{"report_id":"6606abbf-3b71-4d16-baa5-ca497f9fab85","version":6,"status":"done","tags":[],"date":"2026-03-02T13:32:12Z","url":{"schema":"http","addr":"massdropmultisenders-app.xyz","fqdn":"massdropmultisenders-app.xyz","domain":"massdropmultisenders-app.xyz","tld":"xyz"},"ip":{"addr":"172.67.215.230","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"massdropmultisenders-app.xyz/","fqdn":"massdropmultisenders-app.xyz","domain":"massdropmultisenders-app.xyz","tld":"xyz"},"title":"Airdrop | Massdrop Multisender","dom":{"size":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-17T10:43:03.670444Z","times_seen":17935422,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"massdropmultisenders-app.xyz","fqdn":"massdropmultisenders-app.xyz","domain":"massdropmultisenders-app.xyz","tld":"xyz"},"ip":{"addr":"172.67.215.230","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-04-06T13:32:12Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"massdropmultisenders-app.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null},"summary":[{"fqdn":"massdropmultisenders-app.xyz","ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":4,"request_count":4,"received_data":3610500,"sent_data":1897,"comment":"","tags":null,"fingerprints":[{"name":"Vue.js","description":"Vue.js is an open-source model–view–viewmodel JavaScript framework for building user interfaces and single-page applications.","website":"https://vuejs.org","common_platform_enumeration":"","icon":"vue.svg","categories":["JavaScript frameworks"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"massdropmultisenders-app.xyz/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"massdropmultisenders-app.xyz","domain":"massdropmultisenders-app.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","size":1239,"data":"","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-08-17T10:39:22.069209Z","times_seen":421297,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"massdropmultisenders-app.xyz/ajax-6.12.10.min.js","fqdn":"massdropmultisenders-app.xyz","domain":"massdropmultisenders-app.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"845f1db5182566f52405deaf2019f524","sha1":"6ccd3c28f78a3b733870c72849a319f6dfa162c5","sha256":"f513b07550e99e87f9afb647ef1c39f1bc330197e8866acfdc15cd3562aba531","sha512":"013bf890699e1f28a387d8483dd679310e196dfda03e24d1f1f1ec8200909fa88b771c6f0b8889f7e7ef14e7bdd3d972fea7c797181cfb73e34e196e1cbb0e54","ssdeep":"768:K5HxscPzlI6zWVmBxNRrTbrK65jZ3nbtSVoDBBC2/0vowwqQwISsQZ6cJPEzcthX:slI6zWVmBxNRfp/3btTw2pwwqej3w","tlshash":"5783d9ca1942c0e45f5591dec473f80ae5694963ceacf08be62ddcc6b52df26858323b","size":86009,"data":"","first_seen":"2026-02-27T05:59:44.421485Z","last_seen":"2026-03-02T13:32:51.636471Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"massdropmultisenders-app.xyz/","fqdn":"massdropmultisenders-app.xyz","domain":"massdropmultisenders-app.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"39f3dc2f33c6eae888c6df55bd9ba8b1","sha1":"f31a0f1daa6f40e1c7ae45789e1b896fcb3f6646","sha256":"7dc7e6bbb48adb1e87d255b4fc1c288cb1f28e3d72167ca15521fe245887a336","sha512":"5b4cedabe7bbfaa6908b760f3407594667f97a7a8c7442ad828619817a5f797e027169ee3e62fd7f81ff2f8c464f80845cb3090a74316c46d5a67328cda32884","ssdeep":"768:dlnxoclfl86UENWaHdLXrhZ3zqULdz/QRji9+IeWOZgcpTssCc1pcfhcYctnhIc8:1l86JYaHdL7hpNjeBSlf","tlshash":"7183b8ca1956d0e05f5592dec473e81ae9694d23ceacf09bb52dddc0b52cf22858323b","size":82313,"data":"","first_seen":"2026-02-27T05:59:44.42347Z","last_seen":"2026-03-02T13:32:51.639754Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"massdropmultisenders-app.xyz/","fqdn":"massdropmultisenders-app.xyz","domain":"massdropmultisenders-app.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-02T13:31:49.285Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"massdropmultisenders-app.xyz","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 27 Feb 2026 15:08:12 GMT","end":"Thu, 28 May 2026 15:08:11 GMT"},"fingerprint":{"sha1":"0F:2E:5C:DA:AF:91:D0:07:30:BC:C2:DC:22:59:94:DC:0B:E0:D9:FF","sha256":"85:38:CD:60:C5:AA:9A:33:2C:3D:0F:30:EE:B1:67:68:D7:B5:D2:C1:32:72:BA:D0:09:D0:20:B5:A5:95:D0:50"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: massdropmultisenders-app.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 02 Mar 2026 13:31:49 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Fri, 27 Feb 2026 15:30:21 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pU4dmnNqZ7zBEf0RtKvmuZWSsgTJJqDxKRIUV0NdN636MusGbkjAgI0VWdqbLzal5KN69ZwXZil8eeDeTwb90pbjnE5dN3cyI9NMqojvYdAgowwrgZaWqXXn%2BP8%3D\"}]}\r\nage: 50682\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncf-ray: 9d60c3919fc524b1-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vue.js","description":"Vue.js is an open-source model–view–viewmodel JavaScript framework for building user interfaces and single-page applications.","website":"https://vuejs.org","common_platform_enumeration":"","icon":"vue.svg","categories":["JavaScript frameworks"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":206057,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (65472), with no line terminators","md5":"068abf2ff45ed7974c89c8795d6b71e8","sha1":"35051a956f45b2eaa2c81b18f5cc33ce98598093","sha256":"4c4a9cfb8d6885a74015996ffa5799cd01d93f6baa4f112e78d088ede96ebaa8","sha512":"094ebd4c1ff88edb36cc08f8759e21ed58175b3c6aded2b95e02dcbe7a09948db46440637112cb8a39a93017cad53a4faf3919e2e36a533070ec767578e17c59","ssdeep":"3072:pAad+lngze81mTRY9RCONs1gNk9Bu1sKQQ4/4v62zJs1ClonN:UngzjmTRYaX9BDmVJSC2N","tlshash":"8b140237db1a64375333c96c92ee7b4c1c6adad3c44e08d6bd5ab5140ecf2e5889b484","first_seen":"2026-03-02T13:32:51.635226Z","last_seen":"2026-03-02T13:32:51.635226Z","times_seen":1,"resource_available":false,"data":null}},"time_used":186,"timings":{"blocked":82,"dns":46,"connect":10,"send":0,"wait":22,"receive":0,"ssl":23},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"massdropmultisenders-app.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"massdropmultisenders-app.xyz/ajax-6.12.10.min.js","fqdn":"massdropmultisenders-app.xyz","domain":"massdropmultisenders-app.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://massdropmultisenders-app.xyz/","date":"2026-03-02T13:31:49.582Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"massdropmultisenders-app.xyz","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 27 Feb 2026 15:08:12 GMT","end":"Thu, 28 May 2026 15:08:11 GMT"},"fingerprint":{"sha1":"0F:2E:5C:DA:AF:91:D0:07:30:BC:C2:DC:22:59:94:DC:0B:E0:D9:FF","sha256":"85:38:CD:60:C5:AA:9A:33:2C:3D:0F:30:EE:B1:67:68:D7:B5:D2:C1:32:72:BA:D0:09:D0:20:B5:A5:95:D0:50"}}},"request":{"raw":"GET /ajax-6.12.10.min.js HTTP/1.1\r\nHost: massdropmultisenders-app.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://massdropmultisenders-app.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 02 Mar 2026 13:31:49 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Fri, 27 Feb 2026 15:30:21 GMT\r\netag: W/\"69a1b88d-14ff9\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KLEMebxFq43fOz8YYGUS3RrraxizVArAGyDo72GNVXD0yaQqP8L%2BYZUo%2BZ6w0w5W58306vqYyduSI4HffJJMEFMLNRtwntMwqW6J3qEMYHS0DQD7TnzOSSB297w%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d60c392ecb297c6-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":86009,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"845f1db5182566f52405deaf2019f524","sha1":"6ccd3c28f78a3b733870c72849a319f6dfa162c5","sha256":"f513b07550e99e87f9afb647ef1c39f1bc330197e8866acfdc15cd3562aba531","sha512":"013bf890699e1f28a387d8483dd679310e196dfda03e24d1f1f1ec8200909fa88b771c6f0b8889f7e7ef14e7bdd3d972fea7c797181cfb73e34e196e1cbb0e54","ssdeep":"768:K5HxscPzlI6zWVmBxNRrTbrK65jZ3nbtSVoDBBC2/0vowwqQwISsQZ6cJPEzcthX:slI6zWVmBxNRfp/3btTw2pwwqej3w","tlshash":"5783d9ca1942c0e45f5591dec473f80ae5694963ceacf08be62ddcc6b52df26858323b","first_seen":"2026-02-27T05:59:44.421485Z","last_seen":"2026-03-02T13:32:51.636471Z","times_seen":2,"resource_available":true,"data":null}},"time_used":383,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":272,"receive":111,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"massdropmultisenders-app.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"massdropmultisenders-app.xyz/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"massdropmultisenders-app.xyz","domain":"massdropmultisenders-app.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://massdropmultisenders-app.xyz/","date":"2026-03-02T13:31:49.584Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"massdropmultisenders-app.xyz","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 27 Feb 2026 15:08:12 GMT","end":"Thu, 28 May 2026 15:08:11 GMT"},"fingerprint":{"sha1":"0F:2E:5C:DA:AF:91:D0:07:30:BC:C2:DC:22:59:94:DC:0B:E0:D9:FF","sha256":"85:38:CD:60:C5:AA:9A:33:2C:3D:0F:30:EE:B1:67:68:D7:B5:D2:C1:32:72:BA:D0:09:D0:20:B5:A5:95:D0:50"}}},"request":{"raw":"GET /cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js HTTP/1.1\r\nHost: massdropmultisenders-app.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 02 Mar 2026 13:31:49 GMT\r\ncontent-type: application/javascript\r\nexpires: Mon, 02 Mar 2026 14:19:49 GMT\r\ncache-control: public\r\nvary: accept-encoding\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ABfohPtN97bbmx%2FpB8MMwnta0O4M0Y9DqjfujbWgocJ1VbC4oTtiYN9IbfJcaGMsIHFQ0MFPej7wb2JC6JYXnGSujThV0u0Jv6%2FVG7rsVAmz1Hdi5lf5kIdmxGg%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9d60c392ecb697c6-ARN\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1239,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1238)","md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-08-17T10:39:22.069209Z","times_seen":421297,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"massdropmultisenders-app.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"massdropmultisenders-app.xyz/secureproxy?e=jscdn/getFile","fqdn":"massdropmultisenders-app.xyz","domain":"massdropmultisenders-app.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://massdropmultisenders-app.xyz/","date":"2026-03-02T13:31:50.167Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"massdropmultisenders-app.xyz","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 27 Feb 2026 15:08:12 GMT","end":"Thu, 28 May 2026 15:08:11 GMT"},"fingerprint":{"sha1":"0F:2E:5C:DA:AF:91:D0:07:30:BC:C2:DC:22:59:94:DC:0B:E0:D9:FF","sha256":"85:38:CD:60:C5:AA:9A:33:2C:3D:0F:30:EE:B1:67:68:D7:B5:D2:C1:32:72:BA:D0:09:D0:20:B5:A5:95:D0:50"}}},"request":{"raw":"POST /secureproxy?e=jscdn/getFile HTTP/1.1\r\nHost: massdropmultisenders-app.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nContent-Length: 37\r\nOrigin: https://massdropmultisenders-app.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":37,"data":"{\"permit_key\":\"1tmdrfc73p740o9vlql8\"}"}},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 02 Mar 2026 13:31:50 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: cloudflare\r\ncast-mode: default\r\ncontent-security-policy: frame-ancestors http: https:, frame-ancestors http: https:\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,PUT,POST,DELETE,PATCH,OPTIONS\r\naccess-control-allow-headers: Content-Type, Authorization, Content-Length, X-Requested-With, Accept, Origin\r\naccess-control-allow-credentials: true\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding, origin, access-control-request-method, access-control-request-headers\r\nx-content-type-options: nosniff, nosniff\r\nx-xss-protection: 1; mode=block, 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ok8Oim7Hx5Ssh320RYx4GM2PUTdduU8pO4zz2wezYlodDcSVylip0jqe010%2Bhm27SL2KC8ZrkmHTjO9XrvdPYR%2BPOpO7Gt1%2F7SR5f1%2FZRxBUIw%3D%3D\"}]}\r\ncontent-encoding: gzip\r\nalt-svc: h3=\":443\"; ma=86400\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\npriority: u=4,i=?0\r\ncf-ray: 9d60c3968b5b97c6-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3313530,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"d24017daaa35083bd1cfff9909b03069","sha1":"ffd59fa1ff5539dfac74181b2db2a6f16bfe1e3e","sha256":"7683c8cec95d10d30fca7f9e462d3ee2b5c6e09f8275a735594257d84ebaa807","sha512":"fcce4c85b0e766ea7ddb6f604d9270f5e99dc946f70431551cd6204b8914f6350c471df68fb1f0bd636d06a22f0376af41602ab9bb28db748c89bae89967f330","ssdeep":"24576:IYb/YWmLkwsOukzMSPbg+lsVo5/Cr0OSzcfUjeFdxZohKfmdl:I2GkwdNZngkUk","tlshash":"a02523e2efab60298f0c49e8707b9d0bdd450d1354c499beb955f84231d9fa082fb978","first_seen":"2026-03-02T13:32:51.638457Z","last_seen":"2026-03-02T13:32:51.638457Z","times_seen":1,"resource_available":false,"data":null}},"time_used":632,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":296,"receive":336,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"massdropmultisenders-app.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}}]}