{"report_id":"0dc38fb3-4d84-4858-a7f4-5c9206f455f5","version":6,"status":"done","tags":[],"date":"2025-12-16T15:14:15Z","url":{"schema":"http","addr":"racer-airdrop.info","fqdn":"racer-airdrop.info","domain":"racer-airdrop.info","tld":"info"},"ip":{"addr":"104.21.0.145","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"racer-airdrop.info/","fqdn":"racer-airdrop.info","domain":"racer-airdrop.info","tld":"info"},"title":"RACER","dom":{"size":144,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with no line terminators","md5":"5ca68054ff8813a002a1160e11167abb","sha1":"89642647e6c90a1b2153f66e03892d083aa8ffc4","sha256":"e40f1759e3d5591a20e3bc662684f179f5a499468ad4ee7a5bd3ef92b4db55b5","sha512":"fcd01c2156d1a965bbaf07bdc2f1f1e08f0d26ba5340bd6c56996c951fae3d9bc24f71d7506643c53a5e8411add028a661df5afbd2be70575f96248b5b3b0162","ssdeep":"","tlshash":"6ac02b22d8004c0f39009fd1cb8af1c4c003ec3ce8315c00b863b144edac131c012558","dom_hash":"domhash1b838b182bbc8c7be786b9f3c16bbd25","first_seen":"2024-10-13T01:25:15.150688Z","last_seen":"2026-08-11T10:04:54.735553Z","times_seen":76,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"racer-airdrop.info","fqdn":"racer-airdrop.info","domain":"racer-airdrop.info","tld":"info"},"ip":{"addr":"104.21.0.145","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null,"user":{"user_id":"akbkyowd9geqr98"}},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-01-20T15:14:15Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":4}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-16","alert":"Sinkholed","trigger":"racer-airdrop.info","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-16","alert":"Sinkholed","trigger":"racer-airdrop.info","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-16","alert":"Sinkholed","trigger":"aodefevrgdkhqltdnwgzbyjoywrlbntbhfwq.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-16","alert":"Sinkholed","trigger":"aodefevrgdkhqltdnwgzbyjoywrlbntbhfwq.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"racer-airdrop.info","ip":{"addr":"172.67.128.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2025-12-16T15:14:17.033005Z","last_seen":"2025-12-16T15:14:17.033005Z","alert_count":64,"request_count":32,"received_data":14149870,"sent_data":15133,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"aodefevrgdkhqltdnwgzbyjoywrlbntbhfwq.com","ip":{"addr":"195.181.166.158","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"domain_registered":"2025-10-12","domain_rank":0,"first_seen":"2025-10-22T11:51:07.746032Z","last_seen":"2025-12-12T12:57:37.76864Z","alert_count":2,"request_count":1,"received_data":949,"sent_data":529,"comment":"","tags":null,"fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}]},{"fqdn":"corsproxy.io","ip":{"addr":"172.67.73.211","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2022-01-30","domain_rank":175528,"first_seen":"2016-05-19T01:27:08Z","last_seen":"2025-12-11T05:15:47.730058Z","alert_count":0,"request_count":2,"received_data":2868,"sent_data":1085,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"racer-airdrop.info/meow.desktop.js","fqdn":"racer-airdrop.info","domain":"racer-airdrop.info","tld":"info"},"ip":{"addr":"172.67.128.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"210f3769ba671106bb28dd0c2b089600","sha1":"da0d57a2763061cc3c8372cf2d2850d9e3b9dc43","sha256":"f527a9286dce3be16f3165cf7e310d61a025ea54f021983e7dbb7940c0731927","sha512":"39f38165e88778b37bb6385ffb793f0d0d70cec2b4bdc816af235b59e80764ddfdaefc71c6237870174ce77cd05d49664b5c11aca4bd18ebf56de112ecf684b3","ssdeep":"6144:qZMet+MetWMetWMet17a7h2JfBEZEhppmZ0h106:qdCua6Of+ZE5hp","tlshash":"5cb494760142b399839ca55f85341e8cd695cd1a4fcc882ef668e4cff0a0d176beaf52","size":496884,"data":"","first_seen":"2025-12-16T15:14:23.457341Z","last_seen":"2025-12-16T15:14:23.457341Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"racer-airdrop.info/","fqdn":"racer-airdrop.info","domain":"racer-airdrop.info","tld":"info"},"ip":{"addr":"172.67.128.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"7914af1bf46930e5bf1efcc4273fb17e","sha1":"20a6990b7ea738f94805a123c019a9b5beffde44","sha256":"f80b5a1de34ae77da9e16af94c0fb980ce146d94bd6106159000e74c4891fe2c","sha512":"2c5eacd380f7e48f9ad64305eaf76d66c0ea069ece2f5db18038d3f43b6a33fb0b4382df71e4a51c745ab1e76d55ab1206b559a4bf70b1cd8e84c718c182062b","ssdeep":"6144:0IxQxxQ1xQZxQXtG712ZtJujoJZPmZqT/as:0I+x+1+Z+wOt8joRTD","tlshash":"33a451344643b398838db55f95311e89ca91ce2a43cc983ef43de58eb1a09176bfbe51","size":475505,"data":"","first_seen":"2025-12-16T15:14:23.458548Z","last_seen":"2025-12-16T15:14:23.458548Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"racer-airdrop.info/","fqdn":"racer-airdrop.info","domain":"racer-airdrop.info","tld":"info"},"ip":{"addr":"172.67.128.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"49d6323bd24515eabcefa9cc9079466f","sha1":"9f60a52242a8a004bf5315efb8c03f111383106d","sha256":"e4304852096d2ff5491639df435812a1baab4e34214d08e7115b4c6cd1c639ff","sha512":"40c29da50b631295efb3c62809f201b8e3629152f52846a870b6a65eb9d40570547788bdb052c344887757a3ad087e8ebd81000a76c5ebc78a1f47e0a936010c","ssdeep":"","tlshash":"add0c95824b159a2009b783d498f084aba26a417b10c9ec5bddc96546fa2e7c44e0a48","size":253,"data":"","first_seen":"2024-09-19T22:32:07.349591Z","last_seen":"2026-03-26T00:42:49.84958Z","times_seen":139,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"racer-airdrop.info/","fqdn":"racer-airdrop.info","domain":"racer-airdrop.info","tld":"info"},"ip":{"addr":"172.67.128.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"254ec6f0c4d187a068ab2537652ea564","sha1":"1ae3948ba0632c6bae0905a636b6ad56a8283643","sha256":"34685c8c7a37551619c00e8faf75e9ddfb2a003162270c5f78755390f46c6c17","sha512":"c7a9a3132d43786621023e639ed62e349f6aa6fcdc32df6f36847f44d01ad8a93b87116968f64477d61d36dd473c1ce45f960db38cf90279e4ad61a9d2617719","ssdeep":"192:+tkdES6CIf83e2SXC8uWS6Ct2bjroSI3brZUqKfzymDHvCH:+ff83qP3rwB","tlshash":"61d17d7e9ed20637586bf5bd8f9b7080292284275908ed203d4ce1029f8cd3597f6f94","size":6547,"data":"","first_seen":"2025-09-11T12:55:21.590438Z","last_seen":"2026-04-09T02:30:55.24237Z","times_seen":43,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"racer-airdrop.info/3-black.png","fqdn":"racer-airdrop.info","domain":"racer-airdrop.info","tld":"info"},"ip":{"addr":"172.67.128.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://racer-airdrop.info/","date":"2025-12-16T15:13:52.338Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"racer-airdrop.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 06 Dec 2025 21:12:17 GMT","end":"Fri, 06 Mar 2026 22:11:07 GMT"},"fingerprint":{"sha1":"BE:B8:FC:C8:8D:B2:16:B1:38:5C:04:41:D6:E9:BE:D9:68:55:C9:0A","sha256":"ED:21:DA:6C:10:37:AA:5E:E0:1F:B6:C8:B9:B3:B7:D6:71:81:96:98:BB:A1:B7:35:B9:F3:7F:68:8E:58:60:81"}}},"request":{"raw":"GET /3-black.png HTTP/1.1\r\nHost: racer-airdrop.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://racer-airdrop.info/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 16 Dec 2025 15:13:52 GMT\r\ncontent-type: image/png\r\ncontent-length: 2504306\r\ncast-mode: default\r\nlast-modified: Sat, 06 Dec 2025 21:58:02 GMT\r\netag: \"6934a6ea-263672\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HNkJtD9Jaqmakle%2BVXr9NoZ2jZZNRYRyfZxSnrMXXO%2BdFOidQ8Iu21Q1H1OAWRC9YRu1SZFzlfQM5NAjzLR9%2BGbt7XwFkazm2qLjxoS7P3M%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9aef208e0ff956a4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2504306,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1042 x 600, 8-bit/color RGBA, non-interlaced","md5":"9edf71e0c2b0f4b8f1a0aa054127fa71","sha1":"a61b17bf365290a8aafaaed28f53ec6109b90f37","sha256":"d4c8f13953b4e76405bb4a911f0b23b519a47fe607145dbebf064478b5f81090","sha512":"551deab3b1b9c4ac84bfcf8163c0b9f6c524584e3f4d42debb117afd50ecf481f80acdac892ed1107a013a3e78921962c482e08b489d143da5830c670fe718aa","ssdeep":"1536:XBQKxwlButcDMsKgZnl8DCBKBlJ+6L0jwqgAEBMZw5rhDsly6FQmY6BEGlqfUqc7:RALl2ccBAACQxDQqKJpC/JG5","tlshash":"6325cc137f45e953d5c92e798d60c3e52320bc59ee25838b34d6af2fadae1c3ad41290","first_seen":"2025-12-16T15:14:23.429942Z","last_seen":"2025-12-16T15:14:23.429942Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1190,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":304,"receive":886,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-16","alert":"Sinkholed","trigger":"racer-airdrop.info","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-16","alert":"Sinkholed","trigger":"racer-airdrop.info","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"racer-airdrop.info/track-bottom3.png","fqdn":"racer-airdrop.info","domain":"racer-airdrop.info","tld":"info"},"ip":{"addr":"172.67.128.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://racer-airdrop.info/","date":"2025-12-16T15:13:52.344Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"racer-airdrop.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 06 Dec 2025 21:12:17 GMT","end":"Fri, 06 Mar 2026 22:11:07 GMT"},"fingerprint":{"sha1":"BE:B8:FC:C8:8D:B2:16:B1:38:5C:04:41:D6:E9:BE:D9:68:55:C9:0A","sha256":"ED:21:DA:6C:10:37:AA:5E:E0:1F:B6:C8:B9:B3:B7:D6:71:81:96:98:BB:A1:B7:35:B9:F3:7F:68:8E:58:60:81"}}},"request":{"raw":"GET /track-bottom3.png HTTP/1.1\r\nHost: racer-airdrop.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://racer-airdrop.info/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 16 Dec 2025 15:13:52 GMT\r\ncontent-type: image/png\r\ncontent-length: 489953\r\ncast-mode: default\r\nlast-modified: Sat, 06 Dec 2025 21:58:02 GMT\r\netag: \"6934a6ea-779e1\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PdYNGhk997eQS1gmPeS2km00IpJuSJPvcJbel0F6hccIFwUGzgN4PXVumPowmkj4xL3gNpdYbzMUSKsU9ac4XMEDAHZbRi9DD9AoaGi%2BCyY%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9aef208e1ffb56a4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":489953,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1536 x 172, 8-bit/color RGB, non-interlaced","md5":"88c01b7e1c4eb3ae13a37267bc36ff4e","sha1":"619df543a2d454f78bf939fc78edd6995727db82","sha256":"29503e4aba44d9138678df2ae0206f5248e683c271f3e2e25bf04f9fa62789f6","sha512":"469e27d5ad9e814f85d8f7aa9458a87f2bbdac39c5b22635335c44373dfa7541cc382c1bd98cffb8fe645ae5eba3541138920bd5396591f8ca433274c238cb68","ssdeep":"12288:ased1JsLM+ZqTZ5rf+25Fk8JM5AJO+EDrgNlOMq3QG3qf+FO4s:asQGYNhW8k88SGH4OnQG3qGu","tlshash":"efa42303bdca755076795599bc2637f8fe6834cdba2d18ae01590778328128e35ff32a","first_seen":"2025-12-16T15:14:23.430959Z","last_seen":"2025-12-16T15:14:23.430959Z","times_seen":1,"resource_available":false,"data":null}},"time_used":591,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":300,"receive":291,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-16","alert":"Sinkholed","trigger":"racer-airdrop.info","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-16","alert":"Sinkholed","trigger":"racer-airdrop.info","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"racer-airdrop.info/4b27501752099b57.css","fqdn":"racer-airdrop.info","domain":"racer-airdrop.info","tld":"info"},"ip":{"addr":"172.67.128.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://racer-airdrop.info/index_4.html","date":"2025-12-16T15:13:52.547Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"racer-airdrop.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 06 Dec 2025 21:12:17 GMT","end":"Fri, 06 Mar 2026 22:11:07 GMT"},"fingerprint":{"sha1":"BE:B8:FC:C8:8D:B2:16:B1:38:5C:04:41:D6:E9:BE:D9:68:55:C9:0A","sha256":"ED:21:DA:6C:10:37:AA:5E:E0:1F:B6:C8:B9:B3:B7:D6:71:81:96:98:BB:A1:B7:35:B9:F3:7F:68:8E:58:60:81"}}},"request":{"raw":"GET /4b27501752099b57.css HTTP/1.1\r\nHost: racer-airdrop.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://racer-airdrop.info/index_4.html\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 16 Dec 2025 15:13:52 GMT\r\ncontent-type: text/css\r\ncast-mode: default\r\nlast-modified: Sat, 06 Dec 2025 21:58:02 GMT\r\netag: W/\"6934a6ea-18797\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\npriority: u=2,i=?0\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EtQJjgiU%2FaT2Y7wnfyeNkuxtM32Yn2LOErdQVF%2BI%2BkpyQdSmgCNYPlmxVWV%2F%2B3SNRtsCAoMyaJIPM5854pS7xGN8CYEDEYfMfSir%2BFsJt7I%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9aef208f680656a4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":100247,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65472)","md5":"18ccc0e9cec790eb85d0336e2aa56dea","sha1":"b98cee653fced49112dd050bd166a9c6e0e03f48","sha256":"a128bda917ef0e53cb66511132a879634037ee530f27e68e34b849df424b8627","sha512":"bfc4beb53b4ad47b9f7f73ecbe5323dc97c189c813f19b9b7fbf44480b0e243d7f61789cae26826c1b70cd6f8b123f1895d6ef8b1662d06c6d67dc5572f57c1e","ssdeep":"3072:MGhhfVNmBCmne9GVTQwytybjrSWxDhbsFZ:MGhhfVNmEme9tybjrSWxDhbsFZ","tlshash":"dca3711df612113f3c2780f9d25cedada116b1c0ee3a6be6be4221118ac67e35de7254","first_seen":"2025-12-16T15:14:23.431908Z","last_seen":"2025-12-16T15:14:23.431908Z","times_seen":1,"resource_available":false,"data":null}},"time_used":381,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":326,"receive":55,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-16","alert":"Sinkholed","trigger":"racer-airdrop.info","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-16","alert":"Sinkholed","trigger":"racer-airdrop.info","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"racer-airdrop.info/da53325d50895429285f938389f1bdadc214fbea.png","fqdn":"racer-airdrop.info","domain":"racer-airdrop.info","tld":"info"},"ip":{"addr":"172.67.128.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://racer-airdrop.info/index_3.html","date":"2025-12-16T15:13:52.862Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"racer-airdrop.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 06 Dec 2025 21:12:17 GMT","end":"Fri, 06 Mar 2026 22:11:07 GMT"},"fingerprint":{"sha1":"BE:B8:FC:C8:8D:B2:16:B1:38:5C:04:41:D6:E9:BE:D9:68:55:C9:0A","sha256":"ED:21:DA:6C:10:37:AA:5E:E0:1F:B6:C8:B9:B3:B7:D6:71:81:96:98:BB:A1:B7:35:B9:F3:7F:68:8E:58:60:81"}}},"request":{"raw":"GET /da53325d50895429285f938389f1bdadc214fbea.png HTTP/1.1\r\nHost: racer-airdrop.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://racer-airdrop.info/styles__ltr.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 16 Dec 2025 15:13:53 GMT\r\ncontent-type: image/png\r\ncontent-length: 683\r\ncast-mode: default\r\nlast-modified: Sat, 06 Dec 2025 21:58:02 GMT\r\netag: \"6934a6ea-2ab\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vZbe9k3scczBV4BBxXKBDk73oCd2fl6hiGBRy8Xr9omb9360yiPQTjPNeohLj1tu7i90J2w0MNiwFdUM2NvQ6LhrR4ncdfe5Gthuwu0ajmU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9aef2091580f56a4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":683,"size_decoded":0,"mime_type":"image/png","magic":"data","md5":"efb32ceda324e1612abe80b50aba63a3","sha1":"da53325d50895429285f938389f1bdadc214fbea","sha256":"f85b1a6a1cd2123c5064ad974f5d42a28ee55c6a2dcd4318a661c0a8958bf525","sha512":"57dc56c4f03d751825761c30ab51c0699da3c899f48dd8f74095c7ca6945f1b459ef202606de2cb20eca22336b7e8b054f3aa58447e3bc0bd64049b5b6807a17","ssdeep":"","tlshash":"0e0144181aaa1e6a5460b81bac61d81af566f0a408d003514a9855f15a23cba9406cba","first_seen":"2025-04-29T17:20:25.822726Z","last_seen":"2026-08-11T10:04:54.705926Z","times_seen":144,"resource_available":false,"data":null}},"time_used":245,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":244,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-16","alert":"Sinkholed","trigger":"racer-airdrop.info","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-16","alert":"Sinkholed","trigger":"racer-airdrop.info","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"racer-airdrop.info/KFOmCnqEu92Fr1Mu4mxKKTU1Kg.woff2","fqdn":"racer-airdrop.info","domain":"racer-airdrop.info","tld":"info"},"ip":{"addr":"172.67.128.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://racer-airdrop.info/index_3.html","date":"2025-12-16T15:13:52.896Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"racer-airdrop.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 06 Dec 2025 21:12:17 GMT","end":"Fri, 06 Mar 2026 22:11:07 GMT"},"fingerprint":{"sha1":"BE:B8:FC:C8:8D:B2:16:B1:38:5C:04:41:D6:E9:BE:D9:68:55:C9:0A","sha256":"ED:21:DA:6C:10:37:AA:5E:E0:1F:B6:C8:B9:B3:B7:D6:71:81:96:98:BB:A1:B7:35:B9:F3:7F:68:8E:58:60:81"}}},"request":{"raw":"GET /KFOmCnqEu92Fr1Mu4mxKKTU1Kg.woff2 HTTP/1.1\r\nHost: racer-airdrop.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://racer-airdrop.info/index_3.html\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 16 Dec 2025 15:13:53 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 10748\r\ncast-mode: default\r\nlast-modified: Sat, 06 Dec 2025 21:58:02 GMT\r\netag: \"6934a6ea-29fc\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AFMAgOZpwqRrBDVK509ABR8VWRkXHsISzQYU1YS5FE1nmFvB%2BGFeQg1TeLpcgHhc%2BhGQivtI%2BZz%2BCBOMpAkqZSaj4Q1CbBQSbzaIHDbSha4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9aef2091981256a4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10748,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 10748, version 1.0","md5":"ece6673e477b4d7aca12f04dace5ed60","sha1":"f8ff7fbe231448a58d3989d84803dd66851b9988","sha256":"4352380f92ce7f9a4a4a23306b992bed10055dbfffe90987cc72083e583fc280","sha512":"ed231b71207e839a9198da5225572e31012ab2df344b27167d1f63559d9a2b5a764dd9b98bd1e9575fb82f2f5dbaedaa5a29d4b7c33ff7e284d33b2018809912","ssdeep":"192:FpOviNVAWDDak7ID391Z6eGEik8m/8CuiYA3TvrOMl9RI7YLg:DOgfDDd7IR1Z6RUx0zi3TvrOMlLI0Lg","tlshash":"9622bfcdf01ad267d585bf349c164b4ad3a79733a1a816af8075e0549fc0ab020935ec","first_seen":"2023-04-06T18:54:24Z","last_seen":"2026-08-17T08:19:04.707688Z","times_seen":81967,"resource_available":false,"data":null}},"time_used":283,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":281,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-16","alert":"Sinkholed","trigger":"racer-airdrop.info","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-16","alert":"Sinkholed","trigger":"racer-airdrop.info","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"racer-airdrop.info/11d61ca1889d2cb76277df2143ebb9ace950b500.png","fqdn":"racer-airdrop.info","domain":"racer-airdrop.info","tld":"info"},"ip":{"addr":"172.67.128.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://racer-airdrop.info/","date":"2025-12-16T15:13:53.583Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"racer-airdrop.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 06 Dec 2025 21:12:17 GMT","end":"Fri, 06 Mar 2026 22:11:07 GMT"},"fingerprint":{"sha1":"BE:B8:FC:C8:8D:B2:16:B1:38:5C:04:41:D6:E9:BE:D9:68:55:C9:0A","sha256":"ED:21:DA:6C:10:37:AA:5E:E0:1F:B6:C8:B9:B3:B7:D6:71:81:96:98:BB:A1:B7:35:B9:F3:7F:68:8E:58:60:81"}}},"request":{"raw":"GET /11d61ca1889d2cb76277df2143ebb9ace950b500.png HTTP/1.1\r\nHost: racer-airdrop.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://racer-airdrop.info/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 16 Dec 2025 15:13:53 GMT\r\ncontent-type: image/png\r\ncontent-length: 547\r\ncast-mode: default\r\nlast-modified: Sat, 06 Dec 2025 21:58:02 GMT\r\netag: \"6934a6ea-223\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VahYVKejTsvDiZ7FyKgoUW6b8MohLqnY2TbXy5lp1T9S27BrtJcRdJTil%2BNGUzIDKBOrbuMhCbBj82y6IGeOT2rppDocezcySPFt%2FUu5fzo%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9aef2095d82c56a4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":547,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced","md5":"36393adfb6fec13f524391a8df027144","sha1":"11d61ca1889d2cb76277df2143ebb9ace950b500","sha256":"16d01f408522d497ab83f1181e2d40f9866157ae7774427d76a9277715522ba0","sha512":"4de7c43f1f5de5dbfee3976bfd1d482101806899f251176f4c5ddadaae00be11e8473a7aaa012b6fee11ff63c1b643c93a51a0fa8bb012b3af1d01cd83e2511a","ssdeep":"","tlshash":"0af090c9e38d0260b3190337a2c7022c9da3c83c902120a4020c436e23bbe20cccbaa6","first_seen":"2025-12-16T15:14:23.433891Z","last_seen":"2025-12-16T15:14:23.433891Z","times_seen":1,"resource_available":false,"data":null}},"time_used":108,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":108,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-16","alert":"Sinkholed","trigger":"racer-airdrop.info","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-16","alert":"Sinkholed","trigger":"racer-airdrop.info","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"racer-airdrop.info/racer-logo4.png","fqdn":"racer-airdrop.info","domain":"racer-airdrop.info","tld":"info"},"ip":{"addr":"172.67.128.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://racer-airdrop.info/","date":"2025-12-16T15:13:51.675Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"racer-airdrop.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 06 Dec 2025 21:12:17 GMT","end":"Fri, 06 Mar 2026 22:11:07 GMT"},"fingerprint":{"sha1":"BE:B8:FC:C8:8D:B2:16:B1:38:5C:04:41:D6:E9:BE:D9:68:55:C9:0A","sha256":"ED:21:DA:6C:10:37:AA:5E:E0:1F:B6:C8:B9:B3:B7:D6:71:81:96:98:BB:A1:B7:35:B9:F3:7F:68:8E:58:60:81"}}},"request":{"raw":"GET /racer-logo4.png HTTP/1.1\r\nHost: racer-airdrop.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://racer-airdrop.info/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 16 Dec 2025 15:13:51 GMT\r\ncontent-type: image/png\r\ncontent-length: 37013\r\ncast-mode: default\r\nlast-modified: Sat, 06 Dec 2025 21:58:02 GMT\r\netag: \"6934a6ea-9095\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0yP%2B2i8VR3XLzsgHCJvQqH7qYJJxS7HLpJWHn5jELb%2FrRM6egf4AkPp0%2FYlFnjY%2Bvmuth9pYV5U0QDBYm5fyDTsKxsjP7d74CdVVk3PPHzw%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9aef2089efc856a4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":37013,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1444 x 277, 8-bit/color RGBA, interlaced","md5":"fc178c0fdceb11ebeac41fff7e028b3b","sha1":"f0fc0ad5ec45f9e0c684d0fa4d540791029b413c","sha256":"fd23471105599bda01800de4c35172cb96ef66a30a8f87fbc104019c184ae8ca","sha512":"beec2508dfb828e2a860aed9068c3a869b8b63296dfb0bf238a16171c6e85ae375ccf03ad52944f60ccfce738b12a0978706de15f3fd3881a7b57ba345ab1b00","ssdeep":"768:N35BU5yPz+Sx5dpCYT7DM6w4qWeWs4E4wrbaZSjHixRxXJlowE8S:m5yPz+CzpLT3RDVew3AHiO8S","tlshash":"adf2f13e3ab4f205e9d4b46e3dd2512697f9b4bda03436cc4510d9788df9d022ba49e4","first_seen":"2025-12-16T15:14:23.434822Z","last_seen":"2025-12-16T15:14:23.434822Z","times_seen":1,"resource_available":false,"data":null}},"time_used":293,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":247,"receive":46,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-16","alert":"Sinkholed","trigger":"racer-airdrop.info","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-16","alert":"Sinkholed","trigger":"racer-airdrop.info","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"racer-airdrop.info/coin1.gif","fqdn":"racer-airdrop.info","domain":"racer-airdrop.info","tld":"info"},"ip":{"addr":"172.67.128.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://racer-airdrop.info/","date":"2025-12-16T15:13:51.677Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"racer-airdrop.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 06 Dec 2025 21:12:17 GMT","end":"Fri, 06 Mar 2026 22:11:07 GMT"},"fingerprint":{"sha1":"BE:B8:FC:C8:8D:B2:16:B1:38:5C:04:41:D6:E9:BE:D9:68:55:C9:0A","sha256":"ED:21:DA:6C:10:37:AA:5E:E0:1F:B6:C8:B9:B3:B7:D6:71:81:96:98:BB:A1:B7:35:B9:F3:7F:68:8E:58:60:81"}}},"request":{"raw":"GET /coin1.gif HTTP/1.1\r\nHost: racer-airdrop.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://racer-airdrop.info/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 16 Dec 2025 15:13:51 GMT\r\ncontent-type: image/gif\r\ncontent-length: 32464\r\ncast-mode: default\r\nlast-modified: Sat, 06 Dec 2025 21:58:02 GMT\r\netag: \"6934a6ea-7ed0\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Ltwm%2FPHbMzL58LMjWVwL%2FIB9G3tOzv6eAHWevjHenCEdKqaD2s8vPmOcK%2FBOYia48f%2BVfq7e%2FCr13Glz48tvVXp8j3anhr0YQZQ3id3AHOg%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9aef2089efca56a4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":32464,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 512 x 512","md5":"24b1a76ee47001e974854571c78fb483","sha1":"ad61a68416a94f811dd7c285a5fa492f9e9ab367","sha256":"3bdfab91df387fd04ece09c8403e3a8d01f431f9f85817f75bf1126483e8f78b","sha512":"79bc0dc0f7a1b37d45163d05b6ed1a8d1d8c8640f8cd9ba0a343b17f9f64f37f3cb645196929f9c8a50bd36fa3fcd515318965794fcddb6e7ad59f70d2ea5e61","ssdeep":"768:/GILX76dQgyY/HEnbE4L+Xp6KraKsxEmgJ4XyLTvyYvksP2:rLr6dQgy4H2aXAKrJkEfJQyHyY7P2","tlshash":"72e2e02b5bfb842fcf58d6f559494872b622533d896272864e0363c22ee36dd09906cb","first_seen":"2025-12-16T15:14:23.435563Z","last_seen":"2025-12-16T15:14:23.435563Z","times_seen":1,"resource_available":false,"data":null}},"time_used":302,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":258,"receive":44,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-16","alert":"Sinkholed","trigger":"racer-airdrop.info","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-16","alert":"Sinkholed","trigger":"racer-airdrop.info","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"racer-airdrop.info/coin2.gif","fqdn":"racer-airdrop.info","domain":"racer-airdrop.info","tld":"info"},"ip":{"addr":"172.67.128.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://racer-airdrop.info/","date":"2025-12-16T15:13:51.678Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"racer-airdrop.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 06 Dec 2025 21:12:17 GMT","end":"Fri, 06 Mar 2026 22:11:07 GMT"},"fingerprint":{"sha1":"BE:B8:FC:C8:8D:B2:16:B1:38:5C:04:41:D6:E9:BE:D9:68:55:C9:0A","sha256":"ED:21:DA:6C:10:37:AA:5E:E0:1F:B6:C8:B9:B3:B7:D6:71:81:96:98:BB:A1:B7:35:B9:F3:7F:68:8E:58:60:81"}}},"request":{"raw":"GET /coin2.gif HTTP/1.1\r\nHost: racer-airdrop.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://racer-airdrop.info/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 16 Dec 2025 15:13:51 GMT\r\ncontent-type: image/gif\r\ncontent-length: 31489\r\ncast-mode: default\r\nlast-modified: Sat, 06 Dec 2025 21:58:02 GMT\r\netag: \"6934a6ea-7b01\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=klrBQQRb6K3pGPPW7pCf54lifPUE6Ie4EMDKxckgWSa6B8zHaEEDN3BLI3OScNqWkmZtiv2axQIcQV6Y%2BKuDog%2Fxid%2F8H3W7p1r6Q23AYn4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9aef2089efcb56a4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":31489,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 512 x 512","md5":"cae018e121a98555869064cd325faa5d","sha1":"c45821d8d97e0369f52665e7d906ae502f77da76","sha256":"275f7a6a19c7e5573b861a445f5684e12f368acc16ecfe94bd7a0b0bb5941778","sha512":"bb44a0a8a4e462532138a77af830aa44f1672de38ec5d8fae202e65c95e5068eda276a107263a913fbb37c3ef4971cd904be96745763e1f0155af03c1fe9e499","ssdeep":"768:3+Xp6KraKsxEmgJ4XyLTvyYvksPx3HAFITtZ/HEnbE4D:uXAKrJkEfJQyHyY7Px7TrH2D","tlshash":"14e2e02b57eb942fce44d3f9960a094af531773cda2212cb090633d51ad26ed0d907eb","first_seen":"2025-12-16T15:14:23.436395Z","last_seen":"2025-12-16T15:14:23.436395Z","times_seen":1,"resource_available":false,"data":null}},"time_used":355,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":301,"receive":54,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-16","alert":"Sinkholed","trigger":"racer-airdrop.info","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-16","alert":"Sinkholed","trigger":"racer-airdrop.info","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"racer-airdrop.info/coin3.gif","fqdn":"racer-airdrop.info","domain":"racer-airdrop.info","tld":"info"},"ip":{"addr":"172.67.128.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://racer-airdrop.info/","date":"2025-12-16T15:13:51.681Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"racer-airdrop.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 06 Dec 2025 21:12:17 GMT","end":"Fri, 06 Mar 2026 22:11:07 GMT"},"fingerprint":{"sha1":"BE:B8:FC:C8:8D:B2:16:B1:38:5C:04:41:D6:E9:BE:D9:68:55:C9:0A","sha256":"ED:21:DA:6C:10:37:AA:5E:E0:1F:B6:C8:B9:B3:B7:D6:71:81:96:98:BB:A1:B7:35:B9:F3:7F:68:8E:58:60:81"}}},"request":{"raw":"GET /coin3.gif HTTP/1.1\r\nHost: racer-airdrop.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://racer-airdrop.info/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 16 Dec 2025 15:13:51 GMT\r\ncontent-type: image/gif\r\ncontent-length: 31489\r\ncast-mode: default\r\nlast-modified: Sat, 06 Dec 2025 21:58:02 GMT\r\netag: \"6934a6ea-7b01\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jjYLHHDy9g4xhuD5h7sqk%2BKmIY2TbijDWZPlzQ%2Fk6D1jL8h6kvm9I4pzZPwTs33d9VjnWscn6D%2FoUwc%2FL89hqRmEmqOji20ps8DCST5yHsQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9aef2089efcc56a4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":31489,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 512 x 512","md5":"858f7651f9e23e266f0c0d0951f7b7ab","sha1":"a9a15b12282b586c1c6f1111787af7160ef37f7b","sha256":"087c75a8d017eba5269360586a45966b8402c73a1fb067b9499d32edab4c4e70","sha512":"ca1b4647cd1df46b424d78fcac9b3f9615c1adcf068d666630aea1d088b737893570aafd602d0bc354aa4a194ed5e6c16149c098a0fbe2a911eb97bcd5e5b7a4","ssdeep":"768:VJ4XyLTvyYvksPx3HAFITtZ/HEnbE4L+Xp6KraKsxEmY:VJQyHyY7Px7TrH2aXAKrJkEd","tlshash":"72e2e02b57eb942fce44d3f9960a094af531773cda2212cb090633d51ad26ed0d907eb","first_seen":"2025-12-16T15:14:23.437376Z","last_seen":"2025-12-16T15:14:23.437376Z","times_seen":1,"resource_available":false,"data":null}},"time_used":357,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":303,"receive":54,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-16","alert":"Sinkholed","trigger":"racer-airdrop.info","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-16","alert":"Sinkholed","trigger":"racer-airdrop.info","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"racer-airdrop.info/index_1.html","fqdn":"racer-airdrop.info","domain":"racer-airdrop.info","tld":"info"},"ip":{"addr":"172.67.128.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://racer-airdrop.info/","date":"2025-12-16T15:13:52.291Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"racer-airdrop.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 06 Dec 2025 21:12:17 GMT","end":"Fri, 06 Mar 2026 22:11:07 GMT"},"fingerprint":{"sha1":"BE:B8:FC:C8:8D:B2:16:B1:38:5C:04:41:D6:E9:BE:D9:68:55:C9:0A","sha256":"ED:21:DA:6C:10:37:AA:5E:E0:1F:B6:C8:B9:B3:B7:D6:71:81:96:98:BB:A1:B7:35:B9:F3:7F:68:8E:58:60:81"}}},"request":{"raw":"GET /index_1.html HTTP/1.1\r\nHost: racer-airdrop.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://racer-airdrop.info/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 16 Dec 2025 15:13:52 GMT\r\ncontent-type: text/html\r\ncast-mode: default\r\nlast-modified: Sat, 06 Dec 2025 21:58:02 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VDuldSgRXiyoxCENLrqwWQ%2FnGfQ9FdzAPpX217E4s0KLHN0IO8ZUJUVNC%2F9pNPd2iNmuA0D8ssQV3TkUdf0tMLSoI5c9VDJkMVuB6HYUPz8%3D\"}]}\r\npriority: u=4,i=?0\r\ncf-ray: 9aef208dcff156a4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":144,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with no line terminators","md5":"c0043baabdf16fca37148f72e8555ae9","sha1":"2ef15aa1adc09bde0d07b36592914e0db26fc7d8","sha256":"fb6571d56760d1c18a9634d89797d272311844e5b92b7fc71c6f8da6743bd392","sha512":"99d092b1f8481246875dfc2c2114e4b437e491f63812b438ee7fbf02a24223fe27223351c2fe05afbdfa95cd4579dfd98e5efb7eb946d08a15250affc52b23cf","ssdeep":"","tlshash":"bfc08c229800480e29009e91cb8ae1c4c402dc2ce8215c00b862a144a9a8121c012548","first_seen":"2024-07-19T02:09:55Z","last_seen":"2026-08-06T23:22:21.671319Z","times_seen":245,"resource_available":true,"data":null}},"time_used":227,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":227,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-16","alert":"Sinkholed","trigger":"racer-airdrop.info","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-16","alert":"Sinkholed","trigger":"racer-airdrop.info","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"racer-airdrop.info/index_2.html","fqdn":"racer-airdrop.info","domain":"racer-airdrop.info","tld":"info"},"ip":{"addr":"172.67.128.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://racer-airdrop.info/","date":"2025-12-16T15:13:52.295Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"racer-airdrop.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 06 Dec 2025 21:12:17 GMT","end":"Fri, 06 Mar 2026 22:11:07 GMT"},"fingerprint":{"sha1":"BE:B8:FC:C8:8D:B2:16:B1:38:5C:04:41:D6:E9:BE:D9:68:55:C9:0A","sha256":"ED:21:DA:6C:10:37:AA:5E:E0:1F:B6:C8:B9:B3:B7:D6:71:81:96:98:BB:A1:B7:35:B9:F3:7F:68:8E:58:60:81"}}},"request":{"raw":"GET /index_2.html HTTP/1.1\r\nHost: racer-airdrop.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://racer-airdrop.info/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 16 Dec 2025 15:13:52 GMT\r\ncontent-type: text/html\r\ncast-mode: default\r\nlast-modified: Sat, 06 Dec 2025 21:58:02 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BeYE5bLd5Q3I2cBd9%2BIb%2BgRgpUM0l1TM1qde2zihADoc%2B%2Be6OFXsed4LgQ49YCz01z35AAQyECRCGeb1%2FM8U8WQUlzWvGYSgKOEJixWKUCE%3D\"}]}\r\npriority: u=4,i=?0\r\ncf-ray: 9aef208ddff256a4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":63479,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (63473), with no line terminators","md5":"0564d6df0f6536efd58b1fbfa37cd738","sha1":"b30d8fb2c9e80fa18798a8f3fb35e0d21852daf5","sha256":"16f280b2ce8faade979660292d27bb315a6e43633b73632f4a172b2232025dcf","sha512":"14439af1856508931fefe314aaba6f2b9f75a50a6be4ccf48cd89e1e008dfd46655131286d1e1e3ce5ccfc775a8bb71da1bcead02cbe4ec48e0ee01d08ad540d","ssdeep":"768:8dGrkHzlJUdLV9da3m8JLGrYFJUdN9da3md0MD82WORpmalZuWv9vzoCx:Hrdba3mPrlba3mmcnuWFvzoCx","tlshash":"8053a60346611bfe7417ab2ca3a0b7c4b336ab025f55b3f7e15852918f4d6ae2b43706","first_seen":"2025-12-16T15:14:23.438623Z","last_seen":"2025-12-16T15:14:23.438623Z","times_seen":1,"resource_available":false,"data":null}},"time_used":307,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":291,"receive":16,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-16","alert":"Sinkholed","trigger":"racer-airdrop.info","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-16","alert":"Sinkholed","trigger":"racer-airdrop.info","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"racer-airdrop.info/1-blue.png","fqdn":"racer-airdrop.info","domain":"racer-airdrop.info","tld":"info"},"ip":{"addr":"172.67.128.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://racer-airdrop.info/","date":"2025-12-16T15:13:52.336Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"racer-airdrop.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 06 Dec 2025 21:12:17 GMT","end":"Fri, 06 Mar 2026 22:11:07 GMT"},"fingerprint":{"sha1":"BE:B8:FC:C8:8D:B2:16:B1:38:5C:04:41:D6:E9:BE:D9:68:55:C9:0A","sha256":"ED:21:DA:6C:10:37:AA:5E:E0:1F:B6:C8:B9:B3:B7:D6:71:81:96:98:BB:A1:B7:35:B9:F3:7F:68:8E:58:60:81"}}},"request":{"raw":"GET /1-blue.png HTTP/1.1\r\nHost: racer-airdrop.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://racer-airdrop.info/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 16 Dec 2025 15:13:52 GMT\r\ncontent-type: image/png\r\ncontent-length: 2504306\r\ncast-mode: default\r\nlast-modified: Sat, 06 Dec 2025 21:58:02 GMT\r\netag: \"6934a6ea-263672\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hN2KIEXb8sD7Y8HTokW9Rw%2FRi6XQ%2BgzqgHT%2FpFwIOMFCVpPwAUwFMyXNTpBePO5Hm4Ee%2FL2s6fM6BARfppaGDm4jrU%2BK3mVfy6VH5Fe8gJ4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9aef208e0ff856a4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2504306,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1042 x 600, 8-bit/color RGBA, non-interlaced","md5":"d28aa2bfc35e7ead9ccb1468633b91aa","sha1":"1aa9cfb3ab8f53001750c49a007ca9090248c287","sha256":"cf2561d56ae715f2f74648b2866fb94c76e53611d45136fed167ca8a605a654b","sha512":"e81ca6cd3c18672fa90692b319a21c229664af73685e45b7b62979a466fc4464d0bcfcc79a326b9161b7b32f8d653c724a1da22f6419f68f0fcc219f18c266a2","ssdeep":"6144:kxdBw9QmjOUxTWBLAWfey3o0bBT4o8BJn0:Cjp5UxTW1rWy3o0Z4D70","tlshash":"2925a1127f05e903e5592e7a8964c7e5a331fc8cab66d38734d27e6bbc9d6c35e00284","first_seen":"2025-12-16T15:14:23.439448Z","last_seen":"2025-12-16T15:14:23.439448Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1069,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":213,"receive":856,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-16","alert":"Sinkholed","trigger":"racer-airdrop.info","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-16","alert":"Sinkholed","trigger":"racer-airdrop.info","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"racer-airdrop.info/4-pink.png","fqdn":"racer-airdrop.info","domain":"racer-airdrop.info","tld":"info"},"ip":{"addr":"172.67.128.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://racer-airdrop.info/","date":"2025-12-16T15:13:52.343Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"racer-airdrop.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 06 Dec 2025 21:12:17 GMT","end":"Fri, 06 Mar 2026 22:11:07 GMT"},"fingerprint":{"sha1":"BE:B8:FC:C8:8D:B2:16:B1:38:5C:04:41:D6:E9:BE:D9:68:55:C9:0A","sha256":"ED:21:DA:6C:10:37:AA:5E:E0:1F:B6:C8:B9:B3:B7:D6:71:81:96:98:BB:A1:B7:35:B9:F3:7F:68:8E:58:60:81"}}},"request":{"raw":"GET /4-pink.png HTTP/1.1\r\nHost: racer-airdrop.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://racer-airdrop.info/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 16 Dec 2025 15:13:52 GMT\r\ncontent-type: image/png\r\ncontent-length: 2504306\r\ncast-mode: default\r\nlast-modified: Sat, 06 Dec 2025 21:58:02 GMT\r\netag: \"6934a6ea-263672\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6b0NDgukh2CSVv2n1tww72x%2B1VgW79XRlTdvg1W2HfcdQIBI%2BTG%2B6T4iuYyRN477sOw5cS2i%2FE3skUqQqufNT6mor%2BQKXR3XGsM9GMmJxVg%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9aef208e1ffa56a4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2504306,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1042 x 600, 8-bit/color RGBA, non-interlaced","md5":"b1525fd32b6c299e740b807480028a7f","sha1":"5efe45805750087263aeaacbb8e21fb3481f9f4c","sha256":"19bbcda0144b70041357b566f8618eec7e4bdad82605a28280bb91e0ad42c61d","sha512":"0ec4f58308e027d60238cb12cabad35c10f4edb3b77f83a507d6ad1b55cee1e2ad65cfff7ce3d89c25893829de4dca90bb672f51c5d261a3a9066e93164cb3da","ssdeep":"1536:XEYT+nNlEzjiacOxp7GnnBABXD1tfNbCNYnVmEelkgO+Hrohc1R65Kxc1V9XoBeQ:0rnNyf5tm9EuG4+/kQLigtFxqMQL/I4","tlshash":"d32597537f41e902d5962e758ea1c7e56321fc4cde22834734d3af6facae6d29d02284","first_seen":"2025-12-16T15:14:23.440326Z","last_seen":"2025-12-16T15:14:23.440326Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1236,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":303,"receive":933,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-16","alert":"Sinkholed","trigger":"racer-airdrop.info","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-16","alert":"Sinkholed","trigger":"racer-airdrop.info","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"racer-airdrop.info/c4476ce1366464cb.css","fqdn":"racer-airdrop.info","domain":"racer-airdrop.info","tld":"info"},"ip":{"addr":"172.67.128.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://racer-airdrop.info/","date":"2025-12-16T15:13:51.672Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"racer-airdrop.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 06 Dec 2025 21:12:17 GMT","end":"Fri, 06 Mar 2026 22:11:07 GMT"},"fingerprint":{"sha1":"BE:B8:FC:C8:8D:B2:16:B1:38:5C:04:41:D6:E9:BE:D9:68:55:C9:0A","sha256":"ED:21:DA:6C:10:37:AA:5E:E0:1F:B6:C8:B9:B3:B7:D6:71:81:96:98:BB:A1:B7:35:B9:F3:7F:68:8E:58:60:81"}}},"request":{"raw":"GET /c4476ce1366464cb.css HTTP/1.1\r\nHost: racer-airdrop.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://racer-airdrop.info/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 16 Dec 2025 15:13:51 GMT\r\ncontent-type: text/css\r\ncast-mode: default\r\nlast-modified: Sat, 06 Dec 2025 21:58:02 GMT\r\netag: W/\"6934a6ea-31497\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\npriority: u=2,i=?0\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OEFuPBp0%2FHOCCA9lS1uu44AgjA33U4lBBemDNbhYa0qPS0Mwu6P328B0SBh0jZsQ50ZpoGA%2BajHKrUIFcbjPznQ4%2Fw%2BWu27y6HGj9kLF4bs%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9aef2089dfc656a4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":201879,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65517)","md5":"9b9d60d2d2c67b9ea8364dccf4de712f","sha1":"e9ea5db7e92717cda4c7c7ca4c8e97b445aab971","sha256":"7172eea637b00dbedc9c4d8dc4248b6b3892350a70e3d75f341dca14d66f8a53","sha512":"87cd6f24f998ce14c9267d6b1558131261d02578bb439add7206ce0fcf4cce6086f86c2d2194ab91a5f1709146b0be5e0acced1a756c205681c7fcbf48522c03","ssdeep":"6144:G8IRal458PesWpwGWhO1CWpHMU14kb0bWssOj3dNlxsTIbt:UMU14kb0bWsN3d3xr","tlshash":"c51452a88aa5503bbc17b0f5d79cb95de81af2d5ee3f169abd41010463f13f61d8ae00","first_seen":"2025-12-16T15:14:23.441017Z","last_seen":"2025-12-16T15:14:23.441017Z","times_seen":1,"resource_available":false,"data":null}},"time_used":356,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":309,"receive":47,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-16","alert":"Sinkholed","trigger":"racer-airdrop.info","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-16","alert":"Sinkholed","trigger":"racer-airdrop.info","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"racer-airdrop.info/index_6.html","fqdn":"racer-airdrop.info","domain":"racer-airdrop.info","tld":"info"},"ip":{"addr":"172.67.128.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://racer-airdrop.info/index_3.html","date":"2025-12-16T15:13:52.567Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"racer-airdrop.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 06 Dec 2025 21:12:17 GMT","end":"Fri, 06 Mar 2026 22:11:07 GMT"},"fingerprint":{"sha1":"BE:B8:FC:C8:8D:B2:16:B1:38:5C:04:41:D6:E9:BE:D9:68:55:C9:0A","sha256":"ED:21:DA:6C:10:37:AA:5E:E0:1F:B6:C8:B9:B3:B7:D6:71:81:96:98:BB:A1:B7:35:B9:F3:7F:68:8E:58:60:81"}}},"request":{"raw":"GET /index_6.html HTTP/1.1\r\nHost: racer-airdrop.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://racer-airdrop.info/index_3.html\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 16 Dec 2025 15:13:52 GMT\r\ncontent-type: text/html\r\ncast-mode: default\r\nlast-modified: Sat, 06 Dec 2025 21:58:02 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CYOeABVcC%2F%2F5v9oum2ardnlFMaVSGAC26LuC5oDr%2FANsdwtYuGc6cZymFHYBEZFF78BLdlEcGbq9Ss4mxJBQ99PQs%2BdwUQdWiwlbNoj6flE%3D\"}]}\r\npriority: u=4,i=?0\r\ncf-ray: 9aef208f880856a4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":144,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with no line terminators","md5":"3762063e0643915fe267822ed73a3fdc","sha1":"7697ebe1c64f3751a8f9cecddb39e64378f07706","sha256":"1bf1c9d160ef57f69eef1dafb70d2248f30f6766db11e132efee53f789afb4fc","sha512":"e9ae2d73ae71a4c0f343a505cc09ab772c6f8c51cfdd3fada94e4a75a10da84412ff7dac616677ca0348698f1b40e0deef27327e6875ebff4757e24fb3ee9d31","ssdeep":"","tlshash":"06c02b22d8004c0f79509fd1cb8af1c4c043dd3ce8215d10b873b154e9ac131c012548","first_seen":"2024-12-16T05:11:29.836626Z","last_seen":"2026-08-11T10:04:54.733509Z","times_seen":14,"resource_available":false,"data":null}},"time_used":233,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":233,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-16","alert":"Sinkholed","trigger":"racer-airdrop.info","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-16","alert":"Sinkholed","trigger":"racer-airdrop.info","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"racer-airdrop.info/logo_48.png","fqdn":"racer-airdrop.info","domain":"racer-airdrop.info","tld":"info"},"ip":{"addr":"172.67.128.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://racer-airdrop.info/index_3.html","date":"2025-12-16T15:13:52.861Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"racer-airdrop.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 06 Dec 2025 21:12:17 GMT","end":"Fri, 06 Mar 2026 22:11:07 GMT"},"fingerprint":{"sha1":"BE:B8:FC:C8:8D:B2:16:B1:38:5C:04:41:D6:E9:BE:D9:68:55:C9:0A","sha256":"ED:21:DA:6C:10:37:AA:5E:E0:1F:B6:C8:B9:B3:B7:D6:71:81:96:98:BB:A1:B7:35:B9:F3:7F:68:8E:58:60:81"}}},"request":{"raw":"GET /logo_48.png HTTP/1.1\r\nHost: racer-airdrop.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://racer-airdrop.info/styles__ltr.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 16 Dec 2025 15:13:53 GMT\r\ncontent-type: image/png\r\ncontent-length: 2228\r\ncast-mode: default\r\nlast-modified: Sat, 06 Dec 2025 21:58:02 GMT\r\netag: \"6934a6ea-8b4\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=06%2FhwSjC%2FyhHz3iymmrzYpoLs0G4A9mLGhhiDqZnuI1nNOFyoxDoHxMRTDuMu9kCGtkxm4HwfwPDJ%2BRwzcF4ifnwG8JOxOSSpAeRgc1FjXQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9aef2091580e56a4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2228,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced","md5":"ef9941290c50cd3866e2ba6b793f010d","sha1":"4736508c795667dcea21f8d864233031223b7832","sha256":"1b9efb22c938500971aac2b2130a475fa23684dd69e43103894968df83145b8a","sha512":"a0c69c70117c5713caf8b12f3b6e8bbb9cdaf72768e5db9db5831a3c37541b87613c6b020dd2f9b8760064a8c7337f175e7234bfe776eee5e3588dc5662419d9","ssdeep":"","tlshash":"c34149bb68287f1be14b501d319001e4b5bb891327c8f24180bf974e4662eaad10f118","first_seen":"2023-04-05T07:17:57Z","last_seen":"2026-08-17T09:39:38.062121Z","times_seen":710389,"resource_available":false,"data":null}},"time_used":284,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":284,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-16","alert":"Sinkholed","trigger":"racer-airdrop.info","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-16","alert":"Sinkholed","trigger":"racer-airdrop.info","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"racer-airdrop.info/KFOlCnqEu92Fr1MmEU9fBBc4AMP6lQ.woff2","fqdn":"racer-airdrop.info","domain":"racer-airdrop.info","tld":"info"},"ip":{"addr":"172.67.128.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://racer-airdrop.info/index_3.html","date":"2025-12-16T15:13:52.899Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"racer-airdrop.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 06 Dec 2025 21:12:17 GMT","end":"Fri, 06 Mar 2026 22:11:07 GMT"},"fingerprint":{"sha1":"BE:B8:FC:C8:8D:B2:16:B1:38:5C:04:41:D6:E9:BE:D9:68:55:C9:0A","sha256":"ED:21:DA:6C:10:37:AA:5E:E0:1F:B6:C8:B9:B3:B7:D6:71:81:96:98:BB:A1:B7:35:B9:F3:7F:68:8E:58:60:81"}}},"request":{"raw":"GET /KFOlCnqEu92Fr1MmEU9fBBc4AMP6lQ.woff2 HTTP/1.1\r\nHost: racer-airdrop.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://racer-airdrop.info/index_3.html\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 16 Dec 2025 15:13:53 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 10788\r\ncast-mode: default\r\nlast-modified: Sat, 06 Dec 2025 21:58:02 GMT\r\netag: \"6934a6ea-2a24\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fhgsJVRY9Wg%2BpBZbvU2EszgQu%2FrxmL5QNAoJjoLrmtNC3PRhmjfkEJMbhPPitQM7sBcrNtSrZdr9hY%2BipaExcPWUkyqu8zKH5utn0EMrI3w%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9aef2091981356a4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10788,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 10788, version 1.0","md5":"709f6f90c7d493cd16b8cd087df492ab","sha1":"8fb2a4d035a6f1a5290dc14b4cba324d558f1205","sha256":"b79781efede37903be212fcdf63955e41c8649e678b6b83adf824459d240a188","sha512":"c7721f7494d9e174dc762d057899dada797e5ea2cc4d23939893ce4ceb420af4142254b24d70a8a651a5c0775ef6401361062da77cf1858889abbda60146c5e0","ssdeep":"192:8KcsLuE4oixfYkmJIckfJLDjYWQC+E4oa2n+5a2faCX:DJrWZmKckfJLDjB+3oz+82fa6","tlshash":"f622c07f4a46a84ac9326a30ff74834d9abfc6124fde51b0f90850e174c962ef181669","first_seen":"2023-04-06T18:54:24Z","last_seen":"2026-08-17T08:19:04.685969Z","times_seen":79524,"resource_available":false,"data":null}},"time_used":236,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":232,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-16","alert":"Sinkholed","trigger":"racer-airdrop.info","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-16","alert":"Sinkholed","trigger":"racer-airdrop.info","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aodefevrgdkhqltdnwgzbyjoywrlbntbhfwq.com/@v1/cdn/js/socket.io.min.js?t=29431633\u0026u=4e39e19edbcbcc06fe3aec66fa0100008531641f682138e70a2a4adc","fqdn":"aodefevrgdkhqltdnwgzbyjoywrlbntbhfwq.com","domain":"aodefevrgdkhqltdnwgzbyjoywrlbntbhfwq.com","tld":"com"},"ip":{"addr":"195.181.166.158","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://racer-airdrop.info/","date":"2025-12-16T15:13:53.177Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aodefevrgdkhqltdnwgzbyjoywrlbntbhfwq.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 25 Nov 2025 14:12:46 GMT","end":"Mon, 23 Feb 2026 14:12:45 GMT"},"fingerprint":{"sha1":"7F:DA:88:32:AC:B3:5B:E8:31:C9:9D:A9:FF:01:50:71:EE:18:B1:AD","sha256":"F8:A0:3B:46:37:69:86:1F:B4:C9:07:E3:55:B7:F8:87:25:3A:DD:BC:F2:D9:B6:B5:FB:79:A8:79:07:44:6A:75"}}},"request":{"raw":"GET /@v1/cdn/js/socket.io.min.js?t=29431633\u0026u=4e39e19edbcbcc06fe3aec66fa0100008531641f682138e70a2a4adc HTTP/1.1\r\nHost: aodefevrgdkhqltdnwgzbyjoywrlbntbhfwq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://racer-airdrop.info/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 523 No Reason Phrase\r\ndate: Tue, 16 Dec 2025 15:13:53 GMT\r\ncontent-type: text/plain; charset=utf-8\r\ncontent-length: 3\r\nserver: BunnyCDN-SE1-725\r\ncdn-pullzone: 4623665\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, PATCH, OPTIONS\r\ncache-control: no-cache\r\netag: W/\"3-jeI6quxhssuoG9FV6mYyJzfep9g\"\r\ncdn-proxyver: 1.41\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 523\r\ncdn-cachedat: 12/16/2025 15:13:53\r\ncdn-edgestorageid: 725\r\ncdn-requestid: 8af5f833a44eae8f2f7d97e727837d2e\r\ncdn-cache: MISS\r\ncdn-status: 523\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"523","status_text":"No Reason Phrase","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-17T09:43:02.208337Z","times_seen":17933663,"resource_available":true,"data":null}},"time_used":275,"timings":{"blocked":68,"dns":26,"connect":10,"send":0,"wait":154,"receive":0,"ssl":14},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-16","alert":"Sinkholed","trigger":"aodefevrgdkhqltdnwgzbyjoywrlbntbhfwq.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-16","alert":"Sinkholed","trigger":"aodefevrgdkhqltdnwgzbyjoywrlbntbhfwq.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"racer-airdrop.info/secureproxy?e=ping_proxy","fqdn":"racer-airdrop.info","domain":"racer-airdrop.info","tld":"info"},"ip":{"addr":"172.67.128.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://racer-airdrop.info/","date":"2025-12-16T15:13:52.162Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"racer-airdrop.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 06 Dec 2025 21:12:17 GMT","end":"Fri, 06 Mar 2026 22:11:07 GMT"},"fingerprint":{"sha1":"BE:B8:FC:C8:8D:B2:16:B1:38:5C:04:41:D6:E9:BE:D9:68:55:C9:0A","sha256":"ED:21:DA:6C:10:37:AA:5E:E0:1F:B6:C8:B9:B3:B7:D6:71:81:96:98:BB:A1:B7:35:B9:F3:7F:68:8E:58:60:81"}}},"request":{"raw":"GET /secureproxy?e=ping_proxy HTTP/1.1\r\nHost: racer-airdrop.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://racer-airdrop.info/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 16 Dec 2025 15:13:52 GMT\r\ncontent-type: text/html; charset=utf-8\r\nvary: accept-encoding\r\ncast-mode: default\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,PUT,POST,DELETE,PATCH,OPTIONS\r\naccess-control-allow-headers: Content-Type, Authorization, Content-Length, X-Requested-With, Accept, Origin\r\naccess-control-allow-credentials: true\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: br\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nlast-modified: Tue, 16 Dec 2025 15:13:52 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MkQQfPPCwtyEZNRbsFdLI2tN0LFcqZY1TIj16Zqpee55mTaa3Ts556o4cXmkONLqoyv36WHhaCRw8Vm314%2Fz%2FvqkLB%2F1XgPqSKBeOWu0%2Fmo%3D\"}]}\r\npriority: u=4,i=?0\r\ncf-ray: 9aef208d0fe856a4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"6fdb087aa3fbfbcb8287a593a0919e61","sha1":"0e514a0662bcb69dc863953d1ce26e3d40e81a87","sha256":"9795c5ff8937f23526ccb207a5684c1fc94a7854e19c021b39d944e51f5baef2","sha512":"be5457d14c930b51b47ab152850c1ceaafe6ef88c8671b48164abbc83410b0c07a1e178540f6cdeac5f2672cadb1d1cbbb3434b3e39bc2c50c4646a2bae57437","ssdeep":"","tlshash":"fe300000300000000000000c0000000000000000000000000000000000300000000000","first_seen":"2023-04-12T09:14:15Z","last_seen":"2026-08-16T22:01:55.451149Z","times_seen":9044,"resource_available":true,"data":null}},"time_used":231,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":231,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-16","alert":"Sinkholed","trigger":"racer-airdrop.info","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-16","alert":"Sinkholed","trigger":"racer-airdrop.info","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"racer-airdrop.info/index_4.html","fqdn":"racer-airdrop.info","domain":"racer-airdrop.info","tld":"info"},"ip":{"addr":"172.67.128.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://racer-airdrop.info/","date":"2025-12-16T15:13:52.281Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"racer-airdrop.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 06 Dec 2025 21:12:17 GMT","end":"Fri, 06 Mar 2026 22:11:07 GMT"},"fingerprint":{"sha1":"BE:B8:FC:C8:8D:B2:16:B1:38:5C:04:41:D6:E9:BE:D9:68:55:C9:0A","sha256":"ED:21:DA:6C:10:37:AA:5E:E0:1F:B6:C8:B9:B3:B7:D6:71:81:96:98:BB:A1:B7:35:B9:F3:7F:68:8E:58:60:81"}}},"request":{"raw":"GET /index_4.html HTTP/1.1\r\nHost: racer-airdrop.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://racer-airdrop.info/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 16 Dec 2025 15:13:52 GMT\r\ncontent-type: text/html\r\ncast-mode: default\r\nlast-modified: Sat, 06 Dec 2025 21:58:02 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vy6B8FzNKwIiX4GJnxnW%2BP4SvnSEP%2FmCYiuNfdu23wYZOqJeNxrvm1wyiwels3Xkk7gWye%2FmPY1VtJnyHD1DVUuFnbuRUOsFieUxKAwaz8U%3D\"}]}\r\npriority: u=4,i=?0\r\ncf-ray: 9aef208dbfed56a4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1411,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1410), with no line terminators","md5":"b883c609e8b31fdbce7ac8849a982aa8","sha1":"bceb89ba6c6f63b3c38175341a2a70dc7f034868","sha256":"8eff7a74e129d1d3e427666c0641265dda8b971047fd800d8510f979494d4119","sha512":"e94a0d9f5290d146189ca05760ba0128efcc0e03064a1de4fa6fc30cfbdd36ef01774c99c0c9c44bf6a10db644569518a89a98dc0fe3b8f9aa58d3dc3ad2f42b","ssdeep":"","tlshash":"a32174e264009c29501bb3eaecca604e6453f91ed70168c8b9dea94ec9ad93c215689d","first_seen":"2025-12-16T15:14:23.444493Z","last_seen":"2025-12-16T15:14:23.444493Z","times_seen":1,"resource_available":false,"data":null}},"time_used":249,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":249,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-16","alert":"Sinkholed","trigger":"racer-airdrop.info","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-16","alert":"Sinkholed","trigger":"racer-airdrop.info","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"corsproxy.io/?https://api.mainnet-beta.solana.com","fqdn":"corsproxy.io","domain":"corsproxy.io","tld":"io"},"ip":{"addr":"172.67.73.211","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://racer-airdrop.info/","date":"2025-12-16T15:13:53.044Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"corsproxy.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 24 Nov 2025 00:28:54 GMT","end":"Sun, 22 Feb 2026 01:28:46 GMT"},"fingerprint":{"sha1":"82:A0:BD:81:8D:CE:B9:C3:62:8C:F7:C9:61:E3:C6:2D:D3:11:DD:A4","sha256":"29:40:B3:AC:CC:AB:2B:AB:6B:50:07:A6:71:D3:ED:F6:1E:43:9C:CB:DE:4A:02:CE:D8:2A:DD:8E:FC:B3:2C:ED"}}},"request":{"raw":"POST /?https://api.mainnet-beta.solana.com HTTP/1.1\r\nHost: corsproxy.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://racer-airdrop.info/\r\nContent-Type: application/json\r\nContent-Length: 130\r\nOrigin: https://racer-airdrop.info\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":130,"data":"{\"jsonrpc\":\"2.0\",\"id\":1,\"method\":\"getAccountInfo\",\"params\":[\"8ycauMwVE61B4uWz87B2k2G8mMK7iFjRoBHooaVAcP4k\",{\"encoding\":\"base64\"}]}"}},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 16 Dec 2025 15:13:53 GMT\r\ncontent-type: application/json; charset=utf-8\r\nreferrer-policy: same-origin\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: *\r\nallow: OPTIONS, POST, GET\r\ncache-control: public, max-age=3600, s-maxage=3600\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\naccess-control-allow-credentials: false\r\nx-cache-read: skipped\r\nx-cache-status: MISS\r\nx-proxy-service: CORS Proxy\r\nx-proxy-time: 124ms\r\nx-proxy-version: 2.4.1\r\nx-request-id: b8308b91-ea37-4038-8cf5-44ce32e59f4e\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS, HEAD, PATCH\r\naccess-control-max-age: 86400\r\nx-content-type-options: nosniff\r\nx-ratelimit-conn-limit: 40\r\nx-ratelimit-conn-remaining: 39\r\nx-ratelimit-connrate-limit: 40\r\nx-ratelimit-connrate-remaining: 39\r\nx-ratelimit-endpoint-limit: unlimited\r\nx-ratelimit-endpoint-remaining: -2198\r\nx-ratelimit-method-limit: 30\r\nx-ratelimit-method-remaining: 29\r\nx-ratelimit-pubsub-limit: 5\r\nx-ratelimit-pubsub-remaining: 5\r\nx-ratelimit-rps-limit: 100\r\nx-ratelimit-rps-remaining: 99\r\nx-ratelimit-tier: free\r\nx-rpc-node: ams346\r\nstrict-transport-security: max-age=2592000; includeSubDomains; preload\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tFOgXzzEmT4ui0fbh283WIlGKJAZuXJiZ67T43lgCfmtafHa4ZeSjvBUj139wJmTqMRjG%2Bqc7jfmX4IvQAyWMZh1y3Xazl71Cw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpect-ct: max-age=86400, enforce\r\ncf-ray: 9aef20920d0f569c-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":327,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"7660ec36efab83f24a5183f0a5d0f5da","sha1":"7fde6347541456b1310fe3bcececa6a8cb4e3c06","sha256":"e22aa5362a9ee869d97a264ee23dcbc30a4e25862952de5fbf4561a3380345cb","sha512":"fccdb190bd2626f60c3f3c8acc19b07911ea2b63973980fe9d2120055cfb32954ca7eed37f3c2433f8f06d988212e05d7700fcaa05445915f2827cbd5b67b59a","ssdeep":"","tlshash":"b8e07d803e090fbeded48e57ca266199d3c509585b00894723db1d1971c955ea10b5bb","first_seen":"2025-12-16T15:14:23.445316Z","last_seen":"2025-12-16T15:14:23.445316Z","times_seen":1,"resource_available":false,"data":null}},"time_used":131,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":131,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"racer-airdrop.info/","fqdn":"racer-airdrop.info","domain":"racer-airdrop.info","tld":"info"},"ip":{"addr":"172.67.128.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-12-16T15:13:50.974Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"racer-airdrop.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 06 Dec 2025 21:12:17 GMT","end":"Fri, 06 Mar 2026 22:11:07 GMT"},"fingerprint":{"sha1":"BE:B8:FC:C8:8D:B2:16:B1:38:5C:04:41:D6:E9:BE:D9:68:55:C9:0A","sha256":"ED:21:DA:6C:10:37:AA:5E:E0:1F:B6:C8:B9:B3:B7:D6:71:81:96:98:BB:A1:B7:35:B9:F3:7F:68:8E:58:60:81"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: racer-airdrop.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 16 Dec 2025 15:13:51 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Sat, 06 Dec 2025 21:58:02 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HxOXVxCwNptdjZ9wjy62ujHkPn8ZDJav9j%2FaTubN48ecFQreEhWieADLAKf6feIbNCHujLZuXw%2Bywzpq1pFtnYg6w8ehmm98DwFkdYWqZ8A%3D\"}]}\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncf-ray: 9aef2086caea0afa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":88570,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (771)","md5":"8a75c2224283fe82226084af8e7f404f","sha1":"3c8dd5eef5a4611663b98d4e76dc6e6bd2333398","sha256":"0c152806ddd7763f9b379e2907b47e12fd9128b0c687eaec649b533be8775ae4","sha512":"67435e5b3afc7280df3b5039e7afcb361ffbcde63374aa320ba25bea72106264286fe8b50be9b567f6fff69d89d8d8680119782dace95b0ff3fd11bd1ba97f8e","ssdeep":"1536:cCm2mfm3m/mYmUmgIiUaaEHuICDW/hvDNfTmtzpDoxdIw9oYu00WxDC2t44nW2sX:hadCexw0sG441A","tlshash":"6283d75472b300355c07d2797bff9a097a74e543dc0bcd287add1282af8e9e85aa3358","first_seen":"2025-12-16T15:14:23.446121Z","last_seen":"2025-12-16T15:14:23.446121Z","times_seen":1,"resource_available":false,"data":null}},"time_used":637,"timings":{"blocked":195,"dns":175,"connect":1,"send":0,"wait":247,"receive":0,"ssl":17},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-16","alert":"Sinkholed","trigger":"racer-airdrop.info","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-16","alert":"Sinkholed","trigger":"racer-airdrop.info","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"racer-airdrop.info/styles__ltr.css","fqdn":"racer-airdrop.info","domain":"racer-airdrop.info","tld":"info"},"ip":{"addr":"172.67.128.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://racer-airdrop.info/index_3.html","date":"2025-12-16T15:13:52.550Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"racer-airdrop.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 06 Dec 2025 21:12:17 GMT","end":"Fri, 06 Mar 2026 22:11:07 GMT"},"fingerprint":{"sha1":"BE:B8:FC:C8:8D:B2:16:B1:38:5C:04:41:D6:E9:BE:D9:68:55:C9:0A","sha256":"ED:21:DA:6C:10:37:AA:5E:E0:1F:B6:C8:B9:B3:B7:D6:71:81:96:98:BB:A1:B7:35:B9:F3:7F:68:8E:58:60:81"}}},"request":{"raw":"GET /styles__ltr.css HTTP/1.1\r\nHost: racer-airdrop.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://racer-airdrop.info/index_3.html\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 16 Dec 2025 15:13:52 GMT\r\ncontent-type: text/css\r\ncast-mode: default\r\nlast-modified: Sat, 06 Dec 2025 21:58:02 GMT\r\netag: W/\"6934a6ea-7c6f\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\npriority: u=2,i=?0\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bwzqB8OHXIk3025zxtWk2V8Wod1gTpqTRl5GJyTorM27UEnJ69oSPJvYow51NvyjdaUjbUS01pfSbIpZdwd%2BpZv6yXfcZ%2FlRc7xLb%2BkjCr0%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9aef208f680756a4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":31855,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (31855), with no line terminators","md5":"6dcdd75487946fb595ab01eba534ed00","sha1":"04bdc0fcab88ba628c1fc543d3b223b9a1da01cb","sha256":"c40cd5547183549fbbdc86837e7534ffb5a74755c871d3fdfcf934bf5be14fad","sha512":"8421a52b950738023fdfcd0d1f35600c61d2d195b8b434a39ec8960c54473c1f7f3c68812bb9ac36dce47035eab33f81a8fc8b5eb270a2c5aa4f5940e7fc19dd","ssdeep":"384:+RcH72zReA2yBOq+5N54PtSqxaG9eoc+cFs1gYDpLhvPTodVcVMcCCA9J8cEPc7:+7FebyBQN54P5xAugYFrVFCC+JVEE7","tlshash":"5be2d96378903b2af8279b6521d56efdf22cc913e5520fb9a6467630c3cf1994163b07","first_seen":"2025-11-18T00:46:11.68346Z","last_seen":"2026-08-11T10:04:54.721811Z","times_seen":6,"resource_available":false,"data":null}},"time_used":293,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":290,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-16","alert":"Sinkholed","trigger":"racer-airdrop.info","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-16","alert":"Sinkholed","trigger":"racer-airdrop.info","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"corsproxy.io/?https://api.mainnet-beta.solana.com","fqdn":"corsproxy.io","domain":"corsproxy.io","tld":"io"},"ip":{"addr":"172.67.73.211","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://racer-airdrop.info/","date":"2025-12-16T15:13:52.926Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"corsproxy.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 24 Nov 2025 00:28:54 GMT","end":"Sun, 22 Feb 2026 01:28:46 GMT"},"fingerprint":{"sha1":"82:A0:BD:81:8D:CE:B9:C3:62:8C:F7:C9:61:E3:C6:2D:D3:11:DD:A4","sha256":"29:40:B3:AC:CC:AB:2B:AB:6B:50:07:A6:71:D3:ED:F6:1E:43:9C:CB:DE:4A:02:CE:D8:2A:DD:8E:FC:B3:2C:ED"}}},"request":{"raw":"OPTIONS /?https://api.mainnet-beta.solana.com HTTP/1.1\r\nHost: corsproxy.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://racer-airdrop.info/\r\nOrigin: https://racer-airdrop.info\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Tue, 16 Dec 2025 15:13:52 GMT\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: false\r\naccess-control-allow-headers: content-type\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS, HEAD, PATCH\r\naccess-control-max-age: 86400\r\nstrict-transport-security: max-age=2592000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aXsX%2BcboHyGjGYUb8UdoMGK%2B%2FYw598XPyy6yejxT56Xy6ilT21Wr5j63VChse8rcBBvBKIY4hPkyaXrU82Mu3e8AK2uz8CHwSA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: same-origin\r\nserver: cloudflare\r\ncf-ray: 9aef2091fcfb569c-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-17T09:43:02.208337Z","times_seen":17933663,"resource_available":true,"data":null}},"time_used":68,"timings":{"blocked":31,"dns":1,"connect":2,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"racer-airdrop.info/index_5.html","fqdn":"racer-airdrop.info","domain":"racer-airdrop.info","tld":"info"},"ip":{"addr":"172.67.128.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://racer-airdrop.info/index_4.html","date":"2025-12-16T15:13:52.956Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"racer-airdrop.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 06 Dec 2025 21:12:17 GMT","end":"Fri, 06 Mar 2026 22:11:07 GMT"},"fingerprint":{"sha1":"BE:B8:FC:C8:8D:B2:16:B1:38:5C:04:41:D6:E9:BE:D9:68:55:C9:0A","sha256":"ED:21:DA:6C:10:37:AA:5E:E0:1F:B6:C8:B9:B3:B7:D6:71:81:96:98:BB:A1:B7:35:B9:F3:7F:68:8E:58:60:81"}}},"request":{"raw":"GET /index_5.html HTTP/1.1\r\nHost: racer-airdrop.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://racer-airdrop.info/index_4.html\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 16 Dec 2025 15:13:53 GMT\r\ncontent-type: text/html\r\ncast-mode: default\r\nlast-modified: Sat, 06 Dec 2025 21:58:02 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fnr1Ad5ErNJzdABA3ax2xdTMpb0N5USiebK1ED1DBWt7phUK8HY39wg%2BXUD4WcU0Anqn6iKRm5ZsTjDgh%2FrA3lhKhrp8eTEZgu9VqariXXU%3D\"}]}\r\npriority: u=4,i=?0\r\ncf-ray: 9aef2091f81956a4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":144,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with no line terminators","md5":"5ca68054ff8813a002a1160e11167abb","sha1":"89642647e6c90a1b2153f66e03892d083aa8ffc4","sha256":"e40f1759e3d5591a20e3bc662684f179f5a499468ad4ee7a5bd3ef92b4db55b5","sha512":"fcd01c2156d1a965bbaf07bdc2f1f1e08f0d26ba5340bd6c56996c951fae3d9bc24f71d7506643c53a5e8411add028a661df5afbd2be70575f96248b5b3b0162","ssdeep":"","tlshash":"6ac02b22d8004c0f39009fd1cb8af1c4c003ec3ce8315c00b863b144edac131c012558","first_seen":"2024-10-13T01:25:15.150688Z","last_seen":"2026-08-11T10:04:54.735553Z","times_seen":76,"resource_available":true,"data":null}},"time_used":229,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":229,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-16","alert":"Sinkholed","trigger":"racer-airdrop.info","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-16","alert":"Sinkholed","trigger":"racer-airdrop.info","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"racer-airdrop.info/checkered.png","fqdn":"racer-airdrop.info","domain":"racer-airdrop.info","tld":"info"},"ip":{"addr":"172.67.128.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://racer-airdrop.info/","date":"2025-12-16T15:13:52.345Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"racer-airdrop.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 06 Dec 2025 21:12:17 GMT","end":"Fri, 06 Mar 2026 22:11:07 GMT"},"fingerprint":{"sha1":"BE:B8:FC:C8:8D:B2:16:B1:38:5C:04:41:D6:E9:BE:D9:68:55:C9:0A","sha256":"ED:21:DA:6C:10:37:AA:5E:E0:1F:B6:C8:B9:B3:B7:D6:71:81:96:98:BB:A1:B7:35:B9:F3:7F:68:8E:58:60:81"}}},"request":{"raw":"GET /checkered.png HTTP/1.1\r\nHost: racer-airdrop.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://racer-airdrop.info/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 16 Dec 2025 15:13:52 GMT\r\ncontent-type: image/png\r\ncontent-length: 301350\r\ncast-mode: default\r\nlast-modified: Sat, 06 Dec 2025 21:58:02 GMT\r\netag: \"6934a6ea-49926\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Hrcm3hW7FluOAMj6LJDg%2FSDJLyZwW9Zok9DPSOuuU13H3%2FOQhm28jXQCz6gOTvRknR9SUL8u0%2FdG%2BPTWJCLuIT9%2BPAtJBKwxCToRfoyxUZc%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9aef208e1ffc56a4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":301350,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 2000 x 1125, 8-bit/color RGB, interlaced","md5":"36d3b00d72e504654dc73a54132f9c73","sha1":"d96a837e75f6506950cb7e792d384da5d5d1928b","sha256":"2dcc088d5ff6675b121cda7b93de61a8d55c8c40a6de9fc2a0c5e3022758e340","sha512":"164fe8f7aac6053034e3692fa1635b81c308095d829f9573f150671201f90ec47978a08f91cb83ed7413212d436781c23221d70e5cff11d01fc98504b1c9d2e4","ssdeep":"6144:irQUus5/SMm/70iHlFcoepDpoc+S+d0oSPBX+BZQmdFSTb+sZsWAqz:i8CKMwQwMoepVoc+S+d0xBX+B6mS2qj1","tlshash":"fc542342f357f418ba4affa7069824205f21d944c99996ff012f5deacc2b7e0973ca19","first_seen":"2025-12-16T15:14:23.44869Z","last_seen":"2025-12-16T15:14:23.44869Z","times_seen":1,"resource_available":false,"data":null}},"time_used":404,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":214,"receive":190,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-16","alert":"Sinkholed","trigger":"racer-airdrop.info","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-16","alert":"Sinkholed","trigger":"racer-airdrop.info","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"racer-airdrop.info/css.css","fqdn":"racer-airdrop.info","domain":"racer-airdrop.info","tld":"info"},"ip":{"addr":"172.67.128.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://racer-airdrop.info/","date":"2025-12-16T15:13:52.031Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"racer-airdrop.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 06 Dec 2025 21:12:17 GMT","end":"Fri, 06 Mar 2026 22:11:07 GMT"},"fingerprint":{"sha1":"BE:B8:FC:C8:8D:B2:16:B1:38:5C:04:41:D6:E9:BE:D9:68:55:C9:0A","sha256":"ED:21:DA:6C:10:37:AA:5E:E0:1F:B6:C8:B9:B3:B7:D6:71:81:96:98:BB:A1:B7:35:B9:F3:7F:68:8E:58:60:81"}}},"request":{"raw":"GET /css.css HTTP/1.1\r\nHost: racer-airdrop.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://racer-airdrop.info/c4476ce1366464cb.css\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 16 Dec 2025 15:13:52 GMT\r\ncontent-type: text/css\r\ncast-mode: default\r\nlast-modified: Sat, 06 Dec 2025 21:58:02 GMT\r\netag: W/\"6934a6ea-7a4\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\npriority: u=2,i=?0\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OC%2F66oksgInAm9oqVLiNukGzZtXbP21M0%2FVnBGzCYSfR9ZvLhxTYKcZDXTko5fje9IBURSqJP6N3Ak1RshU9CEie9UdWSLiG1cvL2HEFbcQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9aef208c2fe456a4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1956,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"b4a883f09014902e0a072000f63474a0","sha1":"668e7e37bd29a7493a60fae54d798d37749a5f1b","sha256":"dca86c979b0f406074be50f35c84bb2733363c78548a479242dd4cf903331f9a","sha512":"f943b2dea697813358133ace082652b0c6234ca756fdd6a8527498f42e1185c230677a4d83524ed06aaa8b36ac160298b0853ff4e2a5bca5b14594caa0acd568","ssdeep":"","tlshash":"db4197501039a40093932cd677cf3e369d4eb284b086a9359ffd1868ec96d7153e1b5e","first_seen":"2025-12-16T15:14:23.449566Z","last_seen":"2025-12-16T15:14:23.449566Z","times_seen":1,"resource_available":false,"data":null}},"time_used":226,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":226,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-16","alert":"Sinkholed","trigger":"racer-airdrop.info","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-16","alert":"Sinkholed","trigger":"racer-airdrop.info","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"racer-airdrop.info/track-top3.png","fqdn":"racer-airdrop.info","domain":"racer-airdrop.info","tld":"info"},"ip":{"addr":"172.67.128.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://racer-airdrop.info/","date":"2025-12-16T15:13:52.317Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"racer-airdrop.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 06 Dec 2025 21:12:17 GMT","end":"Fri, 06 Mar 2026 22:11:07 GMT"},"fingerprint":{"sha1":"BE:B8:FC:C8:8D:B2:16:B1:38:5C:04:41:D6:E9:BE:D9:68:55:C9:0A","sha256":"ED:21:DA:6C:10:37:AA:5E:E0:1F:B6:C8:B9:B3:B7:D6:71:81:96:98:BB:A1:B7:35:B9:F3:7F:68:8E:58:60:81"}}},"request":{"raw":"GET /track-top3.png HTTP/1.1\r\nHost: racer-airdrop.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://racer-airdrop.info/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 16 Dec 2025 15:13:52 GMT\r\ncontent-type: image/png\r\ncontent-length: 496789\r\ncast-mode: default\r\nlast-modified: Sat, 06 Dec 2025 21:58:02 GMT\r\netag: \"6934a6ea-79495\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QQ3%2BL0RRyTnTBTJ3UlIpY1VfGC6BTCmAkT5sebxhhxAzi190qZ6Y9ijCIlhOIrb9CS8HTUsp7d811fh69ffnOwm40SpPtUq%2FkZ9v1OQ%2Fq%2Bo%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9aef208dfff556a4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":496789,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1536 x 172, 8-bit/color RGB, non-interlaced","md5":"fff5b96ea425a6f8803ef41e8ddce52e","sha1":"bfadf8f414073c5b07e9644516e0f975864cda2c","sha256":"911c0f9602085312158d981263591ccf5f12a0e45561845736fc87feb0bd11c1","sha512":"a85b3830538e85561a2681bde42f7e8dd1ddcf3d2fc420ca060bf5785b5ae128cca1cee3e5619cb08934cbd2dadbd8fc35305ed4198d28a79b5da3afa6d20630","ssdeep":"12288:g7EvktgG4wh2gtwfATeGUam/o1rZgq/+/D:gw8tgyh9j9m/MJq","tlshash":"72b42342e80e2a3049728ae550f5b85d9dcc51e96f5cdf9b35c1f2df01caea0d8486be","first_seen":"2025-12-16T15:14:23.45026Z","last_seen":"2025-12-16T15:14:23.45026Z","times_seen":1,"resource_available":false,"data":null}},"time_used":481,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":245,"receive":236,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-16","alert":"Sinkholed","trigger":"racer-airdrop.info","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-16","alert":"Sinkholed","trigger":"racer-airdrop.info","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"racer-airdrop.info/track5.png","fqdn":"racer-airdrop.info","domain":"racer-airdrop.info","tld":"info"},"ip":{"addr":"172.67.128.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://racer-airdrop.info/","date":"2025-12-16T15:13:52.323Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"racer-airdrop.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 06 Dec 2025 21:12:17 GMT","end":"Fri, 06 Mar 2026 22:11:07 GMT"},"fingerprint":{"sha1":"BE:B8:FC:C8:8D:B2:16:B1:38:5C:04:41:D6:E9:BE:D9:68:55:C9:0A","sha256":"ED:21:DA:6C:10:37:AA:5E:E0:1F:B6:C8:B9:B3:B7:D6:71:81:96:98:BB:A1:B7:35:B9:F3:7F:68:8E:58:60:81"}}},"request":{"raw":"GET /track5.png HTTP/1.1\r\nHost: racer-airdrop.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://racer-airdrop.info/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 16 Dec 2025 15:13:52 GMT\r\ncontent-type: image/png\r\ncontent-length: 1650733\r\ncast-mode: default\r\nlast-modified: Sat, 06 Dec 2025 21:58:02 GMT\r\netag: \"6934a6ea-19302d\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aO4beN9xFlZHYBcNNnhO7P%2BmxKQmchLTUEuqMWFoVoni0VbWTRa168sxnwODrubsiFdEL3uWPvoBVWuLaIafVyEb%2FJvunG%2FhETibGfUvEEQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9aef208dfff656a4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1650733,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1536 x 1000, 8-bit/color RGB, non-interlaced","md5":"1013e9d42d76716aaf3bc006e7f581e7","sha1":"a251cdbbae9a7c70cd2b3e991a7816f6a6f87c1c","sha256":"413cb5f74d971c3a1f7b9a178db41b533427a62d90e0a45f3a80714ec59d3f09","sha512":"79f01d0cedb1368532e71f6d001a93af9576b1b5b5d4e9cc221ddec4326679cc7c6338cc7a2976c92c5827ed1231efeed483fe73d69cd0baf135229305be64ec","ssdeep":"24576:sgyP/RlTMmZXsPLHrJOftWh5/LCHe+SsJbIV+wE/AWaoBjb:XyfYmZXsTHUWh52HebqUVRE/TBjb","tlshash":"dc253351e41e844a9e6c4ce4d93b703722c8e3da4844f2613671197ef9a37f6bebb814","first_seen":"2025-12-16T15:14:23.45137Z","last_seen":"2025-12-16T15:14:23.45137Z","times_seen":1,"resource_available":false,"data":null}},"time_used":897,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":234,"receive":663,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-16","alert":"Sinkholed","trigger":"racer-airdrop.info","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-16","alert":"Sinkholed","trigger":"racer-airdrop.info","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"racer-airdrop.info/1-red.png","fqdn":"racer-airdrop.info","domain":"racer-airdrop.info","tld":"info"},"ip":{"addr":"172.67.128.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://racer-airdrop.info/","date":"2025-12-16T15:13:52.325Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"racer-airdrop.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 06 Dec 2025 21:12:17 GMT","end":"Fri, 06 Mar 2026 22:11:07 GMT"},"fingerprint":{"sha1":"BE:B8:FC:C8:8D:B2:16:B1:38:5C:04:41:D6:E9:BE:D9:68:55:C9:0A","sha256":"ED:21:DA:6C:10:37:AA:5E:E0:1F:B6:C8:B9:B3:B7:D6:71:81:96:98:BB:A1:B7:35:B9:F3:7F:68:8E:58:60:81"}}},"request":{"raw":"GET /1-red.png HTTP/1.1\r\nHost: racer-airdrop.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://racer-airdrop.info/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 16 Dec 2025 15:13:52 GMT\r\ncontent-type: image/png\r\ncontent-length: 2504306\r\ncast-mode: default\r\nlast-modified: Sat, 06 Dec 2025 21:58:02 GMT\r\netag: \"6934a6ea-263672\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SJ0tY0Pcwkjfm0YEUzon6s3z18A1J6WvouXujsHp%2Fs2kXPhwdbbVpxbCJg1jLaCkzcj1v%2BGza4SM0Y4878nk3gi889tpwy5YNJquwFCjGbY%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9aef208e0ff756a4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2504306,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1042 x 600, 8-bit/color RGBA, non-interlaced","md5":"89ddaf0e7115b3dbcd0c8e8ab271cab7","sha1":"4e6c896134065022dd5d087a18683aa1c290e930","sha256":"c2af4cc07ca2db3a733c4dee1238b107b557c247c6b58f9b8995957faf4116c9","sha512":"4f11001e1cd725ba7d22f4da5164d581f0ea729d91895fdc68a521966417d4c48122c7e4cc7eea1b1afd7cbca48360883988dd8a9561ca2d2b7ee928f3081a7d","ssdeep":"3072:+iEClVKa3V9DjKbHJ/ftoFbcpwEpvyaFpU0rAqDcjwou3n5MxOFjriFzFdgVwmtK:L9/KBpgwouJ1F/CdVM1NBowb8noDWoE","tlshash":"3425af127f05e903e5592e768964c7e5a331fc8cab62d38734d27e6bbcad6c35e01284","first_seen":"2025-12-16T15:14:23.452288Z","last_seen":"2025-12-16T15:14:23.452288Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1125,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":241,"receive":884,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-16","alert":"Sinkholed","trigger":"racer-airdrop.info","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-16","alert":"Sinkholed","trigger":"racer-airdrop.info","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"racer-airdrop.info/86fb6e5af11b7224.css","fqdn":"racer-airdrop.info","domain":"racer-airdrop.info","tld":"info"},"ip":{"addr":"172.67.128.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://racer-airdrop.info/","date":"2025-12-16T15:13:51.674Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"racer-airdrop.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 06 Dec 2025 21:12:17 GMT","end":"Fri, 06 Mar 2026 22:11:07 GMT"},"fingerprint":{"sha1":"BE:B8:FC:C8:8D:B2:16:B1:38:5C:04:41:D6:E9:BE:D9:68:55:C9:0A","sha256":"ED:21:DA:6C:10:37:AA:5E:E0:1F:B6:C8:B9:B3:B7:D6:71:81:96:98:BB:A1:B7:35:B9:F3:7F:68:8E:58:60:81"}}},"request":{"raw":"GET /86fb6e5af11b7224.css HTTP/1.1\r\nHost: racer-airdrop.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://racer-airdrop.info/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 16 Dec 2025 15:13:51 GMT\r\ncontent-type: text/css\r\ncast-mode: default\r\nlast-modified: Sat, 06 Dec 2025 21:58:02 GMT\r\netag: W/\"6934a6ea-fc4\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\npriority: u=2,i=?0\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9XuBw4F9LHnjn%2BS01wPV3Yb8xGbDhS0XPOmCxpB0u45eeDSClIW%2FJxwu6ZEj75XtJ7eM9zXI1bJWLWwXR%2Bg8AgeMdvikyXX3cwmLC5BwBC0%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9aef2089dfc756a4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4036,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (3629)","md5":"ff5fddbd99ff494e894567d129e71c92","sha1":"feea663387fa7a9ae5ca7608ee8d2f4b0bddf41c","sha256":"39f5a45e0e13fba427d4a00dd22dc73ecea547fe10bc506ac77d811e2d4b37a8","sha512":"b05662813833076a512410d1e625d68dad516dc07a64cf45f852b86a8e2f27c9a93ee58e92ceda3c5fade98cbb6bf62060a4a155bda9c190843e0c190466bb79","ssdeep":"","tlshash":"44817839846f9809d6f7cc6234cf7f037c2cd4355bb6212785682aa98e9a93b57d072c","first_seen":"2025-12-16T15:14:23.453824Z","last_seen":"2025-12-16T15:14:23.453824Z","times_seen":1,"resource_available":false,"data":null}},"time_used":220,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":220,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-16","alert":"Sinkholed","trigger":"racer-airdrop.info","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-16","alert":"Sinkholed","trigger":"racer-airdrop.info","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"racer-airdrop.info/index_3.html","fqdn":"racer-airdrop.info","domain":"racer-airdrop.info","tld":"info"},"ip":{"addr":"172.67.128.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://racer-airdrop.info/","date":"2025-12-16T15:13:52.288Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"racer-airdrop.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 06 Dec 2025 21:12:17 GMT","end":"Fri, 06 Mar 2026 22:11:07 GMT"},"fingerprint":{"sha1":"BE:B8:FC:C8:8D:B2:16:B1:38:5C:04:41:D6:E9:BE:D9:68:55:C9:0A","sha256":"ED:21:DA:6C:10:37:AA:5E:E0:1F:B6:C8:B9:B3:B7:D6:71:81:96:98:BB:A1:B7:35:B9:F3:7F:68:8E:58:60:81"}}},"request":{"raw":"GET /index_3.html HTTP/1.1\r\nHost: racer-airdrop.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://racer-airdrop.info/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 16 Dec 2025 15:13:52 GMT\r\ncontent-type: text/html\r\ncast-mode: default\r\nlast-modified: Sat, 06 Dec 2025 21:58:02 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8mwbH9VT6Mrffe8k5OD9JdaujztMzgNZrJvGQNgtUMS0xy5IQ14yyoMPg5uHAPdMj79YU6dcK7eAJDT%2B%2FltdwREv%2FodEObmN%2B1O2LUBnX44%3D\"}]}\r\npriority: u=4,i=?0\r\ncf-ray: 9aef208dcff056a4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9513,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (1516)","md5":"5556b0a4e26efc51ed356dd8bd7dc9e0","sha1":"535fb6a59bf0a4d3de443f8b2580a7c5ff8e0914","sha256":"b5f61d1a9eee18193da229318d4e0b4e20fbf38abbab216953018caf8d4947ce","sha512":"317a9fe22bbd1b338103139114ce43eac20658b437d505b1af0c0d8ea9f662e4f70aa6269fa1d6df5cfc08eed97d55fa60f3875e5ff20e47db45b952f7ec57cf","ssdeep":"192:ljSQpCs3XbEqGVK7D033sHicNbHnO1C3Ak8pw639okQ4DOnK+4xwvY18/wVeOrMg:I6dmw1+K+oc","tlshash":"fa128560181a5400a3530cd6b3ce7f39988eb255b5834a70bffe061cbde6d66d264b4e","first_seen":"2025-12-16T15:14:23.454664Z","last_seen":"2025-12-16T15:14:23.454664Z","times_seen":1,"resource_available":false,"data":null}},"time_used":246,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":246,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-16","alert":"Sinkholed","trigger":"racer-airdrop.info","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-16","alert":"Sinkholed","trigger":"racer-airdrop.info","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"racer-airdrop.info/secureproxy?s=%2F%40v1%2Fcdn%2Fjs%2Fsocket.io.min.js%3Ft%3D29431633%26u%3D4e39e19edbcbcc06fe3aec66fa0100008531641f682138e70a2a4adc","fqdn":"racer-airdrop.info","domain":"racer-airdrop.info","tld":"info"},"ip":{"addr":"172.67.128.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://racer-airdrop.info/","date":"2025-12-16T15:13:52.467Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"racer-airdrop.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 06 Dec 2025 21:12:17 GMT","end":"Fri, 06 Mar 2026 22:11:07 GMT"},"fingerprint":{"sha1":"BE:B8:FC:C8:8D:B2:16:B1:38:5C:04:41:D6:E9:BE:D9:68:55:C9:0A","sha256":"ED:21:DA:6C:10:37:AA:5E:E0:1F:B6:C8:B9:B3:B7:D6:71:81:96:98:BB:A1:B7:35:B9:F3:7F:68:8E:58:60:81"}}},"request":{"raw":"GET /secureproxy?s=%2F%40v1%2Fcdn%2Fjs%2Fsocket.io.min.js%3Ft%3D29431633%26u%3D4e39e19edbcbcc06fe3aec66fa0100008531641f682138e70a2a4adc HTTP/1.1\r\nHost: racer-airdrop.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://racer-airdrop.info/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 523 No Reason Phrase\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Tue, 16 Dec 2025 15:13:52 GMT\r\nx-frame-options: SAMEORIGIN\r\ncontent-length: 7207\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\ncf-ray: 9aef208ee80556a4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"523","status_text":"No Reason Phrase","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7207,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (555)","md5":"272192288ffb3a5fd7c40e9a2d68876f","sha1":"97fa3a62bf5167cc10ce227a9fe5c2922c6f3e62","sha256":"51cc59aec3d74ace6798d1343ac8bb26c16475442ccca1e0d0ce1d28d44e7a7c","sha512":"b1b559ad34588f912414eb88fb422fe05747c3d63ad8becc5692a3797db3d3e12395261c528a2788394c1beb04a54d71f332a7665938802ee543c747102c99d4","ssdeep":"96:1j9jwIjYjTDK/D9KUlG4Fh8/G4FDF424FA+skKmomH1XnMSB7RLlbaQxP:1j9jhjYj3K/BZeoWVL2jB71leeP","tlshash":"28e17472b1f1127b109382d23595fb59aae0c213caff4498b3dcc6632f9ee81d903694","first_seen":"2025-12-16T15:14:23.456053Z","last_seen":"2025-12-16T15:14:23.456053Z","times_seen":1,"resource_available":false,"data":null}},"time_used":418,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":416,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-16","alert":"Sinkholed","trigger":"racer-airdrop.info","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-16","alert":"Sinkholed","trigger":"racer-airdrop.info","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"racer-airdrop.info/meow.desktop.js","fqdn":"racer-airdrop.info","domain":"racer-airdrop.info","tld":"info"},"ip":{"addr":"172.67.128.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://racer-airdrop.info/","date":"2025-12-16T15:13:51.670Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"racer-airdrop.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 06 Dec 2025 21:12:17 GMT","end":"Fri, 06 Mar 2026 22:11:07 GMT"},"fingerprint":{"sha1":"BE:B8:FC:C8:8D:B2:16:B1:38:5C:04:41:D6:E9:BE:D9:68:55:C9:0A","sha256":"ED:21:DA:6C:10:37:AA:5E:E0:1F:B6:C8:B9:B3:B7:D6:71:81:96:98:BB:A1:B7:35:B9:F3:7F:68:8E:58:60:81"}}},"request":{"raw":"GET /meow.desktop.js HTTP/1.1\r\nHost: racer-airdrop.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://racer-airdrop.info/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 16 Dec 2025 15:13:51 GMT\r\ncontent-type: application/javascript\r\ncast-mode: default\r\nlast-modified: Sat, 06 Dec 2025 21:58:02 GMT\r\netag: W/\"6934a6ea-794f4\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\npriority: u=2,i=?0\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cELfqY05DITYgV4jjpvX7hkN%2FWZCx90lLptKVF2zeH4ZPwOD7VeM3dbyRUQ%2BJ5HQKh02ploa3JT6ezAayEYEsHhc%2BK%2BMYOIsXE4okVHjqsc%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9aef2089dfc556a4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":496884,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65286)","md5":"210f3769ba671106bb28dd0c2b089600","sha1":"da0d57a2763061cc3c8372cf2d2850d9e3b9dc43","sha256":"f527a9286dce3be16f3165cf7e310d61a025ea54f021983e7dbb7940c0731927","sha512":"39f38165e88778b37bb6385ffb793f0d0d70cec2b4bdc816af235b59e80764ddfdaefc71c6237870174ce77cd05d49664b5c11aca4bd18ebf56de112ecf684b3","ssdeep":"6144:qZMet+MetWMetWMet17a7h2JfBEZEhppmZ0h106:qdCua6Of+ZE5hp","tlshash":"5cb494760142b399839ca55f85341e8cd695cd1a4fcc882ef668e4cff0a0d176beaf52","first_seen":"2025-12-16T15:14:23.457341Z","last_seen":"2025-12-16T15:14:23.457341Z","times_seen":1,"resource_available":true,"data":null}},"time_used":402,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":277,"receive":125,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-16","alert":"Sinkholed","trigger":"racer-airdrop.info","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-16","alert":"Sinkholed","trigger":"racer-airdrop.info","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}}]}