{"report_id":"1da772fa-1d44-438b-991e-3ea7d1054011","version":6,"status":"done","tags":[],"date":"2025-09-08T04:26:12Z","url":{"schema":"https","addr":"great-airdrop-xrp.com/?64830428","fqdn":"great-airdrop-xrp.com","domain":"great-airdrop-xrp.com","tld":"com"},"ip":{"addr":"104.21.112.1","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"great-airdrop-xrp.com/?64830428","fqdn":"great-airdrop-xrp.com","domain":"great-airdrop-xrp.com","tld":"com"},"title":"100,000,000 $XRP AIRDROP"},"submit":{"url":{"schema":"https","addr":"great-airdrop-xrp.com/?64830428","fqdn":"great-airdrop-xrp.com","domain":"great-airdrop-xrp.com","tld":"com"},"ip":{"addr":"104.21.112.1","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null,"user":{"user_id":"akbkyowd9geqr98"}},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-10-13T04:26:12Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"static.tumblr.com","ip":{"addr":"192.0.77.40","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"domain_registered":"2006-06-08","domain_rank":537463,"first_seen":"2013-08-05T11:14:48Z","last_seen":"2025-08-31T10:13:01.710332Z","alert_count":0,"request_count":2,"received_data":588528,"sent_data":916,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"i.imgur.com","ip":{"addr":"199.232.196.193","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2009-01-09","domain_rank":3309,"first_seen":"2012-05-21T08:09:36Z","last_seen":"2025-09-04T12:20:02.575881Z","alert_count":0,"request_count":1,"received_data":47004,"sent_data":439,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]},{"fqdn":"great-airdrop-xrp.com","ip":{"addr":"104.21.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":16,"received_data":1089195,"sent_data":7439,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"glyph.medium.com","ip":{"addr":"162.159.153.4","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"1998-05-27","domain_rank":187209,"first_seen":"2017-08-01T13:23:25Z","last_seen":"2025-09-02T06:25:07.614239Z","alert_count":0,"request_count":2,"received_data":26635,"sent_data":1139,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}]},{"fqdn":"cdn-images-1.medium.com","ip":{"addr":"162.159.153.4","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"1998-05-27","domain_rank":432231,"first_seen":"2015-07-26T08:44:52Z","last_seen":"2025-09-02T20:55:17.102959Z","alert_count":0,"request_count":2,"received_data":11741,"sent_data":1064,"comment":"","tags":null,"fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":null}],"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"great-airdrop-xrp.com/?64830428","fqdn":"great-airdrop-xrp.com","domain":"great-airdrop-xrp.com","tld":"com"},"ip":{"addr":"104.21.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"a5758d2bc8833f1e9dca6a8c5aeaead0","sha1":"3967e0d20038a9ab67bf2e0cddf22ae87932dc48","sha256":"701110fee739fff5aa5b2629359cdb6620615584b8079e8eba24fc58f9687011","sha512":"3844f28325d07cc6ec9eaf64c7ec7e0cd809de640ec6118f4d70965b3c3d3a477cf7106f40f37756e2ffb47346e83edce009197df7e71f7d9ebfbed43f084266","ssdeep":"768:G2OEyU38GSyr+1YPzx4gp8PVgzKIZXvP1Cao/BqY:GJEy+81yK1YPWPubvc","tlshash":"08c2cf3ace63b60394bb57827c073986873c2247a83d34dd6eb84e1095c968a5b8757c","size":26983,"data":"","first_seen":"2025-07-26T22:19:45.20413Z","last_seen":"2026-08-18T01:15:33.782711Z","times_seen":2108,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"great-airdrop-xrp.com/?64830428","fqdn":"great-airdrop-xrp.com","domain":"great-airdrop-xrp.com","tld":"com"},"ip":{"addr":"104.21.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"dc255c5d392163ad8215ec8cafa0b025","sha1":"3eb1482fde700de5f958554bd69c16219bcd8fab","sha256":"b828a828f278b2c641030510f77865bafaef57e4bb4945825b307cdfd5e99d6f","sha512":"02074148991fc0ad87f5abfc8846d19d61018f426fe956b0c2a9e175260840740208fff2081a17cc3d44027d03fc0d205c68a2ad961a357dec301383b4e3c186","ssdeep":"384:2ecE1WVsgFkqvQSS/KkfwTvvFDXaDs51ynDpwK0UKDF527AZWFTw5R8:JcE1Dt/KCwt7ynGJlZ5qAZWFTw5R8","tlshash":"06b26ce26192e03187cf77a1923f1c17a2bf1990c50ce5fe92719a9865f21964ed0ac9","size":24273,"data":"","first_seen":"2025-07-26T22:19:45.197843Z","last_seen":"2026-08-18T01:15:33.783412Z","times_seen":2095,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"great-airdrop-xrp.com/?64830428","fqdn":"great-airdrop-xrp.com","domain":"great-airdrop-xrp.com","tld":"com"},"ip":{"addr":"104.21.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"b1715833ba93c4393805ea3699bee544","sha1":"c75447b548e0f87ab4302a16910187b3e4dcad5b","sha256":"e443a4d661a95942ecef048944f3b2a62a58d92b04c31341ce45715b97ad202c","sha512":"d9aab6ad3a575c4ace302f30a084361d8d8edfc43b0f99c260b05ea2773fc61eeb306628905ec8b45660f3e2ff145c3be70f76a18d279b2c0be0ac9734e56f2e","ssdeep":"","tlshash":"41f0e2a438c2f163a6fd1583bc092d8d313594f28a8862039fadb48c148c603c6449a8","size":461,"data":"","first_seen":"2025-07-26T22:19:45.160401Z","last_seen":"2026-08-18T01:15:33.779832Z","times_seen":2206,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"great-airdrop-xrp.com/?64830428","fqdn":"great-airdrop-xrp.com","domain":"great-airdrop-xrp.com","tld":"com"},"ip":{"addr":"104.21.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"d0d936a3e56d5f50dcef38a5e5046284","sha1":"1fb78f846965b288696b9f3bd933a91c3c4f7ef3","sha256":"cd1379b857d0019f7ac736e59872484cdd6cda00d13fbe01e40217d7fbed0971","sha512":"4dc583bbb3f793c64693558172a449a1011ecb8723e4626cf2d7d32d09bd2969913a25d13b9493d3550f295504e24273d67556457e43d8949c52368e4937433f","ssdeep":"","tlshash":"2d9002a9944c1310442619d08056185d8970836113118840008bb9613991034051946c","size":49,"data":"","first_seen":"2025-07-26T22:19:45.151938Z","last_seen":"2026-08-18T01:15:33.790491Z","times_seen":2189,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"great-airdrop-xrp.com/?64830428","fqdn":"great-airdrop-xrp.com","domain":"great-airdrop-xrp.com","tld":"com"},"ip":{"addr":"104.21.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"415ba2458e428f873699bb2b88fada9a","sha1":"195bad8317b45e973f49321514c06a776a36c522","sha256":"fa0609796202467364bb740d31631d1fcf323b46501bd8c4ea0f321ff84839bc","sha512":"1f74f8a2bf8f7d242f5f8b29b2882d6439b086067372831768a9a4c5d0a4917309a4d69170f45b3a4b50151898c74ca81dfb738c93d8c67ffde3c81d0b089892","ssdeep":"12288:yKOfLptPHyCdKUilT7V/rY8EIvNM5odpLjWUrM4YPJ:ylDdKTvrY8E3ydJmFJ","tlshash":"aab48ea07624bcd77d56d999b46afd9a23d401b36dfe109808377f510aff74ac82ac80","size":495608,"data":"","first_seen":"2025-09-08T04:26:18.714521Z","last_seen":"2025-09-08T04:26:18.714521Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"great-airdrop-xrp.com/?64830428","fqdn":"great-airdrop-xrp.com","domain":"great-airdrop-xrp.com","tld":"com"},"ip":{"addr":"104.21.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"2dca19f55d9aacb3ef35b8ec9b2f0a6c","sha1":"ad423c857aeebd131fc23baead046951ea25d267","sha256":"ea40fdf2f51687fc44c621633fff10c50cf63c0daa55caa983f8bd43bf109081","sha512":"e024d2790519e6a43fc81e57246c806265f65043282ae06eae72d331713ca32e00de080c1adee131add2cb77796b5db80c87a7d0cf92db3c89e8e3c5a3d5fcab","ssdeep":"12288:OKOfLptPHyCdKUilT7V/rY8EIvNM5odpLjWUrc:OlDdKTvrY8E3ydJ6","tlshash":"3fa48ea07624bcdb7d55d9a9b46afd9e22d401b36dfe109408377f510aff74ac82ac80","size":465701,"data":"","first_seen":"2025-09-08T04:26:18.717212Z","last_seen":"2025-09-08T04:26:18.717212Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"great-airdrop-xrp.com/?64830428","fqdn":"great-airdrop-xrp.com","domain":"great-airdrop-xrp.com","tld":"com"},"ip":{"addr":"104.21.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"1ad9a450854c16de4c0dd15873942359","sha1":"46f0d78ec03740ef4d91707c3e0bee840f9958a4","sha256":"a82b80edb40205172f029cf2a20f76a2b684641cf2597e645deb16856f83828e","sha512":"351dbc8597b96e41497342b2b1f130249107339eeb4b9ab26c7ea75fd8c947a74cf9251b82d722788d0e7c6e5661f66f88ee10dbda6c37d9c53f6f3998d081eb","ssdeep":"12288:4KOfLptPHyCdKUilT7V/rY8EIvNM5odpLjWUrM4YPp:4lDdKTvrY8E3ydJGFp","tlshash":"72b49ea07620bcd77d56d999b46afd9e22d401b36dfe109848377f510aff74ac82ac80","size":495989,"data":"","first_seen":"2025-09-08T04:26:18.719447Z","last_seen":"2025-09-08T04:26:18.719447Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"great-airdrop-xrp.com/?64830428","fqdn":"great-airdrop-xrp.com","domain":"great-airdrop-xrp.com","tld":"com"},"ip":{"addr":"104.21.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"fae289f346b17494d1f7974148a2b3b8","sha1":"6ba1f95910f831b79fe088608359d97804423607","sha256":"5ccba7eef5fc9c813066b463d337db933274a4c13007023e1f074c37e920d410","sha512":"74bf59474c06c3e6801c5d17b87d9eecbf090167804a4be6105ba64f5a4a0b010aebe5842a393d0cf1afc10fe6016b05e44ec2679f925b6891e45aa8a7801daa","ssdeep":"","tlshash":"352132b70441757afe7b3e1b7a8e788b1aa7eb4471cbe6e5c35675285c22b4004e0278","size":1230,"data":"","first_seen":"2025-07-26T22:19:45.18074Z","last_seen":"2026-08-18T01:15:33.781815Z","times_seen":2194,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"great-airdrop-xrp.com/?64830428","fqdn":"great-airdrop-xrp.com","domain":"great-airdrop-xrp.com","tld":"com"},"ip":{"addr":"104.21.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"f827408d9dd24205bf3eb49bb6e53d80","sha1":"c2688bcd07b7c06ca27df78368e069a44733a709","sha256":"46a2aa1f34d884ae88b099cea7fc4188fdb73b625e2ff1848377f6643bfb8c11","sha512":"53662f7506984d0ed03f80ed675df92883eb6a8c768625c41cca0f2548e271556da881b1d02c753de9986f91459b67ad1f2a658d7f4012f95da5cc13b6b32743","ssdeep":"","tlshash":"94e0e73515a1354879e31ff90af5fd4445b2443bc2f56f70e34cc0215dd5cc83014498","size":292,"data":"","first_seen":"2025-09-08T04:26:18.722311Z","last_seen":"2025-09-08T04:26:18.722311Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"great-airdrop-xrp.com/?64830428","fqdn":"great-airdrop-xrp.com","domain":"great-airdrop-xrp.com","tld":"com"},"ip":{"addr":"104.21.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"dbaa4a66dc37eacb00687c35ec956720","sha1":"df1258acac89843b2c9c45acd28cab52e4511cef","sha256":"9af508d3a2ccdba07427a908686747bbbb66e49baf52563475ccac20aac32378","sha512":"5e15127f3bad46174da3724634accdd0bcbe70a68e1cec1582676a882ccd462fe7d324cef4331ea44af2e9509eaa41eeee06528a950cf7c0732ae384209cdaf7","ssdeep":"","tlshash":"20015efdf453a114a0b728b66be6e8407d030457e68bed25794ca840af94ac2d9816a0","size":821,"data":"","first_seen":"2025-09-08T04:26:18.724383Z","last_seen":"2025-09-08T04:26:18.724383Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"great-airdrop-xrp.com/?64830428","fqdn":"great-airdrop-xrp.com","domain":"great-airdrop-xrp.com","tld":"com"},"ip":{"addr":"104.21.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"822b23a0ca5c4caec80b7ae0a26fe6eb","sha1":"f6ef688a112acc3ad438eac11ecd71b0ac2c66de","sha256":"d03819cce200271218343c8deac7f6c27600deb5648aaf185e43212e3877958f","sha512":"39ec83e2d83df2d7e39c01e3c6b16669e3cb57e76367bb0fceb34e249374c748292213034957b9e881fcb591865b60e2ed6ca44c0221e8c176be81ba85e672b0","ssdeep":"","tlshash":"36b01264e5028af800332eb47dbc83507c3d9480f64a2a02f0fcb402e070c039c42ee0","size":109,"data":"","first_seen":"2025-05-29T12:37:23.557068Z","last_seen":"2025-09-08T04:26:18.726399Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":[{"md5":"8615f7f75e45f3728e069a4ae48744ea","sha1":"e688bed13c6c05167a712fcbd3c58b0c50df638d","sha256":"27b7d34775ed9709bee4598a8e7d745fac8a0a389b28ccbd995583e3e8ac5132","sha512":"2f2e09fba0ff25630b60dabc4dd358b1fdd4c389de11a0e5c5eb708667d5100a12b67da221b08493d76538e772b0b9fdf8de47772fc19db0d8146f0a34d5a1d6","ssdeep":"3072:AeDiPtZuVO1TwwiNvgLODKjuvK+QvZP/CFFaTuuXqRTWEkAJ+QqRC79BI7BfQ7rQ:ALvuVYOgLOjZKCNMvCECZqKvzMHB4el","tlshash":"5c34e863bf00237d0257c6f6a71b32a5f326d9bda3124490d8ad42b46793ca9e53f9c4","size":231785,"data":"","first_seen":"2025-09-08T04:26:18.727327Z","last_seen":"2025-09-08T04:26:18.727327Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"console":null},"http":[{"url":{"schema":"https","addr":"great-airdrop-xrp.com/files/br.jpg","fqdn":"great-airdrop-xrp.com","domain":"great-airdrop-xrp.com","tld":"com"},"ip":{"addr":"104.21.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://great-airdrop-xrp.com/?64830428","date":"2025-09-08T04:25:50.513Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"great-airdrop-xrp.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Sep 2025 14:53:18 GMT","end":"Tue, 02 Dec 2025 15:51:51 GMT"},"fingerprint":{"sha1":"9E:99:27:9D:46:0E:D1:9E:61:DA:0F:E0:21:55:A1:B5:28:42:4B:CC","sha256":"F8:5C:54:C6:FC:E3:0E:4C:76:3D:B4:EF:C6:AD:C8:E5:BF:BF:CC:1B:48:8D:24:DF:D5:A5:FD:2C:58:3F:55:F7"}}},"request":{"raw":"GET /files/br.jpg HTTP/1.1\r\nHost: great-airdrop-xrp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://great-airdrop-xrp.com/?64830428\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 08 Sep 2025 04:25:50 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 133296\r\nlast-modified: Wed, 03 Sep 2025 15:16:44 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"68b85bdc-208b0\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DCYlFm0Y56Xmpg9TgO0ssDwh8nVzPIfqC%2BFrBLPSxG7FRk2W08AR%2FpfCpTw9jiNIBc2MZtZyfXKAObtvoZx2ZZYhUrICQ8ysdAjTEtqPIea7zOo%3D\"}]}\r\nvary: accept-encoding\r\ncf-ray: 97bbaf2aaf32b4fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":133296,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 1280x720, components 3","md5":"e9d09382998441ec1f192d85dcc986bb","sha1":"f7f77f23066ce92be1c06a971c2b7b8097beaa64","sha256":"9436d31d607a226f3aee2d97228ccb1d57e7858a2083a2e28f2dd62bb86e5d39","sha512":"759b11787be3217e869f2a87d4126e3f42308e0135a3bcae0482c620ce11322e5c6cf9dbd510fda9315431a39f05b893afac4f21ef740d11f9274a09e93c1da0","ssdeep":"3072:31w3zmurKnF8qO/ey/xDFjUBBacj2GBOwH2X+tDTCs1hs1DA:Fvk4CjDFjUBLj2GVpDL1hsDA","tlshash":"6dd3125498430a47bedb826459f99c88cf09af7b922ce70bc1da999cd050dce8fc1768","first_seen":"2025-05-27T11:15:00.580637Z","last_seen":"2026-02-28T11:36:11.145132Z","times_seen":15,"resource_available":false,"data":null}},"time_used":161,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":76,"receive":85,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"great-airdrop-xrp.com/files/lord.jpg","fqdn":"great-airdrop-xrp.com","domain":"great-airdrop-xrp.com","tld":"com"},"ip":{"addr":"104.21.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://great-airdrop-xrp.com/?64830428","date":"2025-09-08T04:25:50.528Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"great-airdrop-xrp.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Sep 2025 14:53:18 GMT","end":"Tue, 02 Dec 2025 15:51:51 GMT"},"fingerprint":{"sha1":"9E:99:27:9D:46:0E:D1:9E:61:DA:0F:E0:21:55:A1:B5:28:42:4B:CC","sha256":"F8:5C:54:C6:FC:E3:0E:4C:76:3D:B4:EF:C6:AD:C8:E5:BF:BF:CC:1B:48:8D:24:DF:D5:A5:FD:2C:58:3F:55:F7"}}},"request":{"raw":"GET /files/lord.jpg HTTP/1.1\r\nHost: great-airdrop-xrp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://great-airdrop-xrp.com/?64830428\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 08 Sep 2025 04:25:50 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 31459\r\nlast-modified: Wed, 03 Sep 2025 15:16:44 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"68b85bdc-7ae3\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ElBDUhXzJKK0YLI6gzhFi9ZFQv3Uuo41eaRiH4RTb7oSlywAmr2SQl4o%2BWbqz1k8nfI7BQ4MTVLv%2FWvR6%2Bv3jCF5GRUzFGaiYv62b22xh1P69B0%3D\"}]}\r\nvary: accept-encoding\r\ncf-ray: 97bbaf2abf36b4fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":31459,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 400x400, components 3","md5":"0643a211ceafb29512708d337af8c0c5","sha1":"ad0b6bc4f0252606debc8b6c67f8f9675d9b876c","sha256":"07b350630f931a7ee17d903b01a7d3441530560fcdc0eb847e1fe6b7572b52e2","sha512":"2d1df466ffd8323c69026bb9f5dfc0851d6e117dfecfb1dedf048759d77c6ffa067a61d8e255826532ab6c51a17df94597847c7582eea926e3d626799490a2cb","ssdeep":"768:r9lMEFkew3ynXdJcccM5OAMbM+CeX9Db8b:lzCccgOl7X9Dbk","tlshash":"1ce2e0cf51c64b05d6fe1fb595624b32ef60b834a7a00dcf41d52561f368e382d978a4","first_seen":"2025-05-27T11:15:00.57714Z","last_seen":"2026-02-28T11:36:11.152094Z","times_seen":17,"resource_available":false,"data":null}},"time_used":94,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":66,"receive":28,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"glyph.medium.com/font/f50d520/0-3j_4g_6bu_6c4_6c8_6c9_6cc_6cd_6ci_6cm/charter-700-normal.woff","fqdn":"glyph.medium.com","domain":"medium.com","tld":"com"},"ip":{"addr":"162.159.153.4","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://great-airdrop-xrp.com/?64830428","date":"2025-09-08T04:25:50.846Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"medium.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 19 Jul 2025 18:59:27 GMT","end":"Fri, 17 Oct 2025 19:59:23 GMT"},"fingerprint":{"sha1":"02:23:5E:98:7B:89:75:41:2D:B9:6E:49:B5:FB:DE:50:5F:92:21:95","sha256":"E2:04:01:D8:27:80:EE:9D:82:C8:5B:2F:78:A7:4E:04:A8:F8:06:7E:2A:E0:CE:3A:18:48:EB:A1:5B:B4:E8:CC"}}},"request":{"raw":"GET /font/f50d520/0-3j_4g_6bu_6c4_6c8_6c9_6cc_6cd_6ci_6cm/charter-700-normal.woff HTTP/1.1\r\nHost: glyph.medium.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://great-airdrop-xrp.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://static.tumblr.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 08 Sep 2025 04:25:51 GMT\r\ncontent-type: application/font-woff\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Accept, Cache-Control, Content-Type, Cookie, DNT, Origin, User-Agent, X-Client-Date, X-Obvious-Cid, X-Opentracing, X-Xsrf-Token, ot-tracer-sampled, ot-tracer-spanid, ot-tracer-traceid\r\naccess-control-allow-methods: GET, POST, PUT, DELETE\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 86400\r\ncache-control: public, max-age=31536000\r\netag: v2-f50d520\r\nexpires: Tue, 08 Sep 2026 04:25:51 GMT\r\nx-envoy-upstream-service-time: 63\r\ncf-cache-status: HIT\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nset-cookie: _cfuvid=wvxmjC8b1o_o7hw5JQq2FPqyHoGn9nv2OYSMZKkwSf4-1757305551218-0.0.1.1-604800000; path=/; domain=.medium.com; HttpOnly; Secure; SameSite=None\r\nserver: cloudflare\r\ncf-ray: 97bbaf2d0cf92efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":9912,"size_decoded":0,"mime_type":"application/font-woff","magic":"Web Open Font Format, TrueType, length 9912, version 0.0","md5":"d3bbbb1fafadd13d0421bea9fcf3644b","sha1":"2739559563b37109ea6bce389ccccabef3a73d29","sha256":"41532aec4c3a3a0747ca853b064ef7a96483a95798a6526974ec043997e2ccf9","sha512":"0beea971d8bd901f1615a4bb75f7f878569dcd58a75d0bd987b5d80ee8a09607bd1ab1c8baafc38e15a07b164aa8f720c99e7bd5e234a1a10bf3425b9061e990","ssdeep":"192:f3wwV3fFqGxIjgYog1wnzcRSZpVK+Kxjyxg8X+QmBaSLScUBEggDRQ:f3x1fF24gQzSypnGjyq8X00egngDK","tlshash":"6512a0f85f97d5c6c5951f702873fb1319c0b9c10ab9c2540776a8d8b9f2b821c4ee96","first_seen":"2023-04-18T03:45:43Z","last_seen":"2026-06-28T08:40:33.744261Z","times_seen":29,"resource_available":false,"data":null}},"time_used":405,"timings":{"blocked":35,"dns":3,"connect":1,"send":0,"wait":339,"receive":0,"ssl":23},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"glyph.medium.com/font/78ce731/0-3j_4g_6bu_6c4_6c8_6c9_6cc_6cd_6ci_6cm/fell-400-normal.woff","fqdn":"glyph.medium.com","domain":"medium.com","tld":"com"},"ip":{"addr":"162.159.153.4","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://great-airdrop-xrp.com/?64830428","date":"2025-09-08T04:25:50.842Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"medium.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 19 Jul 2025 18:59:27 GMT","end":"Fri, 17 Oct 2025 19:59:23 GMT"},"fingerprint":{"sha1":"02:23:5E:98:7B:89:75:41:2D:B9:6E:49:B5:FB:DE:50:5F:92:21:95","sha256":"E2:04:01:D8:27:80:EE:9D:82:C8:5B:2F:78:A7:4E:04:A8:F8:06:7E:2A:E0:CE:3A:18:48:EB:A1:5B:B4:E8:CC"}}},"request":{"raw":"GET /font/78ce731/0-3j_4g_6bu_6c4_6c8_6c9_6cc_6cd_6ci_6cm/fell-400-normal.woff HTTP/1.1\r\nHost: glyph.medium.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://great-airdrop-xrp.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://static.tumblr.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 08 Sep 2025 04:25:51 GMT\r\ncontent-type: application/font-woff\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Accept, Cache-Control, Content-Type, Cookie, DNT, Origin, User-Agent, X-Client-Date, X-Obvious-Cid, X-Opentracing, X-Xsrf-Token, ot-tracer-sampled, ot-tracer-spanid, ot-tracer-traceid\r\naccess-control-allow-methods: GET, POST, PUT, DELETE\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 86400\r\ncache-control: public, max-age=31536000\r\netag: v2-78ce731\r\nexpires: Tue, 08 Sep 2026 04:25:51 GMT\r\nx-envoy-upstream-service-time: 21\r\ncf-cache-status: HIT\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nset-cookie: _cfuvid=e0FXM1p6ygEp9ZUadkb70xOvqwA73RNLk9hmNJHezJE-1757305551275-0.0.1.1-604800000; path=/; domain=.medium.com; HttpOnly; Secure; SameSite=None\r\nserver: cloudflare\r\ncf-ray: 97bbaf2cfcf12efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14711,"size_decoded":0,"mime_type":"application/font-woff","magic":"Web Open Font Format, TrueType, length 14711, version 1.2","md5":"51834bc9061e563744962a3173ab6405","sha1":"8a3ec81f592145a952cfe94e07c95ea75b7ed854","sha256":"f57137897a4e676f0d2199b79def1a95b253a1a938dff9d8ba10519f3beb2b08","sha512":"083b24904ad980282d36aae0998face7ecad57a830b3299b7ec30926dde3bd97b0303d8f5cfe29150bb29eb62e57b1b67d96aa5483b4fb88b3a91b48d81dbc59","ssdeep":"384:rQ7fRWSsTGF/0fK7iIP98+VrGfdc4r+4Ur:rQzRWSy/0iIP9PVrqTUr","tlshash":"3d62d0f4de3aee02c260ccbeed4bf465ab11f305aa0487854ceac444bd6e7d6959019a","first_seen":"2023-04-18T03:45:43Z","last_seen":"2026-06-28T08:40:33.638331Z","times_seen":30,"resource_available":false,"data":null}},"time_used":467,"timings":{"blocked":34,"dns":3,"connect":1,"send":0,"wait":401,"receive":0,"ssl":23},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn-images-1.medium.com/v2/resize:fill:136:136/1*8I-HPL0bfoIzGied-dzOvA.png","fqdn":"cdn-images-1.medium.com","domain":"medium.com","tld":"com"},"ip":{"addr":"162.159.153.4","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://great-airdrop-xrp.com/?64830428","date":"2025-09-08T04:25:51.283Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"medium.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 19 Jul 2025 18:59:27 GMT","end":"Fri, 17 Oct 2025 19:59:23 GMT"},"fingerprint":{"sha1":"02:23:5E:98:7B:89:75:41:2D:B9:6E:49:B5:FB:DE:50:5F:92:21:95","sha256":"E2:04:01:D8:27:80:EE:9D:82:C8:5B:2F:78:A7:4E:04:A8:F8:06:7E:2A:E0:CE:3A:18:48:EB:A1:5B:B4:E8:CC"}}},"request":{"raw":"GET /v2/resize:fill:136:136/1*8I-HPL0bfoIzGied-dzOvA.png HTTP/1.1\r\nHost: cdn-images-1.medium.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://great-airdrop-xrp.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _cfuvid=5zgu24.2Va8evAJfsFp14RLxA5TtYQWX8uynZLaZIPY-1757305551253-0.0.1.1-604800000\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 08 Sep 2025 04:25:51 GMT\r\ncontent-type: image/png\r\ncontent-length: 5072\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000\r\ncontent-disposition: inline; filename=\"1*8I-HPL0bfoIzGied-dzOvA.png\"\r\ncontent-security-policy: script-src 'none'\r\netag: \"X8vyfwJoSiP97T4SJeCdAu2dzX-ut7dHLbPOnVeUgVY/RImYwOGY4NzNjYmQxYjdlODIzMzFhMjc5ZGY5ZGNjZWJjIg\"\r\nmedium-fulfilled-by: miro-v2/main-20250819-080330-67ec5333a4\r\nx-envoy-upstream-service-time: 74\r\nx-request-id: d8a02c48-37bd-4c33-a55f-7a7c37fea6ce\r\ncf-cache-status: HIT\r\nage: 519084\r\nexpires: Tue, 08 Sep 2026 04:25:51 GMT\r\naccept-ranges: bytes\r\npriority: u=6,i=?0\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nserver: cloudflare\r\ncf-ray: 97bbaf2f8acf56aa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5072,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 136 x 136, 8-bit/color RGBA, non-interlaced","md5":"8518be80b2d7bb3fe92f46d8cc4c6bf9","sha1":"ef99374a5dff9dc4a987673aa3ce6acea3b19ce3","sha256":"03ebfb6ce0b847954241a6a96b79e8222174eb14fd1fa211b57245703cb4bd7a","sha512":"a6ca3c3eefe3a444e618d35ca181657008cc740e18917f7aee37dc5ced27043039a79d2e7379174a6e122e7395594502109bcf6d613679e8acd219537022ebd6","ssdeep":"96:8S8mH2eVAP2hZLihEAMvqR3ChbzJzuKpm1tJLrIhi61BwLUyEnIiWnorOz:8S8OCP2LPji3MpzyPI461c7ArOz","tlshash":"3ca17eec0b8e7f98f49664388e4f8bd2240621085d7c2d05ef2e86f4040f6edb1297c2","first_seen":"2025-09-02T04:14:53.795588Z","last_seen":"2026-02-28T11:36:11.150161Z","times_seen":7,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":19,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"great-airdrop-xrp.com/?64830428","fqdn":"great-airdrop-xrp.com","domain":"great-airdrop-xrp.com","tld":"com"},"ip":{"addr":"104.21.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-09-08T04:25:49.866Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"great-airdrop-xrp.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Sep 2025 14:53:18 GMT","end":"Tue, 02 Dec 2025 15:51:51 GMT"},"fingerprint":{"sha1":"9E:99:27:9D:46:0E:D1:9E:61:DA:0F:E0:21:55:A1:B5:28:42:4B:CC","sha256":"F8:5C:54:C6:FC:E3:0E:4C:76:3D:B4:EF:C6:AD:C8:E5:BF:BF:CC:1B:48:8D:24:DF:D5:A5:FD:2C:58:3F:55:F7"}}},"request":{"raw":"GET /?64830428 HTTP/1.1\r\nHost: great-airdrop-xrp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 08 Sep 2025 04:25:49 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MV7na%2BlXTxM%2FSpS7%2B4FS0J7mCIM8w1gQj3aDg6eHfbOtH%2FTqS094PaeOHnBq%2Fe6dNCU1lXRsFchrOQRj%2FzOuxqipAoaQaKeTRROv3AiHqhbHzzg%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 97bbaf26cf6f56bb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":496601,"size_decoded":0,"mime_type":"text/html","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (64918)","md5":"57ef51a8feb9717a6cf528cef3694e57","sha1":"560b7f701c38eabdd258b81d99ddebd914e80dd3","sha256":"0f03bdd73f943465c6dc2adf8436072356dbda1749bb3c342e00b88147a23442","sha512":"643cadf7b34368df952faf57969f660e7bbbd209483b3b9fdcbd9a0b95187be5ad03af0fa10a9dd116ca3a8a0c88e32bc7afeba65359db09d842a8ce764648b5","ssdeep":"12288:oKOfLptPHyCdKUilT7V/rY8EIvNM5odpLjWUrM4YPQ:olDdKTvrY8E3ydJGFQ","tlshash":"b6b48ea07620bcd77d56d999b46afd9e22d401b36dfe109848377f510aff74ac82ac80","first_seen":"2025-09-08T04:26:18.688075Z","last_seen":"2025-09-08T04:26:18.688075Z","times_seen":1,"resource_available":false,"data":null}},"time_used":102,"timings":{"blocked":18,"dns":4,"connect":1,"send":0,"wait":60,"receive":0,"ssl":17},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"great-airdrop-xrp.com/files/rand.png","fqdn":"great-airdrop-xrp.com","domain":"great-airdrop-xrp.com","tld":"com"},"ip":{"addr":"104.21.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://great-airdrop-xrp.com/?64830428","date":"2025-09-08T04:25:50.517Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"great-airdrop-xrp.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Sep 2025 14:53:18 GMT","end":"Tue, 02 Dec 2025 15:51:51 GMT"},"fingerprint":{"sha1":"9E:99:27:9D:46:0E:D1:9E:61:DA:0F:E0:21:55:A1:B5:28:42:4B:CC","sha256":"F8:5C:54:C6:FC:E3:0E:4C:76:3D:B4:EF:C6:AD:C8:E5:BF:BF:CC:1B:48:8D:24:DF:D5:A5:FD:2C:58:3F:55:F7"}}},"request":{"raw":"GET /files/rand.png HTTP/1.1\r\nHost: great-airdrop-xrp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://great-airdrop-xrp.com/?64830428\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 08 Sep 2025 04:25:50 GMT\r\ncontent-type: image/png\r\ncontent-length: 5008\r\nlast-modified: Wed, 03 Sep 2025 15:16:44 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"68b85bdc-1390\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=h1ynizpXjFHRH9lIs2XiTQTojkG%2Bk2BepcywLSAR8cR8merBdTubsytzUgwceLEvBt8Ispw1WeaoyCG%2BQ8z7b6wnCGfD%2FweKasJJo7YibWd6nsw%3D\"}]}\r\nvary: accept-encoding\r\ncf-ray: 97bbaf2abf33b4fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5008,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 240 x 240, 8-bit/color RGB, non-interlaced","md5":"c0fc690c3446abf9097b141eefd9eb72","sha1":"e22be0323418a3d63ba800734d67afef636cef8a","sha256":"4143cfe5f9c15ee1d73d236db0bb348df7eea04c2646ea908d86eb827a8f68f5","sha512":"180f5c4e5dfa2e5d1193faa22d9a8c917ff84ce4475fb2bb58065b4096a2888bb609534624df311f752cd51bc24082f793dcfb0439a885a0e833b301838605e0","ssdeep":"96:hHlOPpozNL0ryqLg4JTKDtWtBHae3udfURvy77RtK1SAy:hHAPSzNLktXdSAB6cud17CSL","tlshash":"8ca15cb4902825145deedad7bc851cb9ad91664274df0f1d380a0dcba64f0c5d8832c4","first_seen":"2025-05-27T11:15:00.594444Z","last_seen":"2026-02-28T11:36:11.14684Z","times_seen":17,"resource_available":false,"data":null}},"time_used":73,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":73,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"great-airdrop-xrp.com/files/cobb.jpg","fqdn":"great-airdrop-xrp.com","domain":"great-airdrop-xrp.com","tld":"com"},"ip":{"addr":"104.21.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://great-airdrop-xrp.com/?64830428","date":"2025-09-08T04:25:50.529Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"great-airdrop-xrp.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Sep 2025 14:53:18 GMT","end":"Tue, 02 Dec 2025 15:51:51 GMT"},"fingerprint":{"sha1":"9E:99:27:9D:46:0E:D1:9E:61:DA:0F:E0:21:55:A1:B5:28:42:4B:CC","sha256":"F8:5C:54:C6:FC:E3:0E:4C:76:3D:B4:EF:C6:AD:C8:E5:BF:BF:CC:1B:48:8D:24:DF:D5:A5:FD:2C:58:3F:55:F7"}}},"request":{"raw":"GET /files/cobb.jpg HTTP/1.1\r\nHost: great-airdrop-xrp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://great-airdrop-xrp.com/?64830428\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 08 Sep 2025 04:25:50 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 8869\r\nlast-modified: Wed, 03 Sep 2025 15:16:44 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"68b85bdc-22a5\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0qd8F%2BoiXIrQlID%2Fqxw9BblnkR7K4qFjQAzW0P1GeU0ZsqW8V3Hokfe3y%2F1RuBUujGx7UkF9Hoj6Kr3EFoKpjBdOb72yv6T0JgCCtSjICwsXdnM%3D\"}]}\r\nvary: accept-encoding\r\ncf-ray: 97bbaf2acf37b4fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8869,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 216x216, components 3","md5":"87d110199244edba86ee9155ee86f48d","sha1":"4be19b6ff7437a5f2d4ab0e288a93c89dcb74c0e","sha256":"a56b4fbb3e4e8907e341adff687e8843a654ae27da7b73540180e6287054a205","sha512":"41155d2557a1d11b0afef7adee3c51f5ec6c02b158c2da5d2de901fdf5ffe8aa1cad51263fa36a7dabcb8f56b4b1bacaa827fc4fe7e30bc503da965c7ee8d4dc","ssdeep":"192:s9tF+XQnQzJJ0ULwo93V/XZ8Ih0ihEkbe+lLBkt1GlUV:sgXQnWJ5Lwo937pasdLypV","tlshash":"4c029eea9f8c5e48f01ccbbd908087fee711ae26d51a6f8681c24f95733dc466ed40a5","first_seen":"2025-05-27T11:15:00.583346Z","last_seen":"2026-02-28T11:36:11.147642Z","times_seen":17,"resource_available":false,"data":null}},"time_used":67,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":67,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"great-airdrop-xrp.com/files/amonyx.jpg","fqdn":"great-airdrop-xrp.com","domain":"great-airdrop-xrp.com","tld":"com"},"ip":{"addr":"104.21.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://great-airdrop-xrp.com/?64830428","date":"2025-09-08T04:25:50.533Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"great-airdrop-xrp.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Sep 2025 14:53:18 GMT","end":"Tue, 02 Dec 2025 15:51:51 GMT"},"fingerprint":{"sha1":"9E:99:27:9D:46:0E:D1:9E:61:DA:0F:E0:21:55:A1:B5:28:42:4B:CC","sha256":"F8:5C:54:C6:FC:E3:0E:4C:76:3D:B4:EF:C6:AD:C8:E5:BF:BF:CC:1B:48:8D:24:DF:D5:A5:FD:2C:58:3F:55:F7"}}},"request":{"raw":"GET /files/amonyx.jpg HTTP/1.1\r\nHost: great-airdrop-xrp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://great-airdrop-xrp.com/?64830428\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 08 Sep 2025 04:25:50 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 16867\r\nlast-modified: Wed, 03 Sep 2025 15:16:44 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"68b85bdc-41e3\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1ztBuabXVIDQX%2B478i9Z3tF6Cg%2B6Wr9GQuQvpHYYSu6sruttt3YeB2kNhlCdPRwb0KJpOh05thrbAcQFWZywqtza6RVK6kl46VDnVvMqrMNmogI%3D\"}]}\r\nvary: accept-encoding\r\ncf-ray: 97bbaf2acf39b4fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16867,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 400x400, components 3","md5":"33085cfc91b01992332371ed5e4e0711","sha1":"889f599a1cee0e3ac7d5550f0ef020e874444b48","sha256":"bedd7c8f656ccf4a270ace7c616eefcd87a033f7ff3b5e06077d6db06aa1b5b4","sha512":"d0057aa38b5822dc6a7598204056ca2b702395c98663bdc6ec662f94dcef7415e6d3ed97de95697227947c65c60b63ea101695cc41d2bb75be534f1d3059fe64","ssdeep":"384:sflotX+Ui3dE82d7//lGY/Tbjv1spy7rIDJcjO3HfBZL63nA6s01Y4:au+LL2d7/lGY/3T1s43wJc63aQUY4","tlshash":"b772c077ab281065ea0dfe7874d96f813e075e7282f0db9a2302512f8f0a5950dad39c","first_seen":"2025-05-27T11:15:00.597779Z","last_seen":"2026-06-03T10:15:18.836947Z","times_seen":19,"resource_available":false,"data":null}},"time_used":126,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":88,"receive":38,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"great-airdrop-xrp.com/files/proof.jpg","fqdn":"great-airdrop-xrp.com","domain":"great-airdrop-xrp.com","tld":"com"},"ip":{"addr":"104.21.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://great-airdrop-xrp.com/?64830428","date":"2025-09-08T04:25:50.536Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"great-airdrop-xrp.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Sep 2025 14:53:18 GMT","end":"Tue, 02 Dec 2025 15:51:51 GMT"},"fingerprint":{"sha1":"9E:99:27:9D:46:0E:D1:9E:61:DA:0F:E0:21:55:A1:B5:28:42:4B:CC","sha256":"F8:5C:54:C6:FC:E3:0E:4C:76:3D:B4:EF:C6:AD:C8:E5:BF:BF:CC:1B:48:8D:24:DF:D5:A5:FD:2C:58:3F:55:F7"}}},"request":{"raw":"GET /files/proof.jpg HTTP/1.1\r\nHost: great-airdrop-xrp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://great-airdrop-xrp.com/?64830428\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 08 Sep 2025 04:25:50 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 92350\r\nlast-modified: Wed, 03 Sep 2025 15:16:44 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"68b85bdc-168be\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UD9AuH%2BJEboItWv813ZJKyBZJpzS3brV4BQw6Wc7EI4r0fOEpGmPfQC1anTgnCgixoEuNMSCFzz8WNG2%2FvetwnEY290wu%2F9od92SX9reetj0d30%3D\"}]}\r\nvary: accept-encoding\r\ncf-ray: 97bbaf2adf3bb4fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":92350,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, baseline, precision 8, 575x420, components 3","md5":"5167adecce2883a432e49039c147c80e","sha1":"5f1bfa8cf0516d10821f15198bf99506739850d4","sha256":"bfa49ab1e13e2fb1c79edc64c869a52835f724e6d760887f462aa24ca059e70d","sha512":"479ce2ff1863b094b36cd51f0c8f9e34e815dc91016302ca392a1dddbd690e39c5cbae333b074fa4868ab0dd4b20ad73d15db8d918b7ec02cff0bb7e714b09cb","ssdeep":"1536:k4Kk/TuuBzbW62v/MWmC14c3Ug6i9P9V9ofQw2zxqRAEbqADc3pSSoB:koTuSarEijc4woq6wpDefoB","tlshash":"b19302ec06b92863e9f5a591bc58c394fa3491f990df2c27c94d6d3e2c8d2c6b56c310","first_seen":"2023-07-22T18:04:03Z","last_seen":"2026-02-28T11:36:11.155719Z","times_seen":18,"resource_available":false,"data":null}},"time_used":127,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":71,"receive":56,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"great-airdrop-xrp.com/files/xrpp.jpg","fqdn":"great-airdrop-xrp.com","domain":"great-airdrop-xrp.com","tld":"com"},"ip":{"addr":"104.21.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://great-airdrop-xrp.com/?64830428","date":"2025-09-08T04:25:50.536Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"great-airdrop-xrp.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Sep 2025 14:53:18 GMT","end":"Tue, 02 Dec 2025 15:51:51 GMT"},"fingerprint":{"sha1":"9E:99:27:9D:46:0E:D1:9E:61:DA:0F:E0:21:55:A1:B5:28:42:4B:CC","sha256":"F8:5C:54:C6:FC:E3:0E:4C:76:3D:B4:EF:C6:AD:C8:E5:BF:BF:CC:1B:48:8D:24:DF:D5:A5:FD:2C:58:3F:55:F7"}}},"request":{"raw":"GET /files/xrpp.jpg HTTP/1.1\r\nHost: great-airdrop-xrp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://great-airdrop-xrp.com/?64830428\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 08 Sep 2025 04:25:50 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 19009\r\nlast-modified: Wed, 03 Sep 2025 15:16:44 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"68b85bdc-4a41\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KC4ohvTjIsxMEPmTJutx%2BokL5xxBUc2%2BG7lZfiNjTF6fIfwrjTyRiD24psl4YA5ry17nGk8toqTx3dwSDVWCaIZvB7XVF3JY2Vun6xhC84WlfB4%3D\"}]}\r\nvary: accept-encoding\r\ncf-ray: 97bbaf2adf3cb4fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19009,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 331x331, components 3","md5":"a68af475ba74ee65329d4eb5da0d6d62","sha1":"65f5eb232db245bb08d632e904fd6e945f66eefd","sha256":"b59aff113fe4070d5dabf11e187fa1e874675766f35a62004a9c653ca133350e","sha512":"1286e3b247317f4a16561774dd24be7866ad7915ad56a64278632cb80546b2d7638fea8075405745dec759efcbfbc878f5f6bf81c29d8f458feca3d0e24e7ece","ssdeep":"384:sv9zUHqhQbMzJTqDCQHHmhGVLwU/vCh0qkjWHsXYYTQBjC+:89F+CGDCQm0NpDWt17","tlshash":"ac82c0364bc51a03f99e19f27d905daaf9219fd3834503abc95f84ee27375c1146232b","first_seen":"2025-05-27T11:15:00.585989Z","last_seen":"2026-02-28T11:36:11.149382Z","times_seen":17,"resource_available":false,"data":null}},"time_used":91,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":68,"receive":23,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.tumblr.com/bejxdgc/H7hpx23gv/main-branding-base.css","fqdn":"static.tumblr.com","domain":"tumblr.com","tld":"com"},"ip":{"addr":"192.0.77.40","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://great-airdrop-xrp.com/?64830428","date":"2025-09-08T04:25:50.500Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tumblr.com","organization":""},"issuer":{"commonName":"Sectigo ECC Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 25 Feb 2025 00:00:00 GMT","end":"Thu, 26 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"2D:ED:13:34:E5:33:FE:60:8F:86:9C:75:16:32:BD:08:68:F9:A6:14","sha256":"94:0D:5B:51:16:8A:17:28:49:1A:83:D9:4E:7D:DD:27:B3:30:C2:8A:E9:FB:82:65:0F:7B:D5:4D:0D:FF:32:49"}}},"request":{"raw":"GET /bejxdgc/H7hpx23gv/main-branding-base.css HTTP/1.1\r\nHost: static.tumblr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://great-airdrop-xrp.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 08 Sep 2025 04:25:50 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 30 Aug 2019 15:38:57 GMT\r\netag: W/\"0acc5b1299f898a0c3a615c3aab31699\"\r\nx-amz-storage-class: STANDARD_IA\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\naccess-control-allow-methods: GET\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 86400\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-nc: HIT arn 2\r\nserver-timing: a8c-cdn, dc;desc=arn, cache;desc=HIT;dur=0.0\r\nstrict-transport-security: max-age=31536000; preload\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":522276,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"0acc5b1299f898a0c3a615c3aab31699","sha1":"7ed52efc7872582e80fe82a7d824230fbd228991","sha256":"be9a62a389ef14e5aa7c9c7ef9f7bec271ecce1f86aa8f0cdcc9a5e3acf7948e","sha512":"b9f7d037b1732318120588881f08dcf90e532773fdaba60c6d6793a6b053597b34cf578a43c8db49102d3f713fc82c16af4828a3cdd15b4af257b45dc2f24744","ssdeep":"1536:IF+FxWhn0x/Mrr87oKy9zIjAMOiCEm1y64JovSgQ325wF+DpABRiFQtkDrMqSsfp:IiWhVtIjnIQtkEZZ2","tlshash":"ffb48677f6c01318a423cd16d2cb3bbc7a3e992763125dfaea4137758b825db139160a","first_seen":"2023-04-18T03:45:43Z","last_seen":"2026-02-28T11:36:11.154633Z","times_seen":21,"resource_available":false,"data":null}},"time_used":157,"timings":{"blocked":69,"dns":9,"connect":7,"send":0,"wait":17,"receive":0,"ssl":50},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"great-airdrop-xrp.com/files/brad2.jpg","fqdn":"great-airdrop-xrp.com","domain":"great-airdrop-xrp.com","tld":"com"},"ip":{"addr":"104.21.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://great-airdrop-xrp.com/?64830428","date":"2025-09-08T04:25:50.507Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"great-airdrop-xrp.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Sep 2025 14:53:18 GMT","end":"Tue, 02 Dec 2025 15:51:51 GMT"},"fingerprint":{"sha1":"9E:99:27:9D:46:0E:D1:9E:61:DA:0F:E0:21:55:A1:B5:28:42:4B:CC","sha256":"F8:5C:54:C6:FC:E3:0E:4C:76:3D:B4:EF:C6:AD:C8:E5:BF:BF:CC:1B:48:8D:24:DF:D5:A5:FD:2C:58:3F:55:F7"}}},"request":{"raw":"GET /files/brad2.jpg HTTP/1.1\r\nHost: great-airdrop-xrp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://great-airdrop-xrp.com/?64830428\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 08 Sep 2025 04:25:50 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 27244\r\nlast-modified: Wed, 03 Sep 2025 15:16:44 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"68b85bdc-6a6c\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=U7nfQ%2BhnKjc3BTYEEq8Z7uJXDbvK7B7tlFL8elpDXC0bfe7tL531DxqNKxcOALchLi%2Fb5VANttoOVmuCgiAsgq0SDAXwf9M3fk96uugrUDpbowA%3D\"}]}\r\nvary: accept-encoding\r\ncf-ray: 97bbaf2aaf30b4fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":27244,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 400x400, components 3","md5":"8f70d0662f3a21611678eb6ecd3fb33f","sha1":"420466a3c0e9d26a4223f3ef4e563ec1c6a46f33","sha256":"23e3ba952e005e5a0ac4f130741d98017a1033ca1fa5a95b2860dda26623f224","sha512":"702a0d244b03d21e62a43a8f0ba51ef649742f73bc911912f7f13c6161f679d56e5401203e1c44d55f41526923127efa77d193d321c2a095c18a58f2b20ec081","ssdeep":"384:s4enqYlw2/AnFO+gXm/2RDtK4eRt9YsA2HKjwifiPZrqmVqRkJ1X2L9xKOzqktLn:SVoI3WO76A2HbiKxrFVe2GLiOzqkREQ","tlshash":"62c2f18366ec8269d71ed8ba85995b3012583024bae39d1ca1a10c8f9bfc0f97d913e4","first_seen":"2023-11-20T18:09:47Z","last_seen":"2026-07-16T04:01:43.321591Z","times_seen":45,"resource_available":false,"data":null}},"time_used":105,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":77,"receive":28,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"great-airdrop-xrp.com/index_files/1UATD6Vui-5Xa4Vb2QAOtbg_002.png","fqdn":"great-airdrop-xrp.com","domain":"great-airdrop-xrp.com","tld":"com"},"ip":{"addr":"104.21.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://great-airdrop-xrp.com/?64830428","date":"2025-09-08T04:25:50.511Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"great-airdrop-xrp.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Sep 2025 14:53:18 GMT","end":"Tue, 02 Dec 2025 15:51:51 GMT"},"fingerprint":{"sha1":"9E:99:27:9D:46:0E:D1:9E:61:DA:0F:E0:21:55:A1:B5:28:42:4B:CC","sha256":"F8:5C:54:C6:FC:E3:0E:4C:76:3D:B4:EF:C6:AD:C8:E5:BF:BF:CC:1B:48:8D:24:DF:D5:A5:FD:2C:58:3F:55:F7"}}},"request":{"raw":"GET /index_files/1UATD6Vui-5Xa4Vb2QAOtbg_002.png HTTP/1.1\r\nHost: great-airdrop-xrp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://great-airdrop-xrp.com/?64830428\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\nserver: cloudflare\r\ndate: Mon, 08 Sep 2025 04:25:50 GMT\r\ncontent-type: text/html; charset=iso-8859-1\r\nvary: accept-encoding\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5UU%2FBSrVt1EuTedz1sTC%2FGnMNesfMqmmN70IZSWI8ZZhnoRCTZ3B3fmMr8i5UYsY5b9hGkL3eFfpipt%2BeGU7WxFaBiPw3Yr6LgZ%2FE%2BblUVQONfo%3D\"}]}\r\ncf-ray: 97bbaf2aaf31b4fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":283,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document, ASCII text","md5":"8de9da205e4ea9069a66df43f11e683a","sha1":"aaabf6623570dd2e8c44ed3fae216c3cca87c6c4","sha256":"e6c6a116d2a9b7352678db3fbf6272786de59f4219e9f36aac650303cdd7bac9","sha512":"bc17ea5d7b2297b3ad30a54b56931cfa3b2e994c24cd0f33adc6d02efb0bb5a8260d21c198dc6026a6c1dd7794db05928a04030998f0fe78d6c156891e0a11bf","ssdeep":"","tlshash":"a6d02baf9043728b5822156039c215d2274d12fae43b85e86ec6d49792a863ecd9aacc","first_seen":"2025-09-08T04:26:18.70087Z","last_seen":"2025-09-08T04:26:18.70087Z","times_seen":1,"resource_available":false,"data":null}},"time_used":81,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":81,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"great-airdrop-xrp.com/files/brett.jpg","fqdn":"great-airdrop-xrp.com","domain":"great-airdrop-xrp.com","tld":"com"},"ip":{"addr":"104.21.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://great-airdrop-xrp.com/?64830428","date":"2025-09-08T04:25:50.524Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"great-airdrop-xrp.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Sep 2025 14:53:18 GMT","end":"Tue, 02 Dec 2025 15:51:51 GMT"},"fingerprint":{"sha1":"9E:99:27:9D:46:0E:D1:9E:61:DA:0F:E0:21:55:A1:B5:28:42:4B:CC","sha256":"F8:5C:54:C6:FC:E3:0E:4C:76:3D:B4:EF:C6:AD:C8:E5:BF:BF:CC:1B:48:8D:24:DF:D5:A5:FD:2C:58:3F:55:F7"}}},"request":{"raw":"GET /files/brett.jpg HTTP/1.1\r\nHost: great-airdrop-xrp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://great-airdrop-xrp.com/?64830428\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 08 Sep 2025 04:25:50 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 16771\r\nlast-modified: Wed, 03 Sep 2025 15:16:44 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"68b85bdc-4183\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lOtbDx3rR9Fe3IpyVt4I5z%2FYilM9w33tdbt%2BIOOg0Fnql4QMsNHvF5VIV7b9Pz%2FOkMqUAhHetw8XJLQkmf93J6716xn7fY0WOvKFjOUpA0RmsuQ%3D\"}]}\r\nvary: accept-encoding\r\ncf-ray: 97bbaf2abf35b4fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16771,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 400x400, components 3","md5":"4f1f228fc4cee46046ec73209ad877d3","sha1":"96dc7a72565576d8fbbc5a2f716872e56ab29037","sha256":"9627488e58631df6d9c486c54c93db4cb1b4e5d6053d2dc781b302aa56f56cd5","sha512":"9f8db2edc5d293e39c97385370fd5a1ef3d6683717d42781ef864b9dd11cd69390d16aeb98d52d9db4aae38728f99c8096979d6f090ce05cc42d1432268a5340","ssdeep":"384:s82BiTxJYacN0dtkROwAE6eFrdcnE0xYu:D8CSslWrinUu","tlshash":"e672c09923341321cd6e7bf35e8012c2b6d19e2e4953ef4bc1554424e79e2b47d8aacf","first_seen":"2025-05-27T11:15:00.591776Z","last_seen":"2026-02-28T11:36:11.150974Z","times_seen":17,"resource_available":false,"data":null}},"time_used":93,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":69,"receive":24,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"great-airdrop-xrp.com/files/eri.png","fqdn":"great-airdrop-xrp.com","domain":"great-airdrop-xrp.com","tld":"com"},"ip":{"addr":"104.21.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://great-airdrop-xrp.com/?64830428","date":"2025-09-08T04:25:50.534Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"great-airdrop-xrp.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Sep 2025 14:53:18 GMT","end":"Tue, 02 Dec 2025 15:51:51 GMT"},"fingerprint":{"sha1":"9E:99:27:9D:46:0E:D1:9E:61:DA:0F:E0:21:55:A1:B5:28:42:4B:CC","sha256":"F8:5C:54:C6:FC:E3:0E:4C:76:3D:B4:EF:C6:AD:C8:E5:BF:BF:CC:1B:48:8D:24:DF:D5:A5:FD:2C:58:3F:55:F7"}}},"request":{"raw":"GET /files/eri.png HTTP/1.1\r\nHost: great-airdrop-xrp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://great-airdrop-xrp.com/?64830428\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 08 Sep 2025 04:25:50 GMT\r\ncontent-type: image/png\r\ncontent-length: 114644\r\nlast-modified: Wed, 03 Sep 2025 15:16:44 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"68b85bdc-1bfd4\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KJLGRWSP02sjCx6pffWX7UItZx%2B0sS7EYBfsvMvzeJumy2cD6rj427YHmqQVAOfDcauvVfMJqj%2FuKj43tUxaL5NY9NnA3npy0w1QZgqNoPt91mw%3D\"}]}\r\nvary: accept-encoding\r\ncf-ray: 97bbaf2adf3ab4fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":114644,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 270 x 270, 8-bit/color RGBA, non-interlaced","md5":"a9e0bfb426473bc5b037a54d57fc921a","sha1":"9993f9db2e5303edb0474bc5113a543ea2fed7bc","sha256":"4e9c938cbadfe141fcd6bcdb9b99007d82b122468fab826be3af5390323ba841","sha512":"103284e4a026b637cb3c96bb5cab0c1ffc266712957b5934be72b7530277123482d3422e335cd527a2e151550167d674a529d9302c16dcad9544b8c3727707fa","ssdeep":"3072:ee9mi174dTGDU2eXZYg5enjEpLyg+VzqVZke1JQug6An:f54dC9eXZl9+c1ql6An","tlshash":"fcb3121ffae956642c30dd1bb037f206d52ca1ac84c3f389731a525415b3badd0b5e6a","first_seen":"2025-05-27T11:15:00.575892Z","last_seen":"2026-02-28T11:36:11.152874Z","times_seen":17,"resource_available":false,"data":null}},"time_used":152,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":69,"receive":83,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"great-airdrop-xrp.com/files/chad.jpg","fqdn":"great-airdrop-xrp.com","domain":"great-airdrop-xrp.com","tld":"com"},"ip":{"addr":"104.21.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://great-airdrop-xrp.com/?64830428","date":"2025-09-08T04:25:50.537Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"great-airdrop-xrp.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Sep 2025 14:53:18 GMT","end":"Tue, 02 Dec 2025 15:51:51 GMT"},"fingerprint":{"sha1":"9E:99:27:9D:46:0E:D1:9E:61:DA:0F:E0:21:55:A1:B5:28:42:4B:CC","sha256":"F8:5C:54:C6:FC:E3:0E:4C:76:3D:B4:EF:C6:AD:C8:E5:BF:BF:CC:1B:48:8D:24:DF:D5:A5:FD:2C:58:3F:55:F7"}}},"request":{"raw":"GET /files/chad.jpg HTTP/1.1\r\nHost: great-airdrop-xrp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://great-airdrop-xrp.com/?64830428\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 08 Sep 2025 04:25:50 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 25770\r\nlast-modified: Wed, 03 Sep 2025 15:16:44 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"68b85bdc-64aa\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jxK8wAImIIcIi4zb3zUstpigma6l%2FnvK2xV0qwcQ9ag841SAt0Ejeyewx24p3soevA10kyiLv4JBFDchP9c6kS0qRrIDnndcl%2BEA5XZ6UmEEEiE%3D\"}]}\r\nvary: accept-encoding\r\ncf-ray: 97bbaf2adf3eb4fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":25770,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 371x371, components 3","md5":"32baa7aebc7af94ebdd684123d52a7c4","sha1":"a2321724aaf4e0fdf6dbcccee9669f5d746c5ab1","sha256":"bcb499ff6fe4aaf2a9965460e519f26e1a66a603b9c89703598c0b8a41330f55","sha512":"8383f70225b35326c16fac435a826ce8a7057199ac7a70a2f047ff55372a028c9be5a8302d57e4c3c48c522d8e180559d76b51088796fdaebe69727184f700df","ssdeep":"384:spxZe6IKriis/d3SWS4gNdCtFV1tvYgI4ZfUrKqFdlZAWUCJp5p46RJIDUwu:GNOiMd3/g8FV8boUu2+WRzdJnF","tlshash":"2dc2e1993b056c56df3e1db4d0cab344d5e4061ab38b8ad3b1341b2e0fa8745d664cf9","first_seen":"2025-05-27T11:15:00.581871Z","last_seen":"2026-02-28T11:36:11.131652Z","times_seen":17,"resource_available":false,"data":null}},"time_used":91,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":67,"receive":24,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn-images-1.medium.com/fit/c/136/136/1*8I-HPL0bfoIzGied-dzOvA.png","fqdn":"cdn-images-1.medium.com","domain":"medium.com","tld":"com"},"ip":{"addr":"162.159.153.4","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://great-airdrop-xrp.com/?64830428","date":"2025-09-08T04:25:50.831Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"medium.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 19 Jul 2025 18:59:27 GMT","end":"Fri, 17 Oct 2025 19:59:23 GMT"},"fingerprint":{"sha1":"02:23:5E:98:7B:89:75:41:2D:B9:6E:49:B5:FB:DE:50:5F:92:21:95","sha256":"E2:04:01:D8:27:80:EE:9D:82:C8:5B:2F:78:A7:4E:04:A8:F8:06:7E:2A:E0:CE:3A:18:48:EB:A1:5B:B4:E8:CC"}}},"request":{"raw":"GET /fit/c/136/136/1*8I-HPL0bfoIzGied-dzOvA.png HTTP/1.1\r\nHost: cdn-images-1.medium.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://great-airdrop-xrp.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 Moved Permanently\r\ndate: Mon, 08 Sep 2025 04:25:51 GMT\r\ncontent-length: 0\r\naccess-control-allow-origin: *\r\nlocation: /v2/resize:fill:136:136/1*8I-HPL0bfoIzGied-dzOvA.png\r\nx-envoy-upstream-service-time: 0\r\ncf-cache-status: EXPIRED\r\nexpires: Mon, 08 Sep 2025 06:25:51 GMT\r\ncache-control: public, max-age=7200\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nset-cookie: _cfuvid=5zgu24.2Va8evAJfsFp14RLxA5TtYQWX8uynZLaZIPY-1757305551253-0.0.1.1-604800000; path=/; domain=.medium.com; HttpOnly; Secure; SameSite=None\r\nserver: cloudflare\r\ncf-ray: 97bbaf2ceea656b7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5072,"size_decoded":0,"mime_type":"image/png","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-18T00:37:19.234622Z","times_seen":17946405,"resource_available":true,"data":null}},"time_used":432,"timings":{"blocked":-1,"dns":4,"connect":1,"send":0,"wait":393,"receive":0,"ssl":34},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.tumblr.com/bejxdgc/NDhpx23f1/m2.css","fqdn":"static.tumblr.com","domain":"tumblr.com","tld":"com"},"ip":{"addr":"192.0.77.40","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://great-airdrop-xrp.com/?64830428","date":"2025-09-08T04:25:50.498Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tumblr.com","organization":""},"issuer":{"commonName":"Sectigo ECC Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 25 Feb 2025 00:00:00 GMT","end":"Thu, 26 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"2D:ED:13:34:E5:33:FE:60:8F:86:9C:75:16:32:BD:08:68:F9:A6:14","sha256":"94:0D:5B:51:16:8A:17:28:49:1A:83:D9:4E:7D:DD:27:B3:30:C2:8A:E9:FB:82:65:0F:7B:D5:4D:0D:FF:32:49"}}},"request":{"raw":"GET /bejxdgc/NDhpx23f1/m2.css HTTP/1.1\r\nHost: static.tumblr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://great-airdrop-xrp.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 08 Sep 2025 04:25:50 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 30 Aug 2019 15:37:50 GMT\r\netag: W/\"376dd17dad7defb0a0c4f2d99445382f\"\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\naccess-control-allow-methods: GET\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 86400\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-nc: HIT arn 2\r\nserver-timing: a8c-cdn, dc;desc=arn, cache;desc=HIT;dur=1.0\r\nstrict-transport-security: max-age=31536000; preload\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":65054,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (20468)","md5":"376dd17dad7defb0a0c4f2d99445382f","sha1":"4825eaee66af27a78dfaf734ca123b0e8a3bb483","sha256":"29e89f00341d65ffbab6fdfce78f7e42a1daf4bda2e3615ad9466e2ce47760ef","sha512":"4fb4c78b0383a2404a4f00deaf248a28734d301c63f8c80a9ad304653c06786f363454ada2b657465051ef91ddfad9b0575ca4c4fae10073f758d548f9432023","ssdeep":"1536:M3R8NlTfpC5it0JVIcFSTQDiXvxX9+2C+G:IClTfEtVIySqijm","tlshash":"f453e1722844a6402dd7098a518f3dad0c2ec8777b05e01aaf9f48d0adf1f63637579e","first_seen":"2023-04-18T03:45:43Z","last_seen":"2026-02-28T11:36:11.156967Z","times_seen":32,"resource_available":false,"data":null}},"time_used":142,"timings":{"blocked":67,"dns":9,"connect":7,"send":0,"wait":8,"receive":0,"ssl":48},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"great-airdrop-xrp.com/files/jack.jpg","fqdn":"great-airdrop-xrp.com","domain":"great-airdrop-xrp.com","tld":"com"},"ip":{"addr":"104.21.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://great-airdrop-xrp.com/?64830428","date":"2025-09-08T04:25:50.519Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"great-airdrop-xrp.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Sep 2025 14:53:18 GMT","end":"Tue, 02 Dec 2025 15:51:51 GMT"},"fingerprint":{"sha1":"9E:99:27:9D:46:0E:D1:9E:61:DA:0F:E0:21:55:A1:B5:28:42:4B:CC","sha256":"F8:5C:54:C6:FC:E3:0E:4C:76:3D:B4:EF:C6:AD:C8:E5:BF:BF:CC:1B:48:8D:24:DF:D5:A5:FD:2C:58:3F:55:F7"}}},"request":{"raw":"GET /files/jack.jpg HTTP/1.1\r\nHost: great-airdrop-xrp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://great-airdrop-xrp.com/?64830428\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 08 Sep 2025 04:25:50 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 33481\r\nlast-modified: Wed, 03 Sep 2025 15:16:44 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"68b85bdc-82c9\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1wyWOrbpkCSjiL%2FL5l07Zi8%2B1LvHmUZ0E6TscZS9N9gUzbYvUmgoocR%2FPNu8n7yJCegTxpcDJWav7G2zU%2BjtuoGvtCx2H6q2zw1LPPNcopd6tZc%3D\"}]}\r\nvary: accept-encoding\r\ncf-ray: 97bbaf2abf34b4fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":33481,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 400x400, components 3","md5":"fd7b37997a9673f1b8e357b6b8a4be5d","sha1":"fe079718871ee4c2ac8ddd73ec00ccf5a07c3d2e","sha256":"4bce9718d0d37fe90db9f7930816455b16f82596f96c9e7cbc4c7e615def66b6","sha512":"1a69ab12710973493ed96e2e18030dc05c4538df5680427115d9a9317b55ce4d3d8844cdf2a06e8d64cc7ab0d8003c82b2b5fd725a80a505f41ecaa040c74bb9","ssdeep":"768:PkLat34oVYNKqX3EhA/VKDLmdht36N+guL:PkeJRVYwqXUm/ht36VuL","tlshash":"abe201c82e8a7fbdefc83d3120a66549b6156d30ebe20fa90c4ed095173c948de69d51","first_seen":"2025-05-27T11:15:00.590673Z","last_seen":"2026-02-28T11:36:11.158185Z","times_seen":17,"resource_available":false,"data":null}},"time_used":84,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":56,"receive":28,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i.imgur.com/9qMYEXu.jpeg","fqdn":"i.imgur.com","domain":"imgur.com","tld":"com"},"ip":{"addr":"199.232.196.193","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://great-airdrop-xrp.com/?64830428","date":"2025-09-08T04:25:50.531Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.imgur.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Wed, 29 Jan 2025 00:00:00 GMT","end":"Sat, 14 Feb 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E4:72:56:8F:0D:0E:0B:E1:47:1E:79:39:7A:0F:AB:05:30:AF:2A:2D","sha256":"B2:9B:23:54:25:04:8F:9E:C6:BC:84:54:20:8B:AB:34:8C:F1:7E:8A:57:AD:55:F3:C9:40:C3:4E:8B:E5:30:6F"}}},"request":{"raw":"GET /9qMYEXu.jpeg HTTP/1.1\r\nHost: i.imgur.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://great-airdrop-xrp.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/jpeg\r\nlast-modified: Wed, 09 Jul 2025 10:28:17 GMT\r\netag: \"e3a2d8b40f313dba63ba9e144b3302b0\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-cf-pop: IAD89-P1\r\nx-amz-cf-id: kGE4y7o-ckDrZHZSdEx6R1DqenUGWQnw5sJQ2M8ZR_8tPCnH3OfkQA==\r\ncache-control: public, max-age=31536000\r\naccept-ranges: bytes\r\nage: 1592804\r\ndate: Mon, 08 Sep 2025 04:25:50 GMT\r\nx-served-by: cache-iad-kjyo7100138-IAD, cache-hel1410029-HEL\r\nx-cache: Miss from cloudfront, HIT, MISS\r\nx-cache-hits: 157, 0\r\nx-timer: S1757305551.640731,VS0,VE116\r\nstrict-transport-security: max-age=300\r\naccess-control-allow-methods: GET, OPTIONS\r\naccess-control-allow-origin: *\r\nserver: cat factory 1.0\r\nx-content-type-options: nosniff\r\ncontent-length: 46244\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":46244,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, baseline, precision 8, 400x400, components 3","md5":"e3a2d8b40f313dba63ba9e144b3302b0","sha1":"c584bce582d8ab802f3fb46ed59818226c02da4b","sha256":"8a498e7dd45d33617adab09836f32512f463bdc2cf737d0e36702c0eb5783e54","sha512":"43ba487666e158b74f48fe9a5c45694eb1356a1b06aa723ccc9af524f04c3767d3430dfd9a66d5a9297b1a52503444c548cd7bc1cfc1bf59bff405613f2c346e","ssdeep":"768:rAMLn6jmjxiyfdknDKWeIGhydbUqOSSnxSlVcygBguu34L15gHNpTSU7u7QyBPl:rAMrgmBXWJGhydFOSSxS1z4LEN1Di5Pl","tlshash":"ae23f154ee555b081182682a66ab260ed16ccfe4ccfeddc0e40f6dc857c27dc8e116ee","first_seen":"2025-07-27T03:00:40.694705Z","last_seen":"2025-12-30T14:00:20.810553Z","times_seen":6,"resource_available":false,"data":null}},"time_used":363,"timings":{"blocked":92,"dns":10,"connect":28,"send":0,"wait":142,"receive":28,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"great-airdrop-xrp.com/files/dai.jpg","fqdn":"great-airdrop-xrp.com","domain":"great-airdrop-xrp.com","tld":"com"},"ip":{"addr":"104.21.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://great-airdrop-xrp.com/?64830428","date":"2025-09-08T04:25:50.532Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"great-airdrop-xrp.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Sep 2025 14:53:18 GMT","end":"Tue, 02 Dec 2025 15:51:51 GMT"},"fingerprint":{"sha1":"9E:99:27:9D:46:0E:D1:9E:61:DA:0F:E0:21:55:A1:B5:28:42:4B:CC","sha256":"F8:5C:54:C6:FC:E3:0E:4C:76:3D:B4:EF:C6:AD:C8:E5:BF:BF:CC:1B:48:8D:24:DF:D5:A5:FD:2C:58:3F:55:F7"}}},"request":{"raw":"GET /files/dai.jpg HTTP/1.1\r\nHost: great-airdrop-xrp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://great-airdrop-xrp.com/?64830428\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 08 Sep 2025 04:25:50 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 46912\r\nlast-modified: Wed, 03 Sep 2025 15:16:44 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"68b85bdc-b740\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=R3miRyisMPBaiErJ4uvUGqoGocZAHp4rk0D4hUyf1JX9MS1%2BX%2BdOqyG9GTfhkxRgaJW1toSGk3l3PYtGDw%2BGLkKHCByBuYjFtx2OGziMBsXEA0Q%3D\"}]}\r\nvary: accept-encoding\r\ncf-ray: 97bbaf2acf38b4fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":46912,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 400x400, components 3","md5":"cda99caa862778e890a90788c99ea1aa","sha1":"478984f35bfa845dbf9a8d4a3096685cb1e5109a","sha256":"198f7f8d32f771479af26f52469b8dd04dc50cd187aceb661dd3beeffaa2aebc","sha512":"1417b5527259e03cb9b4d1538db5eafc4369ae9dea831b534a08d9580e725d21f10d00bc01a627559d37310bb4f219ec8da2ed63a22fe3432284ac8f9609a6e1","ssdeep":"768:Orhl6wRtk46H/lwXZ/JFST/Sx4w5byK4VQuMbwZ77WAItE6jxfZWN95LCFes2IUZ:OrhlnzMH6XZTa/SV/4VUbwZ77WAItE6y","tlshash":"1423f2f0a380e274f76e493da4f43210713ba9585aab6b532744b8694f9dcd8e06d3d1","first_seen":"2024-08-21T10:18:06.496416Z","last_seen":"2026-02-28T11:36:11.148546Z","times_seen":23,"resource_available":false,"data":null}},"time_used":95,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":53,"receive":42,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"great-airdrop-xrp.com/files/mm.jpg","fqdn":"great-airdrop-xrp.com","domain":"great-airdrop-xrp.com","tld":"com"},"ip":{"addr":"104.21.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://great-airdrop-xrp.com/?64830428","date":"2025-09-08T04:25:50.535Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"great-airdrop-xrp.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Sep 2025 14:53:18 GMT","end":"Tue, 02 Dec 2025 15:51:51 GMT"},"fingerprint":{"sha1":"9E:99:27:9D:46:0E:D1:9E:61:DA:0F:E0:21:55:A1:B5:28:42:4B:CC","sha256":"F8:5C:54:C6:FC:E3:0E:4C:76:3D:B4:EF:C6:AD:C8:E5:BF:BF:CC:1B:48:8D:24:DF:D5:A5:FD:2C:58:3F:55:F7"}}},"request":{"raw":"GET /files/mm.jpg HTTP/1.1\r\nHost: great-airdrop-xrp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://great-airdrop-xrp.com/?64830428\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 08 Sep 2025 04:25:50 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 10338\r\nlast-modified: Wed, 03 Sep 2025 15:16:44 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"68b85bdc-2862\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FbHZb0701QIHLtaIfIvrFOoVUq4AC3dT8727I%2FetNfv0wy%2F56XkvhMLlPOQyfCXNiZruAK%2B5%2F%2BaNV5dIwng55%2BruINvRG6LF%2BqjqslsdaWwVa5Q%3D\"}]}\r\nvary: accept-encoding\r\ncf-ray: 97bbaf2adf3db4fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10338,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 214x214, components 3","md5":"8d2cd1e1728e065984ee1df0b355b0ad","sha1":"30012b2c81c0fbf78849195edd2ee8f5168f0509","sha256":"da82fef95363c69ba16f28b05ec898618a4f974b35c6e0a7a729ed73e5c135c4","sha512":"e48cc37f030aaaa5ade1bdb64ea4de52e7565a8b7342b1e2f5333e56d34d75d4db57c467f5e0e24a768e8747679f5aca8d8d9eeb2a29eafc07f9573bb5b831a5","ssdeep":"192:soL6pdjh1GGb6G9JTA/3ghr6eSk7GEcf7vEgBQOxSP3JiqigTqQBeZ8C:soLGdTdeG3AI8dEcjEgBQ9PZpiaqQG","tlshash":"4f22bf5c9738278ee70e7e3996c9ab3005e08f61be5047e702d18aed9ffd086c942249","first_seen":"2025-05-27T11:15:00.598973Z","last_seen":"2026-02-28T11:36:11.153778Z","times_seen":17,"resource_available":false,"data":null}},"time_used":56,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":54,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}