{"report_id":"03843622-a6fa-4508-ac1d-44c0c49b9922","version":6,"status":"done","tags":[],"date":"2026-01-30T15:08:51Z","url":{"schema":"https","addr":"elondrop.lol/claim","fqdn":"elondrop.lol","domain":"elondrop.lol","tld":"lol"},"ip":{"addr":"172.67.181.241","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"elondrop.lol/claim","fqdn":"elondrop.lol","domain":"elondrop.lol","tld":"lol"},"title":"Elon Coin Airdrop","dom":{"size":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"elondrop.lol/claim","fqdn":"elondrop.lol","domain":"elondrop.lol","tld":"lol"},"ip":{"addr":"172.67.181.241","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-03-06T15:08:51Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"aodefevrgdkhqltdnwgzbyjoywrlbntbhfwq.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"i.postimg.cc","ip":{"addr":"45.43.142.101","port":443,"asn":215751,"as":"Mikhail Fedorov","country":"Israel","country_code":"IL"},"domain_registered":"2016-06-11","domain_rank":103883,"first_seen":"2018-04-11T10:01:12Z","last_seen":"2026-01-28T16:11:13.330802Z","alert_count":0,"request_count":1,"received_data":309129,"sent_data":437,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}]},{"fqdn":"corsproxy.io","ip":{"addr":"104.26.7.163","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2022-01-30","domain_rank":175528,"first_seen":"2016-05-19T01:27:08Z","last_seen":"2026-01-25T22:51:24.521582Z","alert_count":0,"request_count":1,"received_data":763,"sent_data":547,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.74","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-01-25T22:17:37.642954Z","alert_count":0,"request_count":1,"received_data":10794,"sent_data":471,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"lite-api.jup.ag","ip":{"addr":"52.84.50.12","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2021-09-15","domain_rank":1536175,"first_seen":"2025-06-01T22:48:15.859785Z","last_seen":"2026-01-25T21:41:49.555987Z","alert_count":0,"request_count":1,"received_data":3448,"sent_data":494,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"elondrop.lol","ip":{"addr":"104.21.83.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-01-30","domain_rank":0,"first_seen":"2026-01-30T14:41:17.292174Z","last_seen":"2026-01-30T14:41:17.292174Z","alert_count":0,"request_count":10,"received_data":675010,"sent_data":5296,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"aodefevrgdkhqltdnwgzbyjoywrlbntbhfwq.com","ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"domain_registered":"2025-10-12","domain_rank":0,"first_seen":"2025-10-22T11:51:07.746032Z","last_seen":"2026-01-27T13:04:05.607822Z","alert_count":3,"request_count":3,"received_data":659270,"sent_data":1589,"comment":"","tags":null,"fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}]},{"fqdn":"solana.publicnode.com","ip":{"addr":"104.20.24.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2016-08-16","domain_rank":0,"first_seen":"2025-10-03T14:04:26.693295Z","last_seen":"2026-01-28T22:17:03.403683Z","alert_count":0,"request_count":2,"received_data":1464,"sent_data":1007,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"aodefevrgdkhqltdnwgzbyjoywrlbntbhfwq.com/@v1/cdn/js/boxen.amd.min.js?t=29496428\u0026u=-4FEMssTs5owquo3GDY5NGE3NWVmZGZhMzhiNjVlMWJkY2ZlNGfIqeocvHK1NT1tCw","fqdn":"aodefevrgdkhqltdnwgzbyjoywrlbntbhfwq.com","domain":"aodefevrgdkhqltdnwgzbyjoywrlbntbhfwq.com","tld":"com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"96c2ff1601099c21c598c24e6f43c7c4","sha1":"d78fa2e81b7b5ccf287c793c5a9985caaa0f6162","sha256":"7fd19c564761e2c8c9b583cf30db810e313417c7d3572f637f8cedf4d2cc1e91","sha512":"d7df68372670f0173ac5dc3c54ee38f13b29703dde9f71ec74827b535735e99b2b253e07960d66d8c3230f13cf29f20aa0f083db014cee0710379ffab68932be","ssdeep":"6144:0ujB8gltIeTM5/S8g6zRh5gDVLU2GIt/KJAsJRrydM147u/lhDlEqH96lm:vhltVM/g61sNUWsSdG7R","tlshash":"1ed438c2821814f684eb0ab6d133a21fdb4cce9dc69f2d20bfe55c9553c87a292f655c","size":656642,"data":"","first_seen":"2026-01-02T13:08:19.247086Z","last_seen":"2026-06-08T13:18:27.600009Z","times_seen":2556,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"elondrop.lol/landers/_airdrop/assets/elegant-spinner.min.js","fqdn":"elondrop.lol","domain":"elondrop.lol","tld":"lol"},"ip":{"addr":"104.21.83.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"332a20e21ddf64c1580acd8bddbd0f9e","sha1":"bbec58cd9f7f4e08cec0bf6e3cf7a2c321a3e10c","sha256":"08ef9a306d9cb6be9a37d2925525dc810e09397c2b78e240c39615848554106b","sha512":"6bccb38b1692e6c363bd92f57a0d0edf3621c39c0dcdccf65f418277099412589850f2675521da5359a6e823b79678467ca1a38e439ce49785bc45bb6b0daf0f","ssdeep":"12288:kPUKDF8B4wn2UiHLgTo24yuyq4DKqViNKedMMK/oIfNBQq:ku29WuNy","tlshash":"8e940e0395c193914273d3aa4f23b05ddad899f906456d63eb90aecab438934f4f2f72","size":442978,"data":"","first_seen":"2025-12-27T20:50:26.017526Z","last_seen":"2026-02-01T17:18:58.549021Z","times_seen":19,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"elondrop.lol/landers/_airdrop/assets/e.js?6","fqdn":"elondrop.lol","domain":"elondrop.lol","tld":"lol"},"ip":{"addr":"104.21.83.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"f4e014c8dce79aa242d655fc1ea4c0ff","sha1":"d8bb4770c67d0de9a76e5f9418808fc672a05401","sha256":"5e7ec9b55712cfcfc72896578b4c898f6905e2b8710d87d033edb2756f0613d5","sha512":"49c3bbcf91e033939bfa7141e57837dd1d1c6504f352314fa006a68d6d4c9e695f24d1ab0565da09a247302ba62fcb18842e080d1d6e603b6166f565d8f0a418","ssdeep":"384:PgaGybMmIVyUtMUxaH0CN8bMmhcU5QVnh1ZDPAdkjA+iBesCbtgNfjsE95Qi+2Y+:jYaUCN8bMmhc+QVnh1ZDPAdkjniBesCI","tlshash":"105204c62fc5e851175b4a7bb21b70e5e17a3dc922488d17c414b860f4d8b0bead39f6","size":13546,"data":"","first_seen":"2026-01-29T16:31:30.447077Z","last_seen":"2026-02-11T03:30:17.438243Z","times_seen":11,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"elondrop.lol/claim","fqdn":"elondrop.lol","domain":"elondrop.lol","tld":"lol"},"ip":{"addr":"104.21.83.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"d1a2c4f480ffdfd81ec59b6066062582","sha1":"c7f481db7ebb4a9af0f88d357c014735310dc5b3","sha256":"b1aa496e9a1a68ff4e574df79718cb6032178d6d825c048bdbf136aa4efc0465","sha512":"fbc803bcfe9aa6d538d100c3f084d16d7be017365c879548f74da1750b5bd0a626d337da6f35313461bfef8293a67200c8ae666158c02df2fd59111c87e78113","ssdeep":"12288:WgW385m0nuyi1LAz0cMquy0aDwU7ofoedMWG9oof5B2Y:WSczuunK","tlshash":"2a94210295c293a14273d3aa4f13b05ddad899f902456d63fb90aec6b438934f4f2f76","size":435663,"data":"","first_seen":"2025-12-27T20:50:26.092645Z","last_seen":"2026-02-01T17:18:58.555423Z","times_seen":19,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"elondrop.lol/claim","fqdn":"elondrop.lol","domain":"elondrop.lol","tld":"lol"},"ip":{"addr":"104.21.83.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"230a091930a82c5ae47e29610ee98ceb","sha1":"6376b33e5123bf09a271789a272103f957c8f38d","sha256":"4dc501d66cd78903b81b1a53459d0432939728c537bbe9ffab55ab81521cb352","sha512":"aafc914b9309be3d1801bf9ee1226bcc35e15baf70f28543a9ad1e094b1ca82f90b6359eac253b2539cd4469c52c4faeeb8029af9c4c02e7ba0d0c8ebf9bb8f0","ssdeep":"","tlshash":"6a30000000000000000000000000000000000003000000003000000003000000000000","size":5,"data":"","first_seen":"2023-03-07T01:02:01Z","last_seen":"2026-06-07T04:09:36.457374Z","times_seen":9907,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"elondrop.lol/claim","fqdn":"elondrop.lol","domain":"elondrop.lol","tld":"lol"},"ip":{"addr":"104.21.83.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"c1db1d6d29342bb07158b72dfb666271","sha1":"cb850937c49e870c66d00e833b8b6dfd171078b2","sha256":"9aee267f638715ca62335b40444bddd723eecf952e3b95b8e55d3b1eaf921f38","sha512":"19a44c5d1b41e2d5d5ef601befb122cc805264b6c7664ef36ccf38f276ee776ce1a98925bec2db25ad9a8a5e078ab99eb3d05abc556675dcacce1993402faafb","ssdeep":"192:ikj9keK+AxQTYTCfB4QrfObUYNwzG37VqNVakoWuqxw+n:xjMXUSRaVhuiw+","tlshash":"def19428b1d13035801b705726d7892c763da64b4b168c517b0d42e6cf65dac79ebfb4","size":7911,"data":"","first_seen":"2026-01-30T15:08:53.814459Z","last_seen":"2026-02-01T15:42:44.765188Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"elondrop.lol/click.php?event1=1\u0026load=1\u0026domain=elondrop.lol\u0026sub=\u0026wallet=","fqdn":"elondrop.lol","domain":"elondrop.lol","tld":"lol"},"ip":{"addr":"104.21.83.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://elondrop.lol/claim","date":"2026-01-30T15:08:29.218Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"elondrop.lol","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 30 Jan 2026 08:52:21 GMT","end":"Thu, 30 Apr 2026 09:50:52 GMT"},"fingerprint":{"sha1":"D5:67:42:0C:DE:2C:61:D7:93:4B:7C:AD:E3:82:1E:22:14:1C:20:FB","sha256":"90:33:35:67:00:ED:59:E1:AE:14:ED:46:4A:82:B5:88:C4:DF:42:8B:6C:CD:B9:50:C3:F9:4E:4D:34:D3:90:F4"}}},"request":{"raw":"GET /click.php?event1=1\u0026load=1\u0026domain=elondrop.lol\u0026sub=\u0026wallet= HTTP/1.1\r\nHost: elondrop.lol\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://elondrop.lol/claim\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: uclick=gxlpsc6o; uclickhash=gxlpsc6o-gxlpsc3y-i4-52-lp-hq-zw-a5d27b\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 30 Jan 2026 15:08:29 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\ncontent-encoding: br\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zVUw5anJKQIteNy4YgqwqS09MEoZ9%2FUDorJEIYuaxtHc7vg3APkxJ7PgKc%2BX2OUSLDiQrrF8i9gTMeH6Emvza2C9QIfNC4hR%2F7M%3D\"}]}\r\ncf-ray: 9c61e28a8f9f568d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-08T19:34:27.179619Z","times_seen":16247994,"resource_available":true,"data":null}},"time_used":72,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":72,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aodefevrgdkhqltdnwgzbyjoywrlbntbhfwq.com/@v1/cdn/js/boxen.amd.min.js?t=29496428\u0026u=-4FEMssTs5owquo3GDY5NGE3NWVmZGZhMzhiNjVlMWJkY2ZlNGfIqeocvHK1NT1tCw","fqdn":"aodefevrgdkhqltdnwgzbyjoywrlbntbhfwq.com","domain":"aodefevrgdkhqltdnwgzbyjoywrlbntbhfwq.com","tld":"com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://elondrop.lol/claim","date":"2026-01-30T15:08:31.057Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aodefevrgdkhqltdnwgzbyjoywrlbntbhfwq.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 08 Jan 2026 15:05:58 GMT","end":"Wed, 08 Apr 2026 15:05:57 GMT"},"fingerprint":{"sha1":"4D:1D:3C:6D:9E:2D:29:38:F6:A3:C5:A2:A9:6E:00:65:21:FD:F7:14","sha256":"B2:0A:D0:D4:D9:66:A7:A6:38:55:71:26:B9:06:E7:A1:A5:4B:C4:7B:C4:E5:D6:9A:6B:FF:D1:0E:21:E9:BB:C1"}}},"request":{"raw":"GET /@v1/cdn/js/boxen.amd.min.js?t=29496428\u0026u=-4FEMssTs5owquo3GDY5NGE3NWVmZGZhMzhiNjVlMWJkY2ZlNGfIqeocvHK1NT1tCw HTTP/1.1\r\nHost: aodefevrgdkhqltdnwgzbyjoywrlbntbhfwq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://elondrop.lol/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 30 Jan 2026 15:08:31 GMT\r\ncontent-type: text/javascript\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 4623665\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, PATCH, OPTIONS\r\ncache-control: no-store, must-revalidate, no-cache\r\ncontent-encoding: br\r\netag: W/\"a0502-14+i6Bt7XM8ofHk8WpmFyqoPYWI\"\r\nexpires: 0\r\npragma: no-cache\r\ncontent-disposition: attachment; filename=boxen.amd.min.js\r\ncdn-proxyver: 1.43\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 01/30/2026 15:08:31\r\ncdn-edgestorageid: 830\r\ncdn-requestid: f9dbadbeb3b1f97a46c13cacd5d47b3c\r\ncdn-cache: MISS\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":656642,"size_decoded":0,"mime_type":"text/javascript","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"96c2ff1601099c21c598c24e6f43c7c4","sha1":"d78fa2e81b7b5ccf287c793c5a9985caaa0f6162","sha256":"7fd19c564761e2c8c9b583cf30db810e313417c7d3572f637f8cedf4d2cc1e91","sha512":"d7df68372670f0173ac5dc3c54ee38f13b29703dde9f71ec74827b535735e99b2b253e07960d66d8c3230f13cf29f20aa0f083db014cee0710379ffab68932be","ssdeep":"6144:0ujB8gltIeTM5/S8g6zRh5gDVLU2GIt/KJAsJRrydM147u/lhDlEqH96lm:vhltVM/g61sNUWsSdG7R","tlshash":"1ed438c2821814f684eb0ab6d133a21fdb4cce9dc69f2d20bfe55c9553c87a292f655c","first_seen":"2026-01-02T13:08:19.247086Z","last_seen":"2026-06-08T13:18:27.600009Z","times_seen":2556,"resource_available":true,"data":null}},"time_used":305,"timings":{"blocked":36,"dns":26,"connect":1,"send":0,"wait":233,"receive":0,"ssl":6},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"aodefevrgdkhqltdnwgzbyjoywrlbntbhfwq.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"elondrop.lol/landers/_airdrop/style.css","fqdn":"elondrop.lol","domain":"elondrop.lol","tld":"lol"},"ip":{"addr":"104.21.83.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://elondrop.lol/claim","date":"2026-01-30T15:08:28.986Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"elondrop.lol","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 30 Jan 2026 08:52:21 GMT","end":"Thu, 30 Apr 2026 09:50:52 GMT"},"fingerprint":{"sha1":"D5:67:42:0C:DE:2C:61:D7:93:4B:7C:AD:E3:82:1E:22:14:1C:20:FB","sha256":"90:33:35:67:00:ED:59:E1:AE:14:ED:46:4A:82:B5:88:C4:DF:42:8B:6C:CD:B9:50:C3:F9:4E:4D:34:D3:90:F4"}}},"request":{"raw":"GET /landers/_airdrop/style.css HTTP/1.1\r\nHost: elondrop.lol\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://elondrop.lol/claim\r\nCookie: uclick=gxlpsc6o; uclickhash=gxlpsc6o-gxlpsc3y-i4-52-lp-hq-zw-a5d27b\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 30 Jan 2026 15:08:29 GMT\r\ncontent-type: text/css\r\nvary: accept-encoding\r\nlast-modified: Tue, 30 Dec 2025 03:17:43 GMT\r\npriority: u=2,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"69534457-ad11\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2RynRrk%2BnTF0nkNur7b5htw%2B5veSDgbYLREnLFGcuuT9mnQ3q34%2BZq3NwOdU81SLRZxHVs3aFY695LoTQ%2BwpQsrmDSNjxKFUsxQ%3D\"}]}\r\ncf-ray: 9c61e2892f8f568d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":44305,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text","md5":"6441ed9401d9fc6b87caadc9a82a5a12","sha1":"257096a5c4270b3e89a4ce0e5e43f3e80195c494","sha256":"f10aa91801c62f2eac54158cf9e47971899d170c87051d00e1edff4e790c81fd","sha512":"e966b92872674b7ab772698dbfae2960749bed38a88d43438cb2ec6ea74e36a8797229cbdb5302743d4bc1e3c28a8863d7a9b5824c4f6fb68d48c018a9d5ea6a","ssdeep":"768:NxqNbIVNl/fmjLQk8zM7vTXVkbDBCunyVnGOFSSDDk1dWoab+S:vzM7vTXnYS/ks","tlshash":"4513115a6aa325097817e4682fbb1758336cd043850fcd793fcd729c8f8a1d969e278c","first_seen":"2025-12-31T18:39:38.407406Z","last_seen":"2026-02-01T17:18:58.554583Z","times_seen":15,"resource_available":false,"data":null}},"time_used":148,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":87,"receive":61,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"elondrop.lol/landers/_airdrop/%7Blogo%7D","fqdn":"elondrop.lol","domain":"elondrop.lol","tld":"lol"},"ip":{"addr":"104.21.83.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://elondrop.lol/claim","date":"2026-01-30T15:08:29.870Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"elondrop.lol","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 30 Jan 2026 08:52:21 GMT","end":"Thu, 30 Apr 2026 09:50:52 GMT"},"fingerprint":{"sha1":"D5:67:42:0C:DE:2C:61:D7:93:4B:7C:AD:E3:82:1E:22:14:1C:20:FB","sha256":"90:33:35:67:00:ED:59:E1:AE:14:ED:46:4A:82:B5:88:C4:DF:42:8B:6C:CD:B9:50:C3:F9:4E:4D:34:D3:90:F4"}}},"request":{"raw":"GET /landers/_airdrop/%7Blogo%7D HTTP/1.1\r\nHost: elondrop.lol\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://elondrop.lol/claim\r\nCookie: uclick=gxlpsc6o; uclickhash=gxlpsc6o-gxlpsc3y-i4-52-lp-hq-zw-a5d27b\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 30 Jan 2026 15:08:29 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nvary: accept-encoding\r\npriority: u=6,i=?0\r\ncontent-encoding: br\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TPVJxb96CXxExenPpvKXO9iE06ZSSM4o57yrPeeiFc5xwln9v%2FMEyqQ72C4Aqh7pky1419hHstJ2wXLmDWhvoPEHKkRHaM7ghnE%3D\"}]}\r\ncf-ray: 9c61e28ebfba568d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-08T19:34:27.179619Z","times_seen":16247994,"resource_available":true,"data":null}},"time_used":60,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":60,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"solana.publicnode.com/","fqdn":"solana.publicnode.com","domain":"publicnode.com","tld":"com"},"ip":{"addr":"104.20.24.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://elondrop.lol/claim","date":"2026-01-30T15:08:30.503Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"publicnode.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 13 Dec 2025 17:51:58 GMT","end":"Fri, 13 Mar 2026 18:51:54 GMT"},"fingerprint":{"sha1":"5D:A4:4D:64:4A:0B:D5:DF:A9:2A:74:FF:D5:CE:EE:61:6B:BB:D1:AE","sha256":"FC:1D:8B:EC:25:7A:56:52:D8:D2:33:2D:B8:F2:93:D2:1D:7C:2D:4F:FB:EF:EF:31:6A:44:DC:EC:F3:3F:8B:7D"}}},"request":{"raw":"OPTIONS / HTTP/1.1\r\nHost: solana.publicnode.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://elondrop.lol/\r\nOrigin: https://elondrop.lol\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Fri, 30 Jan 2026 15:08:30 GMT\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: content-type\r\naccess-control-allow-methods: GET,HEAD,OPTIONS,POST\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 172800\r\nallow: OPTIONS, POST\r\nserver: cloudflare\r\nvary: Origin,Access-Control-Request-Method,Access-Control-Request-Headers\r\nx-envoy-upstream-service-time: 0\r\ncf-cache-status: DYNAMIC\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: 9c61e292ffd323eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-08T19:34:27.179619Z","times_seen":16247994,"resource_available":true,"data":null}},"time_used":271,"timings":{"blocked":50,"dns":24,"connect":1,"send":0,"wait":170,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aodefevrgdkhqltdnwgzbyjoywrlbntbhfwq.com/jmpd/","fqdn":"aodefevrgdkhqltdnwgzbyjoywrlbntbhfwq.com","domain":"aodefevrgdkhqltdnwgzbyjoywrlbntbhfwq.com","tld":"com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://elondrop.lol/claim","date":"2026-01-30T15:08:31.745Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aodefevrgdkhqltdnwgzbyjoywrlbntbhfwq.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 08 Jan 2026 15:05:58 GMT","end":"Wed, 08 Apr 2026 15:05:57 GMT"},"fingerprint":{"sha1":"4D:1D:3C:6D:9E:2D:29:38:F6:A3:C5:A2:A9:6E:00:65:21:FD:F7:14","sha256":"B2:0A:D0:D4:D9:66:A7:A6:38:55:71:26:B9:06:E7:A1:A5:4B:C4:7B:C4:E5:D6:9A:6B:FF:D1:0E:21:E9:BB:C1"}}},"request":{"raw":"OPTIONS /jmpd/ HTTP/1.1\r\nHost: aodefevrgdkhqltdnwgzbyjoywrlbntbhfwq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://elondrop.lol/\r\nOrigin: https://elondrop.lol\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Fri, 30 Jan 2026 15:08:31 GMT\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 4623665\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, PATCH, OPTIONS\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\naccess-control-max-age: 86400\r\ncache-control: no-cache\r\ncdn-proxyver: 1.43\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 204\r\ncdn-cachedat: 01/30/2026 15:08:31\r\ncdn-edgestorageid: 830\r\ncdn-requestid: dbc03bd429ffecd240648f3a44872342\r\ncdn-status: 204\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-08T19:34:27.179619Z","times_seen":16247994,"resource_available":true,"data":null}},"time_used":68,"timings":{"blocked":10,"dns":1,"connect":1,"send":0,"wait":43,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"aodefevrgdkhqltdnwgzbyjoywrlbntbhfwq.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aodefevrgdkhqltdnwgzbyjoywrlbntbhfwq.com/jmpd/","fqdn":"aodefevrgdkhqltdnwgzbyjoywrlbntbhfwq.com","domain":"aodefevrgdkhqltdnwgzbyjoywrlbntbhfwq.com","tld":"com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://elondrop.lol/claim","date":"2026-01-30T15:08:31.804Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aodefevrgdkhqltdnwgzbyjoywrlbntbhfwq.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 08 Jan 2026 15:05:58 GMT","end":"Wed, 08 Apr 2026 15:05:57 GMT"},"fingerprint":{"sha1":"4D:1D:3C:6D:9E:2D:29:38:F6:A3:C5:A2:A9:6E:00:65:21:FD:F7:14","sha256":"B2:0A:D0:D4:D9:66:A7:A6:38:55:71:26:B9:06:E7:A1:A5:4B:C4:7B:C4:E5:D6:9A:6B:FF:D1:0E:21:E9:BB:C1"}}},"request":{"raw":"POST /jmpd/ HTTP/1.1\r\nHost: aodefevrgdkhqltdnwgzbyjoywrlbntbhfwq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://elondrop.lol/\r\ncontent-type: application/json\r\nContent-Length: 2201\r\nOrigin: https://elondrop.lol\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":2201,"data":"{\"route\":\"8XUwkBv9vhPYfVpD1fxb7EC65sUXJdqr\",\"payload\":\"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\"}"}},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 30 Jan 2026 15:08:32 GMT\r\ncontent-type: application/json; charset=utf-8\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 4623665\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, PATCH, OPTIONS\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ncache-control: no-cache\r\ncontent-encoding: br\r\netag: W/\"e1-h4lBk0TTvzYco5NZWiD628jToOk\"\r\nx-ratelimit-limit: 10000\r\nx-ratelimit-remaining: 9999\r\nx-ratelimit-reset: 1769785771821\r\ncdn-proxyver: 1.43\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 01/30/2026 15:08:32\r\ncdn-edgestorageid: 830\r\ncdn-requestid: fd1105e1fa3ab73832d23a4ffdf28880\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":225,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"6051eb3692609d461ee0b21fb042d612","sha1":"8789419344d3bf361ca393595a20fadbc8d3a0e9","sha256":"cf9a5410f3e33b5f80d74862125afe0a32bfa731d2630d908638eedc3094c50d","sha512":"c575f5f00aa618eb5757a27890f81c03bb26de669628ceeefdd104a24c2df7032fa19f48dec7f3742b98622d427bb18a261939538baa82070c463cbae0928a54","ssdeep":"","tlshash":"f1d023b300c3cf1994c899f00d8d1d163b1338efd044c18d168402e4b92f725d96060f","first_seen":"2026-01-30T15:08:53.806736Z","last_seen":"2026-01-30T15:08:53.806736Z","times_seen":1,"resource_available":false,"data":null}},"time_used":268,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":268,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"aodefevrgdkhqltdnwgzbyjoywrlbntbhfwq.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"elondrop.lol/landers/_airdrop/assets/elegant-spinner.min.js","fqdn":"elondrop.lol","domain":"elondrop.lol","tld":"lol"},"ip":{"addr":"104.21.83.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://elondrop.lol/claim","date":"2026-01-30T15:08:28.991Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"elondrop.lol","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 30 Jan 2026 08:52:21 GMT","end":"Thu, 30 Apr 2026 09:50:52 GMT"},"fingerprint":{"sha1":"D5:67:42:0C:DE:2C:61:D7:93:4B:7C:AD:E3:82:1E:22:14:1C:20:FB","sha256":"90:33:35:67:00:ED:59:E1:AE:14:ED:46:4A:82:B5:88:C4:DF:42:8B:6C:CD:B9:50:C3:F9:4E:4D:34:D3:90:F4"}}},"request":{"raw":"GET /landers/_airdrop/assets/elegant-spinner.min.js HTTP/1.1\r\nHost: elondrop.lol\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://elondrop.lol/claim\r\nCookie: uclick=gxlpsc6o; uclickhash=gxlpsc6o-gxlpsc3y-i4-52-lp-hq-zw-a5d27b\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 30 Jan 2026 15:08:29 GMT\r\ncontent-type: application/javascript\r\nvary: accept-encoding\r\nlast-modified: Thu, 25 Dec 2025 05:45:56 GMT\r\npriority: u=2,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-debug-path: /var/www/binom/landers/assets/elegant-spinner.min.js\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"694ccf94-6c262\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=J%2B%2FVaNZZ3eoxU56YpRBGkSdKt5wjJmo4d0GpyUFC3jymSjVF6YYPVSCh4yWMAZCtfm5mM4wJtvjYdEs%2FQ6Wv13N6%2FwdwKrFmcN8%3D\"}]}\r\ncf-ray: 9c61e2892f91568d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":442978,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65159)","md5":"332a20e21ddf64c1580acd8bddbd0f9e","sha1":"bbec58cd9f7f4e08cec0bf6e3cf7a2c321a3e10c","sha256":"08ef9a306d9cb6be9a37d2925525dc810e09397c2b78e240c39615848554106b","sha512":"6bccb38b1692e6c363bd92f57a0d0edf3621c39c0dcdccf65f418277099412589850f2675521da5359a6e823b79678467ca1a38e439ce49785bc45bb6b0daf0f","ssdeep":"12288:kPUKDF8B4wn2UiHLgTo24yuyq4DKqViNKedMMK/oIfNBQq:ku29WuNy","tlshash":"8e940e0395c193914273d3aa4f23b05ddad899f906456d63eb90aecab438934f4f2f72","first_seen":"2025-12-27T20:50:26.017526Z","last_seen":"2026-02-01T17:18:58.549021Z","times_seen":19,"resource_available":true,"data":null}},"time_used":245,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":83,"receive":162,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"elondrop.lol/landers/_airdrop/assets/e.js?6","fqdn":"elondrop.lol","domain":"elondrop.lol","tld":"lol"},"ip":{"addr":"104.21.83.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://elondrop.lol/claim","date":"2026-01-30T15:08:28.988Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"elondrop.lol","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 30 Jan 2026 08:52:21 GMT","end":"Thu, 30 Apr 2026 09:50:52 GMT"},"fingerprint":{"sha1":"D5:67:42:0C:DE:2C:61:D7:93:4B:7C:AD:E3:82:1E:22:14:1C:20:FB","sha256":"90:33:35:67:00:ED:59:E1:AE:14:ED:46:4A:82:B5:88:C4:DF:42:8B:6C:CD:B9:50:C3:F9:4E:4D:34:D3:90:F4"}}},"request":{"raw":"GET /landers/_airdrop/assets/e.js?6 HTTP/1.1\r\nHost: elondrop.lol\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://elondrop.lol/claim\r\nCookie: uclick=gxlpsc6o; uclickhash=gxlpsc6o-gxlpsc3y-i4-52-lp-hq-zw-a5d27b\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 30 Jan 2026 15:08:29 GMT\r\ncontent-type: application/javascript\r\nvary: accept-encoding\r\nlast-modified: Wed, 28 Jan 2026 08:01:07 GMT\r\npriority: u=2,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-debug-path: /var/www/binom/landers/assets/e.js\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"6979c243-34ea\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9KygAedQGYd1vCpN9oGSeNSBs0jmAZG%2FuI41uMnDjWm5IQum0m5C0dE7LMX7RLX5rd3NavoDHAM2xYaqS8TX6x6s4cGKXJFres4%3D\"}]}\r\ncf-ray: 9c61e2892f90568d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13546,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (13546), with no line terminators","md5":"f4e014c8dce79aa242d655fc1ea4c0ff","sha1":"d8bb4770c67d0de9a76e5f9418808fc672a05401","sha256":"5e7ec9b55712cfcfc72896578b4c898f6905e2b8710d87d033edb2756f0613d5","sha512":"49c3bbcf91e033939bfa7141e57837dd1d1c6504f352314fa006a68d6d4c9e695f24d1ab0565da09a247302ba62fcb18842e080d1d6e603b6166f565d8f0a418","ssdeep":"384:PgaGybMmIVyUtMUxaH0CN8bMmhcU5QVnh1ZDPAdkjA+iBesCbtgNfjsE95Qi+2Y+:jYaUCN8bMmhc+QVnh1ZDPAdkjniBesCI","tlshash":"105204c62fc5e851175b4a7bb21b70e5e17a3dc922488d17c414b860f4d8b0bead39f6","first_seen":"2026-01-29T16:31:30.447077Z","last_seen":"2026-02-11T03:30:17.438243Z","times_seen":11,"resource_available":true,"data":null}},"time_used":85,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":83,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"elondrop.lol/click.php?event2=1","fqdn":"elondrop.lol","domain":"elondrop.lol","tld":"lol"},"ip":{"addr":"104.21.83.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://elondrop.lol/claim","date":"2026-01-30T15:08:29.688Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"elondrop.lol","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 30 Jan 2026 08:52:21 GMT","end":"Thu, 30 Apr 2026 09:50:52 GMT"},"fingerprint":{"sha1":"D5:67:42:0C:DE:2C:61:D7:93:4B:7C:AD:E3:82:1E:22:14:1C:20:FB","sha256":"90:33:35:67:00:ED:59:E1:AE:14:ED:46:4A:82:B5:88:C4:DF:42:8B:6C:CD:B9:50:C3:F9:4E:4D:34:D3:90:F4"}}},"request":{"raw":"GET /click.php?event2=1 HTTP/1.1\r\nHost: elondrop.lol\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://elondrop.lol/claim\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: uclick=gxlpsc6o; uclickhash=gxlpsc6o-gxlpsc3y-i4-52-lp-hq-zw-a5d27b\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 30 Jan 2026 15:08:29 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\ncontent-encoding: br\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aGrYrH%2BNT7FMVNu5l1XRihcSuFo2O05I13QRqGv2D7W%2BGmkK7NOC9lS8UL3%2B2AUF%2Bbxw4CBHFFIiwDuxo0B9j3S0Z5Po9ceJ2gI%3D\"}]}\r\ncf-ray: 9c61e28d9fb3568d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-08T19:34:27.179619Z","times_seen":16247994,"resource_available":true,"data":null}},"time_used":67,"timings":{"blocked":2,"dns":0,"connect":0,"send":0,"wait":65,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"elondrop.lol/secureproxy?s=%2F%40v1%2Fcdn%2Fjs%2Fboxen.amd.min.js%3Ft%3D29496428%26u%3D-4FEMssTs5owquo3GDY5NGE3NWVmZGZhMzhiNjVlMWJkY2ZlNGfIqeocvHK1NT1tCw","fqdn":"elondrop.lol","domain":"elondrop.lol","tld":"lol"},"ip":{"addr":"104.21.83.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://elondrop.lol/claim","date":"2026-01-30T15:08:29.713Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"elondrop.lol","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 30 Jan 2026 08:52:21 GMT","end":"Thu, 30 Apr 2026 09:50:52 GMT"},"fingerprint":{"sha1":"D5:67:42:0C:DE:2C:61:D7:93:4B:7C:AD:E3:82:1E:22:14:1C:20:FB","sha256":"90:33:35:67:00:ED:59:E1:AE:14:ED:46:4A:82:B5:88:C4:DF:42:8B:6C:CD:B9:50:C3:F9:4E:4D:34:D3:90:F4"}}},"request":{"raw":"GET /secureproxy?s=%2F%40v1%2Fcdn%2Fjs%2Fboxen.amd.min.js%3Ft%3D29496428%26u%3D-4FEMssTs5owquo3GDY5NGE3NWVmZGZhMzhiNjVlMWJkY2ZlNGfIqeocvHK1NT1tCw HTTP/1.1\r\nHost: elondrop.lol\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://elondrop.lol/claim\r\nCookie: uclick=gxlpsc6o; uclickhash=gxlpsc6o-gxlpsc3y-i4-52-lp-hq-zw-a5d27b\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 30 Jan 2026 15:08:29 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\ncontent-encoding: br\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vDrOG%2FHlXW0lVlL%2B3DEQOWZ7Ch3pd6sF4BOhppEZIKM1lSCHA5zWCaxycDHPHg8Axnh7Fn4x8wZMZU1YwMsmrgldOZivRHNQXBc%3D\"}]}\r\ncf-ray: 9c61e28dbfb5568d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-08T19:34:27.179619Z","times_seen":16247994,"resource_available":true,"data":null}},"time_used":55,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":55,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i.postimg.cc/y8KF7qBD/image.png","fqdn":"i.postimg.cc","domain":"postimg.cc","tld":"cc"},"ip":{"addr":"45.43.142.101","port":443,"asn":215751,"as":"Mikhail Fedorov","country":"Israel","country_code":"IL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://elondrop.lol/claim","date":"2026-01-30T15:08:30.172Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"postimg.cc","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 15 Dec 2025 06:59:00 GMT","end":"Sun, 15 Mar 2026 06:58:59 GMT"},"fingerprint":{"sha1":"C3:A1:A1:CF:B5:C2:F8:46:61:8F:2F:50:69:51:66:5C:B7:40:74:B0","sha256":"0D:77:24:2B:B5:24:E5:20:5F:99:9A:4F:51:93:65:79:E2:FF:1E:BA:9E:BF:E4:28:BA:34:F3:C4:83:0C:CF:21"}}},"request":{"raw":"GET /y8KF7qBD/image.png HTTP/1.1\r\nHost: i.postimg.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://elondrop.lol/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Fri, 30 Jan 2026 15:08:30 GMT\r\ncontent-type: image/png\r\ncontent-length: 308761\r\nlast-modified: Fri, 30 Jan 2026 09:15:15 GMT\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, OPTIONS\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":308761,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 800 x 800, 8-bit/color RGBA, non-interlaced","md5":"833310e75fe963838655f36e491879eb","sha1":"2b1a434d5dba8cbdd1c435ab9e798bd29509945a","sha256":"ab2c8a24fb73bd179866892f4c0eb9db257b167998a3fb71bb9df3b98048c8e0","sha512":"5ecfd4fd4c5549dee4e0b2498c6bdae8bb98339e7f57d29cdf101749fb7fc74f14bbecd892abf689709bf5a5fd1752ceb4b72f3e147c59ac7c24eb61eb397c29","ssdeep":"6144:oTkp2kBHSbMVtWbjE93NEviVaytEFrhAJozQ8ICE08scm:oTk1kwwjGNQiI5XWogCEVm","tlshash":"916412619f2ec5f2d5ae70310d75a13b978db110c7fb28081a03a2d4bc3291655bbabf","first_seen":"2026-01-30T15:08:53.808686Z","last_seen":"2026-02-01T15:42:44.760356Z","times_seen":2,"resource_available":false,"data":null}},"time_used":388,"timings":{"blocked":132,"dns":71,"connect":22,"send":0,"wait":25,"receive":99,"ssl":36},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"corsproxy.io/?https://api.mainnet-beta.solana.com","fqdn":"corsproxy.io","domain":"corsproxy.io","tld":"io"},"ip":{"addr":"104.26.7.163","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://elondrop.lol/claim","date":"2026-01-30T15:08:30.404Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"corsproxy.io","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 28 Jan 2026 03:43:41 GMT","end":"Tue, 28 Apr 2026 03:43:40 GMT"},"fingerprint":{"sha1":"6C:0D:40:92:59:E5:2E:A0:CA:4A:E5:0F:8E:6E:29:51:9D:B8:99:E4","sha256":"92:26:45:38:46:B3:CC:84:2B:1F:69:1C:B6:DF:39:25:92:BD:77:47:1B:3A:E4:90:3F:61:37:38:69:B2:7E:4E"}}},"request":{"raw":"OPTIONS /?https://api.mainnet-beta.solana.com HTTP/1.1\r\nHost: corsproxy.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://elondrop.lol/\r\nOrigin: https://elondrop.lol\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 403 Forbidden\r\ndate: Fri, 30 Jan 2026 15:08:30 GMT\r\ncontent-type: application/json\r\nstrict-transport-security: max-age=2592000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KBbuR7GTr9Jdv55TxAeT7WvjEVT1xqxEEKiEX3krX0zMEwB6OHrZrCAEmWEGRgBjDb6dW5C%2FWFkMwbQg%2Bdfv7L76Assu5dYOnQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: same-origin\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: *\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9c61e2925dec0b4d-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/json","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-08T19:34:27.179619Z","times_seen":16247994,"resource_available":true,"data":null}},"time_used":109,"timings":{"blocked":49,"dns":26,"connect":1,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"solana.publicnode.com/","fqdn":"solana.publicnode.com","domain":"publicnode.com","tld":"com"},"ip":{"addr":"104.20.24.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://elondrop.lol/claim","date":"2026-01-30T15:08:30.740Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"publicnode.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 13 Dec 2025 17:51:58 GMT","end":"Fri, 13 Mar 2026 18:51:54 GMT"},"fingerprint":{"sha1":"5D:A4:4D:64:4A:0B:D5:DF:A9:2A:74:FF:D5:CE:EE:61:6B:BB:D1:AE","sha256":"FC:1D:8B:EC:25:7A:56:52:D8:D2:33:2D:B8:F2:93:D2:1D:7C:2D:4F:FB:EF:EF:31:6A:44:DC:EC:F3:3F:8B:7D"}}},"request":{"raw":"POST / HTTP/1.1\r\nHost: solana.publicnode.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://elondrop.lol/\r\nContent-Type: application/json\r\nContent-Length: 130\r\nOrigin: https://elondrop.lol\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":130,"data":"{\"jsonrpc\":\"2.0\",\"id\":1,\"method\":\"getAccountInfo\",\"params\":[\"8ycauMwVE61B4uWz87B2k2G8mMK7iFjRoBHooaVAcP4k\",{\"encoding\":\"base64\"}]}"}},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 30 Jan 2026 15:08:30 GMT\r\ncontent-type: application/json\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 1728000\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, accept-encoding\r\nx-envoy-upstream-service-time: 88\r\nx-content-type-options: nosniff\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9c61e2940b1823eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":327,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"1bc0565db5116dd03ced2713f4f1fb6c","sha1":"9508d604591f90c637cebcde0074fe67edd86c56","sha256":"a94f03572815f2f40209bacf14532a3372fd2dcba08d8ed28f0c60116096ae6f","sha512":"d87732fcea3ad3124e8a6327c16020c048325558a8b279a71b1322b2d31b305a93162a722f8a39cf0549ccd45716355c79e6f0304eca16481fbb690ff495b565","ssdeep":"","tlshash":"d3e07d803d090bbeaed44e17ca1a619ad7c10c999b004a8713eb0d15b1c959da04b5bb","first_seen":"2026-01-30T15:08:53.80953Z","last_seen":"2026-01-30T15:08:53.80953Z","times_seen":1,"resource_available":false,"data":null}},"time_used":267,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":267,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"elondrop.lol/claim","fqdn":"elondrop.lol","domain":"elondrop.lol","tld":"lol"},"ip":{"addr":"104.21.83.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-01-30T15:08:28.540Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"elondrop.lol","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 30 Jan 2026 08:52:21 GMT","end":"Thu, 30 Apr 2026 09:50:52 GMT"},"fingerprint":{"sha1":"D5:67:42:0C:DE:2C:61:D7:93:4B:7C:AD:E3:82:1E:22:14:1C:20:FB","sha256":"90:33:35:67:00:ED:59:E1:AE:14:ED:46:4A:82:B5:88:C4:DF:42:8B:6C:CD:B9:50:C3:F9:4E:4D:34:D3:90:F4"}}},"request":{"raw":"GET /claim HTTP/1.1\r\nHost: elondrop.lol\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 30 Jan 2026 15:08:28 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: uclick=gxlpsc6o; expires=Sat, 31 Jan 2026 15:08:28 GMT; Max-Age=86400; path=/; secure; SameSite=none\nuclickhash=gxlpsc6o-gxlpsc6o-fe-fe-i4-17-vr-ad3b63; expires=Sat, 31 Jan 2026 15:08:28 GMT; Max-Age=86400; path=/; secure; SameSite=none\nuclick=gxlpsc6o; expires=Sat, 31 Jan 2026 15:08:28 GMT; Max-Age=86400; path=/; secure; SameSite=none\nuclickhash=gxlpsc6o-gxlpsc3y-i4-52-lp-hq-zw-a5d27b; expires=Sat, 31 Jan 2026 15:08:28 GMT; Max-Age=86400; path=/; secure; SameSite=none\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sJYYcFW%2Fd4GzXrtrNoedMkvBZI0OntRK7N2FT%2FiXAgh%2BGG7Z3%2FMUA4ARm4m1Emy50uvNO5aaQmk8fuOKxgTxs1xvEs1lQ6a20Ck%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncf-ray: 9c61e286ee5e56b7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":167514,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (16901)","md5":"2e9241c4612570472043558abcb90066","sha1":"0c3417bac248c459db71a9acbb05fe49f84dd027","sha256":"09344483b73b2756590210ea8b1b4b4e009d2e74de43211393cb2b736f302233","sha512":"40560397cdef6a119c3f59f2e5d484799fa27acfc44d4dbd84ee0d9bc44af7067edc83d55bac9109e27b2425fe2566eb7ae45593364d40d224302000a9076add","ssdeep":"3072:A6au3EHjI6sftmcau3EHjI6sftmbZwQCxr:A6aaEHjTCtmcaaEHjTCtmu1","tlshash":"6cf3d657165f2666180c3eb74bc26d0ed548f1e28a138bc8f0de19fc9bdfa5d898216c","first_seen":"2026-01-30T15:08:53.810316Z","last_seen":"2026-02-01T15:42:44.757288Z","times_seen":2,"resource_available":false,"data":null}},"time_used":341,"timings":{"blocked":81,"dns":64,"connect":1,"send":0,"wait":176,"receive":0,"ssl":16},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Inter:wght@400;500;600;700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.74","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://elondrop.lol/claim","date":"2026-01-30T15:08:28.985Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 12 Jan 2026 08:38:02 GMT","end":"Mon, 06 Apr 2026 08:38:01 GMT"},"fingerprint":{"sha1":"00:CB:E3:62:3C:86:A7:11:87:F3:A6:90:20:C5:3B:40:22:3D:A4:45","sha256":"95:06:BF:37:D3:97:28:E3:54:05:91:BE:0D:2F:72:C7:C5:B0:4B:1C:FA:A1:FF:85:13:D0:DE:4A:8F:A2:55:1D"}}},"request":{"raw":"GET /css2?family=Inter:wght@400;500;600;700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://elondrop.lol/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Fri, 30 Jan 2026 15:08:29 GMT\r\ndate: Fri, 30 Jan 2026 15:08:29 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10108,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"e85517dadd43448782d60d7f207fddce","sha1":"6cd31f870727ba8090fac9602b42524b4139a619","sha256":"88fbd0b95222be288587a149c324189ecbd8de0d6f0c94f528ec53857e52b66c","sha512":"5edc78df5bb062a9a2e1ea6724c14dd7eb80d77ea0fa9572de4bb0d52bbd0d163815b08a1ae77084f99fbefbb07715da1c61f0bb36fb498710c91387792955f8","ssdeep":"192:9NNIxO34OxDENOPCO3/Nx8NNryfO3iExlONEhYO3RrxGx:vXuM0p2+4","tlshash":"04227792002ba400ab971dc233cf7f3aaece50896085d1b95ffd0dc59cead66436876d","first_seen":"2025-09-10T18:13:11.065101Z","last_seen":"2026-06-08T19:00:32.895961Z","times_seen":29632,"resource_available":false,"data":null}},"time_used":202,"timings":{"blocked":82,"dns":0,"connect":15,"send":0,"wait":33,"receive":0,"ssl":68},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"elondrop.lol/secureproxy?e=ping_proxy","fqdn":"elondrop.lol","domain":"elondrop.lol","tld":"lol"},"ip":{"addr":"104.21.83.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://elondrop.lol/claim","date":"2026-01-30T15:08:29.542Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"elondrop.lol","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 30 Jan 2026 08:52:21 GMT","end":"Thu, 30 Apr 2026 09:50:52 GMT"},"fingerprint":{"sha1":"D5:67:42:0C:DE:2C:61:D7:93:4B:7C:AD:E3:82:1E:22:14:1C:20:FB","sha256":"90:33:35:67:00:ED:59:E1:AE:14:ED:46:4A:82:B5:88:C4:DF:42:8B:6C:CD:B9:50:C3:F9:4E:4D:34:D3:90:F4"}}},"request":{"raw":"GET /secureproxy?e=ping_proxy HTTP/1.1\r\nHost: elondrop.lol\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://elondrop.lol/claim\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: uclick=gxlpsc6o; uclickhash=gxlpsc6o-gxlpsc3y-i4-52-lp-hq-zw-a5d27b\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 30 Jan 2026 15:08:29 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\ncontent-encoding: br\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xFy4EO%2FqNrDPxN6R5%2BynxZPXQxAceJYSRBm36uP5RNVmFHXrju733528y%2F8SmulPRlyD9hKvSDezdV1u0xN0o6IAwuzza4ts2u0%3D\"}]}\r\ncf-ray: 9c61e28cafad568d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-08T19:34:27.179619Z","times_seen":16247994,"resource_available":true,"data":null}},"time_used":92,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":92,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lite-api.jup.ag/tokens/v2/search?query=2akXpuyFXAVN5YofZpZMfBp2Vxognpmv9NooBMuHpump","fqdn":"lite-api.jup.ag","domain":"jup.ag","tld":"ag"},"ip":{"addr":"52.84.50.12","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://elondrop.lol/claim","date":"2026-01-30T15:08:29.579Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lite-api.jup.ag","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 01 Apr 2025 00:00:00 GMT","end":"Thu, 30 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"6A:C1:1A:55:81:46:51:60:92:8E:23:71:EC:0D:F5:22:E2:77:CC:B6","sha256":"9B:2C:9B:3C:A9:B9:32:F1:2E:E7:12:53:C3:E5:39:A9:B1:D1:92:0F:BD:83:0D:8B:73:33:20:78:3D:B0:C8:E7"}}},"request":{"raw":"GET /tokens/v2/search?query=2akXpuyFXAVN5YofZpZMfBp2Vxognpmv9NooBMuHpump HTTP/1.1\r\nHost: lite-api.jup.ag\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://elondrop.lol/\r\nOrigin: https://elondrop.lol\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json\r\ndate: Fri, 30 Jan 2026 15:08:30 GMT\r\nserver: cloudflare\r\ncf-ray: 9c61e28efcd6568d-OSL\r\ncontent-encoding: br\r\naccess-control-allow-origin: https://elondrop.lol\r\ncache-control: public, max-age=10\r\nvary: Origin, Accept-Encoding\r\naccess-control-allow-credentials: true\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 dab692ab133f98758992c9457836e846.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: Zk8hs9NGzaOARRs-867GCkfetdMsz9H1TzG8JdDUEkiKd4AIp2W_VQ==\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2755,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"21011f58f495e13d3b8e3d961e4d209b","sha1":"1c7a47eb7a29da09e15ecb4b996cfebaed2dcacd","sha256":"459399377f48b529654f671e6bdaf6397dc8b00dbad371eeeb64db558ee91001","sha512":"fbfe83e58b90d89e47ae606670198dba33815ccecfb5a590d7713076c2f00562ab621594f448e4c943387bf0a8ab92a775e3f0dd07d8838c58f203e1960b7159","ssdeep":"","tlshash":"e351a8f597ba80f0dbfd4386848c3fa5509b24d281310946997d49ec49cc8ea5f0de5f","first_seen":"2026-01-30T15:08:53.812089Z","last_seen":"2026-01-30T15:08:53.812089Z","times_seen":1,"resource_available":false,"data":null}},"time_used":852,"timings":{"blocked":326,"dns":27,"connect":1,"send":0,"wait":198,"receive":0,"ssl":297},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"elondrop.lol/click.php?event6=1","fqdn":"elondrop.lol","domain":"elondrop.lol","tld":"lol"},"ip":{"addr":"104.21.83.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://elondrop.lol/claim","date":"2026-01-30T15:08:29.575Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"elondrop.lol","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 30 Jan 2026 08:52:21 GMT","end":"Thu, 30 Apr 2026 09:50:52 GMT"},"fingerprint":{"sha1":"D5:67:42:0C:DE:2C:61:D7:93:4B:7C:AD:E3:82:1E:22:14:1C:20:FB","sha256":"90:33:35:67:00:ED:59:E1:AE:14:ED:46:4A:82:B5:88:C4:DF:42:8B:6C:CD:B9:50:C3:F9:4E:4D:34:D3:90:F4"}}},"request":{"raw":"GET /click.php?event6=1 HTTP/1.1\r\nHost: elondrop.lol\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://elondrop.lol/claim\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: uclick=gxlpsc6o; uclickhash=gxlpsc6o-gxlpsc3y-i4-52-lp-hq-zw-a5d27b\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 30 Jan 2026 15:08:29 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\ncontent-encoding: br\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JFTpe40dgey%2FYuuZqdOWTBE6hnuJ%2BS3J08ofJ8bpm16oCGq%2BGgQUeU7fZSAaEPS3a%2F58SXRHW8iBwqIJqiglWa3FcOSUoz2%2B5T4%3D\"}]}\r\ncf-ray: 9c61e28cdfaf568d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-08T19:34:27.179619Z","times_seen":16247994,"resource_available":true,"data":null}},"time_used":103,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":103,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}