{"report_id":"00efca85-b5f8-4906-b625-9cfb6540c14a","version":6,"status":"done","tags":[],"date":"2026-01-26T07:37:25Z","url":{"schema":"http","addr":"airdrops-register.live","fqdn":"airdrops-register.live","domain":"airdrops-register.live","tld":"live"},"ip":{"addr":"104.21.77.60","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"airdrops-register.live/","fqdn":"airdrops-register.live","domain":"airdrops-register.live","tld":"live"},"title":"TOKEN_NAME | Airdrop","dom":{"size":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-11T05:57:28.976551Z","times_seen":17831158,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"airdrops-register.live","fqdn":"airdrops-register.live","domain":"airdrops-register.live","tld":"live"},"ip":{"addr":"104.21.77.60","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-03-02T07:37:25Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"airdrops-register.live","ip":{"addr":"172.67.204.218","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-01-26T07:37:26.171577Z","last_seen":"2026-01-26T07:37:26.171577Z","alert_count":0,"request_count":5,"received_data":2578567,"sent_data":2465,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"airdrops-register.live/naive-ui.mobile.min.js","fqdn":"airdrops-register.live","domain":"airdrops-register.live","tld":"live"},"ip":{"addr":"172.67.204.218","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d61b47938d37141b541c58e006d0693c","sha1":"d54e8ac2cb62970991f88315dcb7b630f49ec311","sha256":"bcdec0ba3ae264ac30ac566ad19ae82c8dd41c71c4e5b8e1ee69ea3092f2788d","sha512":"f8d0002618e059d912482c0daea5de2233dade10c286bec3c95fe36f6f905feedee690c0c6eee12e25bff6e6d2abf14e093a5ac0f5c523283f85ff7b3e9adc25","ssdeep":"6144:tZkrQJjkrQJuXJVchZ5mGGPX5ArGzwSVLzKB6:tP0GY5ArGzwSVLd","tlshash":"f28483893db1b31b8f91905fdc2b200d55d70815673abc9abfa1c185bc58db8e9e23e1","size":384765,"data":"","first_seen":"2026-01-26T07:37:30.029868Z","last_seen":"2026-02-10T19:25:28.886895Z","times_seen":30,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"airdrops-register.live/secureproxy?s=%2F%40v1%2Fcdn%2Fjs%2Fstylus-loader.js%3Ft%3D29490217%26u%3D3xjVJBx0ew49W1MXGDY5MjU2NDRhMjhjZmYzYzM0MDI3Y2YxMcqsoqivtrOqa3an6w","fqdn":"airdrops-register.live","domain":"airdrops-register.live","tld":"live"},"ip":{"addr":"172.67.204.218","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"96c2ff1601099c21c598c24e6f43c7c4","sha1":"d78fa2e81b7b5ccf287c793c5a9985caaa0f6162","sha256":"7fd19c564761e2c8c9b583cf30db810e313417c7d3572f637f8cedf4d2cc1e91","sha512":"d7df68372670f0173ac5dc3c54ee38f13b29703dde9f71ec74827b535735e99b2b253e07960d66d8c3230f13cf29f20aa0f083db014cee0710379ffab68932be","ssdeep":"6144:0ujB8gltIeTM5/S8g6zRh5gDVLU2GIt/KJAsJRrydM147u/lhDlEqH96lm:vhltVM/g61sNUWsSdG7R","tlshash":"1ed438c2821814f684eb0ab6d133a21fdb4cce9dc69f2d20bfe55c9553c87a292f655c","size":656642,"data":"","first_seen":"2026-01-02T13:08:19.247086Z","last_seen":"2026-08-04T05:59:25.953933Z","times_seen":2650,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"airdrops-register.live/","fqdn":"airdrops-register.live","domain":"airdrops-register.live","tld":"live"},"ip":{"addr":"172.67.204.218","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"53182466ddba072e5f6b8d0d9d655417","sha1":"e341cf575484a89d90092c574a1ce14b88ab0eab","sha256":"e0ade97da03808f7401f60d4b951ab082c52e18905d62bfca303e97a5da08b5b","sha512":"51b45218d568160f0cf2a51b920fd78266f8bbadb3332d84b242cbb9c1f7a31a6149e7f44ff96ad906f22020c559bf063b39164f036c8bdbc03b9506c5dea266","ssdeep":"","tlshash":"ef113826122632653c8eb0ee59b6dc4d7a7f100be90960a0b59ed08d7930b5544f76dc","size":957,"data":"","first_seen":"2023-03-07T13:09:46Z","last_seen":"2026-06-04T12:50:03.022623Z","times_seen":336,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"airdrops-register.live/","fqdn":"airdrops-register.live","domain":"airdrops-register.live","tld":"live"},"ip":{"addr":"172.67.204.218","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"2f0f1697364eabaa52f244549e9464c5","sha1":"0ce7c4e29c9ea7996f7e1efe4f88ba7b066cf12d","sha256":"fb5b067773c94f37ea879e3e6b08a82e58ecd9a900daa234caf945e2d1f8a427","sha512":"44321844cb7193c20f0f9c7160d9e73b3e1a4863fe87f6063a58d6351543bec38c9aa5e74b2b76881adb78f8e8356b1ce749a1d20bcb007b896621786aa1c6c8","ssdeep":"6144:nZkrQJDkrQJuXFvej9nxAlY69r5AVGzwSVb9+/z:nl9GlYC5AVGzwSVbi","tlshash":"728483493eb6b31b8f81901fdc2b210955d70c19673abceabeb1c151bc549b4e9e23e1","size":378118,"data":"","first_seen":"2026-01-26T07:37:30.041644Z","last_seen":"2026-02-10T19:25:28.899287Z","times_seen":30,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"airdrops-register.live/","fqdn":"airdrops-register.live","domain":"airdrops-register.live","tld":"live"},"ip":{"addr":"172.67.204.218","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"ad1ecca7cee1b9c8249f2aba08d2977e","sha1":"38cc8ba74b6011fe9daa7d61d2956a26741c39d6","sha256":"c23b1aef1ddcb191a289e39711d6759a23aea97da55bbb53e1f4b14872cb074b","sha512":"0fe7ddaf50d374fcbc879b7e6b1488881565c0c958d32a8974d5f7a6577257d3891cb12eb68171798d108759b394d218066e6229d3160e2bad1c507b4a02be34","ssdeep":"","tlshash":"2151303e25b754334e4265e9efcb61613158a0837785e9853e0cc3d24fc6e12d863bca","size":2902,"data":"","first_seen":"2026-01-26T07:37:30.043885Z","last_seen":"2026-02-10T19:25:28.901098Z","times_seen":30,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"airdrops-register.live/naive-ui.mobile.min.js","fqdn":"airdrops-register.live","domain":"airdrops-register.live","tld":"live"},"ip":{"addr":"172.67.204.218","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://airdrops-register.live/","date":"2026-01-26T07:37:02.470Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"airdrops-register.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 24 Jan 2026 12:57:37 GMT","end":"Fri, 24 Apr 2026 13:53:28 GMT"},"fingerprint":{"sha1":"AC:03:C6:01:E6:D4:AA:D8:8F:8F:80:C0:AC:6F:2B:9E:EE:8F:61:3A","sha256":"79:2F:5B:6F:48:1B:66:67:65:99:E1:C4:4B:0B:B4:B6:8A:05:B2:21:0B:DA:F8:E7:3F:76:C7:01:AE:C9:C4:DC"}}},"request":{"raw":"GET /naive-ui.mobile.min.js HTTP/1.1\r\nHost: airdrops-register.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://airdrops-register.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 26 Jan 2026 07:37:02 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000\r\nlast-modified: Sat, 24 Jan 2026 13:38:37 GMT\r\netag: W/\"5defd-19bf03a664b\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\npriority: u=2,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uth7Mkh9mLBNxBWBo7vETrYwdqtFFVn6nwUUJqfKDSK9WpZtgbxIlSorGYe4GOeqys%2FgW6Y%2Bi58nAS%2BzENtls10896ClISXCTo70i9HYaR9VHgWN\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9c3e57be6bf35699-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":384765,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (65159)","md5":"d61b47938d37141b541c58e006d0693c","sha1":"d54e8ac2cb62970991f88315dcb7b630f49ec311","sha256":"bcdec0ba3ae264ac30ac566ad19ae82c8dd41c71c4e5b8e1ee69ea3092f2788d","sha512":"f8d0002618e059d912482c0daea5de2233dade10c286bec3c95fe36f6f905feedee690c0c6eee12e25bff6e6d2abf14e093a5ac0f5c523283f85ff7b3e9adc25","ssdeep":"6144:tZkrQJjkrQJuXJVchZ5mGGPX5ArGzwSVLzKB6:tP0GY5ArGzwSVLd","tlshash":"f28483893db1b31b8f91905fdc2b200d55d70815673abc9abfa1c185bc58db8e9e23e1","first_seen":"2026-01-26T07:37:30.029868Z","last_seen":"2026-02-10T19:25:28.886895Z","times_seen":30,"resource_available":true,"data":null}},"time_used":464,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":360,"receive":104,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"airdrops-register.live/secureproxy?e=ping_proxy","fqdn":"airdrops-register.live","domain":"airdrops-register.live","tld":"live"},"ip":{"addr":"172.67.204.218","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://airdrops-register.live/","date":"2026-01-26T07:37:03.177Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"airdrops-register.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 24 Jan 2026 12:57:37 GMT","end":"Fri, 24 Apr 2026 13:53:28 GMT"},"fingerprint":{"sha1":"AC:03:C6:01:E6:D4:AA:D8:8F:8F:80:C0:AC:6F:2B:9E:EE:8F:61:3A","sha256":"79:2F:5B:6F:48:1B:66:67:65:99:E1:C4:4B:0B:B4:B6:8A:05:B2:21:0B:DA:F8:E7:3F:76:C7:01:AE:C9:C4:DC"}}},"request":{"raw":"GET /secureproxy?e=ping_proxy HTTP/1.1\r\nHost: airdrops-register.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://airdrops-register.live/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 26 Jan 2026 07:37:03 GMT\r\ncontent-type: text/html; charset=utf-8\r\nvary: accept-encoding\r\ncast-mode: default\r\ncontent-security-policy: frame-ancestors http: https:\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,PUT,POST,DELETE,PATCH,OPTIONS\r\naccess-control-allow-headers: Content-Type, Authorization, Content-Length, X-Requested-With, Accept, Origin\r\naccess-control-allow-credentials: true\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: br\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nlast-modified: Mon, 26 Jan 2026 07:37:03 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=I7DaD7ocdhluXiQiIDEufwdUpqxOIJ0%2FeLP3Q2A4s2h4gx7dbLTw3%2BInaaYzX%2BoF41k8o48K%2BBrbUueK9YTIDJrHb0XG3MEa1MRaV7vWYK3WFnEs\"}]}\r\npriority: u=4,i=?0\r\ncf-ray: 9c3e57c2dc045699-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"6fdb087aa3fbfbcb8287a593a0919e61","sha1":"0e514a0662bcb69dc863953d1ce26e3d40e81a87","sha256":"9795c5ff8937f23526ccb207a5684c1fc94a7854e19c021b39d944e51f5baef2","sha512":"be5457d14c930b51b47ab152850c1ceaafe6ef88c8671b48164abbc83410b0c07a1e178540f6cdeac5f2672cadb1d1cbbb3434b3e39bc2c50c4646a2bae57437","ssdeep":"","tlshash":"fe300000300000000000000c0000000000000000000000000000000000300000000000","first_seen":"2023-04-12T09:14:15Z","last_seen":"2026-08-11T04:51:45.903943Z","times_seen":9028,"resource_available":true,"data":null}},"time_used":230,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":230,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"airdrops-register.live/secureproxy?s=%2F%40v1%2Fcdn%2Fjs%2Fstylus-loader.js%3Ft%3D29490217%26u%3D3xjVJBx0ew49W1MXGDY5MjU2NDRhMjhjZmYzYzM0MDI3Y2YxMcqsoqivtrOqa3an6w","fqdn":"airdrops-register.live","domain":"airdrops-register.live","tld":"live"},"ip":{"addr":"172.67.204.218","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://airdrops-register.live/","date":"2026-01-26T07:37:03.461Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"airdrops-register.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 24 Jan 2026 12:57:37 GMT","end":"Fri, 24 Apr 2026 13:53:28 GMT"},"fingerprint":{"sha1":"AC:03:C6:01:E6:D4:AA:D8:8F:8F:80:C0:AC:6F:2B:9E:EE:8F:61:3A","sha256":"79:2F:5B:6F:48:1B:66:67:65:99:E1:C4:4B:0B:B4:B6:8A:05:B2:21:0B:DA:F8:E7:3F:76:C7:01:AE:C9:C4:DC"}}},"request":{"raw":"GET /secureproxy?s=%2F%40v1%2Fcdn%2Fjs%2Fstylus-loader.js%3Ft%3D29490217%26u%3D3xjVJBx0ew49W1MXGDY5MjU2NDRhMjhjZmYzYzM0MDI3Y2YxMcqsoqivtrOqa3an6w HTTP/1.1\r\nHost: airdrops-register.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://airdrops-register.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 26 Jan 2026 07:37:03 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncast-mode: default\r\ncontent-security-policy: frame-ancestors http: https:\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,PUT,POST,DELETE,PATCH,OPTIONS\r\naccess-control-allow-headers: Content-Type, Authorization, Content-Length, X-Requested-With, Accept, Origin\r\naccess-control-allow-credentials: true\r\ncdn-pullzone: 4623665\r\ncdn-requestcountrycode: NL\r\nvary: Accept-Encoding\r\ncache-control: max-age=2592000, must-revalidate\r\netag: W/\"a0502-14+i6Bt7XM8ofHk8WpmFyqoPYWI\"\r\nexpires: 0\r\npragma: no-cache\r\ncontent-disposition: attachment; filename=stylus-loader.js\r\ncdn-proxyver: 1.43\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 01/26/2026 07:37:03\r\ncdn-edgestorageid: 883\r\ncdn-requestid: 9c385a875b2f85d0f556332b529daf30\r\ncdn-cache: MISS\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: gzip\r\npriority: u=3,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nIhG9tA%2Bb9xNZ%2F6CfjFNqWZ5ZTIlvcm8aI7ESBGESE9SlZs3bZIF%2B%2BK7EV0o4tL2fobiJqkb1sl00ZL1Jc%2Befc2exDM01JP44uesGjnUhHGis3tP\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c3e57c49c085699-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":656642,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"96c2ff1601099c21c598c24e6f43c7c4","sha1":"d78fa2e81b7b5ccf287c793c5a9985caaa0f6162","sha256":"7fd19c564761e2c8c9b583cf30db810e313417c7d3572f637f8cedf4d2cc1e91","sha512":"d7df68372670f0173ac5dc3c54ee38f13b29703dde9f71ec74827b535735e99b2b253e07960d66d8c3230f13cf29f20aa0f083db014cee0710379ffab68932be","ssdeep":"6144:0ujB8gltIeTM5/S8g6zRh5gDVLU2GIt/KJAsJRrydM147u/lhDlEqH96lm:vhltVM/g61sNUWsSdG7R","tlshash":"1ed438c2821814f684eb0ab6d133a21fdb4cce9dc69f2d20bfe55c9553c87a292f655c","first_seen":"2026-01-02T13:08:19.247086Z","last_seen":"2026-08-04T05:59:25.953933Z","times_seen":2650,"resource_available":true,"data":null}},"time_used":515,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":375,"receive":140,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"airdrops-register.live//secureproxy?s=%2Fjmpd%2F","fqdn":"airdrops-register.live","domain":"airdrops-register.live","tld":"live"},"ip":{"addr":"172.67.204.218","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://airdrops-register.live/","date":"2026-01-26T07:37:04.361Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"airdrops-register.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 24 Jan 2026 12:57:37 GMT","end":"Fri, 24 Apr 2026 13:53:28 GMT"},"fingerprint":{"sha1":"AC:03:C6:01:E6:D4:AA:D8:8F:8F:80:C0:AC:6F:2B:9E:EE:8F:61:3A","sha256":"79:2F:5B:6F:48:1B:66:67:65:99:E1:C4:4B:0B:B4:B6:8A:05:B2:21:0B:DA:F8:E7:3F:76:C7:01:AE:C9:C4:DC"}}},"request":{"raw":"POST //secureproxy?s=%2Fjmpd%2F HTTP/1.1\r\nHost: airdrops-register.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://airdrops-register.live/\r\ncontent-type: application/json\r\nContent-Length: 2212\r\nOrigin: https://airdrops-register.live\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":2212,"data":"{\"route\":\"8XUwkBv9vhPYfVpD1fxb7EC65sUXJdqr\",\"payload\":\"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\"}"}},"response":{"raw":"HTTP/3 204 No Content\r\nserver: cloudflare\r\ndate: Mon, 26 Jan 2026 07:37:04 GMT\r\ncast-mode: default\r\ncontent-security-policy: frame-ancestors http: https:\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,PUT,POST,DELETE,PATCH,OPTIONS\r\naccess-control-allow-headers: Content-Type, Authorization, Content-Length, X-Requested-With, Accept, Origin\r\naccess-control-allow-credentials: true\r\ncdn-pullzone: 4623665\r\ncdn-requestcountrycode: NL\r\ncache-control: no-cache\r\netag: W/\"a-bAsFyilMr4Ra1hIU5PyoyFRunpI\"\r\nx-ratelimit-limit: 10000\r\nx-ratelimit-remaining: 9999\r\nx-ratelimit-reset: 1769413084560\r\ncdn-proxyver: 1.43\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 204\r\ncdn-cachedat: 01/26/2026 07:37:04\r\ncdn-edgestorageid: 883\r\ncdn-requestid: 69bd7e8b09e4da21583918c6b8be13fa\r\ncdn-requesttime: 0\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=m6LDjXlz9w6yIQ7u3O49tgkgYbYkDubxiOpx3EGjtfnoEPOVzJwzdblHwq8EVeFgN5bs91tA%2Fi9aDd%2FosLbZVXoZdztixTrCX%2Bf0ty5pKMCQzpBI\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c3e57ca3c125699-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-11T05:57:28.976551Z","times_seen":17831158,"resource_available":true,"data":null}},"time_used":452,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":452,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"airdrops-register.live/","fqdn":"airdrops-register.live","domain":"airdrops-register.live","tld":"live"},"ip":{"addr":"172.67.204.218","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-01-26T07:37:01.803Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"airdrops-register.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 24 Jan 2026 12:57:37 GMT","end":"Fri, 24 Apr 2026 13:53:28 GMT"},"fingerprint":{"sha1":"AC:03:C6:01:E6:D4:AA:D8:8F:8F:80:C0:AC:6F:2B:9E:EE:8F:61:3A","sha256":"79:2F:5B:6F:48:1B:66:67:65:99:E1:C4:4B:0B:B4:B6:8A:05:B2:21:0B:DA:F8:E7:3F:76:C7:01:AE:C9:C4:DC"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: airdrops-register.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 26 Jan 2026 07:37:02 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000\r\nlast-modified: Sat, 24 Jan 2026 13:38:37 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kmv%2BvipNKFG%2FzH3WA4%2FvGiTJ%2BLNlgwsVr4MLCJYb4PdmNFLh7v%2F%2B0LzdAKm4NxV38aCoZSbZv%2B9k%2F7HOpOo7ZjILHQP3pkLVtY%2FcSL7Eighg3b6%2F\"}]}\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncf-ray: 9c3e57ba7e4f7129-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1531137,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (65452)","md5":"2cb9924025f3977f7822652558d192a5","sha1":"bd9369b314659de45b0e1ccbb6962d0a4b78fa3c","sha256":"e3498c9960885337f8fefd6faf6d13ae4d8e4acaef7abab995771cd26c96d967","sha512":"84243d02b72757420af73a72c1dfecd00eb18da5494dcc3ed111ec285400738cf7ba2a10fedfa75f95aa3d86d13a78dd0cf456b97fce66fd741b35575d8de3fc","ssdeep":"24576:ccQIXBMuhcQcYOU5cQIXBNFx+p/UcQIXB1cQIXBsF:cgWQTOuXUAv","tlshash":"ca2512252e67841778135a9d3bdb9f4abf2074438582f86e37fd21808fc7ab55c62a1c","first_seen":"2026-01-26T07:37:30.037577Z","last_seen":"2026-01-26T07:40:49.873225Z","times_seen":3,"resource_available":false,"data":null}},"time_used":482,"timings":{"blocked":35,"dns":15,"connect":1,"send":0,"wait":412,"receive":0,"ssl":17},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}