{"report_id":"41df2501-77b1-4f82-8fba-51e2d607f8dc","version":6,"status":"done","tags":[],"date":"2026-05-29T11:10:05Z","url":{"schema":"http","addr":"crypto-airdrop.fun","fqdn":"crypto-airdrop.fun","domain":"crypto-airdrop.fun","tld":"fun"},"ip":{"addr":"159.203.143.218","port":0,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"United States","country_code":"US"},"final":{"url":{"schema":"http","addr":"crypto-airdrop.fun/","fqdn":"crypto-airdrop.fun","domain":"crypto-airdrop.fun","tld":"fun"},"title":"The domain crypto-airdrop.fun is powered by NicNames.com","dom":{"size":3457,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"6696404da09c7325b6787fb5e919c0fd","sha1":"096a58793abe9958afa96a5be03a88cfc9073ed0","sha256":"2a99860a773ed83ed97032095ff5fe2a2427dba1c3364699b9ca0b0ce62a9521","sha512":"85c1a3295ed5412624434b8979b4878e473f0408503f614385ac0c07f9cce89eb844e13382c977a903f539d449f12767cfa7eebb4a079c4bd35b898474e9816b","ssdeep":"","tlshash":"f0619d6381f9b0d707a4c3886537bd2ccd83906b9dc09699f9ad054a1f91ee3d93368d","dom_hash":"domhashd721b64074d88418f38e75b8eb283932","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"crypto-airdrop.fun","fqdn":"crypto-airdrop.fun","domain":"crypto-airdrop.fun","tld":"fun"},"ip":{"addr":"159.203.143.218","port":0,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-07-03T11:10:05Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-29","alert":"Sinkholed","trigger":"crypto-airdrop.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null},"summary":[{"fqdn":"crypto-airdrop.fun","ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2026-02-21","domain_rank":0,"first_seen":"2026-05-29T11:01:35.668533Z","last_seen":"2026-05-29T11:01:35.668533Z","alert_count":2,"request_count":2,"received_data":3941,"sent_data":890,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"PHP:8.3.30","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"64.233.162.95","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-05-24T22:21:07.624228Z","alert_count":0,"request_count":1,"received_data":3249,"sent_data":478,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-05-24T22:18:17.447529Z","alert_count":0,"request_count":1,"received_data":25882,"sent_data":600,"comment":"","tags":null,"fingerprints":null},{"fqdn":"3sspw4l2.tinifycdn.com","ip":{"addr":"151.101.1.91","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2019-07-31","domain_rank":0,"first_seen":"2024-10-22T22:36:51.267882Z","last_seen":"2026-05-28T11:02:44.12613Z","alert_count":0,"request_count":7,"received_data":12174,"sent_data":3235,"comment":"","tags":null,"fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"http","addr":"crypto-airdrop.fun/","fqdn":"crypto-airdrop.fun","domain":"crypto-airdrop.fun","tld":"fun"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"ac2f6a18f15bb7457ebe1e312e2c665a","sha1":"35326b6431381df64eb325426e27d409544ed6ae","sha256":"fde0c9a7440a54e264c06d9f2abcb399476c7b22aae442e3e9ff53bfc6eb791e","sha512":"d57b4c00c2b0407206b366c9ca23bf2674e2e31486ec57c3ed2fbc6a74944b0d68f9877894c8d446295c911a5d45e7bbbf31360aca979f9b925288ceece9df8d","ssdeep":"","tlshash":"1ca002610191d658b1b972545524db6e9975a8b6e889d632383e87220094916851c491","size":59,"data":"","first_seen":"2025-06-22T13:40:44.470563Z","last_seen":"2026-05-30T05:40:41.605299Z","times_seen":120,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":[{"md5":"c92a10324374fac681719d63979d00fe","sha1":"aee655773d856fb038536adcfd6472fc7543463e","sha256":"158a323a7ba44870f23d96f1516dd70aa48e9a72db4ebb026b0a89e212a208ab","sha512":"d27859c90f5748d3ec0ef6d4ef49c1755d6ce1ac8035cd4f7dba41b8dd7d440ad8fca164ccc948b5630ef90346ff9279e35d31887e724ab6e0284300a80eb61f","ssdeep":"","tlshash":"8430000000000000000c0000000000000000000003000000c000003000000000000c00","size":4,"data":"","first_seen":"2024-08-20T00:14:53.541497Z","last_seen":"2026-05-30T10:10:14.665747Z","times_seen":26384,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"console":null},"http":[{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Geologica:wght@100..900\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"64.233.162.95","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"http://crypto-airdrop.fun/","date":"2026-05-29T11:09:45.661Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Thu, 07 May 2026 15:53:15 GMT","end":"Thu, 30 Jul 2026 15:53:14 GMT"},"fingerprint":{"sha1":"19:42:B0:56:3A:E4:79:BF:8B:69:E2:50:F4:76:BF:1E:A9:D7:7A:49","sha256":"D7:FF:C1:46:95:F3:5F:08:04:B0:E1:A8:FE:14:FC:60:19:58:D6:C7:D3:6E:82:B3:64:07:E9:E1:CB:9A:27:8C"}}},"request":{"raw":"GET /css2?family=Geologica:wght@100..900\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://3sspw4l2.tinifycdn.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Fri, 29 May 2026 11:09:45 GMT\r\ndate: Fri, 29 May 2026 11:09:45 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2563,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"cbd3d1f5cc4ac42cd5afa7be3c034174","sha1":"48c94790d99f8d0a486068c35f96144f42ef7951","sha256":"91dcb9c68171dac8ac6685d642090fe16608990345558a09eb5dde0c16dfab48","sha512":"aef1f3e6ed37f59c68339c828ada19c5d44f6fb314c4c713c6ac6602e700be152f2c436af16c9b39df48c03a0281296f9dd221462e0c0e72f104bbec9af14adb","ssdeep":"","tlshash":"ed51ac51413b80509a435dca37cf7f25ee4fd011a480a6a5affd0899ec99d32639eb2d","first_seen":"2025-09-15T12:13:53.590513Z","last_seen":"2026-05-30T05:40:41.600858Z","times_seen":432,"resource_available":false,"data":null}},"time_used":264,"timings":{"blocked":116,"dns":1,"connect":28,"send":0,"wait":30,"receive":0,"ssl":86},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/geologica/v5/oY1l8evIr7j9P3TN9YwNAdyjzUyDKkKdAGOJh1UlCDUIhAIdhCZOn1fLsig7jfvCCPHZckUWE1lELWVN-ttr.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"http://crypto-airdrop.fun/","date":"2026-05-29T11:09:45.864Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Thu, 07 May 2026 15:53:13 GMT","end":"Thu, 30 Jul 2026 15:53:12 GMT"},"fingerprint":{"sha1":"6C:B9:FE:19:9C:7C:AA:5D:D2:39:3A:16:2C:50:FB:C8:59:C8:CC:A8","sha256":"FC:4C:0C:6E:AB:D1:82:30:1F:A9:46:DF:FA:38:02:9F:06:56:FF:98:E0:8D:AB:9A:26:C3:2A:97:C5:CF:A6:1C"}}},"request":{"raw":"GET /s/geologica/v5/oY1l8evIr7j9P3TN9YwNAdyjzUyDKkKdAGOJh1UlCDUIhAIdhCZOn1fLsig7jfvCCPHZckUWE1lELWVN-ttr.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: http://crypto-airdrop.fun\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 25048\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 28 May 2026 13:59:21 GMT\r\nexpires: Fri, 28 May 2027 13:59:21 GMT\r\ncache-control: public, max-age=31536000\r\nage: 76224\r\nlast-modified: Tue, 09 Sep 2025 18:54:22 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":25048,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 25048, version 1.0","md5":"c49830a9455e7c8904d3de020f4631aa","sha1":"89d45a2b65b87bc25017fcc8b8dd5bff8105da28","sha256":"c6338927a821601fce0a9321979a97cc3111048665ac0e8cd7fc223f1788adc2","sha512":"0103ac2d59c01f569748d0cdae4fd1d043a514375f8eca4f7431c93bc4ea598cc61cf3a0f0a3984247f9b381c82003733030a6a36f65b049d0e8fd69825a1b9d","ssdeep":"384:fMsR4JOQCku353XgQZ2RIp8aC7jea2MkJ4pfMJOA49Xp2BCOTsKYiaOM1/jN:h4JXC35nEIp8FRrMQA49XpGVFIZ","tlshash":"4fb2e1ccf6246122c35b01b7af113ffc2db694e28c6769070731d2a8395bcaa1cdd25a","first_seen":"2025-09-11T08:19:04.531615Z","last_seen":"2026-05-30T05:40:41.604224Z","times_seen":878,"resource_available":false,"data":null}},"time_used":206,"timings":{"blocked":88,"dns":1,"connect":15,"send":0,"wait":16,"receive":13,"ssl":71},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"3sspw4l2.tinifycdn.com/images/parkpage/favicon-16x16.png","fqdn":"3sspw4l2.tinifycdn.com","domain":"tinifycdn.com","tld":"com"},"ip":{"addr":"151.101.1.91","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://crypto-airdrop.fun/","date":"2026-05-29T11:09:46.005Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tinifycdn.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 08 May 2026 00:00:00 GMT","end":"Sun, 22 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"B9:34:60:23:5F:A6:19:79:B3:12:DA:11:AC:FC:D4:F3:B8:C2:7B:7D","sha256":"B3:46:7E:5A:06:0D:59:42:53:2F:0A:C1:A7:1E:85:88:34:D1:F6:94:A8:D4:70:57:1E:2F:5A:DC:4D:5B:1E:80"}}},"request":{"raw":"GET /images/parkpage/favicon-16x16.png HTTP/1.1\r\nHost: 3sspw4l2.tinifycdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://crypto-airdrop.fun/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 302\r\ncontent-type: image/png\r\netag: \"bB9luF1ahdAomujTCa/JiQ\"\r\ntinify-optimization: optimal\r\ncache-control: public, max-age=2592000\r\naccess-control-allow-origin: *\r\nvia: 2.0 tinify, 1.1 google, 1.1 varnish\r\naccept-ranges: bytes\r\ndate: Fri, 29 May 2026 11:09:46 GMT\r\nage: 172728\r\nx-cache: HIT\r\nx-pop: cache-hel1410022-HEL\r\nx-served-by: Fastly\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":302,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 16 x 16, 8-bit colormap, non-interlaced","md5":"6c1f65b85d5a85d0289ae8d309afc989","sha1":"c512660a9935a9e8f14d98c1ea75739c6edf92a1","sha256":"5da532f90a8dec796358e6bd5525ce649aa3127f197e3482d8be8ab12938e30c","sha512":"419a32443f77273d72d9e4995a8d85ec31b8beb688500b1bfb0ea03720dfc3056faa7f13eebc05f84027e301da0074a6f6ed2f2ae96f891419da65249b57d4b6","ssdeep":"","tlshash":"53e02ba2726d8dadd1c9d2799ba18c949c306c1ed528f0d35a1abcb92038c14b65a6c3","first_seen":"2026-04-08T10:02:02.015537Z","last_seen":"2026-05-30T05:40:41.601958Z","times_seen":13,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":2,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"crypto-airdrop.fun/","fqdn":"crypto-airdrop.fun","domain":"crypto-airdrop.fun","tld":"fun"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-05-29T11:09:44.319Z","timestamp":0,"http_version":"","security_state":"broken","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: crypto-airdrop.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-30T11:03:17.879472Z","times_seen":15911484,"resource_available":true,"data":null}},"time_used":217,"timings":{"blocked":217,"dns":0,"connect":102,"send":0,"wait":0,"receive":0,"ssl":111},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-29","alert":"Sinkholed","trigger":"crypto-airdrop.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"3sspw4l2.tinifycdn.com/images/parkpage/style.css?2025","fqdn":"3sspw4l2.tinifycdn.com","domain":"tinifycdn.com","tld":"com"},"ip":{"addr":"151.101.1.91","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"http://crypto-airdrop.fun/","date":"2026-05-29T11:09:45.241Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tinifycdn.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 08 May 2026 00:00:00 GMT","end":"Sun, 22 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"B9:34:60:23:5F:A6:19:79:B3:12:DA:11:AC:FC:D4:F3:B8:C2:7B:7D","sha256":"B3:46:7E:5A:06:0D:59:42:53:2F:0A:C1:A7:1E:85:88:34:D1:F6:94:A8:D4:70:57:1E:2F:5A:DC:4D:5B:1E:80"}}},"request":{"raw":"GET /images/parkpage/style.css?2025 HTTP/1.1\r\nHost: 3sspw4l2.tinifycdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://crypto-airdrop.fun/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css\r\ncache-control: public, max-age=2592000\r\netag: \"SZrRWyXuXPj24stqs8qEew\"\r\ntinify-optimization: optimal\r\naccess-control-allow-origin: *\r\nvia: 2.0 tinify, 1.1 google, 1.1 varnish\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\nage: 436372\r\ndate: Fri, 29 May 2026 11:09:45 GMT\r\nx-cache: HIT\r\nvary: Accept-Encoding\r\nx-pop: cache-hel1410021-HEL\r\nx-served-by: Fastly\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 772\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":3004,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (3004), with no line terminators","md5":"499ad15b25ee5cf8f6e2cb6ab3ca847b","sha1":"f55b7e9cfad1757d69ac5bd7b1fb35e32aebabe3","sha256":"8512ccab9a7058aef14156f531bd9275bf2587a44bca641da54191b6884e326b","sha512":"0f98f0103cfd8dc21e0d438cbab4881fe26e4eb919c055adbed3e08eafc2db85f33e8e93ff18aa88fc6971c3a7b535171af4e483c437a81d9a6a6d3d1be8f786","ssdeep":"","tlshash":"975141b1575a2038f87bd59db8e0998d3aa48607e19b96fdf861c938c0c9033672172d","first_seen":"2026-01-01T22:50:16.402933Z","last_seen":"2026-05-30T05:40:41.604769Z","times_seen":24,"resource_available":false,"data":null}},"time_used":283,"timings":{"blocked":131,"dns":92,"connect":13,"send":0,"wait":14,"receive":1,"ssl":28},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"3sspw4l2.tinifycdn.com/images/parkpage/logo.png","fqdn":"3sspw4l2.tinifycdn.com","domain":"tinifycdn.com","tld":"com"},"ip":{"addr":"151.101.1.91","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://crypto-airdrop.fun/","date":"2026-05-29T11:09:45.243Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tinifycdn.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 08 May 2026 00:00:00 GMT","end":"Sun, 22 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"B9:34:60:23:5F:A6:19:79:B3:12:DA:11:AC:FC:D4:F3:B8:C2:7B:7D","sha256":"B3:46:7E:5A:06:0D:59:42:53:2F:0A:C1:A7:1E:85:88:34:D1:F6:94:A8:D4:70:57:1E:2F:5A:DC:4D:5B:1E:80"}}},"request":{"raw":"GET /images/parkpage/logo.png HTTP/1.1\r\nHost: 3sspw4l2.tinifycdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://crypto-airdrop.fun/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\netag: \"WS8PvdFTWwyfVE8sMjzaww\"\r\ntinify-optimization: optimal\r\ncache-control: public, max-age=2592000\r\naccess-control-allow-origin: *\r\nvia: 2.0 tinify, 1.1 google, 1.1 varnish\r\naccept-ranges: bytes\r\nage: 97989\r\ndate: Fri, 29 May 2026 11:09:45 GMT\r\nx-cache: HIT\r\nx-pop: cache-hel1410021-HEL\r\nx-served-by: Fastly\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 1871\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":1871,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 399 x 78, 8-bit colormap, non-interlaced","md5":"592f0fbdd1535b0c9f544f2c323cdac3","sha1":"39d3ff71047a4291cdb0c1a7b1465e67af684c93","sha256":"b49cda2c363200bdb01c043bd4d81f066377e7a521aaa725b1c3426824e3b939","sha512":"742543586d75dcc6837c94a3d5b984ec97c2b677f348e895539b171c772996063eed207a603988600fde3a89e7507e1f289188f7b8e454e6d9e7f23188da67b0","ssdeep":"","tlshash":"db31198ef707e4fcc098d172a140497f987cfe8e6e22371d98ba89163263480545af4b","first_seen":"2026-04-08T10:02:02.014597Z","last_seen":"2026-05-30T05:40:41.598665Z","times_seen":12,"resource_available":false,"data":null}},"time_used":146,"timings":{"blocked":130,"dns":0,"connect":0,"send":0,"wait":15,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"3sspw4l2.tinifycdn.com/images/parkpage/trademark.png","fqdn":"3sspw4l2.tinifycdn.com","domain":"tinifycdn.com","tld":"com"},"ip":{"addr":"151.101.1.91","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://crypto-airdrop.fun/","date":"2026-05-29T11:09:45.248Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tinifycdn.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 08 May 2026 00:00:00 GMT","end":"Sun, 22 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"B9:34:60:23:5F:A6:19:79:B3:12:DA:11:AC:FC:D4:F3:B8:C2:7B:7D","sha256":"B3:46:7E:5A:06:0D:59:42:53:2F:0A:C1:A7:1E:85:88:34:D1:F6:94:A8:D4:70:57:1E:2F:5A:DC:4D:5B:1E:80"}}},"request":{"raw":"GET /images/parkpage/trademark.png HTTP/1.1\r\nHost: 3sspw4l2.tinifycdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://crypto-airdrop.fun/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\netag: \"yHAZXHQjXFSmtC/IdEJcVw\"\r\ntinify-optimization: optimal\r\ncache-control: public, max-age=2592000\r\naccess-control-allow-origin: *\r\nvia: 2.0 tinify, 1.1 google, 1.1 varnish\r\naccept-ranges: bytes\r\nage: 280705\r\ndate: Fri, 29 May 2026 11:09:45 GMT\r\nx-cache: HIT\r\nx-pop: cache-hel1410021-HEL\r\nx-served-by: Fastly\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 1585\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":1585,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 192 x 192, 8-bit colormap, non-interlaced","md5":"c870195c74235c54a6b42fc874425c57","sha1":"48d66b409e6fbc9fe45f325aa4ae8f6f5916a293","sha256":"4d5ae0a19052064ef812dda2e98d0a921ebf185394d64f4921ed354f3986d02d","sha512":"25ff4ea4a5559a9c16e112d17091e97802c38768ee3c1b97b8b5c603399b702ebae16cff258352ec9c4dc4cbae809448607156cb62df9dbd0446f8857d138902","ssdeep":"","tlshash":"5b31c8c50e776153e7337cea2f7c97935628e57235f84b0b637692839b0194a45c1243","first_seen":"2026-03-29T08:19:30.54585Z","last_seen":"2026-05-30T05:40:41.600305Z","times_seen":15,"resource_available":false,"data":null}},"time_used":141,"timings":{"blocked":125,"dns":0,"connect":0,"send":0,"wait":14,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"3sspw4l2.tinifycdn.com/images/parkpage/apple-touch-icon.png","fqdn":"3sspw4l2.tinifycdn.com","domain":"tinifycdn.com","tld":"com"},"ip":{"addr":"151.101.1.91","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://crypto-airdrop.fun/","date":"2026-05-29T11:09:46.003Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tinifycdn.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 08 May 2026 00:00:00 GMT","end":"Sun, 22 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"B9:34:60:23:5F:A6:19:79:B3:12:DA:11:AC:FC:D4:F3:B8:C2:7B:7D","sha256":"B3:46:7E:5A:06:0D:59:42:53:2F:0A:C1:A7:1E:85:88:34:D1:F6:94:A8:D4:70:57:1E:2F:5A:DC:4D:5B:1E:80"}}},"request":{"raw":"GET /images/parkpage/apple-touch-icon.png HTTP/1.1\r\nHost: 3sspw4l2.tinifycdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://crypto-airdrop.fun/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 600\r\ncontent-type: image/png\r\netag: \"1+xdhB1Hj2ribWaBXpZT0g\"\r\ntinify-optimization: optimal\r\ncache-control: public, max-age=2592000\r\naccess-control-allow-origin: *\r\nvia: 2.0 tinify, 1.1 google, 1.1 varnish\r\naccept-ranges: bytes\r\nage: 478386\r\ndate: Fri, 29 May 2026 11:09:46 GMT\r\nx-cache: HIT\r\nx-pop: cache-hel1410022-HEL\r\nx-served-by: Fastly\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":600,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 180 x 180, 8-bit colormap, non-interlaced","md5":"d7ec5d841d478f6ae26d66815e9653d2","sha1":"7d76a11bd7393d7b5245229fa9c00b2f53832b43","sha256":"cb551665c407662b5eba602043392a6b031945d4b36f8c99e8d44bf8d2ce056b","sha512":"80ebd941943649a842129386cb6dfbce4e1007deba3744981d186da8344214e7703307a26aa9883339268ed443128e425af591271dbe203d1fed332c43808ee9","ssdeep":"","tlshash":"6ff041caea25cc80c30c5d30594241bdf8f0161282b34a10a642592f47c3f138d0609a","first_seen":"2026-04-08T10:02:02.012637Z","last_seen":"2026-05-30T05:40:41.601405Z","times_seen":12,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":4,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"crypto-airdrop.fun/","fqdn":"crypto-airdrop.fun","domain":"crypto-airdrop.fun","tld":"fun"},"ip":{"addr":"159.203.143.218","port":80,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-05-29T11:09:44.763Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: crypto-airdrop.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 29 May 2026 11:09:45 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nX-Powered-By: PHP/8.3.30\r\nAccess-Control-Allow-Methods: GET, POST, OPTIONS, PUT, DELETE, HEADER\r\nAccess-Control-Allow-Headers: Content-Type, Accept-Language, Authorization\r\nAccess-Control-Allow-Credentials: true\r\nVary: Accept-Encoding, Origin\r\nX-Frame-Options: DENY\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"PHP:8.3.30","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":3487,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text","md5":"5d3f6eefc653ba2eef6a9cfc2e15af4f","sha1":"24be3f7413387276e7533033a174d7e00b0076f0","sha256":"fb3c63b5698419c6287074c278a8cc0dccc47876263debfe4ffa70f7902d2cb0","sha512":"b73d1f0209ab0e2c7dcb40e740d77e4576864fe43f31351cd9bac8f5850914ec5c859f6e31d6cfc731538650e508a3a50513bb6b0485a81cb07ec3b4eb685396","ssdeep":"","tlshash":"d071be6381f9b0d707a0c3886527bd28dd83906b9dc05699f9ed098a1f91ae3d93368d","first_seen":"2026-05-29T11:01:39.016855Z","last_seen":"2026-05-29T11:10:06.063853Z","times_seen":2,"resource_available":true,"data":null}},"time_used":413,"timings":{"blocked":102,"dns":1,"connect":102,"send":0,"wait":208,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-29","alert":"Sinkholed","trigger":"crypto-airdrop.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"3sspw4l2.tinifycdn.com/images/parkpage/domains.png","fqdn":"3sspw4l2.tinifycdn.com","domain":"tinifycdn.com","tld":"com"},"ip":{"addr":"151.101.1.91","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://crypto-airdrop.fun/","date":"2026-05-29T11:09:45.245Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tinifycdn.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 08 May 2026 00:00:00 GMT","end":"Sun, 22 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"B9:34:60:23:5F:A6:19:79:B3:12:DA:11:AC:FC:D4:F3:B8:C2:7B:7D","sha256":"B3:46:7E:5A:06:0D:59:42:53:2F:0A:C1:A7:1E:85:88:34:D1:F6:94:A8:D4:70:57:1E:2F:5A:DC:4D:5B:1E:80"}}},"request":{"raw":"GET /images/parkpage/domains.png HTTP/1.1\r\nHost: 3sspw4l2.tinifycdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://crypto-airdrop.fun/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\netag: \"bWdx7u6D1NAjs9TInRj5+A\"\r\ntinify-optimization: optimal\r\ncache-control: public, max-age=2592000\r\naccess-control-allow-origin: *\r\nvia: 2.0 tinify, 1.1 google, 1.1 varnish\r\naccept-ranges: bytes\r\nage: 718368\r\ndate: Fri, 29 May 2026 11:09:45 GMT\r\nx-cache: HIT\r\nx-pop: cache-hel1410021-HEL\r\nx-served-by: Fastly\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 1361\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":1361,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 192 x 192, 8-bit colormap, non-interlaced","md5":"6d6771eeee83d4d023b3d4c89d18f9f8","sha1":"1497521aae3112f8322c050fde96067c2552ec39","sha256":"ed18f3ba19dd61224355aaa8c39164c717769ad29324a052e28444e00029b821","sha512":"6d8b7c981bd40c142ab8e9d25bded15661fdfa55db9d789140669dd004bc2851a7d0e9c6b99fd73ef755e75aa7415b9abbb835d7089072af14372ba6983d9185","ssdeep":"","tlshash":"df21d5f3070af86dc6baa220c0ffa0cee3871408480d803dc4599ed075168787acba5a","first_seen":"2026-04-15T07:03:55.479661Z","last_seen":"2026-05-30T05:40:41.603724Z","times_seen":12,"resource_available":false,"data":null}},"time_used":145,"timings":{"blocked":129,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"3sspw4l2.tinifycdn.com/images/parkpage/arrow.png","fqdn":"3sspw4l2.tinifycdn.com","domain":"tinifycdn.com","tld":"com"},"ip":{"addr":"151.101.1.91","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://crypto-airdrop.fun/","date":"2026-05-29T11:09:45.247Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tinifycdn.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 08 May 2026 00:00:00 GMT","end":"Sun, 22 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"B9:34:60:23:5F:A6:19:79:B3:12:DA:11:AC:FC:D4:F3:B8:C2:7B:7D","sha256":"B3:46:7E:5A:06:0D:59:42:53:2F:0A:C1:A7:1E:85:88:34:D1:F6:94:A8:D4:70:57:1E:2F:5A:DC:4D:5B:1E:80"}}},"request":{"raw":"GET /images/parkpage/arrow.png HTTP/1.1\r\nHost: 3sspw4l2.tinifycdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://crypto-airdrop.fun/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\netag: \"P1yJhpYGpfPSEzOTENiybg\"\r\ntinify-optimization: optimal\r\ncache-control: public, max-age=2592000\r\naccess-control-allow-origin: *\r\nvia: 2.0 tinify, 1.1 google, 1.1 varnish\r\naccept-ranges: bytes\r\nage: 172739\r\ndate: Fri, 29 May 2026 11:09:45 GMT\r\nx-cache: HIT\r\nx-pop: cache-hel1410021-HEL\r\nx-served-by: Fastly\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 169\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":169,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 23 x 41, 4-bit colormap, non-interlaced","md5":"3f5c89869606a5f3d213339310d8b26e","sha1":"4e9802696d7d62d644d9f129f5c156de2d54b498","sha256":"d5defc5f50fae17064777d3f6a93a4c7b8bf89121c9f1835cee23b2d4d2c3217","sha512":"886140353d94855efa3b5041d1d7ad212184cf058ce150a0f4509ea0ef0a562721b12d4df5aab81bcf34984a21f02d41e85dcc5d5edd40e2c9a8d2746c946fe9","ssdeep":"","tlshash":"33c08cc6f2b2adb0ca41c0fad659809fec6b013ce929c93945210861b223112a267aa6","first_seen":"2025-09-20T05:52:47.627148Z","last_seen":"2026-05-30T05:40:41.599237Z","times_seen":33,"resource_available":false,"data":null}},"time_used":141,"timings":{"blocked":126,"dns":0,"connect":0,"send":0,"wait":14,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}