{"report_id":"2689ef82-02e3-446a-aa03-e431b06e02c1","version":0,"status":"done","tags":[],"date":"2026-09-25T05:42:36Z","url":{"schema":"http","addr":"kii-airdrop.com/","fqdn":"kii-airdrop.com","domain":"kii-airdrop.com","tld":"com"},"ip":{"addr":"172.67.166.60","port":0,"asn":13335,"as":"Cloudflare, Inc.","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"kii-airdrop.com/","fqdn":"kii-airdrop.com","domain":"kii-airdrop.com","tld":"com"},"title":"KiiChain — Airdrop","dom":{"size":7484,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1121)","md5":"dff62c51ca9aa5dddd94faa4a36858a0","sha1":"ec7d4a0b00e55dac251a8751d2f7c364b3d7d988","sha256":"9489d6e1ca181b2435f2d80428a180f6065c1180fe2ab53d6c06db80180f0723","sha512":"e085db6c3449d02dfcba8ee2810d37b4ebb64a086f89503400d5338ce7c087d8716c4fed18ee8c165336e2f37b2dd947ba1bf7ba92704f0f6fccf678396532d2","ssdeep":"96:RxDO+HWB8X4ug9GhrhlGV5o3nGyjlPEKNnWlmPjDrzarhnlCBD5SE1SPthTJPjRF:RxC0WB8NUV5kGyjq6GcBD5SxlmIx","tlshash":"def145b2d4e0145f41a38bcc9591715851e2b30fca8a2444f59f83f59babee6f82784f","dom_hash":"domhash604e9a007b956fe095994f069d976846","first_seen":"2026-09-25T05:42:50.164655Z","last_seen":"2026-09-25T05:44:39.137074Z","times_seen":2,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"kii-airdrop.com/","fqdn":"kii-airdrop.com","domain":"kii-airdrop.com","tld":"com"},"ip":{"addr":"172.67.166.60","port":0,"asn":13335,"as":"Cloudflare, Inc.","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-30T05:42:36Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"31pu2ilhjrkmwpf"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"kii-airdrop.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"kii-airdrop.com","ip":{"addr":"172.67.166.60","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-09-22","domain_rank":0,"first_seen":"2026-09-25T05:42:43.635437Z","last_seen":"2026-09-25T05:42:43.635437Z","alert_count":11,"request_count":11,"received_data":582331,"sent_data":5324,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"www.jx9adrpc5z8094di7.net","ip":{"addr":"172.67.129.86","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-08-31T18:31:43.215942Z","last_seen":"2026-08-31T18:31:43.215942Z","alert_count":0,"request_count":4,"received_data":56137,"sent_data":2525,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"kii-airdrop.com/app.js","fqdn":"kii-airdrop.com","domain":"kii-airdrop.com","tld":"com"},"ip":{"addr":"172.67.166.60","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"554eb39de471114d1d0809185618a312","sha1":"6ac75fb01f80518482471eb4de73cc59926f32aa","sha256":"28d9db652a18067d48aeb1a0705dd6cd65792944d35f1474914eb3994ab95e05","sha512":"e7c65adb501961c7623fc77614274f77d19e0156b085ec3e6f4c7b3a2550cb21ae97380967dd69151cb2477d2dad65a7d36c88ffdcee3114a39fc1ee6f699df8","ssdeep":"96:KH+cb9szzVYLZhoAr4wfrTKxE+6V53peMfCVtE6GiZxA09dYQ36MrhEXTvX4:KH+cyzRYLZhohwXuqzfCQ6tZx5B6A+XE","tlshash":"d3c16339c228157508b643efb7d1a6a8f83510572003aa4577ed4e841ff2865baf2ed8","size":6117,"data":"","first_seen":"2026-09-25T05:42:50.177919Z","last_seen":"2026-09-25T05:44:39.147784Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.jx9adrpc5z8094di7.net/channel/L.V.22/weifile/weifile.html","fqdn":"www.jx9adrpc5z8094di7.net","domain":"jx9adrpc5z8094di7.net","tld":"net"},"ip":{"addr":"172.67.129.86","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"0bb4580d862bac04fce04ce94c7c261d","sha1":"41eafbdccc5b58a83320c2039d037264d73cbb17","sha256":"3c22b1f38206f9c11847709683e16150473b1893da6ac29c55844bdcad5a3bb8","sha512":"737cf62eed6d6dd7ad63bd7046309379d3928f75df39d1c200d5206a143302df411672a9a8109067d181c2ed1262618e28907948bdf75fd78f66d46292def0d9","ssdeep":"","tlshash":"7e3132a968f3d0600a17245d07efe4113467f127a54acc057d6ca298bfe0c2005b7fd8","size":1788,"data":"","first_seen":"2026-09-25T05:42:50.190204Z","last_seen":"2026-09-25T05:44:39.170507Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.jx9adrpc5z8094di7.net/t.js","fqdn":"www.jx9adrpc5z8094di7.net","domain":"jx9adrpc5z8094di7.net","tld":"net"},"ip":{"addr":"172.67.129.86","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"47e94300f28ec557a75db72db0754409","sha1":"7ccf63e0e0deb5b0553266a9607fcd46d0822c7d","sha256":"561d0bcd55a9e9fbcd2cf0de0a3e97d81c42bd1776d8378c046f5ecef6a404f3","sha512":"8db1b2671e4a7a3d64bb90819fa79c9216f396b3aea69e3c63e29513642c38112e8d7a574e637abf74419e1abdcf05581509b091a06ff4cb1c2dc3b4b1ca7a1e","ssdeep":"","tlshash":"9e41f2a659e7602009c3301e0b6f1218917be5b340adef5b7e5c2261af71a3503f1fe1","size":2180,"data":"","first_seen":"2026-08-31T18:33:02.487221Z","last_seen":"2026-09-25T05:44:39.145789Z","times_seen":22,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.jx9adrpc5z8094di7.net/channel/L.V.22/weifile/index.js?1790314926418","fqdn":"www.jx9adrpc5z8094di7.net","domain":"jx9adrpc5z8094di7.net","tld":"net"},"ip":{"addr":"172.67.129.86","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"1477ff5270881716b4f0ad02444c1859","sha1":"99d07fadd272830711f67ecc0795a924b03e9eb2","sha256":"65f36adef5e3dbbe2dbd81be62085555d8c629dcde581dd809810801db831346","sha512":"f47e4435d27599a2a2096b9109fd23c9684c17cba7cbb875f0b578f7af78bb386493191c37b8aa1ceae3ce432c9684d19a2a64b5b9faa5b82fe489c841b74246","ssdeep":"768:gM3zThFJqWx7EyYPWtBBYBS/8XuxzddhycF45cNR83V4VJwCB39E/ynXfe:Hz9qQEyruiDyTcNaKldXfe","tlshash":"a5238eeda7c42adc58b48cd6e533066e63f0db0b2c18326e738bae91b44f720d951725","size":47726,"data":"","first_seen":"2026-08-31T18:33:02.491093Z","last_seen":"2026-09-25T05:44:39.146256Z","times_seen":27,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.jx9adrpc5z8094di7.net/channel/L.V.22/weifile/weifile.html","fqdn":"www.jx9adrpc5z8094di7.net","domain":"jx9adrpc5z8094di7.net","tld":"net"},"ip":{"addr":"172.67.129.86","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"d8751da6f857e6ba355528fc47187a07","sha1":"3c271c8059271e5ff1f48ed0127f280a5919a297","sha256":"6b8653bec2fd37750a66db832eaa9d0529baa960a72ff250a0490236b33d2ee2","sha512":"ce4a65a31a2c238904607861bdcafaf5e18d52a99474a58fc83f19e45d7b867b1d86777a1570c7e70b10c208c925f8959413fe94fb936f0dc9e64f31d955bf0c","ssdeep":"768:I4JJt5z11OWLwAxsCpcOiRJ/wNvobSvJwh2xNH7ZMQlYN:I4JJt5z11OWLwAxsCWB/wNv7i476N","tlshash":"5ad24d3b53c321e2776d76a33742aa4603160dc6e8e3468548e705d99b25a1f0fed78d","size":29951,"data":"","first_seen":"2026-03-04T10:06:21.802937Z","last_seen":"2026-09-25T05:44:39.153049Z","times_seen":159,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.jx9adrpc5z8094di7.net/channel/L.V.22/weifile/weifile.html","fqdn":"www.jx9adrpc5z8094di7.net","domain":"jx9adrpc5z8094di7.net","tld":"net"},"ip":{"addr":"172.67.129.86","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"3df65e228bd8c59ff51fa216d946796e","sha1":"d2f8ffcf9d29a39f6b8f9cf73829b35868385d2e","sha256":"1be5e3621a98017f45e21a2df41e3027ca89c76e0a9b17fff51a5497e827ec77","sha512":"249849474fa1ee0aa6fe84f02e6844c406726b7648caa211463b4dfc088e9fecd02d4e5e73278c7ca930d6b3459e36941344e411b127bdfac73613e6d0ea9b53","ssdeep":"192:O7M9AkU2R/J9L2rS9n0IRiV/qmzhm1sG9GKAJw7EFc/lpnGIgOW8qJ+4qqFpi2m0:2M6kUI/bgS9n0IRiFqmzhmGG9GKAJw7M","tlshash":"ad02329972c1f85217436ba200b7040bf369e89835eac83cf4a5d9d53c7568681baffc","size":8335,"data":"","first_seen":"2026-03-04T10:06:21.801263Z","last_seen":"2026-09-25T05:44:39.154111Z","times_seen":157,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.jx9adrpc5z8094di7.net/channel/L.V.22/weifile/weifile.html","fqdn":"www.jx9adrpc5z8094di7.net","domain":"jx9adrpc5z8094di7.net","tld":"net"},"ip":{"addr":"172.67.129.86","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"471a8208af8e355aa71e5635b2810f36","sha1":"97d6512862904902aabd3bcd3a3e4ba2ebc1ca30","sha256":"6b96c050c129fcee4fc3fed1a45de3f66a1090914550b3665b419a3cd1aab39d","sha512":"7b69dac20fc9a36dad5a3aaa336284b1e469d89d9a31bab9009f90ee6794cd6b65d86bd4f4cf19ff2542ccc3a9ca48f59489259f40ffac2ed733683533a839b4","ssdeep":"384:84iG/FZpJgY/ZQpplmAsZzcjWLyjbUJTT:84iiZlZzcjJbQTT","tlshash":"c042c89b33c9c4accf29dc4f59571c93d5de9367229dc0e2eb835c89ec2a6198174b88","size":12501,"data":"","first_seen":"2026-03-04T10:06:21.804012Z","last_seen":"2026-09-25T05:44:39.154801Z","times_seen":158,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kii-airdrop.com/translations.js","fqdn":"kii-airdrop.com","domain":"kii-airdrop.com","tld":"com"},"ip":{"addr":"172.67.166.60","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"a774ac1ceb7f981df6c2cbc09ca89a1e","sha1":"ac806ecf69b4d0df2a2707e1e02b32cc97c5bd5a","sha256":"b7d757dab025999e00254045a5d4f44f4bddf1b3ecda8b6d6465382fa81a1cdc","sha512":"29dae6674dbd490e02ebc7456974a64d855791f3d4c4f95d9dc708c7f4eaac34ec9a1292bb6b385b22a045039c6d2476ea8626865df7fe1519215809f04f9117","ssdeep":"384:xWYh4Y4m8siRoqQx8vXcNugqkFlc72UvFA75ugz1DEZQEul/wMbx:xFDesiIx8vsNdqEyy5ugzpEZQEulJ","tlshash":"ac82fafa579a23501458395ff14c7a31e4a84c3bbf2ab5e0f44c4029afd996dc13aeb1","size":18840,"data":"","first_seen":"2026-09-25T05:42:50.175088Z","last_seen":"2026-09-25T05:44:39.139645Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"kii-airdrop.com/assets/airdrop-background.jpeg","fqdn":"kii-airdrop.com","domain":"kii-airdrop.com","tld":"com"},"ip":{"addr":"172.67.166.60","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kii-airdrop.com/","date":"2026-09-25T05:42:04.442Z","timestamp":1790314924442,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kii-airdrop.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 23 Sep 2026 03:36:06 GMT","end":"Tue, 22 Dec 2026 03:36:05 GMT"},"fingerprint":{"sha1":"3B:15:6D:FE:0E:0A:0D:D4:4B:A6:D5:37:2A:C1:FD:56:29:F0:47:51","sha256":"86:DD:A7:7B:DF:E2:16:1F:CF:D8:81:01:75:40:81:07:49:BB:18:22:D0:59:88:C1:66:26:B5:01:70:35:23:F2"}}},"request":{"raw":"GET /assets/airdrop-background.jpeg HTTP/1.1\r\nHost: kii-airdrop.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kii-airdrop.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 25 Sep 2026 05:42:05 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Wed, 23 Sep 2026 06:57:25 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6ab37855-47060\"\r\nexpires: Sun, 25 Oct 2026 05:42:05 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=m4udRRS49x15mWLXpi%2F8vYlhGlCmYQVKWZ5ue8rxv5IHH3%2BiYydcgIpXpGd7WCuvx%2FB%2FOsK%2BLUFZWkZDbjZskI0IuyVj1EAOEruTv%2FBpnwBuu1IzqH6NJNNpGLuy0MVEofQ%3D\"}]}\r\ncf-cache-status: MISS\r\npriority: u=5,i\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a407b415cd25712d-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":290912,"size_decoded":269246,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 5376x3072, components 3","md5":"111d130e0b5abf1fab8f32a3e916c4f8","sha1":"c7f3401afdf3a5d5ee7735e096cf52dbf09f44aa","sha256":"bca3444c313adce60998b0439a44eaa73e30571f9fe4d575189b96d1ddf41127","sha512":"f5cc55088e2f37f0321923fada040ad27c0aa609483236e4d9d1b473195bab3f5425cb4aa729d2d76362c0fd7e4d4640b3bd5ccb4605c8d9d67c86de9054aa8a","ssdeep":"6144:v2KTOHZfiEqCMkmBGnfgXAM0KbkpqE4adp9RWjj/Ebz8bx:vJTc3qDuoKKbkpcaP9RW/Ebz8bx","tlshash":"6754f167eb02cd97c19c233594d30f193fb749a0e215051be3aa0d3a29bf395bdaa4d1","first_seen":"2026-09-25T05:42:50.168093Z","last_seen":"2026-09-25T05:44:39.149493Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1381,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":871,"receive":510,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"kii-airdrop.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.jx9adrpc5z8094di7.net/statistic/t?c=L.V.22\u0026u=f4b43a2d-823f-4989-8f66-66b78b9752f4\u0026p=%2Fchannel%2FL.V.22%2Fweifile%2Fweifile.html\u0026r=https%3A%2F%2Fkii-airdrop.com%2F","fqdn":"www.jx9adrpc5z8094di7.net","domain":"jx9adrpc5z8094di7.net","tld":"net"},"ip":{"addr":"172.67.129.86","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://www.jx9adrpc5z8094di7.net/channel/L.V.22/weifile/weifile.html","date":"2026-09-25T05:42:06.435Z","timestamp":1790314926435,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jx9adrpc5z8094di7.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 09 Aug 2026 19:06:22 GMT","end":"Sat, 07 Nov 2026 20:02:43 GMT"},"fingerprint":{"sha1":"FD:67:33:50:15:D4:BB:63:B0:9A:C3:65:45:92:95:C9:62:27:2D:4C","sha256":"C6:CE:88:D3:71:1B:D7:C5:C3:E4:78:01:80:8C:C5:9A:2B:0E:D7:F6:42:6F:52:11:FF:EC:1B:13:F3:8B:31:33"}}},"request":{"raw":"POST /statistic/t?c=L.V.22\u0026u=f4b43a2d-823f-4989-8f66-66b78b9752f4\u0026p=%2Fchannel%2FL.V.22%2Fweifile%2Fweifile.html\u0026r=https%3A%2F%2Fkii-airdrop.com%2F HTTP/1.1\r\nHost: www.jx9adrpc5z8094di7.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nOrigin: https://www.jx9adrpc5z8094di7.net\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.jx9adrpc5z8094di7.net/channel/L.V.22/weifile/weifile.html\r\nCookie: server_session_5c178cbc=5c4dab69daa4a1f4c241b3ff621527ca\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ncontent-type: image/gif\r\nserver-timing: cfExtPri\r\npriority: u=6,i=?0\r\ncache-control: max-age=0, must-revalidate, no-cache, no-store, private\r\npragma: no-cache\r\ndate: Fri, 25 Sep 2026 05:42:07 GMT\r\nset-cookie: XSRF-TOKEN=eyJpdiI6Ilo1dXA2S3JDblVnQUdJZDFwMGphc3c9PSIsInZhbHVlIjoia3FFcWhrdHlWSjdCRlhyMnRvblVSZHA1QnN3bU14UW13YmVxK2U5M09jakp3SDRoZTVYZW50VFNpZm1KN3picytOMHJ3NGlIcnB0T1p5VHZlSHFKTWNVbDBEc0RZVnZFSG1oN2tVeTdWUnl3UjRsYk5nak45bCtkL1doTWN6RWEiLCJtYWMiOiI5N2U3ZTE3MGIwMGJiNjZlZjRhZTliNzQ3NTZlODU5ZTg5ODJkYjYxNTdjZTQ2Mzg5NWYyZTEzNzIyY2ZlYmJkIiwidGFnIjoiIn0%3D; expires=Fri, 25 Sep 2026 07:42:06 GMT; Max-Age=7200; path=/; secure; samesite=lax\ncoruna-lab-session=eyJpdiI6ImVjN3BaSnpybUNpbFR5VzRjUThiWVE9PSIsInZhbHVlIjoiZ1Y2TDdqZTI5SWljQlh2TEsremU4ZVQzcDVCc0lRdC84RDZBbktuUjZFdU9wanhqQWxqOFlRRXUrcks1WCs2dUlDR1hiWnI0Z29ESGNWTllsMWNCeFNCUG9qUXEvN3RKL2FMd2tUeG0xL3o2eTN2cVFLNXp4OWxKMG9sQnBOaSsiLCJtYWMiOiIwNDkzZmEyZDczYjdhYTZkM2ViNjQ3ODBjZDE5NTMwMWJkMDBkZDljMDUzOWIzZDE3NzA5MzExYzUwNTBlZWNmIiwidGFnIjoiIn0%3D; expires=Fri, 25 Sep 2026 07:42:06 GMT; Max-Age=7200; path=/; secure; httponly; samesite=lax\r\nstrict-transport-security: max-age=31536000\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YBrNpWrijKv8rWOz6kFZzDVFB18Ins02PabG8tj%2FGg9eanP%2FmnGvccN1fgPFPKW7rcWpwZmbS90JEeErM63wTSa0ly1fK2DEjAm1qePGiqT%2Fa6snTYn1wDTSGM03eOIyDy0EJwQegyPcRAxD\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a407b4223c2f76ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 43\r\n\r\n","headers":null,"cookies":[{"name":"XSRF-TOKEN","value":"eyJpdiI6Ilo1dXA2S3JDblVnQUdJZDFwMGphc3c9PSIsInZhbHVlIjoia3FFcWhrdHlWSjdCRlhyMnRvblVSZHA1QnN3bU14UW13YmVxK2U5M09jakp3SDRoZTVYZW50VFNpZm1KN3picytOMHJ3NGlIcnB0T1p5VHZlSHFKTWNVbDBEc0RZVnZFSG1oN2tVeTdWUnl3UjRsYk5nak45bCtkL1doTWN6RWEiLCJtYWMiOiI5N2U3ZTE3MGIwMGJiNjZlZjRhZTliNzQ3NTZlODU5ZTg5ODJkYjYxNTdjZTQ2Mzg5NWYyZTEzNzIyY2ZlYmJkIiwidGFnIjoiIn0%3D","quoted":false,"path":"/","expires":"2026-09-25T07:42:06Z","raw_expires":"Fri, 25 Sep 2026 07:42:06 GMT","max_age":7200,"secure":true,"http_only":false,"same_site":"Lax","partitioned":false,"raw":"XSRF-TOKEN=eyJpdiI6Ilo1dXA2S3JDblVnQUdJZDFwMGphc3c9PSIsInZhbHVlIjoia3FFcWhrdHlWSjdCRlhyMnRvblVSZHA1QnN3bU14UW13YmVxK2U5M09jakp3SDRoZTVYZW50VFNpZm1KN3picytOMHJ3NGlIcnB0T1p5VHZlSHFKTWNVbDBEc0RZVnZFSG1oN2tVeTdWUnl3UjRsYk5nak45bCtkL1doTWN6RWEiLCJtYWMiOiI5N2U3ZTE3MGIwMGJiNjZlZjRhZTliNzQ3NTZlODU5ZTg5ODJkYjYxNTdjZTQ2Mzg5NWYyZTEzNzIyY2ZlYmJkIiwidGFnIjoiIn0%3D; expires=Fri, 25 Sep 2026 07:42:06 GMT; Max-Age=7200; path=/; secure; samesite=lax"},{"name":"coruna-lab-session","value":"eyJpdiI6ImVjN3BaSnpybUNpbFR5VzRjUThiWVE9PSIsInZhbHVlIjoiZ1Y2TDdqZTI5SWljQlh2TEsremU4ZVQzcDVCc0lRdC84RDZBbktuUjZFdU9wanhqQWxqOFlRRXUrcks1WCs2dUlDR1hiWnI0Z29ESGNWTllsMWNCeFNCUG9qUXEvN3RKL2FMd2tUeG0xL3o2eTN2cVFLNXp4OWxKMG9sQnBOaSsiLCJtYWMiOiIwNDkzZmEyZDczYjdhYTZkM2ViNjQ3ODBjZDE5NTMwMWJkMDBkZDljMDUzOWIzZDE3NzA5MzExYzUwNTBlZWNmIiwidGFnIjoiIn0%3D","quoted":false,"path":"/","expires":"2026-09-25T07:42:06Z","raw_expires":"Fri, 25 Sep 2026 07:42:06 GMT","max_age":7200,"secure":true,"http_only":true,"same_site":"Lax","partitioned":false,"raw":"coruna-lab-session=eyJpdiI6ImVjN3BaSnpybUNpbFR5VzRjUThiWVE9PSIsInZhbHVlIjoiZ1Y2TDdqZTI5SWljQlh2TEsremU4ZVQzcDVCc0lRdC84RDZBbktuUjZFdU9wanhqQWxqOFlRRXUrcks1WCs2dUlDR1hiWnI0Z29ESGNWTllsMWNCeFNCUG9qUXEvN3RKL2FMd2tUeG0xL3o2eTN2cVFLNXp4OWxKMG9sQnBOaSsiLCJtYWMiOiIwNDkzZmEyZDczYjdhYTZkM2ViNjQ3ODBjZDE5NTMwMWJkMDBkZDljMDUzOWIzZDE3NzA5MzExYzUwNTBlZWNmIiwidGFnIjoiIn0%3D; expires=Fri, 25 Sep 2026 07:42:06 GMT; Max-Age=7200; path=/; secure; httponly; samesite=lax"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":43,"size_decoded":1664,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"325472601571f31e1bf00674c368d335","sha1":"2daeaa8b5f19f0bc209d976c02bd6acb51b00b0a","sha256":"b1442e85b03bdcaf66dc58c7abb98745dd2687d86350be9a298a1d9382ac849b","sha512":"717ea0ff7f3f624c268eccb244e24ec1305ab21557abb3d6f1a7e183ff68a2d28f13d1d2af926c9ef6d1fb16dd8cbe34cd98cacf79091dddc7874dcee21ecfdc","ssdeep":"","tlshash":"bf900003ea80c002c2a2c0300e0ccb802b88b0308a28030fb0fc3baeec3a3a20c23000","first_seen":"2023-04-05T06:29:39Z","last_seen":"2026-09-25T11:41:03.70643Z","times_seen":100466,"resource_available":true,"data":null}},"time_used":748,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":748,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kii-airdrop.com/assets/logo-white.png","fqdn":"kii-airdrop.com","domain":"kii-airdrop.com","tld":"com"},"ip":{"addr":"172.67.166.60","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kii-airdrop.com/","date":"2026-09-25T05:42:04.446Z","timestamp":1790314924446,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kii-airdrop.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 23 Sep 2026 03:36:06 GMT","end":"Tue, 22 Dec 2026 03:36:05 GMT"},"fingerprint":{"sha1":"3B:15:6D:FE:0E:0A:0D:D4:4B:A6:D5:37:2A:C1:FD:56:29:F0:47:51","sha256":"86:DD:A7:7B:DF:E2:16:1F:CF:D8:81:01:75:40:81:07:49:BB:18:22:D0:59:88:C1:66:26:B5:01:70:35:23:F2"}}},"request":{"raw":"GET /assets/logo-white.png HTTP/1.1\r\nHost: kii-airdrop.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kii-airdrop.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 25 Sep 2026 05:42:05 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 23 Sep 2026 06:57:26 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6ab37856-2926\"\r\nexpires: Sun, 25 Oct 2026 05:42:05 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fm0lcG%2FZzz0CeEEzjLFPQ2%2FYcsu6fI0bt7CLIiHL2OphEw3c8l%2F9iOdhPBAkcZigBF9sdiOEacqUp0pYksuUQ4MZouHP1iDDVRQ8kR3rgLg80crcNzjAojHoXdKF0uvdDYc%3D\"}]}\r\ncf-cache-status: MISS\r\npriority: u=5,i\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a407b415cd26712d-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10534,"size_decoded":8379,"mime_type":"image/png","magic":"PNG image data, 1648 x 530, 8-bit/color RGBA, non-interlaced","md5":"fda23fba942649eebdab2a09545fd247","sha1":"3e3f7da76d99fbab79dd61d0a2256b1063849382","sha256":"a5910e6d4e74d643814859806403ca4b726a7643271537951177fd14627d9088","sha512":"bf7d28b38515ada65ca07865bf755192929b793bd3f63a9e190c48c92964d7e6afdb75c4f28fbe13a070b601ad6c95cd5bed97477eb3ebbad1b58b0f3c9400e4","ssdeep":"96:+0YlwQmzDQXB0Ixd0oAwHFfib297yBbWX6YC8lwhM1dCWmIO5cZcgOQqgDAmy3L8:+RlVZuiStK7yBbWXVCjNcmrQqY16hi","tlshash":"c522afafe077c4f0ec4706f63d6372975db410ab41d4ad127900d4229ceb854bab266e","first_seen":"2026-03-31T13:28:13.22071Z","last_seen":"2026-09-25T05:44:39.150298Z","times_seen":4,"resource_available":false,"data":null}},"time_used":665,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":665,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"kii-airdrop.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kii-airdrop.com/assets/13971731025ec697-s.p.woff2","fqdn":"kii-airdrop.com","domain":"kii-airdrop.com","tld":"com"},"ip":{"addr":"172.67.166.60","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://kii-airdrop.com/","date":"2026-09-25T05:42:05.211Z","timestamp":1790314925211,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kii-airdrop.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 23 Sep 2026 03:36:06 GMT","end":"Tue, 22 Dec 2026 03:36:05 GMT"},"fingerprint":{"sha1":"3B:15:6D:FE:0E:0A:0D:D4:4B:A6:D5:37:2A:C1:FD:56:29:F0:47:51","sha256":"86:DD:A7:7B:DF:E2:16:1F:CF:D8:81:01:75:40:81:07:49:BB:18:22:D0:59:88:C1:66:26:B5:01:70:35:23:F2"}}},"request":{"raw":"GET /assets/13971731025ec697-s.p.woff2 HTTP/1.1\r\nHost: kii-airdrop.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kii-airdrop.com/styles.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 25 Sep 2026 05:42:05 GMT\r\ncontent-type: font/woff2\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 23 Sep 2026 06:57:21 GMT\r\netag: \"6ab37851-9074\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=c%2FM%2Fi8K441BzHr5VN6GBwHtH0dARqBaDG19Oe43%2Fd0IrtPEgK8rMeOjtd1dDyKKI5YmTMyeOvbTgOoMNxq3zons72hiWASnMX234Nk2CjL%2BFvqS4p%2B7l2Y8MPHwENCib81A%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a407b41a9d69712d-OSL\r\ncontent-length: 36980\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":36980,"size_decoded":37722,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 36980, version 1.0","md5":"d4c68940b772538be3593f0c646de4a0","sha1":"780cf59b7711cee0db291f06922ca66b12b65dcf","sha256":"468d56b6b25b05b70190b6c233d773f6f1770e8579827ce022a57f03fa8002fb","sha512":"9ef888244841c65da84ab26fee2d312bf0410e340df78b10f087c00e6f190cf8abd61cb09e5790dfd7270edaac1bbb7f871031b195a7b2363f389b6be0038e89","ssdeep":"768:HLi1ptmFif/WvZWPAD1lDB55/hMWS/CtVkvIP0t8eY:HLktmFif/WYPe1lod6fkvfueY","tlshash":"d1f2f1730f45f63229562eb8fd398b4e772845856ec18ec68d90a8f8f403f646469a09","first_seen":"2025-09-15T08:14:29.049499Z","last_seen":"2026-09-25T10:29:46.667443Z","times_seen":7565,"resource_available":false,"data":null}},"time_used":827,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":664,"receive":163,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"kii-airdrop.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kii-airdrop.com/translations.js","fqdn":"kii-airdrop.com","domain":"kii-airdrop.com","tld":"com"},"ip":{"addr":"172.67.166.60","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kii-airdrop.com/","date":"2026-09-25T05:42:04.435Z","timestamp":1790314924435,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kii-airdrop.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 23 Sep 2026 03:36:06 GMT","end":"Tue, 22 Dec 2026 03:36:05 GMT"},"fingerprint":{"sha1":"3B:15:6D:FE:0E:0A:0D:D4:4B:A6:D5:37:2A:C1:FD:56:29:F0:47:51","sha256":"86:DD:A7:7B:DF:E2:16:1F:CF:D8:81:01:75:40:81:07:49:BB:18:22:D0:59:88:C1:66:26:B5:01:70:35:23:F2"}}},"request":{"raw":"GET /translations.js HTTP/1.1\r\nHost: kii-airdrop.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kii-airdrop.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 25 Sep 2026 05:42:05 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 23 Sep 2026 17:19:20 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6ab40a18-4999\"\r\nexpires: Fri, 25 Sep 2026 17:42:05 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OWWE9AD4fzzs%2FNPa9geM2eMIfkpYWkMyAWziBfry8EmeEgGX3uQH5Xz9OQU2wwMGv8lYDxeCHqG2%2Fhr1VAnXSdUDRBAifqc4v7bGb1iqK8%2BmqJZqHjr5oAiAFv%2BZEKK3vUg%3D\"}]}\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a407b415bd23712d-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":18841,"size_decoded":9600,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"a774ac1ceb7f981df6c2cbc09ca89a1e","sha1":"ac806ecf69b4d0df2a2707e1e02b32cc97c5bd5a","sha256":"b7d757dab025999e00254045a5d4f44f4bddf1b3ecda8b6d6465382fa81a1cdc","sha512":"29dae6674dbd490e02ebc7456974a64d855791f3d4c4f95d9dc708c7f4eaac34ec9a1292bb6b385b22a045039c6d2476ea8626865df7fe1519215809f04f9117","ssdeep":"384:xWYh4Y4m8siRoqQx8vXcNugqkFlc72UvFA75ugz1DEZQEul/wMbx:xFDesiIx8vsNdqEyy5ugzpEZQEulJ","tlshash":"ac82fafa579a23501458395ff14c7a31e4a84c3bbf2ab5e0f44c4029afd996dc13aeb1","first_seen":"2026-09-25T05:42:50.175088Z","last_seen":"2026-09-25T05:44:39.139645Z","times_seen":2,"resource_available":true,"data":null}},"time_used":881,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":881,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"kii-airdrop.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kii-airdrop.com/app.js","fqdn":"kii-airdrop.com","domain":"kii-airdrop.com","tld":"com"},"ip":{"addr":"172.67.166.60","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kii-airdrop.com/","date":"2026-09-25T05:42:04.436Z","timestamp":1790314924436,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kii-airdrop.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 23 Sep 2026 03:36:06 GMT","end":"Tue, 22 Dec 2026 03:36:05 GMT"},"fingerprint":{"sha1":"3B:15:6D:FE:0E:0A:0D:D4:4B:A6:D5:37:2A:C1:FD:56:29:F0:47:51","sha256":"86:DD:A7:7B:DF:E2:16:1F:CF:D8:81:01:75:40:81:07:49:BB:18:22:D0:59:88:C1:66:26:B5:01:70:35:23:F2"}}},"request":{"raw":"GET /app.js HTTP/1.1\r\nHost: kii-airdrop.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kii-airdrop.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 25 Sep 2026 05:42:05 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 23 Sep 2026 06:56:15 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6ab3780f-17e5\"\r\nexpires: Fri, 25 Sep 2026 17:42:05 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yObLL8UXgSQK67208tP5bNl9%2FzyrfluDeoW0SkXo9rBA764fmGaNrKhxFLPnI4bLzkbe36cf81RtBsu%2BFlsLtxPlp1QsWiCGtIVIR7HIw9OaR7OEs5X4R9713uTtmTf8g%2F0%3D\"}]}\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a407b415bd24712d-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6117,"size_decoded":3017,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with CRLF line terminators","md5":"554eb39de471114d1d0809185618a312","sha1":"6ac75fb01f80518482471eb4de73cc59926f32aa","sha256":"28d9db652a18067d48aeb1a0705dd6cd65792944d35f1474914eb3994ab95e05","sha512":"e7c65adb501961c7623fc77614274f77d19e0156b085ec3e6f4c7b3a2550cb21ae97380967dd69151cb2477d2dad65a7d36c88ffdcee3114a39fc1ee6f699df8","ssdeep":"96:KH+cb9szzVYLZhoAr4wfrTKxE+6V53peMfCVtE6GiZxA09dYQ36MrhEXTvX4:KH+cyzRYLZhohwXuqzfCQ6tZx5B6A+XE","tlshash":"d3c16339c228157508b643efb7d1a6a8f83510572003aa4577ed4e841ff2865baf2ed8","first_seen":"2026-09-25T05:42:50.177919Z","last_seen":"2026-09-25T05:44:39.147784Z","times_seen":2,"resource_available":true,"data":null}},"time_used":723,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":723,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"kii-airdrop.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.jx9adrpc5z8094di7.net/channel/L.V.22/weifile/weifile.html","fqdn":"www.jx9adrpc5z8094di7.net","domain":"jx9adrpc5z8094di7.net","tld":"net"},"ip":{"addr":"172.67.129.86","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://kii-airdrop.com/","date":"2026-09-25T05:42:04.437Z","timestamp":1790314924437,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jx9adrpc5z8094di7.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 09 Aug 2026 19:06:22 GMT","end":"Sat, 07 Nov 2026 20:02:43 GMT"},"fingerprint":{"sha1":"FD:67:33:50:15:D4:BB:63:B0:9A:C3:65:45:92:95:C9:62:27:2D:4C","sha256":"C6:CE:88:D3:71:1B:D7:C5:C3:E4:78:01:80:8C:C5:9A:2B:0E:D7:F6:42:6F:52:11:FF:EC:1B:13:F3:8B:31:33"}}},"request":{"raw":"GET /channel/L.V.22/weifile/weifile.html HTTP/1.1\r\nHost: www.jx9adrpc5z8094di7.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kii-airdrop.com/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 25 Sep 2026 05:42:06 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\nlast-modified: Fri, 11 Sep 2026 20:11:45 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\nset-cookie: server_session_5c178cbc=5c4dab69daa4a1f4c241b3ff621527ca; Max-Age=864000; httponly; path=/\r\nstrict-transport-security: max-age=31536000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dMceDpOh2VMGm1n%2FfqvBFEQjPJLE99BuidP9TVnNB3z6%2BPYaUS8pO5hu%2F8ZxilF87y8qPgt7pH%2BRJ%2Fe4Pm4HF1Vs2QQ7a6Z8xBnookO05XB4Q7DrAGi%2BtrzgQnhMzQ8mffF%2FWF50DO3Koh0A\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: zstd\r\ncf-ray: a407b415fdb5b517-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":[{"name":"server_session_5c178cbc","value":"5c4dab69daa4a1f4c241b3ff621527ca","quoted":false,"path":"/","max_age":864000,"secure":false,"http_only":true,"same_site":"","partitioned":false,"raw":"server_session_5c178cbc=5c4dab69daa4a1f4c241b3ff621527ca; Max-Age=864000; httponly; path=/"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2158,"size_decoded":1839,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"22b4076414de51e909fef47658927bc7","sha1":"b9555a7482e1d68dd3d1e8d93a50e00e1abb9865","sha256":"ef9e23324a43d8f2cf2a9d9e835033c678ee6ea4143a333578f321e7f672a98e","sha512":"99719bef536892bbdc59c9dadd617a2caa4227542cbe5252e92697c471cee90a0aa2d50c103a1bfff99ba0ceeebfa968ff15c2fb1530028bcf77900285af2a3e","ssdeep":"","tlshash":"534133b96ca3d0200a23155d07ffe4057066f513a545cc44bdaca2a9eff0d214ab7fe9","first_seen":"2026-09-25T05:42:50.179602Z","last_seen":"2026-09-25T05:44:39.148709Z","times_seen":2,"resource_available":true,"data":null}},"time_used":1889,"timings":{"blocked":-1,"dns":4,"connect":3,"send":0,"wait":1858,"receive":0,"ssl":25},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kii-airdrop.com/assets/airdrop-frame.webp","fqdn":"kii-airdrop.com","domain":"kii-airdrop.com","tld":"com"},"ip":{"addr":"172.67.166.60","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kii-airdrop.com/","date":"2026-09-25T05:42:04.447Z","timestamp":1790314924447,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kii-airdrop.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 23 Sep 2026 03:36:06 GMT","end":"Tue, 22 Dec 2026 03:36:05 GMT"},"fingerprint":{"sha1":"3B:15:6D:FE:0E:0A:0D:D4:4B:A6:D5:37:2A:C1:FD:56:29:F0:47:51","sha256":"86:DD:A7:7B:DF:E2:16:1F:CF:D8:81:01:75:40:81:07:49:BB:18:22:D0:59:88:C1:66:26:B5:01:70:35:23:F2"}}},"request":{"raw":"GET /assets/airdrop-frame.webp HTTP/1.1\r\nHost: kii-airdrop.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kii-airdrop.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 25 Sep 2026 05:42:05 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 23 Sep 2026 06:57:25 GMT\r\netag: \"6ab37855-efc4\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YANx9dpWKaO9rUuSnsHRQSFTmElJXhRx9sLYy%2F97pdxaW8GESUUak9E5EAtU4UZ0fGJKi4jhemwuNTPBaI%2BFKBZt%2F85SRmGvsPR%2BDbctwm75Q0qiU1sUu7L%2BCw%2BlYSEN12U%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a407b415dd27712d-OSL\r\ncontent-length: 61380\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":61380,"size_decoded":62121,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"7647dfa72c3e1baf0be6dce1e332f68c","sha1":"9db76ca8a228db2d5de47a0b56bd0c637b11f712","sha256":"33aec2b7556eb6a28adaea448a46883bd7e42d19b897d8ff1725e6b9eb3ac5ff","sha512":"28e7e8c0b043804cb6432eeac109037546450982822da38a94caac8715f4362f0dbf7a1c1b1457365cec97e0d4dae7c4db4659cfd025b5326281c77c13d04224","ssdeep":"1536:4GCs5/IO0dclGwQcgoSkayvD3j03MAc6uLnP1NjFOyTb4f/:WGESG1PoSWrA3MhHh//4X","tlshash":"0a53f22f11d378c8a376037435f42f1a7a8698afb4457483a32749a2dc69db5fc6db01","first_seen":"2026-09-25T05:42:50.18109Z","last_seen":"2026-09-25T05:44:39.14094Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1086,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":739,"receive":347,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"kii-airdrop.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kii-airdrop.com/cdn-cgi/trace","fqdn":"kii-airdrop.com","domain":"kii-airdrop.com","tld":"com"},"ip":{"addr":"172.67.166.60","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://kii-airdrop.com/","date":"2026-09-25T05:42:05.340Z","timestamp":1790314925340,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kii-airdrop.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 23 Sep 2026 03:36:06 GMT","end":"Tue, 22 Dec 2026 03:36:05 GMT"},"fingerprint":{"sha1":"3B:15:6D:FE:0E:0A:0D:D4:4B:A6:D5:37:2A:C1:FD:56:29:F0:47:51","sha256":"86:DD:A7:7B:DF:E2:16:1F:CF:D8:81:01:75:40:81:07:49:BB:18:22:D0:59:88:C1:66:26:B5:01:70:35:23:F2"}}},"request":{"raw":"GET /cdn-cgi/trace HTTP/1.1\r\nHost: kii-airdrop.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://kii-airdrop.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/plain\r\nif-modified-since: off\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\naccess-control-allow-origin: *\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Qtz39IGc9BGYQg0QoEOQndPcUZcEQ%2BdSJposQwQXjDT02skKAe1MDou0MIUbL2G%2BTCcD2Slxqq158TzlZaiLQI2mhdGTT0rqO9dGnzVRw8QABPgxkRFK%2Fg5Jr5Nqrdq7uDk%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ndate: Fri, 25 Sep 2026 05:42:05 GMT\r\nserver: cloudflare\r\ncf-ray: a407b41b6d71712d-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":284,"size_decoded":820,"mime_type":"text/plain","magic":"ASCII text","md5":"d9168823d27ee26286c9180986db55a6","sha1":"2533d1f1722e9b9f8f093f5c496579993a2079c7","sha256":"a04bc8d8b69488017b403b671a3eaf25883f50c2bab8e8d00afa08cc97c05575","sha512":"47ea3ea79f9d50592a566058994490ec2387dc17a7be0cc2720f72d080e0ee7af69e8e942ccae05dd7dbf74ed387fbecd2b9970775322412d4a60db3e12d8660","ssdeep":"","tlshash":"abd0e7c7911d1018387d5455076f9644c391445b81577500dce4a900af943e704f5df0","first_seen":"2026-09-25T05:42:50.182524Z","last_seen":"2026-09-25T05:42:50.182524Z","times_seen":1,"resource_available":true,"data":null}},"time_used":4,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":4,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"kii-airdrop.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kii-airdrop.com/assets/78652400eb133ce6-s.p.ttf","fqdn":"kii-airdrop.com","domain":"kii-airdrop.com","tld":"com"},"ip":{"addr":"172.67.166.60","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://kii-airdrop.com/","date":"2026-09-25T05:42:04.429Z","timestamp":1790314924429,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kii-airdrop.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 23 Sep 2026 03:36:06 GMT","end":"Tue, 22 Dec 2026 03:36:05 GMT"},"fingerprint":{"sha1":"3B:15:6D:FE:0E:0A:0D:D4:4B:A6:D5:37:2A:C1:FD:56:29:F0:47:51","sha256":"86:DD:A7:7B:DF:E2:16:1F:CF:D8:81:01:75:40:81:07:49:BB:18:22:D0:59:88:C1:66:26:B5:01:70:35:23:F2"}}},"request":{"raw":"GET /assets/78652400eb133ce6-s.p.ttf HTTP/1.1\r\nHost: kii-airdrop.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://kii-airdrop.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 25 Sep 2026 05:42:05 GMT\r\ncontent-type: application/octet-stream\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 23 Sep 2026 06:57:22 GMT\r\netag: \"6ab37852-12988\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fOicIzCtP5IqpkiCtUiOsS6Z%2FrQf3NUu15TWsGZ1CF8d6nS0PoD%2BvRwJ2vdi%2B0dxECBznbmofH%2BRhd2LssWmLbA0OZ2jaMwZ5oI3jJTbhTeM9oHJQjdrM4WcW%2B4V0eAd9aI%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: a407b415bd21712d-OSL\r\ncontent-length: 76168\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":76168,"size_decoded":76925,"mime_type":"application/octet-stream","magic":"TrueType Font data, 18 tables, 1st \"GDEF\", 30 names, Macintosh, type 1 string, Axial Theory VariableBoldAxial Theory Variable BoldVersion 1.000AxialTheoryVariable-BoldAxialThe","md5":"41091053f9320d26c8187950157f517f","sha1":"884b7b103c843c8d094640ead9db3424637c6ea1","sha256":"013f8bf4ebb6e003858cce34206844281ae0a66ef249834b51511647bdc99894","sha512":"35e9a4cb537a9d615d2872967085e9967eff719ff8225457836cad7749add47978ed5008802ec93e6402bfb2b0aadc3813b09722b94f6cad22e1ba73b42fe681","ssdeep":"1536:IY+l6kVSc+BKQJBjFKGHKiNq2RwLe1whURA1YwfLMDjLJr8r:IYBkVSczQJB0AHTbRA1DfLM14r","tlshash":"1f733a2bab87d5c8d042167547a50e43d7759c343f06d249afaba323a973348ec076bb","first_seen":"2026-09-25T05:42:50.184144Z","last_seen":"2026-09-25T05:44:39.143689Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1067,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":730,"receive":337,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"kii-airdrop.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kii-airdrop.com/favicon.ico","fqdn":"kii-airdrop.com","domain":"kii-airdrop.com","tld":"com"},"ip":{"addr":"172.67.166.60","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kii-airdrop.com/","date":"2026-09-25T05:42:05.742Z","timestamp":1790314925742,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kii-airdrop.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 23 Sep 2026 03:36:06 GMT","end":"Tue, 22 Dec 2026 03:36:05 GMT"},"fingerprint":{"sha1":"3B:15:6D:FE:0E:0A:0D:D4:4B:A6:D5:37:2A:C1:FD:56:29:F0:47:51","sha256":"86:DD:A7:7B:DF:E2:16:1F:CF:D8:81:01:75:40:81:07:49:BB:18:22:D0:59:88:C1:66:26:B5:01:70:35:23:F2"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: kii-airdrop.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kii-airdrop.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\nserver: cloudflare\r\ndate: Fri, 25 Sep 2026 05:42:06 GMT\r\ncontent-type: text/html\r\nvary: Accept-Encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8dyMXCYTeUATp2TaEhG5OrOrLWWGLea6PbzsLjmuBP0y5wmMQtjf9M5KnIrCBhuBLp9D%2BpfCgAfqYxjqOKAQFuNyLs5SvWiAZFVgh9li5MKdMEMJ%2FsMt%2BIzjuPdSD9btFpw%3D\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\ncf-ray: a407b41ded99712d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":58296,"size_decoded":44340,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (56756)","md5":"cbb42513032d6c09e496731ac16c20a9","sha1":"c92f38a701aad58408451d24dd4c47b05f158cf0","sha256":"d189695b2f3bb92369881f2428fa861dca9d9a94c638d9bdc4e2fa747d6f315b","sha512":"3d76f1018afceaba7cbb4083f4a5b5758966ec2aa5d5c6b07d72361782809f7ed4bd34ed9e0c4154d01a2db7192155de8251e5a834dd90b8d9823d916e1b7285","ssdeep":"768:cHJYDDQHVZHIs91TXESJBjgBSp00yCqJ3Z+IYM3WiesRQiULO0bpD9tcNQEfdom2:cmDD6oeFUycwpk06hWp1b99c7VM","tlshash":"8443021803de40a2cd8978d9426f2f3d842a1863da1c94bd1f5b6df4ca0d8a4767f1e9","first_seen":"2024-11-25T13:26:01.204756Z","last_seen":"2026-09-25T11:46:21.174351Z","times_seen":15037,"resource_available":true,"data":null}},"time_used":969,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":812,"receive":157,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"kii-airdrop.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.jx9adrpc5z8094di7.net/t.js","fqdn":"www.jx9adrpc5z8094di7.net","domain":"jx9adrpc5z8094di7.net","tld":"net"},"ip":{"addr":"172.67.129.86","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.jx9adrpc5z8094di7.net/channel/L.V.22/weifile/weifile.html","date":"2026-09-25T05:42:06.408Z","timestamp":1790314926408,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jx9adrpc5z8094di7.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 09 Aug 2026 19:06:22 GMT","end":"Sat, 07 Nov 2026 20:02:43 GMT"},"fingerprint":{"sha1":"FD:67:33:50:15:D4:BB:63:B0:9A:C3:65:45:92:95:C9:62:27:2D:4C","sha256":"C6:CE:88:D3:71:1B:D7:C5:C3:E4:78:01:80:8C:C5:9A:2B:0E:D7:F6:42:6F:52:11:FF:EC:1B:13:F3:8B:31:33"}}},"request":{"raw":"GET /t.js HTTP/1.1\r\nHost: www.jx9adrpc5z8094di7.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.jx9adrpc5z8094di7.net/channel/L.V.22/weifile/weifile.html\r\nCookie: server_session_5c178cbc=5c4dab69daa4a1f4c241b3ff621527ca\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 25 Sep 2026 05:42:06 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 31 Aug 2026 21:09:52 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kVlt28hF45sDOybriFkyIPCmUZYV8ti5XCTFJCpnCQ7QjsoTvezVGwmqAum4S01G8ZldWa2Gpdyl39eAg9ctaiBufVRJiEhlK503C5ddlgufs9EFDw9fB4AQUNnTMVTvx%2FjDRTXfy3GKomGK\"}]}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: \"6a95eda0-884\"\r\nexpires: Fri, 25 Sep 2026 17:01:43 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 2422\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a407b4220c2676ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2180,"size_decoded":1629,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"47e94300f28ec557a75db72db0754409","sha1":"7ccf63e0e0deb5b0553266a9607fcd46d0822c7d","sha256":"561d0bcd55a9e9fbcd2cf0de0a3e97d81c42bd1776d8378c046f5ecef6a404f3","sha512":"8db1b2671e4a7a3d64bb90819fa79c9216f396b3aea69e3c63e29513642c38112e8d7a574e637abf74419e1abdcf05581509b091a06ff4cb1c2dc3b4b1ca7a1e","ssdeep":"","tlshash":"9e41f2a659e7602009c3301e0b6f1218917be5b340adef5b7e5c2261af71a3503f1fe1","first_seen":"2026-08-31T18:33:02.487221Z","last_seen":"2026-09-25T05:44:39.145789Z","times_seen":22,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.jx9adrpc5z8094di7.net/channel/L.V.22/weifile/index.js?1790314926418","fqdn":"www.jx9adrpc5z8094di7.net","domain":"jx9adrpc5z8094di7.net","tld":"net"},"ip":{"addr":"172.67.129.86","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.jx9adrpc5z8094di7.net/channel/L.V.22/weifile/weifile.html","date":"2026-09-25T05:42:06.420Z","timestamp":1790314926420,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jx9adrpc5z8094di7.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 09 Aug 2026 19:06:22 GMT","end":"Sat, 07 Nov 2026 20:02:43 GMT"},"fingerprint":{"sha1":"FD:67:33:50:15:D4:BB:63:B0:9A:C3:65:45:92:95:C9:62:27:2D:4C","sha256":"C6:CE:88:D3:71:1B:D7:C5:C3:E4:78:01:80:8C:C5:9A:2B:0E:D7:F6:42:6F:52:11:FF:EC:1B:13:F3:8B:31:33"}}},"request":{"raw":"GET /channel/L.V.22/weifile/index.js?1790314926418 HTTP/1.1\r\nHost: www.jx9adrpc5z8094di7.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.jx9adrpc5z8094di7.net/channel/L.V.22/weifile/weifile.html\r\nCookie: server_session_5c178cbc=5c4dab69daa4a1f4c241b3ff621527ca\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 25 Sep 2026 05:42:06 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 11 Sep 2026 20:11:45 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9HfK5t3JJkikaFSJ%2BCtzfA%2FvxbP0ZPvCcc%2FiueddEV3zGz%2FIZH2T8hATxES5hYp2v5D23p9enyxU1TDr%2FU73YgGSFLu72eIv%2Bwyj%2BwFqssebE%2FC5kOnMKUvIYVhlkCrcYrzUwS9C%2FzECwI1S\"}]}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6aa46081-ba6e\"\r\nexpires: Fri, 25 Sep 2026 17:42:06 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a407b4222c2a76ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":47726,"size_decoded":22033,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (47726), with no line terminators","md5":"1477ff5270881716b4f0ad02444c1859","sha1":"99d07fadd272830711f67ecc0795a924b03e9eb2","sha256":"65f36adef5e3dbbe2dbd81be62085555d8c629dcde581dd809810801db831346","sha512":"f47e4435d27599a2a2096b9109fd23c9684c17cba7cbb875f0b578f7af78bb386493191c37b8aa1ceae3ce432c9684d19a2a64b5b9faa5b82fe489c841b74246","ssdeep":"768:gM3zThFJqWx7EyYPWtBBYBS/8XuxzddhycF45cNR83V4VJwCB39E/ynXfe:Hz9qQEyruiDyTcNaKldXfe","tlshash":"a5238eeda7c42adc58b48cd6e533066e63f0db0b2c18326e738bae91b44f720d951725","first_seen":"2026-08-31T18:33:02.491093Z","last_seen":"2026-09-25T05:44:39.146256Z","times_seen":27,"resource_available":true,"data":null}},"time_used":834,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":546,"receive":288,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kii-airdrop.com/","fqdn":"kii-airdrop.com","domain":"kii-airdrop.com","tld":"com"},"ip":{"addr":"172.67.166.60","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-25T05:42:03.358Z","timestamp":1790314923358,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kii-airdrop.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 23 Sep 2026 03:36:06 GMT","end":"Tue, 22 Dec 2026 03:36:05 GMT"},"fingerprint":{"sha1":"3B:15:6D:FE:0E:0A:0D:D4:4B:A6:D5:37:2A:C1:FD:56:29:F0:47:51","sha256":"86:DD:A7:7B:DF:E2:16:1F:CF:D8:81:01:75:40:81:07:49:BB:18:22:D0:59:88:C1:66:26:B5:01:70:35:23:F2"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: kii-airdrop.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 25 Sep 2026 05:42:04 GMT\r\ncontent-type: text/html\r\nlast-modified: Wed, 23 Sep 2026 17:31:26 GMT\r\nvary: Accept-Encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=0,i\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MQpJBNQLtogH1JoopZG7Vpn6gtGa9FxDflGgENrucWSC9v8Gkv5Nr7SxVco27DlGyFPf%2Fb3tFk8Df7sJHi8skYZWjw7aK3YAWzEUiJVsGOpUtpLn%2BWHR7dDUJKAXwasWxdA%3D\"}]}\r\ncontent-encoding: zstd\r\ncf-ray: a407b40f2c8f712d-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5902,"size_decoded":2579,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (383)","md5":"f42f6c1115593a6d535d22c834301e2b","sha1":"681ee7540e5c585cf7088511199d3725ac8c67fc","sha256":"ff49489eb5317fc1e5682e3202224d1d3aa3a0e0c56c0d3b1be37517b71b9079","sha512":"beb823c5bdfd237771d469069e91f49c0a6804454a8a31084250708820d81de1e1dd1f56735c1273d7f299ca2df2ae391932b55028b93b8c4b0250e96f848e90","ssdeep":"96:vx++HWo8FOutT5WcgPESnhnW9NP/zP0+C00tCTSPBTzPwGT/:vx+0Wo8v7F2x00tCelr","tlshash":"3cc1ffb7d4e0116b82138bcc9695b25861d2a20fca8f2414b1df46b59bc6ee2f81785f","first_seen":"2026-09-25T05:42:50.187548Z","last_seen":"2026-09-25T05:44:39.147059Z","times_seen":2,"resource_available":true,"data":null}},"time_used":709,"timings":{"blocked":-1,"dns":6,"connect":19,"send":0,"wait":683,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"kii-airdrop.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kii-airdrop.com/styles.css","fqdn":"kii-airdrop.com","domain":"kii-airdrop.com","tld":"com"},"ip":{"addr":"172.67.166.60","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://kii-airdrop.com/","date":"2026-09-25T05:42:04.431Z","timestamp":1790314924431,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kii-airdrop.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 23 Sep 2026 03:36:06 GMT","end":"Tue, 22 Dec 2026 03:36:05 GMT"},"fingerprint":{"sha1":"3B:15:6D:FE:0E:0A:0D:D4:4B:A6:D5:37:2A:C1:FD:56:29:F0:47:51","sha256":"86:DD:A7:7B:DF:E2:16:1F:CF:D8:81:01:75:40:81:07:49:BB:18:22:D0:59:88:C1:66:26:B5:01:70:35:23:F2"}}},"request":{"raw":"GET /styles.css HTTP/1.1\r\nHost: kii-airdrop.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kii-airdrop.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 25 Sep 2026 05:42:05 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 23 Sep 2026 06:56:16 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6ab37810-229b\"\r\nexpires: Fri, 25 Sep 2026 17:42:05 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oggxgOMYDqSPUfszoQZiVGpAQXtsry2pYvwXBQQZX04DIsMxm3dOqLRw8FGRJiZKyzb%2BKgYxQ8mTCwCzqSp2LQGwbmTKb%2BEyWTujukXf%2BUY5R6ogHyuT6aiRIuKpg5dxIQU%3D\"}]}\r\ncf-cache-status: MISS\r\npriority: u=2,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a407b415bd22712d-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":8859,"size_decoded":3686,"mime_type":"text/css","magic":"ASCII text, with very long lines (6666), with CRLF line terminators","md5":"8c883d6a5f0fbc1aad354e2efc77404b","sha1":"cedb9865f5b96336d0932611dc29c98f709100d1","sha256":"8a49b5801a34d286d25668f89145ccb324577b9098fd9eb9b06b17ede35eb8c1","sha512":"e768aecaeaeff4daac9a378fe95d32f654507c6058c6164f8f46871c2ab893cf07f93daf0c90ea567503cb4e9a174ed69f02d54286563a144bfad748474c45f6","ssdeep":"192:zrXQIVopOxOBMzw+ma03BOtwgVzoM8BQ7PxKIBmw7:/QImpTGsrbwVz0kPxKIBmA","tlshash":"180293226314302cf63bc555bad06bda7124e207d2279bfdea42eb75c4c70b32b76649","first_seen":"2026-09-25T05:42:50.188805Z","last_seen":"2026-09-25T05:44:39.144673Z","times_seen":2,"resource_available":true,"data":null}},"time_used":763,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":763,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"kii-airdrop.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}