{"report_id":"29e44b18-a684-41ef-b802-6a0dee06980e","version":6,"status":"done","tags":[],"date":"2026-01-24T13:43:23Z","url":{"schema":"https","addr":"airdrop.autos","fqdn":"airdrop.autos","domain":"airdrop.autos","tld":"autos"},"ip":{"addr":"192.3.51.248","port":0,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"airdrop.autos/","fqdn":"airdrop.autos","domain":"airdrop.autos","tld":"autos"},"title":"masterbot l airdrop","dom":{"size":126244,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (557)","md5":"12b9475b348bf13fdc9e6326dcde044f","sha1":"16a887014a2c651d5690a80484690306d2cdfbc0","sha256":"b9018f91d7270bc76d6c9ec542a8e6dc8d889e19877f487fa0b2f250a7f720c5","sha512":"4e37d9b6120047ed42849c8f2a5d43c81e1fc6b2eb4a68c4a0f8b2ee996486c92e8a78497926539cd241842f943791f0aa4293eceac9d2e6c1e44ffc3824f34e","ssdeep":"1536:aj/WWVfWcAwv8D/Gnrs1JQYngz5g728gkMhk6x9NO:aWOWTD/GnryQYngO68gkMh9x9NO","tlshash":"4ec3f78126f31238b963c26877fa5b6ea318e143d60fd859f2dc01554fc69aadd8738c","dom_hash":"domhashb62a94c042074aaf1af48544b3461393","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"airdrop.autos","fqdn":"airdrop.autos","domain":"airdrop.autos","tld":"autos"},"ip":{"addr":"192.3.51.248","port":0,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-02-28T13:43:23Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"airdrop.autos","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"aodefevrgdkhqltdnwgzbyjoywrlbntbhfwq.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"fonts.gstatic.com","ip":{"addr":"172.217.21.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-01-18T22:14:28.232245Z","alert_count":0,"request_count":6,"received_data":272862,"sent_data":3266,"comment":"","tags":null,"fingerprints":null},{"fqdn":"cdnjs.cloudflare.com","ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-02-17","domain_rank":1222,"first_seen":"2012-05-23T12:49:49Z","last_seen":"2026-01-18T22:25:16.015191Z","alert_count":0,"request_count":1,"received_data":103030,"sent_data":465,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"aodefevrgdkhqltdnwgzbyjoywrlbntbhfwq.com","ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"domain_registered":"2025-10-12","domain_rank":0,"first_seen":"2025-10-22T11:51:07.746032Z","last_seen":"2026-01-19T17:11:33.285215Z","alert_count":3,"request_count":3,"received_data":659278,"sent_data":1534,"comment":"","tags":null,"fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"216.58.211.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-01-18T22:17:29.309663Z","alert_count":0,"request_count":2,"received_data":29242,"sent_data":1074,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"corsproxy.io","ip":{"addr":"104.26.6.163","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2022-01-30","domain_rank":175528,"first_seen":"2016-05-19T01:27:08Z","last_seen":"2026-01-18T22:04:39.131713Z","alert_count":0,"request_count":2,"received_data":3119,"sent_data":1065,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"analytics.ahrefs.com","ip":{"addr":"172.64.148.115","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2010-11-25","domain_rank":48245,"first_seen":"2020-05-06T23:41:55Z","last_seen":"2026-01-21T11:32:26.407866Z","alert_count":0,"request_count":2,"received_data":7969,"sent_data":910,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"airdrop.autos","ip":{"addr":"192.3.51.248","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"domain_registered":"2025-11-09","domain_rank":0,"first_seen":"2025-12-09T09:39:33.973138Z","last_seen":"2025-12-09T09:39:33.973138Z","alert_count":12,"request_count":12,"received_data":5526714,"sent_data":5826,"comment":"","tags":null,"fingerprints":[{"name":"OpenSSL:1.1.1b","description":"OpenSSL is a software library for applications that secure communications over computer networks against eavesdropping or need to identify the party at the other end.","website":"https://openssl.org","common_platform_enumeration":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","icon":"OpenSSL.png","categories":["Web server extensions"]},{"name":"Windows Server","description":"Windows Server is a brand name for a group of server operating systems.","website":"https://microsoft.com/windowsserver","common_platform_enumeration":"","icon":"WindowsServer.png","categories":["Operating systems"]},{"name":"Apache HTTP Server:2.4.39","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"airdrop.autos/masterbot%20l%20airdrop_files/purecss.umd.js.%E4%B8%8B%E8%BD%BD","fqdn":"airdrop.autos","domain":"airdrop.autos","tld":"autos"},"ip":{"addr":"192.3.51.248","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"5578238b1144423fce322a6c8080085b","sha1":"085b504e6d9e37b1d42a445c48f7aaced5bafc64","sha256":"40ddef83a15f7b2baeb7bfbf4d8820f00e83e929109594ac5dba2708f53cc26f","sha512":"ca566360947935ca3caf6531285e4e14eed486ac44fe550ab81a6dc1dba2d591c881beb99e79b95db46d13bd2e30313b2726884405634a6a50c5daecf03f48ba","ssdeep":"6144:frKtfB2bdmE4COvXEg0kEuY6bPq/m17YQtNbYQfqbgRu44XQmGAVAkXyNBBxD7fj:fgbgGNhg552jTp","tlshash":"ee8423c60dcd520ec300e0daa521267ec8439fec1a5ed60aed4e9ddab5497ab53e33d1","size":394601,"data":"","first_seen":"2025-11-09T21:04:03.272036Z","last_seen":"2026-01-24T13:43:31.110235Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"airdrop.autos/","fqdn":"airdrop.autos","domain":"airdrop.autos","tld":"autos"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"f0707cd2252c2b0a9caf52e5549940a4","sha1":"c8334bc12ad90280f8dadb104515f3788685b86b","sha256":"5444f1e021d01cf65e25500b1c56daac04f1192f4e5c1cdb4cd8742210b1988c","sha512":"e6678cd62fb0158bce6b1aa26bfae1a2b9dc08dfe5b67ba15cce1550ccac570c6ee90a900284366009c2f950dbdd8b07936abc1e85281bdc22c0d1302f37a49c","ssdeep":"6144:PD0ded5bjmkQUYvXEK0kEuY6bPYBm17OQ3NbYkfqbuRu4SXQm86VAOXyNDBxZ7xW:PVdCCmdhu352bTa","tlshash":"8c8411860ecd520ac300f0daa521667ec8439fec165ed71aec0e9dda79497ab53e33d1","size":387550,"data":"","first_seen":"2025-11-09T21:04:03.281231Z","last_seen":"2026-01-24T13:43:31.117916Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aodefevrgdkhqltdnwgzbyjoywrlbntbhfwq.com/@v1/cdn/js/mantine.responsive.min.js?t=29487703","fqdn":"aodefevrgdkhqltdnwgzbyjoywrlbntbhfwq.com","domain":"aodefevrgdkhqltdnwgzbyjoywrlbntbhfwq.com","tld":"com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"96c2ff1601099c21c598c24e6f43c7c4","sha1":"d78fa2e81b7b5ccf287c793c5a9985caaa0f6162","sha256":"7fd19c564761e2c8c9b583cf30db810e313417c7d3572f637f8cedf4d2cc1e91","sha512":"d7df68372670f0173ac5dc3c54ee38f13b29703dde9f71ec74827b535735e99b2b253e07960d66d8c3230f13cf29f20aa0f083db014cee0710379ffab68932be","ssdeep":"6144:0ujB8gltIeTM5/S8g6zRh5gDVLU2GIt/KJAsJRrydM147u/lhDlEqH96lm:vhltVM/g61sNUWsSdG7R","tlshash":"1ed438c2821814f684eb0ab6d133a21fdb4cce9dc69f2d20bfe55c9553c87a292f655c","size":656642,"data":"","first_seen":"2026-01-02T13:08:19.247086Z","last_seen":"2026-06-07T04:15:26.458958Z","times_seen":2555,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"airdrop.autos/config.php?s=%2F%40v1%2Fcdn%2Fjs%2Fmantine.responsive.min.js\u0026t=29487702","fqdn":"airdrop.autos","domain":"airdrop.autos","tld":"autos"},"ip":{"addr":"192.3.51.248","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://airdrop.autos/","date":"2026-01-24T13:42:55.652Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"airdrop.autos","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Sun, 09 Nov 2025 00:00:00 GMT","end":"Sat, 07 Feb 2026 23:59:59 GMT"},"fingerprint":{"sha1":"53:4E:8F:F4:52:62:7F:60:71:F4:FC:23:18:5F:0A:CA:07:B5:EE:89","sha256":"9C:FD:DF:55:3E:49:AF:F8:9C:D2:22:26:C6:5F:74:F9:9E:80:D7:63:4A:FC:EF:54:86:2E:77:7C:DE:CD:34:5A"}}},"request":{"raw":"GET /config.php?s=%2F%40v1%2Fcdn%2Fjs%2Fmantine.responsive.min.js\u0026t=29487702 HTTP/1.1\r\nHost: airdrop.autos\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://airdrop.autos/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nDate: Sat, 24 Jan 2026 13:42:55 GMT\r\nServer: Apache/2.4.39 (Win64) OpenSSL/1.1.1b mod_fcgid/2.3.9a mod_log_rotate/1.02\r\nLast-Modified: Tue, 03 Sep 2019 07:11:42 GMT\r\nETag: \"a63-591a0cce66780\"\r\nAccept-Ranges: bytes\r\nContent-Length: 2659\r\nAccessControlAllowOrigin: *\r\nAccessControlAllowMethods: GET,POST,OPTIONS\r\nAccessControlAllowHeaders: ContentType,Authorization\r\nKeep-Alive: timeout=5, max=99\r\nConnection: Keep-Alive\r\nContent-Type: text/html\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"OpenSSL:1.1.1b","description":"OpenSSL is a software library for applications that secure communications over computer networks against eavesdropping or need to identify the party at the other end.","website":"https://openssl.org","common_platform_enumeration":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","icon":"OpenSSL.png","categories":["Web server extensions"]},{"name":"Windows Server","description":"Windows Server is a brand name for a group of server operating systems.","website":"https://microsoft.com/windowsserver","common_platform_enumeration":"","icon":"WindowsServer.png","categories":["Operating systems"]},{"name":"Apache HTTP Server:2.4.39","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":2659,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with CRLF line terminators","md5":"a55f4f898cd884ae8283a503d01d2139","sha1":"38eb3940614458b5b5483fb77c5238865290281d","sha256":"dfa4d05fe088c499384485bc2d35990904f99e2295b30fa00e4c84b1541dbf14","sha512":"f870a0cc8d779b77d861a856863da181eeb6e32e369404227fb2782a66126c49ae7130f63db859969bb6fab984d036cbc738e704059d7bb7d64bb21f18afffd1","ssdeep":"","tlshash":"c251122681c42a080735c2626ff2bb40ea9694178745afc0f58e36ef1ff1a44cdc370a","first_seen":"2023-04-08T00:56:08Z","last_seen":"2026-05-17T19:01:02.558199Z","times_seen":460,"resource_available":false,"data":null}},"time_used":490,"timings":{"blocked":336,"dns":0,"connect":0,"send":0,"wait":154,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"airdrop.autos","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"airdrop.autos/","fqdn":"airdrop.autos","domain":"airdrop.autos","tld":"autos"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-01-24T13:42:50.346Z","timestamp":0,"http_version":"","security_state":"broken","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: airdrop.autos\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-08T11:34:21.534624Z","times_seen":16238222,"resource_available":true,"data":null}},"time_used":400,"timings":{"blocked":0,"dns":86,"connect":152,"send":0,"wait":0,"receive":0,"ssl":158},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"airdrop.autos","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcCo3FwrK3iLTcviYwYZ90A2N58.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.21.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://airdrop.autos/","date":"2026-01-24T13:42:54.228Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Dec 2025 19:52:23 GMT","end":"Mon, 23 Mar 2026 19:52:22 GMT"},"fingerprint":{"sha1":"5A:74:FC:38:D2:7B:9B:E5:E5:0D:67:25:F4:73:BC:BA:2E:12:A7:FD","sha256":"3B:19:CD:BE:44:E6:EE:DC:8D:33:2B:A2:1C:E4:13:F8:6F:7E:2E:52:5D:0E:75:F3:1A:ED:21:1B:7A:B7:2E:BA"}}},"request":{"raw":"GET /s/inter/v20/UcCo3FwrK3iLTcviYwYZ90A2N58.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://airdrop.autos\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 72964\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 17 Jan 2026 18:24:01 GMT\r\nexpires: Sun, 17 Jan 2027 18:24:01 GMT\r\ncache-control: public, max-age=31536000\r\nage: 587933\r\nlast-modified: Tue, 09 Sep 2025 18:33:18 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":72964,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 72964, version 1.0","md5":"91247c94dcda6ff52b445d71d6bbfb81","sha1":"ad2f62363ed047b430b91f32afa31df51fcd7c5e","sha256":"6a3c3e024b31eeacbf1f19c3c7be78612d91c623186f64035a50038241dad4f9","sha512":"a12dcac84e9f9ae02df3aabe29d76994281cd1005edca471194605cfcd6a0456eec872fd28c63c72ae124804d0b47d8377048caae49c40b0a18b5d6be4d6213f","ssdeep":"768:zbw+rLBkMxbCkupj4Y69/Yr71+j9pWiKahMM6+AWEqXB0oGuNGku+QCcIKE205C7:zbw+iwuS/iZWeaO1zP1/9Esvf8fXnm1","tlshash":"8f6302244e3c50c2a54d33aa286940f6f6e79c75b2b79ba4a69c589cd410f329cdfdc4","first_seen":"2025-05-29T18:51:13.223047Z","last_seen":"2026-06-08T11:55:12.890764Z","times_seen":25879,"resource_available":false,"data":null}},"time_used":486,"timings":{"blocked":224,"dns":1,"connect":29,"send":0,"wait":27,"receive":6,"ssl":186},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"airdrop.autos/","fqdn":"airdrop.autos","domain":"airdrop.autos","tld":"autos"},"ip":{"addr":"192.3.51.248","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-01-24T13:42:52.358Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"airdrop.autos","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Sun, 09 Nov 2025 00:00:00 GMT","end":"Sat, 07 Feb 2026 23:59:59 GMT"},"fingerprint":{"sha1":"53:4E:8F:F4:52:62:7F:60:71:F4:FC:23:18:5F:0A:CA:07:B5:EE:89","sha256":"9C:FD:DF:55:3E:49:AF:F8:9C:D2:22:26:C6:5F:74:F9:9E:80:D7:63:4A:FC:EF:54:86:2E:77:7C:DE:CD:34:5A"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: airdrop.autos\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 24 Jan 2026 13:42:52 GMT\r\nServer: Apache/2.4.39 (Win64) OpenSSL/1.1.1b mod_fcgid/2.3.9a mod_log_rotate/1.02\r\nLast-Modified: Sun, 09 Nov 2025 16:26:47 GMT\r\nETag: \"1af43-6432be19118e3\"\r\nAccept-Ranges: bytes\r\nContent-Length: 110403\r\nAccessControlAllowOrigin: *\r\nAccessControlAllowMethods: GET,POST,OPTIONS\r\nAccessControlAllowHeaders: ContentType,Authorization\r\nKeep-Alive: timeout=5, max=100\r\nConnection: Keep-Alive\r\nContent-Type: text/html\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenSSL:1.1.1b","description":"OpenSSL is a software library for applications that secure communications over computer networks against eavesdropping or need to identify the party at the other end.","website":"https://openssl.org","common_platform_enumeration":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","icon":"OpenSSL.png","categories":["Web server extensions"]},{"name":"Windows Server","description":"Windows Server is a brand name for a group of server operating systems.","website":"https://microsoft.com/windowsserver","common_platform_enumeration":"","icon":"WindowsServer.png","categories":["Operating systems"]},{"name":"Apache HTTP Server:2.4.39","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":110403,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1112), with CRLF line terminators","md5":"72035603a3ff016706128901c81e9b0b","sha1":"ec8145781b880bb57683b6890f670e8ecad5a7e4","sha256":"79600e1cca25100e09c16ffa9e876252186fad4991f84faf58a36e09e72f02e3","sha512":"c26316d275e654c90bea720ff68fff11f835f0d441b37ed2b4a133dca0acbaa89ee1ce02fb5fa80b984f4d21f8100cf8cf04ffeb1ce7fb722e3ad0c1e595fe18","ssdeep":"1536:HNJVKNvwHe57obVD1kE/YzFA56+tsDYkux5m:cw+dC9N/YzF1ssDYhx5m","tlshash":"feb3d51026c012399973c3a8abf65baefb159147d70bd459f2dc12531ff2c6ac993788","first_seen":"2025-12-09T09:39:38.202981Z","last_seen":"2026-01-24T13:43:31.095043Z","times_seen":3,"resource_available":false,"data":null}},"time_used":1086,"timings":{"blocked":294,"dns":2,"connect":151,"send":0,"wait":153,"receive":326,"ssl":156},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"airdrop.autos","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/font-awesome/6.4.0/css/all.min.css","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://airdrop.autos/","date":"2026-01-24T13:42:53.327Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 13 Jan 2026 22:16:05 GMT","end":"Mon, 13 Apr 2026 23:15:55 GMT"},"fingerprint":{"sha1":"D9:00:47:77:A5:47:66:A1:6F:DA:EB:4B:BB:BF:67:49:BF:2C:A4:75","sha256":"07:A7:3E:4A:B2:9F:0A:07:6C:78:A7:7B:DC:2B:68:A1:84:7A:7F:1B:45:6C:71:8E:5E:79:F3:11:1A:6C:4F:62"}}},"request":{"raw":"GET /ajax/libs/font-awesome/6.4.0/css/all.min.css HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://airdrop.autos/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 24 Jan 2026 13:42:53 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncontent-length: 18752\r\ncf-ray: 9c2ff4e7889b723c-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"6421d693-4940\"\r\nlast-modified: Mon, 27 Mar 2023 17:46:59 GMT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/kv\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 231180\r\nexpires: Thu, 14 Jan 2027 13:42:53 GMT\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=dImFAsFeW42uJudEDvfQNk9wUACVYhecMiPYgOIzOfl3NFtnmGlTEqj2VUvoPhbt5uY3aSGWSgg4wKPJLGUlT8iVmJcoaF%2B74Q6x68vS6W9Jw6iEE%2BNAPlDJjBLwS%2BMQpLF1gu%2Fs\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nstrict-transport-security: max-age=15780000\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":102025,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (52276)","md5":"ded1c367363e8b20bdc6a19b8350a737","sha1":"8c06d82739d14b094ff6d9036021a252bd1d985d","sha256":"1edb1725a9ea8ca4dcf2f5508cee183218aa1685e47c1b23056717f754f58ebf","sha512":"89e71d2e66ac925ec2564aa45cd43f647fd72e5bd664e2728fb632eed71e9e6a43d72a404a8ce9993fc4d223ed985201e3a66676d01cf5e341bc7d07fd9a6207","ssdeep":"1536:OwMCMPMCMjMCM4MCMwMCM3sVMX709gbPMfjSFOTyPGuZprfZCl:S709gMGFiyPGuZpfZCl","tlshash":"2ea3a7f9e44c05d97732c44bab95b37c65b6f738d5810ca9f02f580c1ad26a822c6f7a","first_seen":"2023-04-06T15:05:25Z","last_seen":"2026-06-08T11:27:57.436325Z","times_seen":51064,"resource_available":false,"data":null}},"time_used":99,"timings":{"blocked":30,"dns":4,"connect":2,"send":0,"wait":13,"receive":2,"ssl":43},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"airdrop.autos/masterbot%20l%20airdrop_files/image_1758899357553-D1VX-iSU.png","fqdn":"airdrop.autos","domain":"airdrop.autos","tld":"autos"},"ip":{"addr":"192.3.51.248","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://airdrop.autos/","date":"2026-01-24T13:42:55.838Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"airdrop.autos","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Sun, 09 Nov 2025 00:00:00 GMT","end":"Sat, 07 Feb 2026 23:59:59 GMT"},"fingerprint":{"sha1":"53:4E:8F:F4:52:62:7F:60:71:F4:FC:23:18:5F:0A:CA:07:B5:EE:89","sha256":"9C:FD:DF:55:3E:49:AF:F8:9C:D2:22:26:C6:5F:74:F9:9E:80:D7:63:4A:FC:EF:54:86:2E:77:7C:DE:CD:34:5A"}}},"request":{"raw":"GET /masterbot%20l%20airdrop_files/image_1758899357553-D1VX-iSU.png HTTP/1.1\r\nHost: airdrop.autos\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://airdrop.autos/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 24 Jan 2026 13:42:55 GMT\r\nServer: Apache/2.4.39 (Win64) OpenSSL/1.1.1b mod_fcgid/2.3.9a mod_log_rotate/1.02\r\nLast-Modified: Sun, 09 Nov 2025 13:14:16 GMT\r\nETag: \"26dc0-64329311be9a1\"\r\nAccept-Ranges: bytes\r\nContent-Length: 159168\r\nAccessControlAllowOrigin: *\r\nAccessControlAllowMethods: GET,POST,OPTIONS\r\nAccessControlAllowHeaders: ContentType,Authorization\r\nKeep-Alive: timeout=5, max=99\r\nConnection: Keep-Alive\r\nContent-Type: image/png\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Windows Server","description":"Windows Server is a brand name for a group of server operating systems.","website":"https://microsoft.com/windowsserver","common_platform_enumeration":"","icon":"WindowsServer.png","categories":["Operating systems"]},{"name":"Apache HTTP Server:2.4.39","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"OpenSSL:1.1.1b","description":"OpenSSL is a software library for applications that secure communications over computer networks against eavesdropping or need to identify the party at the other end.","website":"https://openssl.org","common_platform_enumeration":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","icon":"OpenSSL.png","categories":["Web server extensions"]}],"data":{"size":159168,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit/color RGB, non-interlaced","md5":"759fdc9c5dac171533008b53d9a4f4e9","sha1":"679020fd703defcbc9adf950372e55af22dec07c","sha256":"d12f51a5f4fdc55d44b18cf91922049cf444d68c65da8e5366084b9dc14a67fc","sha512":"57dd9c429d539f909ddc802f05acbd5f0c893ff5a1d8a6452698a961d5317da13a2b34ae77b695e0b3b349a60e3b0b4a132042b559e5f03d75f8b6a46263174a","ssdeep":"3072:GwffQ9gnjtAqYSmix1TEuHPJG6hgFZIA9IAugw9dlTL32KZz5uCR:53QKnjIzY1TEuRG6hOIA9rugwzR32KZF","tlshash":"aaf323b098e5260dd5b56fa2f677892fc23f40f9aaca0f0135403916a4f41d96bc79f8","first_seen":"2025-10-24T16:44:29.355846Z","last_seen":"2026-01-24T13:43:31.092789Z","times_seen":7,"resource_available":false,"data":null}},"time_used":315,"timings":{"blocked":151,"dns":0,"connect":0,"send":0,"wait":153,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"airdrop.autos","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"airdrop.autos//config.php?s=%2Fjmpd%2F","fqdn":"airdrop.autos","domain":"airdrop.autos","tld":"autos"},"ip":{"addr":"192.3.51.248","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://airdrop.autos/","date":"2026-01-24T13:42:59.311Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"airdrop.autos","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Sun, 09 Nov 2025 00:00:00 GMT","end":"Sat, 07 Feb 2026 23:59:59 GMT"},"fingerprint":{"sha1":"53:4E:8F:F4:52:62:7F:60:71:F4:FC:23:18:5F:0A:CA:07:B5:EE:89","sha256":"9C:FD:DF:55:3E:49:AF:F8:9C:D2:22:26:C6:5F:74:F9:9E:80:D7:63:4A:FC:EF:54:86:2E:77:7C:DE:CD:34:5A"}}},"request":{"raw":"POST //config.php?s=%2Fjmpd%2F HTTP/1.1\r\nHost: airdrop.autos\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nContent-Length: 1764\r\nOrigin: https://airdrop.autos\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://airdrop.autos/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":1764,"data":"{\"route\":\"8XUwkBv9vhPYfVpD1fxb7EC65sUXJdqr\",\"payload\":\"pXJt46dT1DWFvQVup25n31crgNC9iBoZEymyFVRbuCgJP8Mzq1kTbr7DNEnpuqYmwRhHUAww8kxR7wru1HW7GwrPrZQybzdZTJ3diercJjQTTLKh5HcoFPTcjtY7FZpmDDi8JHAo6afWGrmgYqv2qrAvchJGBDQFcTHGAbPs3iuNKAL3fqjzL5mgmBR7og76BBYp7Lk9aJpAQC744swScBPp4qnyZBtaULBPeUSDJWf76YTLeCaQi7F4vCUyHiRT1JJd7v3vU1zjZCksUD3vtP2KTEjpts8AHUBZtqXd3UyheHzd4aC5cmASaKyrpocnabuKKLViCbzFeKV6UJ7eB4cKGayGoxY7N3z9T27UqqERQpbndSwFx82N2uwFrGpTUyoYq7HoU5YwCpQMCKrwdVFk8SmVbbyadjSZB7xzA1Bdntk9fMiA7tFEiXuqsnxwCxci5zoBNyoHfD7hVWRMH85j1G9QdGQETxiZ3AwRi8DAq54TBKFciHzMQWo6xwzXsH951ZdbVvG735fn6wiaGDuAvKroSNwVM9w971hLrkZijbvaVh38xx8dNreGvMqf2a5m5gfdU1oTrr4RxhKuTZ2dcBp574CzQS74ghFBh1Ju6ypQzbbwZ3gpHQaBnqzCQ5Bmf6dXPh8414XTgCzZ272VaGtXxPrZXq18WPFe4mRP5XLknTSjVC9cxANyZafkRQ6uKzCWRqCcAuMTTCcNR8HbvSapLvEbTckvpokCeuR4airiVbJpiy5M6dRFKpoJJUhXwCDCNKJP9CqTZ3riezpeYhxynK2xARSMSFNAwbmwFdHtMvdrZuGcUTAU53Beb1E3poDSatMNTRzvNsEXHSbSgaFHxCvHnvUmg1McatEjqsFy4tDZW8hfxi4py7A6Ga2WhLXVGNJdkik2vBSLDyysi7PaoimDQEmSRU3pVDb8uw7oYE2UWw9xJ3NJJzc5nAVBSH1gGLVCrA6jrgqnbLuKgq9vAotMoLWnYeYFdjtbhqo97SmcuWaTFcCbEKpYJuskgTHZP1gRpUNMf9teTfRZJVT2n11uqrjpb6BcTPuLMV2hshDJovqVsaKy7YSCLhPt5pNARR6rCw3WvZXZw9VzhpN3WqVcnbjdLTqVcU9NDVTWdJ3aoYUgnfEEppDxj9aj1sHQfvYofGFNSzfi5iHYsptthndmQoddJs9oyHWFJKQWafawjDaYH2PKpYGvVLJF18ujywbhVSioXzLdZNajV4bEAEVVDLpx1sMXXofHqxcKgSTgnmroUmeiGk5xidKqDXBqrZMSFQGbTRfoWjCCSvtJEubdXrHoED928er9YcfQXGd3Kuud5ZMdW86LpsoCjcVyV7C5sYXxDPNf8dQZZrTMWi17DKMs2LneLYVLkPMtMLzot894N2qvQ7gDQAp4uJywuia91tWgHdXuqvEe8CUSEzh4KBHGpxXUPasLz4ib7bAhacnrvixrXh6ivZRpT4fMojebG6r5au9r48AXwLdYDJ3gnBEkbg1BBA9Chm9xBiaHA56DiX9vHp35oZpJx1cZD5PkKRFCYfWZSvcuT9Tc7vQRQMadqcfTcX7p8f5t9MHCp6VjrQGBoydVRR3bhcoVWJGjNC9uUbeaaDC8BCqdQNR3TEQjNFHJkZ2tfyji7eKp36x1ZYBMba9odK8wcTsNhJnmHADc897nHTN4jpUPHyPv39ZnNQBXtBU\"}"}},"response":{"raw":"HTTP/1.1 404 Not Found\r\nDate: Sat, 24 Jan 2026 13:42:59 GMT\r\nServer: Apache/2.4.39 (Win64) OpenSSL/1.1.1b mod_fcgid/2.3.9a mod_log_rotate/1.02\r\nLast-Modified: Tue, 03 Sep 2019 07:11:42 GMT\r\nETag: \"a63-591a0cce66780\"\r\nAccept-Ranges: bytes\r\nContent-Length: 2659\r\nAccessControlAllowOrigin: *\r\nAccessControlAllowMethods: GET,POST,OPTIONS\r\nAccessControlAllowHeaders: ContentType,Authorization\r\nKeep-Alive: timeout=5, max=95\r\nConnection: Keep-Alive\r\nContent-Type: text/html\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Apache HTTP Server:2.4.39","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"OpenSSL:1.1.1b","description":"OpenSSL is a software library for applications that secure communications over computer networks against eavesdropping or need to identify the party at the other end.","website":"https://openssl.org","common_platform_enumeration":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","icon":"OpenSSL.png","categories":["Web server extensions"]},{"name":"Windows Server","description":"Windows Server is a brand name for a group of server operating systems.","website":"https://microsoft.com/windowsserver","common_platform_enumeration":"","icon":"WindowsServer.png","categories":["Operating systems"]}],"data":{"size":2659,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with CRLF line terminators","md5":"a55f4f898cd884ae8283a503d01d2139","sha1":"38eb3940614458b5b5483fb77c5238865290281d","sha256":"dfa4d05fe088c499384485bc2d35990904f99e2295b30fa00e4c84b1541dbf14","sha512":"f870a0cc8d779b77d861a856863da181eeb6e32e369404227fb2782a66126c49ae7130f63db859969bb6fab984d036cbc738e704059d7bb7d64bb21f18afffd1","ssdeep":"","tlshash":"c251122681c42a080735c2626ff2bb40ea9694178745afc0f58e36ef1ff1a44cdc370a","first_seen":"2023-04-08T00:56:08Z","last_seen":"2026-05-17T19:01:02.558199Z","times_seen":460,"resource_available":false,"data":null}},"time_used":152,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":151,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"airdrop.autos","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/spacegrotesk/v22/V8mDoQDjQSkFtoMM3T6r8E7mPbF4Cw.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.21.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://airdrop.autos/","date":"2026-01-24T13:42:54.223Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Dec 2025 19:52:23 GMT","end":"Mon, 23 Mar 2026 19:52:22 GMT"},"fingerprint":{"sha1":"5A:74:FC:38:D2:7B:9B:E5:E5:0D:67:25:F4:73:BC:BA:2E:12:A7:FD","sha256":"3B:19:CD:BE:44:E6:EE:DC:8D:33:2B:A2:1C:E4:13:F8:6F:7E:2E:52:5D:0E:75:F3:1A:ED:21:1B:7A:B7:2E:BA"}}},"request":{"raw":"GET /s/spacegrotesk/v22/V8mDoQDjQSkFtoMM3T6r8E7mPbF4Cw.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://airdrop.autos\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 22288\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 23 Jan 2026 13:05:25 GMT\r\nexpires: Sat, 23 Jan 2027 13:05:25 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Thu, 04 Sep 2025 17:26:34 GMT\r\ncontent-type: font/woff2\r\nage: 88649\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":22288,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 22288, version 1.0","md5":"87c506d88b9f587f0e2292bc271f5083","sha1":"c0781ea2f29013826dc1eb8db40f4d400d9df710","sha256":"0640890476fc1198ab4de571fb658de443c4d85b66466ec09534a8737ab1ce9d","sha512":"25171eb14ce4c75ccfdb6f1c2a7de82182fd8d3d79cfa108df2d0e015e4ac84678ad97fdf90cff2ac2f24934531fcca3289343129687f176f21964ce5cd01b02","ssdeep":"384:TB/NWnO5qgQvU7gd7EeEX5qPOJO4FqaCEuAsCyzvDfxPdjuHsrC:TBlo1vUsvZqO4MAsCKrxxuMrC","tlshash":"8aa2e15b3f6bde211a27aebf4fc957b0a3ac6c1db2dd2712c198b104408962cc5d5ce6","first_seen":"2025-09-05T05:08:09.568652Z","last_seen":"2026-06-08T11:46:14.539509Z","times_seen":18949,"resource_available":false,"data":null}},"time_used":588,"timings":{"blocked":283,"dns":3,"connect":8,"send":0,"wait":23,"receive":2,"ssl":252},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"airdrop.autos/audio/bgm.mp3","fqdn":"airdrop.autos","domain":"airdrop.autos","tld":"autos"},"ip":{"addr":"192.3.51.248","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://airdrop.autos/","date":"2026-01-24T13:42:54.379Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"airdrop.autos","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Sun, 09 Nov 2025 00:00:00 GMT","end":"Sat, 07 Feb 2026 23:59:59 GMT"},"fingerprint":{"sha1":"53:4E:8F:F4:52:62:7F:60:71:F4:FC:23:18:5F:0A:CA:07:B5:EE:89","sha256":"9C:FD:DF:55:3E:49:AF:F8:9C:D2:22:26:C6:5F:74:F9:9E:80:D7:63:4A:FC:EF:54:86:2E:77:7C:DE:CD:34:5A"}}},"request":{"raw":"GET /audio/bgm.mp3 HTTP/1.1\r\nHost: airdrop.autos\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: audio/webm,audio/ogg,audio/wav,audio/*;q=0.9,application/ogg;q=0.7,video/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://airdrop.autos/\r\nSec-Fetch-Dest: audio\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 206 Partial Content\r\nDate: Sat, 24 Jan 2026 13:42:54 GMT\r\nServer: Apache/2.4.39 (Win64) OpenSSL/1.1.1b mod_fcgid/2.3.9a mod_log_rotate/1.02\r\nLast-Modified: Wed, 05 Nov 2025 15:13:43 GMT\r\nETag: \"39ce5e-642da64ef6012\"\r\nAccept-Ranges: bytes\r\nContent-Length: 3788382\r\nAccessControlAllowOrigin: *\r\nAccessControlAllowMethods: GET,POST,OPTIONS\r\nAccessControlAllowHeaders: ContentType,Authorization\r\nContent-Range: bytes 0-3788381/3788382\r\nKeep-Alive: timeout=5, max=96\r\nConnection: Keep-Alive\r\nContent-Type: audio/mpeg\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"OpenSSL:1.1.1b","description":"OpenSSL is a software library for applications that secure communications over computer networks against eavesdropping or need to identify the party at the other end.","website":"https://openssl.org","common_platform_enumeration":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","icon":"OpenSSL.png","categories":["Web server extensions"]},{"name":"Windows Server","description":"Windows Server is a brand name for a group of server operating systems.","website":"https://microsoft.com/windowsserver","common_platform_enumeration":"","icon":"WindowsServer.png","categories":["Operating systems"]},{"name":"Apache HTTP Server:2.4.39","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":3145728,"size_decoded":0,"mime_type":"audio/mpeg","magic":"MPEG ADTS, layer III, v1, 256 kbps, 44.1 kHz, JntStereo","md5":"7d440518bb12020d6a0ab32d9a1933b4","sha1":"2d4bd24366f0ab82ca5721ad1e39ce8581b6b5bc","sha256":"55bd27f0b8ca4d72540a5980dff69b2d80d22ddc7aed128233da1cb6ea3a9e76","sha512":"ed22d1bb101aa7af699c9c6a7f401a307cf002c9665d73a57685cf22c788acac93c27b35acb53cca6ce6cf11b9e9943b334d51115ee0e8280c2feb9dfbce11c0","ssdeep":"24576:JmQIW5oMGJi2OwPVI6xzDcNolEDwuKwkwD3:11+PV9ZcNyXuKwk4","tlshash":"902523c5c3a45664f66a0bb94f875d7aef438d0da20094c5eed6fb206673326fb8011d","first_seen":"2026-01-24T13:43:27.252093Z","last_seen":"2026-01-24T13:43:31.102986Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1607,"timings":{"blocked":6,"dns":0,"connect":0,"send":0,"wait":156,"receive":1445,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"airdrop.autos","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aodefevrgdkhqltdnwgzbyjoywrlbntbhfwq.com/jmpd/","fqdn":"aodefevrgdkhqltdnwgzbyjoywrlbntbhfwq.com","domain":"aodefevrgdkhqltdnwgzbyjoywrlbntbhfwq.com","tld":"com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://airdrop.autos/","date":"2026-01-24T13:43:00.769Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aodefevrgdkhqltdnwgzbyjoywrlbntbhfwq.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 08 Jan 2026 15:05:58 GMT","end":"Wed, 08 Apr 2026 15:05:57 GMT"},"fingerprint":{"sha1":"4D:1D:3C:6D:9E:2D:29:38:F6:A3:C5:A2:A9:6E:00:65:21:FD:F7:14","sha256":"B2:0A:D0:D4:D9:66:A7:A6:38:55:71:26:B9:06:E7:A1:A5:4B:C4:7B:C4:E5:D6:9A:6B:FF:D1:0E:21:E9:BB:C1"}}},"request":{"raw":"OPTIONS /jmpd/ HTTP/1.1\r\nHost: aodefevrgdkhqltdnwgzbyjoywrlbntbhfwq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://airdrop.autos/\r\nOrigin: https://airdrop.autos\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Sat, 24 Jan 2026 13:43:00 GMT\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 4623665\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, PATCH, OPTIONS\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\naccess-control-max-age: 86400\r\ncache-control: no-cache\r\ncdn-proxyver: 1.43\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 204\r\ncdn-cachedat: 01/24/2026 13:43:00\r\ncdn-edgestorageid: 830\r\ncdn-requestid: b2eb3e9764a204046af7d74ed0e1c758\r\ncdn-status: 204\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-08T11:34:21.534624Z","times_seen":16238222,"resource_available":true,"data":null}},"time_used":155,"timings":{"blocked":15,"dns":0,"connect":3,"send":0,"wait":106,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"aodefevrgdkhqltdnwgzbyjoywrlbntbhfwq.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Space+Grotesk:wght@300;400;500;600;700\u0026family=Inter:wght@300;400;500;600;700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"216.58.211.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://airdrop.autos/","date":"2026-01-24T13:42:53.681Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Dec 2025 19:52:24 GMT","end":"Mon, 23 Mar 2026 19:52:23 GMT"},"fingerprint":{"sha1":"43:39:AF:0A:74:F9:2F:1B:C0:1E:4E:89:21:30:C2:28:EC:9F:6C:67","sha256":"EA:F1:0E:C7:36:18:F3:9D:D1:D5:34:23:44:7D:6F:9D:2F:61:C7:81:09:9E:E9:C8:02:C8:F2:2C:0A:83:B3:A5"}}},"request":{"raw":"GET /css2?family=Space+Grotesk:wght@300;400;500;600;700\u0026family=Inter:wght@300;400;500;600;700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://airdrop.autos/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sat, 24 Jan 2026 13:42:53 GMT\r\ndate: Sat, 24 Jan 2026 13:42:53 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":19075,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"ba7ceeb33d47d62007b8fee0236b13ee","sha1":"e2c6d581ec0ff90ed8dd209cbc9934f0676b7715","sha256":"da7e8c3056b8553045869854518352bf0e4e53608066d174fe9662ba8b98b86c","sha512":"5c833a70ab4a4f4d4812b90eed835daa69f4ee5023530096918f85ef81869ff7bbdadd22ad1140b13b32259e0e157c67301d75e3891723733caa79e726adbc9e","ssdeep":"192:wNA1cO3lnxirNNIxO34OxDENOPCO3/Nx8NNryfO3iExlONEhYO3RrxGqcGGDZx/C:8KYXuM0p2+/KDgRt","tlshash":"8282ca92002ba500eb931cc223ce7e3abe8e60856085d6796ffd1cc99cded62436476d","first_seen":"2025-10-06T02:03:50.371719Z","last_seen":"2026-06-07T05:03:58.968913Z","times_seen":1023,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"airdrop.autos/audio/spin.wav","fqdn":"airdrop.autos","domain":"airdrop.autos","tld":"autos"},"ip":{"addr":"192.3.51.248","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://airdrop.autos/","date":"2026-01-24T13:42:54.382Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"airdrop.autos","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Sun, 09 Nov 2025 00:00:00 GMT","end":"Sat, 07 Feb 2026 23:59:59 GMT"},"fingerprint":{"sha1":"53:4E:8F:F4:52:62:7F:60:71:F4:FC:23:18:5F:0A:CA:07:B5:EE:89","sha256":"9C:FD:DF:55:3E:49:AF:F8:9C:D2:22:26:C6:5F:74:F9:9E:80:D7:63:4A:FC:EF:54:86:2E:77:7C:DE:CD:34:5A"}}},"request":{"raw":"GET /audio/spin.wav HTTP/1.1\r\nHost: airdrop.autos\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: audio/webm,audio/ogg,audio/wav,audio/*;q=0.9,application/ogg;q=0.7,video/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://airdrop.autos/\r\nSec-Fetch-Dest: audio\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 206 Partial Content\r\nDate: Sat, 24 Jan 2026 13:42:54 GMT\r\nServer: Apache/2.4.39 (Win64) OpenSSL/1.1.1b mod_fcgid/2.3.9a mod_log_rotate/1.02\r\nLast-Modified: Wed, 05 Nov 2025 15:08:59 GMT\r\nETag: \"98968-642da53fde8ed\"\r\nAccept-Ranges: bytes\r\nContent-Length: 625000\r\nAccessControlAllowOrigin: *\r\nAccessControlAllowMethods: GET,POST,OPTIONS\r\nAccessControlAllowHeaders: ContentType,Authorization\r\nContent-Range: bytes 0-624999/625000\r\nKeep-Alive: timeout=5, max=100\r\nConnection: Keep-Alive\r\nContent-Type: audio/x-wav\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Apache HTTP Server:2.4.39","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"OpenSSL:1.1.1b","description":"OpenSSL is a software library for applications that secure communications over computer networks against eavesdropping or need to identify the party at the other end.","website":"https://openssl.org","common_platform_enumeration":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","icon":"OpenSSL.png","categories":["Web server extensions"]},{"name":"Windows Server","description":"Windows Server is a brand name for a group of server operating systems.","website":"https://microsoft.com/windowsserver","common_platform_enumeration":"","icon":"WindowsServer.png","categories":["Operating systems"]}],"data":{"size":625000,"size_decoded":0,"mime_type":"audio/x-wav","magic":"RIFF (little-endian) data, WAVE audio, Microsoft PCM, 16 bit, stereo 44100 Hz","md5":"318bb03f1fc79271dcd80a68db0e20f3","sha1":"c6f185c00ececdf16bec71d1a40d7ef87c53b93a","sha256":"6203c8f5837f10d0e68b5545b54884208222bb0b0eafc18b3802744bd850318e","sha512":"f32919c9feb0c4c34b18bc9f4cc8d67a5e5cb8ec7e31791f2bb169dab8f22164ba5e5dca07cb627866412abd386e924355ddfaf4b410df501831678d34ce5f35","ssdeep":"12288:ojrlBJiSYNLPXGntDtKpor2/jni0cKHl6O+WVJPnF2WoK39EJBH:obJiTNjXGDGfcKHl6O+WVJPnF2WoK39K","tlshash":"79d4ca123682e911c4852dfb9d5de9d49231bac6de0b632332406b7f5dfda928d2dbc0","first_seen":"2026-01-24T13:43:27.255413Z","last_seen":"2026-01-24T13:43:31.090728Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1163,"timings":{"blocked":4,"dns":0,"connect":0,"send":0,"wait":239,"receive":920,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"airdrop.autos","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"corsproxy.io/?https://api.mainnet-beta.solana.com","fqdn":"corsproxy.io","domain":"corsproxy.io","tld":"io"},"ip":{"addr":"104.26.6.163","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://airdrop.autos/","date":"2026-01-24T13:43:00.046Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"corsproxy.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 23 Jan 2026 18:55:39 GMT","end":"Thu, 23 Apr 2026 19:55:36 GMT"},"fingerprint":{"sha1":"C7:A3:F8:71:A0:C4:0A:D3:96:8A:FF:20:70:85:EA:5E:FE:E1:C7:4C","sha256":"A1:1E:61:D2:B9:99:EB:58:F6:4A:D1:83:39:B7:4B:64:61:60:B0:7F:BC:C6:DE:FB:D0:D8:30:6F:F6:9B:A6:1A"}}},"request":{"raw":"POST /?https://api.mainnet-beta.solana.com HTTP/1.1\r\nHost: corsproxy.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://airdrop.autos/\r\nContent-Type: application/json\r\nContent-Length: 130\r\nOrigin: https://airdrop.autos\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":130,"data":"{\"jsonrpc\":\"2.0\",\"id\":1,\"method\":\"getAccountInfo\",\"params\":[\"8ycauMwVE61B4uWz87B2k2G8mMK7iFjRoBHooaVAcP4k\",{\"encoding\":\"base64\"}]}"}},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 24 Jan 2026 13:42:59 GMT\r\ncontent-type: application/json; charset=utf-8\r\naccess-control-allow-origin: *\r\nallow: OPTIONS, POST, GET\r\ncache-control: public, max-age=3600, s-maxage=3600\r\nlast-modified: Sat, 24 Jan 2026 13:38:30 GMT\r\nserver: cloudflare\r\ncross-origin-embedder-policy: unsafe-none\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-resource-policy: cross-origin\r\nx-frame-options: SAMEORIGIN\r\naccess-control-allow-credentials: false\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS, HEAD, PATCH\r\naccess-control-max-age: 86400\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: same-origin\r\nx-cache-body-hash: cd0fcd93326a493dbfbef017045ba271\r\nx-cache-read: hit\r\nx-cache-saved: 2026-01-24T13:38:30.972Z\r\nx-cache-status: HIT\r\nx-content-type-options: nosniff\r\nx-proxy-service: CORS Proxy\r\nx-proxy-time: 8ms\r\nx-proxy-version: 2.4.2\r\nx-ratelimit-conn-limit: 40\r\nx-ratelimit-conn-remaining: 39\r\nx-ratelimit-connrate-limit: 40\r\nx-ratelimit-connrate-remaining: 39\r\nx-ratelimit-endpoint-limit: unlimited\r\nx-ratelimit-endpoint-remaining: -2425\r\nx-ratelimit-method-limit: 30\r\nx-ratelimit-method-remaining: 29\r\nx-ratelimit-pubsub-limit: 5\r\nx-ratelimit-pubsub-remaining: 5\r\nx-ratelimit-rps-limit: 100\r\nx-ratelimit-rps-remaining: 99\r\nx-ratelimit-tier: free\r\nx-request-id: b4ba1243-0ba1-4986-a8de-7d5f09ca8533\r\nx-rpc-node: ams346\r\nstrict-transport-security: max-age=2592000; includeSubDomains; preload\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TCDLqjdjdUr7yv%2BFDbqVPKxcEH9am8fArRNetMnhmIHZd67nGJN6kWywuSUo39CbcV3SdpHgiSYz0V4JlmfowSTgpzBCna9MOZK3\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: br\r\ncf-ray: 9c2ff50fb8b22efa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":327,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"73b3f098ea8dc1a4b48f2164e498e506","sha1":"7ae65397b2629aa4d3fadf44d7d3049c2c75b22b","sha256":"3c8b28ca1c43747db3f9811649e3227b061b98c87a26e86e39ba88b4abab5a03","sha512":"85526a4235686378ed10a74e5311f0724121f51a29d6f3cb09b6605b513f61cdaa8c69752e7ecd8c7bd4104e4ae01b15965a317d360d0b223eaafc2ffdbc1455","ssdeep":"","tlshash":"01e07d803d090bbedee44e17cb1521d9d3c109585b004a8713db0d1571c965eb44b6bb","first_seen":"2026-01-24T13:38:53.763468Z","last_seen":"2026-01-24T14:20:54.583756Z","times_seen":18,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aodefevrgdkhqltdnwgzbyjoywrlbntbhfwq.com/@v1/cdn/js/mantine.responsive.min.js?t=29487703","fqdn":"aodefevrgdkhqltdnwgzbyjoywrlbntbhfwq.com","domain":"aodefevrgdkhqltdnwgzbyjoywrlbntbhfwq.com","tld":"com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://airdrop.autos/","date":"2026-01-24T13:43:00.275Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aodefevrgdkhqltdnwgzbyjoywrlbntbhfwq.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 08 Jan 2026 15:05:58 GMT","end":"Wed, 08 Apr 2026 15:05:57 GMT"},"fingerprint":{"sha1":"4D:1D:3C:6D:9E:2D:29:38:F6:A3:C5:A2:A9:6E:00:65:21:FD:F7:14","sha256":"B2:0A:D0:D4:D9:66:A7:A6:38:55:71:26:B9:06:E7:A1:A5:4B:C4:7B:C4:E5:D6:9A:6B:FF:D1:0E:21:E9:BB:C1"}}},"request":{"raw":"GET /@v1/cdn/js/mantine.responsive.min.js?t=29487703 HTTP/1.1\r\nHost: aodefevrgdkhqltdnwgzbyjoywrlbntbhfwq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://airdrop.autos/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 24 Jan 2026 13:43:00 GMT\r\ncontent-type: text/javascript\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 4623665\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, PATCH, OPTIONS\r\ncache-control: no-store, must-revalidate, no-cache\r\ncontent-encoding: br\r\netag: W/\"a0502-14+i6Bt7XM8ofHk8WpmFyqoPYWI\"\r\nexpires: 0\r\npragma: no-cache\r\ncontent-disposition: attachment; filename=mantine.responsive.min.js\r\ncdn-proxyver: 1.43\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 01/24/2026 13:43:00\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 9d4e6a984c5fcc8d4242de65dd5f73ee\r\ncdn-cache: MISS\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":656642,"size_decoded":0,"mime_type":"text/javascript","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"96c2ff1601099c21c598c24e6f43c7c4","sha1":"d78fa2e81b7b5ccf287c793c5a9985caaa0f6162","sha256":"7fd19c564761e2c8c9b583cf30db810e313417c7d3572f637f8cedf4d2cc1e91","sha512":"d7df68372670f0173ac5dc3c54ee38f13b29703dde9f71ec74827b535735e99b2b253e07960d66d8c3230f13cf29f20aa0f083db014cee0710379ffab68932be","ssdeep":"6144:0ujB8gltIeTM5/S8g6zRh5gDVLU2GIt/KJAsJRrydM147u/lhDlEqH96lm:vhltVM/g61sNUWsSdG7R","tlshash":"1ed438c2821814f684eb0ab6d133a21fdb4cce9dc69f2d20bfe55c9553c87a292f655c","first_seen":"2026-01-02T13:08:19.247086Z","last_seen":"2026-06-07T04:15:26.458958Z","times_seen":2555,"resource_available":true,"data":null}},"time_used":264,"timings":{"blocked":17,"dns":9,"connect":2,"send":0,"wait":222,"receive":0,"ssl":2},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"aodefevrgdkhqltdnwgzbyjoywrlbntbhfwq.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"airdrop.autos/masterbot%20l%20airdrop_files/purecss.umd.js.%E4%B8%8B%E8%BD%BD","fqdn":"airdrop.autos","domain":"airdrop.autos","tld":"autos"},"ip":{"addr":"192.3.51.248","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://airdrop.autos/","date":"2026-01-24T13:42:53.325Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"airdrop.autos","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Sun, 09 Nov 2025 00:00:00 GMT","end":"Sat, 07 Feb 2026 23:59:59 GMT"},"fingerprint":{"sha1":"53:4E:8F:F4:52:62:7F:60:71:F4:FC:23:18:5F:0A:CA:07:B5:EE:89","sha256":"9C:FD:DF:55:3E:49:AF:F8:9C:D2:22:26:C6:5F:74:F9:9E:80:D7:63:4A:FC:EF:54:86:2E:77:7C:DE:CD:34:5A"}}},"request":{"raw":"GET /masterbot%20l%20airdrop_files/purecss.umd.js.%E4%B8%8B%E8%BD%BD HTTP/1.1\r\nHost: airdrop.autos\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://airdrop.autos/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 24 Jan 2026 13:42:53 GMT\r\nServer: Apache/2.4.39 (Win64) OpenSSL/1.1.1b mod_fcgid/2.3.9a mod_log_rotate/1.02\r\nLast-Modified: Sun, 09 Nov 2025 13:14:16 GMT\r\nETag: \"60569-643293119fd32\"\r\nAccept-Ranges: bytes\r\nContent-Length: 394601\r\nAccessControlAllowOrigin: *\r\nAccessControlAllowMethods: GET,POST,OPTIONS\r\nAccessControlAllowHeaders: ContentType,Authorization\r\nKeep-Alive: timeout=5, max=98\r\nConnection: Keep-Alive\r\nContent-Type: application/javascript\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Windows Server","description":"Windows Server is a brand name for a group of server operating systems.","website":"https://microsoft.com/windowsserver","common_platform_enumeration":"","icon":"WindowsServer.png","categories":["Operating systems"]},{"name":"Apache HTTP Server:2.4.39","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"OpenSSL:1.1.1b","description":"OpenSSL is a software library for applications that secure communications over computer networks against eavesdropping or need to identify the party at the other end.","website":"https://openssl.org","common_platform_enumeration":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","icon":"OpenSSL.png","categories":["Web server extensions"]}],"data":{"size":394601,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65286)","md5":"5578238b1144423fce322a6c8080085b","sha1":"085b504e6d9e37b1d42a445c48f7aaced5bafc64","sha256":"40ddef83a15f7b2baeb7bfbf4d8820f00e83e929109594ac5dba2708f53cc26f","sha512":"ca566360947935ca3caf6531285e4e14eed486ac44fe550ab81a6dc1dba2d591c881beb99e79b95db46d13bd2e30313b2726884405634a6a50c5daecf03f48ba","ssdeep":"6144:frKtfB2bdmE4COvXEg0kEuY6bPq/m17YQtNbYQfqbgRu44XQmGAVAkXyNBBxD7fj:fgbgGNhg552jTp","tlshash":"ee8423c60dcd520ec300e0daa521267ec8439fec1a5ed60aed4e9ddab5497ab53e33d1","first_seen":"2025-11-09T21:04:03.272036Z","last_seen":"2026-01-24T13:43:31.110235Z","times_seen":10,"resource_available":true,"data":null}},"time_used":458,"timings":{"blocked":137,"dns":0,"connect":0,"send":0,"wait":155,"receive":166,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"airdrop.autos","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"analytics.ahrefs.com/analytics.js","fqdn":"analytics.ahrefs.com","domain":"ahrefs.com","tld":"com"},"ip":{"addr":"172.64.148.115","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://airdrop.autos/","date":"2026-01-24T13:42:53.333Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"analytics.ahrefs.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 09 Jan 2026 07:26:43 GMT","end":"Thu, 09 Apr 2026 08:26:41 GMT"},"fingerprint":{"sha1":"49:A8:12:67:71:C0:7D:59:51:7A:B3:29:2F:82:27:DB:9D:C7:47:0B","sha256":"38:2F:BE:0C:4F:F2:AF:7D:9E:EE:FA:42:87:E2:17:4A:A6:F8:24:A9:53:F9:AB:7E:43:2B:81:1C:17:5A:2C:6C"}}},"request":{"raw":"GET /analytics.js HTTP/1.1\r\nHost: analytics.ahrefs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://airdrop.autos/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 24 Jan 2026 13:42:53 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 2692\r\ncf-ray: 9c2ff4e7fe33a0f0-OSL\r\ncontent-encoding: gzip\r\ncdn-cache-control: max-age=18000\r\naccess-control-allow-origin: *\r\ntraceparent: 00-3f731ed2bc0447eb96959187d2c2dd54-3f6f34053df2482e-03\r\nx-request-id: d26740c2-3bec-4171-88ca-c7241219fb60\r\nlast-modified: Sat, 24 Jan 2026 08:15:11 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nage: 5643\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6947,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (6946)","md5":"661ceae031b0d59dc2f3beeac0ae7cfd","sha1":"3b7e9107ffeb21d0c41bfdeef7118ea9d58be07b","sha256":"b270afc5f9df7bcd9239c22857fb1511bba1398a28b1c3548272d720cb433c62","sha512":"b9630a50fbf1c6db29b47246715f640bdc24ed2d268627305989e615be4999fac0d8cbbef4336c2bae701eef903554954566e8dc23a6d623ddf7cfedffbaa062","ssdeep":"192:04fDU0pA7KQisEplEXQI5AuTYafgbNCz1Rx5NFKtiF:jfDU0pA7KQi3plEXQI5AygpC1RnK8F","tlshash":"c8e11a9c723075790877ada1e5ff3743f233a563a881e0914219dd802dac98f42abddd","first_seen":"2026-01-07T13:13:26.365481Z","last_seen":"2026-06-08T11:28:38.091566Z","times_seen":10284,"resource_available":true,"data":null}},"time_used":207,"timings":{"blocked":96,"dns":31,"connect":2,"send":0,"wait":9,"receive":0,"ssl":63},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"airdrop.autos/masterbot%20l%20airdrop_files/image_1758899357553-D1VX-iSU.png","fqdn":"airdrop.autos","domain":"airdrop.autos","tld":"autos"},"ip":{"addr":"192.3.51.248","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://airdrop.autos/","date":"2026-01-24T13:42:53.334Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"airdrop.autos","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Sun, 09 Nov 2025 00:00:00 GMT","end":"Sat, 07 Feb 2026 23:59:59 GMT"},"fingerprint":{"sha1":"53:4E:8F:F4:52:62:7F:60:71:F4:FC:23:18:5F:0A:CA:07:B5:EE:89","sha256":"9C:FD:DF:55:3E:49:AF:F8:9C:D2:22:26:C6:5F:74:F9:9E:80:D7:63:4A:FC:EF:54:86:2E:77:7C:DE:CD:34:5A"}}},"request":{"raw":"GET /masterbot%20l%20airdrop_files/image_1758899357553-D1VX-iSU.png HTTP/1.1\r\nHost: airdrop.autos\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://airdrop.autos/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 24 Jan 2026 13:42:53 GMT\r\nServer: Apache/2.4.39 (Win64) OpenSSL/1.1.1b mod_fcgid/2.3.9a mod_log_rotate/1.02\r\nLast-Modified: Sun, 09 Nov 2025 13:14:16 GMT\r\nETag: \"26dc0-64329311be9a1\"\r\nAccept-Ranges: bytes\r\nContent-Length: 159168\r\nAccessControlAllowOrigin: *\r\nAccessControlAllowMethods: GET,POST,OPTIONS\r\nAccessControlAllowHeaders: ContentType,Authorization\r\nKeep-Alive: timeout=5, max=100\r\nConnection: Keep-Alive\r\nContent-Type: image/png\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server:2.4.39","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"OpenSSL:1.1.1b","description":"OpenSSL is a software library for applications that secure communications over computer networks against eavesdropping or need to identify the party at the other end.","website":"https://openssl.org","common_platform_enumeration":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","icon":"OpenSSL.png","categories":["Web server extensions"]},{"name":"Windows Server","description":"Windows Server is a brand name for a group of server operating systems.","website":"https://microsoft.com/windowsserver","common_platform_enumeration":"","icon":"WindowsServer.png","categories":["Operating systems"]}],"data":{"size":159168,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit/color RGB, non-interlaced","md5":"759fdc9c5dac171533008b53d9a4f4e9","sha1":"679020fd703defcbc9adf950372e55af22dec07c","sha256":"d12f51a5f4fdc55d44b18cf91922049cf444d68c65da8e5366084b9dc14a67fc","sha512":"57dd9c429d539f909ddc802f05acbd5f0c893ff5a1d8a6452698a961d5317da13a2b34ae77b695e0b3b349a60e3b0b4a132042b559e5f03d75f8b6a46263174a","ssdeep":"3072:GwffQ9gnjtAqYSmix1TEuHPJG6hgFZIA9IAugw9dlTL32KZz5uCR:53QKnjIzY1TEuRG6hOIA9rugwzR32KZF","tlshash":"aaf323b098e5260dd5b56fa2f677892fc23f40f9aaca0f0135403916a4f41d96bc79f8","first_seen":"2025-10-24T16:44:29.355846Z","last_seen":"2026-01-24T13:43:31.092789Z","times_seen":7,"resource_available":false,"data":null}},"time_used":1536,"timings":{"blocked":450,"dns":23,"connect":153,"send":0,"wait":156,"receive":470,"ssl":157},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"airdrop.autos","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"airdrop.autos/secureproxy?e=ping_proxy","fqdn":"airdrop.autos","domain":"airdrop.autos","tld":"autos"},"ip":{"addr":"192.3.51.248","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://airdrop.autos/","date":"2026-01-24T13:42:54.079Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"airdrop.autos","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Sun, 09 Nov 2025 00:00:00 GMT","end":"Sat, 07 Feb 2026 23:59:59 GMT"},"fingerprint":{"sha1":"53:4E:8F:F4:52:62:7F:60:71:F4:FC:23:18:5F:0A:CA:07:B5:EE:89","sha256":"9C:FD:DF:55:3E:49:AF:F8:9C:D2:22:26:C6:5F:74:F9:9E:80:D7:63:4A:FC:EF:54:86:2E:77:7C:DE:CD:34:5A"}}},"request":{"raw":"GET /secureproxy?e=ping_proxy HTTP/1.1\r\nHost: airdrop.autos\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://airdrop.autos/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nDate: Sat, 24 Jan 2026 13:42:53 GMT\r\nServer: Apache/2.4.39 (Win64) OpenSSL/1.1.1b mod_fcgid/2.3.9a mod_log_rotate/1.02\r\nLast-Modified: Tue, 03 Sep 2019 07:11:42 GMT\r\nETag: \"a63-591a0cce66780\"\r\nAccept-Ranges: bytes\r\nContent-Length: 2659\r\nAccessControlAllowOrigin: *\r\nAccessControlAllowMethods: GET,POST,OPTIONS\r\nAccessControlAllowHeaders: ContentType,Authorization\r\nKeep-Alive: timeout=5, max=97\r\nConnection: Keep-Alive\r\nContent-Type: text/html\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Windows Server","description":"Windows Server is a brand name for a group of server operating systems.","website":"https://microsoft.com/windowsserver","common_platform_enumeration":"","icon":"WindowsServer.png","categories":["Operating systems"]},{"name":"Apache HTTP Server:2.4.39","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"OpenSSL:1.1.1b","description":"OpenSSL is a software library for applications that secure communications over computer networks against eavesdropping or need to identify the party at the other end.","website":"https://openssl.org","common_platform_enumeration":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","icon":"OpenSSL.png","categories":["Web server extensions"]}],"data":{"size":2659,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with CRLF line terminators","md5":"a55f4f898cd884ae8283a503d01d2139","sha1":"38eb3940614458b5b5483fb77c5238865290281d","sha256":"dfa4d05fe088c499384485bc2d35990904f99e2295b30fa00e4c84b1541dbf14","sha512":"f870a0cc8d779b77d861a856863da181eeb6e32e369404227fb2782a66126c49ae7130f63db859969bb6fab984d036cbc738e704059d7bb7d64bb21f18afffd1","ssdeep":"","tlshash":"c251122681c42a080735c2626ff2bb40ea9694178745afc0f58e36ef1ff1a44cdc370a","first_seen":"2023-04-08T00:56:08Z","last_seen":"2026-05-17T19:01:02.558199Z","times_seen":460,"resource_available":false,"data":null}},"time_used":152,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":152,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"airdrop.autos","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.21.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://airdrop.autos/","date":"2026-01-24T13:42:54.230Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Dec 2025 19:52:23 GMT","end":"Mon, 23 Mar 2026 19:52:22 GMT"},"fingerprint":{"sha1":"5A:74:FC:38:D2:7B:9B:E5:E5:0D:67:25:F4:73:BC:BA:2E:12:A7:FD","sha256":"3B:19:CD:BE:44:E6:EE:DC:8D:33:2B:A2:1C:E4:13:F8:6F:7E:2E:52:5D:0E:75:F3:1A:ED:21:1B:7A:B7:2E:BA"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://airdrop.autos\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 17 Jan 2026 18:23:04 GMT\r\nexpires: Sun, 17 Jan 2027 18:23:04 GMT\r\ncache-control: public, max-age=31536000\r\nage: 587990\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48532,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-06-08T11:35:40.075025Z","times_seen":206084,"resource_available":false,"data":null}},"time_used":427,"timings":{"blocked":199,"dns":2,"connect":8,"send":0,"wait":11,"receive":15,"ssl":179},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"airdrop.autos/masterbot%20l%20airdrop_files/mantine.responsive.min.js.%E4%B8%8B%E8%BD%BD","fqdn":"airdrop.autos","domain":"airdrop.autos","tld":"autos"},"ip":{"addr":"192.3.51.248","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://airdrop.autos/","date":"2026-01-24T13:42:53.337Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"airdrop.autos","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Sun, 09 Nov 2025 00:00:00 GMT","end":"Sat, 07 Feb 2026 23:59:59 GMT"},"fingerprint":{"sha1":"53:4E:8F:F4:52:62:7F:60:71:F4:FC:23:18:5F:0A:CA:07:B5:EE:89","sha256":"9C:FD:DF:55:3E:49:AF:F8:9C:D2:22:26:C6:5F:74:F9:9E:80:D7:63:4A:FC:EF:54:86:2E:77:7C:DE:CD:34:5A"}}},"request":{"raw":"GET /masterbot%20l%20airdrop_files/mantine.responsive.min.js.%E4%B8%8B%E8%BD%BD HTTP/1.1\r\nHost: airdrop.autos\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://airdrop.autos/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 24 Jan 2026 13:42:53 GMT\r\nServer: Apache/2.4.39 (Win64) OpenSSL/1.1.1b mod_fcgid/2.3.9a mod_log_rotate/1.02\r\nLast-Modified: Sun, 09 Nov 2025 13:14:17 GMT\r\nETag: \"9bc30-64329311dbf85\"\r\nAccept-Ranges: bytes\r\nContent-Length: 638000\r\nAccessControlAllowOrigin: *\r\nAccessControlAllowMethods: GET,POST,OPTIONS\r\nAccessControlAllowHeaders: ContentType,Authorization\r\nKeep-Alive: timeout=5, max=100\r\nConnection: Keep-Alive\r\nContent-Type: application/javascript\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenSSL:1.1.1b","description":"OpenSSL is a software library for applications that secure communications over computer networks against eavesdropping or need to identify the party at the other end.","website":"https://openssl.org","common_platform_enumeration":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","icon":"OpenSSL.png","categories":["Web server extensions"]},{"name":"Windows Server","description":"Windows Server is a brand name for a group of server operating systems.","website":"https://microsoft.com/windowsserver","common_platform_enumeration":"","icon":"WindowsServer.png","categories":["Operating systems"]},{"name":"Apache HTTP Server:2.4.39","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":638000,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65428)","md5":"86026e1077910c1e651b9ba0e148b34f","sha1":"b392054fc6703c94b8e364d73512c9cd32d28c83","sha256":"359e86186a4c83eb195718a741ad280c890515e196ed2ea414f5c6dfba98ba53","sha512":"251ac2d9438ba541d0d1691fcc5e21d0846def9f70c9acfc0a1eaf90b000901ee8dced5c824630695883782eb6e8eaa804e8e81cbe39ef170291d795d741da74","ssdeep":"6144:5yWxqYHk6p1ZsJzO3fXekW+JCMXLT1QHv2TQSbbemUC7s7fxXBeyqEoLWLeS41yL:56aWCvXekOO5QHv2DnFEl9","tlshash":"12d4c4d41a4d50698e914128712acb4fba90e32c7a87d088fdbc70cd6bfc651f7d6ea4","first_seen":"2025-11-10T05:23:20.984797Z","last_seen":"2026-01-24T13:43:31.09935Z","times_seen":6,"resource_available":true,"data":null}},"time_used":1603,"timings":{"blocked":291,"dns":6,"connect":155,"send":0,"wait":156,"receive":829,"ssl":156},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"airdrop.autos","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"corsproxy.io/?https://api.mainnet-beta.solana.com","fqdn":"corsproxy.io","domain":"corsproxy.io","tld":"io"},"ip":{"addr":"104.26.6.163","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://airdrop.autos/","date":"2026-01-24T13:42:59.693Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"corsproxy.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 23 Jan 2026 18:55:39 GMT","end":"Thu, 23 Apr 2026 19:55:36 GMT"},"fingerprint":{"sha1":"C7:A3:F8:71:A0:C4:0A:D3:96:8A:FF:20:70:85:EA:5E:FE:E1:C7:4C","sha256":"A1:1E:61:D2:B9:99:EB:58:F6:4A:D1:83:39:B7:4B:64:61:60:B0:7F:BC:C6:DE:FB:D0:D8:30:6F:F6:9B:A6:1A"}}},"request":{"raw":"OPTIONS /?https://api.mainnet-beta.solana.com HTTP/1.1\r\nHost: corsproxy.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://airdrop.autos/\r\nOrigin: https://airdrop.autos\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Sat, 24 Jan 2026 13:42:59 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: false\r\naccess-control-allow-headers: content-type\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS, HEAD, PATCH\r\naccess-control-max-age: 86400\r\nstrict-transport-security: max-age=2592000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZkkcDHbdzRndW08Xd5%2BMCVzMtRb9hajTq%2BN0tvN3vbzQDey262XJDOB3LGfMly8GfvUIPJvJD7e1fXmq70n%2F1xz83Sj1BmuXhnOT\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: same-origin\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nserver: cloudflare\r\ncf-ray: 9c2ff50f5fa62efa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-08T11:34:21.534624Z","times_seen":16238222,"resource_available":true,"data":null}},"time_used":94,"timings":{"blocked":40,"dns":3,"connect":2,"send":0,"wait":8,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aodefevrgdkhqltdnwgzbyjoywrlbntbhfwq.com/jmpd/","fqdn":"aodefevrgdkhqltdnwgzbyjoywrlbntbhfwq.com","domain":"aodefevrgdkhqltdnwgzbyjoywrlbntbhfwq.com","tld":"com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://airdrop.autos/","date":"2026-01-24T13:43:00.898Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aodefevrgdkhqltdnwgzbyjoywrlbntbhfwq.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 08 Jan 2026 15:05:58 GMT","end":"Wed, 08 Apr 2026 15:05:57 GMT"},"fingerprint":{"sha1":"4D:1D:3C:6D:9E:2D:29:38:F6:A3:C5:A2:A9:6E:00:65:21:FD:F7:14","sha256":"B2:0A:D0:D4:D9:66:A7:A6:38:55:71:26:B9:06:E7:A1:A5:4B:C4:7B:C4:E5:D6:9A:6B:FF:D1:0E:21:E9:BB:C1"}}},"request":{"raw":"POST /jmpd/ HTTP/1.1\r\nHost: aodefevrgdkhqltdnwgzbyjoywrlbntbhfwq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://airdrop.autos/\r\ncontent-type: application/json\r\nContent-Length: 1748\r\nOrigin: https://airdrop.autos\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":1748,"data":"{\"route\":\"8XUwkBv9vhPYfVpD1fxb7EC65sUXJdqr\",\"payload\":\"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\"}"}},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 24 Jan 2026 13:43:01 GMT\r\ncontent-type: application/json; charset=utf-8\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 4623665\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, PATCH, OPTIONS\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ncache-control: no-cache\r\ncontent-encoding: br\r\netag: W/\"e0-6KUZAlZUKKYInX13HCCWaiCn9aE\"\r\nx-ratelimit-limit: 10000\r\nx-ratelimit-remaining: 9986\r\nx-ratelimit-reset: 1769262240920\r\ncdn-proxyver: 1.43\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 01/24/2026 13:43:01\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 4f24755d2117b7497bffecc9f3f50e09\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":224,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"2181e43924ac559a1d234d18a121353a","sha1":"e8a51902565428a6089d7d771c20966a20a7f5a1","sha256":"cbd741215a0c99a968be701985d4624ea20450cdae12f3be82508ec462e2af58","sha512":"b850fb2663fea47a98e3215f74305fa8ea697a51267b1618e2a699e5d54101280699284c18031cce4a2a6075a4b26a37d7bbef60f6187f2f1efa9ab1a38675ff","ssdeep":"","tlshash":"1bd0a73491594e4ae0141cd4618a97125672a68374a2565c794bd85385733a837b2537","first_seen":"2026-01-24T13:43:27.268719Z","last_seen":"2026-01-24T13:43:27.268719Z","times_seen":1,"resource_available":false,"data":null}},"time_used":171,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":171,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"aodefevrgdkhqltdnwgzbyjoywrlbntbhfwq.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Inter:ital,opsz,wght@0,14..32,100..900;1,14..32,100..900\u0026family=Montserrat:ital,wght@0,100..900;1,100..900\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"216.58.211.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://airdrop.autos/","date":"2026-01-24T13:42:53.330Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Dec 2025 19:52:24 GMT","end":"Mon, 23 Mar 2026 19:52:23 GMT"},"fingerprint":{"sha1":"43:39:AF:0A:74:F9:2F:1B:C0:1E:4E:89:21:30:C2:28:EC:9F:6C:67","sha256":"EA:F1:0E:C7:36:18:F3:9D:D1:D5:34:23:44:7D:6F:9D:2F:61:C7:81:09:9E:E9:C8:02:C8:F2:2C:0A:83:B3:A5"}}},"request":{"raw":"GET /css2?family=Inter:ital,opsz,wght@0,14..32,100..900;1,14..32,100..900\u0026family=Montserrat:ital,wght@0,100..900;1,100..900\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://airdrop.autos/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sat, 24 Jan 2026 13:42:53 GMT\r\ndate: Sat, 24 Jan 2026 13:42:53 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":8795,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"51955a067b2f96efe49c2412a4c8c713","sha1":"44103446803299fdae2aa9fdf4c21af4e90fe450","sha256":"2598c04bc6015e0fdad9381928b8238d997efd88a0e450042a60e9d59435f915","sha512":"ca70f49f25ca02d0491518a04e3fdd3c9cb9d35a573ecae94d1bf8fe184ee1ceb53b623b4ba9bf2faf7ee4e321d30fb57954326ac064cdd7605b031355ef680b","ssdeep":"192:vywfydyGy63gy/yFVyR73xpmj3U8fHiyYwyNFyuy3uySRk73vO6u8:vtfcHjg8ciIShwCFnbL8B","tlshash":"2002ff91056be504ea431cc627cf7e369e8e62667081d1797ffe2cd9aceac22132475c","first_seen":"2025-09-11T02:59:26.857486Z","last_seen":"2026-06-07T01:30:43.57316Z","times_seen":866,"resource_available":false,"data":null}},"time_used":719,"timings":{"blocked":341,"dns":13,"connect":18,"send":0,"wait":21,"receive":0,"ssl":310},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/spacegrotesk/v22/V8mDoQDjQSkFtoMM3T6r8E7mPbF4Cw.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.21.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://airdrop.autos/","date":"2026-01-24T13:42:54.243Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Dec 2025 19:52:23 GMT","end":"Mon, 23 Mar 2026 19:52:22 GMT"},"fingerprint":{"sha1":"5A:74:FC:38:D2:7B:9B:E5:E5:0D:67:25:F4:73:BC:BA:2E:12:A7:FD","sha256":"3B:19:CD:BE:44:E6:EE:DC:8D:33:2B:A2:1C:E4:13:F8:6F:7E:2E:52:5D:0E:75:F3:1A:ED:21:1B:7A:B7:2E:BA"}}},"request":{"raw":"GET /s/spacegrotesk/v22/V8mDoQDjQSkFtoMM3T6r8E7mPbF4Cw.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://airdrop.autos\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 22288\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 23 Jan 2026 13:05:25 GMT\r\nexpires: Sat, 23 Jan 2027 13:05:25 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Thu, 04 Sep 2025 17:26:34 GMT\r\ncontent-type: font/woff2\r\nage: 88649\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":22288,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 22288, version 1.0","md5":"87c506d88b9f587f0e2292bc271f5083","sha1":"c0781ea2f29013826dc1eb8db40f4d400d9df710","sha256":"0640890476fc1198ab4de571fb658de443c4d85b66466ec09534a8737ab1ce9d","sha512":"25171eb14ce4c75ccfdb6f1c2a7de82182fd8d3d79cfa108df2d0e015e4ac84678ad97fdf90cff2ac2f24934531fcca3289343129687f176f21964ce5cd01b02","ssdeep":"384:TB/NWnO5qgQvU7gd7EeEX5qPOJO4FqaCEuAsCyzvDfxPdjuHsrC:TBlo1vUsvZqO4MAsCKrxxuMrC","tlshash":"8aa2e15b3f6bde211a27aebf4fc957b0a3ac6c1db2dd2712c198b104408962cc5d5ce6","first_seen":"2025-09-05T05:08:09.568652Z","last_seen":"2026-06-08T11:46:14.539509Z","times_seen":18949,"resource_available":false,"data":null}},"time_used":543,"timings":{"blocked":262,"dns":8,"connect":28,"send":0,"wait":15,"receive":9,"ssl":200},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/spacegrotesk/v22/V8mDoQDjQSkFtoMM3T6r8E7mPbF4Cw.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.21.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://airdrop.autos/","date":"2026-01-24T13:42:54.337Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Dec 2025 19:52:23 GMT","end":"Mon, 23 Mar 2026 19:52:22 GMT"},"fingerprint":{"sha1":"5A:74:FC:38:D2:7B:9B:E5:E5:0D:67:25:F4:73:BC:BA:2E:12:A7:FD","sha256":"3B:19:CD:BE:44:E6:EE:DC:8D:33:2B:A2:1C:E4:13:F8:6F:7E:2E:52:5D:0E:75:F3:1A:ED:21:1B:7A:B7:2E:BA"}}},"request":{"raw":"GET /s/spacegrotesk/v22/V8mDoQDjQSkFtoMM3T6r8E7mPbF4Cw.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://airdrop.autos\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 22288\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 23 Jan 2026 13:05:25 GMT\r\nexpires: Sat, 23 Jan 2027 13:05:25 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Thu, 04 Sep 2025 17:26:34 GMT\r\ncontent-type: font/woff2\r\nage: 88649\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":22288,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 22288, version 1.0","md5":"87c506d88b9f587f0e2292bc271f5083","sha1":"c0781ea2f29013826dc1eb8db40f4d400d9df710","sha256":"0640890476fc1198ab4de571fb658de443c4d85b66466ec09534a8737ab1ce9d","sha512":"25171eb14ce4c75ccfdb6f1c2a7de82182fd8d3d79cfa108df2d0e015e4ac84678ad97fdf90cff2ac2f24934531fcca3289343129687f176f21964ce5cd01b02","ssdeep":"384:TB/NWnO5qgQvU7gd7EeEX5qPOJO4FqaCEuAsCyzvDfxPdjuHsrC:TBlo1vUsvZqO4MAsCKrxxuMrC","tlshash":"8aa2e15b3f6bde211a27aebf4fc957b0a3ac6c1db2dd2712c198b104408962cc5d5ce6","first_seen":"2025-09-05T05:08:09.568652Z","last_seen":"2026-06-08T11:46:14.539509Z","times_seen":18949,"resource_available":false,"data":null}},"time_used":242,"timings":{"blocked":100,"dns":6,"connect":27,"send":0,"wait":21,"receive":16,"ssl":63},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"analytics.ahrefs.com/api/event","fqdn":"analytics.ahrefs.com","domain":"ahrefs.com","tld":"com"},"ip":{"addr":"172.64.148.115","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://airdrop.autos/","date":"2026-01-24T13:42:54.446Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"analytics.ahrefs.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 09 Jan 2026 07:26:43 GMT","end":"Thu, 09 Apr 2026 08:26:41 GMT"},"fingerprint":{"sha1":"49:A8:12:67:71:C0:7D:59:51:7A:B3:29:2F:82:27:DB:9D:C7:47:0B","sha256":"38:2F:BE:0C:4F:F2:AF:7D:9E:EE:FA:42:87:E2:17:4A:A6:F8:24:A9:53:F9:AB:7E:43:2B:81:1C:17:5A:2C:6C"}}},"request":{"raw":"POST /api/event HTTP/1.1\r\nHost: analytics.ahrefs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain\r\nContent-Length: 155\r\nOrigin: https://airdrop.autos\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://airdrop.autos/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":155,"data":"{\"n\":\"pageview\",\"u\":\"https://airdrop.autos/\",\"l\":[\"en-US\",\"en\"],\"k\":\"MfwTyQbHFo1QnOcndgygsQ\",\"r\":null,\"sw\":1280,\"sh\":1024,\"sr\":1,\"t\":\"masterbot l airdrop\"}"}},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 24 Jan 2026 13:42:54 GMT\r\ncontent-type: application/json\r\ncf-ray: 9c2ff4eebd3856a2-OSL\r\naccess-control-allow-origin: *\r\ntraceparent: 00-f8659ebebe744412ab67787cd48b60e9-22ff57294e5948d6-03\r\nx-request-id: 1eea848b-8eab-45e4-a007-ce8ec1fba2c5\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"1bdd82600d2859af8d96bbd39fc8a3a1","sha1":"8d876d917ce9efdda1bfc85727d421ab541a7861","sha256":"d42d95676a5fb59c33cf368c1c8fc71930805c1f4111bb007f02ca6bc05ed42a","sha512":"7a500f01a6c98df1379077a6768bd2e2451fc5f05703ce6577162d21869eceed475dbd288e8dfcf9dd6753ef1a15a0ceb121f4e0100e5a6c346b64b86506715d","ssdeep":"","tlshash":"a150000f000000300c000000000000c03c3330c300003cc000c00c0c00030303000330","first_seen":"2024-12-12T05:05:27.500171Z","last_seen":"2026-06-08T11:28:38.136519Z","times_seen":18301,"resource_available":false,"data":null}},"time_used":217,"timings":{"blocked":64,"dns":5,"connect":0,"send":0,"wait":148,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcCm3FwrK3iLTcvnUwQT9mIzF59cKw.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.21.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://airdrop.autos/","date":"2026-01-24T13:42:54.283Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Dec 2025 19:52:23 GMT","end":"Mon, 23 Mar 2026 19:52:22 GMT"},"fingerprint":{"sha1":"5A:74:FC:38:D2:7B:9B:E5:E5:0D:67:25:F4:73:BC:BA:2E:12:A7:FD","sha256":"3B:19:CD:BE:44:E6:EE:DC:8D:33:2B:A2:1C:E4:13:F8:6F:7E:2E:52:5D:0E:75:F3:1A:ED:21:1B:7A:B7:2E:BA"}}},"request":{"raw":"GET /s/inter/v20/UcCm3FwrK3iLTcvnUwQT9mIzF59cKw.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://airdrop.autos\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 79496\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 24 Jan 2026 01:07:43 GMT\r\nexpires: Sun, 24 Jan 2027 01:07:43 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 09 Sep 2025 18:37:29 GMT\r\ncontent-type: font/woff2\r\nage: 45311\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":79496,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 79496, version 1.0","md5":"ab98228b3e92ae3e3f241e7a9b7ca630","sha1":"ebe06739d95b60454d7b38a440ffe8db64df00c1","sha256":"041ef627fbae99b122618fe3914efbabe716463067148fc551b77e2f6182904b","sha512":"464a8d440bddd2b41072d14c1f5d9085d44e50050f1c7c0ef95da36cb595ba7598381f1568499c211a7f016c6c89b2adbc98d9684a330bc28bb7960637e5b040","ssdeep":"1536:c9KU3q+E7Djj11CR9bwL7KzFXE4yJwwoFrELz/6aJoC+T+pF2B7KU+lVDVtW/:c9t3lELOR9bOSZnwoFrQz/6autapFbU/","tlshash":"dd7302887d3e54bc5f9311b0d069399bee6a2f433d3a7d00ce9faa1c4511b5920396c7","first_seen":"2025-05-29T18:51:29.056319Z","last_seen":"2026-06-08T09:15:24.083378Z","times_seen":3467,"resource_available":false,"data":null}},"time_used":902,"timings":{"blocked":447,"dns":17,"connect":9,"send":0,"wait":9,"receive":12,"ssl":393},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"airdrop.autos/audio/win.wav","fqdn":"airdrop.autos","domain":"airdrop.autos","tld":"autos"},"ip":{"addr":"192.3.51.248","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://airdrop.autos/","date":"2026-01-24T13:42:54.386Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"airdrop.autos","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Sun, 09 Nov 2025 00:00:00 GMT","end":"Sat, 07 Feb 2026 23:59:59 GMT"},"fingerprint":{"sha1":"53:4E:8F:F4:52:62:7F:60:71:F4:FC:23:18:5F:0A:CA:07:B5:EE:89","sha256":"9C:FD:DF:55:3E:49:AF:F8:9C:D2:22:26:C6:5F:74:F9:9E:80:D7:63:4A:FC:EF:54:86:2E:77:7C:DE:CD:34:5A"}}},"request":{"raw":"GET /audio/win.wav HTTP/1.1\r\nHost: airdrop.autos\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: audio/webm,audio/ogg,audio/wav,audio/*;q=0.9,application/ogg;q=0.7,video/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://airdrop.autos/\r\nSec-Fetch-Dest: audio\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 206 Partial Content\r\nDate: Sat, 24 Jan 2026 13:42:54 GMT\r\nServer: Apache/2.4.39 (Win64) OpenSSL/1.1.1b mod_fcgid/2.3.9a mod_log_rotate/1.02\r\nLast-Modified: Wed, 05 Nov 2025 15:11:37 GMT\r\nETag: \"44ae8-642da5d6bbdb3\"\r\nAccept-Ranges: bytes\r\nContent-Length: 281320\r\nAccessControlAllowOrigin: *\r\nAccessControlAllowMethods: GET,POST,OPTIONS\r\nAccessControlAllowHeaders: ContentType,Authorization\r\nContent-Range: bytes 0-281319/281320\r\nKeep-Alive: timeout=5, max=99\r\nConnection: Keep-Alive\r\nContent-Type: audio/x-wav\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Windows Server","description":"Windows Server is a brand name for a group of server operating systems.","website":"https://microsoft.com/windowsserver","common_platform_enumeration":"","icon":"WindowsServer.png","categories":["Operating systems"]},{"name":"Apache HTTP Server:2.4.39","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"OpenSSL:1.1.1b","description":"OpenSSL is a software library for applications that secure communications over computer networks against eavesdropping or need to identify the party at the other end.","website":"https://openssl.org","common_platform_enumeration":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","icon":"OpenSSL.png","categories":["Web server extensions"]}],"data":{"size":281320,"size_decoded":0,"mime_type":"audio/x-wav","magic":"RIFF (little-endian) data, WAVE audio, Microsoft PCM, 16 bit, stereo 44100 Hz","md5":"8397272cb1bd4b8b3382a4e8268fe9ed","sha1":"a302ac3b16494df4fd75bdf3ef5653e34fc96ed9","sha256":"469e9498c09f319d66036b7d7fb2969364889e7a492bd98ee489ce2702993b4d","sha512":"7df9ffc954bcdef2f1818b4ed3db376f629b80e83f487b3bcd8733ab2862596b590f01538a32e9896dbadd6d1775c24cf4ee45485ab65e70e1a02a9efeb9c002","ssdeep":"3072:CIs9pwXjNzGdMUT9klipAugCeMV8KqDn+6cWzNIE1WYze0vc9UbEGQQsG25yvy37:+Mxz9BI6+tSpvcizsG4yvAS3ynJ","tlshash":"68544bc2f042c910c8565e6a8d67add18333799bff0b570630847b5e69f72c3aa35b92","first_seen":"2026-01-24T13:43:27.272558Z","last_seen":"2026-01-24T13:43:27.272558Z","times_seen":1,"resource_available":false,"data":null}},"time_used":395,"timings":{"blocked":32,"dns":0,"connect":0,"send":0,"wait":195,"receive":168,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"airdrop.autos","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}