.click/","fqdn":"fortune-slotdriftzone.click","domain":"fortune-slotdriftzone.click","tld":"click"},"ip":{"addr":"104.21.91.227","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-05-20T05:39:12Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":3}},"detection":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"fortune-slotdriftzone.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"fortune-slotdriftzone.click","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"fortune-slotdriftzone.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null},"summary":[{"fqdn":"fortune-slotdriftzone.click","ip":{"addr":"172.67.181.2","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":84,"request_count":28,"received_data":1417228,"sent_data":27326,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}]},{"fqdn":"easy-image.b-cdn.net","ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"domain_registered":"2016-04-25","domain_rank":0,"first_seen":"2024-10-22T20:51:12.623208Z","last_seen":"2026-04-08T12:59:36.316818Z","alert_count":0,"request_count":18,"received_data":256195,"sent_data":8303,"comment":"","tags":null,"fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}]},{"fqdn":"betterlinks.pro","ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2025-11-01T11:14:04.853343Z","last_seen":"2026-04-10T02:22:30.093063Z","alert_count":0,"request_count":2,"received_data":3226,"sent_data":1169,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"fortune-slotdriftzone.click/410e1faa-4edb-4d26-b541-0490fbe9aa2f/en/?lead_info=bGVhZF91dWlkPTIwYjZiMDQ1LWEzYjAtNDMwZS05YmM0LTI4NGU4YzdjZTRiNyZvcz1XaW5kb3dzJmxhbmd1YWdlPWVuLVVTJm9mZmVyX3VybD1odHRwczovL3NhcG9nLm9ubGluZS9jbGljaz9rZXk9NjI5MGU0MmMyODUzNDVkYzk5MGEyNTQzNTJiZTA4YzUmbGVhZF9pZD0yMGI2YjA0NS1hM2IwLTQzMGUtOWJjNC0yODRlOGM3Y2U0YjcmdXRtX2NhbXBhaWduPXtzdWIxfSZ1dG1fc291cmNlPXtzdWIyfSZhY2NfaWQ9e3N1YjN9JnV0bV9jb250ZW50PXtzdWI0fSZ1dG1fbWVkaXVtPXtzdWI1fSZ1dG1fdGVybXM9e3N1YjZ9JmFkX2lkPXtzdWI3fSZmYmNsaWQ9e2ZiY2xpZH0mcGl4ZWw9e3BpeGVsfQ\u0026is_webview=false\u0026pixel=\u0026fbclid=","fqdn":"fortune-slotdriftzone.click","domain":"fortune-slotdriftzone.click","tld":"click"},"ip":{"addr":"172.67.181.2","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"29d0c84b9d1d8da446a6062c6a840ad9","sha1":"6d6b3a6065667c7c50d92f3889c85ed65a9ad784","sha256":"3c3cbdb71d0d2c22f504f4d63d8a6ffe8d250cde7e58300619be35b6bbab26a1","sha512":"52cfcbf2f7c3521c5a6c6120099ee6822d16e04ffbc04720da925a11242c8c2050f9cfc8d864a6d39a0036ac599f701080195a29a7c5e8d3e9308b91f9f0390f","ssdeep":"","tlshash":"428004d533c350004753117c04571cc4d034447014444d405040d4531c570315115c7c","size":37,"data":"","first_seen":"2023-04-11T21:31:25Z","last_seen":"2026-08-13T21:50:02.600274Z","times_seen":743024,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fortune-slotdriftzone.click/410e1faa-4edb-4d26-b541-0490fbe9aa2f/en/?lead_info=bGVhZF91dWlkPTIwYjZiMDQ1LWEzYjAtNDMwZS05YmM0LTI4NGU4YzdjZTRiNyZvcz1XaW5kb3dzJmxhbmd1YWdlPWVuLVVTJm9mZmVyX3VybD1odHRwczovL3NhcG9nLm9ubGluZS9jbGljaz9rZXk9NjI5MGU0MmMyODUzNDVkYzk5MGEyNTQzNTJiZTA4YzUmbGVhZF9pZD0yMGI2YjA0NS1hM2IwLTQzMGUtOWJjNC0yODRlOGM3Y2U0YjcmdXRtX2NhbXBhaWduPXtzdWIxfSZ1dG1fc291cmNlPXtzdWIyfSZhY2NfaWQ9e3N1YjN9JnV0bV9jb250ZW50PXtzdWI0fSZ1dG1fbWVkaXVtPXtzdWI1fSZ1dG1fdGVybXM9e3N1YjZ9JmFkX2lkPXtzdWI3fSZmYmNsaWQ9e2ZiY2xpZH0mcGl4ZWw9e3BpeGVsfQ\u0026is_webview=false\u0026pixel=\u0026fbclid=","fqdn":"fortune-slotdriftzone.click","domain":"fortune-slotdriftzone.click","tld":"click"},"ip":{"addr":"172.67.181.2","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"aa049e2749b8531cb8f233c2f64fc2b2","sha1":"b611a5a62c1813ae5b4763378b3a4a565556530a","sha256":"e52e51d5897d7a179089ddcf8f5de7aeb3ef4f27b054b63e937cf308b685c9e2","sha512":"fa951f3911de780608d6235a597758320388dff58cf18dd584a6941ac88cc36cac7d52caa72b678ee6f4dff47ee23955ab282714d03e713ae2bed4cb73a3c14e","ssdeep":"","tlshash":"71a0128471d6e4004b7320e40437448490396c60348c848051048c721c651108236c1c","size":79,"data":"","first_seen":"2023-04-11T21:38:58Z","last_seen":"2026-08-13T21:39:46.839805Z","times_seen":237667,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fortune-slotdriftzone.click/410e1faa-4edb-4d26-b541-0490fbe9aa2f/en/firebase-prewarm.js","fqdn":"fortune-slotdriftzone.click","domain":"fortune-slotdriftzone.click","tld":"click"},"ip":{"addr":"172.67.181.2","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"cbafb884324b60cd8489d5d5546c6175","sha1":"994ca74424072e21615f6994d542212059047903","sha256":"ec95ae1ec15462b4541bd4f757e355758936ddd6d86acf68254771ec4fde7e96","sha512":"00b442269d68b84a41774f26be81dd24d9e2f8b6bf188b88c71454c81234e0e1a19dd7bb6f0528adb7a856088b49bce702fe564a1d65d7ae78c71ddeb9f8be28","ssdeep":"","tlshash":"2d018e4b40aaf0b74e1170fcaccf6000b5be5402864fd568779ed2a59fa34a85217b4d","size":795,"data":"","first_seen":"2026-04-10T07:45:47.047027Z","last_seen":"2026-07-28T23:07:29.859806Z","times_seen":70,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fortune-slotdriftzone.click/410e1faa-4edb-4d26-b541-0490fbe9aa2f/en/js/prompt.js","fqdn":"fortune-slotdriftzone.click","domain":"fortune-slotdriftzone.click","tld":"click"},"ip":{"addr":"172.67.181.2","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"44ebc534ff78e60f1b65bf973fce02e0","sha1":"cf48af00a3fefee9965b4ac1b8857f4036a2a252","sha256":"ff398de885567f110214c619e2421fd329a9aa4b873f2480a953acc6cc61f898","sha512":"6bd669dab5a3c5daa5e34b892b3a7b156afea0bec86c91ae9ce6b46946300a65ea26d2fb8edf361bd89739f377457a12b5f93b07cf193be60a8e862c0bad8518","ssdeep":"","tlshash":"cdf022200baa18b1a01b336e8f1f1e84233174a72d225d203d5d4c8dcf816a842b2be7","size":453,"data":"","first_seen":"2025-11-01T11:14:12.483716Z","last_seen":"2026-08-07T09:07:57.011608Z","times_seen":85,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fortune-slotdriftzone.click/410e1faa-4edb-4d26-b541-0490fbe9aa2f/en/js/uaParser.js","fqdn":"fortune-slotdriftzone.click","domain":"fortune-slotdriftzone.click","tld":"click"},"ip":{"addr":"172.67.181.2","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"fae74f6b710e428ad5ca0378fc339859","sha1":"0d8f92bc5fcfb0ef72ee329f0a0763524443b5bd","sha256":"9735a83f5152c01eefe3ca9457e3b440502b60246d60f232196eb36c126f2125","sha512":"092f093612174c0f84c491a2e9ff03b4ee160ae90aa16ebd5f83e80a7c128efb6e8099629c9c88d7a330f9313a1a3d78e561d295b4fdb446dd18266fe75e46ff","ssdeep":"384:69M5d42wb/6iOD0tRqwkdZISkzVBv2ETttl9rsATHskN:69CKyzDYRqZduSAZ5tl9rsAT1","tlshash":"0b92da3ed365bf2093bee589c51790002d3a5c3adb41b0f99ae4b540e8d6db1129f7b2","size":19383,"data":"","first_seen":"2024-04-25T09:45:56Z","last_seen":"2026-08-07T09:07:57.005137Z","times_seen":288,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fortune-slotdriftzone.click/410e1faa-4edb-4d26-b541-0490fbe9aa2f/en/js/main-function.js","fqdn":"fortune-slotdriftzone.click","domain":"fortune-slotdriftzone.click","tld":"click"},"ip":{"addr":"172.67.181.2","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"60e61a7112ecd3569a75f47e98a7175b","sha1":"e7cdca8a786e3658f7ba654395210e6c0d4d3343","sha256":"0981c8296409fd1ef8c63c1b7a1a34985f0be521935db379948822560c730d06","sha512":"f805cc3a6220228f7ab49f02404b76f72c986b2a8a24232adccc5412b776acdf54bbc1c3a88a4d48162b5d13e4ed2966c4657edc40fafd7080cfcd842843dc7b","ssdeep":"3072:NYJfXILmDMc29/wf+fxmpptlkCxJH7/GesVfrruyR7aIvVA6l375e9m:N2XyXVC+fxmpptlk+b7sVfrrPFPd7X","tlshash":"dd24a42063c07cd1214b9fb77b2eb1e6ee2e6aa835480c9fe1087c54e7ea515dbd4871","size":211494,"data":"","first_seen":"2026-04-15T05:39:18.267895Z","last_seen":"2026-04-15T06:00:31.852286Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fortune-slotdriftzone.click/410e1faa-4edb-4d26-b541-0490fbe9aa2f/en/js/sendUpdateLead.js","fqdn":"fortune-slotdriftzone.click","domain":"fortune-slotdriftzone.click","tld":"click"},"ip":{"addr":"172.67.181.2","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"4e3faaacb1524bd849d2c30faab88fbc","sha1":"b117df721cc43c43c8460ce05f37dc53e7e0d041","sha256":"389a6abaef11574f8878afd69e1f7a4653852e47874fd8cf3590c7efb588d14c","sha512":"1bcc3e80f92aea292e4875f3c72cd01d62c91750d1b3036813aa8e34f8b327639dd962b88158ae3a701cf755e143adad646af253bd80166184b04fa4218c794f","ssdeep":"","tlshash":"36312192ac5a51cee6f720ac93ef0547e272405b2825d064b80d9b0daf9493d02babd9","size":1459,"data":"","first_seen":"2026-04-13T04:27:30.894569Z","last_seen":"2026-04-15T06:08:03.094535Z","times_seen":26,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fortune-slotdriftzone.click/410e1faa-4edb-4d26-b541-0490fbe9aa2f/en/js/jquery.min.js","fqdn":"fortune-slotdriftzone.click","domain":"fortune-slotdriftzone.click","tld":"click"},"ip":{"addr":"172.67.181.2","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"c9771cc3e90e18f5336eedbd0fffb2cf","sha1":"6ee8aaa3ac1f4e0ae18717a3fd26892e9f0e4cc5","sha256":"3e7501d15c3630e791c8b20392eb9dee31a9f65ce3efdde76cef5c710141ab24","sha512":"c503341fa3a7176fd10bd8cd7a5717c8faf971f87fa0c158f2d94fcd484ae3ed5031f49414dae833fb806b7365b5699c21d2e655376f69adb052b22f6f6982a7","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GK7:sHNwcv9VBQpLl88SMBQ47GK7","tlshash":"8083f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","size":87532,"data":"","first_seen":"2023-10-13T22:05:06Z","last_seen":"2026-08-13T20:08:39.656746Z","times_seen":30987,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fortune-slotdriftzone.click/410e1faa-4edb-4d26-b541-0490fbe9aa2f/en/js/translate.js","fqdn":"fortune-slotdriftzone.click","domain":"fortune-slotdriftzone.click","tld":"click"},"ip":{"addr":"172.67.181.2","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"99c0d4f9a645bf2c48bcf1789692ff1a","sha1":"90ccdd603c5035a69c77d340db76e503d6efb48c","sha256":"5d8725968df266c2a1d0d513b9e02a52d2c68ea48b23733a5b7103dbe1abca87","sha512":"04cbbe9e8ecdae18b08e3a21264e15c37efd00313e7f9cb5847fa681c25a879657e82d2a6938e17fe32454849503612a226ebd1f5dd2d9e133228fc58270d98e","ssdeep":"","tlshash":"5271974cb0f2010d5993b02efbeb6895b224985b0265fe183f5e45436fe393dd39e689","size":3637,"data":"","first_seen":"2026-04-10T07:45:47.001447Z","last_seen":"2026-08-07T09:07:56.993492Z","times_seen":78,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"fortune-slotdriftzone.click/","fqdn":"fortune-slotdriftzone.click","domain":"fortune-slotdriftzone.click","tld":"click"},"ip":{"addr":"172.67.181.2","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-04-15T05:38:51.049Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fortune-slotdriftzone.click","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 05 Apr 2026 17:33:19 GMT","end":"Sat, 04 Jul 2026 17:33:18 GMT"},"fingerprint":{"sha1":"8D:06:82:02:25:6E:FC:C3:DD:A9:EF:7E:9E:71:30:6B:C7:B0:E0:CA","sha256":"47:26:91:AA:EA:BF:3F:BF:57:5C:44:EA:35:B3:E0:10:5A:C5:8F:D6:6D:84:10:E6:27:36:10:A5:91:D2:47:83"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: fortune-slotdriftzone.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ndate: Wed, 15 Apr 2026 05:38:51 GMT\r\ncontent-length: 0\r\nlocation: https://fortune-slotdriftzone.click/410e1faa-4edb-4d26-b541-0490fbe9aa2f/en/?lead_info=bGVhZF91dWlkPTIwYjZiMDQ1LWEzYjAtNDMwZS05YmM0LTI4NGU4YzdjZTRiNyZvcz1XaW5kb3dzJmxhbmd1YWdlPWVuLVVTJm9mZmVyX3VybD1odHRwczovL3NhcG9nLm9ubGluZS9jbGljaz9rZXk9NjI5MGU0MmMyODUzNDVkYzk5MGEyNTQzNTJiZTA4YzUmbGVhZF9pZD0yMGI2YjA0NS1hM2IwLTQzMGUtOWJjNC0yODRlOGM3Y2U0YjcmdXRtX2NhbXBhaWduPXtzdWIxfSZ1dG1fc291cmNlPXtzdWIyfSZhY2NfaWQ9e3N1YjN9JnV0bV9jb250ZW50PXtzdWI0fSZ1dG1fbWVkaXVtPXtzdWI1fSZ1dG1fdGVybXM9e3N1YjZ9JmFkX2lkPXtzdWI3fSZmYmNsaWQ9e2ZiY2xpZH0mcGl4ZWw9e3BpeGVsfQ\u0026is_webview=false\u0026pixel=\u0026fbclid=\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=q%2BVlyMiYrZByBZcA%2F8lkyV5sWdn4kv1Zp5JZ%2BQ%2FcAlS5XOzO%2F9EzADsfxbOobNLU%2BbFKBfH5%2FWgIlxUQw71xBqUcodQyXQ3QgrhNyDr6rG7Cs1NuIUuSlGr%2F3NCPff8B72Adu3ah05y5AElRH1M%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 9ec89b3d7f66b4f9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":102271,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-13T21:51:57.324612Z","times_seen":17876576,"resource_available":true,"data":null}},"time_used":410,"timings":{"blocked":65,"dns":53,"connect":1,"send":0,"wait":271,"receive":0,"ssl":18},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"fortune-slotdriftzone.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"fortune-slotdriftzone.click","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"fortune-slotdriftzone.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fortune-slotdriftzone.click/410e1faa-4edb-4d26-b541-0490fbe9aa2f/en/firebase-prewarm.js","fqdn":"fortune-slotdriftzone.click","domain":"fortune-slotdriftzone.click","tld":"click"},"ip":{"addr":"172.67.181.2","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://fortune-slotdriftzone.click/410e1faa-4edb-4d26-b541-0490fbe9aa2f/en/?lead_info=bGVhZF91dWlkPTIwYjZiMDQ1LWEzYjAtNDMwZS05YmM0LTI4NGU4YzdjZTRiNyZvcz1XaW5kb3dzJmxhbmd1YWdlPWVuLVVTJm9mZmVyX3VybD1odHRwczovL3NhcG9nLm9ubGluZS9jbGljaz9rZXk9NjI5MGU0MmMyODUzNDVkYzk5MGEyNTQzNTJiZTA4YzUmbGVhZF9pZD0yMGI2YjA0NS1hM2IwLTQzMGUtOWJjNC0yODRlOGM3Y2U0YjcmdXRtX2NhbXBhaWduPXtzdWIxfSZ1dG1fc291cmNlPXtzdWIyfSZhY2NfaWQ9e3N1YjN9JnV0bV9jb250ZW50PXtzdWI0fSZ1dG1fbWVkaXVtPXtzdWI1fSZ1dG1fdGVybXM9e3N1YjZ9JmFkX2lkPXtzdWI3fSZmYmNsaWQ9e2ZiY2xpZH0mcGl4ZWw9e3BpeGVsfQ\u0026is_webview=false\u0026pixel=\u0026fbclid=","date":"2026-04-15T05:38:51.856Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fortune-slotdriftzone.click","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 05 Apr 2026 17:33:19 GMT","end":"Sat, 04 Jul 2026 17:33:18 GMT"},"fingerprint":{"sha1":"8D:06:82:02:25:6E:FC:C3:DD:A9:EF:7E:9E:71:30:6B:C7:B0:E0:CA","sha256":"47:26:91:AA:EA:BF:3F:BF:57:5C:44:EA:35:B3:E0:10:5A:C5:8F:D6:6D:84:10:E6:27:36:10:A5:91:D2:47:83"}}},"request":{"raw":"GET /410e1faa-4edb-4d26-b541-0490fbe9aa2f/en/firebase-prewarm.js HTTP/1.1\r\nHost: fortune-slotdriftzone.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fortune-slotdriftzone.click/410e1faa-4edb-4d26-b541-0490fbe9aa2f/en/?lead_info=bGVhZF91dWlkPTIwYjZiMDQ1LWEzYjAtNDMwZS05YmM0LTI4NGU4YzdjZTRiNyZvcz1XaW5kb3dzJmxhbmd1YWdlPWVuLVVTJm9mZmVyX3VybD1odHRwczovL3NhcG9nLm9ubGluZS9jbGljaz9rZXk9NjI5MGU0MmMyODUzNDVkYzk5MGEyNTQzNTJiZTA4YzUmbGVhZF9pZD0yMGI2YjA0NS1hM2IwLTQzMGUtOWJjNC0yODRlOGM3Y2U0YjcmdXRtX2NhbXBhaWduPXtzdWIxfSZ1dG1fc291cmNlPXtzdWIyfSZhY2NfaWQ9e3N1YjN9JnV0bV9jb250ZW50PXtzdWI0fSZ1dG1fbWVkaXVtPXtzdWI1fSZ1dG1fdGVybXM9e3N1YjZ9JmFkX2lkPXtzdWI3fSZmYmNsaWQ9e2ZiY2xpZH0mcGl4ZWw9e3BpeGVsfQ\u0026is_webview=false\u0026pixel=\u0026fbclid=\r\nCookie: cl_st=b\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FZxS%2BdXZO0rbOlLI0OFkro9JkcatoU3cN2WlmC%2FTWMtdj6oOhun6EE1IVp8w44%2FxQ5SkJPe9xTTsjaOrzzcvzherVFmvL5WKFRQdT1swiVypVm1Qi43PQEWYV1Xdl6qynmxmwfrQhPUrpgkR6bE%3D\"}]}\r\ncontent-encoding: br\r\ndate: Wed, 15 Apr 2026 05:38:51 GMT\r\ncontent-type: application/javascript\r\netag: W/\"69d504ea-31b\"\r\ncf-ray: 9ec89b41e87256b4-OSL\r\ncf-cache-status: HIT\r\npriority: u=2,i=?0\r\ncache-control: max-age=14400\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Tue, 07 Apr 2026 13:21:46 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":795,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (305)","md5":"cbafb884324b60cd8489d5d5546c6175","sha1":"994ca74424072e21615f6994d542212059047903","sha256":"ec95ae1ec15462b4541bd4f757e355758936ddd6d86acf68254771ec4fde7e96","sha512":"00b442269d68b84a41774f26be81dd24d9e2f8b6bf188b88c71454c81234e0e1a19dd7bb6f0528adb7a856088b49bce702fe564a1d65d7ae78c71ddeb9f8be28","ssdeep":"","tlshash":"2d018e4b40aaf0b74e1170fcaccf6000b5be5402864fd568779ed2a59fa34a85217b4d","first_seen":"2026-04-10T07:45:47.047027Z","last_seen":"2026-07-28T23:07:29.859806Z","times_seen":70,"resource_available":true,"data":null}},"time_used":52,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":52,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"fortune-slotdriftzone.click","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"fortune-slotdriftzone.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"fortune-slotdriftzone.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fortune-slotdriftzone.click/410e1faa-4edb-4d26-b541-0490fbe9aa2f/en/images/screen_1.webp?options=content","fqdn":"fortune-slotdriftzone.click","domain":"fortune-slotdriftzone.click","tld":"click"},"ip":{"addr":"172.67.181.2","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fortune-slotdriftzone.click/410e1faa-4edb-4d26-b541-0490fbe9aa2f/en/?lead_info=bGVhZF91dWlkPTIwYjZiMDQ1LWEzYjAtNDMwZS05YmM0LTI4NGU4YzdjZTRiNyZvcz1XaW5kb3dzJmxhbmd1YWdlPWVuLVVTJm9mZmVyX3VybD1odHRwczovL3NhcG9nLm9ubGluZS9jbGljaz9rZXk9NjI5MGU0MmMyODUzNDVkYzk5MGEyNTQzNTJiZTA4YzUmbGVhZF9pZD0yMGI2YjA0NS1hM2IwLTQzMGUtOWJjNC0yODRlOGM3Y2U0YjcmdXRtX2NhbXBhaWduPXtzdWIxfSZ1dG1fc291cmNlPXtzdWIyfSZhY2NfaWQ9e3N1YjN9JnV0bV9jb250ZW50PXtzdWI0fSZ1dG1fbWVkaXVtPXtzdWI1fSZ1dG1fdGVybXM9e3N1YjZ9JmFkX2lkPXtzdWI3fSZmYmNsaWQ9e2ZiY2xpZH0mcGl4ZWw9e3BpeGVsfQ\u0026is_webview=false\u0026pixel=\u0026fbclid=","date":"2026-04-15T05:38:51.873Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fortune-slotdriftzone.click","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 05 Apr 2026 17:33:19 GMT","end":"Sat, 04 Jul 2026 17:33:18 GMT"},"fingerprint":{"sha1":"8D:06:82:02:25:6E:FC:C3:DD:A9:EF:7E:9E:71:30:6B:C7:B0:E0:CA","sha256":"47:26:91:AA:EA:BF:3F:BF:57:5C:44:EA:35:B3:E0:10:5A:C5:8F:D6:6D:84:10:E6:27:36:10:A5:91:D2:47:83"}}},"request":{"raw":"GET /410e1faa-4edb-4d26-b541-0490fbe9aa2f/en/images/screen_1.webp?options=content HTTP/1.1\r\nHost: fortune-slotdriftzone.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fortune-slotdriftzone.click/410e1faa-4edb-4d26-b541-0490fbe9aa2f/en/?lead_info=bGVhZF91dWlkPTIwYjZiMDQ1LWEzYjAtNDMwZS05YmM0LTI4NGU4YzdjZTRiNyZvcz1XaW5kb3dzJmxhbmd1YWdlPWVuLVVTJm9mZmVyX3VybD1odHRwczovL3NhcG9nLm9ubGluZS9jbGljaz9rZXk9NjI5MGU0MmMyODUzNDVkYzk5MGEyNTQzNTJiZTA4YzUmbGVhZF9pZD0yMGI2YjA0NS1hM2IwLTQzMGUtOWJjNC0yODRlOGM3Y2U0YjcmdXRtX2NhbXBhaWduPXtzdWIxfSZ1dG1fc291cmNlPXtzdWIyfSZhY2NfaWQ9e3N1YjN9JnV0bV9jb250ZW50PXtzdWI0fSZ1dG1fbWVkaXVtPXtzdWI1fSZ1dG1fdGVybXM9e3N1YjZ9JmFkX2lkPXtzdWI3fSZmYmNsaWQ9e2ZiY2xpZH0mcGl4ZWw9e3BpeGVsfQ\u0026is_webview=false\u0026pixel=\u0026fbclid=\r\nCookie: cl_st=b\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 26752\r\npriority: u=4,i=?0\r\ndate: Wed, 15 Apr 2026 05:38:51 GMT\r\ncontent-type: image/webp\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ec89b41f87856b4-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\netag: \"69d504ea-6880\"\r\nlast-modified: Tue, 07 Apr 2026 13:21:46 GMT\r\nserver: cloudflare\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VT2o1rlyDYjIXoN%2BKBl7xaJa7c59zGbTk%2F5nWev7xffUaFRLXoMf%2BBdULXHN9ajdbqp%2F8qHeSxh6ArLrDEnHgpsssl1l3E0MCcpfiICLHFT07aGVm8Aos08z23E4saqTIgRCUWa%2FsuNDaf0JJn4%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":26752,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 428x768, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"3e58ac38110c697f203fe846a1e27e8c","sha1":"03800f57b50e6ab9c70ddd3801d61f9c4c5b9378","sha256":"a954261002eb467ff151a2eab93be3c5c64400bdc994ff24d7b1cbb011603013","sha512":"50af1e717b99af5c621ad084b48b28f10cdb743df11a942723f8baafabab323c1041bc393e6b9c2fee040b7bd98a2e5680ec79b0827e786702e9519578529fd3","ssdeep":"384:sCerlm/sirwpvRxE3siOVwIxO6knxfnzR5HL6s1N5IBNnf38hnmruQTu5MX0iuWa:ylm/7UvRXwIxePnP21vamaQTu5MkZMc","tlshash":"1cc2f14160bb493b799f0f8dcf88539dcdb7c962aa1598ecbbc025c56f5b4e1328d290","first_seen":"2026-04-15T05:39:18.249483Z","last_seen":"2026-04-15T06:00:31.880228Z","times_seen":2,"resource_available":false,"data":null}},"time_used":67,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":56,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"fortune-slotdriftzone.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"fortune-slotdriftzone.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"fortune-slotdriftzone.click","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fortune-slotdriftzone.click/410e1faa-4edb-4d26-b541-0490fbe9aa2f/en/images/security_icon_n-4.webp","fqdn":"fortune-slotdriftzone.click","domain":"fortune-slotdriftzone.click","tld":"click"},"ip":{"addr":"172.67.181.2","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fortune-slotdriftzone.click/410e1faa-4edb-4d26-b541-0490fbe9aa2f/en/?lead_info=bGVhZF91dWlkPTIwYjZiMDQ1LWEzYjAtNDMwZS05YmM0LTI4NGU4YzdjZTRiNyZvcz1XaW5kb3dzJmxhbmd1YWdlPWVuLVVTJm9mZmVyX3VybD1odHRwczovL3NhcG9nLm9ubGluZS9jbGljaz9rZXk9NjI5MGU0MmMyODUzNDVkYzk5MGEyNTQzNTJiZTA4YzUmbGVhZF9pZD0yMGI2YjA0NS1hM2IwLTQzMGUtOWJjNC0yODRlOGM3Y2U0YjcmdXRtX2NhbXBhaWduPXtzdWIxfSZ1dG1fc291cmNlPXtzdWIyfSZhY2NfaWQ9e3N1YjN9JnV0bV9jb250ZW50PXtzdWI0fSZ1dG1fbWVkaXVtPXtzdWI1fSZ1dG1fdGVybXM9e3N1YjZ9JmFkX2lkPXtzdWI3fSZmYmNsaWQ9e2ZiY2xpZH0mcGl4ZWw9e3BpeGVsfQ\u0026is_webview=false\u0026pixel=\u0026fbclid=","date":"2026-04-15T05:38:51.881Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fortune-slotdriftzone.click","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 05 Apr 2026 17:33:19 GMT","end":"Sat, 04 Jul 2026 17:33:18 GMT"},"fingerprint":{"sha1":"8D:06:82:02:25:6E:FC:C3:DD:A9:EF:7E:9E:71:30:6B:C7:B0:E0:CA","sha256":"47:26:91:AA:EA:BF:3F:BF:57:5C:44:EA:35:B3:E0:10:5A:C5:8F:D6:6D:84:10:E6:27:36:10:A5:91:D2:47:83"}}},"request":{"raw":"GET /410e1faa-4edb-4d26-b541-0490fbe9aa2f/en/images/security_icon_n-4.webp HTTP/1.1\r\nHost: fortune-slotdriftzone.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fortune-slotdriftzone.click/410e1faa-4edb-4d26-b541-0490fbe9aa2f/en/?lead_info=bGVhZF91dWlkPTIwYjZiMDQ1LWEzYjAtNDMwZS05YmM0LTI4NGU4YzdjZTRiNyZvcz1XaW5kb3dzJmxhbmd1YWdlPWVuLVVTJm9mZmVyX3VybD1odHRwczovL3NhcG9nLm9ubGluZS9jbGljaz9rZXk9NjI5MGU0MmMyODUzNDVkYzk5MGEyNTQzNTJiZTA4YzUmbGVhZF9pZD0yMGI2YjA0NS1hM2IwLTQzMGUtOWJjNC0yODRlOGM3Y2U0YjcmdXRtX2NhbXBhaWduPXtzdWIxfSZ1dG1fc291cmNlPXtzdWIyfSZhY2NfaWQ9e3N1YjN9JnV0bV9jb250ZW50PXtzdWI0fSZ1dG1fbWVkaXVtPXtzdWI1fSZ1dG1fdGVybXM9e3N1YjZ9JmFkX2lkPXtzdWI3fSZmYmNsaWQ9e2ZiY2xpZH0mcGl4ZWw9e3BpeGVsfQ\u0026is_webview=false\u0026pixel=\u0026fbclid=\r\nCookie: cl_st=b\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 200\r\npriority: u=4,i=?0\r\ndate: Wed, 15 Apr 2026 05:38:51 GMT\r\ncontent-type: image/webp\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ec89b41f87d56b4-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\netag: \"69d504ea-c8\"\r\nlast-modified: Tue, 07 Apr 2026 13:21:46 GMT\r\nserver: cloudflare\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1s6oHCFAjed4GB4jQ1%2FmwJeZa%2F1s4oGFRGFVl6xcmpx%2Fhz8qpZFqPo%2FGENJCriSh1alSOGu7tyk8LhhwqK1vkMVbT5m4YQII7sb3IjN461jlJNkkYUkDK67zCKNnaU3CC6zccK8QUuh2Zbk6x4E%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":200,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"df61c422ecae7409b8697262192a44fc","sha1":"d402d28a126d995638a2f434ddbd2b276887b599","sha256":"329ad3c7ac436f964c7a8cfcc6a74c859b51cdabd8974a65f0836410b11f2dc5","sha512":"32b50246ff38917d79c18c2750fdddafd991ebb72f9b1eadf0ff928fa0f083ee1c6ba74f697549e50743e89e1e9fb547e666a895801669c7ac65219691492562","ssdeep":"","tlshash":"63d023089d27c1984e281f1d15b145941e748d547102836d1111c5d8e0304102e5698d","first_seen":"2024-07-13T05:31:04Z","last_seen":"2026-08-07T09:07:56.99107Z","times_seen":845,"resource_available":false,"data":null}},"time_used":59,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":59,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"fortune-slotdriftzone.click","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"fortune-slotdriftzone.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"fortune-slotdriftzone.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"easy-image.b-cdn.net/users/female/65.jpg","fqdn":"easy-image.b-cdn.net","domain":"b-cdn.net","tld":"net"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fortune-slotdriftzone.click/410e1faa-4edb-4d26-b541-0490fbe9aa2f/en/?lead_info=bGVhZF91dWlkPTIwYjZiMDQ1LWEzYjAtNDMwZS05YmM0LTI4NGU4YzdjZTRiNyZvcz1XaW5kb3dzJmxhbmd1YWdlPWVuLVVTJm9mZmVyX3VybD1odHRwczovL3NhcG9nLm9ubGluZS9jbGljaz9rZXk9NjI5MGU0MmMyODUzNDVkYzk5MGEyNTQzNTJiZTA4YzUmbGVhZF9pZD0yMGI2YjA0NS1hM2IwLTQzMGUtOWJjNC0yODRlOGM3Y2U0YjcmdXRtX2NhbXBhaWduPXtzdWIxfSZ1dG1fc291cmNlPXtzdWIyfSZhY2NfaWQ9e3N1YjN9JnV0bV9jb250ZW50PXtzdWI0fSZ1dG1fbWVkaXVtPXtzdWI1fSZ1dG1fdGVybXM9e3N1YjZ9JmFkX2lkPXtzdWI3fSZmYmNsaWQ9e2ZiY2xpZH0mcGl4ZWw9e3BpeGVsfQ\u0026is_webview=false\u0026pixel=\u0026fbclid=","date":"2026-04-15T05:38:51.894Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.b-cdn.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 06 Nov 2025 00:00:00 GMT","end":"Wed, 11 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"92:9B:37:29:B4:2D:AB:EB:68:07:7B:03:B2:80:2E:5B:53:CE:AD:E7","sha256":"51:6F:86:36:A1:23:32:72:AA:0F:28:1A:81:F4:92:F8:82:35:42:13:BA:4C:21:2D:80:C5:BB:BF:19:04:1D:32"}}},"request":{"raw":"GET /users/female/65.jpg HTTP/1.1\r\nHost: easy-image.b-cdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fortune-slotdriftzone.click/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 15 Apr 2026 05:38:52 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 18690\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 2442763\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=0\r\netag: \"67ed0468-4902\"\r\nlast-modified: Wed, 02 Apr 2025 09:33:28 GMT\r\ncdn-storageserver: SE-583\r\ncdn-fileserver: 344\r\ncdn-proxyver: 1.50\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 04/15/2026 00:06:19\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 693fcd59337d8668f27db497c45e1b1a\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":18690,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 208x313, components 3","md5":"07cc15346c589e106ecffb3d5d52024f","sha1":"a59ebcb9d50aefcfac71a29d74d05c8fa3e8ffa6","sha256":"2e3d0a2693171e9cc26e28d8d15c304190b26c702395ff75e4a1343148bd72d4","sha512":"87ddd57702fc6411e5ad8ecd09bfc2ab694f9710b96b3246c9554cc097135111a5bc171e9e5c676de14db74d2ce138f6d269952b6dd12d68a9a6021b6b7de38c","ssdeep":"384:h+oISyv94jIif6m3iNq7VO0cVlxU5BWqqaNlIl3h6P+RU0WXNK:h0SyFWkm3iNh1kBJqaNo3h6Pf0W9K","tlshash":"5282d09b3b53248df84a7eab83eb67b166ba052f4808424c1cf515cc34ad785d8332d7","first_seen":"2025-09-19T05:20:47.300628Z","last_seen":"2026-06-27T09:54:03.823022Z","times_seen":20,"resource_available":false,"data":null}},"time_used":150,"timings":{"blocked":99,"dns":0,"connect":0,"send":0,"wait":45,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"easy-image.b-cdn.net/icon/verify-dev.webp","fqdn":"easy-image.b-cdn.net","domain":"b-cdn.net","tld":"net"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fortune-slotdriftzone.click/410e1faa-4edb-4d26-b541-0490fbe9aa2f/en/?lead_info=bGVhZF91dWlkPTIwYjZiMDQ1LWEzYjAtNDMwZS05YmM0LTI4NGU4YzdjZTRiNyZvcz1XaW5kb3dzJmxhbmd1YWdlPWVuLVVTJm9mZmVyX3VybD1odHRwczovL3NhcG9nLm9ubGluZS9jbGljaz9rZXk9NjI5MGU0MmMyODUzNDVkYzk5MGEyNTQzNTJiZTA4YzUmbGVhZF9pZD0yMGI2YjA0NS1hM2IwLTQzMGUtOWJjNC0yODRlOGM3Y2U0YjcmdXRtX2NhbXBhaWduPXtzdWIxfSZ1dG1fc291cmNlPXtzdWIyfSZhY2NfaWQ9e3N1YjN9JnV0bV9jb250ZW50PXtzdWI0fSZ1dG1fbWVkaXVtPXtzdWI1fSZ1dG1fdGVybXM9e3N1YjZ9JmFkX2lkPXtzdWI3fSZmYmNsaWQ9e2ZiY2xpZH0mcGl4ZWw9e3BpeGVsfQ\u0026is_webview=false\u0026pixel=\u0026fbclid=","date":"2026-04-15T05:38:51.866Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.b-cdn.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 06 Nov 2025 00:00:00 GMT","end":"Wed, 11 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"92:9B:37:29:B4:2D:AB:EB:68:07:7B:03:B2:80:2E:5B:53:CE:AD:E7","sha256":"51:6F:86:36:A1:23:32:72:AA:0F:28:1A:81:F4:92:F8:82:35:42:13:BA:4C:21:2D:80:C5:BB:BF:19:04:1D:32"}}},"request":{"raw":"GET /icon/verify-dev.webp HTTP/1.1\r\nHost: easy-image.b-cdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fortune-slotdriftzone.click/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 15 Apr 2026 05:38:52 GMT\r\ncontent-type: image/webp\r\ncontent-length: 5200\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 2442763\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=0\r\netag: \"66bf247d-1450\"\r\nlast-modified: Fri, 16 Aug 2024 10:05:49 GMT\r\ncdn-storageserver: SE-582\r\ncdn-fileserver: 582\r\ncdn-proxyver: 1.33\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 08/09/2025 14:29:58\r\ncdn-edgestorageid: 830\r\ncdn-requestid: a105e049a0b15ef3c12d15f7c25127b8\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":5200,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 512x512, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"24320f300aafbe3211b8b6a9a8f8dba6","sha1":"fa8ca7b908c4de4f51a45c1ef7f79582dc2fab22","sha256":"8e30d059ae297c9c231e28ccb6637a6fa5a95f8d29643a76c36ac63180d617e7","sha512":"8cb2f54d1b422833925d29a93f30b2fa9b42288550fe11de555d270c81a05609528806c98c78f6a5d0eac4b1792651a0a73dc4a0db0ae0e1ccb075d4743de0cd","ssdeep":"96:2gBnsssqWq3S22mN0yavi97D+Xw+nw8a47T7Yj99EVcw/:XnsnI3S2EJvo7D18aSH89WV","tlshash":"10b17cb7352842ccc1b86964b4275943d2204e12831e2af59b1812d7ca2a76cfad2b13","first_seen":"2025-03-26T16:41:42.434031Z","last_seen":"2026-07-29T23:24:39.09324Z","times_seen":252,"resource_available":false,"data":null}},"time_used":406,"timings":{"blocked":162,"dns":0,"connect":17,"send":0,"wait":40,"receive":3,"ssl":179},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fortune-slotdriftzone.click/410e1faa-4edb-4d26-b541-0490fbe9aa2f/en/images/screen_4.webp?options=content","fqdn":"fortune-slotdriftzone.click","domain":"fortune-slotdriftzone.click","tld":"click"},"ip":{"addr":"172.67.181.2","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fortune-slotdriftzone.click/410e1faa-4edb-4d26-b541-0490fbe9aa2f/en/?lead_info=bGVhZF91dWlkPTIwYjZiMDQ1LWEzYjAtNDMwZS05YmM0LTI4NGU4YzdjZTRiNyZvcz1XaW5kb3dzJmxhbmd1YWdlPWVuLVVTJm9mZmVyX3VybD1odHRwczovL3NhcG9nLm9ubGluZS9jbGljaz9rZXk9NjI5MGU0MmMyODUzNDVkYzk5MGEyNTQzNTJiZTA4YzUmbGVhZF9pZD0yMGI2YjA0NS1hM2IwLTQzMGUtOWJjNC0yODRlOGM3Y2U0YjcmdXRtX2NhbXBhaWduPXtzdWIxfSZ1dG1fc291cmNlPXtzdWIyfSZhY2NfaWQ9e3N1YjN9JnV0bV9jb250ZW50PXtzdWI0fSZ1dG1fbWVkaXVtPXtzdWI1fSZ1dG1fdGVybXM9e3N1YjZ9JmFkX2lkPXtzdWI3fSZmYmNsaWQ9e2ZiY2xpZH0mcGl4ZWw9e3BpeGVsfQ\u0026is_webview=false\u0026pixel=\u0026fbclid=","date":"2026-04-15T05:38:51.878Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fortune-slotdriftzone.click","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 05 Apr 2026 17:33:19 GMT","end":"Sat, 04 Jul 2026 17:33:18 GMT"},"fingerprint":{"sha1":"8D:06:82:02:25:6E:FC:C3:DD:A9:EF:7E:9E:71:30:6B:C7:B0:E0:CA","sha256":"47:26:91:AA:EA:BF:3F:BF:57:5C:44:EA:35:B3:E0:10:5A:C5:8F:D6:6D:84:10:E6:27:36:10:A5:91:D2:47:83"}}},"request":{"raw":"GET /410e1faa-4edb-4d26-b541-0490fbe9aa2f/en/images/screen_4.webp?options=content HTTP/1.1\r\nHost: fortune-slotdriftzone.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fortune-slotdriftzone.click/410e1faa-4edb-4d26-b541-0490fbe9aa2f/en/?lead_info=bGVhZF91dWlkPTIwYjZiMDQ1LWEzYjAtNDMwZS05YmM0LTI4NGU4YzdjZTRiNyZvcz1XaW5kb3dzJmxhbmd1YWdlPWVuLVVTJm9mZmVyX3VybD1odHRwczovL3NhcG9nLm9ubGluZS9jbGljaz9rZXk9NjI5MGU0MmMyODUzNDVkYzk5MGEyNTQzNTJiZTA4YzUmbGVhZF9pZD0yMGI2YjA0NS1hM2IwLTQzMGUtOWJjNC0yODRlOGM3Y2U0YjcmdXRtX2NhbXBhaWduPXtzdWIxfSZ1dG1fc291cmNlPXtzdWIyfSZhY2NfaWQ9e3N1YjN9JnV0bV9jb250ZW50PXtzdWI0fSZ1dG1fbWVkaXVtPXtzdWI1fSZ1dG1fdGVybXM9e3N1YjZ9JmFkX2lkPXtzdWI3fSZmYmNsaWQ9e2ZiY2xpZH0mcGl4ZWw9e3BpeGVsfQ\u0026is_webview=false\u0026pixel=\u0026fbclid=\r\nCookie: cl_st=b\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 40498\r\npriority: u=4,i=?0\r\ndate: Wed, 15 Apr 2026 05:38:51 GMT\r\ncontent-type: image/webp\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ec89b41f87b56b4-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\netag: \"69d504ea-9e32\"\r\nlast-modified: Tue, 07 Apr 2026 13:21:46 GMT\r\nserver: cloudflare\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bp2yq3i35tn3SV3x9xtJyg%2BEakPQ32bpGfTEY2aEiC7kiUPtGZcObz3k16crVQPlfjR%2FOy8231Bwl4nwkSudHYuoN1s4hxYyDKbgGR5aCDcYfdoMEHd8LxYBodU9BR3CqHpXwnZg%2FrHK5cMywic%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":40498,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 428x768, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"1103b7a1ea63a4b270aa7eedc370c355","sha1":"5118dd90c583e0a819115decebd25377a8d6f93e","sha256":"60f5b8d298fd7b396759f8d3505b94613d65791f616eb718d2f4875fd5aa88e9","sha512":"1b758d9485385966b03baf38ce18856af4f7abb7fdc84867487955a6fa1ac9f3441645b368bcfe71c58221d221a68230e8aabf8c63ee9ff8ae1b9ad718e67cfc","ssdeep":"768:KvjYOn+ItO4dIzmVkmwFzWZKWHE3cYNqjrysdk3qkOSHcCfq:Kv8OnltfWmVkdFzW7HE3cFjJiaDCi","tlshash":"ce03f145368c4d58eceb17f8836da0c27ebd6a12e610778c14a279fa3f540c9cee2c91","first_seen":"2026-04-15T05:39:18.263211Z","last_seen":"2026-04-15T06:00:31.835399Z","times_seen":2,"resource_available":false,"data":null}},"time_used":67,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":57,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"fortune-slotdriftzone.click","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"fortune-slotdriftzone.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"fortune-slotdriftzone.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fortune-slotdriftzone.click/410e1faa-4edb-4d26-b541-0490fbe9aa2f/en/images/security_icon_n-3.webp","fqdn":"fortune-slotdriftzone.click","domain":"fortune-slotdriftzone.click","tld":"click"},"ip":{"addr":"172.67.181.2","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fortune-slotdriftzone.click/410e1faa-4edb-4d26-b541-0490fbe9aa2f/en/?lead_info=bGVhZF91dWlkPTIwYjZiMDQ1LWEzYjAtNDMwZS05YmM0LTI4NGU4YzdjZTRiNyZvcz1XaW5kb3dzJmxhbmd1YWdlPWVuLVVTJm9mZmVyX3VybD1odHRwczovL3NhcG9nLm9ubGluZS9jbGljaz9rZXk9NjI5MGU0MmMyODUzNDVkYzk5MGEyNTQzNTJiZTA4YzUmbGVhZF9pZD0yMGI2YjA0NS1hM2IwLTQzMGUtOWJjNC0yODRlOGM3Y2U0YjcmdXRtX2NhbXBhaWduPXtzdWIxfSZ1dG1fc291cmNlPXtzdWIyfSZhY2NfaWQ9e3N1YjN9JnV0bV9jb250ZW50PXtzdWI0fSZ1dG1fbWVkaXVtPXtzdWI1fSZ1dG1fdGVybXM9e3N1YjZ9JmFkX2lkPXtzdWI3fSZmYmNsaWQ9e2ZiY2xpZH0mcGl4ZWw9e3BpeGVsfQ\u0026is_webview=false\u0026pixel=\u0026fbclid=","date":"2026-04-15T05:38:51.879Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fortune-slotdriftzone.click","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 05 Apr 2026 17:33:19 GMT","end":"Sat, 04 Jul 2026 17:33:18 GMT"},"fingerprint":{"sha1":"8D:06:82:02:25:6E:FC:C3:DD:A9:EF:7E:9E:71:30:6B:C7:B0:E0:CA","sha256":"47:26:91:AA:EA:BF:3F:BF:57:5C:44:EA:35:B3:E0:10:5A:C5:8F:D6:6D:84:10:E6:27:36:10:A5:91:D2:47:83"}}},"request":{"raw":"GET /410e1faa-4edb-4d26-b541-0490fbe9aa2f/en/images/security_icon_n-3.webp HTTP/1.1\r\nHost: fortune-slotdriftzone.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fortune-slotdriftzone.click/410e1faa-4edb-4d26-b541-0490fbe9aa2f/en/?lead_info=bGVhZF91dWlkPTIwYjZiMDQ1LWEzYjAtNDMwZS05YmM0LTI4NGU4YzdjZTRiNyZvcz1XaW5kb3dzJmxhbmd1YWdlPWVuLVVTJm9mZmVyX3VybD1odHRwczovL3NhcG9nLm9ubGluZS9jbGljaz9rZXk9NjI5MGU0MmMyODUzNDVkYzk5MGEyNTQzNTJiZTA4YzUmbGVhZF9pZD0yMGI2YjA0NS1hM2IwLTQzMGUtOWJjNC0yODRlOGM3Y2U0YjcmdXRtX2NhbXBhaWduPXtzdWIxfSZ1dG1fc291cmNlPXtzdWIyfSZhY2NfaWQ9e3N1YjN9JnV0bV9jb250ZW50PXtzdWI0fSZ1dG1fbWVkaXVtPXtzdWI1fSZ1dG1fdGVybXM9e3N1YjZ9JmFkX2lkPXtzdWI3fSZmYmNsaWQ9e2ZiY2xpZH0mcGl4ZWw9e3BpeGVsfQ\u0026is_webview=false\u0026pixel=\u0026fbclid=\r\nCookie: cl_st=b\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 200\r\npriority: u=4,i=?0\r\ndate: Wed, 15 Apr 2026 05:38:51 GMT\r\ncontent-type: image/webp\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ec89b41f87c56b4-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\netag: \"69d504ea-c8\"\r\nlast-modified: Tue, 07 Apr 2026 13:21:46 GMT\r\nserver: cloudflare\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3PRmKP59fjI89%2BOTZIAU6x4CpsyyFj04Y95Z%2FA5TUv5ThsTeXIKWEgTWx8sQr%2BpNEvy%2FAxKqUdHd1uZDxCv9SbW0S3lkLar38IEbdoO3Fstteu98j7ZrJDEYcCXx8jifIS9eT%2BFGRsrB5DAGFww%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":200,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"26ae874f3b7051bc5b112960c251080f","sha1":"1d6b38f7fe58dc79cc66cc0a3ee42caaa096b686","sha256":"8c66b3cb207515328ac21bdbbda1b90a74d7cac66267352048bfd7e4e1efe627","sha512":"88dbfe63b9a7374528308bd4ac891535c310ffc2277c3a44004772accea7115d8a1df77ecb56edf573000df4afc79e7e9524b4fb8c8e8dbac2384860306f0c31","ssdeep":"","tlshash":"2fd0224aeeae8a646d29fcb53453e630123aca8a21a4b0b0c85702e941b04f02e01c8b","first_seen":"2024-06-06T20:30:57Z","last_seen":"2026-08-07T09:07:57.021919Z","times_seen":989,"resource_available":false,"data":null}},"time_used":47,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":47,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"fortune-slotdriftzone.click","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"fortune-slotdriftzone.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"fortune-slotdriftzone.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"easy-image.b-cdn.net/users/female/11.jpg","fqdn":"easy-image.b-cdn.net","domain":"b-cdn.net","tld":"net"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fortune-slotdriftzone.click/410e1faa-4edb-4d26-b541-0490fbe9aa2f/en/?lead_info=bGVhZF91dWlkPTIwYjZiMDQ1LWEzYjAtNDMwZS05YmM0LTI4NGU4YzdjZTRiNyZvcz1XaW5kb3dzJmxhbmd1YWdlPWVuLVVTJm9mZmVyX3VybD1odHRwczovL3NhcG9nLm9ubGluZS9jbGljaz9rZXk9NjI5MGU0MmMyODUzNDVkYzk5MGEyNTQzNTJiZTA4YzUmbGVhZF9pZD0yMGI2YjA0NS1hM2IwLTQzMGUtOWJjNC0yODRlOGM3Y2U0YjcmdXRtX2NhbXBhaWduPXtzdWIxfSZ1dG1fc291cmNlPXtzdWIyfSZhY2NfaWQ9e3N1YjN9JnV0bV9jb250ZW50PXtzdWI0fSZ1dG1fbWVkaXVtPXtzdWI1fSZ1dG1fdGVybXM9e3N1YjZ9JmFkX2lkPXtzdWI3fSZmYmNsaWQ9e2ZiY2xpZH0mcGl4ZWw9e3BpeGVsfQ\u0026is_webview=false\u0026pixel=\u0026fbclid=","date":"2026-04-15T05:38:51.901Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.b-cdn.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 06 Nov 2025 00:00:00 GMT","end":"Wed, 11 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"92:9B:37:29:B4:2D:AB:EB:68:07:7B:03:B2:80:2E:5B:53:CE:AD:E7","sha256":"51:6F:86:36:A1:23:32:72:AA:0F:28:1A:81:F4:92:F8:82:35:42:13:BA:4C:21:2D:80:C5:BB:BF:19:04:1D:32"}}},"request":{"raw":"GET /users/female/11.jpg HTTP/1.1\r\nHost: easy-image.b-cdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fortune-slotdriftzone.click/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 15 Apr 2026 05:38:52 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 8643\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 2442763\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=0\r\netag: \"67ed0460-21c3\"\r\nlast-modified: Wed, 02 Apr 2025 09:33:20 GMT\r\ncdn-storageserver: SE-904\r\ncdn-fileserver: 344\r\ncdn-proxyver: 1.41\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 12/05/2025 23:29:09\r\ncdn-edgestorageid: 830\r\ncdn-requestid: e339e80caf2529873a09d6c07a4c441f\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":8643,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 205x256, components 3","md5":"9ff36fbd9924212dc79c2ef1c1d0d9b5","sha1":"db5b19b9defc0a6daae3c8c3a6dcafcc7368d843","sha256":"73c4e4f0785cd77a149b0d6faffc665874e7dcba07dcf51712ddad38e587839a","sha512":"d85d4b917630592760d3e4201c181a086d33f0ad79269cc43825ba2b69f9eff0b2c473942e4f47424a155bf0f4509cd356e36839c03acf7dcbbfb39b26b3270c","ssdeep":"192:CZHV7YyQ8bxJzHHYtsnwTPCees5zcQfqA5A+6wU/Vx9wFgUXx1OoV:CBVsMngzeItfqASwUX81OoV","tlshash":"0502af4ca34ba65ece395f343ade252b63045dbbeba05c642c7d49e9ec04f81096095e","first_seen":"2025-08-04T09:14:47.40239Z","last_seen":"2026-07-25T07:12:04.392608Z","times_seen":41,"resource_available":false,"data":null}},"time_used":161,"timings":{"blocked":93,"dns":0,"connect":0,"send":0,"wait":68,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fortune-slotdriftzone.click/410e1faa-4edb-4d26-b541-0490fbe9aa2f/en/js/jquery.min.js","fqdn":"fortune-slotdriftzone.click","domain":"fortune-slotdriftzone.click","tld":"click"},"ip":{"addr":"172.67.181.2","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://fortune-slotdriftzone.click/410e1faa-4edb-4d26-b541-0490fbe9aa2f/en/?lead_info=bGVhZF91dWlkPTIwYjZiMDQ1LWEzYjAtNDMwZS05YmM0LTI4NGU4YzdjZTRiNyZvcz1XaW5kb3dzJmxhbmd1YWdlPWVuLVVTJm9mZmVyX3VybD1odHRwczovL3NhcG9nLm9ubGluZS9jbGljaz9rZXk9NjI5MGU0MmMyODUzNDVkYzk5MGEyNTQzNTJiZTA4YzUmbGVhZF9pZD0yMGI2YjA0NS1hM2IwLTQzMGUtOWJjNC0yODRlOGM3Y2U0YjcmdXRtX2NhbXBhaWduPXtzdWIxfSZ1dG1fc291cmNlPXtzdWIyfSZhY2NfaWQ9e3N1YjN9JnV0bV9jb250ZW50PXtzdWI0fSZ1dG1fbWVkaXVtPXtzdWI1fSZ1dG1fdGVybXM9e3N1YjZ9JmFkX2lkPXtzdWI3fSZmYmNsaWQ9e2ZiY2xpZH0mcGl4ZWw9e3BpeGVsfQ\u0026is_webview=false\u0026pixel=\u0026fbclid=","date":"2026-04-15T05:38:51.905Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fortune-slotdriftzone.click","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 05 Apr 2026 17:33:19 GMT","end":"Sat, 04 Jul 2026 17:33:18 GMT"},"fingerprint":{"sha1":"8D:06:82:02:25:6E:FC:C3:DD:A9:EF:7E:9E:71:30:6B:C7:B0:E0:CA","sha256":"47:26:91:AA:EA:BF:3F:BF:57:5C:44:EA:35:B3:E0:10:5A:C5:8F:D6:6D:84:10:E6:27:36:10:A5:91:D2:47:83"}}},"request":{"raw":"GET /410e1faa-4edb-4d26-b541-0490fbe9aa2f/en/js/jquery.min.js HTTP/1.1\r\nHost: fortune-slotdriftzone.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fortune-slotdriftzone.click/410e1faa-4edb-4d26-b541-0490fbe9aa2f/en/?lead_info=bGVhZF91dWlkPTIwYjZiMDQ1LWEzYjAtNDMwZS05YmM0LTI4NGU4YzdjZTRiNyZvcz1XaW5kb3dzJmxhbmd1YWdlPWVuLVVTJm9mZmVyX3VybD1odHRwczovL3NhcG9nLm9ubGluZS9jbGljaz9rZXk9NjI5MGU0MmMyODUzNDVkYzk5MGEyNTQzNTJiZTA4YzUmbGVhZF9pZD0yMGI2YjA0NS1hM2IwLTQzMGUtOWJjNC0yODRlOGM3Y2U0YjcmdXRtX2NhbXBhaWduPXtzdWIxfSZ1dG1fc291cmNlPXtzdWIyfSZhY2NfaWQ9e3N1YjN9JnV0bV9jb250ZW50PXtzdWI0fSZ1dG1fbWVkaXVtPXtzdWI1fSZ1dG1fdGVybXM9e3N1YjZ9JmFkX2lkPXtzdWI3fSZmYmNsaWQ9e2ZiY2xpZH0mcGl4ZWw9e3BpeGVsfQ\u0026is_webview=false\u0026pixel=\u0026fbclid=\r\nCookie: cl_st=b\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MS3WL4S073%2BQpp01k7Nfxo6JWi%2F67YkEnzkz%2BMlZANAi3c83D9qYay9d7qvk8p5ypEsInwS6w1LW%2F3dIccZzcZrA%2F6h4dcrmO71FzrzYxBdkpDNF31ZDsM%2FW0QqmW3Vtpkos%2B9bSnee4PtBSEdI%3D\"}]}\r\ncontent-encoding: br\r\ndate: Wed, 15 Apr 2026 05:38:51 GMT\r\ncontent-type: application/javascript\r\netag: W/\"69d504ea-155ec\"\r\ncf-ray: 9ec89b42288256b4-OSL\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\ncache-control: max-age=14400\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Tue, 07 Apr 2026 13:21:46 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":87532,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"c9771cc3e90e18f5336eedbd0fffb2cf","sha1":"6ee8aaa3ac1f4e0ae18717a3fd26892e9f0e4cc5","sha256":"3e7501d15c3630e791c8b20392eb9dee31a9f65ce3efdde76cef5c710141ab24","sha512":"c503341fa3a7176fd10bd8cd7a5717c8faf971f87fa0c158f2d94fcd484ae3ed5031f49414dae833fb806b7365b5699c21d2e655376f69adb052b22f6f6982a7","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GK7:sHNwcv9VBQpLl88SMBQ47GK7","tlshash":"8083f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","first_seen":"2023-10-13T22:05:06Z","last_seen":"2026-08-13T20:08:39.656746Z","times_seen":30987,"resource_available":true,"data":null}},"time_used":56,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":56,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"fortune-slotdriftzone.click","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"fortune-slotdriftzone.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"fortune-slotdriftzone.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fortune-slotdriftzone.click/410e1faa-4edb-4d26-b541-0490fbe9aa2f/en/js/translate.js","fqdn":"fortune-slotdriftzone.click","domain":"fortune-slotdriftzone.click","tld":"click"},"ip":{"addr":"172.67.181.2","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://fortune-slotdriftzone.click/410e1faa-4edb-4d26-b541-0490fbe9aa2f/en/?lead_info=bGVhZF91dWlkPTIwYjZiMDQ1LWEzYjAtNDMwZS05YmM0LTI4NGU4YzdjZTRiNyZvcz1XaW5kb3dzJmxhbmd1YWdlPWVuLVVTJm9mZmVyX3VybD1odHRwczovL3NhcG9nLm9ubGluZS9jbGljaz9rZXk9NjI5MGU0MmMyODUzNDVkYzk5MGEyNTQzNTJiZTA4YzUmbGVhZF9pZD0yMGI2YjA0NS1hM2IwLTQzMGUtOWJjNC0yODRlOGM3Y2U0YjcmdXRtX2NhbXBhaWduPXtzdWIxfSZ1dG1fc291cmNlPXtzdWIyfSZhY2NfaWQ9e3N1YjN9JnV0bV9jb250ZW50PXtzdWI0fSZ1dG1fbWVkaXVtPXtzdWI1fSZ1dG1fdGVybXM9e3N1YjZ9JmFkX2lkPXtzdWI3fSZmYmNsaWQ9e2ZiY2xpZH0mcGl4ZWw9e3BpeGVsfQ\u0026is_webview=false\u0026pixel=\u0026fbclid=","date":"2026-04-15T05:38:51.907Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fortune-slotdriftzone.click","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 05 Apr 2026 17:33:19 GMT","end":"Sat, 04 Jul 2026 17:33:18 GMT"},"fingerprint":{"sha1":"8D:06:82:02:25:6E:FC:C3:DD:A9:EF:7E:9E:71:30:6B:C7:B0:E0:CA","sha256":"47:26:91:AA:EA:BF:3F:BF:57:5C:44:EA:35:B3:E0:10:5A:C5:8F:D6:6D:84:10:E6:27:36:10:A5:91:D2:47:83"}}},"request":{"raw":"GET /410e1faa-4edb-4d26-b541-0490fbe9aa2f/en/js/translate.js HTTP/1.1\r\nHost: fortune-slotdriftzone.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fortune-slotdriftzone.click/410e1faa-4edb-4d26-b541-0490fbe9aa2f/en/?lead_info=bGVhZF91dWlkPTIwYjZiMDQ1LWEzYjAtNDMwZS05YmM0LTI4NGU4YzdjZTRiNyZvcz1XaW5kb3dzJmxhbmd1YWdlPWVuLVVTJm9mZmVyX3VybD1odHRwczovL3NhcG9nLm9ubGluZS9jbGljaz9rZXk9NjI5MGU0MmMyODUzNDVkYzk5MGEyNTQzNTJiZTA4YzUmbGVhZF9pZD0yMGI2YjA0NS1hM2IwLTQzMGUtOWJjNC0yODRlOGM3Y2U0YjcmdXRtX2NhbXBhaWduPXtzdWIxfSZ1dG1fc291cmNlPXtzdWIyfSZhY2NfaWQ9e3N1YjN9JnV0bV9jb250ZW50PXtzdWI0fSZ1dG1fbWVkaXVtPXtzdWI1fSZ1dG1fdGVybXM9e3N1YjZ9JmFkX2lkPXtzdWI3fSZmYmNsaWQ9e2ZiY2xpZH0mcGl4ZWw9e3BpeGVsfQ\u0026is_webview=false\u0026pixel=\u0026fbclid=\r\nCookie: cl_st=b\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FyKykRxi0XU2DSYMvZXbJ9iA%2Brv5YWVbSNG0Q95HVEv9RiTxmbaNEpi0%2F7gtfF98kyU1h4mdYgWacga1avQQnQ0fuauZ2AmGEl6DhaywZ8fxahhGuol2QI9wbVTJk5tXzKWUsf%2F9HEIEIELV4Lw%3D\"}]}\r\ncontent-encoding: br\r\ndate: Wed, 15 Apr 2026 05:38:51 GMT\r\ncontent-type: application/javascript\r\netag: W/\"69d504ea-e35\"\r\ncf-ray: 9ec89b42288556b4-OSL\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\ncache-control: max-age=14400\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Tue, 07 Apr 2026 13:21:46 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3637,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"99c0d4f9a645bf2c48bcf1789692ff1a","sha1":"90ccdd603c5035a69c77d340db76e503d6efb48c","sha256":"5d8725968df266c2a1d0d513b9e02a52d2c68ea48b23733a5b7103dbe1abca87","sha512":"04cbbe9e8ecdae18b08e3a21264e15c37efd00313e7f9cb5847fa681c25a879657e82d2a6938e17fe32454849503612a226ebd1f5dd2d9e133228fc58270d98e","ssdeep":"","tlshash":"5271974cb0f2010d5993b02efbeb6895b224985b0265fe183f5e45436fe393dd39e689","first_seen":"2026-04-10T07:45:47.001447Z","last_seen":"2026-08-07T09:07:56.993492Z","times_seen":78,"resource_available":true,"data":null}},"time_used":55,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":55,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"fortune-slotdriftzone.click","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"fortune-slotdriftzone.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"fortune-slotdriftzone.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fortune-slotdriftzone.click/410e1faa-4edb-4d26-b541-0490fbe9aa2f/en/js/main-function.js","fqdn":"fortune-slotdriftzone.click","domain":"fortune-slotdriftzone.click","tld":"click"},"ip":{"addr":"172.67.181.2","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://fortune-slotdriftzone.click/410e1faa-4edb-4d26-b541-0490fbe9aa2f/en/?lead_info=bGVhZF91dWlkPTIwYjZiMDQ1LWEzYjAtNDMwZS05YmM0LTI4NGU4YzdjZTRiNyZvcz1XaW5kb3dzJmxhbmd1YWdlPWVuLVVTJm9mZmVyX3VybD1odHRwczovL3NhcG9nLm9ubGluZS9jbGljaz9rZXk9NjI5MGU0MmMyODUzNDVkYzk5MGEyNTQzNTJiZTA4YzUmbGVhZF9pZD0yMGI2YjA0NS1hM2IwLTQzMGUtOWJjNC0yODRlOGM3Y2U0YjcmdXRtX2NhbXBhaWduPXtzdWIxfSZ1dG1fc291cmNlPXtzdWIyfSZhY2NfaWQ9e3N1YjN9JnV0bV9jb250ZW50PXtzdWI0fSZ1dG1fbWVkaXVtPXtzdWI1fSZ1dG1fdGVybXM9e3N1YjZ9JmFkX2lkPXtzdWI3fSZmYmNsaWQ9e2ZiY2xpZH0mcGl4ZWw9e3BpeGVsfQ\u0026is_webview=false\u0026pixel=\u0026fbclid=","date":"2026-04-15T05:38:51.910Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fortune-slotdriftzone.click","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 05 Apr 2026 17:33:19 GMT","end":"Sat, 04 Jul 2026 17:33:18 GMT"},"fingerprint":{"sha1":"8D:06:82:02:25:6E:FC:C3:DD:A9:EF:7E:9E:71:30:6B:C7:B0:E0:CA","sha256":"47:26:91:AA:EA:BF:3F:BF:57:5C:44:EA:35:B3:E0:10:5A:C5:8F:D6:6D:84:10:E6:27:36:10:A5:91:D2:47:83"}}},"request":{"raw":"GET /410e1faa-4edb-4d26-b541-0490fbe9aa2f/en/js/main-function.js HTTP/1.1\r\nHost: fortune-slotdriftzone.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fortune-slotdriftzone.click/410e1faa-4edb-4d26-b541-0490fbe9aa2f/en/?lead_info=bGVhZF91dWlkPTIwYjZiMDQ1LWEzYjAtNDMwZS05YmM0LTI4NGU4YzdjZTRiNyZvcz1XaW5kb3dzJmxhbmd1YWdlPWVuLVVTJm9mZmVyX3VybD1odHRwczovL3NhcG9nLm9ubGluZS9jbGljaz9rZXk9NjI5MGU0MmMyODUzNDVkYzk5MGEyNTQzNTJiZTA4YzUmbGVhZF9pZD0yMGI2YjA0NS1hM2IwLTQzMGUtOWJjNC0yODRlOGM3Y2U0YjcmdXRtX2NhbXBhaWduPXtzdWIxfSZ1dG1fc291cmNlPXtzdWIyfSZhY2NfaWQ9e3N1YjN9JnV0bV9jb250ZW50PXtzdWI0fSZ1dG1fbWVkaXVtPXtzdWI1fSZ1dG1fdGVybXM9e3N1YjZ9JmFkX2lkPXtzdWI3fSZmYmNsaWQ9e2ZiY2xpZH0mcGl4ZWw9e3BpeGVsfQ\u0026is_webview=false\u0026pixel=\u0026fbclid=\r\nCookie: cl_st=b\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qK2aSAY2OgohAzN%2BWq6h4e8IPhDNCuNEH%2B6%2FGOYg%2Be1U%2Fq0vAo3wYpyTeqjazp%2BOuFJmnaVKNO2AKkWDXrXlbKRw2L8e0bi11lGTmRaHWPcmw26QnNsIoWSadmLfzf8BjFw0dnlFTgpYFgbshyQ%3D\"}]}\r\ncontent-encoding: br\r\ndate: Wed, 15 Apr 2026 05:38:51 GMT\r\ncontent-type: application/javascript\r\netag: W/\"69d504ea-33a26\"\r\ncf-ray: 9ec89b42288156b4-OSL\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\ncache-control: max-age=14400\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Tue, 07 Apr 2026 13:21:46 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":211494,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"60e61a7112ecd3569a75f47e98a7175b","sha1":"e7cdca8a786e3658f7ba654395210e6c0d4d3343","sha256":"0981c8296409fd1ef8c63c1b7a1a34985f0be521935db379948822560c730d06","sha512":"f805cc3a6220228f7ab49f02404b76f72c986b2a8a24232adccc5412b776acdf54bbc1c3a88a4d48162b5d13e4ed2966c4657edc40fafd7080cfcd842843dc7b","ssdeep":"3072:NYJfXILmDMc29/wf+fxmpptlkCxJH7/GesVfrruyR7aIvVA6l375e9m:N2XyXVC+fxmpptlk+b7sVfrrPFPd7X","tlshash":"dd24a42063c07cd1214b9fb77b2eb1e6ee2e6aa835480c9fe1087c54e7ea515dbd4871","first_seen":"2026-04-15T05:39:18.267895Z","last_seen":"2026-04-15T06:00:31.852286Z","times_seen":2,"resource_available":true,"data":null}},"time_used":54,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":41,"receive":13,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"fortune-slotdriftzone.click","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"fortune-slotdriftzone.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"fortune-slotdriftzone.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fortune-slotdriftzone.click/410e1faa-4edb-4d26-b541-0490fbe9aa2f/en/?lead_info=bGVhZF91dWlkPTIwYjZiMDQ1LWEzYjAtNDMwZS05YmM0LTI4NGU4YzdjZTRiNyZvcz1XaW5kb3dzJmxhbmd1YWdlPWVuLVVTJm9mZmVyX3VybD1odHRwczovL3NhcG9nLm9ubGluZS9jbGljaz9rZXk9NjI5MGU0MmMyODUzNDVkYzk5MGEyNTQzNTJiZTA4YzUmbGVhZF9pZD0yMGI2YjA0NS1hM2IwLTQzMGUtOWJjNC0yODRlOGM3Y2U0YjcmdXRtX2NhbXBhaWduPXtzdWIxfSZ1dG1fc291cmNlPXtzdWIyfSZhY2NfaWQ9e3N1YjN9JnV0bV9jb250ZW50PXtzdWI0fSZ1dG1fbWVkaXVtPXtzdWI1fSZ1dG1fdGVybXM9e3N1YjZ9JmFkX2lkPXtzdWI3fSZmYmNsaWQ9e2ZiY2xpZH0mcGl4ZWw9e3BpeGVsfQ\u0026is_webview=false\u0026pixel=\u0026fbclid=","fqdn":"fortune-slotdriftzone.click","domain":"fortune-slotdriftzone.click","tld":"click"},"ip":{"addr":"172.67.181.2","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-04-15T05:38:51.392Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fortune-slotdriftzone.click","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 05 Apr 2026 17:33:19 GMT","end":"Sat, 04 Jul 2026 17:33:18 GMT"},"fingerprint":{"sha1":"8D:06:82:02:25:6E:FC:C3:DD:A9:EF:7E:9E:71:30:6B:C7:B0:E0:CA","sha256":"47:26:91:AA:EA:BF:3F:BF:57:5C:44:EA:35:B3:E0:10:5A:C5:8F:D6:6D:84:10:E6:27:36:10:A5:91:D2:47:83"}}},"request":{"raw":"GET /410e1faa-4edb-4d26-b541-0490fbe9aa2f/en/?lead_info=bGVhZF91dWlkPTIwYjZiMDQ1LWEzYjAtNDMwZS05YmM0LTI4NGU4YzdjZTRiNyZvcz1XaW5kb3dzJmxhbmd1YWdlPWVuLVVTJm9mZmVyX3VybD1odHRwczovL3NhcG9nLm9ubGluZS9jbGljaz9rZXk9NjI5MGU0MmMyODUzNDVkYzk5MGEyNTQzNTJiZTA4YzUmbGVhZF9pZD0yMGI2YjA0NS1hM2IwLTQzMGUtOWJjNC0yODRlOGM3Y2U0YjcmdXRtX2NhbXBhaWduPXtzdWIxfSZ1dG1fc291cmNlPXtzdWIyfSZhY2NfaWQ9e3N1YjN9JnV0bV9jb250ZW50PXtzdWI0fSZ1dG1fbWVkaXVtPXtzdWI1fSZ1dG1fdGVybXM9e3N1YjZ9JmFkX2lkPXtzdWI3fSZmYmNsaWQ9e2ZiY2xpZH0mcGl4ZWw9e3BpeGVsfQ\u0026is_webview=false\u0026pixel=\u0026fbclid= HTTP/1.1\r\nHost: fortune-slotdriftzone.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 15 Apr 2026 05:38:51 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncf-ray: 9ec89b3f38cfb4f9-OSL\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\nset-cookie: cl_st=b; expires=Thu, 16 Apr 2026 05:38:51 GMT; Max-Age=86400; path=/\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yFquQbamfj%2Fes5KBok1e1TKlhY4HXruo6rdeR2k88noVdCKlv0qWrkD4FE1bzlXGdK6kjtKQW%2FWjMMfpXRZRwb2OWDDhUnZ3AQs8zfuvuQ%2BjI9MYG7lNGs38%2BA%2B5Tpjj56zG4DMjvGO7A9mN46w%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":102271,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (17970)","md5":"857530f95a2458461369e42538dc0124","sha1":"f59afc0c7eb0b17747097521e41bac400a0d6811","sha256":"322ad8e0ca04cc9d67dfe179575acbddc02e6cb1fd33e0b045c757cdf0621018","sha512":"93395eac9133c86ad212e00a15d0aca9e928260d25ef8ce5ec612cbbd382c3a662bf339a4571b6b5742b45d5972608c8a319b87467298f6a2f8432e60674b532","ssdeep":"1536:g3u/l174hpw3K2pI8/v/oOaS4LQTq8Dz2EvX+f8hTW6Gvb4hpw3K2pI8/v/oOaS6:TNcB2pIUM2kcB2pIUMYHbvlgH","tlshash":"0ca37130a9f214270143d191af669b1b6ee0fa038a4a4705bbbd87e46fdbd87ed0355c","first_seen":"2026-04-15T05:39:18.268872Z","last_seen":"2026-04-15T06:00:31.839305Z","times_seen":2,"resource_available":false,"data":null}},"time_used":155,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":155,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"fortune-slotdriftzone.click","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"fortune-slotdriftzone.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"fortune-slotdriftzone.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fortune-slotdriftzone.click/410e1faa-4edb-4d26-b541-0490fbe9aa2f/en/style/style.css","fqdn":"fortune-slotdriftzone.click","domain":"fortune-slotdriftzone.click","tld":"click"},"ip":{"addr":"172.67.181.2","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://fortune-slotdriftzone.click/410e1faa-4edb-4d26-b541-0490fbe9aa2f/en/?lead_info=bGVhZF91dWlkPTIwYjZiMDQ1LWEzYjAtNDMwZS05YmM0LTI4NGU4YzdjZTRiNyZvcz1XaW5kb3dzJmxhbmd1YWdlPWVuLVVTJm9mZmVyX3VybD1odHRwczovL3NhcG9nLm9ubGluZS9jbGljaz9rZXk9NjI5MGU0MmMyODUzNDVkYzk5MGEyNTQzNTJiZTA4YzUmbGVhZF9pZD0yMGI2YjA0NS1hM2IwLTQzMGUtOWJjNC0yODRlOGM3Y2U0YjcmdXRtX2NhbXBhaWduPXtzdWIxfSZ1dG1fc291cmNlPXtzdWIyfSZhY2NfaWQ9e3N1YjN9JnV0bV9jb250ZW50PXtzdWI0fSZ1dG1fbWVkaXVtPXtzdWI1fSZ1dG1fdGVybXM9e3N1YjZ9JmFkX2lkPXtzdWI3fSZmYmNsaWQ9e2ZiY2xpZH0mcGl4ZWw9e3BpeGVsfQ\u0026is_webview=false\u0026pixel=\u0026fbclid=","date":"2026-04-15T05:38:51.858Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fortune-slotdriftzone.click","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 05 Apr 2026 17:33:19 GMT","end":"Sat, 04 Jul 2026 17:33:18 GMT"},"fingerprint":{"sha1":"8D:06:82:02:25:6E:FC:C3:DD:A9:EF:7E:9E:71:30:6B:C7:B0:E0:CA","sha256":"47:26:91:AA:EA:BF:3F:BF:57:5C:44:EA:35:B3:E0:10:5A:C5:8F:D6:6D:84:10:E6:27:36:10:A5:91:D2:47:83"}}},"request":{"raw":"GET /410e1faa-4edb-4d26-b541-0490fbe9aa2f/en/style/style.css HTTP/1.1\r\nHost: fortune-slotdriftzone.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fortune-slotdriftzone.click/410e1faa-4edb-4d26-b541-0490fbe9aa2f/en/?lead_info=bGVhZF91dWlkPTIwYjZiMDQ1LWEzYjAtNDMwZS05YmM0LTI4NGU4YzdjZTRiNyZvcz1XaW5kb3dzJmxhbmd1YWdlPWVuLVVTJm9mZmVyX3VybD1odHRwczovL3NhcG9nLm9ubGluZS9jbGljaz9rZXk9NjI5MGU0MmMyODUzNDVkYzk5MGEyNTQzNTJiZTA4YzUmbGVhZF9pZD0yMGI2YjA0NS1hM2IwLTQzMGUtOWJjNC0yODRlOGM3Y2U0YjcmdXRtX2NhbXBhaWduPXtzdWIxfSZ1dG1fc291cmNlPXtzdWIyfSZhY2NfaWQ9e3N1YjN9JnV0bV9jb250ZW50PXtzdWI0fSZ1dG1fbWVkaXVtPXtzdWI1fSZ1dG1fdGVybXM9e3N1YjZ9JmFkX2lkPXtzdWI3fSZmYmNsaWQ9e2ZiY2xpZH0mcGl4ZWw9e3BpeGVsfQ\u0026is_webview=false\u0026pixel=\u0026fbclid=\r\nCookie: cl_st=b\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=A7zRoINQw3f9jD0PikeU%2BrBqltUcl1ZQfpIeSfClKWtqIWMprpWXl6%2BHOO%2Bl6adRblw%2FIZ%2F9Dc%2FjMu723FYHid9%2Bj%2BC7bPntxvS2ZYbxx86hPVDYC7AYkCeOAMaIDq3hJTSaN%2B%2BMWwJy%2Bm9bqU4%3D\"}]}\r\ncontent-encoding: br\r\ndate: Wed, 15 Apr 2026 05:38:51 GMT\r\ncontent-type: text/css\r\netag: W/\"69d504ea-7228\"\r\ncf-ray: 9ec89b41e87356b4-OSL\r\ncf-cache-status: HIT\r\npriority: u=2,i=?0\r\ncache-control: max-age=14400\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Tue, 07 Apr 2026 13:21:46 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":29224,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text","md5":"91d621c0f0e31fde3a9dc87f2c781664","sha1":"737355ad9e724ae621d9a64b38ee0b2804f521a9","sha256":"cf487da844ffed9cdee6ef2c012139db7e91d8c65332436eb9ceddb9b763ffd7","sha512":"b424991c1dbb3b14295d0f2de4782c85ec8ecfcde3fbdca270af1a47665e9728a086d788301a37ade7d193cdc20d3fd0556f4c517ed58852fd724a56393a68ba","ssdeep":"768:XyyOgh0FwE92m14JEtPeqFcFTTDiC3LcUOuFZBpXFVWM/wprtzP1NyNEFHwVBeYj:Xfh0m0X6JeeqydTDiGLlzjXzWKwprtzA","tlshash":"82d284d256642904b91bd8547e629f52736c9443920fccb9bbe0305ccfce2d995a3bce","first_seen":"2025-12-26T20:33:47.962717Z","last_seen":"2026-07-28T03:06:16.211398Z","times_seen":81,"resource_available":false,"data":null}},"time_used":53,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":52,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"fortune-slotdriftzone.click","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"fortune-slotdriftzone.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"fortune-slotdriftzone.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fortune-slotdriftzone.click/410e1faa-4edb-4d26-b541-0490fbe9aa2f/en/images/screen_2.webp?options=content","fqdn":"fortune-slotdriftzone.click","domain":"fortune-slotdriftzone.click","tld":"click"},"ip":{"addr":"172.67.181.2","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fortune-slotdriftzone.click/410e1faa-4edb-4d26-b541-0490fbe9aa2f/en/?lead_info=bGVhZF91dWlkPTIwYjZiMDQ1LWEzYjAtNDMwZS05YmM0LTI4NGU4YzdjZTRiNyZvcz1XaW5kb3dzJmxhbmd1YWdlPWVuLVVTJm9mZmVyX3VybD1odHRwczovL3NhcG9nLm9ubGluZS9jbGljaz9rZXk9NjI5MGU0MmMyODUzNDVkYzk5MGEyNTQzNTJiZTA4YzUmbGVhZF9pZD0yMGI2YjA0NS1hM2IwLTQzMGUtOWJjNC0yODRlOGM3Y2U0YjcmdXRtX2NhbXBhaWduPXtzdWIxfSZ1dG1fc291cmNlPXtzdWIyfSZhY2NfaWQ9e3N1YjN9JnV0bV9jb250ZW50PXtzdWI0fSZ1dG1fbWVkaXVtPXtzdWI1fSZ1dG1fdGVybXM9e3N1YjZ9JmFkX2lkPXtzdWI3fSZmYmNsaWQ9e2ZiY2xpZH0mcGl4ZWw9e3BpeGVsfQ\u0026is_webview=false\u0026pixel=\u0026fbclid=","date":"2026-04-15T05:38:51.875Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fortune-slotdriftzone.click","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 05 Apr 2026 17:33:19 GMT","end":"Sat, 04 Jul 2026 17:33:18 GMT"},"fingerprint":{"sha1":"8D:06:82:02:25:6E:FC:C3:DD:A9:EF:7E:9E:71:30:6B:C7:B0:E0:CA","sha256":"47:26:91:AA:EA:BF:3F:BF:57:5C:44:EA:35:B3:E0:10:5A:C5:8F:D6:6D:84:10:E6:27:36:10:A5:91:D2:47:83"}}},"request":{"raw":"GET /410e1faa-4edb-4d26-b541-0490fbe9aa2f/en/images/screen_2.webp?options=content HTTP/1.1\r\nHost: fortune-slotdriftzone.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fortune-slotdriftzone.click/410e1faa-4edb-4d26-b541-0490fbe9aa2f/en/?lead_info=bGVhZF91dWlkPTIwYjZiMDQ1LWEzYjAtNDMwZS05YmM0LTI4NGU4YzdjZTRiNyZvcz1XaW5kb3dzJmxhbmd1YWdlPWVuLVVTJm9mZmVyX3VybD1odHRwczovL3NhcG9nLm9ubGluZS9jbGljaz9rZXk9NjI5MGU0MmMyODUzNDVkYzk5MGEyNTQzNTJiZTA4YzUmbGVhZF9pZD0yMGI2YjA0NS1hM2IwLTQzMGUtOWJjNC0yODRlOGM3Y2U0YjcmdXRtX2NhbXBhaWduPXtzdWIxfSZ1dG1fc291cmNlPXtzdWIyfSZhY2NfaWQ9e3N1YjN9JnV0bV9jb250ZW50PXtzdWI0fSZ1dG1fbWVkaXVtPXtzdWI1fSZ1dG1fdGVybXM9e3N1YjZ9JmFkX2lkPXtzdWI3fSZmYmNsaWQ9e2ZiY2xpZH0mcGl4ZWw9e3BpeGVsfQ\u0026is_webview=false\u0026pixel=\u0026fbclid=\r\nCookie: cl_st=b\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 34870\r\npriority: u=4,i=?0\r\ndate: Wed, 15 Apr 2026 05:38:51 GMT\r\ncontent-type: image/webp\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ec89b41f87956b4-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\netag: \"69d504ea-8836\"\r\nlast-modified: Tue, 07 Apr 2026 13:21:46 GMT\r\nserver: cloudflare\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QZkFAsJSwuDdU0vfPbbpLMX7YJjMnKP%2FGa67EdOQjVRDD6sIc9j4sQf8ptcTkU%2FpHlVMIwaUOQJHzy%2FXSdD5RA1rxih8qvwXWIuh31GSFyjNaq8OIMrZ%2BvmdIDmgb9Stu2Wph9TYO1W7Ji07FPE%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":34870,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 428x768, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"583d14bd6668263df415f7b83cada24e","sha1":"ac015be7ba127ffc0271a134ee1d2365230b72f3","sha256":"f0301f1aec2e886d9bff27c7790a7801ba8a06147bcbf085f9adbbed517ea21d","sha512":"1e491bbd40514184644dec4960ecf71a3613d9447223a0d1121cfecf73cb6555710be5f129120a5fb2719a2491c4b4a69df5af66adccab664ee368a47940312d","ssdeep":"768:iieJjYALWs2FS6X1TNEbz74BI5FhnCJfjE2MpH5Qbvlgq5LnVU:1yjp2FBX1ZEbf4KIJfjExH5gdL5a","tlshash":"57f2f1e961f5a92df1b2daae143b8b9c40f0823b142d94f4055bbef15f7cad27921824","first_seen":"2026-04-15T05:39:18.271207Z","last_seen":"2026-04-15T06:00:31.881667Z","times_seen":2,"resource_available":false,"data":null}},"time_used":68,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":55,"receive":13,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"fortune-slotdriftzone.click","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"fortune-slotdriftzone.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"fortune-slotdriftzone.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"easy-image.b-cdn.net/users/female/20.jpg","fqdn":"easy-image.b-cdn.net","domain":"b-cdn.net","tld":"net"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fortune-slotdriftzone.click/410e1faa-4edb-4d26-b541-0490fbe9aa2f/en/?lead_info=bGVhZF91dWlkPTIwYjZiMDQ1LWEzYjAtNDMwZS05YmM0LTI4NGU4YzdjZTRiNyZvcz1XaW5kb3dzJmxhbmd1YWdlPWVuLVVTJm9mZmVyX3VybD1odHRwczovL3NhcG9nLm9ubGluZS9jbGljaz9rZXk9NjI5MGU0MmMyODUzNDVkYzk5MGEyNTQzNTJiZTA4YzUmbGVhZF9pZD0yMGI2YjA0NS1hM2IwLTQzMGUtOWJjNC0yODRlOGM3Y2U0YjcmdXRtX2NhbXBhaWduPXtzdWIxfSZ1dG1fc291cmNlPXtzdWIyfSZhY2NfaWQ9e3N1YjN9JnV0bV9jb250ZW50PXtzdWI0fSZ1dG1fbWVkaXVtPXtzdWI1fSZ1dG1fdGVybXM9e3N1YjZ9JmFkX2lkPXtzdWI3fSZmYmNsaWQ9e2ZiY2xpZH0mcGl4ZWw9e3BpeGVsfQ\u0026is_webview=false\u0026pixel=\u0026fbclid=","date":"2026-04-15T05:38:51.887Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.b-cdn.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 06 Nov 2025 00:00:00 GMT","end":"Wed, 11 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"92:9B:37:29:B4:2D:AB:EB:68:07:7B:03:B2:80:2E:5B:53:CE:AD:E7","sha256":"51:6F:86:36:A1:23:32:72:AA:0F:28:1A:81:F4:92:F8:82:35:42:13:BA:4C:21:2D:80:C5:BB:BF:19:04:1D:32"}}},"request":{"raw":"GET /users/female/20.jpg HTTP/1.1\r\nHost: easy-image.b-cdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fortune-slotdriftzone.click/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 15 Apr 2026 05:38:52 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 10043\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 2442763\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=0\r\netag: \"67ed0461-273b\"\r\nlast-modified: Wed, 02 Apr 2025 09:33:21 GMT\r\ncdn-storageserver: SE-582\r\ncdn-fileserver: 966\r\ncdn-proxyver: 1.50\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 04/15/2026 05:38:47\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 4058fd5f7d61eea93a7eaeccb77483b5\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":10043,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 231x289, components 1","md5":"5876ec38abe0c1eb46f951c619e0c7b8","sha1":"dbb4f97f9b212be2f5e9f7c0a684a31ce0528d7e","sha256":"3fe0db952d576365f3ff1f9794b920c713854ab773677a991a19c28091e26187","sha512":"60c98d5575f7ffba3203fd8bc714e0f2217300d02a156efb8b69d455ca65a7554c3f800270a4d70944ceffa25c95dc882c95d1545d58cd0f84fe79fda63a63d5","ssdeep":"192:TMzNB/n8nIw1FwNL3LHq1Cs6BkW8PU3DK16EtE5KUTs7gorCvy3epNA8nJkHaH:gTn8h1FwL3LKIsBWEU386qMWgaCvlBuK","tlshash":"cc22be112003caa4e2a472dc4de34726ed9443cf75aa42e87552c541e76d3b2abcfd9d","first_seen":"2025-08-04T09:14:47.409257Z","last_seen":"2026-07-25T07:12:04.385697Z","times_seen":20,"resource_available":false,"data":null}},"time_used":128,"timings":{"blocked":106,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"easy-image.b-cdn.net/users/female/95.jpg","fqdn":"easy-image.b-cdn.net","domain":"b-cdn.net","tld":"net"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fortune-slotdriftzone.click/410e1faa-4edb-4d26-b541-0490fbe9aa2f/en/?lead_info=bGVhZF91dWlkPTIwYjZiMDQ1LWEzYjAtNDMwZS05YmM0LTI4NGU4YzdjZTRiNyZvcz1XaW5kb3dzJmxhbmd1YWdlPWVuLVVTJm9mZmVyX3VybD1odHRwczovL3NhcG9nLm9ubGluZS9jbGljaz9rZXk9NjI5MGU0MmMyODUzNDVkYzk5MGEyNTQzNTJiZTA4YzUmbGVhZF9pZD0yMGI2YjA0NS1hM2IwLTQzMGUtOWJjNC0yODRlOGM3Y2U0YjcmdXRtX2NhbXBhaWduPXtzdWIxfSZ1dG1fc291cmNlPXtzdWIyfSZhY2NfaWQ9e3N1YjN9JnV0bV9jb250ZW50PXtzdWI0fSZ1dG1fbWVkaXVtPXtzdWI1fSZ1dG1fdGVybXM9e3N1YjZ9JmFkX2lkPXtzdWI3fSZmYmNsaWQ9e2ZiY2xpZH0mcGl4ZWw9e3BpeGVsfQ\u0026is_webview=false\u0026pixel=\u0026fbclid=","date":"2026-04-15T05:38:51.899Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.b-cdn.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 06 Nov 2025 00:00:00 GMT","end":"Wed, 11 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"92:9B:37:29:B4:2D:AB:EB:68:07:7B:03:B2:80:2E:5B:53:CE:AD:E7","sha256":"51:6F:86:36:A1:23:32:72:AA:0F:28:1A:81:F4:92:F8:82:35:42:13:BA:4C:21:2D:80:C5:BB:BF:19:04:1D:32"}}},"request":{"raw":"GET /users/female/95.jpg HTTP/1.1\r\nHost: easy-image.b-cdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fortune-slotdriftzone.click/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 15 Apr 2026 05:38:52 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 22464\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 2442763\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=0\r\netag: \"67ed046d-57c0\"\r\nlast-modified: Wed, 02 Apr 2025 09:33:33 GMT\r\ncdn-storageserver: SE-583\r\ncdn-fileserver: 966\r\ncdn-proxyver: 1.41\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 12/18/2025 16:24:05\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 94cd45db8bfb4c07575eab7e32008148\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":22464,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 328x410, components 3","md5":"ab116133a0a83c524bb0f92c4a562f56","sha1":"8a5c886a3cd8e6f6bcdeb9ea7127cd27001f61a4","sha256":"3c805f1e5dcf430cdc1a16f4fca9fd43c37cb8b1fc0152bb85576a89df337d51","sha512":"cdbf79d9f0f44468395f07c55273639c8fa1bb18eede5b6c5e74bbf28688d60c7d70be8c5628c22774932ec5fed15499cd02b3c7bd7d6acda0b4c41e80f3c142","ssdeep":"384:qn54glFbgITnbcNd457WFbfO6/MwCdnq+pH5Y5tSNHU0YwSv:qhEMnbO45abZ/Mtnqia5tSxU0YwSv","tlshash":"9fa2e1b227f8805c1c36b735df9b05a40e80a97c5e9bcb1928b02ff5d5e049a6405dc9","first_seen":"2025-08-04T09:14:47.307854Z","last_seen":"2026-07-03T03:37:38.802444Z","times_seen":29,"resource_available":false,"data":null}},"time_used":163,"timings":{"blocked":95,"dns":0,"connect":0,"send":0,"wait":67,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fortune-slotdriftzone.click/410e1faa-4edb-4d26-b541-0490fbe9aa2f/en/images/icon_point.svg","fqdn":"fortune-slotdriftzone.click","domain":"fortune-slotdriftzone.click","tld":"click"},"ip":{"addr":"172.67.181.2","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fortune-slotdriftzone.click/410e1faa-4edb-4d26-b541-0490fbe9aa2f/en/?lead_info=bGVhZF91dWlkPTIwYjZiMDQ1LWEzYjAtNDMwZS05YmM0LTI4NGU4YzdjZTRiNyZvcz1XaW5kb3dzJmxhbmd1YWdlPWVuLVVTJm9mZmVyX3VybD1odHRwczovL3NhcG9nLm9ubGluZS9jbGljaz9rZXk9NjI5MGU0MmMyODUzNDVkYzk5MGEyNTQzNTJiZTA4YzUmbGVhZF9pZD0yMGI2YjA0NS1hM2IwLTQzMGUtOWJjNC0yODRlOGM3Y2U0YjcmdXRtX2NhbXBhaWduPXtzdWIxfSZ1dG1fc291cmNlPXtzdWIyfSZhY2NfaWQ9e3N1YjN9JnV0bV9jb250ZW50PXtzdWI0fSZ1dG1fbWVkaXVtPXtzdWI1fSZ1dG1fdGVybXM9e3N1YjZ9JmFkX2lkPXtzdWI3fSZmYmNsaWQ9e2ZiY2xpZH0mcGl4ZWw9e3BpeGVsfQ\u0026is_webview=false\u0026pixel=\u0026fbclid=","date":"2026-04-15T05:38:51.863Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fortune-slotdriftzone.click","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 05 Apr 2026 17:33:19 GMT","end":"Sat, 04 Jul 2026 17:33:18 GMT"},"fingerprint":{"sha1":"8D:06:82:02:25:6E:FC:C3:DD:A9:EF:7E:9E:71:30:6B:C7:B0:E0:CA","sha256":"47:26:91:AA:EA:BF:3F:BF:57:5C:44:EA:35:B3:E0:10:5A:C5:8F:D6:6D:84:10:E6:27:36:10:A5:91:D2:47:83"}}},"request":{"raw":"GET /410e1faa-4edb-4d26-b541-0490fbe9aa2f/en/images/icon_point.svg HTTP/1.1\r\nHost: fortune-slotdriftzone.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fortune-slotdriftzone.click/410e1faa-4edb-4d26-b541-0490fbe9aa2f/en/?lead_info=bGVhZF91dWlkPTIwYjZiMDQ1LWEzYjAtNDMwZS05YmM0LTI4NGU4YzdjZTRiNyZvcz1XaW5kb3dzJmxhbmd1YWdlPWVuLVVTJm9mZmVyX3VybD1odHRwczovL3NhcG9nLm9ubGluZS9jbGljaz9rZXk9NjI5MGU0MmMyODUzNDVkYzk5MGEyNTQzNTJiZTA4YzUmbGVhZF9pZD0yMGI2YjA0NS1hM2IwLTQzMGUtOWJjNC0yODRlOGM3Y2U0YjcmdXRtX2NhbXBhaWduPXtzdWIxfSZ1dG1fc291cmNlPXtzdWIyfSZhY2NfaWQ9e3N1YjN9JnV0bV9jb250ZW50PXtzdWI0fSZ1dG1fbWVkaXVtPXtzdWI1fSZ1dG1fdGVybXM9e3N1YjZ9JmFkX2lkPXtzdWI3fSZmYmNsaWQ9e2ZiY2xpZH0mcGl4ZWw9e3BpeGVsfQ\u0026is_webview=false\u0026pixel=\u0026fbclid=\r\nCookie: cl_st=b\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=X%2BQU31iO%2Fgu6QgAxEzxfJibOn7cgqqZlppyPf5uwdGW%2FntmWYT2WnCjkFlmUVMXyUxs%2BCkPg6LZ3xmMvv5xbZGJyumaVTAXz26Bo7Ema5vhOVzC%2Bq6pMcwLmbAVycxY9zoJf7770BN2RKgvYZNI%3D\"}]}\r\ncontent-encoding: br\r\ndate: Wed, 15 Apr 2026 05:38:51 GMT\r\ncontent-type: image/svg+xml\r\netag: W/\"69d504ea-3b5\"\r\ncf-ray: 9ec89b41e87656b4-OSL\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\ncache-control: max-age=14400\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Tue, 07 Apr 2026 13:21:46 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":949,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"0b8d819ea14a41d457702cc80af95fdc","sha1":"42648c53f7d9efd1447fc7f63ff43b7b36866012","sha256":"2cf31df5b105adeee79efb9d94fb767c0cb05a552d231835ef8c258d05fbc977","sha512":"5931f2ea2a9164cbc339d8c9ec6305db92781b9cf4f19838f749faebdeea725e3a450d963825ad47b4c55f607e8ff1410c68470eeea7802d0ecc5e9980aec695","ssdeep":"","tlshash":"c71108f3fc6a06dbda57b303ad8618a407bfb8f91347a18c5818cf3ba294154c795b20","first_seen":"2024-08-19T13:45:40.065888Z","last_seen":"2026-08-07T09:07:57.014491Z","times_seen":276,"resource_available":false,"data":null}},"time_used":61,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":61,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"fortune-slotdriftzone.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"fortune-slotdriftzone.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"fortune-slotdriftzone.click","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fortune-slotdriftzone.click/410e1faa-4edb-4d26-b541-0490fbe9aa2f/en/images/screen_3.webp?options=content","fqdn":"fortune-slotdriftzone.click","domain":"fortune-slotdriftzone.click","tld":"click"},"ip":{"addr":"172.67.181.2","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fortune-slotdriftzone.click/410e1faa-4edb-4d26-b541-0490fbe9aa2f/en/?lead_info=bGVhZF91dWlkPTIwYjZiMDQ1LWEzYjAtNDMwZS05YmM0LTI4NGU4YzdjZTRiNyZvcz1XaW5kb3dzJmxhbmd1YWdlPWVuLVVTJm9mZmVyX3VybD1odHRwczovL3NhcG9nLm9ubGluZS9jbGljaz9rZXk9NjI5MGU0MmMyODUzNDVkYzk5MGEyNTQzNTJiZTA4YzUmbGVhZF9pZD0yMGI2YjA0NS1hM2IwLTQzMGUtOWJjNC0yODRlOGM3Y2U0YjcmdXRtX2NhbXBhaWduPXtzdWIxfSZ1dG1fc291cmNlPXtzdWIyfSZhY2NfaWQ9e3N1YjN9JnV0bV9jb250ZW50PXtzdWI0fSZ1dG1fbWVkaXVtPXtzdWI1fSZ1dG1fdGVybXM9e3N1YjZ9JmFkX2lkPXtzdWI3fSZmYmNsaWQ9e2ZiY2xpZH0mcGl4ZWw9e3BpeGVsfQ\u0026is_webview=false\u0026pixel=\u0026fbclid=","date":"2026-04-15T05:38:51.877Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fortune-slotdriftzone.click","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 05 Apr 2026 17:33:19 GMT","end":"Sat, 04 Jul 2026 17:33:18 GMT"},"fingerprint":{"sha1":"8D:06:82:02:25:6E:FC:C3:DD:A9:EF:7E:9E:71:30:6B:C7:B0:E0:CA","sha256":"47:26:91:AA:EA:BF:3F:BF:57:5C:44:EA:35:B3:E0:10:5A:C5:8F:D6:6D:84:10:E6:27:36:10:A5:91:D2:47:83"}}},"request":{"raw":"GET /410e1faa-4edb-4d26-b541-0490fbe9aa2f/en/images/screen_3.webp?options=content HTTP/1.1\r\nHost: fortune-slotdriftzone.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fortune-slotdriftzone.click/410e1faa-4edb-4d26-b541-0490fbe9aa2f/en/?lead_info=bGVhZF91dWlkPTIwYjZiMDQ1LWEzYjAtNDMwZS05YmM0LTI4NGU4YzdjZTRiNyZvcz1XaW5kb3dzJmxhbmd1YWdlPWVuLVVTJm9mZmVyX3VybD1odHRwczovL3NhcG9nLm9ubGluZS9jbGljaz9rZXk9NjI5MGU0MmMyODUzNDVkYzk5MGEyNTQzNTJiZTA4YzUmbGVhZF9pZD0yMGI2YjA0NS1hM2IwLTQzMGUtOWJjNC0yODRlOGM3Y2U0YjcmdXRtX2NhbXBhaWduPXtzdWIxfSZ1dG1fc291cmNlPXtzdWIyfSZhY2NfaWQ9e3N1YjN9JnV0bV9jb250ZW50PXtzdWI0fSZ1dG1fbWVkaXVtPXtzdWI1fSZ1dG1fdGVybXM9e3N1YjZ9JmFkX2lkPXtzdWI3fSZmYmNsaWQ9e2ZiY2xpZH0mcGl4ZWw9e3BpeGVsfQ\u0026is_webview=false\u0026pixel=\u0026fbclid=\r\nCookie: cl_st=b\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 46770\r\npriority: u=4,i=?0\r\ndate: Wed, 15 Apr 2026 05:38:51 GMT\r\ncontent-type: image/webp\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ec89b41f87a56b4-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\netag: \"69d504ea-b6b2\"\r\nlast-modified: Tue, 07 Apr 2026 13:21:46 GMT\r\nserver: cloudflare\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7W2Hdu5Fv0CDmxnnlbb5H8LvJ%2F9W%2Bo%2BTZhDq8SgBW3oTh8ZzKaCrZftttlJlirL9baSMNEDDnTRaf%2BCa%2B0qE0V5vn6M2zCRQMilSvI14OaSqe7q9DsFIeaPfjteIslw8XutcZbIkOxieCDVuGtw%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":46770,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 428x768, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"8a18a15d85d9d51298ca99c08490ae95","sha1":"033b39b9d17827444355e0f9406cd8cdb99adf74","sha256":"08f70d952c3be266f507d2bba466f2853c35770284e7cb9964a72d66633791cb","sha512":"8eb62110a569b57c09927511f69ec38e030dba36a02b1129e2fb511416aeca462095549c89bfc1f4d2575af64025e051bfa6da947e172f75fee676610759ea43","ssdeep":"768:WxObbf0J1eIt0pJtn6C+HEefA2NQJOQJNIW12p6zbG4LGrKvIXxvSanDcqQ2L:WxObz0uu01V+Hb5QJ4W15aevMvhnIo","tlshash":"8f23f27c46876b25acc906273fbdf094a6350f3ecc11a6995b1fe0aac122e644f7dd21","first_seen":"2026-04-15T05:39:18.276233Z","last_seen":"2026-04-15T06:00:31.870193Z","times_seen":2,"resource_available":false,"data":null}},"time_used":61,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":43,"receive":18,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"fortune-slotdriftzone.click","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"fortune-slotdriftzone.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"fortune-slotdriftzone.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"easy-image.b-cdn.net/users/female/28.jpg","fqdn":"easy-image.b-cdn.net","domain":"b-cdn.net","tld":"net"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fortune-slotdriftzone.click/410e1faa-4edb-4d26-b541-0490fbe9aa2f/en/?lead_info=bGVhZF91dWlkPTIwYjZiMDQ1LWEzYjAtNDMwZS05YmM0LTI4NGU4YzdjZTRiNyZvcz1XaW5kb3dzJmxhbmd1YWdlPWVuLVVTJm9mZmVyX3VybD1odHRwczovL3NhcG9nLm9ubGluZS9jbGljaz9rZXk9NjI5MGU0MmMyODUzNDVkYzk5MGEyNTQzNTJiZTA4YzUmbGVhZF9pZD0yMGI2YjA0NS1hM2IwLTQzMGUtOWJjNC0yODRlOGM3Y2U0YjcmdXRtX2NhbXBhaWduPXtzdWIxfSZ1dG1fc291cmNlPXtzdWIyfSZhY2NfaWQ9e3N1YjN9JnV0bV9jb250ZW50PXtzdWI0fSZ1dG1fbWVkaXVtPXtzdWI1fSZ1dG1fdGVybXM9e3N1YjZ9JmFkX2lkPXtzdWI3fSZmYmNsaWQ9e2ZiY2xpZH0mcGl4ZWw9e3BpeGVsfQ\u0026is_webview=false\u0026pixel=\u0026fbclid=","date":"2026-04-15T05:38:51.886Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.b-cdn.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 06 Nov 2025 00:00:00 GMT","end":"Wed, 11 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"92:9B:37:29:B4:2D:AB:EB:68:07:7B:03:B2:80:2E:5B:53:CE:AD:E7","sha256":"51:6F:86:36:A1:23:32:72:AA:0F:28:1A:81:F4:92:F8:82:35:42:13:BA:4C:21:2D:80:C5:BB:BF:19:04:1D:32"}}},"request":{"raw":"GET /users/female/28.jpg HTTP/1.1\r\nHost: easy-image.b-cdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fortune-slotdriftzone.click/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 15 Apr 2026 05:38:52 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 12415\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 2442763\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=0\r\netag: \"67ed0462-307f\"\r\nlast-modified: Wed, 02 Apr 2025 09:33:22 GMT\r\ncdn-storageserver: SE-582\r\ncdn-fileserver: 966\r\ncdn-proxyver: 1.50\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 04/15/2026 05:38:45\r\ncdn-edgestorageid: 830\r\ncdn-requestid: d1fd54bc2233f3cb233f30879e5f98eb\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":12415,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 250x375, components 3","md5":"b9b4882537afd47cde9b07a1147a7396","sha1":"8f17266bac785e6971ce269b26e5ff6fcc49cba4","sha256":"cc738d87e988dcf72b5b70aa286c1a1d9e94182d6e41662d42f6c961323fd571","sha512":"d6f2a64e269443e3832d1def9eca2e359a848502b42a5dbdd393709ce95392d54e5bf661791b589940cdebc8afe082aa9a0adfcad248621a207265861a935c64","ssdeep":"384:aEsOIlblinTO8NZ7t6ThYYiGUq8qrh2RgFWu0eFpxUYY:aEFyYnTTZ7t6ThYUUqnrcGcu0eW","tlshash":"dd42c0b3d7978903ea688c7ac20a404853d583414b348fd6a98e3bfebcde804237d990","first_seen":"2025-10-26T03:10:29.07475Z","last_seen":"2026-06-24T14:33:48.216795Z","times_seen":22,"resource_available":false,"data":null}},"time_used":152,"timings":{"blocked":106,"dns":0,"connect":0,"send":0,"wait":45,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"easy-image.b-cdn.net/users/female/83.jpg","fqdn":"easy-image.b-cdn.net","domain":"b-cdn.net","tld":"net"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fortune-slotdriftzone.click/410e1faa-4edb-4d26-b541-0490fbe9aa2f/en/?lead_info=bGVhZF91dWlkPTIwYjZiMDQ1LWEzYjAtNDMwZS05YmM0LTI4NGU4YzdjZTRiNyZvcz1XaW5kb3dzJmxhbmd1YWdlPWVuLVVTJm9mZmVyX3VybD1odHRwczovL3NhcG9nLm9ubGluZS9jbGljaz9rZXk9NjI5MGU0MmMyODUzNDVkYzk5MGEyNTQzNTJiZTA4YzUmbGVhZF9pZD0yMGI2YjA0NS1hM2IwLTQzMGUtOWJjNC0yODRlOGM3Y2U0YjcmdXRtX2NhbXBhaWduPXtzdWIxfSZ1dG1fc291cmNlPXtzdWIyfSZhY2NfaWQ9e3N1YjN9JnV0bV9jb250ZW50PXtzdWI0fSZ1dG1fbWVkaXVtPXtzdWI1fSZ1dG1fdGVybXM9e3N1YjZ9JmFkX2lkPXtzdWI3fSZmYmNsaWQ9e2ZiY2xpZH0mcGl4ZWw9e3BpeGVsfQ\u0026is_webview=false\u0026pixel=\u0026fbclid=","date":"2026-04-15T05:38:51.898Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.b-cdn.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 06 Nov 2025 00:00:00 GMT","end":"Wed, 11 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"92:9B:37:29:B4:2D:AB:EB:68:07:7B:03:B2:80:2E:5B:53:CE:AD:E7","sha256":"51:6F:86:36:A1:23:32:72:AA:0F:28:1A:81:F4:92:F8:82:35:42:13:BA:4C:21:2D:80:C5:BB:BF:19:04:1D:32"}}},"request":{"raw":"GET /users/female/83.jpg HTTP/1.1\r\nHost: easy-image.b-cdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fortune-slotdriftzone.click/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 15 Apr 2026 05:38:52 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 11619\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 2442763\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=0\r\netag: \"67ed046b-2d63\"\r\nlast-modified: Wed, 02 Apr 2025 09:33:31 GMT\r\ncdn-storageserver: SE-904\r\ncdn-fileserver: 318\r\ncdn-proxyver: 1.50\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 04/15/2026 05:38:47\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 15f91a5511a6b3e9f29d3c8e2cc9f95e\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":11619,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 177x265, components 3","md5":"edd70e5552dc2e2b70471947421116b6","sha1":"754c59c80052d961759a4dbde472e06357b2300a","sha256":"c94278821241d76b58ca081241fe0550026e5ea41ab0d0368d948d0bb1be8431","sha512":"54454848f94e01f2e12447b2eb607526c0f9c1d4108bb04acdddd0ee67c2b5d52c23af122d57debca5122372e05afc1330583dc75c88ef5c8bca917d9ddc8102","ssdeep":"192:IUdeHU8j9fLxMZxVcDCAE2R8WBZxV+KiRCCm+Zk8xGoFxjImPjdtvm725Z:VeHdjI/AtR889+KECCm+ZRjImPymZ","tlshash":"a732bfe5091c43e1c6ee0968cd2abe3be14c6d4f7a816e36532520dd4f1ae136c627f9","first_seen":"2025-10-13T17:06:19.638326Z","last_seen":"2026-07-25T07:12:04.395753Z","times_seen":22,"resource_available":false,"data":null}},"time_used":160,"timings":{"blocked":96,"dns":0,"connect":0,"send":0,"wait":63,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fortune-slotdriftzone.click/410e1faa-4edb-4d26-b541-0490fbe9aa2f/en/js/uaParser.js","fqdn":"fortune-slotdriftzone.click","domain":"fortune-slotdriftzone.click","tld":"click"},"ip":{"addr":"172.67.181.2","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://fortune-slotdriftzone.click/410e1faa-4edb-4d26-b541-0490fbe9aa2f/en/?lead_info=bGVhZF91dWlkPTIwYjZiMDQ1LWEzYjAtNDMwZS05YmM0LTI4NGU4YzdjZTRiNyZvcz1XaW5kb3dzJmxhbmd1YWdlPWVuLVVTJm9mZmVyX3VybD1odHRwczovL3NhcG9nLm9ubGluZS9jbGljaz9rZXk9NjI5MGU0MmMyODUzNDVkYzk5MGEyNTQzNTJiZTA4YzUmbGVhZF9pZD0yMGI2YjA0NS1hM2IwLTQzMGUtOWJjNC0yODRlOGM3Y2U0YjcmdXRtX2NhbXBhaWduPXtzdWIxfSZ1dG1fc291cmNlPXtzdWIyfSZhY2NfaWQ9e3N1YjN9JnV0bV9jb250ZW50PXtzdWI0fSZ1dG1fbWVkaXVtPXtzdWI1fSZ1dG1fdGVybXM9e3N1YjZ9JmFkX2lkPXtzdWI3fSZmYmNsaWQ9e2ZiY2xpZH0mcGl4ZWw9e3BpeGVsfQ\u0026is_webview=false\u0026pixel=\u0026fbclid=","date":"2026-04-15T05:38:51.906Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fortune-slotdriftzone.click","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 05 Apr 2026 17:33:19 GMT","end":"Sat, 04 Jul 2026 17:33:18 GMT"},"fingerprint":{"sha1":"8D:06:82:02:25:6E:FC:C3:DD:A9:EF:7E:9E:71:30:6B:C7:B0:E0:CA","sha256":"47:26:91:AA:EA:BF:3F:BF:57:5C:44:EA:35:B3:E0:10:5A:C5:8F:D6:6D:84:10:E6:27:36:10:A5:91:D2:47:83"}}},"request":{"raw":"GET /410e1faa-4edb-4d26-b541-0490fbe9aa2f/en/js/uaParser.js HTTP/1.1\r\nHost: fortune-slotdriftzone.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fortune-slotdriftzone.click/410e1faa-4edb-4d26-b541-0490fbe9aa2f/en/?lead_info=bGVhZF91dWlkPTIwYjZiMDQ1LWEzYjAtNDMwZS05YmM0LTI4NGU4YzdjZTRiNyZvcz1XaW5kb3dzJmxhbmd1YWdlPWVuLVVTJm9mZmVyX3VybD1odHRwczovL3NhcG9nLm9ubGluZS9jbGljaz9rZXk9NjI5MGU0MmMyODUzNDVkYzk5MGEyNTQzNTJiZTA4YzUmbGVhZF9pZD0yMGI2YjA0NS1hM2IwLTQzMGUtOWJjNC0yODRlOGM3Y2U0YjcmdXRtX2NhbXBhaWduPXtzdWIxfSZ1dG1fc291cmNlPXtzdWIyfSZhY2NfaWQ9e3N1YjN9JnV0bV9jb250ZW50PXtzdWI0fSZ1dG1fbWVkaXVtPXtzdWI1fSZ1dG1fdGVybXM9e3N1YjZ9JmFkX2lkPXtzdWI3fSZmYmNsaWQ9e2ZiY2xpZH0mcGl4ZWw9e3BpeGVsfQ\u0026is_webview=false\u0026pixel=\u0026fbclid=\r\nCookie: cl_st=b\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7Ao%2F%2BnZd56p8Xzh3KmSl2KPvjpyrCIcXV7FWdmBVlcHTdobBKBujfcB3Oj1zevTAiSHrwlkWDHoSrW4Pw0Fs5GlOf%2FivaABORqAwE78rqkt2nxMhmPvhoTzAvrss8oyiJ1kwmVKnaRQulKgH058%3D\"}]}\r\ncontent-encoding: br\r\ndate: Wed, 15 Apr 2026 05:38:51 GMT\r\ncontent-type: application/javascript\r\netag: W/\"69d504ea-4bbc\"\r\ncf-ray: 9ec89b42288356b4-OSL\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\ncache-control: max-age=14400\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Tue, 07 Apr 2026 13:21:46 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19388,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (19275)","md5":"fae74f6b710e428ad5ca0378fc339859","sha1":"0d8f92bc5fcfb0ef72ee329f0a0763524443b5bd","sha256":"9735a83f5152c01eefe3ca9457e3b440502b60246d60f232196eb36c126f2125","sha512":"092f093612174c0f84c491a2e9ff03b4ee160ae90aa16ebd5f83e80a7c128efb6e8099629c9c88d7a330f9313a1a3d78e561d295b4fdb446dd18266fe75e46ff","ssdeep":"384:69M5d42wb/6iOD0tRqwkdZISkzVBv2ETttl9rsATHskN:69CKyzDYRqZduSAZ5tl9rsAT1","tlshash":"0b92da3ed365bf2093bee589c51790002d3a5c3adb41b0f99ae4b540e8d6db1129f7b2","first_seen":"2024-04-25T09:45:56Z","last_seen":"2026-08-07T09:07:57.005137Z","times_seen":288,"resource_available":true,"data":null}},"time_used":55,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":55,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"fortune-slotdriftzone.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"fortune-slotdriftzone.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"fortune-slotdriftzone.click","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"betterlinks.pro/api/leads/link/20b6b045-a3b0-430e-9bc4-284e8c7ce4b7/event","fqdn":"betterlinks.pro","domain":"betterlinks.pro","tld":"pro"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://fortune-slotdriftzone.click/410e1faa-4edb-4d26-b541-0490fbe9aa2f/en/?lead_info=bGVhZF91dWlkPTIwYjZiMDQ1LWEzYjAtNDMwZS05YmM0LTI4NGU4YzdjZTRiNyZvcz1XaW5kb3dzJmxhbmd1YWdlPWVuLVVTJm9mZmVyX3VybD1odHRwczovL3NhcG9nLm9ubGluZS9jbGljaz9rZXk9NjI5MGU0MmMyODUzNDVkYzk5MGEyNTQzNTJiZTA4YzUmbGVhZF9pZD0yMGI2YjA0NS1hM2IwLTQzMGUtOWJjNC0yODRlOGM3Y2U0YjcmdXRtX2NhbXBhaWduPXtzdWIxfSZ1dG1fc291cmNlPXtzdWIyfSZhY2NfaWQ9e3N1YjN9JnV0bV9jb250ZW50PXtzdWI0fSZ1dG1fbWVkaXVtPXtzdWI1fSZ1dG1fdGVybXM9e3N1YjZ9JmFkX2lkPXtzdWI3fSZmYmNsaWQ9e2ZiY2xpZH0mcGl4ZWw9e3BpeGVsfQ\u0026is_webview=false\u0026pixel=\u0026fbclid=","date":"2026-04-15T05:38:52.414Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"betterlinks.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 21 Mar 2026 23:56:45 GMT","end":"Sat, 20 Jun 2026 00:54:26 GMT"},"fingerprint":{"sha1":"1B:08:79:61:23:58:31:DA:A6:68:AE:C3:59:EF:A6:33:91:B7:EE:45","sha256":"2C:CA:27:79:01:81:75:51:49:4D:EA:72:CC:AA:26:12:7B:79:51:0B:FD:03:65:5A:70:96:0E:8E:40:A5:D5:52"}}},"request":{"raw":"OPTIONS /api/leads/link/20b6b045-a3b0-430e-9bc4-284e8c7ce4b7/event HTTP/1.1\r\nHost: betterlinks.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://fortune-slotdriftzone.click/\r\nOrigin: https://fortune-slotdriftzone.click\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 15 Apr 2026 05:38:52 GMT\r\ncontent-type: text/plain; charset=utf-8\r\ncontent-length: 2\r\nserver: cloudflare\r\nvary: Origin\r\naccess-control-allow-methods: DELETE, GET, HEAD, OPTIONS, PATCH, POST, PUT\r\naccess-control-max-age: 600\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://fortune-slotdriftzone.click\r\naccess-control-allow-headers: content-type\r\nx-iplb-request-id: A29EDE63:2927_3626401C:0050_69DF246C_E27C91:102DA\r\nx-iplb-instance: 64365\r\nset-cookie: SERVERID263164=; Expires=Thu, 01-Jan-1970 00:00:01 GMT; path=/; HttpOnly\r\ncache-control: private\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Wh4a3KVTPaiGEyztK1y1K%2FUtDwkz3djt06SrhsDZHglT%2BdSRqr79%2BWhQFnsY9a5lVd%2B4ogFTrHH1PrUqLhSdceA8m5k316KLGR9t5QZ0zdS6PI1J%2FbhH4TUEjfZXPmCEbv4%3D\"}]}\r\ncf-ray: 9ec89b439afa56bb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"e0aa021e21dddbd6d8cecec71e9cf564","sha1":"9ce3bd4224c8c1780db56b4125ecf3f24bf748b7","sha256":"565339bc4d33d72817b583024112eb7f5cdf3e5eef0252d6ec1b9c9a94e12bb3","sha512":"900110c951560eff857b440e89cc29f529416e0e3b3d7f0ad51651bfdbd8025b91768c5ed7db5352d1a5523354ce06ced2c42047e33a3e958a1bba5f742db874","ssdeep":"","tlshash":"c710000000000000000000030000000030000000000000000c000000c0000000000000","first_seen":"2023-03-09T09:04:49Z","last_seen":"2026-08-13T21:52:39.487276Z","times_seen":364144,"resource_available":true,"data":null}},"time_used":126,"timings":{"blocked":-1,"dns":1,"connect":1,"send":0,"wait":48,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"betterlinks.pro/api/leads/link/20b6b045-a3b0-430e-9bc4-284e8c7ce4b7/event","fqdn":"betterlinks.pro","domain":"betterlinks.pro","tld":"pro"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://fortune-slotdriftzone.click/410e1faa-4edb-4d26-b541-0490fbe9aa2f/en/?lead_info=bGVhZF91dWlkPTIwYjZiMDQ1LWEzYjAtNDMwZS05YmM0LTI4NGU4YzdjZTRiNyZvcz1XaW5kb3dzJmxhbmd1YWdlPWVuLVVTJm9mZmVyX3VybD1odHRwczovL3NhcG9nLm9ubGluZS9jbGljaz9rZXk9NjI5MGU0MmMyODUzNDVkYzk5MGEyNTQzNTJiZTA4YzUmbGVhZF9pZD0yMGI2YjA0NS1hM2IwLTQzMGUtOWJjNC0yODRlOGM3Y2U0YjcmdXRtX2NhbXBhaWduPXtzdWIxfSZ1dG1fc291cmNlPXtzdWIyfSZhY2NfaWQ9e3N1YjN9JnV0bV9jb250ZW50PXtzdWI0fSZ1dG1fbWVkaXVtPXtzdWI1fSZ1dG1fdGVybXM9e3N1YjZ9JmFkX2lkPXtzdWI3fSZmYmNsaWQ9e2ZiY2xpZH0mcGl4ZWw9e3BpeGVsfQ\u0026is_webview=false\u0026pixel=\u0026fbclid=","date":"2026-04-15T05:38:52.459Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"betterlinks.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 21 Mar 2026 23:56:45 GMT","end":"Sat, 20 Jun 2026 00:54:26 GMT"},"fingerprint":{"sha1":"1B:08:79:61:23:58:31:DA:A6:68:AE:C3:59:EF:A6:33:91:B7:EE:45","sha256":"2C:CA:27:79:01:81:75:51:49:4D:EA:72:CC:AA:26:12:7B:79:51:0B:FD:03:65:5A:70:96:0E:8E:40:A5:D5:52"}}},"request":{"raw":"POST /api/leads/link/20b6b045-a3b0-430e-9bc4-284e8c7ce4b7/event HTTP/1.1\r\nHost: betterlinks.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://fortune-slotdriftzone.click/\r\nContent-Type: application/json\r\nContent-Length: 154\r\nOrigin: https://fortune-slotdriftzone.click\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":154,"data":"{\"events\":[{\"name\":\"full_page_loaded\",\"datetime\":\"2026-04-15T05:38:51.944Z\"},{\"name\":\"update_lead\",\"datetime\":\"2026-04-15T05:38:51.944Z\",\"is_bot\":false}]}"}},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 15 Apr 2026 05:38:52 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\nx-iplb-request-id: A29EDE63:2927_3626401C:0050_69DF246C_E27C92:102DA\r\nx-iplb-instance: 64365\r\nset-cookie: SERVERID263164=; Expires=Thu, 01-Jan-1970 00:00:01 GMT; path=/; HttpOnly\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XfbzpLcZMjMqRcq7kLij0nuDz1fIm9d%2FZsiIsTFsuEFW8GJSQ7gU23ZvkJax0f8iS%2F018PW3yhHEEirs2aV6x0FXBbL%2ByqxsrjlgHHFQJP2Big%2F1Z3ODZBASH8hLm5Ayb4A%3D\"}]}\r\ncontent-encoding: br\r\ncf-ray: 9ec89b45acfb56bb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1373,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"7b6068b851f6e7bfe411c07c2ad67687","sha1":"b1df25fc0faf2996fb35a3141c7876193d52edc8","sha256":"4b0dcca5bd1c05071fcef163953b5ce1f1e88c2082a8d84306ea83fd94da3554","sha512":"a7003ad698e329e441abcdd4812df21786e3da169b86c4076f8ccc757adab7f11e30709d3f0387a6f5076613dfa03110cd5a7daefbdd6d98707398280dd2a866","ssdeep":"","tlshash":"7e21312b480cecb355cd9647c696b80551fd5e7b80832ca4d2b4ef24adcc6fa33c2956","first_seen":"2026-04-15T05:39:18.287116Z","last_seen":"2026-04-15T06:00:31.875099Z","times_seen":2,"resource_available":false,"data":null}},"time_used":84,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":84,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fortune-slotdriftzone.click/410e1faa-4edb-4d26-b541-0490fbe9aa2f/en/play.svg","fqdn":"fortune-slotdriftzone.click","domain":"fortune-slotdriftzone.click","tld":"click"},"ip":{"addr":"172.67.181.2","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fortune-slotdriftzone.click/410e1faa-4edb-4d26-b541-0490fbe9aa2f/en/?lead_info=bGVhZF91dWlkPTIwYjZiMDQ1LWEzYjAtNDMwZS05YmM0LTI4NGU4YzdjZTRiNyZvcz1XaW5kb3dzJmxhbmd1YWdlPWVuLVVTJm9mZmVyX3VybD1odHRwczovL3NhcG9nLm9ubGluZS9jbGljaz9rZXk9NjI5MGU0MmMyODUzNDVkYzk5MGEyNTQzNTJiZTA4YzUmbGVhZF9pZD0yMGI2YjA0NS1hM2IwLTQzMGUtOWJjNC0yODRlOGM3Y2U0YjcmdXRtX2NhbXBhaWduPXtzdWIxfSZ1dG1fc291cmNlPXtzdWIyfSZhY2NfaWQ9e3N1YjN9JnV0bV9jb250ZW50PXtzdWI0fSZ1dG1fbWVkaXVtPXtzdWI1fSZ1dG1fdGVybXM9e3N1YjZ9JmFkX2lkPXtzdWI3fSZmYmNsaWQ9e2ZiY2xpZH0mcGl4ZWw9e3BpeGVsfQ\u0026is_webview=false\u0026pixel=\u0026fbclid=","date":"2026-04-15T05:38:52.668Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fortune-slotdriftzone.click","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 05 Apr 2026 17:33:19 GMT","end":"Sat, 04 Jul 2026 17:33:18 GMT"},"fingerprint":{"sha1":"8D:06:82:02:25:6E:FC:C3:DD:A9:EF:7E:9E:71:30:6B:C7:B0:E0:CA","sha256":"47:26:91:AA:EA:BF:3F:BF:57:5C:44:EA:35:B3:E0:10:5A:C5:8F:D6:6D:84:10:E6:27:36:10:A5:91:D2:47:83"}}},"request":{"raw":"GET /410e1faa-4edb-4d26-b541-0490fbe9aa2f/en/play.svg HTTP/1.1\r\nHost: fortune-slotdriftzone.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fortune-slotdriftzone.click/410e1faa-4edb-4d26-b541-0490fbe9aa2f/en/?lead_info=bGVhZF91dWlkPTIwYjZiMDQ1LWEzYjAtNDMwZS05YmM0LTI4NGU4YzdjZTRiNyZvcz1XaW5kb3dzJmxhbmd1YWdlPWVuLVVTJm9mZmVyX3VybD1odHRwczovL3NhcG9nLm9ubGluZS9jbGljaz9rZXk9NjI5MGU0MmMyODUzNDVkYzk5MGEyNTQzNTJiZTA4YzUmbGVhZF9pZD0yMGI2YjA0NS1hM2IwLTQzMGUtOWJjNC0yODRlOGM3Y2U0YjcmdXRtX2NhbXBhaWduPXtzdWIxfSZ1dG1fc291cmNlPXtzdWIyfSZhY2NfaWQ9e3N1YjN9JnV0bV9jb250ZW50PXtzdWI0fSZ1dG1fbWVkaXVtPXtzdWI1fSZ1dG1fdGVybXM9e3N1YjZ9JmFkX2lkPXtzdWI3fSZmYmNsaWQ9e2ZiY2xpZH0mcGl4ZWw9e3BpeGVsfQ\u0026is_webview=false\u0026pixel=\u0026fbclid=\r\nCookie: cl_st=b\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DohMRgNH5AZ8B2o3Snnu9Afmp32dJqGxYdCn2Y7y7PaXrD7BOD734d5UQ7oVXG6ri7Y1nvSSvAxXrpm7sd28q8OfSbi8eM2%2FVvtPO%2FHzZEoYJkMhX0qaZE78hPGRQ1UcX8UWasMmSzBG5lDeK1A%3D\"}]}\r\npriority: u=6,i=?0\r\ndate: Wed, 15 Apr 2026 05:38:52 GMT\r\ncontent-type: image/svg+xml\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ec89b4728c356b4-OSL\r\ncf-cache-status: HIT\r\ncache-control: max-age=14400\r\ncontent-encoding: gzip\r\netag: \"69d504ea-30f\"\r\nlast-modified: Tue, 07 Apr 2026 13:21:46 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":783,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"a7e8010a745f6289a8a5c3d004b0c456","sha1":"db310316b0c190c690d8dbec03dd95fb11d8c0c5","sha256":"b1c80209f6868f3c7f31b29ee3d98381eac5bc4fec062e14d607e11fd42ab927","sha512":"6ac6595f6b76563ea726d35140b510afce3568b514e07ab8ce8d3b7caa57e45e3478581b865e29a2c7924c05ef0a12235e7056b58ece2b4a51ca3f4cec34c749","ssdeep":"","tlshash":"ef01cbb281d8a756407903ac98bc1481e8e5c85bb8349489bb0f0062ef7c4d3b48b719","first_seen":"2025-07-04T00:08:39.112232Z","last_seen":"2026-07-28T03:06:16.198931Z","times_seen":120,"resource_available":false,"data":null}},"time_used":52,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":52,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"fortune-slotdriftzone.click","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"fortune-slotdriftzone.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"fortune-slotdriftzone.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fortune-slotdriftzone.click/410e1faa-4edb-4d26-b541-0490fbe9aa2f/en/images/icon_arrow.svg","fqdn":"fortune-slotdriftzone.click","domain":"fortune-slotdriftzone.click","tld":"click"},"ip":{"addr":"172.67.181.2","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fortune-slotdriftzone.click/410e1faa-4edb-4d26-b541-0490fbe9aa2f/en/?lead_info=bGVhZF91dWlkPTIwYjZiMDQ1LWEzYjAtNDMwZS05YmM0LTI4NGU4YzdjZTRiNyZvcz1XaW5kb3dzJmxhbmd1YWdlPWVuLVVTJm9mZmVyX3VybD1odHRwczovL3NhcG9nLm9ubGluZS9jbGljaz9rZXk9NjI5MGU0MmMyODUzNDVkYzk5MGEyNTQzNTJiZTA4YzUmbGVhZF9pZD0yMGI2YjA0NS1hM2IwLTQzMGUtOWJjNC0yODRlOGM3Y2U0YjcmdXRtX2NhbXBhaWduPXtzdWIxfSZ1dG1fc291cmNlPXtzdWIyfSZhY2NfaWQ9e3N1YjN9JnV0bV9jb250ZW50PXtzdWI0fSZ1dG1fbWVkaXVtPXtzdWI1fSZ1dG1fdGVybXM9e3N1YjZ9JmFkX2lkPXtzdWI3fSZmYmNsaWQ9e2ZiY2xpZH0mcGl4ZWw9e3BpeGVsfQ\u0026is_webview=false\u0026pixel=\u0026fbclid=","date":"2026-04-15T05:38:51.860Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fortune-slotdriftzone.click","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 05 Apr 2026 17:33:19 GMT","end":"Sat, 04 Jul 2026 17:33:18 GMT"},"fingerprint":{"sha1":"8D:06:82:02:25:6E:FC:C3:DD:A9:EF:7E:9E:71:30:6B:C7:B0:E0:CA","sha256":"47:26:91:AA:EA:BF:3F:BF:57:5C:44:EA:35:B3:E0:10:5A:C5:8F:D6:6D:84:10:E6:27:36:10:A5:91:D2:47:83"}}},"request":{"raw":"GET /410e1faa-4edb-4d26-b541-0490fbe9aa2f/en/images/icon_arrow.svg HTTP/1.1\r\nHost: fortune-slotdriftzone.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fortune-slotdriftzone.click/410e1faa-4edb-4d26-b541-0490fbe9aa2f/en/?lead_info=bGVhZF91dWlkPTIwYjZiMDQ1LWEzYjAtNDMwZS05YmM0LTI4NGU4YzdjZTRiNyZvcz1XaW5kb3dzJmxhbmd1YWdlPWVuLVVTJm9mZmVyX3VybD1odHRwczovL3NhcG9nLm9ubGluZS9jbGljaz9rZXk9NjI5MGU0MmMyODUzNDVkYzk5MGEyNTQzNTJiZTA4YzUmbGVhZF9pZD0yMGI2YjA0NS1hM2IwLTQzMGUtOWJjNC0yODRlOGM3Y2U0YjcmdXRtX2NhbXBhaWduPXtzdWIxfSZ1dG1fc291cmNlPXtzdWIyfSZhY2NfaWQ9e3N1YjN9JnV0bV9jb250ZW50PXtzdWI0fSZ1dG1fbWVkaXVtPXtzdWI1fSZ1dG1fdGVybXM9e3N1YjZ9JmFkX2lkPXtzdWI3fSZmYmNsaWQ9e2ZiY2xpZH0mcGl4ZWw9e3BpeGVsfQ\u0026is_webview=false\u0026pixel=\u0026fbclid=\r\nCookie: cl_st=b\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6LGNIViKPkRpQh4MbzZ9ZZ2dbgTiU4jYku7M2Zyr8AX6dzgsD8qk%2BVBEKKL5tCfaO2jTFZgkB8gS7M37Bq7bvFpRbhDkCMyPuMtqTwdbcaKkQOxGRGS%2B8rDXssrS0CykdnLENVLOn11jUy6skzs%3D\"}]}\r\ncontent-encoding: br\r\ndate: Wed, 15 Apr 2026 05:38:51 GMT\r\ncontent-type: image/svg+xml\r\netag: W/\"69d504ea-db\"\r\ncf-ray: 9ec89b41e87456b4-OSL\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\ncache-control: max-age=14400\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Tue, 07 Apr 2026 13:21:46 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":219,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"b43d99f133288e69bbbf4086d2e6ef32","sha1":"f405ed0c6a2240746d942d4af0014a310a058d44","sha256":"ac79cfa70fe0b3820fa22be89a4220bfa05de2b99f3ee68bb10a7a35937c245c","sha512":"1ebc17375039ba8c9aeccef936efcff9785c1b12995b9d18fe5d3f0ffc545595c5ebc728ab4cd3dc1cb54108a45849920c922e6feafff9f30e6c35bdb248d7e1","ssdeep":"","tlshash":"efd0a7be554c990145044f525d59316772b674cd53c804b9e54175e07ce00d79d5dd78","first_seen":"2024-08-19T13:45:40.065042Z","last_seen":"2026-08-07T09:07:56.996565Z","times_seen":276,"resource_available":false,"data":null}},"time_used":49,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":49,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"fortune-slotdriftzone.click","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"fortune-slotdriftzone.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"fortune-slotdriftzone.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"easy-image.b-cdn.net/users/female/2.jpg","fqdn":"easy-image.b-cdn.net","domain":"b-cdn.net","tld":"net"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fortune-slotdriftzone.click/410e1faa-4edb-4d26-b541-0490fbe9aa2f/en/?lead_info=bGVhZF91dWlkPTIwYjZiMDQ1LWEzYjAtNDMwZS05YmM0LTI4NGU4YzdjZTRiNyZvcz1XaW5kb3dzJmxhbmd1YWdlPWVuLVVTJm9mZmVyX3VybD1odHRwczovL3NhcG9nLm9ubGluZS9jbGljaz9rZXk9NjI5MGU0MmMyODUzNDVkYzk5MGEyNTQzNTJiZTA4YzUmbGVhZF9pZD0yMGI2YjA0NS1hM2IwLTQzMGUtOWJjNC0yODRlOGM3Y2U0YjcmdXRtX2NhbXBhaWduPXtzdWIxfSZ1dG1fc291cmNlPXtzdWIyfSZhY2NfaWQ9e3N1YjN9JnV0bV9jb250ZW50PXtzdWI0fSZ1dG1fbWVkaXVtPXtzdWI1fSZ1dG1fdGVybXM9e3N1YjZ9JmFkX2lkPXtzdWI3fSZmYmNsaWQ9e2ZiY2xpZH0mcGl4ZWw9e3BpeGVsfQ\u0026is_webview=false\u0026pixel=\u0026fbclid=","date":"2026-04-15T05:38:51.893Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.b-cdn.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 06 Nov 2025 00:00:00 GMT","end":"Wed, 11 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"92:9B:37:29:B4:2D:AB:EB:68:07:7B:03:B2:80:2E:5B:53:CE:AD:E7","sha256":"51:6F:86:36:A1:23:32:72:AA:0F:28:1A:81:F4:92:F8:82:35:42:13:BA:4C:21:2D:80:C5:BB:BF:19:04:1D:32"}}},"request":{"raw":"GET /users/female/2.jpg HTTP/1.1\r\nHost: easy-image.b-cdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fortune-slotdriftzone.click/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 15 Apr 2026 05:38:52 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 15340\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 2442763\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=0\r\netag: \"67ed0460-3bec\"\r\nlast-modified: Wed, 02 Apr 2025 09:33:20 GMT\r\ncdn-storageserver: SE-904\r\ncdn-fileserver: 582\r\ncdn-proxyver: 1.50\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 04/15/2026 00:06:23\r\ncdn-edgestorageid: 830\r\ncdn-requestid: e6f987203167c906d15f7664b83b09ac\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":15340,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 249x313, components 3","md5":"a7e3fafcaec61899e75e80cc5e9408db","sha1":"c8a97d280efc9c208b46d46d8fe2df395c70052c","sha256":"833b4570d636c10c4202abe5a9c32e04a1d897ad17fe1673e0098d23b53c0ff9","sha512":"d5ea5181d6ca53903a7bf1a8e72aa696b994e667543c2c3ba33c469c1453c576979ef1aeb6ae840f1b5b511f91f4ae4741e2b183e8758b01a27a5d3c7b8797e3","ssdeep":"384:1sjiW/0baHkuJPL/W/Rui57V5NbkFOMEqt3cjZNf8dACtUb/:1sjTyaEuJPa/RuihNCOBVjZh8TtUr","tlshash":"8a62d0128e16d57efb6d0d29ea5047bfd9c0b14ad482a0cf07d211dad0c1aededbc426","first_seen":"2025-08-03T23:29:43.506231Z","last_seen":"2026-08-07T09:07:57.017443Z","times_seen":46,"resource_available":false,"data":null}},"time_used":138,"timings":{"blocked":100,"dns":0,"connect":0,"send":0,"wait":36,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fortune-slotdriftzone.click/410e1faa-4edb-4d26-b541-0490fbe9aa2f/en/fonts/Roboto-Bold.ttf","fqdn":"fortune-slotdriftzone.click","domain":"fortune-slotdriftzone.click","tld":"click"},"ip":{"addr":"172.67.181.2","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://fortune-slotdriftzone.click/410e1faa-4edb-4d26-b541-0490fbe9aa2f/en/?lead_info=bGVhZF91dWlkPTIwYjZiMDQ1LWEzYjAtNDMwZS05YmM0LTI4NGU4YzdjZTRiNyZvcz1XaW5kb3dzJmxhbmd1YWdlPWVuLVVTJm9mZmVyX3VybD1odHRwczovL3NhcG9nLm9ubGluZS9jbGljaz9rZXk9NjI5MGU0MmMyODUzNDVkYzk5MGEyNTQzNTJiZTA4YzUmbGVhZF9pZD0yMGI2YjA0NS1hM2IwLTQzMGUtOWJjNC0yODRlOGM3Y2U0YjcmdXRtX2NhbXBhaWduPXtzdWIxfSZ1dG1fc291cmNlPXtzdWIyfSZhY2NfaWQ9e3N1YjN9JnV0bV9jb250ZW50PXtzdWI0fSZ1dG1fbWVkaXVtPXtzdWI1fSZ1dG1fdGVybXM9e3N1YjZ9JmFkX2lkPXtzdWI3fSZmYmNsaWQ9e2ZiY2xpZH0mcGl4ZWw9e3BpeGVsfQ\u0026is_webview=false\u0026pixel=\u0026fbclid=","date":"2026-04-15T05:38:52.453Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fortune-slotdriftzone.click","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 05 Apr 2026 17:33:19 GMT","end":"Sat, 04 Jul 2026 17:33:18 GMT"},"fingerprint":{"sha1":"8D:06:82:02:25:6E:FC:C3:DD:A9:EF:7E:9E:71:30:6B:C7:B0:E0:CA","sha256":"47:26:91:AA:EA:BF:3F:BF:57:5C:44:EA:35:B3:E0:10:5A:C5:8F:D6:6D:84:10:E6:27:36:10:A5:91:D2:47:83"}}},"request":{"raw":"GET /410e1faa-4edb-4d26-b541-0490fbe9aa2f/en/fonts/Roboto-Bold.ttf HTTP/1.1\r\nHost: fortune-slotdriftzone.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fortune-slotdriftzone.click/410e1faa-4edb-4d26-b541-0490fbe9aa2f/en/style/style.css\r\nCookie: cl_st=b\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 167336\r\npriority: u=4,i=?0\r\ndate: Wed, 15 Apr 2026 05:38:52 GMT\r\ncontent-type: application/octet-stream\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ec89b4598b656b4-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\netag: \"69d504ea-28da8\"\r\nlast-modified: Tue, 07 Apr 2026 13:21:46 GMT\r\nserver: cloudflare\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RC02jlpvOzy8L7up9ATZGQE0f80QhxIevb%2BlFkdsKafN5lAKZNUMszAY2U%2Faas6G4lzDI0py7%2ByOr70iQzmTcb5GEJHy22RFMP5ZL0QrMl7gyCM%2B0y7MNSpN8Em0zR6hexunaYV8CTGWnLgZRKU%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":167336,"size_decoded":0,"mime_type":"application/octet-stream","magic":"TrueType Font data, 18 tables, 1st \"GDEF\", 13 names, Microsoft, language 0x409, Copyright 2011 Google Inc. All Rights Reserved.RobotoBoldRoboto BoldVersion 2.137; 2017Roboto-Bo","md5":"b8e42971dec8d49207a8c8e2b919a6ac","sha1":"62442a18a9fe9457c1afeabf683d263a691b7798","sha256":"ec685a46105296fe46c8744da4a11cf8118ba6c11271941766f7a546df6aa7c7","sha512":"3bd40ac788d44626fd640ec67ef04ab0364816b5e8c831f2077bff8805cfe6890ca29274b476f933f6e96ddaa16f4e2f3f66c616dff7cd88cdcaff7dae8ca5e5","ssdeep":"3072:VBa9dX3CyiSB1/R7O0aXjC1YHeA9bOuPUPT9mYZK9K4N09PJ4X4HXYXXXXXXLnqT:uX6XiuMPT/eK9cnfST80/","tlshash":"29f3f501d2479629cac6b2787c3cd3be1970e429bc6ba11735e4af3149c8945ec69bfc","first_seen":"2023-04-11T21:48:33Z","last_seen":"2026-08-13T19:54:04.089119Z","times_seen":6348,"resource_available":false,"data":null}},"time_used":71,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":53,"receive":18,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"fortune-slotdriftzone.click","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"fortune-slotdriftzone.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"fortune-slotdriftzone.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fortune-slotdriftzone.click/410e1faa-4edb-4d26-b541-0490fbe9aa2f/en/fonts/Roboto-Light.ttf","fqdn":"fortune-slotdriftzone.click","domain":"fortune-slotdriftzone.click","tld":"click"},"ip":{"addr":"172.67.181.2","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://fortune-slotdriftzone.click/410e1faa-4edb-4d26-b541-0490fbe9aa2f/en/?lead_info=bGVhZF91dWlkPTIwYjZiMDQ1LWEzYjAtNDMwZS05YmM0LTI4NGU4YzdjZTRiNyZvcz1XaW5kb3dzJmxhbmd1YWdlPWVuLVVTJm9mZmVyX3VybD1odHRwczovL3NhcG9nLm9ubGluZS9jbGljaz9rZXk9NjI5MGU0MmMyODUzNDVkYzk5MGEyNTQzNTJiZTA4YzUmbGVhZF9pZD0yMGI2YjA0NS1hM2IwLTQzMGUtOWJjNC0yODRlOGM3Y2U0YjcmdXRtX2NhbXBhaWduPXtzdWIxfSZ1dG1fc291cmNlPXtzdWIyfSZhY2NfaWQ9e3N1YjN9JnV0bV9jb250ZW50PXtzdWI0fSZ1dG1fbWVkaXVtPXtzdWI1fSZ1dG1fdGVybXM9e3N1YjZ9JmFkX2lkPXtzdWI3fSZmYmNsaWQ9e2ZiY2xpZH0mcGl4ZWw9e3BpeGVsfQ\u0026is_webview=false\u0026pixel=\u0026fbclid=","date":"2026-04-15T05:38:52.455Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fortune-slotdriftzone.click","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 05 Apr 2026 17:33:19 GMT","end":"Sat, 04 Jul 2026 17:33:18 GMT"},"fingerprint":{"sha1":"8D:06:82:02:25:6E:FC:C3:DD:A9:EF:7E:9E:71:30:6B:C7:B0:E0:CA","sha256":"47:26:91:AA:EA:BF:3F:BF:57:5C:44:EA:35:B3:E0:10:5A:C5:8F:D6:6D:84:10:E6:27:36:10:A5:91:D2:47:83"}}},"request":{"raw":"GET /410e1faa-4edb-4d26-b541-0490fbe9aa2f/en/fonts/Roboto-Light.ttf HTTP/1.1\r\nHost: fortune-slotdriftzone.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fortune-slotdriftzone.click/410e1faa-4edb-4d26-b541-0490fbe9aa2f/en/style/style.css\r\nCookie: cl_st=b\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 167000\r\npriority: u=4,i=?0\r\ndate: Wed, 15 Apr 2026 05:38:52 GMT\r\ncontent-type: application/octet-stream\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ec89b4598b756b4-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\netag: \"69d504ea-28c58\"\r\nlast-modified: Tue, 07 Apr 2026 13:21:46 GMT\r\nserver: cloudflare\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QbXBY0z%2B6%2BhLnZOCcggkhQnnA%2BHR10U5OvH3m8khluqPVs%2Bc9RSqr3QHFFbuBACQZ8KI%2FWQrMawmQBspHFuTZj5b4%2BwWj11ag8mavyfjASynVveNGKRO1R4HFjk%2FxzRH%2FgukUgkSNMYyvokKU%2FM%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":167000,"size_decoded":0,"mime_type":"application/octet-stream","magic":"TrueType Font data, 18 tables, 1st \"GDEF\", 15 names, Microsoft, language 0x409, Copyright 2011 Google Inc. All Rights Reserved.Roboto LightRegularVersion 2.137; 2017Roboto-Ligh","md5":"881e150ab929e26d1f812c4342c15a7c","sha1":"18788c5d630fa695f9283f6393bfa541b2031508","sha256":"c576c50642271bcdbfffed04f92dc8d6a981daf300914d0a20c8a5a5a57015c7","sha512":"af18febdf3e0d5fc8111e6335bd8cc4fc8dd944910db8a4f3ebae284e3d1064eb793a25588007e3d1cee24051e11cf3328951a3f708375856d54176a53701b49","ssdeep":"3072:BXlLgbEmk0/Dv6QKwRr4T2EUtxq2FquPte/TxDuNOIOU7og2NE/:3qXpSIE6Ey/ux0WUMxNE/","tlshash":"daf3e501d245aa3dcad6f2787c7cb3be4875e429fd5a652730d6ab3255c4800ec68bbc","first_seen":"2023-05-08T00:29:25Z","last_seen":"2026-08-13T17:49:45.602747Z","times_seen":1044,"resource_available":false,"data":null}},"time_used":79,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":53,"receive":26,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"fortune-slotdriftzone.click","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"fortune-slotdriftzone.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"fortune-slotdriftzone.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fortune-slotdriftzone.click/410e1faa-4edb-4d26-b541-0490fbe9aa2f/en/images/icon_zoom.svg","fqdn":"fortune-slotdriftzone.click","domain":"fortune-slotdriftzone.click","tld":"click"},"ip":{"addr":"172.67.181.2","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fortune-slotdriftzone.click/410e1faa-4edb-4d26-b541-0490fbe9aa2f/en/?lead_info=bGVhZF91dWlkPTIwYjZiMDQ1LWEzYjAtNDMwZS05YmM0LTI4NGU4YzdjZTRiNyZvcz1XaW5kb3dzJmxhbmd1YWdlPWVuLVVTJm9mZmVyX3VybD1odHRwczovL3NhcG9nLm9ubGluZS9jbGljaz9rZXk9NjI5MGU0MmMyODUzNDVkYzk5MGEyNTQzNTJiZTA4YzUmbGVhZF9pZD0yMGI2YjA0NS1hM2IwLTQzMGUtOWJjNC0yODRlOGM3Y2U0YjcmdXRtX2NhbXBhaWduPXtzdWIxfSZ1dG1fc291cmNlPXtzdWIyfSZhY2NfaWQ9e3N1YjN9JnV0bV9jb250ZW50PXtzdWI0fSZ1dG1fbWVkaXVtPXtzdWI1fSZ1dG1fdGVybXM9e3N1YjZ9JmFkX2lkPXtzdWI3fSZmYmNsaWQ9e2ZiY2xpZH0mcGl4ZWw9e3BpeGVsfQ\u0026is_webview=false\u0026pixel=\u0026fbclid=","date":"2026-04-15T05:38:51.861Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fortune-slotdriftzone.click","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 05 Apr 2026 17:33:19 GMT","end":"Sat, 04 Jul 2026 17:33:18 GMT"},"fingerprint":{"sha1":"8D:06:82:02:25:6E:FC:C3:DD:A9:EF:7E:9E:71:30:6B:C7:B0:E0:CA","sha256":"47:26:91:AA:EA:BF:3F:BF:57:5C:44:EA:35:B3:E0:10:5A:C5:8F:D6:6D:84:10:E6:27:36:10:A5:91:D2:47:83"}}},"request":{"raw":"GET /410e1faa-4edb-4d26-b541-0490fbe9aa2f/en/images/icon_zoom.svg HTTP/1.1\r\nHost: fortune-slotdriftzone.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fortune-slotdriftzone.click/410e1faa-4edb-4d26-b541-0490fbe9aa2f/en/?lead_info=bGVhZF91dWlkPTIwYjZiMDQ1LWEzYjAtNDMwZS05YmM0LTI4NGU4YzdjZTRiNyZvcz1XaW5kb3dzJmxhbmd1YWdlPWVuLVVTJm9mZmVyX3VybD1odHRwczovL3NhcG9nLm9ubGluZS9jbGljaz9rZXk9NjI5MGU0MmMyODUzNDVkYzk5MGEyNTQzNTJiZTA4YzUmbGVhZF9pZD0yMGI2YjA0NS1hM2IwLTQzMGUtOWJjNC0yODRlOGM3Y2U0YjcmdXRtX2NhbXBhaWduPXtzdWIxfSZ1dG1fc291cmNlPXtzdWIyfSZhY2NfaWQ9e3N1YjN9JnV0bV9jb250ZW50PXtzdWI0fSZ1dG1fbWVkaXVtPXtzdWI1fSZ1dG1fdGVybXM9e3N1YjZ9JmFkX2lkPXtzdWI3fSZmYmNsaWQ9e2ZiY2xpZH0mcGl4ZWw9e3BpeGVsfQ\u0026is_webview=false\u0026pixel=\u0026fbclid=\r\nCookie: cl_st=b\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Uh01eTP1crb8XsqxHI7Dhox9f%2BnP3AGTGFkXNAjr4PV5f4WmEeIuaAKblZHDuSruN5Sv2IsLtvQXd0%2BhP3ksG5pC2qF%2FUdSxYAOHtT3QqgKjufT1WovOYTNrYMT2MO3e1yWkIth0TcIc839JgHw%3D\"}]}\r\ncontent-encoding: br\r\ndate: Wed, 15 Apr 2026 05:38:51 GMT\r\ncontent-type: image/svg+xml\r\netag: W/\"69d504ea-3f2\"\r\ncf-ray: 9ec89b41e87556b4-OSL\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\ncache-control: max-age=14400\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Tue, 07 Apr 2026 13:21:46 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1010,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"8d00e097c840d9f1d02b5d70bdd6b4c6","sha1":"324c3df851e8cc590e6bf7ca4993268012773a06","sha256":"ebd6e763c431a2c5af2d04463719b7002f112f9539e9b1b0a90269a229f50314","sha512":"6363bf519581cd82a76cb62e344f1cdffe1bf5c6753d8c555e4104cbf456201c569abc49171c296d91cb1ef6c01e195f4bac6bec5752de3acac258548345be9b","ssdeep":"","tlshash":"081178969013d7c88d434af4fc37584e8d2919bea7a4b2fa40443e9cb4df4d8d9578e0","first_seen":"2024-10-12T23:01:03.386102Z","last_seen":"2026-08-07T09:07:57.019471Z","times_seen":276,"resource_available":false,"data":null}},"time_used":57,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":57,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"fortune-slotdriftzone.click","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"fortune-slotdriftzone.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"fortune-slotdriftzone.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"easy-image.b-cdn.net/icon/icon_18.webp","fqdn":"easy-image.b-cdn.net","domain":"b-cdn.net","tld":"net"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fortune-slotdriftzone.click/410e1faa-4edb-4d26-b541-0490fbe9aa2f/en/?lead_info=bGVhZF91dWlkPTIwYjZiMDQ1LWEzYjAtNDMwZS05YmM0LTI4NGU4YzdjZTRiNyZvcz1XaW5kb3dzJmxhbmd1YWdlPWVuLVVTJm9mZmVyX3VybD1odHRwczovL3NhcG9nLm9ubGluZS9jbGljaz9rZXk9NjI5MGU0MmMyODUzNDVkYzk5MGEyNTQzNTJiZTA4YzUmbGVhZF9pZD0yMGI2YjA0NS1hM2IwLTQzMGUtOWJjNC0yODRlOGM3Y2U0YjcmdXRtX2NhbXBhaWduPXtzdWIxfSZ1dG1fc291cmNlPXtzdWIyfSZhY2NfaWQ9e3N1YjN9JnV0bV9jb250ZW50PXtzdWI0fSZ1dG1fbWVkaXVtPXtzdWI1fSZ1dG1fdGVybXM9e3N1YjZ9JmFkX2lkPXtzdWI3fSZmYmNsaWQ9e2ZiY2xpZH0mcGl4ZWw9e3BpeGVsfQ\u0026is_webview=false\u0026pixel=\u0026fbclid=","date":"2026-04-15T05:38:51.872Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.b-cdn.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 06 Nov 2025 00:00:00 GMT","end":"Wed, 11 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"92:9B:37:29:B4:2D:AB:EB:68:07:7B:03:B2:80:2E:5B:53:CE:AD:E7","sha256":"51:6F:86:36:A1:23:32:72:AA:0F:28:1A:81:F4:92:F8:82:35:42:13:BA:4C:21:2D:80:C5:BB:BF:19:04:1D:32"}}},"request":{"raw":"GET /icon/icon_18.webp HTTP/1.1\r\nHost: easy-image.b-cdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fortune-slotdriftzone.click/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 15 Apr 2026 05:38:52 GMT\r\ncontent-type: image/webp\r\ncontent-length: 372\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 2442763\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=0\r\netag: \"66bf22e9-174\"\r\nlast-modified: Fri, 16 Aug 2024 09:59:05 GMT\r\ncdn-storageserver: SE-583\r\ncdn-fileserver: 884\r\ncdn-proxyver: 1.33\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 08/09/2025 14:29:58\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 3e755801c90d9ceaed0f88f6c325ed7d\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":372,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"5f486e9cbe8211f66adc8b17c0f0d6c8","sha1":"9bff2faaadb43aa410a39b09c32e1f38cbc393ea","sha256":"d189311ea5cbefe56171921828cbc8f1c9d573c99832d801cce072d830523161","sha512":"8df29019097617c82b65a8b916cdb1078cfa16c0cca4d65ab41a82606cddadf04e31fd337c8a04b6a721aaddfc5b36b39f670a6447098e640ddc86cc40c46340","ssdeep":"","tlshash":"d1e0f8006f2a0927cc0899032a624c48d23363a6e8f3b40097eab0c6f8764ab6540c1d","first_seen":"2025-03-26T16:41:42.39254Z","last_seen":"2026-08-07T09:07:57.015368Z","times_seen":229,"resource_available":false,"data":null}},"time_used":363,"timings":{"blocked":127,"dns":0,"connect":20,"send":0,"wait":67,"receive":0,"ssl":137},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"easy-image.b-cdn.net/users/female/93.jpg","fqdn":"easy-image.b-cdn.net","domain":"b-cdn.net","tld":"net"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fortune-slotdriftzone.click/410e1faa-4edb-4d26-b541-0490fbe9aa2f/en/?lead_info=bGVhZF91dWlkPTIwYjZiMDQ1LWEzYjAtNDMwZS05YmM0LTI4NGU4YzdjZTRiNyZvcz1XaW5kb3dzJmxhbmd1YWdlPWVuLVVTJm9mZmVyX3VybD1odHRwczovL3NhcG9nLm9ubGluZS9jbGljaz9rZXk9NjI5MGU0MmMyODUzNDVkYzk5MGEyNTQzNTJiZTA4YzUmbGVhZF9pZD0yMGI2YjA0NS1hM2IwLTQzMGUtOWJjNC0yODRlOGM3Y2U0YjcmdXRtX2NhbXBhaWduPXtzdWIxfSZ1dG1fc291cmNlPXtzdWIyfSZhY2NfaWQ9e3N1YjN9JnV0bV9jb250ZW50PXtzdWI0fSZ1dG1fbWVkaXVtPXtzdWI1fSZ1dG1fdGVybXM9e3N1YjZ9JmFkX2lkPXtzdWI3fSZmYmNsaWQ9e2ZiY2xpZH0mcGl4ZWw9e3BpeGVsfQ\u0026is_webview=false\u0026pixel=\u0026fbclid=","date":"2026-04-15T05:38:51.900Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.b-cdn.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 06 Nov 2025 00:00:00 GMT","end":"Wed, 11 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"92:9B:37:29:B4:2D:AB:EB:68:07:7B:03:B2:80:2E:5B:53:CE:AD:E7","sha256":"51:6F:86:36:A1:23:32:72:AA:0F:28:1A:81:F4:92:F8:82:35:42:13:BA:4C:21:2D:80:C5:BB:BF:19:04:1D:32"}}},"request":{"raw":"GET /users/female/93.jpg HTTP/1.1\r\nHost: easy-image.b-cdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fortune-slotdriftzone.click/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 15 Apr 2026 05:38:52 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 12608\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 2442763\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=0\r\netag: \"67ed046d-3140\"\r\nlast-modified: Wed, 02 Apr 2025 09:33:33 GMT\r\ncdn-storageserver: DE-1137\r\ncdn-fileserver: 989\r\ncdn-proxyver: 1.43\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 01/15/2026 17:53:51\r\ncdn-edgestorageid: 830\r\ncdn-requestid: c5ebe248dec58876cda342cc3adddaa4\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":12608,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 216x324, components 3","md5":"221d7697e8b9bb4b309cde496724f89f","sha1":"74c46a000094551c7be5dec23a033dc4a322601b","sha256":"841d41790a832cf4c5c0edc539c159bd4c1834ad78a34babcf51e911b09bf5f2","sha512":"96b147a8309d69d4fa362086650925b645ddb3f30ff26f2e9bffe5aac171aad13fd63819024e27d3e332f2e6f6d6b40393dfc4751a599cf3f819d2a1a3eb6312","ssdeep":"384:AGT1VGdZ1AgaQjyUBO/rb61/p8CwvBqNnYtgm:xT1VM1AgaAyv/rb619nYtp","tlshash":"b342af452912d94def7cbd3d4a1380aaf330815dddb6b90d8a8111f8e2dcaddae522c6","first_seen":"2025-08-04T05:48:20.984754Z","last_seen":"2026-07-25T07:12:04.391413Z","times_seen":28,"resource_available":false,"data":null}},"time_used":166,"timings":{"blocked":94,"dns":0,"connect":0,"send":0,"wait":71,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fortune-slotdriftzone.click/410e1faa-4edb-4d26-b541-0490fbe9aa2f/en/fonts/Roboto-Regular.ttf","fqdn":"fortune-slotdriftzone.click","domain":"fortune-slotdriftzone.click","tld":"click"},"ip":{"addr":"172.67.181.2","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://fortune-slotdriftzone.click/410e1faa-4edb-4d26-b541-0490fbe9aa2f/en/?lead_info=bGVhZF91dWlkPTIwYjZiMDQ1LWEzYjAtNDMwZS05YmM0LTI4NGU4YzdjZTRiNyZvcz1XaW5kb3dzJmxhbmd1YWdlPWVuLVVTJm9mZmVyX3VybD1odHRwczovL3NhcG9nLm9ubGluZS9jbGljaz9rZXk9NjI5MGU0MmMyODUzNDVkYzk5MGEyNTQzNTJiZTA4YzUmbGVhZF9pZD0yMGI2YjA0NS1hM2IwLTQzMGUtOWJjNC0yODRlOGM3Y2U0YjcmdXRtX2NhbXBhaWduPXtzdWIxfSZ1dG1fc291cmNlPXtzdWIyfSZhY2NfaWQ9e3N1YjN9JnV0bV9jb250ZW50PXtzdWI0fSZ1dG1fbWVkaXVtPXtzdWI1fSZ1dG1fdGVybXM9e3N1YjZ9JmFkX2lkPXtzdWI3fSZmYmNsaWQ9e2ZiY2xpZH0mcGl4ZWw9e3BpeGVsfQ\u0026is_webview=false\u0026pixel=\u0026fbclid=","date":"2026-04-15T05:38:52.450Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fortune-slotdriftzone.click","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 05 Apr 2026 17:33:19 GMT","end":"Sat, 04 Jul 2026 17:33:18 GMT"},"fingerprint":{"sha1":"8D:06:82:02:25:6E:FC:C3:DD:A9:EF:7E:9E:71:30:6B:C7:B0:E0:CA","sha256":"47:26:91:AA:EA:BF:3F:BF:57:5C:44:EA:35:B3:E0:10:5A:C5:8F:D6:6D:84:10:E6:27:36:10:A5:91:D2:47:83"}}},"request":{"raw":"GET /410e1faa-4edb-4d26-b541-0490fbe9aa2f/en/fonts/Roboto-Regular.ttf HTTP/1.1\r\nHost: fortune-slotdriftzone.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fortune-slotdriftzone.click/410e1faa-4edb-4d26-b541-0490fbe9aa2f/en/style/style.css\r\nCookie: cl_st=b\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 168260\r\npriority: u=4,i=?0\r\ndate: Wed, 15 Apr 2026 05:38:52 GMT\r\ncontent-type: application/octet-stream\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ec89b4598b456b4-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\netag: \"69d504ea-29144\"\r\nlast-modified: Tue, 07 Apr 2026 13:21:46 GMT\r\nserver: cloudflare\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=i0w8BN7yG9XrkioJPq993ED72L8Ad63AmnD2OmM2zbmsKS4VkdnqYKVfO%2BAW%2F%2BvS3njgXHWdyG4wCwxydNVqh%2B4bJqJAlfs%2F4ZIo3nGG5f7fOjZioZjF3tXJPk5xkQ7Lt9uQI%2FXZfxI8%2F0RKojc%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":168260,"size_decoded":0,"mime_type":"application/octet-stream","magic":"TrueType Font data, 18 tables, 1st \"GDEF\", 13 names, Microsoft, language 0x409, Copyright 2011 Google Inc. All Rights Reserved.RobotoRegularVersion 2.137; 2017Roboto-RegularRob","md5":"8a36205bd9b83e03af0591a004bc97f4","sha1":"56c5c0d38bde4c1f1549dda43db37b09c608aad3","sha256":"4e147ab64b9fdf6d89d01f6b8c3ca0b3cddc59d608a8e2218f9a2504b5c98e14","sha512":"e96b43b0ca3fd7775d75a702f44cd1b0dfd325e1db317f7cba84efdf572571fe7594068f9132a937251aab8bd1f68783213677d4953aca197195fbe5db1f90d7","ssdeep":"3072:5y2goL/sAQRuzzlPrvRwhRFUzMWlYfxJVBxV+aYT3qPXI0yH4yDuNOIOU7og2NE/:xOmCeu+bqPeHr0WUMxNE/","tlshash":"83f3d601d642aa19c6d6b2787c7cb3be4c75e82dfd4a602734e5af2115c8c05ec69bbc","first_seen":"2023-04-07T15:31:36Z","last_seen":"2026-08-13T19:54:04.135452Z","times_seen":10422,"resource_available":false,"data":null}},"time_used":70,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":54,"receive":16,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"fortune-slotdriftzone.click","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"fortune-slotdriftzone.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"fortune-slotdriftzone.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fortune-slotdriftzone.click/410e1faa-4edb-4d26-b541-0490fbe9aa2f/en/fonts/Roboto-Medium.ttf","fqdn":"fortune-slotdriftzone.click","domain":"fortune-slotdriftzone.click","tld":"click"},"ip":{"addr":"172.67.181.2","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://fortune-slotdriftzone.click/410e1faa-4edb-4d26-b541-0490fbe9aa2f/en/?lead_info=bGVhZF91dWlkPTIwYjZiMDQ1LWEzYjAtNDMwZS05YmM0LTI4NGU4YzdjZTRiNyZvcz1XaW5kb3dzJmxhbmd1YWdlPWVuLVVTJm9mZmVyX3VybD1odHRwczovL3NhcG9nLm9ubGluZS9jbGljaz9rZXk9NjI5MGU0MmMyODUzNDVkYzk5MGEyNTQzNTJiZTA4YzUmbGVhZF9pZD0yMGI2YjA0NS1hM2IwLTQzMGUtOWJjNC0yODRlOGM3Y2U0YjcmdXRtX2NhbXBhaWduPXtzdWIxfSZ1dG1fc291cmNlPXtzdWIyfSZhY2NfaWQ9e3N1YjN9JnV0bV9jb250ZW50PXtzdWI0fSZ1dG1fbWVkaXVtPXtzdWI1fSZ1dG1fdGVybXM9e3N1YjZ9JmFkX2lkPXtzdWI3fSZmYmNsaWQ9e2ZiY2xpZH0mcGl4ZWw9e3BpeGVsfQ\u0026is_webview=false\u0026pixel=\u0026fbclid=","date":"2026-04-15T05:38:52.452Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fortune-slotdriftzone.click","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 05 Apr 2026 17:33:19 GMT","end":"Sat, 04 Jul 2026 17:33:18 GMT"},"fingerprint":{"sha1":"8D:06:82:02:25:6E:FC:C3:DD:A9:EF:7E:9E:71:30:6B:C7:B0:E0:CA","sha256":"47:26:91:AA:EA:BF:3F:BF:57:5C:44:EA:35:B3:E0:10:5A:C5:8F:D6:6D:84:10:E6:27:36:10:A5:91:D2:47:83"}}},"request":{"raw":"GET /410e1faa-4edb-4d26-b541-0490fbe9aa2f/en/fonts/Roboto-Medium.ttf HTTP/1.1\r\nHost: fortune-slotdriftzone.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fortune-slotdriftzone.click/410e1faa-4edb-4d26-b541-0490fbe9aa2f/en/style/style.css\r\nCookie: cl_st=b\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 168644\r\npriority: u=4,i=?0\r\ndate: Wed, 15 Apr 2026 05:38:52 GMT\r\ncontent-type: application/octet-stream\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ec89b4598b556b4-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\netag: \"69d504ea-292c4\"\r\nlast-modified: Tue, 07 Apr 2026 13:21:46 GMT\r\nserver: cloudflare\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XGli20xbJcLRCC4SPJhslJnVvRDPhzJK4nNuFYOOqgmNWbx%2BUZbzt0UMeRYXagxZyfql%2BWhjC%2FvvZ3%2BBwPuZ7nxNsY9GtpKoTt1iX1wIV3injJVNUQH%2BILFMcpuFBa%2BL%2FVI5JOc%2FrtiIe77NHbw%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":168644,"size_decoded":0,"mime_type":"application/octet-stream","magic":"TrueType Font data, 18 tables, 1st \"GDEF\", 15 names, Microsoft, language 0x409, Copyright 2011 Google Inc. All Rights Reserved.Roboto MediumRegularVersion 2.137; 2017Roboto-Med","md5":"68ea4734cf86bd544650aee05137d7bb","sha1":"3c6a09fcc6a454924c81af7dff94fc6d399ed79b","sha256":"9d0d55a303bfd13b79a87721f65185e93f235e2d77fe398b2dca67ac519915f5","sha512":"5d55a41b845f3a3ae9b08cee5258348dfd83dac5f0a0e48159cd85c141c614a02f8f474fa683d2bfbc451d49dd3b749820662d403b2e3fd3f16a242eaca64115","ssdeep":"3072:wqmtn5wkex8r6Qym7KCkygAKuXylCC9ptSUXl8j/6afWRCgqdhASD/80/:n25wklN7T3QtSUXz7XfST80/","tlshash":"73f3d701d241bf25cac6b6787c7c93be4cb5e41abc4aa52730d9ab3159c8805ec58bfd","first_seen":"2023-04-05T23:29:00Z","last_seen":"2026-08-13T16:27:45.8172Z","times_seen":2104,"resource_available":false,"data":null}},"time_used":79,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":42,"receive":37,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"fortune-slotdriftzone.click","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"fortune-slotdriftzone.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"fortune-slotdriftzone.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"easy-image.b-cdn.net/icon/icon_download.svg","fqdn":"easy-image.b-cdn.net","domain":"b-cdn.net","tld":"net"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fortune-slotdriftzone.click/410e1faa-4edb-4d26-b541-0490fbe9aa2f/en/?lead_info=bGVhZF91dWlkPTIwYjZiMDQ1LWEzYjAtNDMwZS05YmM0LTI4NGU4YzdjZTRiNyZvcz1XaW5kb3dzJmxhbmd1YWdlPWVuLVVTJm9mZmVyX3VybD1odHRwczovL3NhcG9nLm9ubGluZS9jbGljaz9rZXk9NjI5MGU0MmMyODUzNDVkYzk5MGEyNTQzNTJiZTA4YzUmbGVhZF9pZD0yMGI2YjA0NS1hM2IwLTQzMGUtOWJjNC0yODRlOGM3Y2U0YjcmdXRtX2NhbXBhaWduPXtzdWIxfSZ1dG1fc291cmNlPXtzdWIyfSZhY2NfaWQ9e3N1YjN9JnV0bV9jb250ZW50PXtzdWI0fSZ1dG1fbWVkaXVtPXtzdWI1fSZ1dG1fdGVybXM9e3N1YjZ9JmFkX2lkPXtzdWI3fSZmYmNsaWQ9e2ZiY2xpZH0mcGl4ZWw9e3BpeGVsfQ\u0026is_webview=false\u0026pixel=\u0026fbclid=","date":"2026-04-15T05:38:51.871Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.b-cdn.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 06 Nov 2025 00:00:00 GMT","end":"Wed, 11 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"92:9B:37:29:B4:2D:AB:EB:68:07:7B:03:B2:80:2E:5B:53:CE:AD:E7","sha256":"51:6F:86:36:A1:23:32:72:AA:0F:28:1A:81:F4:92:F8:82:35:42:13:BA:4C:21:2D:80:C5:BB:BF:19:04:1D:32"}}},"request":{"raw":"GET /icon/icon_download.svg HTTP/1.1\r\nHost: easy-image.b-cdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fortune-slotdriftzone.click/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 15 Apr 2026 05:38:52 GMT\r\ncontent-type: image/svg+xml\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 2442763\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=0\r\ncontent-encoding: br\r\netag: \"67adffaa-226\"\r\nlast-modified: Thu, 13 Feb 2025 14:20:26 GMT\r\ncdn-storageserver: SE-582\r\ncdn-fileserver: 1028\r\ncdn-proxyver: 1.50\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 04/15/2026 05:35:16\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 53175f9ebda45438f027b16426083a50\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":550,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"359c897b8171e46840e87873725ca8a0","sha1":"b8dc0aa03d7e3d78ee971dfdc384730bbca08412","sha256":"1266bd734a167b46b287221ff03697cf323e198d441a3ab274fad08f35ea016e","sha512":"6d8b6a95b5de2f4d2e2e82d8f0e9c394c52dd9ad7267f9d7ec82aac4f61fb938c53deb9b5628646a6382ae996efbfda42e4e6a859872132d83f8a7ca2ac292eb","ssdeep":"","tlshash":"30f08b2470ffc5c6db08c61396e0b0ff773267c412498424f19359e921dc6c56d38599","first_seen":"2024-08-19T13:45:40.062311Z","last_seen":"2026-08-07T09:07:56.997055Z","times_seen":278,"resource_available":false,"data":null}},"time_used":372,"timings":{"blocked":133,"dns":0,"connect":21,"send":0,"wait":64,"receive":0,"ssl":146},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fortune-slotdriftzone.click/410e1faa-4edb-4d26-b541-0490fbe9aa2f/en/images/security_icon_n-1.webp","fqdn":"fortune-slotdriftzone.click","domain":"fortune-slotdriftzone.click","tld":"click"},"ip":{"addr":"172.67.181.2","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fortune-slotdriftzone.click/410e1faa-4edb-4d26-b541-0490fbe9aa2f/en/?lead_info=bGVhZF91dWlkPTIwYjZiMDQ1LWEzYjAtNDMwZS05YmM0LTI4NGU4YzdjZTRiNyZvcz1XaW5kb3dzJmxhbmd1YWdlPWVuLVVTJm9mZmVyX3VybD1odHRwczovL3NhcG9nLm9ubGluZS9jbGljaz9rZXk9NjI5MGU0MmMyODUzNDVkYzk5MGEyNTQzNTJiZTA4YzUmbGVhZF9pZD0yMGI2YjA0NS1hM2IwLTQzMGUtOWJjNC0yODRlOGM3Y2U0YjcmdXRtX2NhbXBhaWduPXtzdWIxfSZ1dG1fc291cmNlPXtzdWIyfSZhY2NfaWQ9e3N1YjN9JnV0bV9jb250ZW50PXtzdWI0fSZ1dG1fbWVkaXVtPXtzdWI1fSZ1dG1fdGVybXM9e3N1YjZ9JmFkX2lkPXtzdWI3fSZmYmNsaWQ9e2ZiY2xpZH0mcGl4ZWw9e3BpeGVsfQ\u0026is_webview=false\u0026pixel=\u0026fbclid=","date":"2026-04-15T05:38:51.882Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fortune-slotdriftzone.click","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 05 Apr 2026 17:33:19 GMT","end":"Sat, 04 Jul 2026 17:33:18 GMT"},"fingerprint":{"sha1":"8D:06:82:02:25:6E:FC:C3:DD:A9:EF:7E:9E:71:30:6B:C7:B0:E0:CA","sha256":"47:26:91:AA:EA:BF:3F:BF:57:5C:44:EA:35:B3:E0:10:5A:C5:8F:D6:6D:84:10:E6:27:36:10:A5:91:D2:47:83"}}},"request":{"raw":"GET /410e1faa-4edb-4d26-b541-0490fbe9aa2f/en/images/security_icon_n-1.webp HTTP/1.1\r\nHost: fortune-slotdriftzone.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fortune-slotdriftzone.click/410e1faa-4edb-4d26-b541-0490fbe9aa2f/en/?lead_info=bGVhZF91dWlkPTIwYjZiMDQ1LWEzYjAtNDMwZS05YmM0LTI4NGU4YzdjZTRiNyZvcz1XaW5kb3dzJmxhbmd1YWdlPWVuLVVTJm9mZmVyX3VybD1odHRwczovL3NhcG9nLm9ubGluZS9jbGljaz9rZXk9NjI5MGU0MmMyODUzNDVkYzk5MGEyNTQzNTJiZTA4YzUmbGVhZF9pZD0yMGI2YjA0NS1hM2IwLTQzMGUtOWJjNC0yODRlOGM3Y2U0YjcmdXRtX2NhbXBhaWduPXtzdWIxfSZ1dG1fc291cmNlPXtzdWIyfSZhY2NfaWQ9e3N1YjN9JnV0bV9jb250ZW50PXtzdWI0fSZ1dG1fbWVkaXVtPXtzdWI1fSZ1dG1fdGVybXM9e3N1YjZ9JmFkX2lkPXtzdWI3fSZmYmNsaWQ9e2ZiY2xpZH0mcGl4ZWw9e3BpeGVsfQ\u0026is_webview=false\u0026pixel=\u0026fbclid=\r\nCookie: cl_st=b\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 574\r\npriority: u=4,i=?0\r\ndate: Wed, 15 Apr 2026 05:38:51 GMT\r\ncontent-type: image/webp\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ec89b41f87e56b4-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\netag: \"69d504ea-23e\"\r\nlast-modified: Tue, 07 Apr 2026 13:21:46 GMT\r\nserver: cloudflare\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fS9BdOgfFVDBTz7LQC5sndgmohiMLKeU69%2Bu2mdetZGept1JGPRqdkohAXY1KJJPAnD6bhztlzYejfSkBgqSVAm4bMl%2Fka5jCzWNPCGtsDJHgkVhrjBfNwFdwXT3slgYtg4ZznhHsAaFlQCMCA8%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":574,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"16735dee72b009f6085c85bf194c313b","sha1":"0f7409a79c4926442e1ed59d10dbb87f290ea0a5","sha256":"3244abdb32f757760de0676e5a5c71e45558014437b3e3f437efd110a722dd22","sha512":"d280b78c80f8541ca9617dd50969109b38c2488f125dab50b5fd5bcfe5329fbb7fe28f7f09cdd52df7deb65c1f147f2b071beab7ce23bfc39104121c142bd606","ssdeep":"","tlshash":"eff041cbdb8e2ee4238b68600da0191601af340281000a840e04682367a03f8b9dc497","first_seen":"2024-10-04T10:42:22.386228Z","last_seen":"2026-08-07T09:07:56.991603Z","times_seen":168,"resource_available":false,"data":null}},"time_used":46,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":46,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"fortune-slotdriftzone.click","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"fortune-slotdriftzone.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"fortune-slotdriftzone.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fortune-slotdriftzone.click/410e1faa-4edb-4d26-b541-0490fbe9aa2f/en/images/security_icon_n-2.webp","fqdn":"fortune-slotdriftzone.click","domain":"fortune-slotdriftzone.click","tld":"click"},"ip":{"addr":"172.67.181.2","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fortune-slotdriftzone.click/410e1faa-4edb-4d26-b541-0490fbe9aa2f/en/?lead_info=bGVhZF91dWlkPTIwYjZiMDQ1LWEzYjAtNDMwZS05YmM0LTI4NGU4YzdjZTRiNyZvcz1XaW5kb3dzJmxhbmd1YWdlPWVuLVVTJm9mZmVyX3VybD1odHRwczovL3NhcG9nLm9ubGluZS9jbGljaz9rZXk9NjI5MGU0MmMyODUzNDVkYzk5MGEyNTQzNTJiZTA4YzUmbGVhZF9pZD0yMGI2YjA0NS1hM2IwLTQzMGUtOWJjNC0yODRlOGM3Y2U0YjcmdXRtX2NhbXBhaWduPXtzdWIxfSZ1dG1fc291cmNlPXtzdWIyfSZhY2NfaWQ9e3N1YjN9JnV0bV9jb250ZW50PXtzdWI0fSZ1dG1fbWVkaXVtPXtzdWI1fSZ1dG1fdGVybXM9e3N1YjZ9JmFkX2lkPXtzdWI3fSZmYmNsaWQ9e2ZiY2xpZH0mcGl4ZWw9e3BpeGVsfQ\u0026is_webview=false\u0026pixel=\u0026fbclid=","date":"2026-04-15T05:38:51.883Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fortune-slotdriftzone.click","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 05 Apr 2026 17:33:19 GMT","end":"Sat, 04 Jul 2026 17:33:18 GMT"},"fingerprint":{"sha1":"8D:06:82:02:25:6E:FC:C3:DD:A9:EF:7E:9E:71:30:6B:C7:B0:E0:CA","sha256":"47:26:91:AA:EA:BF:3F:BF:57:5C:44:EA:35:B3:E0:10:5A:C5:8F:D6:6D:84:10:E6:27:36:10:A5:91:D2:47:83"}}},"request":{"raw":"GET /410e1faa-4edb-4d26-b541-0490fbe9aa2f/en/images/security_icon_n-2.webp HTTP/1.1\r\nHost: fortune-slotdriftzone.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fortune-slotdriftzone.click/410e1faa-4edb-4d26-b541-0490fbe9aa2f/en/?lead_info=bGVhZF91dWlkPTIwYjZiMDQ1LWEzYjAtNDMwZS05YmM0LTI4NGU4YzdjZTRiNyZvcz1XaW5kb3dzJmxhbmd1YWdlPWVuLVVTJm9mZmVyX3VybD1odHRwczovL3NhcG9nLm9ubGluZS9jbGljaz9rZXk9NjI5MGU0MmMyODUzNDVkYzk5MGEyNTQzNTJiZTA4YzUmbGVhZF9pZD0yMGI2YjA0NS1hM2IwLTQzMGUtOWJjNC0yODRlOGM3Y2U0YjcmdXRtX2NhbXBhaWduPXtzdWIxfSZ1dG1fc291cmNlPXtzdWIyfSZhY2NfaWQ9e3N1YjN9JnV0bV9jb250ZW50PXtzdWI0fSZ1dG1fbWVkaXVtPXtzdWI1fSZ1dG1fdGVybXM9e3N1YjZ9JmFkX2lkPXtzdWI3fSZmYmNsaWQ9e2ZiY2xpZH0mcGl4ZWw9e3BpeGVsfQ\u0026is_webview=false\u0026pixel=\u0026fbclid=\r\nCookie: cl_st=b\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 198\r\npriority: u=4,i=?0\r\ndate: Wed, 15 Apr 2026 05:38:51 GMT\r\ncontent-type: image/webp\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ec89b41f87f56b4-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\netag: \"69d504ea-c6\"\r\nlast-modified: Tue, 07 Apr 2026 13:21:46 GMT\r\nserver: cloudflare\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2F1nFneIcCrbJY5OgDsxR192qyQnCqkWIg3SWQ3i3dYObJbYDQq9aZBDZ6%2Fc4B9qkN%2BQ1Kdf4BDMxxtcrRvkuuJl%2F%2FcuZx792BfB5bH2OnhQmNrEzuNLdB6yCy2T5CUwTaaK8p8%2BSQVcIQlyo4ko%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":198,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"3ac1664b06f112ae930716445d9765a9","sha1":"064752fdedd5ba2d38ef36617111de68133cf6b7","sha256":"c55aa588c9480ee7851d578b3306c80f5548f9ae5b3bc9afb5d126e5ef0652f0","sha512":"c00d5d5cb2e5e0afcf3b315a2649da2611ae0e3b75e5677aaf6e851bcb8afd49582161a06c80374e3b47942258ab54379cbfaa8a6ea772b2ad97a33a18fe69cc","ssdeep":"","tlshash":"dad02292cf2508280a732c0a0240442511f3589c20c3ea31a6a62cfa4c3f74b666aa00","first_seen":"2025-06-13T11:43:17.267674Z","last_seen":"2026-08-07T09:07:57.019989Z","times_seen":146,"resource_available":false,"data":null}},"time_used":58,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":58,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"fortune-slotdriftzone.click","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"fortune-slotdriftzone.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"fortune-slotdriftzone.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"easy-image.b-cdn.net/users/female/52.jpg","fqdn":"easy-image.b-cdn.net","domain":"b-cdn.net","tld":"net"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fortune-slotdriftzone.click/410e1faa-4edb-4d26-b541-0490fbe9aa2f/en/?lead_info=bGVhZF91dWlkPTIwYjZiMDQ1LWEzYjAtNDMwZS05YmM0LTI4NGU4YzdjZTRiNyZvcz1XaW5kb3dzJmxhbmd1YWdlPWVuLVVTJm9mZmVyX3VybD1odHRwczovL3NhcG9nLm9ubGluZS9jbGljaz9rZXk9NjI5MGU0MmMyODUzNDVkYzk5MGEyNTQzNTJiZTA4YzUmbGVhZF9pZD0yMGI2YjA0NS1hM2IwLTQzMGUtOWJjNC0yODRlOGM3Y2U0YjcmdXRtX2NhbXBhaWduPXtzdWIxfSZ1dG1fc291cmNlPXtzdWIyfSZhY2NfaWQ9e3N1YjN9JnV0bV9jb250ZW50PXtzdWI0fSZ1dG1fbWVkaXVtPXtzdWI1fSZ1dG1fdGVybXM9e3N1YjZ9JmFkX2lkPXtzdWI3fSZmYmNsaWQ9e2ZiY2xpZH0mcGl4ZWw9e3BpeGVsfQ\u0026is_webview=false\u0026pixel=\u0026fbclid=","date":"2026-04-15T05:38:51.884Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.b-cdn.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 06 Nov 2025 00:00:00 GMT","end":"Wed, 11 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"92:9B:37:29:B4:2D:AB:EB:68:07:7B:03:B2:80:2E:5B:53:CE:AD:E7","sha256":"51:6F:86:36:A1:23:32:72:AA:0F:28:1A:81:F4:92:F8:82:35:42:13:BA:4C:21:2D:80:C5:BB:BF:19:04:1D:32"}}},"request":{"raw":"GET /users/female/52.jpg HTTP/1.1\r\nHost: easy-image.b-cdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fortune-slotdriftzone.click/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 15 Apr 2026 05:38:52 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 17173\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 2442763\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=0\r\netag: \"67ed0466-4315\"\r\nlast-modified: Wed, 02 Apr 2025 09:33:26 GMT\r\ncdn-storageserver: SE-904\r\ncdn-fileserver: 344\r\ncdn-proxyver: 1.50\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 04/15/2026 05:38:52\r\ncdn-edgestorageid: 830\r\ncdn-requestid: e2be995abf120bb2ce2ae67929e03a24\r\ncdn-cache: MISS\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":17173,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 365x243, components 3","md5":"f98d16591f4722c6853bc9e0a6afb7bc","sha1":"272265725ade947b557f388f03f1f98be59c2099","sha256":"2b1890d816b82968c44ddc2b87f0beebd4657f87460bc0d105f64128756ee1c8","sha512":"754d30cd6ad3624a95cff04ac32abf4f9357bc3149558cb0bec9add5dad0c57695ad4f2c8ebbb9d4c706f1c0d2ba46fd5583ed0ae1fda1e03b381b26c52b2f31","ssdeep":"384:6RuDR63qasFJFuTfz2HQ1QyygusXD+Es9q6F:6RSRy3sFirqw1QUNlCj","tlshash":"7372e0a88e317a09ca789e3bd45fd9d0e768d72d05a1c40514a288f59c73d6a2734e16","first_seen":"2025-10-22T18:20:47.495768Z","last_seen":"2026-07-25T07:12:04.417134Z","times_seen":22,"resource_available":false,"data":null}},"time_used":360,"timings":{"blocked":126,"dns":0,"connect":25,"send":0,"wait":58,"receive":3,"ssl":144},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"easy-image.b-cdn.net/users/female/79.jpg","fqdn":"easy-image.b-cdn.net","domain":"b-cdn.net","tld":"net"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fortune-slotdriftzone.click/410e1faa-4edb-4d26-b541-0490fbe9aa2f/en/?lead_info=bGVhZF91dWlkPTIwYjZiMDQ1LWEzYjAtNDMwZS05YmM0LTI4NGU4YzdjZTRiNyZvcz1XaW5kb3dzJmxhbmd1YWdlPWVuLVVTJm9mZmVyX3VybD1odHRwczovL3NhcG9nLm9ubGluZS9jbGljaz9rZXk9NjI5MGU0MmMyODUzNDVkYzk5MGEyNTQzNTJiZTA4YzUmbGVhZF9pZD0yMGI2YjA0NS1hM2IwLTQzMGUtOWJjNC0yODRlOGM3Y2U0YjcmdXRtX2NhbXBhaWduPXtzdWIxfSZ1dG1fc291cmNlPXtzdWIyfSZhY2NfaWQ9e3N1YjN9JnV0bV9jb250ZW50PXtzdWI0fSZ1dG1fbWVkaXVtPXtzdWI1fSZ1dG1fdGVybXM9e3N1YjZ9JmFkX2lkPXtzdWI3fSZmYmNsaWQ9e2ZiY2xpZH0mcGl4ZWw9e3BpeGVsfQ\u0026is_webview=false\u0026pixel=\u0026fbclid=","date":"2026-04-15T05:38:51.885Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.b-cdn.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 06 Nov 2025 00:00:00 GMT","end":"Wed, 11 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"92:9B:37:29:B4:2D:AB:EB:68:07:7B:03:B2:80:2E:5B:53:CE:AD:E7","sha256":"51:6F:86:36:A1:23:32:72:AA:0F:28:1A:81:F4:92:F8:82:35:42:13:BA:4C:21:2D:80:C5:BB:BF:19:04:1D:32"}}},"request":{"raw":"GET /users/female/79.jpg HTTP/1.1\r\nHost: easy-image.b-cdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fortune-slotdriftzone.click/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 15 Apr 2026 05:38:52 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 34780\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 2442763\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=0\r\netag: \"67ed046b-87dc\"\r\nlast-modified: Wed, 02 Apr 2025 09:33:31 GMT\r\ncdn-storageserver: SE-583\r\ncdn-fileserver: 1028\r\ncdn-proxyver: 1.50\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 04/15/2026 05:38:52\r\ncdn-edgestorageid: 830\r\ncdn-requestid: c5c056b6c46b182ce2ee0fd67310bf93\r\ncdn-cache: MISS\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":34780,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 307x460, components 3","md5":"09af49f6d773bc2c43266e0096a1f03b","sha1":"4eb9a843ff8d74f6234f944be28abe781000f75e","sha256":"177098651c91361201875b2c29ab5193ff7e885621c5e0c053edad432da16294","sha512":"ffa0bc91e186326607ba21eae2966d9e7c9dea714a062017725080a3647633b66313cf92a787e0fa0ba01322480dc527a1c21283ded7617e0c490ee342dc2f21","ssdeep":"768:x6ZuiiURSqeap5dg2K3DHAJc55NTm74jTVgV:xySIXg2KbJLm74NQ","tlshash":"e7f2f10a9e1f370ed738a93402c766bde60cb25b959988d2fc0119d134cf76efd9261a","first_seen":"2025-08-04T09:14:47.378052Z","last_seen":"2026-07-25T07:12:04.430601Z","times_seen":19,"resource_available":false,"data":null}},"time_used":360,"timings":{"blocked":113,"dns":0,"connect":24,"send":0,"wait":82,"receive":4,"ssl":129},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"easy-image.b-cdn.net/users/female/15.jpg","fqdn":"easy-image.b-cdn.net","domain":"b-cdn.net","tld":"net"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fortune-slotdriftzone.click/410e1faa-4edb-4d26-b541-0490fbe9aa2f/en/?lead_info=bGVhZF91dWlkPTIwYjZiMDQ1LWEzYjAtNDMwZS05YmM0LTI4NGU4YzdjZTRiNyZvcz1XaW5kb3dzJmxhbmd1YWdlPWVuLVVTJm9mZmVyX3VybD1odHRwczovL3NhcG9nLm9ubGluZS9jbGljaz9rZXk9NjI5MGU0MmMyODUzNDVkYzk5MGEyNTQzNTJiZTA4YzUmbGVhZF9pZD0yMGI2YjA0NS1hM2IwLTQzMGUtOWJjNC0yODRlOGM3Y2U0YjcmdXRtX2NhbXBhaWduPXtzdWIxfSZ1dG1fc291cmNlPXtzdWIyfSZhY2NfaWQ9e3N1YjN9JnV0bV9jb250ZW50PXtzdWI0fSZ1dG1fbWVkaXVtPXtzdWI1fSZ1dG1fdGVybXM9e3N1YjZ9JmFkX2lkPXtzdWI3fSZmYmNsaWQ9e2ZiY2xpZH0mcGl4ZWw9e3BpeGVsfQ\u0026is_webview=false\u0026pixel=\u0026fbclid=","date":"2026-04-15T05:38:51.902Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.b-cdn.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 06 Nov 2025 00:00:00 GMT","end":"Wed, 11 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"92:9B:37:29:B4:2D:AB:EB:68:07:7B:03:B2:80:2E:5B:53:CE:AD:E7","sha256":"51:6F:86:36:A1:23:32:72:AA:0F:28:1A:81:F4:92:F8:82:35:42:13:BA:4C:21:2D:80:C5:BB:BF:19:04:1D:32"}}},"request":{"raw":"GET /users/female/15.jpg HTTP/1.1\r\nHost: easy-image.b-cdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fortune-slotdriftzone.click/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 15 Apr 2026 05:38:52 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 25305\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 2442763\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=0\r\netag: \"67ed0461-62d9\"\r\nlast-modified: Wed, 02 Apr 2025 09:33:21 GMT\r\ncdn-storageserver: SE-582\r\ncdn-fileserver: 1028\r\ncdn-proxyver: 1.41\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 12/08/2025 06:32:54\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 9aeffe8fdbf18c8b969280c265d49b70\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":25305,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 250x375, components 3","md5":"b4a1f83f73f1484d01019ebd722df9f4","sha1":"80e3d0d2c0475cc24ef48fb83c5856360c42f99c","sha256":"0717d1765be7d42e0be66b86d7ac3f25f60fdf01ceddbda6e04878a9050ad711","sha512":"dc3b17a0f9664d510c25e93121618454e5ade2e1532bfdae1ef04ac817fb1e1613a514b7b67549f6fdc4354e76195e360055346886198b255794d24aae67b048","ssdeep":"384:KNepcl5Q4IJcf/uNDpmXmBy3IL6HEKsP60B5ooAAfvRGNKk5Cb8L5QgyIOTB5/r:Kspck+/UFskwJgJbAKk5azgyFt5T","tlshash":"46b2e10fb7c10e9f1552a5b81e28ebba8b9d850eb22c317d742167c98d2bfd95033d12","first_seen":"2025-10-13T17:06:19.60978Z","last_seen":"2026-08-07T09:07:56.994551Z","times_seen":24,"resource_available":false,"data":null}},"time_used":170,"timings":{"blocked":92,"dns":0,"connect":0,"send":0,"wait":73,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fortune-slotdriftzone.click/410e1faa-4edb-4d26-b541-0490fbe9aa2f/en/images/icon_close.png","fqdn":"fortune-slotdriftzone.click","domain":"fortune-slotdriftzone.click","tld":"click"},"ip":{"addr":"172.67.181.2","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fortune-slotdriftzone.click/410e1faa-4edb-4d26-b541-0490fbe9aa2f/en/?lead_info=bGVhZF91dWlkPTIwYjZiMDQ1LWEzYjAtNDMwZS05YmM0LTI4NGU4YzdjZTRiNyZvcz1XaW5kb3dzJmxhbmd1YWdlPWVuLVVTJm9mZmVyX3VybD1odHRwczovL3NhcG9nLm9ubGluZS9jbGljaz9rZXk9NjI5MGU0MmMyODUzNDVkYzk5MGEyNTQzNTJiZTA4YzUmbGVhZF9pZD0yMGI2YjA0NS1hM2IwLTQzMGUtOWJjNC0yODRlOGM3Y2U0YjcmdXRtX2NhbXBhaWduPXtzdWIxfSZ1dG1fc291cmNlPXtzdWIyfSZhY2NfaWQ9e3N1YjN9JnV0bV9jb250ZW50PXtzdWI0fSZ1dG1fbWVkaXVtPXtzdWI1fSZ1dG1fdGVybXM9e3N1YjZ9JmFkX2lkPXtzdWI3fSZmYmNsaWQ9e2ZiY2xpZH0mcGl4ZWw9e3BpeGVsfQ\u0026is_webview=false\u0026pixel=\u0026fbclid=","date":"2026-04-15T05:38:51.904Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fortune-slotdriftzone.click","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 05 Apr 2026 17:33:19 GMT","end":"Sat, 04 Jul 2026 17:33:18 GMT"},"fingerprint":{"sha1":"8D:06:82:02:25:6E:FC:C3:DD:A9:EF:7E:9E:71:30:6B:C7:B0:E0:CA","sha256":"47:26:91:AA:EA:BF:3F:BF:57:5C:44:EA:35:B3:E0:10:5A:C5:8F:D6:6D:84:10:E6:27:36:10:A5:91:D2:47:83"}}},"request":{"raw":"GET /410e1faa-4edb-4d26-b541-0490fbe9aa2f/en/images/icon_close.png HTTP/1.1\r\nHost: fortune-slotdriftzone.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fortune-slotdriftzone.click/410e1faa-4edb-4d26-b541-0490fbe9aa2f/en/?lead_info=bGVhZF91dWlkPTIwYjZiMDQ1LWEzYjAtNDMwZS05YmM0LTI4NGU4YzdjZTRiNyZvcz1XaW5kb3dzJmxhbmd1YWdlPWVuLVVTJm9mZmVyX3VybD1odHRwczovL3NhcG9nLm9ubGluZS9jbGljaz9rZXk9NjI5MGU0MmMyODUzNDVkYzk5MGEyNTQzNTJiZTA4YzUmbGVhZF9pZD0yMGI2YjA0NS1hM2IwLTQzMGUtOWJjNC0yODRlOGM3Y2U0YjcmdXRtX2NhbXBhaWduPXtzdWIxfSZ1dG1fc291cmNlPXtzdWIyfSZhY2NfaWQ9e3N1YjN9JnV0bV9jb250ZW50PXtzdWI0fSZ1dG1fbWVkaXVtPXtzdWI1fSZ1dG1fdGVybXM9e3N1YjZ9JmFkX2lkPXtzdWI3fSZmYmNsaWQ9e2ZiY2xpZH0mcGl4ZWw9e3BpeGVsfQ\u0026is_webview=false\u0026pixel=\u0026fbclid=\r\nCookie: cl_st=b\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 427\r\npriority: u=4,i=?0\r\ndate: Wed, 15 Apr 2026 05:38:51 GMT\r\ncontent-type: image/png\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ec89b42288056b4-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\netag: \"69d504ea-1ab\"\r\nlast-modified: Tue, 07 Apr 2026 13:21:46 GMT\r\nserver: cloudflare\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4f3%2FqVYYx1ZTxn6Ch6qHq1YBKKuA7X0PUrOQeY1G3Iy7iwoezF8HG1NtBSZp6B6KdOprCpF%2FowHZFWfC5nKznXDK0fnMSfP3EWmiqZb1RSoyfv30UxzC5Hhgtz364pWxPMfWjeY5W1ZZvLANqok%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":427,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 96 x 96, 4-bit colormap, non-interlaced","md5":"26e9ae28962f669b44198d28293dbe30","sha1":"27b6e3581b6c98fc5934f4e4af1698cab270ef7e","sha256":"f67d193e6472e73251254135e0eee99f529bb8d14c4e434d40d9e7a53a37ce9e","sha512":"dc5c4c572e3094a73106b7f014ba89fa0f27aa9b1c2603c21656eeb5f930cbc353f08f4d9a3a2e295063404f0f1d44920f4b88b401577557c2a7feaf0bfdfda5","ssdeep":"","tlshash":"82e02b8af33849bad677a09ea2353a67bb689e6564580019c41671bd47701869106056","first_seen":"2024-04-25T09:45:56Z","last_seen":"2026-08-07T09:07:56.995042Z","times_seen":287,"resource_available":false,"data":null}},"time_used":50,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":49,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"fortune-slotdriftzone.click","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"fortune-slotdriftzone.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"fortune-slotdriftzone.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fortune-slotdriftzone.click/410e1faa-4edb-4d26-b541-0490fbe9aa2f/en/js/sendUpdateLead.js","fqdn":"fortune-slotdriftzone.click","domain":"fortune-slotdriftzone.click","tld":"click"},"ip":{"addr":"172.67.181.2","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://fortune-slotdriftzone.click/410e1faa-4edb-4d26-b541-0490fbe9aa2f/en/?lead_info=bGVhZF91dWlkPTIwYjZiMDQ1LWEzYjAtNDMwZS05YmM0LTI4NGU4YzdjZTRiNyZvcz1XaW5kb3dzJmxhbmd1YWdlPWVuLVVTJm9mZmVyX3VybD1odHRwczovL3NhcG9nLm9ubGluZS9jbGljaz9rZXk9NjI5MGU0MmMyODUzNDVkYzk5MGEyNTQzNTJiZTA4YzUmbGVhZF9pZD0yMGI2YjA0NS1hM2IwLTQzMGUtOWJjNC0yODRlOGM3Y2U0YjcmdXRtX2NhbXBhaWduPXtzdWIxfSZ1dG1fc291cmNlPXtzdWIyfSZhY2NfaWQ9e3N1YjN9JnV0bV9jb250ZW50PXtzdWI0fSZ1dG1fbWVkaXVtPXtzdWI1fSZ1dG1fdGVybXM9e3N1YjZ9JmFkX2lkPXtzdWI3fSZmYmNsaWQ9e2ZiY2xpZH0mcGl4ZWw9e3BpeGVsfQ\u0026is_webview=false\u0026pixel=\u0026fbclid=","date":"2026-04-15T05:38:51.854Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fortune-slotdriftzone.click","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 05 Apr 2026 17:33:19 GMT","end":"Sat, 04 Jul 2026 17:33:18 GMT"},"fingerprint":{"sha1":"8D:06:82:02:25:6E:FC:C3:DD:A9:EF:7E:9E:71:30:6B:C7:B0:E0:CA","sha256":"47:26:91:AA:EA:BF:3F:BF:57:5C:44:EA:35:B3:E0:10:5A:C5:8F:D6:6D:84:10:E6:27:36:10:A5:91:D2:47:83"}}},"request":{"raw":"GET /410e1faa-4edb-4d26-b541-0490fbe9aa2f/en/js/sendUpdateLead.js HTTP/1.1\r\nHost: fortune-slotdriftzone.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fortune-slotdriftzone.click/410e1faa-4edb-4d26-b541-0490fbe9aa2f/en/?lead_info=bGVhZF91dWlkPTIwYjZiMDQ1LWEzYjAtNDMwZS05YmM0LTI4NGU4YzdjZTRiNyZvcz1XaW5kb3dzJmxhbmd1YWdlPWVuLVVTJm9mZmVyX3VybD1odHRwczovL3NhcG9nLm9ubGluZS9jbGljaz9rZXk9NjI5MGU0MmMyODUzNDVkYzk5MGEyNTQzNTJiZTA4YzUmbGVhZF9pZD0yMGI2YjA0NS1hM2IwLTQzMGUtOWJjNC0yODRlOGM3Y2U0YjcmdXRtX2NhbXBhaWduPXtzdWIxfSZ1dG1fc291cmNlPXtzdWIyfSZhY2NfaWQ9e3N1YjN9JnV0bV9jb250ZW50PXtzdWI0fSZ1dG1fbWVkaXVtPXtzdWI1fSZ1dG1fdGVybXM9e3N1YjZ9JmFkX2lkPXtzdWI3fSZmYmNsaWQ9e2ZiY2xpZH0mcGl4ZWw9e3BpeGVsfQ\u0026is_webview=false\u0026pixel=\u0026fbclid=\r\nCookie: cl_st=b\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=skTfbuYPboKwt%2BZBxIXh0jWz65bq0Z7%2BXp0FEWnF7FLu3hBWtNS%2FQsd0nhO4VFKQnJdJtQSJrDTmvMwPDLJ8dqU09%2BMzTTyR0Wd4tfv7h8SQLWvtj9mPrEQGbrBnMmHr88DtXtRVBPj6M2ITELM%3D\"}]}\r\ncontent-encoding: br\r\ndate: Wed, 15 Apr 2026 05:38:51 GMT\r\ncontent-type: application/javascript\r\netag: W/\"69d504ea-5b3\"\r\ncf-ray: 9ec89b41e87156b4-OSL\r\ncf-cache-status: HIT\r\npriority: u=2,i=?0\r\ncache-control: max-age=14400\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Tue, 07 Apr 2026 13:21:46 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1459,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"4e3faaacb1524bd849d2c30faab88fbc","sha1":"b117df721cc43c43c8460ce05f37dc53e7e0d041","sha256":"389a6abaef11574f8878afd69e1f7a4653852e47874fd8cf3590c7efb588d14c","sha512":"1bcc3e80f92aea292e4875f3c72cd01d62c91750d1b3036813aa8e34f8b327639dd962b88158ae3a701cf755e143adad646af253bd80166184b04fa4218c794f","ssdeep":"","tlshash":"36312192ac5a51cee6f720ac93ef0547e272405b2825d064b80d9b0daf9493d02babd9","first_seen":"2026-04-13T04:27:30.894569Z","last_seen":"2026-04-15T06:08:03.094535Z","times_seen":26,"resource_available":true,"data":null}},"time_used":61,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":61,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"fortune-slotdriftzone.click","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"fortune-slotdriftzone.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"fortune-slotdriftzone.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fortune-slotdriftzone.click/410e1faa-4edb-4d26-b541-0490fbe9aa2f/en/icon.webp?options=content","fqdn":"fortune-slotdriftzone.click","domain":"fortune-slotdriftzone.click","tld":"click"},"ip":{"addr":"172.67.181.2","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fortune-slotdriftzone.click/410e1faa-4edb-4d26-b541-0490fbe9aa2f/en/?lead_info=bGVhZF91dWlkPTIwYjZiMDQ1LWEzYjAtNDMwZS05YmM0LTI4NGU4YzdjZTRiNyZvcz1XaW5kb3dzJmxhbmd1YWdlPWVuLVVTJm9mZmVyX3VybD1odHRwczovL3NhcG9nLm9ubGluZS9jbGljaz9rZXk9NjI5MGU0MmMyODUzNDVkYzk5MGEyNTQzNTJiZTA4YzUmbGVhZF9pZD0yMGI2YjA0NS1hM2IwLTQzMGUtOWJjNC0yODRlOGM3Y2U0YjcmdXRtX2NhbXBhaWduPXtzdWIxfSZ1dG1fc291cmNlPXtzdWIyfSZhY2NfaWQ9e3N1YjN9JnV0bV9jb250ZW50PXtzdWI0fSZ1dG1fbWVkaXVtPXtzdWI1fSZ1dG1fdGVybXM9e3N1YjZ9JmFkX2lkPXtzdWI3fSZmYmNsaWQ9e2ZiY2xpZH0mcGl4ZWw9e3BpeGVsfQ\u0026is_webview=false\u0026pixel=\u0026fbclid=","date":"2026-04-15T05:38:51.865Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fortune-slotdriftzone.click","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 05 Apr 2026 17:33:19 GMT","end":"Sat, 04 Jul 2026 17:33:18 GMT"},"fingerprint":{"sha1":"8D:06:82:02:25:6E:FC:C3:DD:A9:EF:7E:9E:71:30:6B:C7:B0:E0:CA","sha256":"47:26:91:AA:EA:BF:3F:BF:57:5C:44:EA:35:B3:E0:10:5A:C5:8F:D6:6D:84:10:E6:27:36:10:A5:91:D2:47:83"}}},"request":{"raw":"GET /410e1faa-4edb-4d26-b541-0490fbe9aa2f/en/icon.webp?options=content HTTP/1.1\r\nHost: fortune-slotdriftzone.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fortune-slotdriftzone.click/410e1faa-4edb-4d26-b541-0490fbe9aa2f/en/?lead_info=bGVhZF91dWlkPTIwYjZiMDQ1LWEzYjAtNDMwZS05YmM0LTI4NGU4YzdjZTRiNyZvcz1XaW5kb3dzJmxhbmd1YWdlPWVuLVVTJm9mZmVyX3VybD1odHRwczovL3NhcG9nLm9ubGluZS9jbGljaz9rZXk9NjI5MGU0MmMyODUzNDVkYzk5MGEyNTQzNTJiZTA4YzUmbGVhZF9pZD0yMGI2YjA0NS1hM2IwLTQzMGUtOWJjNC0yODRlOGM3Y2U0YjcmdXRtX2NhbXBhaWduPXtzdWIxfSZ1dG1fc291cmNlPXtzdWIyfSZhY2NfaWQ9e3N1YjN9JnV0bV9jb250ZW50PXtzdWI0fSZ1dG1fbWVkaXVtPXtzdWI1fSZ1dG1fdGVybXM9e3N1YjZ9JmFkX2lkPXtzdWI3fSZmYmNsaWQ9e2ZiY2xpZH0mcGl4ZWw9e3BpeGVsfQ\u0026is_webview=false\u0026pixel=\u0026fbclid=\r\nCookie: cl_st=b\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 12770\r\npriority: u=4,i=?0\r\ndate: Wed, 15 Apr 2026 05:38:51 GMT\r\ncontent-type: image/webp\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ec89b41e87756b4-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\netag: \"69d504ea-31e2\"\r\nlast-modified: Tue, 07 Apr 2026 13:21:46 GMT\r\nserver: cloudflare\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Ugka8OtKvkvhJLgK27MPVcNWLR7KXNQcevIsjJ97hRqK6BUgLb9pcEPtLyFxJp2Ij0ZnYT8RHCOFGQJrQgVKYT0gh%2BYEq9y2IpS3qPf1t%2BXzdXul0x%2BseaAzs7XlJNQDOPSZMaB77aUvzXxmXXo%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12770,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 512x512, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"eec106c3d4e1cf27ea5622c97a6cf9f3","sha1":"10f2cfdbd726badb74c167219aa6b06046fcca85","sha256":"1b9410ce79b1a87767a5625246ba3061affb859925c84caa197e97b8499e5a32","sha512":"6edb3fa4f56f6d4846d71091363993ecace565c4489aa69f1b1bbab2db189bcad7dde9a3ac227a2c77f9370c000c3050617f352ad4491a903e98eaa3f06560c7","ssdeep":"192:tftctjDmqawRXeiD7M6nIT8BQgXrFDbcz7gXgosL8sg0qLOwWN6Brc1R7:RtctvRht7RnqwFDbGFgOwhtoR7","tlshash":"9b42cf10f15ff646f3cd295cf3417e70968b7e801950482589a6137f331d674aeaec68","first_seen":"2026-04-15T05:39:18.320509Z","last_seen":"2026-04-15T06:00:31.848577Z","times_seen":2,"resource_available":false,"data":null}},"time_used":63,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":55,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"fortune-slotdriftzone.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"fortune-slotdriftzone.click","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"fortune-slotdriftzone.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"easy-image.b-cdn.net/icon/icon_star_black.svg","fqdn":"easy-image.b-cdn.net","domain":"b-cdn.net","tld":"net"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fortune-slotdriftzone.click/410e1faa-4edb-4d26-b541-0490fbe9aa2f/en/?lead_info=bGVhZF91dWlkPTIwYjZiMDQ1LWEzYjAtNDMwZS05YmM0LTI4NGU4YzdjZTRiNyZvcz1XaW5kb3dzJmxhbmd1YWdlPWVuLVVTJm9mZmVyX3VybD1odHRwczovL3NhcG9nLm9ubGluZS9jbGljaz9rZXk9NjI5MGU0MmMyODUzNDVkYzk5MGEyNTQzNTJiZTA4YzUmbGVhZF9pZD0yMGI2YjA0NS1hM2IwLTQzMGUtOWJjNC0yODRlOGM3Y2U0YjcmdXRtX2NhbXBhaWduPXtzdWIxfSZ1dG1fc291cmNlPXtzdWIyfSZhY2NfaWQ9e3N1YjN9JnV0bV9jb250ZW50PXtzdWI0fSZ1dG1fbWVkaXVtPXtzdWI1fSZ1dG1fdGVybXM9e3N1YjZ9JmFkX2lkPXtzdWI3fSZmYmNsaWQ9e2ZiY2xpZH0mcGl4ZWw9e3BpeGVsfQ\u0026is_webview=false\u0026pixel=\u0026fbclid=","date":"2026-04-15T05:38:51.867Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.b-cdn.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 06 Nov 2025 00:00:00 GMT","end":"Wed, 11 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"92:9B:37:29:B4:2D:AB:EB:68:07:7B:03:B2:80:2E:5B:53:CE:AD:E7","sha256":"51:6F:86:36:A1:23:32:72:AA:0F:28:1A:81:F4:92:F8:82:35:42:13:BA:4C:21:2D:80:C5:BB:BF:19:04:1D:32"}}},"request":{"raw":"GET /icon/icon_star_black.svg HTTP/1.1\r\nHost: easy-image.b-cdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fortune-slotdriftzone.click/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 15 Apr 2026 05:38:52 GMT\r\ncontent-type: image/svg+xml\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 2442763\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=0\r\ncontent-encoding: br\r\netag: \"67ae0046-fc\"\r\nlast-modified: Thu, 13 Feb 2025 14:23:02 GMT\r\ncdn-storageserver: SE-904\r\ncdn-fileserver: 318\r\ncdn-proxyver: 1.50\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 04/15/2026 05:35:16\r\ncdn-edgestorageid: 830\r\ncdn-requestid: d3def277dfd0103fea0faa2c806dbc1d\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":252,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"fd7c9a36b018cd09c80d3c69bb83579b","sha1":"0b7c5758965fabcb509db70b94e2ecc62592a331","sha256":"5a29eb18c76586c2f55eedce4c2b46fa158df9148af71ade04a7934f9c5d312f","sha512":"ea7c5bd48d77a405845f935d5eaa3d373c246679f7404888b96d29ef2acfd38f64fe6fb54e75f77c6fc101f72310d6889a9d25cc95a6980dad9d7c1e7fa26f96","ssdeep":"","tlshash":"93d095752034da58cc55c651f2f75cfe6497d0db71c500c29549731170c086f4c59974","first_seen":"2024-10-12T23:01:03.367525Z","last_seen":"2026-08-07T09:07:56.990576Z","times_seen":178,"resource_available":false,"data":null}},"time_used":309,"timings":{"blocked":125,"dns":0,"connect":22,"send":0,"wait":19,"receive":0,"ssl":137},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"easy-image.b-cdn.net/users/female/35.jpg","fqdn":"easy-image.b-cdn.net","domain":"b-cdn.net","tld":"net"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fortune-slotdriftzone.click/410e1faa-4edb-4d26-b541-0490fbe9aa2f/en/?lead_info=bGVhZF91dWlkPTIwYjZiMDQ1LWEzYjAtNDMwZS05YmM0LTI4NGU4YzdjZTRiNyZvcz1XaW5kb3dzJmxhbmd1YWdlPWVuLVVTJm9mZmVyX3VybD1odHRwczovL3NhcG9nLm9ubGluZS9jbGljaz9rZXk9NjI5MGU0MmMyODUzNDVkYzk5MGEyNTQzNTJiZTA4YzUmbGVhZF9pZD0yMGI2YjA0NS1hM2IwLTQzMGUtOWJjNC0yODRlOGM3Y2U0YjcmdXRtX2NhbXBhaWduPXtzdWIxfSZ1dG1fc291cmNlPXtzdWIyfSZhY2NfaWQ9e3N1YjN9JnV0bV9jb250ZW50PXtzdWI0fSZ1dG1fbWVkaXVtPXtzdWI1fSZ1dG1fdGVybXM9e3N1YjZ9JmFkX2lkPXtzdWI3fSZmYmNsaWQ9e2ZiY2xpZH0mcGl4ZWw9e3BpeGVsfQ\u0026is_webview=false\u0026pixel=\u0026fbclid=","date":"2026-04-15T05:38:51.888Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.b-cdn.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 06 Nov 2025 00:00:00 GMT","end":"Wed, 11 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"92:9B:37:29:B4:2D:AB:EB:68:07:7B:03:B2:80:2E:5B:53:CE:AD:E7","sha256":"51:6F:86:36:A1:23:32:72:AA:0F:28:1A:81:F4:92:F8:82:35:42:13:BA:4C:21:2D:80:C5:BB:BF:19:04:1D:32"}}},"request":{"raw":"GET /users/female/35.jpg HTTP/1.1\r\nHost: easy-image.b-cdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fortune-slotdriftzone.click/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 15 Apr 2026 05:38:52 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 5347\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 2442763\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=0\r\netag: \"67ed0464-14e3\"\r\nlast-modified: Wed, 02 Apr 2025 09:33:24 GMT\r\ncdn-storageserver: SE-583\r\ncdn-fileserver: 344\r\ncdn-proxyver: 1.49\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 03/28/2026 17:19:53\r\ncdn-edgestorageid: 830\r\ncdn-requestid: c774b12fe27324798f353efb266bf081\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":5347,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 157x220, components 3","md5":"943de235f5696c1be4ec1c5e5c5d1c5d","sha1":"ee37383e31a2c9ea1673ed0fd76a0e9cf97339e0","sha256":"1cc2616043aefee5efa8b209936fa15ebb6a289f30285a946a815528615179ce","sha512":"cf43ab58bfd0999971833a03636ce96d6986a61fee7148cf51b9024f0fcb4025e1f252c269d81434e534ed11a229843002ceb950a61a3eefe0d368fba1c021e6","ssdeep":"96:Me7/nJp0Uq9/HF9ha9xO38s5gc1qqmqvH/8jknWdRxWS/+pCOHl:Me7BeUa/zDBT1qqV0jknYRd+plF","tlshash":"12b17d0e52650259ecb113f11dd315106bc57791b8b62e4a14bc2efcc2b17c2e615a9f","first_seen":"2025-10-31T09:11:04.467976Z","last_seen":"2026-07-12T09:08:39.536665Z","times_seen":35,"resource_available":false,"data":null}},"time_used":157,"timings":{"blocked":105,"dns":0,"connect":0,"send":0,"wait":52,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"easy-image.b-cdn.net/users/female/85.jpg","fqdn":"easy-image.b-cdn.net","domain":"b-cdn.net","tld":"net"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fortune-slotdriftzone.click/410e1faa-4edb-4d26-b541-0490fbe9aa2f/en/?lead_info=bGVhZF91dWlkPTIwYjZiMDQ1LWEzYjAtNDMwZS05YmM0LTI4NGU4YzdjZTRiNyZvcz1XaW5kb3dzJmxhbmd1YWdlPWVuLVVTJm9mZmVyX3VybD1odHRwczovL3NhcG9nLm9ubGluZS9jbGljaz9rZXk9NjI5MGU0MmMyODUzNDVkYzk5MGEyNTQzNTJiZTA4YzUmbGVhZF9pZD0yMGI2YjA0NS1hM2IwLTQzMGUtOWJjNC0yODRlOGM3Y2U0YjcmdXRtX2NhbXBhaWduPXtzdWIxfSZ1dG1fc291cmNlPXtzdWIyfSZhY2NfaWQ9e3N1YjN9JnV0bV9jb250ZW50PXtzdWI0fSZ1dG1fbWVkaXVtPXtzdWI1fSZ1dG1fdGVybXM9e3N1YjZ9JmFkX2lkPXtzdWI3fSZmYmNsaWQ9e2ZiY2xpZH0mcGl4ZWw9e3BpeGVsfQ\u0026is_webview=false\u0026pixel=\u0026fbclid=","date":"2026-04-15T05:38:51.896Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.b-cdn.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 06 Nov 2025 00:00:00 GMT","end":"Wed, 11 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"92:9B:37:29:B4:2D:AB:EB:68:07:7B:03:B2:80:2E:5B:53:CE:AD:E7","sha256":"51:6F:86:36:A1:23:32:72:AA:0F:28:1A:81:F4:92:F8:82:35:42:13:BA:4C:21:2D:80:C5:BB:BF:19:04:1D:32"}}},"request":{"raw":"GET /users/female/85.jpg HTTP/1.1\r\nHost: easy-image.b-cdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fortune-slotdriftzone.click/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 15 Apr 2026 05:38:52 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 18523\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 2442763\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=0\r\netag: \"67ed046c-485b\"\r\nlast-modified: Wed, 02 Apr 2025 09:33:32 GMT\r\ncdn-storageserver: SE-904\r\ncdn-fileserver: 966\r\ncdn-proxyver: 1.50\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 04/14/2026 20:12:24\r\ncdn-edgestorageid: 830\r\ncdn-requestid: e61da72e88a2ace7b0d004f799411c75\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":18523,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 313x208, components 3","md5":"904ce4bfde4b80b898fb8b303a75fa3c","sha1":"d55383009dcb5fa340ed701710205215e408c3c5","sha256":"16810ba10da9f16c49931a9eb157152067c7e039ac7338615823a59d285e09cf","sha512":"81fa121c348b835336ea59f4e0fed4dbeadf29100cc1ab6bc81705918d4c3249d5f2be4cbd2abe4152c396e3d92f144376f82df20b6c41a803b4d5a17d659cce","ssdeep":"384:iHzfa7c2AjXBKN4bLDtL06oigB5DaAbmC1NGxRRGX7d6ufoRhqeH5:iHmw2AjRf+6KVamn1NmLkUcoRUeZ","tlshash":"fe82d0b3633f7113ecfe0cd7364907588b88a34d61f15c0a64a9a0fe5444c8aaad2b65","first_seen":"2025-06-19T06:56:57.164204Z","last_seen":"2026-08-07T09:07:56.987421Z","times_seen":26,"resource_available":false,"data":null}},"time_used":155,"timings":{"blocked":98,"dns":0,"connect":0,"send":0,"wait":52,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"easy-image.b-cdn.net/users/female/7.jpg","fqdn":"easy-image.b-cdn.net","domain":"b-cdn.net","tld":"net"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fortune-slotdriftzone.click/410e1faa-4edb-4d26-b541-0490fbe9aa2f/en/?lead_info=bGVhZF91dWlkPTIwYjZiMDQ1LWEzYjAtNDMwZS05YmM0LTI4NGU4YzdjZTRiNyZvcz1XaW5kb3dzJmxhbmd1YWdlPWVuLVVTJm9mZmVyX3VybD1odHRwczovL3NhcG9nLm9ubGluZS9jbGljaz9rZXk9NjI5MGU0MmMyODUzNDVkYzk5MGEyNTQzNTJiZTA4YzUmbGVhZF9pZD0yMGI2YjA0NS1hM2IwLTQzMGUtOWJjNC0yODRlOGM3Y2U0YjcmdXRtX2NhbXBhaWduPXtzdWIxfSZ1dG1fc291cmNlPXtzdWIyfSZhY2NfaWQ9e3N1YjN9JnV0bV9jb250ZW50PXtzdWI0fSZ1dG1fbWVkaXVtPXtzdWI1fSZ1dG1fdGVybXM9e3N1YjZ9JmFkX2lkPXtzdWI3fSZmYmNsaWQ9e2ZiY2xpZH0mcGl4ZWw9e3BpeGVsfQ\u0026is_webview=false\u0026pixel=\u0026fbclid=","date":"2026-04-15T05:38:51.897Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.b-cdn.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 06 Nov 2025 00:00:00 GMT","end":"Wed, 11 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"92:9B:37:29:B4:2D:AB:EB:68:07:7B:03:B2:80:2E:5B:53:CE:AD:E7","sha256":"51:6F:86:36:A1:23:32:72:AA:0F:28:1A:81:F4:92:F8:82:35:42:13:BA:4C:21:2D:80:C5:BB:BF:19:04:1D:32"}}},"request":{"raw":"GET /users/female/7.jpg HTTP/1.1\r\nHost: easy-image.b-cdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fortune-slotdriftzone.click/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 15 Apr 2026 05:38:52 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 20002\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 2442763\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=0\r\netag: \"67ed0460-4e22\"\r\nlast-modified: Wed, 02 Apr 2025 09:33:20 GMT\r\ncdn-storageserver: SE-583\r\ncdn-fileserver: 344\r\ncdn-proxyver: 1.41\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 12/08/2025 04:52:24\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 47e7b46d3e3ad14f7b3084e523a5c19d\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":20002,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 239x359, components 3","md5":"ad914b54b483f8cefafcf3ecbdc16b88","sha1":"919e29d6209396138f6727a36b31bf38ae9d1759","sha256":"468bbec83a1cf6f5b9311392429d1098ccd576778cc96ceb7285d91e61d4e093","sha512":"617ef5447c39aa6dad63921f04e211e88b00343cb1bd68d0e18b66b3fcebf22d7bcfea3af9425cd2b276bcef02ff1adfb42fb9cb2765935cb315e82227a856af","ssdeep":"384:cpsoqB5pHd62wh23ONqHuOuvpYfs5M1qgUYyGHcmRfvDWEC8AbtpV0S6GR4:cX6ld62Y23ONqHuOuxYfs5M1qgNyknR3","tlshash":"7492d14a68d93923cbf5043b743c970d87073a5624a7806089d3a8efa2dc4bad6a60d7","first_seen":"2025-06-03T02:54:05.979414Z","last_seen":"2026-07-25T07:12:04.41832Z","times_seen":16,"resource_available":false,"data":null}},"time_used":158,"timings":{"blocked":97,"dns":0,"connect":0,"send":0,"wait":52,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fortune-slotdriftzone.click/410e1faa-4edb-4d26-b541-0490fbe9aa2f/en/js/prompt.js","fqdn":"fortune-slotdriftzone.click","domain":"fortune-slotdriftzone.click","tld":"click"},"ip":{"addr":"172.67.181.2","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://fortune-slotdriftzone.click/410e1faa-4edb-4d26-b541-0490fbe9aa2f/en/?lead_info=bGVhZF91dWlkPTIwYjZiMDQ1LWEzYjAtNDMwZS05YmM0LTI4NGU4YzdjZTRiNyZvcz1XaW5kb3dzJmxhbmd1YWdlPWVuLVVTJm9mZmVyX3VybD1odHRwczovL3NhcG9nLm9ubGluZS9jbGljaz9rZXk9NjI5MGU0MmMyODUzNDVkYzk5MGEyNTQzNTJiZTA4YzUmbGVhZF9pZD0yMGI2YjA0NS1hM2IwLTQzMGUtOWJjNC0yODRlOGM3Y2U0YjcmdXRtX2NhbXBhaWduPXtzdWIxfSZ1dG1fc291cmNlPXtzdWIyfSZhY2NfaWQ9e3N1YjN9JnV0bV9jb250ZW50PXtzdWI0fSZ1dG1fbWVkaXVtPXtzdWI1fSZ1dG1fdGVybXM9e3N1YjZ9JmFkX2lkPXtzdWI3fSZmYmNsaWQ9e2ZiY2xpZH0mcGl4ZWw9e3BpeGVsfQ\u0026is_webview=false\u0026pixel=\u0026fbclid=","date":"2026-04-15T05:38:51.907Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fortune-slotdriftzone.click","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 05 Apr 2026 17:33:19 GMT","end":"Sat, 04 Jul 2026 17:33:18 GMT"},"fingerprint":{"sha1":"8D:06:82:02:25:6E:FC:C3:DD:A9:EF:7E:9E:71:30:6B:C7:B0:E0:CA","sha256":"47:26:91:AA:EA:BF:3F:BF:57:5C:44:EA:35:B3:E0:10:5A:C5:8F:D6:6D:84:10:E6:27:36:10:A5:91:D2:47:83"}}},"request":{"raw":"GET /410e1faa-4edb-4d26-b541-0490fbe9aa2f/en/js/prompt.js HTTP/1.1\r\nHost: fortune-slotdriftzone.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fortune-slotdriftzone.click/410e1faa-4edb-4d26-b541-0490fbe9aa2f/en/?lead_info=bGVhZF91dWlkPTIwYjZiMDQ1LWEzYjAtNDMwZS05YmM0LTI4NGU4YzdjZTRiNyZvcz1XaW5kb3dzJmxhbmd1YWdlPWVuLVVTJm9mZmVyX3VybD1odHRwczovL3NhcG9nLm9ubGluZS9jbGljaz9rZXk9NjI5MGU0MmMyODUzNDVkYzk5MGEyNTQzNTJiZTA4YzUmbGVhZF9pZD0yMGI2YjA0NS1hM2IwLTQzMGUtOWJjNC0yODRlOGM3Y2U0YjcmdXRtX2NhbXBhaWduPXtzdWIxfSZ1dG1fc291cmNlPXtzdWIyfSZhY2NfaWQ9e3N1YjN9JnV0bV9jb250ZW50PXtzdWI0fSZ1dG1fbWVkaXVtPXtzdWI1fSZ1dG1fdGVybXM9e3N1YjZ9JmFkX2lkPXtzdWI3fSZmYmNsaWQ9e2ZiY2xpZH0mcGl4ZWw9e3BpeGVsfQ\u0026is_webview=false\u0026pixel=\u0026fbclid=\r\nCookie: cl_st=b\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iwTXCdRFPeqTLJqcNdm3iEhxAV%2FhHcCAjq8V0p8omNdCGKMZkQ73lrFVzfNArr%2Bkm1DG30wWz1cIRwxhGD2JPgNi2yma07bJSF9%2FkwbdDu5H2Flt3FFNDC1nyCg%2F2qg5rdAuiKnBUduXji7Kb6Y%3D\"}]}\r\ncontent-encoding: br\r\ndate: Wed, 15 Apr 2026 05:38:51 GMT\r\ncontent-type: application/javascript\r\netag: W/\"69d504ea-1c5\"\r\ncf-ray: 9ec89b42288456b4-OSL\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\ncache-control: max-age=14400\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Tue, 07 Apr 2026 13:21:46 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":453,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"44ebc534ff78e60f1b65bf973fce02e0","sha1":"cf48af00a3fefee9965b4ac1b8857f4036a2a252","sha256":"ff398de885567f110214c619e2421fd329a9aa4b873f2480a953acc6cc61f898","sha512":"6bd669dab5a3c5daa5e34b892b3a7b156afea0bec86c91ae9ce6b46946300a65ea26d2fb8edf361bd89739f377457a12b5f93b07cf193be60a8e862c0bad8518","ssdeep":"","tlshash":"cdf022200baa18b1a01b336e8f1f1e84233174a72d225d203d5d4c8dcf816a842b2be7","first_seen":"2025-11-01T11:14:12.483716Z","last_seen":"2026-08-07T09:07:57.011608Z","times_seen":85,"resource_available":true,"data":null}},"time_used":52,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":52,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"fortune-slotdriftzone.click","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"fortune-slotdriftzone.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"fortune-slotdriftzone.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}}]}