{"report_id":"6220e3bb-e147-4944-9546-620c02d37e1c","version":6,"status":"done","tags":[],"date":"2026-01-20T02:11:15Z","url":{"schema":"https","addr":"camp.airdropalerts.bar/claim-camp-airdrop/36cd0cc6-3c28-4f48-b63e-9b5f9fa9d106","fqdn":"camp.airdropalerts.bar","domain":"airdropalerts.bar","tld":"bar"},"ip":{"addr":"104.21.84.197","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"camp.airdropalerts.bar/claim-camp-airdrop/36cd0cc6-3c28-4f48-b63e-9b5f9fa9d106","fqdn":"camp.airdropalerts.bar","domain":"airdropalerts.bar","tld":"bar"},"title":"Camp Network","dom":{"size":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"camp.airdropalerts.bar/claim-camp-airdrop/36cd0cc6-3c28-4f48-b63e-9b5f9fa9d106","fqdn":"camp.airdropalerts.bar","domain":"airdropalerts.bar","tld":"bar"},"ip":{"addr":"104.21.84.197","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-02-24T02:11:15Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":3}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-20","alert":"Sinkholed","trigger":"camp.airdropalerts.bar","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-20","alert":"Sinkholed","trigger":"camp.airdropalerts.bar","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-20","alert":"Sinkholed","trigger":"camp.airdropalerts.bar","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"camp.airdropalerts.bar","ip":{"addr":"104.21.84.197","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-01-09","domain_rank":0,"first_seen":"2026-01-20T02:11:16.370431Z","last_seen":"2026-01-20T02:11:16.370432Z","alert_count":12,"request_count":4,"received_data":11516302,"sent_data":2334,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"player.vimeo.com","ip":{"addr":"162.159.138.60","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2004-12-15","domain_rank":132,"first_seen":"2013-09-26T03:16:08Z","last_seen":"2026-01-19T01:53:41.367601Z","alert_count":0,"request_count":2,"received_data":9544,"sent_data":1006,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}]},{"fqdn":"i.vimeocdn.com","ip":{"addr":"151.101.64.217","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2010-04-21","domain_rank":24258,"first_seen":"2014-03-27T22:24:57Z","last_seen":"2026-01-19T02:46:54.035116Z","alert_count":0,"request_count":1,"received_data":1162,"sent_data":525,"comment":"","tags":null,"fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"camp.airdropalerts.bar/35b4ac3d-f71a-446d-8ff9-405e928824ef","fqdn":"camp.airdropalerts.bar","domain":"airdropalerts.bar","tld":"bar"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"f11bcdc7b7757c117a8de0db3a4c25b8","sha1":"962e4d08a960106c829d0f9d492d7b891927adab","sha256":"b60b89c0c92cf57329c8590a2c5540cece4def64e4e7bf04f2d39b8ffa3b2748","sha512":"7461553dadb09db423bda8c47a58f8cdade82aa710a0f4415cde912e7a88cd4471ea86aa58a2e5097c90e2cb45ac410104019c56a04c35955e827f0bb0796040","ssdeep":"6144:vkWGL6BSn5NGCk3zi0mCw8wLPNU2HZjGfty3:cjkSnv1k20mCwFnHRGfty3","tlshash":"1044810609ac4f7986ec22e015f72cc401794e0ad9dc3cbfb9ada1579e25bd6e0c279d","size":259964,"data":"","first_seen":"2025-07-13T03:04:16.940864Z","last_seen":"2026-07-24T09:03:46.044339Z","times_seen":5088,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"camp.airdropalerts.bar/claim-camp-airdrop/36cd0cc6-3c28-4f48-b63e-9b5f9fa9d106","fqdn":"camp.airdropalerts.bar","domain":"airdropalerts.bar","tld":"bar"},"ip":{"addr":"104.21.84.197","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"31086f1da965adf99cd3eb9293f20e84","sha1":"05283434a0d1054d0cb8549e69c61759748211d2","sha256":"5aa80449bcebfa67fc46c46237e88c7a5af968233c0e4fe598574cce865ddc20","sha512":"dc5a40a1e119b085c339744e23b6c8235afd09c73af686d87381d7f279dd1b44e24825ef24598064c69d65958bb60cd34b1e462ad3827f7d88d28049ee8be511","ssdeep":"","tlshash":"be213a2652b622a63d4bb0fd5efad84d763a9007d8095450789e918c6f70b3505f77cc","size":1235,"data":"","first_seen":"2023-03-11T09:56:06Z","last_seen":"2026-06-14T23:58:23.934539Z","times_seen":110,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"camp.airdropalerts.bar/a5e46776-f61e-482a-be83-72522565bd48","fqdn":"camp.airdropalerts.bar","domain":"airdropalerts.bar","tld":"bar"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"ec26a722169cb2cef03353fcf8dd144a","sha1":"6eec6673abcde3d29547796a38361256d9efde1c","sha256":"01861fcd47bc63bb7be76c480bad4c6cc987c8996ab0e023a4e692b68c94b05c","sha512":"c885e5d94bd96fa4a573524356e0ca7398b1489f5a39fc1120cf7f4e469950630ad3e9f48dd0392acd36da390c27a4be1e81da943d1d9ecd48890d1691e416cf","ssdeep":"6144:Ufg7z90bnvLZqnWTI9esVTMuyEvtzXNglxQP92L:VzBe6kEdOxQoL","tlshash":"bf740980b261b07247da24e10477540af339e96c744a40acf6a8d8fb7dbd589957ff38","size":357754,"data":"","first_seen":"2025-07-12T22:38:09.13306Z","last_seen":"2026-06-28T16:47:47.454007Z","times_seen":5087,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"camp.airdropalerts.bar/tracker.js","fqdn":"camp.airdropalerts.bar","domain":"airdropalerts.bar","tld":"bar"},"ip":{"addr":"104.21.84.197","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"4f225a4dfee4e00687bae7531e3b290d","sha1":"097bb0ab428a31e7a07b1db7792b79d52a6dd712","sha256":"6dd317f65ff7f9aae2b752e306b983d32e79109b768246eb83c26ffb9070bb22","sha512":"5ef8667e4c985b74dfc2767ab96c811c4091574721c0035ff1dd1c4e7de6b06e7340d8a583fe298264445b459517eae2ccdef1f3805c4c0e28114282e4ed37b0","ssdeep":"192:/92I4ZzZj8iomtfcKZ+QysCcuOKOMozI9x1aJ6uCKbaD:/sPZPywuOoozI7qt0","tlshash":"cff12e5b23f23271453762ad4b9f76a6b23410032009d9b47edd47003f85b268bb5aef","size":7529,"data":"","first_seen":"2026-01-20T02:05:22.039373Z","last_seen":"2026-02-02T19:25:51.220751Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"camp.airdropalerts.bar/assets/cec9e441-d8af-417d-8e5f-a5a08df61b46","fqdn":"camp.airdropalerts.bar","domain":"airdropalerts.bar","tld":"bar"},"ip":{"addr":"104.21.84.197","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"8189e8a0b0c546c0a58e76a31f9eb590","sha1":"3fed8eaab9a3100ceebfe5ab5648f5cbd4f10c99","sha256":"0b485ecd4df7243f0e5e02d55bbcdd24703c321dbcee4a3dc14bc9d94235b94b","sha512":"7fd8b5624315ae0fff26c91607a24b5ec5527eef0f70eab909526de86801c21ab9d69978248bb87fba58872bbb2a18594a5142fc20e44104f036eebb1e2bb7c6","ssdeep":"768:Any0CI+c6ltlo/yeMebgQuz+rSvpi4NJuxQTHWU+GxiKA84WfhgnMPG5DysiLIcn:QLOtCFZvGQcWtGxiKRgKFhYapiFrm852","tlshash":"1ec372c5594bd8e88e5165ded473ec09e4284963cdadf4a3a92ceec0786df22c05327b","size":119810,"data":"","first_seen":"2026-01-20T02:11:18.329132Z","last_seen":"2026-01-20T02:11:18.329132Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"player.vimeo.com/video/1074378498?background=1\u0026quality=720p","fqdn":"player.vimeo.com","domain":"vimeo.com","tld":"com"},"ip":{"addr":"162.159.138.60","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"moz-nullprincipal:{4de1773a-8162-4494-9eaa-446317b12bf5}?https://camp.airdropalerts.bar","date":"2026-01-20T02:10:55.163Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vimeo.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 10 Jan 2026 11:31:07 GMT","end":"Fri, 10 Apr 2026 12:31:03 GMT"},"fingerprint":{"sha1":"CF:0B:BA:15:B0:E8:E4:4B:39:29:79:E7:DB:55:EE:8B:B9:84:44:C0","sha256":"E5:A7:DE:3B:CB:B7:7B:AD:70:B4:9D:B3:B9:0A:7A:D8:6A:A1:D1:89:A0:7C:B2:EC:C8:66:03:2B:29:75:9F:0D"}}},"request":{"raw":"GET /video/1074378498?background=1\u0026quality=720p HTTP/1.1\r\nHost: player.vimeo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://camp.airdropalerts.bar/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Tue, 20 Jan 2026 02:10:55 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nContent-Encoding: gzip\r\nCF-Ray: 9c0b09c6ef3eb515-OSL\r\nCF-Cache-Status: DYNAMIC\r\nCache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nExpires: Fri, 15 Dec 1985 19:30:00 GMT\r\nLink: \u003chttps://lensflare.vimeo.com\u003e; rel=preconnect; crossorigin, \u003chttps://arclight.vimeo.com\u003e; rel=preconnect; crossorigin, \u003chttps://i.vimeocdn.com\u003e; rel=preconnect; crossorigin, \u003chttps://f.vimeocdn.com\u003e; rel=preconnect; crossorigin\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains; preload\r\nVary: Origin, Referer, Accept-Encoding\r\nVia: 1.1 varnish, 1.1 varnish\r\ncontent-security-policy: default-src 'none'; script-src 'self' 'unsafe-inline' https://*.vimeocdn.com 'unsafe-eval' resource: https://vimeo.com https://imasdk.googleapis.com/ https://adservice.google.com/ https://s0.2mdn.net/instream/video/ https://browser-intake-datadoghq.com https://src.litix.io https://www.gstatic.com https://cdn.kollective.app/ https://wirewax.s3.eu-west-1.amazonaws.com https://edge-assets.wirewax.com https://edge-assets.wirewax.video https://embedder-sdk.wirewax.com https://embedder-sdk.wirewax.video https://embedder-sdk.wirewax.tv https://*.vimeo.work; style-src 'self' 'unsafe-inline' https://*.vimeocdn.com https://fonts.googleapis.com https://edge-assets.wirewax.com https://edge-assets.wirewax.video https://edge-player5.wirewax.com https://edge-player5.wirewax.video; connect-src 'self' ws: wss: https://vimeo.com https://api.vimeo.com https://csi.gstatic.com https://*.akamaized.net https://*.akamaized-staging.net https://*.vimeocdn.com https://drm.vhx.com/v2/fairplay/cert https://wv.service.expressplay.com https://fp.service.expressplay.com https://pr.service.expressplay.com https://storage.googleapis.com https://browser-intake-datadoghq.com https://live-api.cloud.vimeo.com https://*.litix.io/ https://collector.vhx.tv https://collector.vhxstaging.com https://*.kollective.app https://*.kollective.app:31015 https://*.kollectivecd.com https://*.paychex.com https://*.hivestreaming.com https://vimeo.magisto.com https://stage.vimeo.magisto.com https://stage-proxy.vimeo.magisto.com https://interactive.create.vimeo.com https://*.wirewax.com https://*.wirewax.video https://*.wirewax.tv https://wirewax.s3.eu-west-1.amazonaws.com https://sqs.us-east-1.amazonaws.com https://sqs.eu-west-1.amazonaws.com https://s3-eu-west-1.amazonaws.com https://cognito-identity.us-east-1.amazonaws.com https://cognito-identity.eu-west-1.amazonaws.com https://player-telemetry.vimeo.com https://lensflare.vimeo.com https://arclight.vimeo.com https://*.vimeo.work; font-src data: https://edge-assets.wirewax.com https://edge-assets.wirewax.video https://branding.cdn.magisto.com https://d2by6sxflmuwyq.cloudfront.net https://fonts.gstatic.com https://player.vimeo.com; img-src 'self' data: https://player.vimeo.com https://i.vimeocdn.com https://secure-b.vimeocdn.com https://f.vimeocdn.com https://*.vimeocdn.com https://vimeo.com https://secure.gravatar.com https://i0.wp.com https://i1.wp.com https://i2.wp.com https://pagead2.googlesyndication.com https://i.vimeocdn.com https://duysrfiajusdh.cloudfront.net https://d263mgllkjh2k2.cloudfront.net https://storage.googleapis.com https://wirewax.s3.eu-west-1.amazonaws.com https://studio-media.wirewax.com https://studio-media.wirewax.video https://edge-assets.wirewax.com https://edge-assets.wirewax.video https://maps.googleapis.com android-webview-video-poster: https://*.vimeo.work; object-src 'self' https://*.vimeocdn.com https://*.akamaized.net https://*.akamaized-staging.net; media-src 'self' blob: https://*.vimeocdn.com https://*.akamaized.net https://*.akamaized-staging.net https://*.gvt1.com https://live-api.cloud.vimeo.com https://captions.vimeo.com https://captions-eu.vimeo.com; frame-src 'self' https://*; worker-src blob:\r\ncross-origin-resource-policy: cross-origin\r\nx-backend-server: srv001\r\nx-bapp-server: player-backend-6f57d96df8-5hkh8\r\nx-cache: MISS, MISS\r\nx-cache-hits: 0, 0\r\nx-content-type-options: nosniff\r\nx-host: player-backend-6f57d96df8-5hkh8\r\nx-link-match: 105\r\nx-player-backend: g\r\nx-served-by: cache-iad-kiad7000142-IAD, cache-bma-essb1270071-BMA\r\nx-timer: S1768875055.213569,VS0,VE227\r\nx-xss-protection: 1; mode=block\r\nSet-Cookie: __cf_bm=fPssccHu27pC4T8GkX.ZUiAbYjLfPDEJrlfgAJ7pVDM-1768875055-1.0.1.1-1gbEroVAbS_U6IZLpwP8nBvH7IKJ_uv51oO9hb.rHpaniz9PbEjsJSdWAtq1icYv; path=/; expires=Tue, 20-Jan-26 02:40:55 GMT; domain=.vimeo.com; HttpOnly; Secure; SameSite=None\n_cfuvid=0NMP.VWs3wbqXBzZe3Lgb_lAlrU9Z8WbTw3hyLNIwI0-1768875055446-0.0.1.1-604800000; path=/; domain=.vimeo.com; HttpOnly; Secure; SameSite=None\r\nServer: cloudflare\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-24T09:50:53.836889Z","times_seen":17498896,"resource_available":true,"data":null}},"time_used":310,"timings":{"blocked":24,"dns":6,"connect":1,"send":0,"wait":259,"receive":1,"ssl":16},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"player.vimeo.com/video/1074378498?background=1\u0026quality=720p","fqdn":"player.vimeo.com","domain":"vimeo.com","tld":"com"},"ip":{"addr":"162.159.138.60","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"moz-nullprincipal:{4de1773a-8162-4494-9eaa-446317b12bf5}?https://camp.airdropalerts.bar","date":"2026-01-20T02:10:55.359Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vimeo.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 10 Jan 2026 11:31:07 GMT","end":"Fri, 10 Apr 2026 12:31:03 GMT"},"fingerprint":{"sha1":"CF:0B:BA:15:B0:E8:E4:4B:39:29:79:E7:DB:55:EE:8B:B9:84:44:C0","sha256":"E5:A7:DE:3B:CB:B7:7B:AD:70:B4:9D:B3:B9:0A:7A:D8:6A:A1:D1:89:A0:7C:B2:EC:C8:66:03:2B:29:75:9F:0D"}}},"request":{"raw":"GET /video/1074378498?background=1\u0026quality=720p HTTP/1.1\r\nHost: player.vimeo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://camp.airdropalerts.bar/\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Tue, 20 Jan 2026 02:10:55 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nServer: cloudflare\r\nCF-Ray: 9c0b09c89a5a56b5-OSL\r\nCF-Cache-Status: DYNAMIC\r\nAccept-Ranges: bytes\r\nCache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nExpires: Fri, 15 Dec 1985 19:30:00 GMT\r\nLink: \u003chttps://lensflare.vimeo.com\u003e; rel=preconnect; crossorigin, \u003chttps://arclight.vimeo.com\u003e; rel=preconnect; crossorigin, \u003chttps://i.vimeocdn.com\u003e; rel=preconnect; crossorigin, \u003chttps://f.vimeocdn.com\u003e; rel=preconnect; crossorigin\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains; preload\r\nVary: Origin, Referer, Accept-Encoding\r\nVia: 1.1 varnish, 1.1 varnish\r\ncontent-security-policy: default-src 'none'; script-src 'self' 'unsafe-inline' https://*.vimeocdn.com 'unsafe-eval' resource: https://vimeo.com https://imasdk.googleapis.com/ https://adservice.google.com/ https://s0.2mdn.net/instream/video/ https://browser-intake-datadoghq.com https://src.litix.io https://www.gstatic.com https://cdn.kollective.app/ https://wirewax.s3.eu-west-1.amazonaws.com https://edge-assets.wirewax.com https://edge-assets.wirewax.video https://embedder-sdk.wirewax.com https://embedder-sdk.wirewax.video https://embedder-sdk.wirewax.tv https://*.vimeo.work; style-src 'self' 'unsafe-inline' https://*.vimeocdn.com https://fonts.googleapis.com https://edge-assets.wirewax.com https://edge-assets.wirewax.video https://edge-player5.wirewax.com https://edge-player5.wirewax.video; connect-src 'self' ws: wss: https://vimeo.com https://api.vimeo.com https://csi.gstatic.com https://*.akamaized.net https://*.akamaized-staging.net https://*.vimeocdn.com https://drm.vhx.com/v2/fairplay/cert https://wv.service.expressplay.com https://fp.service.expressplay.com https://pr.service.expressplay.com https://storage.googleapis.com https://browser-intake-datadoghq.com https://live-api.cloud.vimeo.com https://*.litix.io/ https://collector.vhx.tv https://collector.vhxstaging.com https://*.kollective.app https://*.kollective.app:31015 https://*.kollectivecd.com https://*.paychex.com https://*.hivestreaming.com https://vimeo.magisto.com https://stage.vimeo.magisto.com https://stage-proxy.vimeo.magisto.com https://interactive.create.vimeo.com https://*.wirewax.com https://*.wirewax.video https://*.wirewax.tv https://wirewax.s3.eu-west-1.amazonaws.com https://sqs.us-east-1.amazonaws.com https://sqs.eu-west-1.amazonaws.com https://s3-eu-west-1.amazonaws.com https://cognito-identity.us-east-1.amazonaws.com https://cognito-identity.eu-west-1.amazonaws.com https://player-telemetry.vimeo.com https://lensflare.vimeo.com https://arclight.vimeo.com https://*.vimeo.work; font-src data: https://edge-assets.wirewax.com https://edge-assets.wirewax.video https://branding.cdn.magisto.com https://d2by6sxflmuwyq.cloudfront.net https://fonts.gstatic.com https://player.vimeo.com; img-src 'self' data: https://player.vimeo.com https://i.vimeocdn.com https://secure-b.vimeocdn.com https://f.vimeocdn.com https://*.vimeocdn.com https://vimeo.com https://secure.gravatar.com https://i0.wp.com https://i1.wp.com https://i2.wp.com https://pagead2.googlesyndication.com https://i.vimeocdn.com https://duysrfiajusdh.cloudfront.net https://d263mgllkjh2k2.cloudfront.net https://storage.googleapis.com https://wirewax.s3.eu-west-1.amazonaws.com https://studio-media.wirewax.com https://studio-media.wirewax.video https://edge-assets.wirewax.com https://edge-assets.wirewax.video https://maps.googleapis.com android-webview-video-poster: https://*.vimeo.work; object-src 'self' https://*.vimeocdn.com https://*.akamaized.net https://*.akamaized-staging.net; media-src 'self' blob: https://*.vimeocdn.com https://*.akamaized.net https://*.akamaized-staging.net https://*.gvt1.com https://live-api.cloud.vimeo.com https://captions.vimeo.com https://captions-eu.vimeo.com; frame-src 'self' https://*; worker-src blob:; report-uri /_csp\r\ncross-origin-resource-policy: cross-origin\r\nx-backend-server: srv001\r\nx-bapp-server: player-backend-6f57d96df8-5rpvl\r\nx-cache: MISS, MISS\r\nx-cache-hits: 0, 0\r\nx-content-type-options: nosniff\r\nx-host: player-backend-6f57d96df8-5rpvl\r\nx-link-match: 105\r\nx-player-backend: g\r\nx-served-by: cache-iad-kiad7000112-IAD, cache-bma-essb1270038-BMA\r\nx-timer: S1768875055.471034,VS0,VE135\r\nx-xss-protection: 1; mode=block\r\nSet-Cookie: __cf_bm=h6n4KDsyvR0ERkwERz0pVdTTYra69cB6GqhZvApT7h0-1768875055-1.0.1.1-cYxZtLxnyO1Muee0Vvt6WQ_InIp4TcDOH4IZKB1c9bU7AFaArBF.lle_A4sI9VqL; path=/; expires=Tue, 20-Jan-26 02:40:55 GMT; domain=.vimeo.com; HttpOnly; Secure; SameSite=None\n_cfuvid=zlAz0XIMlbjpEn.VjPSceoIfWiiE9jXbnevIIn2GGEg-1768875055612-0.0.1.1-604800000; path=/; domain=.vimeo.com; HttpOnly; Secure; SameSite=None\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-24T09:50:53.836889Z","times_seen":17498896,"resource_available":true,"data":null}},"time_used":346,"timings":{"blocked":88,"dns":1,"connect":1,"send":0,"wait":164,"receive":3,"ssl":12},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i.vimeocdn.com/video/2003716562-d5c35e3cd45a19b3f3a0095aaed8858d233527f67b24931ab90d29c91af7d035-d?mw=80\u0026q=85","fqdn":"i.vimeocdn.com","domain":"vimeocdn.com","tld":"com"},"ip":{"addr":"151.101.64.217","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"moz-nullprincipal:{4de1773a-8162-4494-9eaa-446317b12bf5}?https://camp.airdropalerts.bar","date":"2026-01-20T02:10:55.358Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.vimeo.com","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q4","organization":"GlobalSign nv-sa"},"validity":{"start":"Fri, 24 Oct 2025 05:39:42 GMT","end":"Wed, 25 Nov 2026 05:39:41 GMT"},"fingerprint":{"sha1":"6D:35:33:58:FF:BE:25:3A:A7:84:6C:25:7B:4D:08:14:3A:7D:F6:0C","sha256":"44:99:66:20:D6:9A:A2:F7:3D:C3:6B:30:AD:7A:04:76:76:4C:DB:D5:3A:C4:55:DD:21:2A:B4:10:49:EB:9D:8A"}}},"request":{"raw":"GET /video/2003716562-d5c35e3cd45a19b3f3a0095aaed8858d233527f67b24931ab90d29c91af7d035-d?mw=80\u0026q=85 HTTP/1.1\r\nHost: i.vimeocdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://camp.airdropalerts.bar/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: max-age=2592000\r\ncontent-type: image/avif\r\netag: \"85c54a3d7247128440fd1bf597895202\"\r\nviewmaster-source-region: US\r\nvia: 1.1 google, 1.1 varnish, 1.1 varnish\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: X-Viewmaster-Status\r\naccess-control-max-age: 86400\r\naccept-ranges: bytes\r\nage: 460380\r\ndate: Tue, 20 Jan 2026 02:10:55 GMT\r\nx-served-by: cache-dfw-kdal2120096-DFW, cache-hel1410028-HEL\r\nx-cache: HIT, HIT\r\nx-cache-hits: 77, 0\r\nx-timer: S1768875055.466777,VS0,VE1\r\nvary: Accept\r\ncontent-length: 591\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":591,"size_decoded":0,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"85c54a3d7247128440fd1bf597895202","sha1":"a32f5d84a6508c17c695925e0dc6976e398fdc9b","sha256":"18b886f2704106aa0ab327438dd92df29d369ad9fd881f8329ee5341161df695","sha512":"83800e70d85c1d5dc2eea30bc8d5d6b1e57ec8c18b920d16900b6b05f70b8364a1e0c4745b97aad4dee3b363e4cee3c0bda42fd73c51dd8fcdccf1bace83495b","ssdeep":"","tlshash":"88f0752277039551f45c22b39c658f361232f15a4b7f6eaf58d5730528acaeccc17da0","first_seen":"2026-01-20T02:11:18.32517Z","last_seen":"2026-01-20T02:11:18.32517Z","times_seen":1,"resource_available":false,"data":null}},"time_used":212,"timings":{"blocked":86,"dns":13,"connect":26,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"camp.airdropalerts.bar/assets/cec9e441-d8af-417d-8e5f-a5a08df61b46?m=2948125","fqdn":"camp.airdropalerts.bar","domain":"airdropalerts.bar","tld":"bar"},"ip":{"addr":"104.21.84.197","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://camp.airdropalerts.bar/claim-camp-airdrop/36cd0cc6-3c28-4f48-b63e-9b5f9fa9d106","date":"2026-01-20T02:10:55.558Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"airdropalerts.bar","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 09 Jan 2026 12:03:10 GMT","end":"Thu, 09 Apr 2026 13:01:47 GMT"},"fingerprint":{"sha1":"2A:7A:BB:DC:4A:32:64:87:4B:AF:2C:1C:7F:A4:04:02:56:28:E9:43","sha256":"63:52:C2:96:8C:F2:81:43:3F:F9:72:C4:53:DD:BF:1B:C8:BF:BD:E4:16:76:7C:ED:F8:9D:B2:90:AE:D2:8B:36"}}},"request":{"raw":"GET /assets/cec9e441-d8af-417d-8e5f-a5a08df61b46?m=2948125 HTTP/1.1\r\nHost: camp.airdropalerts.bar\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://camp.airdropalerts.bar/claim-camp-airdrop/36cd0cc6-3c28-4f48-b63e-9b5f9fa9d106\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: visit_session=c268bd9ba220855c0f49fb80fd5910166dc4c39ef6ad64b1a6b2a66fe80e0490\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 20 Jan 2026 02:10:56 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DVXRxgvVpsHStVbPA7BUyIk5KDx0AmHsKju8PIdqzCqTTeDDkmhg0BhEj9AR6ibxLQNTlreYu%2FMJARWHyGFYfCaHwPZLfxLoAvZH9itHjf8fVL8q\"}]}\r\npriority: u=4,i=?0\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,PUT,POST,DELETE,PATCH,OPTIONS\r\naccess-control-allow-headers: Content-Type, Authorization, Content-Length, X-Requested-With, Accept, Origin\r\ncache-control: public, max-age=3600, no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c0b09c94eda0b02-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3891182,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"935e14644b0068e33224a106745bf8b0","sha1":"8d7d71b93e5b3119da52c8ec131bf62d894abe3a","sha256":"052c04d8cd1afeaf2b584df85b0894ac7b4e593483b1011dd0401c5fa5e79a34","sha512":"a34b3858e0c2538afe552e2adbe98a3a25098b6a2826d22392b741b28ca0c3474266b5f00f06aeb23bcfe22edba93f096788f835c9ff76f905ad98d291915686","ssdeep":"24576:V7k/ljuV8/8Yae0PgGswPpBroS7InwbjtsJshJuEbdo:VQ9ju7OwPEZJsK","tlshash":"7725e098dd87d143c74b133bc1b69bc74156ae228b8d5089d8378984266cf773acbe4b","first_seen":"2026-01-20T02:05:22.042033Z","last_seen":"2026-01-20T02:12:25.109522Z","times_seen":4,"resource_available":false,"data":null}},"time_used":1746,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1418,"receive":328,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-20","alert":"Sinkholed","trigger":"camp.airdropalerts.bar","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-20","alert":"Sinkholed","trigger":"camp.airdropalerts.bar","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-20","alert":"Sinkholed","trigger":"camp.airdropalerts.bar","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"camp.airdropalerts.bar/claim-camp-airdrop/36cd0cc6-3c28-4f48-b63e-9b5f9fa9d106","fqdn":"camp.airdropalerts.bar","domain":"airdropalerts.bar","tld":"bar"},"ip":{"addr":"104.21.84.197","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-01-20T02:10:50.258Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"airdropalerts.bar","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 09 Jan 2026 12:03:10 GMT","end":"Thu, 09 Apr 2026 13:01:47 GMT"},"fingerprint":{"sha1":"2A:7A:BB:DC:4A:32:64:87:4B:AF:2C:1C:7F:A4:04:02:56:28:E9:43","sha256":"63:52:C2:96:8C:F2:81:43:3F:F9:72:C4:53:DD:BF:1B:C8:BF:BD:E4:16:76:7C:ED:F8:9D:B2:90:AE:D2:8B:36"}}},"request":{"raw":"GET /claim-camp-airdrop/36cd0cc6-3c28-4f48-b63e-9b5f9fa9d106 HTTP/1.1\r\nHost: camp.airdropalerts.bar\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 20 Jan 2026 02:10:53 GMT\r\ncontent-type: text/html; charset=utf-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,PUT,POST,DELETE,PATCH,OPTIONS\r\naccess-control-allow-headers: Content-Type, Authorization, Content-Length, X-Requested-With, Accept, Origin\r\nset-cookie: visit_session=c268bd9ba220855c0f49fb80fd5910166dc4c39ef6ad64b1a6b2a66fe80e0490; Max-Age=86400; Path=/; Expires=Wed, 21 Jan 2026 02:10:53 GMT; HttpOnly; Secure; SameSite=Lax\r\ncache-control: no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=H0H%2F0t01DdVKHb72mU7wgDwRkV5IzFpR0xcW1%2BxkAD2soFF6qBkYPRFiEOPXdhV5i%2BsI86fVFAgPgQ4S0y5zP7IWluqpumInayeZRgpNuMl8qWvw\"}]}\r\ncontent-encoding: br\r\ncf-ray: 9c0b09a83ae6b518-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7494115,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (2591)","md5":"b82d7297a3a30cb249e340dc1dae82e2","sha1":"fd3ca67513d1da99176f97aa4b898908b3c873f9","sha256":"6c8dcfc5d5368f94ad14e5626f7acb1143ba9b10a8fc0604bae3f9c8d56d3988","sha512":"e569c569e92584a98b73ea5825b0bb9114bf16dbef2908ba24fdab16253e92977b6254eece15e534d5b07a475eed84f7769b2150cb6e14af58c6f979dc54d141","ssdeep":"24576:PAVWG9ANWGuAdWGPA9WGQANWGJAVWGjJ8EeW5AI:PMjCxo+J8EsI","tlshash":"3b25c06f09a301047c53a57d5beb2b856a35d003c90adc9c7ecda189cfcd798bda2798","first_seen":"2026-01-20T02:11:18.327856Z","last_seen":"2026-01-20T02:11:18.327856Z","times_seen":1,"resource_available":false,"data":null}},"time_used":3537,"timings":{"blocked":15,"dns":0,"connect":1,"send":0,"wait":3506,"receive":0,"ssl":13},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-20","alert":"Sinkholed","trigger":"camp.airdropalerts.bar","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-20","alert":"Sinkholed","trigger":"camp.airdropalerts.bar","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-20","alert":"Sinkholed","trigger":"camp.airdropalerts.bar","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"camp.airdropalerts.bar/assets/cec9e441-d8af-417d-8e5f-a5a08df61b46","fqdn":"camp.airdropalerts.bar","domain":"airdropalerts.bar","tld":"bar"},"ip":{"addr":"104.21.84.197","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://camp.airdropalerts.bar/claim-camp-airdrop/36cd0cc6-3c28-4f48-b63e-9b5f9fa9d106","date":"2026-01-20T02:10:53.924Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"airdropalerts.bar","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 09 Jan 2026 12:03:10 GMT","end":"Thu, 09 Apr 2026 13:01:47 GMT"},"fingerprint":{"sha1":"2A:7A:BB:DC:4A:32:64:87:4B:AF:2C:1C:7F:A4:04:02:56:28:E9:43","sha256":"63:52:C2:96:8C:F2:81:43:3F:F9:72:C4:53:DD:BF:1B:C8:BF:BD:E4:16:76:7C:ED:F8:9D:B2:90:AE:D2:8B:36"}}},"request":{"raw":"GET /assets/cec9e441-d8af-417d-8e5f-a5a08df61b46 HTTP/1.1\r\nHost: camp.airdropalerts.bar\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://camp.airdropalerts.bar/claim-camp-airdrop/36cd0cc6-3c28-4f48-b63e-9b5f9fa9d106\r\nCookie: visit_session=c268bd9ba220855c0f49fb80fd5910166dc4c39ef6ad64b1a6b2a66fe80e0490\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 20 Jan 2026 02:10:55 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=csz4PmD0LE%2FvX6cSbx2Ti3vDjUFdB5JOxdgoGxDRWxcC9uz8wxy6dNdotGHGC4dALVnPqHBDCP1Ac4E0QnkBofE2qNUk6PTG5ScUunXugE0qmNHO\"}]}\r\npriority: u=3,i=?0\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,PUT,POST,DELETE,PATCH,OPTIONS\r\naccess-control-allow-headers: Content-Type, Authorization, Content-Length, X-Requested-With, Accept, Origin\r\ncache-control: public, max-age=3600, no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c0b09bf0ed00b02-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":119810,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"8189e8a0b0c546c0a58e76a31f9eb590","sha1":"3fed8eaab9a3100ceebfe5ab5648f5cbd4f10c99","sha256":"0b485ecd4df7243f0e5e02d55bbcdd24703c321dbcee4a3dc14bc9d94235b94b","sha512":"7fd8b5624315ae0fff26c91607a24b5ec5527eef0f70eab909526de86801c21ab9d69978248bb87fba58872bbb2a18594a5142fc20e44104f036eebb1e2bb7c6","ssdeep":"768:Any0CI+c6ltlo/yeMebgQuz+rSvpi4NJuxQTHWU+GxiKA84WfhgnMPG5DysiLIcn:QLOtCFZvGQcWtGxiKRgKFhYapiFrm852","tlshash":"1ec372c5594bd8e88e5165ded473ec09e4284963cdadf4a3a92ceec0786df22c05327b","first_seen":"2026-01-20T02:11:18.329132Z","last_seen":"2026-01-20T02:11:18.329132Z","times_seen":1,"resource_available":true,"data":null}},"time_used":1405,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1289,"receive":116,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-20","alert":"Sinkholed","trigger":"camp.airdropalerts.bar","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-20","alert":"Sinkholed","trigger":"camp.airdropalerts.bar","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-20","alert":"Sinkholed","trigger":"camp.airdropalerts.bar","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"camp.airdropalerts.bar/tracker.js","fqdn":"camp.airdropalerts.bar","domain":"airdropalerts.bar","tld":"bar"},"ip":{"addr":"104.21.84.197","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://camp.airdropalerts.bar/claim-camp-airdrop/36cd0cc6-3c28-4f48-b63e-9b5f9fa9d106","date":"2026-01-20T02:10:53.926Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"airdropalerts.bar","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 09 Jan 2026 12:03:10 GMT","end":"Thu, 09 Apr 2026 13:01:47 GMT"},"fingerprint":{"sha1":"2A:7A:BB:DC:4A:32:64:87:4B:AF:2C:1C:7F:A4:04:02:56:28:E9:43","sha256":"63:52:C2:96:8C:F2:81:43:3F:F9:72:C4:53:DD:BF:1B:C8:BF:BD:E4:16:76:7C:ED:F8:9D:B2:90:AE:D2:8B:36"}}},"request":{"raw":"GET /tracker.js HTTP/1.1\r\nHost: camp.airdropalerts.bar\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://camp.airdropalerts.bar/claim-camp-airdrop/36cd0cc6-3c28-4f48-b63e-9b5f9fa9d106\r\nCookie: visit_session=c268bd9ba220855c0f49fb80fd5910166dc4c39ef6ad64b1a6b2a66fe80e0490\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 20 Jan 2026 02:10:54 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,PUT,POST,DELETE,PATCH,OPTIONS\r\naccess-control-allow-headers: Content-Type, Authorization, Content-Length, X-Requested-With, Accept, Origin\r\ncache-control: no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0\r\ncontent-encoding: br\r\ncf-cache-status: BYPASS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0i2GW43%2FR6ELJ%2FiFfXbSk1iAzlrwABHpPBpyI5tgftC55hpvKMqitGrRptWIZl8noAQJmHzZdziLAPqPvwNERL45BxRXjqlRZwK1zoax%2FH%2B5Slwg\"}]}\r\ncf-ray: 9c0b09bf0ed10b02-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7529,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text","md5":"4f225a4dfee4e00687bae7531e3b290d","sha1":"097bb0ab428a31e7a07b1db7792b79d52a6dd712","sha256":"6dd317f65ff7f9aae2b752e306b983d32e79109b768246eb83c26ffb9070bb22","sha512":"5ef8667e4c985b74dfc2767ab96c811c4091574721c0035ff1dd1c4e7de6b06e7340d8a583fe298264445b459517eae2ccdef1f3805c4c0e28114282e4ed37b0","ssdeep":"192:/92I4ZzZj8iomtfcKZ+QysCcuOKOMozI9x1aJ6uCKbaD:/sPZPywuOoozI7qt0","tlshash":"cff12e5b23f23271453762ad4b9f76a6b23410032009d9b47edd47003f85b268bb5aef","first_seen":"2026-01-20T02:05:22.039373Z","last_seen":"2026-02-02T19:25:51.220751Z","times_seen":8,"resource_available":true,"data":null}},"time_used":176,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":176,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-20","alert":"Sinkholed","trigger":"camp.airdropalerts.bar","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-20","alert":"Sinkholed","trigger":"camp.airdropalerts.bar","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-20","alert":"Sinkholed","trigger":"camp.airdropalerts.bar","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}