{"report_id":"55fafce8-7b09-4c29-ae38-709f23627ed9","version":0,"status":"done","tags":[],"date":"2026-08-22T10:24:37Z","url":{"schema":"http","addr":"onlymarms.tokendrop.fun/","fqdn":"onlymarms.tokendrop.fun","domain":"tokendrop.fun","tld":"fun"},"ip":{"addr":"172.67.182.224","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"onlymarms.tokendrop.fun/","fqdn":"onlymarms.tokendrop.fun","domain":"tokendrop.fun","tld":"fun"},"title":"$OnlyMarms — The OnlyMarms Meme Coin Fan Page","dom":{"size":88558,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (63119)","md5":"c0ee7b83439f27004a0247b0fd03799f","sha1":"cc534316fd2fff453d561a72471e3a5c46293fdb","sha256":"941ad897ffed7f3409fa7eebbf9172eb435a1604de95d127153a51194230269c","sha512":"651fcf8b2571bdbfb25447ca5e6447aff0466b70f61990632fa45a946d87450f0a38261a4e9fff82cb8d8778bd45dc74cd3e10962495a1f0671566a1c1557d5f","ssdeep":"768:mYMzQH2L0r82It4uSRhKut5NFgl+FU+xHyvfSDIJPJWf3b8fzwZPROHXL0hDgmwa:mYMzqyrYIzqyrYpKI5ux9sH","tlshash":"fb839550f150193f360786fea1d4ef5ca1916205c913a668b3fc81e3e7caeb39eb2164","dom_hash":"domhash67bba65beb540428fab597a589bd2402","first_seen":"2026-08-22T10:22:21.169682Z","last_seen":"2026-08-22T10:24:42.21502Z","times_seen":2,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"onlymarms.tokendrop.fun/","fqdn":"onlymarms.tokendrop.fun","domain":"tokendrop.fun","tld":"fun"},"ip":{"addr":"172.67.182.224","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-09-26T10:24:37Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-22","alert":"Sinkholed","trigger":"onlymarms.tokendrop.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-22","alert":"Phishing Block","trigger":"onlymarms.tokendrop.fun","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null},"summary":[{"fqdn":"tuesday-corporal.web-dist.cc","ip":{"addr":"104.21.79.102","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-05-02","domain_rank":0,"first_seen":"2026-08-22T10:22:17.370063Z","last_seen":"2026-08-22T10:22:17.370063Z","alert_count":0,"request_count":4,"received_data":956843,"sent_data":2072,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.74","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-08-16T22:23:57.509837Z","alert_count":0,"request_count":1,"received_data":10792,"sent_data":539,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"onlymarms.tokendrop.fun","ip":{"addr":"172.67.182.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-08-13","domain_rank":0,"first_seen":"2026-08-22T10:22:17.36801Z","last_seen":"2026-08-22T10:22:17.36801Z","alert_count":34,"request_count":17,"received_data":3544018,"sent_data":9014,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nuxt.js","description":"Nuxt is a Vue framework for developing modern web applications.","website":"https://nuxt.com","common_platform_enumeration":"","icon":"Nuxt.js.svg","categories":["JavaScript frameworks","Web frameworks","Web servers","Static site generator"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Vue.js","description":"Vue.js is an open-source model–view–viewmodel JavaScript framework for building user interfaces and single-page applications.","website":"https://vuejs.org","common_platform_enumeration":"","icon":"vue.svg","categories":["JavaScript frameworks"]},{"name":"Lovable","description":"Lovable is an AI-powered, no-code platform that lets users build functional web apps from natural language prompts instead of writing code.","website":"https://lovable.dev/","common_platform_enumeration":"","icon":"Lovable.png","categories":["CMS"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"onlymarms.tokendrop.fun/","fqdn":"onlymarms.tokendrop.fun","domain":"tokendrop.fun","tld":"fun"},"ip":{"addr":"172.67.182.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"c9bdbad6ebbbd133c934040cb8a6ad5b","sha1":"d603d374ed67b4ecde1c7e201b4b41e1329ee440","sha256":"5acea54eea175e62fe005412108b10898d75bfb3acf92d02c159258cf5b1cbb3","sha512":"5ebd5f4ac702c594d669baf0b2370ae066dd00add484d5ac6e967f4f806e07548bce92ac8f0d7a1c77a1523f5a3ef2e3a926101f27c71c5aaf7027de4a1c1a2b","ssdeep":"","tlshash":"7de02e286aa624f925b338d2cb1eb282e86000735081c801fc1cf54a0f84e6838b1fc9","size":311,"data":"","first_seen":"2026-06-10T12:51:54.41043Z","last_seen":"2026-08-22T10:24:42.25828Z","times_seen":81,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tuesday-corporal.web-dist.cc/_nuxt/assets/index.js","fqdn":"tuesday-corporal.web-dist.cc","domain":"web-dist.cc","tld":"cc"},"ip":{"addr":"104.21.79.102","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"a25661b69d737bf8901dd0a9c21ec85d","sha1":"62be335dcaadaa7dbe0e3b504d13d06b849039b3","sha256":"7d508cbc98370fb22db9840b302ff060c5b7015082ad3fed215fb17a0ccacfed","sha512":"e688083810acce37866d3dea3b1cb2d19ba2ff4f9d86c2dbb4324b945e539b1c12225d2ceb4b02385e15794937c9d262bc7204a5f53ef8564482a6acce5ac755","ssdeep":"12288:qEJCREf9g+yWW50x1JAHX8tcNEMihVts9yxBh2Q2XM:qdRivJwX8tciMiVpBsXM","tlshash":"a11583ea458092be39626cec7cb69cf02cdcfc95c8194c7961daac4415bc0b9a357b7c","size":952231,"data":"","first_seen":"2026-08-22T00:10:18.491859Z","last_seen":"2026-08-22T10:24:42.229021Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"onlymarms.tokendrop.fun/","fqdn":"onlymarms.tokendrop.fun","domain":"tokendrop.fun","tld":"fun"},"ip":{"addr":"172.67.182.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"3924bfec86bb6910f6f33ea74a59aacb","sha1":"b7f5087bcba0089464f8f0eb27b27415bebd8314","sha256":"2d79a6a54d4625efbae4cedf5f5e66790096b78cddd1f5e32609578acf9bea29","sha512":"178b2374b26334501bd8e371bddc9012509b62739d72fa50a8648f6bdc10a0f171db1ee671646ae093e304e59f0f1c0bd3ff501571c004bc2a2d93c34339c456","ssdeep":"12288:6MJOFI3x8rJUXJopr0t6Uka17PYPaNpmXF:6zuXJCr0t6UkaRlpmXF","tlshash":"5415a6e886c0967eaa624cec7cf684f42c5cfc91c8dd4cb961e4a44415fc4b9a1a77bc","size":919839,"data":"","first_seen":"2026-08-22T00:10:18.49841Z","last_seen":"2026-08-22T10:24:42.269816Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"log","text":"1.17.19","filename":"https://tuesday-corporal.web-dist.cc/_nuxt/assets/index.js line 1 \u003e Function","line_number":3,"column_number":760298}]},"http":[{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Inter:wght@400;500;600;700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.74","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://onlymarms.tokendrop.fun/","date":"2026-08-22T10:24:06.169Z","timestamp":1787394246169,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Aug 2026 20:43:53 GMT","end":"Wed, 28 Oct 2026 20:43:52 GMT"},"fingerprint":{"sha1":"91:24:44:08:3E:65:60:72:3B:18:06:E2:82:7E:C0:8F:97:46:5D:B2","sha256":"71:59:B7:BB:3B:E8:E0:81:C8:B6:24:A3:57:11:62:47:10:A1:3D:E4:38:30:54:27:2E:19:C8:96:02:25:52:DD"}}},"request":{"raw":"GET /css2?family=Inter:wght@400;500;600;700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://onlymarms.tokendrop.fun/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sat, 22 Aug 2026 10:24:06 GMT\r\ndate: Sat, 22 Aug 2026 10:24:06 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10108,"size_decoded":1447,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"e85517dadd43448782d60d7f207fddce","sha1":"6cd31f870727ba8090fac9602b42524b4139a619","sha256":"88fbd0b95222be288587a149c324189ecbd8de0d6f0c94f528ec53857e52b66c","sha512":"5edc78df5bb062a9a2e1ea6724c14dd7eb80d77ea0fa9572de4bb0d52bbd0d163815b08a1ae77084f99fbefbb07715da1c61f0bb36fb498710c91387792955f8","ssdeep":"192:9NNIxO34OxDENOPCO3/Nx8NNryfO3iExlONEhYO3RrxGx:vXuM0p2+4","tlshash":"04227792002ba400ab971dc233cf7f3aaece50896085d1b95ffd0dc59cead66436876d","first_seen":"2025-09-10T18:13:11.065101Z","last_seen":"2026-08-22T11:49:53.596745Z","times_seen":41294,"resource_available":false,"data":null}},"time_used":88,"timings":{"blocked":-1,"dns":3,"connect":16,"send":0,"wait":36,"receive":0,"ssl":32},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"onlymarms.tokendrop.fun/marmot-hero.png","fqdn":"onlymarms.tokendrop.fun","domain":"tokendrop.fun","tld":"fun"},"ip":{"addr":"172.67.182.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://onlymarms.tokendrop.fun/","date":"2026-08-22T10:24:06.181Z","timestamp":1787394246181,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tokendrop.fun","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 13 Aug 2026 04:47:57 GMT","end":"Wed, 11 Nov 2026 05:47:54 GMT"},"fingerprint":{"sha1":"53:F2:12:0B:D1:EA:F7:B5:B6:9C:BA:F6:1E:D6:59:06:FC:75:93:30","sha256":"42:83:CD:A6:DC:62:BD:70:BC:36:CD:1F:5B:93:1F:C3:11:A9:AB:77:91:36:B1:33:09:82:F9:27:95:DB:8A:09"}}},"request":{"raw":"GET /marmot-hero.png HTTP/1.1\r\nHost: onlymarms.tokendrop.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://onlymarms.tokendrop.fun/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 22 Aug 2026 10:24:06 GMT\r\nserver-timing: cfExtPri\r\ncontent-type: image/png\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"2aa35438001b73022b00a2ca2a96af2d\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BA8wi1gusZ3vdtsCHNnSn1QwqTJcVxkfsRtEsHbXxQGCy9Ytqxyp4iTJAPKnF3CHpxCok%2FQ%2BL4N5lGJMqQ5TM72oHo1%2BHIsP8vZ%2BpX13T1IjucWoqXssp9M3LZF6wttp9lsFdWjxUnFsxA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a2f12a769d874e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 247856\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":247856,"size_decoded":248533,"mime_type":"image/png","magic":"PNG image data, 371 x 539, 8-bit/color RGBA, non-interlaced","md5":"3e283e2e8898d96e6055508f74d6c4bb","sha1":"d8639b07bf577955a9427f4d20be3d5cde918d06","sha256":"b147ab896796583cf069955967c70d1458d6e3b3e1646b2ca691aa514e778415","sha512":"4c6a289b9ab0b65371af9c170d12697364dcba63179cab4d10c52a8188e866719b58c06ddd5cea67181bb12cd9e190c7ed38e9309f50df8cda2cb936bb50fb0f","ssdeep":"3072:JnCvb5zHVCp+tGca8WSzH0yxI07TuR11XPFbFMdcbgbB6pujTx1TswPn6Ugx2vBY:0vb5G8HHaRJuZB6c/IwCRIvBY","tlshash":"ac3413ed41e90bb1ea71117914cbb27785c02a9337649d9791c9ee38942c32cd26cfbb","first_seen":"2026-08-22T10:22:21.183412Z","last_seen":"2026-08-22T10:24:42.217894Z","times_seen":2,"resource_available":false,"data":null}},"time_used":56,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":46,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-22","alert":"Sinkholed","trigger":"onlymarms.tokendrop.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-22","alert":"Phishing Block","trigger":"onlymarms.tokendrop.fun","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"onlymarms.tokendrop.fun/blumstein-abc-interview.mp4","fqdn":"onlymarms.tokendrop.fun","domain":"tokendrop.fun","tld":"fun"},"ip":{"addr":"172.67.182.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://onlymarms.tokendrop.fun/","date":"2026-08-22T10:24:06.191Z","timestamp":1787394246191,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tokendrop.fun","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 13 Aug 2026 04:47:57 GMT","end":"Wed, 11 Nov 2026 05:47:54 GMT"},"fingerprint":{"sha1":"53:F2:12:0B:D1:EA:F7:B5:B6:9C:BA:F6:1E:D6:59:06:FC:75:93:30","sha256":"42:83:CD:A6:DC:62:BD:70:BC:36:CD:1F:5B:93:1F:C3:11:A9:AB:77:91:36:B1:33:09:82:F9:27:95:DB:8A:09"}}},"request":{"raw":"GET /blumstein-abc-interview.mp4 HTTP/1.1\r\nHost: onlymarms.tokendrop.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nRange: bytes=0-\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://onlymarms.tokendrop.fun/\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 22 Aug 2026 10:24:06 GMT\r\nserver-timing: cfExtPri\r\ncontent-type: video/mp4\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\netag: \"62f820935098338075fb1d63673adf61\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qLYRJID9fZT1jjm7VLM02dUFl3vWkJCCfjAQnAUeWQzgERgJcyaDQMCUw53a8lOtnDaCoMB2nQwMe9ckGSvc7JOKwTko0%2BFJS2pyRzDCr%2Bcm1WhPuh2ZMrV67rg40hukhu4XJxU3l2kdGA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: a2f12a76ad8a4e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 853108\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":853108,"size_decoded":853733,"mime_type":"video/mp4","magic":"ISO Media, MP4 Base Media v1 [ISO 14496-12:2003]","md5":"c22a01db64b7431d5d1a96897df610f9","sha1":"1ff5f1a49de79b8e67e6fca4762db66730e97a64","sha256":"5693ea990ceca7cea58537626acaa7289c9c8a00baefb950db406f8ad7805d8f","sha512":"91bc5077aaf1afb101e0e78c2e451a45853386153c1f572c9676b2c49e41d38ed5cdd85675d16e467581e63871d56c1fd79f3c6dc5462ff36e52a5249bc95444","ssdeep":"24576:mvGppHCtMYctFkWdhQ4bi9HHdDFdOK3nMHAhOe2BgZSkse:mubitM5NdiRHhFdnkAseU6j","tlshash":"7f05238573d90629d13159fafcc6237663baf105e68e639bb39767b82cb17009c348d8","first_seen":"2026-08-22T10:22:21.185612Z","last_seen":"2026-08-22T10:24:42.219488Z","times_seen":2,"resource_available":false,"data":null}},"time_used":57,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":25,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-22","alert":"Sinkholed","trigger":"onlymarms.tokendrop.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-22","alert":"Phishing Block","trigger":"onlymarms.tokendrop.fun","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"onlymarms.tokendrop.fun/index_3","fqdn":"onlymarms.tokendrop.fun","domain":"tokendrop.fun","tld":"fun"},"ip":{"addr":"172.67.182.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://onlymarms.tokendrop.fun/","date":"2026-08-22T10:24:06.214Z","timestamp":1787394246214,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tokendrop.fun","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 13 Aug 2026 04:47:57 GMT","end":"Wed, 11 Nov 2026 05:47:54 GMT"},"fingerprint":{"sha1":"53:F2:12:0B:D1:EA:F7:B5:B6:9C:BA:F6:1E:D6:59:06:FC:75:93:30","sha256":"42:83:CD:A6:DC:62:BD:70:BC:36:CD:1F:5B:93:1F:C3:11:A9:AB:77:91:36:B1:33:09:82:F9:27:95:DB:8A:09"}}},"request":{"raw":"GET /index_3 HTTP/1.1\r\nHost: onlymarms.tokendrop.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://onlymarms.tokendrop.fun/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 22 Aug 2026 10:24:06 GMT\r\ncontent-encoding: zstd\r\ncontent-type: text/html\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iuIbIMGO2bY%2F53ymePWARFsatLksdsoAJJ%2FOkD2aj%2BUuJXswc2XkjwBKKVfSG5POJXmVMTPb8Z4MjQ1qUWYWwZ5%2Fr1dKSjTQxSO4EFvgbFWQXl6u%2B6mPe8sY%2F3%2FtDzIRqFOGB2X6kgIysg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2f12a76dd8e4e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":294,"size_decoded":876,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"535b808d95c649d0e95952422f3dbbd9","sha1":"028d58c95241f58ea10b289245dfb842e8a602b8","sha256":"c5872219b3f4c451c239f206a448ea8d2127d80cbb119f5950af37b4d4dc2c1f","sha512":"a4272e232e0a93be91d873df6fc21f0f45be7f3c73b0bf70dd90369728e1fd5487aec788a283209fbfd61514a5fbb91429b590f9b9fb21737c2d6c8e7f5e350a","ssdeep":"","tlshash":"cfe0ebeb917008011f2067a14fc2fc80188a7e9ef8424c697c6734a8ade92b1c033340","first_seen":"2026-08-22T10:22:21.188288Z","last_seen":"2026-08-22T10:24:42.221926Z","times_seen":2,"resource_available":false,"data":null}},"time_used":52,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":52,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-22","alert":"Phishing Block","trigger":"onlymarms.tokendrop.fun","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-22","alert":"Sinkholed","trigger":"onlymarms.tokendrop.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"onlymarms.tokendrop.fun/index_1","fqdn":"onlymarms.tokendrop.fun","domain":"tokendrop.fun","tld":"fun"},"ip":{"addr":"172.67.182.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://onlymarms.tokendrop.fun/","date":"2026-08-22T10:24:06.217Z","timestamp":1787394246217,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tokendrop.fun","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 13 Aug 2026 04:47:57 GMT","end":"Wed, 11 Nov 2026 05:47:54 GMT"},"fingerprint":{"sha1":"53:F2:12:0B:D1:EA:F7:B5:B6:9C:BA:F6:1E:D6:59:06:FC:75:93:30","sha256":"42:83:CD:A6:DC:62:BD:70:BC:36:CD:1F:5B:93:1F:C3:11:A9:AB:77:91:36:B1:33:09:82:F9:27:95:DB:8A:09"}}},"request":{"raw":"GET /index_1 HTTP/1.1\r\nHost: onlymarms.tokendrop.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://onlymarms.tokendrop.fun/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 22 Aug 2026 10:24:06 GMT\r\ncontent-encoding: zstd\r\ncontent-type: text/html\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=D2aX9aGnvMi%2FFJtGY9f34Bl5BrI29R4qKvNAwOBxyvN%2B1MUz%2F8uvXFatJfOucZOr6yktbDKsU8X%2FTZ0VART8it%2Fb0oygcOfWsRSD%2Bga47%2BB8HgyxTZogBp%2FnXYSg6lRmujsJVODo3jANqQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2f12a76dd904e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":201,"size_decoded":804,"mime_type":"text/html","magic":"HTML document, ASCII text, with no line terminators","md5":"accffc389519d78f05c94892222f092e","sha1":"5f957871f50031c238dbc92e56c69469781d5fa9","sha256":"fcaa07a7179caba2296eb8ea54a865e7ba25dbde43a391ac7ac53d08614cba16","sha512":"c0aeb6ebee410c7d970bde7b01fcebc8736abd44820cfb62ec698795f4063ceddfe41c7de520a3cdcc611aa9a51416f7156a8381f405b66481e2b610da22babc","ssdeep":"","tlshash":"6dd02226c4054a2bac428aa0c763e380c880c33afd318c61adf1aa20f68d5258a23688","first_seen":"2025-04-19T12:20:06.699203Z","last_seen":"2026-08-22T10:24:42.22495Z","times_seen":63,"resource_available":true,"data":null}},"time_used":24,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-22","alert":"Sinkholed","trigger":"onlymarms.tokendrop.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-22","alert":"Phishing Block","trigger":"onlymarms.tokendrop.fun","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"onlymarms.tokendrop.fun/Wnz6HAc5bAfYB2Q7ZjYY.woff2","fqdn":"onlymarms.tokendrop.fun","domain":"tokendrop.fun","tld":"fun"},"ip":{"addr":"172.67.182.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://onlymarms.tokendrop.fun/","date":"2026-08-22T10:24:06.397Z","timestamp":1787394246397,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tokendrop.fun","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 13 Aug 2026 04:47:57 GMT","end":"Wed, 11 Nov 2026 05:47:54 GMT"},"fingerprint":{"sha1":"53:F2:12:0B:D1:EA:F7:B5:B6:9C:BA:F6:1E:D6:59:06:FC:75:93:30","sha256":"42:83:CD:A6:DC:62:BD:70:BC:36:CD:1F:5B:93:1F:C3:11:A9:AB:77:91:36:B1:33:09:82:F9:27:95:DB:8A:09"}}},"request":{"raw":"GET /Wnz6HAc5bAfYB2Q7ZjYY.woff2 HTTP/1.1\r\nHost: onlymarms.tokendrop.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://onlymarms.tokendrop.fun/css2.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 22 Aug 2026 10:24:06 GMT\r\nserver-timing: cfExtPri\r\ncontent-type: application/octet-stream\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"06c036ba7796ae3aae65b16d41442d20\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ekGkeTYvlUIrv0ismqmC3Rli8PeKYiRhnAb23jAjob4FBH9m3diHryhAPJZi87QR%2F1x%2BABijOYmOQRAmOr2JLG2GD%2BdAla6RlAlsXfu3EvEgij2pRE1YgOwG%2FLFY7wyjTsfvivdJ7NWzcQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a2f12a77fd9d4e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 74932\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":74932,"size_decoded":75626,"mime_type":"application/octet-stream","magic":"Web Open Font Format (Version 2), TrueType, length 74932, version 1.0","md5":"2d9de14f93a2205b45d72e60a635c3e0","sha1":"8a01467ac99e0d10cba99c1ca159f113d6bb169b","sha256":"891951df5e8b5b0f0bc760d31375405e795c666b5add70437de12d4a6482b33f","sha512":"0261d7c481b19f56e51cfeb8a53dd7f583b815eeb8ccbbe46ff404dd1abd806be65d76596f84e6a1cb06ba814df49762236642288b570598451b5da04b07c54c","ssdeep":"1536:dFAWJP/o3/+IyKuA/aTFJCH2+bDGaYm5ETsQGO5ESGq7OgCM0PaG/:dFAWJPYvyfA/aTSGtmGTjZ7Ort7","tlshash":"447302b310808680d93243f384b86541a78568f872649ffbb12f97f1a52afefc21e459","first_seen":"2025-09-07T11:41:24.114291Z","last_seen":"2026-08-22T11:53:31.091679Z","times_seen":1660,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-22","alert":"Phishing Block","trigger":"onlymarms.tokendrop.fun","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-22","alert":"Sinkholed","trigger":"onlymarms.tokendrop.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tuesday-corporal.web-dist.cc/_nuxt/assets/index.js","fqdn":"tuesday-corporal.web-dist.cc","domain":"web-dist.cc","tld":"cc"},"ip":{"addr":"104.21.79.102","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://onlymarms.tokendrop.fun/","date":"2026-08-22T10:24:06.164Z","timestamp":1787394246164,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"web-dist.cc","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 30 Jun 2026 20:04:47 GMT","end":"Mon, 28 Sep 2026 20:04:46 GMT"},"fingerprint":{"sha1":"F4:14:46:53:86:DA:49:BA:EF:5B:50:B0:1A:7D:B1:D1:0E:01:80:4A","sha256":"34:31:D2:81:8C:2D:E6:38:00:CF:FF:E7:15:28:57:FD:48:1A:E7:28:8C:5D:33:74:AD:F9:F1:4B:76:10:F2:95"}}},"request":{"raw":"GET /_nuxt/assets/index.js HTTP/1.1\r\nHost: tuesday-corporal.web-dist.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://onlymarms.tokendrop.fun\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://onlymarms.tokendrop.fun/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 22 Aug 2026 10:24:06 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\nlast-modified: Fri, 21 Aug 2026 18:49:54 GMT\r\netag: W/\"6a889dd2-e8d0f\"\r\naccess-control-allow-origin: *\r\ncache-control: no-store, no-cache\r\ncontent-encoding: gzip\r\ncf-cache-status: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EwWZCKVaLDjx9sWni0i30UHLqaNZDQl2kdmTQttV%2B0ojjWBgTH38US78Ur0Zc79SO7NcNOankimS9rGy6mEw22VaYuCd3vUql1ltZJ6ZnjzVdQlsWJxLadm96YYNOr%2BLX8QsZxCbaUx0CaylurBO\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2f12a76af6c35a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":953615,"size_decoded":228831,"mime_type":"application/javascript; charset=utf-8","magic":"Unicode text, UTF-8 text, with very long lines (63220), with no line terminators","md5":"a25661b69d737bf8901dd0a9c21ec85d","sha1":"62be335dcaadaa7dbe0e3b504d13d06b849039b3","sha256":"7d508cbc98370fb22db9840b302ff060c5b7015082ad3fed215fb17a0ccacfed","sha512":"e688083810acce37866d3dea3b1cb2d19ba2ff4f9d86c2dbb4324b945e539b1c12225d2ceb4b02385e15794937c9d262bc7204a5f53ef8564482a6acce5ac755","ssdeep":"12288:qEJCREf9g+yWW50x1JAHX8tcNEMihVts9yxBh2Q2XM:qdRivJwX8tciMiVpBsXM","tlshash":"a11583ea458092be39626cec7cb69cf02cdcfc95c8194c7961daac4415bc0b9a357b7c","first_seen":"2026-08-22T00:10:18.491859Z","last_seen":"2026-08-22T10:24:42.229021Z","times_seen":6,"resource_available":true,"data":null}},"time_used":743,"timings":{"blocked":-1,"dns":10,"connect":18,"send":0,"wait":385,"receive":330,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"onlymarms.tokendrop.fun/css2.css","fqdn":"onlymarms.tokendrop.fun","domain":"tokendrop.fun","tld":"fun"},"ip":{"addr":"172.67.182.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://onlymarms.tokendrop.fun/","date":"2026-08-22T10:24:06.168Z","timestamp":1787394246168,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tokendrop.fun","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 13 Aug 2026 04:47:57 GMT","end":"Wed, 11 Nov 2026 05:47:54 GMT"},"fingerprint":{"sha1":"53:F2:12:0B:D1:EA:F7:B5:B6:9C:BA:F6:1E:D6:59:06:FC:75:93:30","sha256":"42:83:CD:A6:DC:62:BD:70:BC:36:CD:1F:5B:93:1F:C3:11:A9:AB:77:91:36:B1:33:09:82:F9:27:95:DB:8A:09"}}},"request":{"raw":"GET /css2.css HTTP/1.1\r\nHost: onlymarms.tokendrop.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://onlymarms.tokendrop.fun/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 22 Aug 2026 10:24:06 GMT\r\netag: W/\"8e17382163771bfff2c7fca38ed1c16d\"\r\ncontent-type: text/css\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SjyUeRfzLzWMGAyGDp00q%2FahDCC7MSK37g%2Fzz9HgKIwHxhms9YeXc%2FD1320Lqe5C7NP7g3Qzx0Y3tWcoEV8T2BSUKWMSap0jYt5Sfp4reqYN5o9pm1HLJXfub%2BxCPTQb2a4jSQUL1Z7jNg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a2f12a768d824e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9354,"size_decoded":1465,"mime_type":"text/css","magic":"ASCII text","md5":"411e6f467bf4f7d600ae2f1ce99e6f8c","sha1":"b07230411397dc18009e2febd5ada64bfe695ebb","sha256":"74b38320cae596780b83b66cbf79cfddccb4c0dce4c3417fe8f999167b3bfe9f","sha512":"58bd2b1cd1b2a1d033394426ceb0bbcde7158a3a47b57559fd9d5b30bf23fb6455c620c53763c43ef16df156a3504c8e7be4950e0304be432ba52b40cb157b2f","ssdeep":"192:6MqwbcVMg6bm/O9pOnZnsmO8OaTOLOkaRLNLaiLEua/Lrta4c:HDWkTmbLOel4o","tlshash":"ca12bc90087a6200d7971cc233ce7f36ae5db2506445ea386ffe1458bc9ac6563b1b4d","first_seen":"2026-08-22T10:22:21.171988Z","last_seen":"2026-08-22T10:24:42.229814Z","times_seen":2,"resource_available":false,"data":null}},"time_used":86,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":86,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-22","alert":"Sinkholed","trigger":"onlymarms.tokendrop.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-22","alert":"Phishing Block","trigger":"onlymarms.tokendrop.fun","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"onlymarms.tokendrop.fun/index_1.html","fqdn":"onlymarms.tokendrop.fun","domain":"tokendrop.fun","tld":"fun"},"ip":{"addr":"172.67.182.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://onlymarms.tokendrop.fun/","date":"2026-08-22T10:24:06.174Z","timestamp":1787394246174,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tokendrop.fun","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 13 Aug 2026 04:47:57 GMT","end":"Wed, 11 Nov 2026 05:47:54 GMT"},"fingerprint":{"sha1":"53:F2:12:0B:D1:EA:F7:B5:B6:9C:BA:F6:1E:D6:59:06:FC:75:93:30","sha256":"42:83:CD:A6:DC:62:BD:70:BC:36:CD:1F:5B:93:1F:C3:11:A9:AB:77:91:36:B1:33:09:82:F9:27:95:DB:8A:09"}}},"request":{"raw":"GET /index_1.html HTTP/1.1\r\nHost: onlymarms.tokendrop.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://onlymarms.tokendrop.fun/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 307 \r\ndate: Sat, 22 Aug 2026 10:24:06 GMT\r\nserver-timing: cfExtPri\r\nlocation: /index_1\r\nserver: cloudflare\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WFfRGsckfm%2FBa5%2FyRXd7xBAs%2FBioGoyKl%2Fcr1skk82nNXTrvhNRsZJ48NQHcg2oOENzyuWfBGfEe69H0kVQuNUM5Yd1bcvgq1a22jRiKNs%2Fnv01KGsyW6%2FWjltTJs%2FxNJogC2xb6diT6%2FA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: a2f12a768d864e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 0\r\n\r\n","headers":null,"cookies":null,"status_code":"307","status_text":"Temporary Redirect","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-22T12:26:49.042324Z","times_seen":18034750,"resource_available":true,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-22","alert":"Sinkholed","trigger":"onlymarms.tokendrop.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-22","alert":"Phishing Block","trigger":"onlymarms.tokendrop.fun","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"onlymarms.tokendrop.fun/index_2","fqdn":"onlymarms.tokendrop.fun","domain":"tokendrop.fun","tld":"fun"},"ip":{"addr":"172.67.182.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://onlymarms.tokendrop.fun/","date":"2026-08-22T10:24:06.215Z","timestamp":1787394246215,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tokendrop.fun","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 13 Aug 2026 04:47:57 GMT","end":"Wed, 11 Nov 2026 05:47:54 GMT"},"fingerprint":{"sha1":"53:F2:12:0B:D1:EA:F7:B5:B6:9C:BA:F6:1E:D6:59:06:FC:75:93:30","sha256":"42:83:CD:A6:DC:62:BD:70:BC:36:CD:1F:5B:93:1F:C3:11:A9:AB:77:91:36:B1:33:09:82:F9:27:95:DB:8A:09"}}},"request":{"raw":"GET /index_2 HTTP/1.1\r\nHost: onlymarms.tokendrop.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://onlymarms.tokendrop.fun/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 22 Aug 2026 10:24:06 GMT\r\ncontent-encoding: zstd\r\ncontent-type: text/html\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lX4%2F9h8zDcQphQGtj4yub7WqXNLI5B8KlLvBboy1vL8HGxXoRp10MTEPIuzqcIVrE8SSzUCEloTrlDhIdEcRdrOrLdbL%2FnqmmYG%2BVBjBwWsa978fSq6ATcK1ODGAEhFx5ASbWq87iu5eUw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2f12a76dd8f4e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12560,"size_decoded":4823,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (4779)","md5":"eb8e31a36da99589aa4af0b50e100b65","sha1":"ce1e1a26cb5e47b1155c38e72a54991e727d9b86","sha256":"3641673e118a94ee420b88d920d9a588a42dfb82aef77663e726947773a4cce8","sha512":"6378c2f8f2672b3211865ec2bf48778c1b4c4b501770072f65263f44417169667bb880b7bf92dc145042ccbca44135c4f7895755986f82332f3ffc9c5c526a1d","ssdeep":"384:K2t8QLZnZrb6nKKKNk01xqarO4xmZblz7CX4KgT1a:KNQLZnZJKKNk01xqarO4xmZblz7CX4Kz","tlshash":"4842e93309800555a2979d9273a6ef0de77e510aee0658796baf3d40cbcfc8610937ee","first_seen":"2026-08-22T10:22:21.187247Z","last_seen":"2026-08-22T10:24:42.234297Z","times_seen":2,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-22","alert":"Sinkholed","trigger":"onlymarms.tokendrop.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-22","alert":"Phishing Block","trigger":"onlymarms.tokendrop.fun","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"onlymarms.tokendrop.fun/-nFhOHM81r4j6k0gjAW3mujVU2B2G_VB0PD2.woff2","fqdn":"onlymarms.tokendrop.fun","domain":"tokendrop.fun","tld":"fun"},"ip":{"addr":"172.67.182.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://onlymarms.tokendrop.fun/","date":"2026-08-22T10:24:06.395Z","timestamp":1787394246395,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tokendrop.fun","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 13 Aug 2026 04:47:57 GMT","end":"Wed, 11 Nov 2026 05:47:54 GMT"},"fingerprint":{"sha1":"53:F2:12:0B:D1:EA:F7:B5:B6:9C:BA:F6:1E:D6:59:06:FC:75:93:30","sha256":"42:83:CD:A6:DC:62:BD:70:BC:36:CD:1F:5B:93:1F:C3:11:A9:AB:77:91:36:B1:33:09:82:F9:27:95:DB:8A:09"}}},"request":{"raw":"GET /-nFhOHM81r4j6k0gjAW3mujVU2B2G_VB0PD2.woff2 HTTP/1.1\r\nHost: onlymarms.tokendrop.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://onlymarms.tokendrop.fun/css2.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 22 Aug 2026 10:24:06 GMT\r\nserver-timing: cfExtPri\r\ncontent-type: application/octet-stream\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"85d286179bd1c36c5d0dc3c63d56be3d\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=auZ8bDLR%2BAyMDZ06%2Fk%2Fpu8lJUi2M3qfX2wnGbYPZBJY%2FKsF1x4WCBV7lgRsp0%2FmOZuF%2FvShpuGmQaQIB43eeLXlsf6LktP4ya10loM%2BCK01DNsRq1VwyOHwcRgifVICSyfL1K0HsVC6%2FcA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a2f12a77fd9b4e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 24572\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":24572,"size_decoded":25274,"mime_type":"application/octet-stream","magic":"Web Open Font Format (Version 2), TrueType, length 24572, version 1.0","md5":"581414e1e5772fb61dd2de0efe6746c6","sha1":"b4de16f725d7403de71766d74cb79ee7fc47d1b9","sha256":"ed8b291611e32fa2d2900488dd48fc95faf0957b2ef7ddf1527e8d21dd9cf2df","sha512":"9f934be123abb4de1047c95021effd867b5f3cd352431fd2ce65a18d5866b487549531bbf0bf839770ad0c6fec2f5c37af650dd7d3bd9f11dd115c740145f7d8","ssdeep":"384:sTBxfZpbHUP71Xrp6tdJfuz4PQdl9J1pQGQl5SQUADVOlhsyF:sTBhb0P71sNf0xdl9s7Olhs+","tlshash":"2ab2e185177e2b48dd4221325d5fffd22d1e4be644fab386e82f27e14d640176e80687","first_seen":"2025-09-23T02:11:44.907793Z","last_seen":"2026-08-22T10:24:42.236245Z","times_seen":685,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-22","alert":"Sinkholed","trigger":"onlymarms.tokendrop.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-22","alert":"Phishing Block","trigger":"onlymarms.tokendrop.fun","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"onlymarms.tokendrop.fun/-nFnOHM81r4j6k0gjAW3mujVU2B2G_Bx0g.woff2","fqdn":"onlymarms.tokendrop.fun","domain":"tokendrop.fun","tld":"fun"},"ip":{"addr":"172.67.182.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://onlymarms.tokendrop.fun/","date":"2026-08-22T10:24:06.396Z","timestamp":1787394246396,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tokendrop.fun","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 13 Aug 2026 04:47:57 GMT","end":"Wed, 11 Nov 2026 05:47:54 GMT"},"fingerprint":{"sha1":"53:F2:12:0B:D1:EA:F7:B5:B6:9C:BA:F6:1E:D6:59:06:FC:75:93:30","sha256":"42:83:CD:A6:DC:62:BD:70:BC:36:CD:1F:5B:93:1F:C3:11:A9:AB:77:91:36:B1:33:09:82:F9:27:95:DB:8A:09"}}},"request":{"raw":"GET /-nFnOHM81r4j6k0gjAW3mujVU2B2G_Bx0g.woff2 HTTP/1.1\r\nHost: onlymarms.tokendrop.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://onlymarms.tokendrop.fun/css2.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 22 Aug 2026 10:24:06 GMT\r\nserver-timing: cfExtPri\r\ncontent-type: application/octet-stream\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"ce6e97c9f07919fa2ff56d7e1dc13542\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8vrgt5HomEaBTOX%2FVilV82DZum9n4T6OwPTyhta9r3xdaV1cdfH7pZSZeg%2BW4UAA5uloNQJDJ%2BSCt6%2BeCrcie%2Br1BmcbUN1VeMFzZeFXwm6kXdsd%2FxBA56smZk41SMT2Ubbh%2BV7WWK5IzA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a2f12a77fd9c4e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 24744\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":24744,"size_decoded":25444,"mime_type":"application/octet-stream","magic":"Web Open Font Format (Version 2), TrueType, length 24744, version 1.0","md5":"c27d5a47c09ebe91c013817e32b69043","sha1":"3d2a435525b8b356551cce6d09a86282a4e598d8","sha256":"fdf61e20fd2c0108e0ea28da4daca0035205b4b7fc031a3974b865b704de160a","sha512":"869245b6bd6a148eb79f10b5c2b56f622ff00a1ecaf0e16d687fb33a7d3b36397e27a4b88a1d53cbfb4f75ec5100d5f0cce31f6939114f24f0bcf651a190894a","ssdeep":"768:rJdlGwx37Ri555B9zR+J5uYlG/PwCEp24tZdD09wJ7:l6m37Ri3BRw5u2KwjJtiwF","tlshash":"55b2f18502a4e449cf1ce95b0795bebe6b1209776c069b30e533948851fd360b27d5af","first_seen":"2025-09-11T21:26:17.489332Z","last_seen":"2026-08-22T12:16:32.78095Z","times_seen":5677,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-22","alert":"Sinkholed","trigger":"onlymarms.tokendrop.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-22","alert":"Phishing Block","trigger":"onlymarms.tokendrop.fun","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tuesday-corporal.web-dist.cc/api/config","fqdn":"tuesday-corporal.web-dist.cc","domain":"web-dist.cc","tld":"cc"},"ip":{"addr":"104.21.79.102","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://onlymarms.tokendrop.fun/","date":"2026-08-22T10:24:07.507Z","timestamp":1787394247507,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"web-dist.cc","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 30 Jun 2026 20:04:47 GMT","end":"Mon, 28 Sep 2026 20:04:46 GMT"},"fingerprint":{"sha1":"F4:14:46:53:86:DA:49:BA:EF:5B:50:B0:1A:7D:B1:D1:0E:01:80:4A","sha256":"34:31:D2:81:8C:2D:E6:38:00:CF:FF:E7:15:28:57:FD:48:1A:E7:28:8C:5D:33:74:AD:F9:F1:4B:76:10:F2:95"}}},"request":{"raw":"GET /api/config HTTP/1.1\r\nHost: tuesday-corporal.web-dist.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://onlymarms.tokendrop.fun/\r\ncontent-language: en-US,q=0.8;en\r\nOrigin: https://onlymarms.tokendrop.fun\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 22 Aug 2026 10:24:07 GMT\r\ncontent-type: text/plain; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=e6OfFOaGUgsSTEeACsGgr%2FN0gHbDMNr%2FRM%2FRR9VhICJ9Uv7bYDj3meulHdkn8WFKILH3ulL%2B0jLlFYHMa2DUixoZsNHsL%2FPrQ9QcUCtWSUkyMrFnUUVKqKdUmALqcLbkQ0%2Bj2puMu6d1zipKpmwA\"}]}\r\npriority: u=4,i=?0\r\naccess-control-max-age: 86400\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, POST\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a2f12a7ee83135a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":176,"size_decoded":933,"mime_type":"text/plain; charset=utf-8","magic":"data","md5":"618814ee78a45e71c66503997037f2f1","sha1":"35f2d03af00052a8726c08da6de6fdc99feca7a8","sha256":"e6a8c168c3b33e04dff05b38f57fe2d53b825556cd90a449a4133a06b460d713","sha512":"dd289bb8fa36d0034af71bb1a959490b1b05b6cde0511033dfbb20ff6592b21b06c59ede5e127d038a3f9aac5de40f7398d3b14dc60b2d74f979b1db03851383","ssdeep":"","tlshash":"52d02b2078011701917592743b82d924307c8bdab25771c6f901c99e67f765810fa0d0","first_seen":"2026-08-22T10:22:21.177658Z","last_seen":"2026-08-22T10:24:42.239685Z","times_seen":2,"resource_available":false,"data":null}},"time_used":300,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":300,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"onlymarms.tokendrop.fun/","fqdn":"onlymarms.tokendrop.fun","domain":"tokendrop.fun","tld":"fun"},"ip":{"addr":"172.67.182.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-22T10:24:05.727Z","timestamp":1787394245727,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tokendrop.fun","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 13 Aug 2026 04:47:57 GMT","end":"Wed, 11 Nov 2026 05:47:54 GMT"},"fingerprint":{"sha1":"53:F2:12:0B:D1:EA:F7:B5:B6:9C:BA:F6:1E:D6:59:06:FC:75:93:30","sha256":"42:83:CD:A6:DC:62:BD:70:BC:36:CD:1F:5B:93:1F:C3:11:A9:AB:77:91:36:B1:33:09:82:F9:27:95:DB:8A:09"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: onlymarms.tokendrop.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 22 Aug 2026 10:24:05 GMT\r\ncontent-encoding: zstd\r\ncontent-type: text/html\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=0,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AsnQQ9ga7wS7FTqy54uycWMbKME5PKA8KzvxztH7Za8mG932Q16VtfHfo2ep6i2XK%2F5eo06IkUxj66t09XAdgVCfdhGkv9f4nfrEgrTZbd4ONJszh4AOei6bvj3IcaFIzXRQ9mk5yqYLPA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2f12a73ed474e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nuxt.js","description":"Nuxt is a Vue framework for developing modern web applications.","website":"https://nuxt.com","common_platform_enumeration":"","icon":"Nuxt.js.svg","categories":["JavaScript frameworks","Web frameworks","Web servers","Static site generator"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Vue.js","description":"Vue.js is an open-source model–view–viewmodel JavaScript framework for building user interfaces and single-page applications.","website":"https://vuejs.org","common_platform_enumeration":"","icon":"vue.svg","categories":["JavaScript frameworks"]},{"name":"Lovable","description":"Lovable is an AI-powered, no-code platform that lets users build functional web apps from natural language prompts instead of writing code.","website":"https://lovable.dev/","common_platform_enumeration":"","icon":"Lovable.png","categories":["CMS"]}],"data":{"size":72619,"size_decoded":14961,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (63092)","md5":"574ce698719fa620b8f76284e6641c85","sha1":"942cd9a2ee6025a2c5a15bbe14ea16f27a885545","sha256":"8ee7f1b767e71f703bac1581208119b48c9c7ff2038e3f056a8adb39af8ee1e0","sha512":"34de35e281c3e7e731c4c63aacda7f36e8145203280d364363a75b3cc125583a521fc3261f76fd3f9b1f47daaadc947c6606423a1a27c9be7a5444b28c75f8ad","ssdeep":"768:mYMzQH2L0r82It4uSRhKut5NFgl+FU+xHyvfSDIJPJWf3b8fzwZPROHXL0hDgmwy:mYMzqyrYpKI5ux9sH","tlshash":"e063b660b150193f361787fab1d4ef59a0a19309c9235528f3fc41e36bcadb79eb21a4","first_seen":"2026-08-22T10:22:21.179476Z","last_seen":"2026-08-22T10:24:42.241573Z","times_seen":2,"resource_available":false,"data":null}},"time_used":97,"timings":{"blocked":-1,"dns":4,"connect":15,"send":0,"wait":76,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-22","alert":"Phishing Block","trigger":"onlymarms.tokendrop.fun","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-22","alert":"Sinkholed","trigger":"onlymarms.tokendrop.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"onlymarms.tokendrop.fun/styles-BsJNR3Vj.css","fqdn":"onlymarms.tokendrop.fun","domain":"tokendrop.fun","tld":"fun"},"ip":{"addr":"172.67.182.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://onlymarms.tokendrop.fun/","date":"2026-08-22T10:24:06.166Z","timestamp":1787394246166,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tokendrop.fun","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 13 Aug 2026 04:47:57 GMT","end":"Wed, 11 Nov 2026 05:47:54 GMT"},"fingerprint":{"sha1":"53:F2:12:0B:D1:EA:F7:B5:B6:9C:BA:F6:1E:D6:59:06:FC:75:93:30","sha256":"42:83:CD:A6:DC:62:BD:70:BC:36:CD:1F:5B:93:1F:C3:11:A9:AB:77:91:36:B1:33:09:82:F9:27:95:DB:8A:09"}}},"request":{"raw":"GET /styles-BsJNR3Vj.css HTTP/1.1\r\nHost: onlymarms.tokendrop.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://onlymarms.tokendrop.fun/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 22 Aug 2026 10:24:06 GMT\r\netag: W/\"b1fe64f592efea2bd1e5a5c00359c71a\"\r\ncontent-type: text/css\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hEpLPD%2BTuhljcQy50doX5wWszCc7hiUIuR667wNwLnweblHNprKMbMwZXcwhjdmuDcrvdYj858BrH8gUY692j2tKfsLVIUwXT1JUCpr4iB%2B%2BQFp2YxcvZbUKWqpx%2Bz7i72YagYvd3EBbtg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a2f12a768d814e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":88393,"size_decoded":16173,"mime_type":"text/css","magic":"ASCII text, with very long lines (65470)","md5":"373a5ed3471eef25d4ed02bcdb756bfc","sha1":"aaa282261d1d1975364e3edbb43937c6727f2618","sha256":"577ec69cf003d14f68820deb9ad4143e98c9a7935e41c45af3924d3e8cad0b80","sha512":"498bf1964f6bf10c460551138e6d087286a921f73d7c325946e42b5fa376a27a1c45cc928ffd4cc8f82e964c752360d8d798893518c0276ed819e9f45f75666b","ssdeep":"1536:G4rA0hyLgaPlcySXM2cowZVwZwwZwwZwwZwwZIRBaNXaGSsMq+WDhXX78RXxW+4c:nrA0hyLgadcyP2cowZVwZwwZwwZwwZw1","tlshash":"3683b590b32ad93fbc3364f6938cb48c9119b0c1dd3545e8fa52612346c7bf6ad6b618","first_seen":"2026-08-22T10:22:21.181301Z","last_seen":"2026-08-22T10:24:42.243374Z","times_seen":2,"resource_available":false,"data":null}},"time_used":42,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":41,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-22","alert":"Sinkholed","trigger":"onlymarms.tokendrop.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-22","alert":"Phishing Block","trigger":"onlymarms.tokendrop.fun","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"onlymarms.tokendrop.fun/index_2.html","fqdn":"onlymarms.tokendrop.fun","domain":"tokendrop.fun","tld":"fun"},"ip":{"addr":"172.67.182.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://onlymarms.tokendrop.fun/","date":"2026-08-22T10:24:06.171Z","timestamp":1787394246171,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tokendrop.fun","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 13 Aug 2026 04:47:57 GMT","end":"Wed, 11 Nov 2026 05:47:54 GMT"},"fingerprint":{"sha1":"53:F2:12:0B:D1:EA:F7:B5:B6:9C:BA:F6:1E:D6:59:06:FC:75:93:30","sha256":"42:83:CD:A6:DC:62:BD:70:BC:36:CD:1F:5B:93:1F:C3:11:A9:AB:77:91:36:B1:33:09:82:F9:27:95:DB:8A:09"}}},"request":{"raw":"GET /index_2.html HTTP/1.1\r\nHost: onlymarms.tokendrop.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://onlymarms.tokendrop.fun/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 307 \r\ndate: Sat, 22 Aug 2026 10:24:06 GMT\r\nserver-timing: cfExtPri\r\nlocation: /index_2\r\nserver: cloudflare\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MHzPb2%2BghnxwURgqHrB316gt7IZ3Gwu2CTsy7nudZQXABF2RHq%2FGv93h7Bbq3qIHIRcyvpnrJjIL5D9PZ4i1hgiETd5K2Yuq6UNSbxOuu062nROrWZHy94Borm2wcqK09eRzFuZN8jfwcQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: a2f12a768d844e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 0\r\n\r\n","headers":null,"cookies":null,"status_code":"307","status_text":"Temporary Redirect","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-22T12:26:49.042324Z","times_seen":18034750,"resource_available":true,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-22","alert":"Sinkholed","trigger":"onlymarms.tokendrop.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-22","alert":"Phishing Block","trigger":"onlymarms.tokendrop.fun","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"onlymarms.tokendrop.fun/blumstein-interview.mp4","fqdn":"onlymarms.tokendrop.fun","domain":"tokendrop.fun","tld":"fun"},"ip":{"addr":"172.67.182.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://onlymarms.tokendrop.fun/","date":"2026-08-22T10:24:06.189Z","timestamp":1787394246189,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tokendrop.fun","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 13 Aug 2026 04:47:57 GMT","end":"Wed, 11 Nov 2026 05:47:54 GMT"},"fingerprint":{"sha1":"53:F2:12:0B:D1:EA:F7:B5:B6:9C:BA:F6:1E:D6:59:06:FC:75:93:30","sha256":"42:83:CD:A6:DC:62:BD:70:BC:36:CD:1F:5B:93:1F:C3:11:A9:AB:77:91:36:B1:33:09:82:F9:27:95:DB:8A:09"}}},"request":{"raw":"GET /blumstein-interview.mp4 HTTP/1.1\r\nHost: onlymarms.tokendrop.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nRange: bytes=0-\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://onlymarms.tokendrop.fun/\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 22 Aug 2026 10:24:06 GMT\r\nserver-timing: cfExtPri\r\ncontent-type: video/mp4\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\netag: \"d75cb86c4e6ca87a6a7d030ec749dc13\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Nij9F2p9LOAbh9VOZdsZzD%2FoovppkaBKbgCOhnOeOdZvZ4alJ4IBfEKrNrvBt%2B66c3OK0nfMYOCMMqLA58%2FMqCfnleB5igFwQmeRRGe5xcckdI7SSpl9FOm4mxDGtPkfy1FlXIZHV2M4%2Bw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: a2f12a76ad894e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 2017171\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2017171,"size_decoded":2017801,"mime_type":"video/mp4","magic":"ISO Media, MP4 Base Media v1 [ISO 14496-12:2003]","md5":"8a227af14f7e428f3d4437e69b923926","sha1":"1b9d65088925b4a32bf32e1a0d430934efe5f125","sha256":"364cb2f6f1af1a6e8418176fe8720a1ab261dc90f279dbcadf1e2f96ac7c328a","sha512":"029a4a9aef0013a0002cf335603353da94b2a1f60b0d3c9f4ce1d52cbd9aa171be36e8908f20462cd46a8417a5ac6f0f2041d876e05536487dc32d6728c0a711","ssdeep":"24576:WCfXPRCXzUDzV6vofC8xEeYPK4rRrjSkEQA+3x8enIjzoSD:WycyNCOkrRPSl+WRD","tlshash":"f92523a537e55013e9510b7d9df52b313ba1ecaac3aac3db81c126455eb67e06f032c8","first_seen":"2026-08-22T10:22:21.184538Z","last_seen":"2026-08-22T10:24:42.245867Z","times_seen":2,"resource_available":false,"data":null}},"time_used":80,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":49,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-22","alert":"Sinkholed","trigger":"onlymarms.tokendrop.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-22","alert":"Phishing Block","trigger":"onlymarms.tokendrop.fun","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"onlymarms.tokendrop.fun/index_3.html","fqdn":"onlymarms.tokendrop.fun","domain":"tokendrop.fun","tld":"fun"},"ip":{"addr":"172.67.182.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://onlymarms.tokendrop.fun/","date":"2026-08-22T10:24:06.172Z","timestamp":1787394246172,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tokendrop.fun","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 13 Aug 2026 04:47:57 GMT","end":"Wed, 11 Nov 2026 05:47:54 GMT"},"fingerprint":{"sha1":"53:F2:12:0B:D1:EA:F7:B5:B6:9C:BA:F6:1E:D6:59:06:FC:75:93:30","sha256":"42:83:CD:A6:DC:62:BD:70:BC:36:CD:1F:5B:93:1F:C3:11:A9:AB:77:91:36:B1:33:09:82:F9:27:95:DB:8A:09"}}},"request":{"raw":"GET /index_3.html HTTP/1.1\r\nHost: onlymarms.tokendrop.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://onlymarms.tokendrop.fun/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 307 \r\ndate: Sat, 22 Aug 2026 10:24:06 GMT\r\nserver-timing: cfExtPri\r\nlocation: /index_3\r\nserver: cloudflare\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nNABAl0FcHrgk%2FoQriJtUq8IdWpzyRUPNEKA5bWwm9OKh5Q%2B%2FMYYjhrjzBDUWPZVLKQYTAt67%2BM2iTWM6T2oA2et7im%2BbWftOk2STU7DXYnbXGgTdKXX%2Bz%2BrA5Cwewt59%2BSL76Llr69V%2Fw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: a2f12a768d854e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 0\r\n\r\n","headers":null,"cookies":null,"status_code":"307","status_text":"Temporary Redirect","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-22T12:26:49.042324Z","times_seen":18034750,"resource_available":true,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-22","alert":"Phishing Block","trigger":"onlymarms.tokendrop.fun","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-22","alert":"Sinkholed","trigger":"onlymarms.tokendrop.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"onlymarms.tokendrop.fun/E_X1vFsgVQzOyK5W.jpg","fqdn":"onlymarms.tokendrop.fun","domain":"tokendrop.fun","tld":"fun"},"ip":{"addr":"172.67.182.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://onlymarms.tokendrop.fun/index_2","date":"2026-08-22T10:24:06.352Z","timestamp":1787394246352,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tokendrop.fun","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 13 Aug 2026 04:47:57 GMT","end":"Wed, 11 Nov 2026 05:47:54 GMT"},"fingerprint":{"sha1":"53:F2:12:0B:D1:EA:F7:B5:B6:9C:BA:F6:1E:D6:59:06:FC:75:93:30","sha256":"42:83:CD:A6:DC:62:BD:70:BC:36:CD:1F:5B:93:1F:C3:11:A9:AB:77:91:36:B1:33:09:82:F9:27:95:DB:8A:09"}}},"request":{"raw":"GET /E_X1vFsgVQzOyK5W.jpg HTTP/1.1\r\nHost: onlymarms.tokendrop.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://onlymarms.tokendrop.fun/index_2\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 22 Aug 2026 10:24:06 GMT\r\nserver-timing: cfExtPri\r\ncontent-type: image/jpeg\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"37e29d6224ef5dd08110c95b0a84fa75\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=T%2FEq5hj%2Ftgr8uqpeyaaajmMYA8kw5RwkPMloqIOssdOQrHHm75pZLxJDnQzl%2FLGbWZmE8kAoLsTNnsexEf4wRteSvYZj71x8ye3nHSEkOsbzJtk6uQCf0j8L2wBgNA6Eh8Lc6nmFFZu8Gg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\ncf-ray: a2f12a77ad964e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 106917\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":106917,"size_decoded":107593,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1200x675, components 3","md5":"b86cc5c3299d39d686ce3accec56cfbb","sha1":"5ff5ca062ee64257d1da5d11771c768ed36fad95","sha256":"bb1551e13710f1b737dbe2fb2781bc02af632bbbe3952076f69057460ba06793","sha512":"85ceaaa874c04a288ed702f2b7092960b73949dd99fd1a4ecb183b8b8a1b35e0e2e4e3cb817f9f66a76f9da9376ae433f12545f7334081631b86f922a1b3b286","ssdeep":"3072:C72USd2vUaFiJVI2xBYurSYwKgvQqyS89K:C72USd8U5VFxBD8KgYLSGK","tlshash":"9fa3120bd24db439961cd4ad1623f49bb24fcb612c7d5b90632d0fc74ee10eb89a5b4a","first_seen":"2026-08-22T10:22:21.17321Z","last_seen":"2026-08-22T10:24:42.247665Z","times_seen":2,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-22","alert":"Phishing Block","trigger":"onlymarms.tokendrop.fun","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-22","alert":"Sinkholed","trigger":"onlymarms.tokendrop.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"onlymarms.tokendrop.fun/09cca2ba192d3f4bed0a85e225491784718c133a.svg","fqdn":"onlymarms.tokendrop.fun","domain":"tokendrop.fun","tld":"fun"},"ip":{"addr":"172.67.182.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://onlymarms.tokendrop.fun/","date":"2026-08-22T10:24:06.373Z","timestamp":1787394246373,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tokendrop.fun","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 13 Aug 2026 04:47:57 GMT","end":"Wed, 11 Nov 2026 05:47:54 GMT"},"fingerprint":{"sha1":"53:F2:12:0B:D1:EA:F7:B5:B6:9C:BA:F6:1E:D6:59:06:FC:75:93:30","sha256":"42:83:CD:A6:DC:62:BD:70:BC:36:CD:1F:5B:93:1F:C3:11:A9:AB:77:91:36:B1:33:09:82:F9:27:95:DB:8A:09"}}},"request":{"raw":"GET /09cca2ba192d3f4bed0a85e225491784718c133a.svg HTTP/1.1\r\nHost: onlymarms.tokendrop.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://onlymarms.tokendrop.fun/styles-BsJNR3Vj.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 22 Aug 2026 10:24:06 GMT\r\netag: W/\"f5e4b2e40b6923f7e3fc7e7bddd485f3\"\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=4,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yftXAFPgDb9QxMERlX5M97%2Fu88dbTuThBfwnaTDnHZEz%2FfVzHOU11AMiB%2F1Rt%2FldDIuXSWoUmNeoPjr2KnglT33W%2FwzttLxqS97s%2B1ciYNSYzlZ6cYad9RdWQ%2F72dUd1HYShYFu1ws5tMA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a2f12a77cd984e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":308,"size_decoded":908,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"e7cde171acf37859caabbd4da4a9c9fc","sha1":"09cca2ba192d3f4bed0a85e225491784718c133a","sha256":"11bcd113a24ae58895fdae6e6745c71456d77e1b6f74b0e8e8a1318dd5132d1f","sha512":"759abc370efbb1f1b3e1b213cc8300062a7f68b749d7dcde341315e72793a378dff6267d15519063f0255825d19a6cd9f178a0633e66a7f665b49c6098326b36","ssdeep":"","tlshash":"c9e07d5848f5558f4d0c53f18d488ca05c2ee1d401bd1b725cbb4140c20e0116de7238","first_seen":"2026-08-22T10:22:21.190319Z","last_seen":"2026-08-22T10:24:42.252902Z","times_seen":2,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-22","alert":"Phishing Block","trigger":"onlymarms.tokendrop.fun","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-22","alert":"Sinkholed","trigger":"onlymarms.tokendrop.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tuesday-corporal.web-dist.cc/api/is-banned","fqdn":"tuesday-corporal.web-dist.cc","domain":"web-dist.cc","tld":"cc"},"ip":{"addr":"104.21.79.102","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://onlymarms.tokendrop.fun/","date":"2026-08-22T10:24:07.506Z","timestamp":1787394247506,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"web-dist.cc","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 30 Jun 2026 20:04:47 GMT","end":"Mon, 28 Sep 2026 20:04:46 GMT"},"fingerprint":{"sha1":"F4:14:46:53:86:DA:49:BA:EF:5B:50:B0:1A:7D:B1:D1:0E:01:80:4A","sha256":"34:31:D2:81:8C:2D:E6:38:00:CF:FF:E7:15:28:57:FD:48:1A:E7:28:8C:5D:33:74:AD:F9:F1:4B:76:10:F2:95"}}},"request":{"raw":"GET /api/is-banned HTTP/1.1\r\nHost: tuesday-corporal.web-dist.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://onlymarms.tokendrop.fun/\r\nOrigin: https://onlymarms.tokendrop.fun\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 22 Aug 2026 10:24:07 GMT\r\ncontent-type: text/plain;charset=utf-8\r\nserver-timing: cfExtPri\r\npriority: u=4,i=?0\r\naccess-control-max-age: 86400\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, POST\r\ncache-control: private, max-age=300\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=twGxc0fL47fu8%2BfJeCDsK0OAx0xtcBO0zEb2mqS9MlFuk2%2Fep5RiJ6vFqHL8HHobjkc%2FnE1aelHVU%2ByNnI%2Frq4r7ucAVjaKiwg9XLI%2FvkbjOVygq%2Bb3AWYzhDlwghDnQywLGIIs37h0cpuJGjJ95\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2f12a7ee83035a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1,"size_decoded":782,"mime_type":"text/plain; charset=utf-8","magic":"very short file (no magic)","md5":"cfcd208495d565ef66e7dff9f98764da","sha1":"b6589fc6ab0dc82cf12099d1c2d40ab994e8410c","sha256":"5feceb66ffc86f38d952786c6d696c79c2dbc239dd4e91b46729d73a27fb57e9","sha512":"31bca02094eb78126a517b206a88c73cfa9ec6f704c7030d18212cace820f025f00bf0ea68dbf3f3a5436ca63b53bf7bf80ad8d5de7d8359d0b7fed9dbc3ab99","ssdeep":"","tlshash":"c700000000000000c00000300000000000000000000000000000000000000000000000","first_seen":"2023-03-07T01:37:31Z","last_seen":"2026-08-22T11:37:27.418917Z","times_seen":119987,"resource_available":true,"data":null}},"time_used":298,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":298,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tuesday-corporal.web-dist.cc/api/visit?origin=onlymarms.tokendrop.fun","fqdn":"tuesday-corporal.web-dist.cc","domain":"web-dist.cc","tld":"cc"},"ip":{"addr":"104.21.79.102","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://onlymarms.tokendrop.fun/","date":"2026-08-22T10:24:07.560Z","timestamp":1787394247560,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"web-dist.cc","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 30 Jun 2026 20:04:47 GMT","end":"Mon, 28 Sep 2026 20:04:46 GMT"},"fingerprint":{"sha1":"F4:14:46:53:86:DA:49:BA:EF:5B:50:B0:1A:7D:B1:D1:0E:01:80:4A","sha256":"34:31:D2:81:8C:2D:E6:38:00:CF:FF:E7:15:28:57:FD:48:1A:E7:28:8C:5D:33:74:AD:F9:F1:4B:76:10:F2:95"}}},"request":{"raw":"POST /api/visit?origin=onlymarms.tokendrop.fun HTTP/1.1\r\nHost: tuesday-corporal.web-dist.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://onlymarms.tokendrop.fun/\r\nOrigin: https://onlymarms.tokendrop.fun\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 22 Aug 2026 10:24:07 GMT\r\ncontent-type: text/plain;charset=utf-8\r\nserver-timing: cfExtPri\r\npriority: u=4,i=?0\r\naccess-control-max-age: 86400\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, POST\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3YUg88k%2B5EqHs55T2ephfuA2L%2FpdMJye5oYKzDz8DD533nCVCBZ%2FNyZiqlMRzAxi7qSW9eAszMWq1PW0jxLnUrYbfWwWDXf%2BAbbd4gIsd2bJ8%2FPkIIZwz0k%2FXEd9v1pmJOaKxuOq1CtGoT%2FYCOXa\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2f12a7f383735a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2,"size_decoded":746,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"444bcb3a3fcf8389296c49467f27e1d6","sha1":"7a85f4764bbd6daf1c3545efbbf0f279a6dc0beb","sha256":"2689367b205c16ce32ed4200942b8b8b1e262dfc70d9bc9fbc77c49699a4f1df","sha512":"9fbbbb5a0f329f9782e2356fa41d89cf9b3694327c1a934d6af2a9df2d7f936ce83717fb513196a4ce5548471708cd7134c2ae99b3c357bcabb2eafc7b9b7570","ssdeep":"","tlshash":"c710000000000000300000000000000000000000000000000000000000000c0000c000","first_seen":"2023-03-08T02:32:37Z","last_seen":"2026-08-22T12:18:12.895634Z","times_seen":452021,"resource_available":true,"data":null}},"time_used":326,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":326,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}