{"report_id":"70eeda5d-90ed-4dee-8caa-f296e2ffad6b","version":0,"status":"done","tags":[],"date":"2026-08-17T20:21:58Z","url":{"schema":"http","addr":"evm.airdrop20.click/","fqdn":"evm.airdrop20.click","domain":"airdrop20.click","tld":"click"},"ip":{"addr":"172.67.164.64","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"evm.airdrop20.click/","fqdn":"evm.airdrop20.click","domain":"airdrop20.click","tld":"click"},"title":"ETH Airdrop Eligibility Check","dom":{"size":119646,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (12128)","md5":"088b589a0ee1f2ca918c733a6aabee0d","sha1":"36a36b377799092ce83f98c530a3febeda009d44","sha256":"5b71688fbd9bac4b2f79f415efb33c1ebe36a2b54d4694ae0eaa95607e39e28d","sha512":"94b46d896eced5978ab2f6a4fd03a25f09591dcab2327071aace1cd7c46888d96e96ca0db6fad2270c9ec508c6a359ca2d987328746357b3d3f23221746ce7bc","ssdeep":"768:d/x8YCDYz79ImI/B/yMlwEJdYbQ8F4+lsVWK1uu4Qow+fXoFoSJwQ6KG32xzxgXH:UDXyMlwWdYbQEOX+f4CiNc+I","tlshash":"d0c358e0b9f4241f9601170e870864d5ab57d08bab7e8004b9dc233a5f97d4beda367e","dom_hash":"domhashe042406b7efd42e519cc17cec0244611","first_seen":"2026-08-17T20:22:12.692287Z","last_seen":"2026-08-17T20:22:12.692287Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"evm.airdrop20.click/","fqdn":"evm.airdrop20.click","domain":"airdrop20.click","tld":"click"},"ip":{"addr":"172.67.164.64","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-09-21T20:21:58Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":4}},"detection":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-17","alert":"Phishing Block","trigger":"evm.airdrop20.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-17","alert":"Sinkholed","trigger":"evm.airdrop20.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-17","alert":"Sinkholed","trigger":"zen.claims","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-17","alert":"Sinkholed","trigger":"zen.claims","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"relay.walletconnect.org","ip":{"addr":"18.196.230.0","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"domain_registered":"2018-03-26","domain_rank":444044,"first_seen":"2021-02-22T09:38:04Z","last_seen":"2026-08-13T18:14:12.796464Z","alert_count":0,"request_count":1,"received_data":166,"sent_data":1114,"comment":"","tags":null,"fingerprints":[{"name":"WebSocket","description":"WebSocket is a communication protocol that provides full-duplex communication channels over a single, long-lived connection, enabling interactive communication between web browsers and servers.","website":"https://en.wikipedia.org/wiki/WebSocket","common_platform_enumeration":"","icon":"WebSocket.svg","categories":["Miscellaneous"]}]},{"fqdn":"explorer-api.walletconnect.com","ip":{"addr":"172.66.147.126","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-12-19","domain_rank":466611,"first_seen":"2022-10-10T18:16:28Z","last_seen":"2026-08-11T03:12:26.821657Z","alert_count":0,"request_count":7,"received_data":1204835,"sent_data":3962,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"esm.sh","ip":{"addr":"104.26.14.209","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2020-09-06","domain_rank":47501,"first_seen":"2020-09-23T23:39:41Z","last_seen":"2026-08-17T19:55:47.967943Z","alert_count":0,"request_count":14,"received_data":2203554,"sent_data":6944,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"usdpad.org","ip":{"addr":"104.21.94.115","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-03-19","domain_rank":0,"first_seen":"2026-08-14T05:04:43.967143Z","last_seen":"2026-08-14T05:04:43.967143Z","alert_count":0,"request_count":2,"received_data":55681,"sent_data":1213,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"evm.airdrop20.click","ip":{"addr":"104.21.91.8","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-08-17T20:22:05.821232Z","last_seen":"2026-08-17T20:22:05.821233Z","alert_count":26,"request_count":13,"received_data":1241865,"sent_data":7378,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"zen.claims","ip":{"addr":"172.67.218.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-07-05T10:30:02.141035Z","last_seen":"2026-08-14T05:04:45.945842Z","alert_count":8,"request_count":4,"received_data":2898,"sent_data":2228,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"w3connect.xyz","ip":{"addr":"104.21.87.205","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-08-12","domain_rank":0,"first_seen":"2026-08-14T17:21:52.302459Z","last_seen":"2026-08-14T17:21:52.302459Z","alert_count":0,"request_count":2,"received_data":49133,"sent_data":1222,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"bsc-dataseed2.bnbchain.org","ip":{"addr":"52.49.2.151","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"domain_registered":"2020-01-13","domain_rank":4924478,"first_seen":"2023-11-12T11:28:58Z","last_seen":"2026-08-13T18:14:11.71184Z","alert_count":0,"request_count":1,"received_data":458,"sent_data":564,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"evm.airdrop20.click/","fqdn":"evm.airdrop20.click","domain":"airdrop20.click","tld":"click"},"ip":{"addr":"104.21.91.8","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"98588bcc0a0cab5f42edf8240982adb1","sha1":"f3d3b68aaf236e42aa5a1a4894b8898fc4d6b7e1","sha256":"49180f34668c899b71c196ca46984099a60ae8ea9538484eb3b13ab90c577568","sha512":"8a546adb55090ca92f07b411b57d017e3cb7a621c31631ddc690442d66cc5ecf96c61d8cefff4e7bd68563a93cf7da02a734cd48d1b81ffff4c82f59570eddbf","ssdeep":"24576:/P2hH1DL9DifRQKuU2iv2qwiFx9pyOynMJRjtu61MgYHC66NqdHhQGVNaH6EDXCW:/v/pbyMJRxu61MgYi66sdHhQGVNaH6Ed","tlshash":"a765d84023d06c58234b9fb7772bb4e5e41f0a6f78980d8fd514bc616aaa617fbe4930","size":1528205,"data":"","first_seen":"2026-08-07T08:41:26.923461Z","last_seen":"2026-08-17T20:22:12.732079Z","times_seen":34,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"usdpad.org/assets/index-D8mxVEZq.js","fqdn":"usdpad.org","domain":"usdpad.org","tld":"org"},"ip":{"addr":"104.21.94.115","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"97daaa1e84932d550f25fa20204e7943","sha1":"bdc634dc614e3af6fa7148da0c69e252985bd26f","sha256":"6a32317de0da61843e5d5d09bebc01629d97fd0bb23cc828ebb424cbab66b06c","sha512":"c4785f200a7446a82cde1308fb0c8d64ed060cebb9f3bf2febec57de515eb107c5b990ea98bf69c03fec0008be63779f5b54ff782ef0f099905eb877cbce868a","ssdeep":"1536:HEmBTg94zYyMmj9RP7+a8FJ0n9z7SJJsHbR3yY:kmBTgQYleccAJWl3yY","tlshash":"7333e1f8713512690a981b7c3e8f45c97d6d1fd8a90c2a5ac133e0e8e7952ee0c97d26","size":53212,"data":"","first_seen":"2026-08-03T07:57:51.316518Z","last_seen":"2026-08-18T11:34:36.592321Z","times_seen":65,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"esm.sh/node/tty.mjs","fqdn":"esm.sh","domain":"esm.sh","tld":"sh"},"ip":{"addr":"104.26.14.209","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"dc159c105e1b73c18cfd63a84cc154ec","sha1":"347664300100736360aeda59495f5017a852a81f","sha256":"c66ff4b406bad449bfb2ced355f15badf16f4d9e035d2d300e33b5aeee64e3be","sha512":"96f99c368bef6857a0e9006efdc8ac0585af1bca468adb103b0c626ff5cada09eefeb07b317d6be3e71915f8c1a1412d4927fb743e4ed59e54c6e82af1b9d50a","ssdeep":"","tlshash":"cf01fef930f7b57246bb047444728a07f388e8f0b49ec4a0ba6599b43c655ced131676","size":685,"data":"","first_seen":"2025-10-29T19:17:04.320253Z","last_seen":"2026-08-23T02:38:08.843404Z","times_seen":734,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"evm.airdrop20.click/assets/f203210a29.js","fqdn":"evm.airdrop20.click","domain":"airdrop20.click","tld":"click"},"ip":{"addr":"104.21.91.8","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"50bd713cc197998b44d8832ee0dfb224","sha1":"ec392973d17ae59f349d45af0222add83b5ea3be","sha256":"7f214d16f1ae75fb825ec4aab7aa80d9f8636353bb8869ff55ebfcb7f309eb2d","sha512":"56ac91a69c152c9d69b61f8e1acaf4db38dbe970575f785aae9c7fe7dc1c947393de9aa7939806acdf61052b47077b1c4ff9bc3b9a96b9ad94a0ef76fe8b0f49","ssdeep":"","tlshash":"7721c0dbba52f4401785b7b6986f740d9767bd0adcda4428d40055c23dbeb2fd012558","size":1416,"data":"","first_seen":"2026-07-21T08:06:09.065367Z","last_seen":"2026-08-17T20:22:12.717365Z","times_seen":55,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"evm.airdrop20.click/","fqdn":"evm.airdrop20.click","domain":"airdrop20.click","tld":"click"},"ip":{"addr":"104.21.91.8","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"09c96f4e25616399974def53bdf14c95","sha1":"539ea88c33d6b2c9794d88b2725679ea55be9839","sha256":"a42070e168f5fd54758479e48a4035af68421e15adf638832f5aaf6c374a0dce","sha512":"21da0de8e126f2215e4adc37cd54653e240803f8819eb12a99e2a4ec896b92b37ac546e3299e011d4a933ff237d61933913e0d68d51f157c015cd030c602961b","ssdeep":"24576:jqYQVk57SN5/O6Fc/+aoml8CbFzgm+8K4fe6LK7U:jqYamYc/LL9R","tlshash":"a525f19d0c334269669846f87c5e0b883e585bdca498e73b9436e0b77bc12ff50d7862","size":1047799,"data":"","first_seen":"2026-08-07T08:41:26.920774Z","last_seen":"2026-08-17T20:22:12.733846Z","times_seen":32,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"w3connect.xyz/?host=https%3A%2F%2Fevm.airdrop20.click\u0026href=https%3A%2F%2Fevm.airdrop20.click%2F\u0026pid=9713e268acd3c6313b52e6ec7e4e5eea","fqdn":"w3connect.xyz","domain":"w3connect.xyz","tld":"xyz"},"ip":{"addr":"104.21.87.205","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"030125497fcc7b8de5dbaeada99c12ae","sha1":"1eeb65c627fb6f825d50b78ea53184a393e61b52","sha256":"2b7537ddbe256bd2b435101e4f8076f4cc225548342ae58a1b4861a6c494a7f2","sha512":"c9d8b59527527c6f24b931e622a756936e5b87021ba851b28c9833a51c6d8ba036f10b9c810cec75f1995dfc26aee4e47d0e5248ae340c4dc1e5daf722b30804","ssdeep":"","tlshash":"310128a54a9700b108f7dae63f5f3f12776201460084c5103ebde7aaaf23d5b84199c4","size":733,"data":"","first_seen":"2026-06-11T06:03:26.798628Z","last_seen":"2026-08-20T13:14:00.265345Z","times_seen":146,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"esm.sh/node/process.mjs","fqdn":"esm.sh","domain":"esm.sh","tld":"sh"},"ip":{"addr":"104.26.14.209","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"f8382a3858672b98c93fd61c13d21c2c","sha1":"07e4611887908eb9326935084618e4964fb84550","sha256":"79e7646e87709989f575ea4ce02e0877bc9303081567b1c0d412527917ae9e91","sha512":"a1609e8e33a2b7369169fe7dc1f9fd187c4b431e9c7428e4c3929587bff4701d937b8df219b3dfa2bdc3f6b38f63afecc0d9025a6ec8901d91a5e123179ca5cf","ssdeep":"192:kFmwaFSK/rVyQhxkSULErvtAAQic6NR03ao8Yk33q:5wzEr8irU8Yk3a","tlshash":"a2f1d7dce29a743302c1eadaf0bb0123eaf407c855245650ea0bdcc736219e5a5b1f75","size":7861,"data":"","first_seen":"2025-10-29T19:17:04.329787Z","last_seen":"2026-08-23T02:38:08.849261Z","times_seen":741,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"esm.sh/node/buffer.mjs","fqdn":"esm.sh","domain":"esm.sh","tld":"sh"},"ip":{"addr":"104.26.14.209","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"39e6418dc1a8a38a7baf7cbf64e6bc9b","sha1":"036b9f42abe9026454886016987cdd479ce3f33c","sha256":"64fb61aa5f48644d685f9ceabedba60ea6b5d6ce03dac1943e863d00d9e574f3","sha512":"de01074341e2a0ad5d0b74108a593811ef91c72bd775fc2ab20f98c941fc4635f541fd7983f08cd93700d7f6f582c55b95fdfaed785258eef4f0b55322df151c","ssdeep":"384:f2ROO9YwKOX7MW/I55zmhYuC2rUV5w+c7LW+M444MMazyXDNcyO9+C9YDNqWRMzI:fKewKOX7MWwGzCrfTc7LW+bcp9a60","tlshash":"d3d2b694f795b032439e65a50057980ef2b8f928640d198cf6a0f5f728b59ce88eff74","size":28845,"data":"","first_seen":"2025-10-30T08:47:32.392454Z","last_seen":"2026-08-22T22:06:29.903138Z","times_seen":583,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"usdpad.org/?host=https%3A%2F%2Fevm.airdrop20.click\u0026href=https%3A%2F%2Fevm.airdrop20.click%2F\u0026pid=9713e268acd3c6313b52e6ec7e4e5eea","fqdn":"usdpad.org","domain":"usdpad.org","tld":"org"},"ip":{"addr":"104.21.94.115","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"3ffcd3e72fcdcbfa369710c76093a6a6","sha1":"0220e754f30a38180d54657de73363b3a171b15a","sha256":"801615dbbffee8d6fdae0aaba8f523070fff04e5e7335983e6e4bdc2d6f036f0","sha512":"60ff30c7fab96f7f4e19987272676b3afd57cff784e083894ee0cff3737d3fe659e0f70b8fe9053f273c7979c9a77abb85cafed7832544dc780dc7bf10abaae1","ssdeep":"768:BX1ZofmBqey701VNq2Ebdk6tLbJ4hUAyIEQwyygMiE1aUiDEtdFRZOCMb5idyYts:BFZxBqkkxbpV33Ysm31zafFYR","tlshash":"cf53635272d07c70234f9fbba71bf0e4d91a1a9eb9944ccfd115bc60a2e6316e9e05b0","size":65850,"data":"","first_seen":"2026-08-03T07:57:51.338793Z","last_seen":"2026-08-18T11:34:36.612714Z","times_seen":65,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"esm.sh/@walletconnect/ethereum-provider@2.21.8?bundle-deps\u0026target=es2022","fqdn":"esm.sh","domain":"esm.sh","tld":"sh"},"ip":{"addr":"104.26.14.209","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"7ca4c1770e526303c8b96ec681271e67","sha1":"040ceca3f1799eb067ee3e0c5c3f97e8d48e8492","sha256":"9b69c924617de012e3a6252d715e48202d0bd07eccae08190bc9d0565405d1dd","sha512":"0180a2c052ce5feedb836fc6a1e5d82f2edaa25574f0951b679029a28ca6c0e4098c0fde61858a88c4dc4fb2ee2ac196f3f681864fab71b3d205a0baf010c4f3","ssdeep":"","tlshash":"13e0867181174b8423b80da5ad81af3bebab1758a945215c334ec633f517654c9441f7","size":335,"data":"","first_seen":"2026-08-03T07:57:51.315431Z","last_seen":"2026-08-20T13:42:04.124354Z","times_seen":106,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"evm.airdrop20.click/","fqdn":"evm.airdrop20.click","domain":"airdrop20.click","tld":"click"},"ip":{"addr":"104.21.91.8","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"aa9da76022e04d2c09554f74eab84c1a","sha1":"a303f61fec4267e962e4fe80aa45fccac4fef96d","sha256":"ba4d84b9740fb18559829797e46f737c4379392dc28c7750359e15b4a78ccb65","sha512":"871eb5a6d1a600afdc4ba808ba6a8be105acfd85b6e6fcae84e44287d69ec691c501241d43caee508085186d8dba8efbdf44ceeef5359299b2517fc6ded48c84","ssdeep":"192:aAH1j/b9LAzkC+WYFNxR9ImI/ByP0yjYz/twEPEsiiq/Ejv45bbQd8ZF4+lV1YfN:t/b98YC+WYz79ImI/B/yM/twEPRdYbQ1","tlshash":"c9324148a581688c07d7ae2f7b9671d9e1ef08d5296598c2d301bcc8f4a2a33e551bf3","size":11708,"data":"","first_seen":"2026-07-31T21:22:47.129442Z","last_seen":"2026-08-17T20:22:12.739032Z","times_seen":77,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"evm.airdrop20.click/evm/evmairdrop/js/app.js","fqdn":"evm.airdrop20.click","domain":"airdrop20.click","tld":"click"},"ip":{"addr":"104.21.91.8","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"0a803d00ecbb43bfd2d1a44fcea14aee","sha1":"66dfeb6260dc01367b13b77ba251368a48a2840d","sha256":"2837225aea99a89b881a6549c1954f1b59d90ff87b638974411de7e20ea7e658","sha512":"3939d32adbf71a8c339b8f1738b4a77a0652029c630e057aac1d599e2dc948b5854d44a171eb0cff162268d911b08d768a6afe82af5d70c8d8c4b7bccea8c9d1","ssdeep":"768:WXYaasHF6K1D9gbO03LZb0sqvGqLjgbKLz:WX/68ybOgt9qbjNn","tlshash":"d203c72d7ae31126a233357a8b9f91a83934a403540dd9253eecd7805fe09255ebbfdc","size":40681,"data":"","first_seen":"2026-07-21T08:06:09.067093Z","last_seen":"2026-08-17T20:22:12.729103Z","times_seen":55,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"evm.airdrop20.click/","fqdn":"evm.airdrop20.click","domain":"airdrop20.click","tld":"click"},"ip":{"addr":"104.21.91.8","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"bcb50a7bb5a96aab9a94a8e13c7b00f7","sha1":"5a58cab53970a5e0890f54d8966b83cfa2c4fbe5","sha256":"abfc737501a85a939161a0348d0d41731709aaa95ec0190b33f96bede6e548de","sha512":"229f8488ab7361e95f231957a9294e5777aa740b7571753435151ceffb6efd2575984d8797f57482912ec213bc840081f3ddda53546872a3382094c3d2f0ae02","ssdeep":"192:yN92QGECEkG1pIvp/1y3nMi0E/7epgArmoLx7IispT:y72ku/1y3nn0YeFrm85spT","tlshash":"04f1052735d7b04e01da4b7e365967e9909ad50ada0ac40af348eef874dd8a77d0c2f0","size":8000,"data":"","first_seen":"2026-08-17T20:22:12.740146Z","last_seen":"2026-08-17T20:22:12.740146Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"w3connect.xyz/assets/index-ydvr3Ite.js","fqdn":"w3connect.xyz","domain":"w3connect.xyz","tld":"xyz"},"ip":{"addr":"104.21.87.205","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"69a121c7a09ba943b5a1986d895e39d5","sha1":"c6f1554cebb57962660acad7e682975254b7e3ac","sha256":"188a8559f685c8b370632b34a2f4277803e983889f617e1aae37b4fae6056047","sha512":"438ddb8c5a832402c8f65bce08d7c420e49658383813d0e949c0e451f0038f2d730a64a8d61b28a71fc6dabc776ad2c9c30b9396ff8d8cd2e6a1a18694d4a3bf","ssdeep":"768:FEmJF1MGcHXrir2SJTGcclC8HkKmCJMoDjDXtN/YhX2pr5VicJZZiDmNz:FEmxMGgkUc2CpOJNrtpMXeraeGq","tlshash":"1723d1ac5823920c05da477c1d5f1ec4acbd4fe8998d179bd42b90f4b7e284a44dfda8","size":46666,"data":"","first_seen":"2026-08-07T08:41:26.855141Z","last_seen":"2026-08-18T18:59:49.36952Z","times_seen":38,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"esm.sh/node/events.mjs","fqdn":"esm.sh","domain":"esm.sh","tld":"sh"},"ip":{"addr":"104.26.14.209","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"acd05dc333042e32473eb39c7700cc9b","sha1":"a9ff738706c3e6ab2be579d296faecd67e438f47","sha256":"4c6150b88c1444aa1fe9331013e3f37eda9836206f629f7f3ae8f3743dd90fa8","sha512":"658a1eebb2727249df13bfd7f76d1bd38921ebc2dff63b8c1bf779973bd10483b7138649e7168a1ea7305c88542876be92a52b1da915331806436b0455f9a6a5","ssdeep":"96:yIJAOQoXa9RQ9bKVXQ6Z9cBBEMPg19H+MyLfLYCGZjiSl1YYS/07jfofxSXR261G:yyiZInEGaGLYCKt70WRRD7EE00WZ","tlshash":"404286ccb386b87113def3af707b4146f23459e0685c0408ba75fcf6292a98995a6f71","size":12122,"data":"","first_seen":"2025-10-29T19:17:04.387887Z","last_seen":"2026-08-23T02:38:08.815258Z","times_seen":741,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"esm.sh/node/async_hooks.mjs","fqdn":"esm.sh","domain":"esm.sh","tld":"sh"},"ip":{"addr":"104.26.14.209","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"f78e3393d375d2bd75ee22e5bf0f3635","sha1":"2b6d82e3a17d6f4596fb2f6df083fcf498edaa99","sha256":"b7862dbfba8bbbca956f19e4e08280b529e4b27468779775a9093aef8c92dc1d","sha512":"280686efdbef542165cff092b795274efb660689426f8f15523b3478d967cc6bea03a0d7a66400552278a777655231d7e9ad2cba1bb4eb0a45f249e76102258d","ssdeep":"","tlshash":"3b515489a78bf9685b9eb176413a0103e10a0ec89d1c722cf049e9ee695e10c8774fb5","size":2938,"data":"","first_seen":"2025-10-29T19:17:04.32262Z","last_seen":"2026-08-23T02:38:08.822789Z","times_seen":739,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"usdpad.org/?host=https%3A%2F%2Fevm.airdrop20.click\u0026href=https%3A%2F%2Fevm.airdrop20.click%2F\u0026pid=9713e268acd3c6313b52e6ec7e4e5eea","fqdn":"usdpad.org","domain":"usdpad.org","tld":"org"},"ip":{"addr":"104.21.94.115","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"030125497fcc7b8de5dbaeada99c12ae","sha1":"1eeb65c627fb6f825d50b78ea53184a393e61b52","sha256":"2b7537ddbe256bd2b435101e4f8076f4cc225548342ae58a1b4861a6c494a7f2","sha512":"c9d8b59527527c6f24b931e622a756936e5b87021ba851b28c9833a51c6d8ba036f10b9c810cec75f1995dfc26aee4e47d0e5248ae340c4dc1e5daf722b30804","ssdeep":"","tlshash":"310128a54a9700b108f7dae63f5f3f12776201460084c5103ebde7aaaf23d5b84199c4","size":733,"data":"","first_seen":"2026-06-11T06:03:26.798628Z","last_seen":"2026-08-20T13:14:00.265345Z","times_seen":146,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"w3connect.xyz/?host=https%3A%2F%2Fevm.airdrop20.click\u0026href=https%3A%2F%2Fevm.airdrop20.click%2F\u0026pid=9713e268acd3c6313b52e6ec7e4e5eea","fqdn":"w3connect.xyz","domain":"w3connect.xyz","tld":"xyz"},"ip":{"addr":"104.21.87.205","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"0b255518ba5a353033a9530c016e6806","sha1":"bcd20754a7a5d6aafabd86a945aaefca9261d362","sha256":"9892ca840b0515a934cfa941dbd9958d902b8b4c50bf5e63a6073b25df587812","sha512":"7b6089282406f4370ddb9e4a727eb27a6fa7ce8afc36a163706c0a805f4670997de0e088629d482642d53eac50c966197cd4f386c2177b9b47324fcc45b5d95f","ssdeep":"768:01d2sLfTiPurQC47583BL6kHOPqnlHRhVRa1yKDQgkEWKfvG9TClDdHdRYCmLk+A:ad2WfTh4ZHf3keW8ofSHw2","tlshash":"dc4392d263d06914234faebb732fb9e5e92f199f3450488fc214fd50a6a5716eaf0630","size":56403,"data":"","first_seen":"2026-08-07T08:41:26.927185Z","last_seen":"2026-08-18T18:59:49.378086Z","times_seen":38,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"esm.sh/@walletconnect/ethereum-provider@2.21.8/es2022/ethereum-provider.bundle.mjs","fqdn":"esm.sh","domain":"esm.sh","tld":"sh"},"ip":{"addr":"104.26.14.209","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"362ca438ae65cfc912b7a743a781ce7b","sha1":"8bd96bb53323eab2db38be0eb2b408ddf2b95b17","sha256":"06449c96378758359a50cc186e8017a20143e74a7dc5b57efaef3ea2c88f5017","sha512":"0ae63ee9d428f583c852ea0456d74d0a9cc5ce6341734c041ee00d5236c364738ca7fe0397c3e3818a86875cd48a7eba3419174a679258ba4bc4ab3f3ac97f04","ssdeep":"24576:fpISZZVokQyZ74ejf2kwwwCbUef690riXt2s0Fj6+6:RISZyyZ74ejf2kwwwCbpf690riXt70FY","tlshash":"9c256c907361b47a539b82a898ab0500f3395859500d802cfbecd9ebef949d9c5bff71","size":1046087,"data":"","first_seen":"2026-08-03T07:57:51.324381Z","last_seen":"2026-08-20T13:42:04.125651Z","times_seen":105,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"warn","text":"WalletConnect Core is already initialized. This is probably a mistake and can lead to unexpected behavior. Init() was called 2 times.","filename":"https://esm.sh/@walletconnect/ethereum-provider@2.21.8/es2022/ethereum-provider.bundle.mjs","line_number":35,"column_number":141549}]},"http":[{"url":{"schema":"https","addr":"explorer-api.walletconnect.com/v3/wallets?projectId=9713e268acd3c6313b52e6ec7e4e5eea\u0026page=2\u0026entries=100","fqdn":"explorer-api.walletconnect.com","domain":"walletconnect.com","tld":"com"},"ip":{"addr":"172.66.147.126","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://evm.airdrop20.click/","date":"2026-08-17T20:21:31.897Z","timestamp":1786998091897,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"walletconnect.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 02 Aug 2026 09:21:35 GMT","end":"Sat, 31 Oct 2026 10:21:32 GMT"},"fingerprint":{"sha1":"2F:0B:9E:A7:63:A8:B6:83:0D:80:12:48:90:19:5E:70:3C:BA:E7:2B","sha256":"68:DA:70:B8:9C:22:69:29:9F:DD:81:28:74:BC:A9:6B:38:7E:E4:A0:54:C5:B2:2D:36:F8:A2:81:FF:3F:4B:51"}}},"request":{"raw":"GET /v3/wallets?projectId=9713e268acd3c6313b52e6ec7e4e5eea\u0026page=2\u0026entries=100 HTTP/1.1\r\nHost: explorer-api.walletconnect.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://evm.airdrop20.click/\r\nOrigin: https://evm.airdrop20.click\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Mon, 17 Aug 2026 20:21:31 GMT\r\ncontent-type: application/json; charset=utf-8\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, s-maxage=86400\r\nx-robots-tag: noindex\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: a2cb62ba5a3b5689-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":179533,"size_decoded":28352,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"4c7ab9eacee60f84e49ca1d14c27ebed","sha1":"34fca5bc4ca3411dd8869425b888363a4811c2b1","sha256":"179a47f818f3d3e10b9aeb45d50df2a3e91e65c24be83bdec4fbdd91ee4cdb5b","sha512":"fc50fa3cb5dc57871f508a03c8f87cce29d34f9f4efddec33bb183fecc1e261872f4718aab6e067a74d2e03f16df0818fcb9a85b94233d6ba9a8fab800beab18","ssdeep":"1536:ftDCyTgVttL80GwZ58iOFVqRFP935Gx/Ru49Qn8Lt:f8Vv8wZ5nOFC935Gxu85","tlshash":"4b04426e4b049e666fb15388d14cf9eca15ee117c9cd9ca2e2f1cf3440bc9f7215229a","first_seen":"2026-08-17T20:22:12.695831Z","last_seen":"2026-08-17T20:22:12.695831Z","times_seen":1,"resource_available":false,"data":null}},"time_used":42,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":41,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"usdpad.org/assets/index-D8mxVEZq.js","fqdn":"usdpad.org","domain":"usdpad.org","tld":"org"},"ip":{"addr":"104.21.94.115","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://usdpad.org/?host=https%3A%2F%2Fevm.airdrop20.click\u0026href=https%3A%2F%2Fevm.airdrop20.click%2F\u0026pid=9713e268acd3c6313b52e6ec7e4e5eea","date":"2026-08-17T20:21:32.123Z","timestamp":1786998092123,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdpad.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 08 Aug 2026 18:01:12 GMT","end":"Fri, 06 Nov 2026 18:58:48 GMT"},"fingerprint":{"sha1":"A4:4C:02:AF:A8:25:ED:C0:DC:73:93:B4:28:EE:CD:FF:D8:34:7B:F7","sha256":"5A:D9:37:0B:D2:CC:EE:37:27:09:8C:56:B2:09:68:64:98:EA:7F:10:42:B5:1C:5E:83:6C:B8:91:D1:F8:76:9C"}}},"request":{"raw":"GET /assets/index-D8mxVEZq.js HTTP/1.1\r\nHost: usdpad.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://usdpad.org/?host=https%3A%2F%2Fevm.airdrop20.click\u0026href=https%3A%2F%2Fevm.airdrop20.click%2F\u0026pid=9713e268acd3c6313b52e6ec7e4e5eea\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 17 Aug 2026 20:21:32 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 11 Aug 2026 09:41:19 GMT\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\netag: W/\"6a7aee3f-cfdc\"\r\nexpires: Tue, 18 Aug 2026 20:21:32 GMT\r\ncache-control: max-age=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4XMqrNW%2Blc%2FVo7Bn%2BRvGrz0LHNtBOzIOUGYeTOOINtqaywb4uLHhEg54ugm7fxY7P649n4I7ckFfs95hsDZVmNMoZ0so%2F4O5V1HOmnbjyLNS5ti7%2FRe%2FSXHigmiC\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2cb62bbcfcb56a5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":53212,"size_decoded":40320,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (11913), with NEL line terminators","md5":"97daaa1e84932d550f25fa20204e7943","sha1":"bdc634dc614e3af6fa7148da0c69e252985bd26f","sha256":"6a32317de0da61843e5d5d09bebc01629d97fd0bb23cc828ebb424cbab66b06c","sha512":"c4785f200a7446a82cde1308fb0c8d64ed060cebb9f3bf2febec57de515eb107c5b990ea98bf69c03fec0008be63779f5b54ff782ef0f099905eb877cbce868a","ssdeep":"1536:HEmBTg94zYyMmj9RP7+a8FJ0n9z7SJJsHbR3yY:kmBTgQYleccAJWl3yY","tlshash":"7333e1f8713512690a981b7c3e8f45c97d6d1fd8a90c2a5ac133e0e8e7952ee0c97d26","first_seen":"2026-08-03T07:57:51.316518Z","last_seen":"2026-08-18T11:34:36.592321Z","times_seen":65,"resource_available":true,"data":null}},"time_used":239,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":235,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"explorer-api.walletconnect.com/v3/wallets?projectId=9713e268acd3c6313b52e6ec7e4e5eea\u0026page=5\u0026entries=100","fqdn":"explorer-api.walletconnect.com","domain":"walletconnect.com","tld":"com"},"ip":{"addr":"172.66.147.126","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://evm.airdrop20.click/","date":"2026-08-17T20:21:32.149Z","timestamp":1786998092149,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"walletconnect.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 02 Aug 2026 09:21:35 GMT","end":"Sat, 31 Oct 2026 10:21:32 GMT"},"fingerprint":{"sha1":"2F:0B:9E:A7:63:A8:B6:83:0D:80:12:48:90:19:5E:70:3C:BA:E7:2B","sha256":"68:DA:70:B8:9C:22:69:29:9F:DD:81:28:74:BC:A9:6B:38:7E:E4:A0:54:C5:B2:2D:36:F8:A2:81:FF:3F:4B:51"}}},"request":{"raw":"GET /v3/wallets?projectId=9713e268acd3c6313b52e6ec7e4e5eea\u0026page=5\u0026entries=100 HTTP/1.1\r\nHost: explorer-api.walletconnect.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://evm.airdrop20.click/\r\nOrigin: https://evm.airdrop20.click\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 17 Aug 2026 20:21:32 GMT\r\npriority: u=4,i=?0\r\ncontent-type: application/json; charset=utf-8\r\nserver: cloudflare\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, s-maxage=86400\r\nx-robots-tag: noindex\r\ncontent-encoding: br\r\ncf-ray: a2cb62bbe98ab4f3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":221580,"size_decoded":30874,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"4d9d4dad153a80f0a083d654f859ab3f","sha1":"710c17b6c4d35a4c74112b0f929369b67e20441c","sha256":"f2eb3439bd78ea4b9cb38b9535823d4f3f182c48a66cf9673e7e7da322826997","sha512":"27c412416fdcb931f6fbe405c2795b108ab284d49aeadb06537617e3a4928a9b86af131dbf8a131f8534cf586e6d30f73de37f19d46b69a88dc7947313e63762","ssdeep":"768:5yS6UxtNRUORhhlduBNJD7O8VkyYPzS4WoQmWo0xNWo5/AgAvzS4NomTTzWH5YHa:5p0VkyJiTvguaT7sXFQGL2zSCEty","tlshash":"d924546e8b409e566fb15388d25cf9eda16fe103c9ce5ca2e2f18f3444bc5b3215129e","first_seen":"2026-08-13T18:14:19.825965Z","last_seen":"2026-08-17T20:22:12.697934Z","times_seen":12,"resource_available":false,"data":null}},"time_used":88,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":79,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"esm.sh/node/buffer.mjs","fqdn":"esm.sh","domain":"esm.sh","tld":"sh"},"ip":{"addr":"104.26.14.209","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://w3connect.xyz/?host=https%3A%2F%2Fevm.airdrop20.click\u0026href=https%3A%2F%2Fevm.airdrop20.click%2F\u0026pid=9713e268acd3c6313b52e6ec7e4e5eea","date":"2026-08-17T20:21:32.316Z","timestamp":1786998092316,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"esm.sh","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 21 Jun 2026 04:25:37 GMT","end":"Sat, 19 Sep 2026 05:25:34 GMT"},"fingerprint":{"sha1":"06:01:9A:2D:10:55:51:3D:71:BF:F8:20:33:F8:71:A5:9E:90:2A:AB","sha256":"1B:0D:06:A9:0C:41:8A:5B:EE:63:99:62:63:72:3A:1C:48:69:DD:7C:A6:61:EB:03:67:80:79:9E:62:BA:EA:CC"}}},"request":{"raw":"GET /node/buffer.mjs HTTP/1.1\r\nHost: esm.sh\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://w3connect.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://esm.sh/@walletconnect/ethereum-provider@2.21.8?bundle-deps\u0026target=es2022\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=86400\r\npriority: u=3,i=?0\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\netag: W/\"v137_8\"\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\ndate: Mon, 17 Aug 2026 20:21:32 GMT\r\ncf-cache-status: HIT\r\nage: 15468\r\ncf-ray: a2cb62bcfd40712e-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":28845,"size_decoded":10674,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (28468)","md5":"39e6418dc1a8a38a7baf7cbf64e6bc9b","sha1":"036b9f42abe9026454886016987cdd479ce3f33c","sha256":"64fb61aa5f48644d685f9ceabedba60ea6b5d6ce03dac1943e863d00d9e574f3","sha512":"de01074341e2a0ad5d0b74108a593811ef91c72bd775fc2ab20f98c941fc4635f541fd7983f08cd93700d7f6f582c55b95fdfaed785258eef4f0b55322df151c","ssdeep":"384:f2ROO9YwKOX7MW/I55zmhYuC2rUV5w+c7LW+M444MMazyXDNcyO9+C9YDNqWRMzI:fKewKOX7MWwGzCrfTc7LW+bcp9a60","tlshash":"d3d2b694f795b032439e65a50057980ef2b8f928640d198cf6a0f5f728b59ce88eff74","first_seen":"2025-10-30T08:47:32.392454Z","last_seen":"2026-08-22T22:06:29.903138Z","times_seen":583,"resource_available":true,"data":null}},"time_used":61,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":41,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"esm.sh/node/tty.mjs","fqdn":"esm.sh","domain":"esm.sh","tld":"sh"},"ip":{"addr":"104.26.14.209","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://w3connect.xyz/?host=https%3A%2F%2Fevm.airdrop20.click\u0026href=https%3A%2F%2Fevm.airdrop20.click%2F\u0026pid=9713e268acd3c6313b52e6ec7e4e5eea","date":"2026-08-17T20:21:32.365Z","timestamp":1786998092365,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"esm.sh","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 21 Jun 2026 04:25:37 GMT","end":"Sat, 19 Sep 2026 05:25:34 GMT"},"fingerprint":{"sha1":"06:01:9A:2D:10:55:51:3D:71:BF:F8:20:33:F8:71:A5:9E:90:2A:AB","sha256":"1B:0D:06:A9:0C:41:8A:5B:EE:63:99:62:63:72:3A:1C:48:69:DD:7C:A6:61:EB:03:67:80:79:9E:62:BA:EA:CC"}}},"request":{"raw":"GET /node/tty.mjs HTTP/1.1\r\nHost: esm.sh\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://w3connect.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://esm.sh/node/process.mjs\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=86400\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\ncontent-type: application/javascript; charset=utf-8\r\netag: W/\"v137_8\"\r\nserver: cloudflare\r\ndate: Mon, 17 Aug 2026 20:21:32 GMT\r\ncontent-encoding: br\r\nage: 15468\r\ncf-ray: a2cb62bd4d49712e-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":685,"size_decoded":712,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (684)","md5":"dc159c105e1b73c18cfd63a84cc154ec","sha1":"347664300100736360aeda59495f5017a852a81f","sha256":"c66ff4b406bad449bfb2ced355f15badf16f4d9e035d2d300e33b5aeee64e3be","sha512":"96f99c368bef6857a0e9006efdc8ac0585af1bca468adb103b0c626ff5cada09eefeb07b317d6be3e71915f8c1a1412d4927fb743e4ed59e54c6e82af1b9d50a","ssdeep":"","tlshash":"cf01fef930f7b57246bb047444728a07f388e8f0b49ec4a0ba6599b43c655ced131676","first_seen":"2025-10-29T19:17:04.320253Z","last_seen":"2026-08-23T02:38:08.843404Z","times_seen":734,"resource_available":true,"data":null}},"time_used":54,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":41,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"esm.sh/node/process.mjs","fqdn":"esm.sh","domain":"esm.sh","tld":"sh"},"ip":{"addr":"104.26.14.209","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://usdpad.org/?host=https%3A%2F%2Fevm.airdrop20.click\u0026href=https%3A%2F%2Fevm.airdrop20.click%2F\u0026pid=9713e268acd3c6313b52e6ec7e4e5eea","date":"2026-08-17T20:21:32.428Z","timestamp":1786998092428,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"esm.sh","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 21 Jun 2026 04:25:37 GMT","end":"Sat, 19 Sep 2026 05:25:34 GMT"},"fingerprint":{"sha1":"06:01:9A:2D:10:55:51:3D:71:BF:F8:20:33:F8:71:A5:9E:90:2A:AB","sha256":"1B:0D:06:A9:0C:41:8A:5B:EE:63:99:62:63:72:3A:1C:48:69:DD:7C:A6:61:EB:03:67:80:79:9E:62:BA:EA:CC"}}},"request":{"raw":"GET /node/process.mjs HTTP/1.1\r\nHost: esm.sh\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://usdpad.org\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://esm.sh/@walletconnect/ethereum-provider@2.21.8?bundle-deps\u0026target=es2022\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=86400\r\npriority: u=3,i=?0\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\netag: W/\"v137_8\"\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\ndate: Mon, 17 Aug 2026 20:21:32 GMT\r\ncf-cache-status: HIT\r\nage: 36141\r\ncf-ray: a2cb62bdad51712e-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7861,"size_decoded":3892,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (7860)","md5":"f8382a3858672b98c93fd61c13d21c2c","sha1":"07e4611887908eb9326935084618e4964fb84550","sha256":"79e7646e87709989f575ea4ce02e0877bc9303081567b1c0d412527917ae9e91","sha512":"a1609e8e33a2b7369169fe7dc1f9fd187c4b431e9c7428e4c3929587bff4701d937b8df219b3dfa2bdc3f6b38f63afecc0d9025a6ec8901d91a5e123179ca5cf","ssdeep":"192:kFmwaFSK/rVyQhxkSULErvtAAQic6NR03ao8Yk33q:5wzEr8irU8Yk3a","tlshash":"a2f1d7dce29a743302c1eadaf0bb0123eaf407c855245650ea0bdcc736219e5a5b1f75","first_seen":"2025-10-29T19:17:04.329787Z","last_seen":"2026-08-23T02:38:08.849261Z","times_seen":741,"resource_available":true,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"evm.airdrop20.click/favicon.ico","fqdn":"evm.airdrop20.click","domain":"airdrop20.click","tld":"click"},"ip":{"addr":"104.21.91.8","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://evm.airdrop20.click/","date":"2026-08-17T20:21:22.249Z","timestamp":1786998082249,"http_version":"HTTP/3","security_state":"secure","security_info":null,"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: evm.airdrop20.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://evm.airdrop20.click/\r\nCookie: ch=1786998081; id=274lp43n; chid=274lp43n\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-23T14:26:48.814208Z","times_seen":18056444,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-17","alert":"Phishing Block","trigger":"evm.airdrop20.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-17","alert":"Sinkholed","trigger":"evm.airdrop20.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usdpad.org/?host=https%3A%2F%2Fevm.airdrop20.click\u0026href=https%3A%2F%2Fevm.airdrop20.click%2F\u0026pid=9713e268acd3c6313b52e6ec7e4e5eea","fqdn":"usdpad.org","domain":"usdpad.org","tld":"org"},"ip":{"addr":"104.21.94.115","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://evm.airdrop20.click/","date":"2026-08-17T20:21:31.722Z","timestamp":1786998091722,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdpad.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 08 Aug 2026 18:01:12 GMT","end":"Fri, 06 Nov 2026 18:58:48 GMT"},"fingerprint":{"sha1":"A4:4C:02:AF:A8:25:ED:C0:DC:73:93:B4:28:EE:CD:FF:D8:34:7B:F7","sha256":"5A:D9:37:0B:D2:CC:EE:37:27:09:8C:56:B2:09:68:64:98:EA:7F:10:42:B5:1C:5E:83:6C:B8:91:D1:F8:76:9C"}}},"request":{"raw":"GET /?host=https%3A%2F%2Fevm.airdrop20.click\u0026href=https%3A%2F%2Fevm.airdrop20.click%2F\u0026pid=9713e268acd3c6313b52e6ec7e4e5eea HTTP/1.1\r\nHost: usdpad.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://evm.airdrop20.click/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 17 Aug 2026 20:21:32 GMT\r\ncontent-type: text/html\r\nlast-modified: Tue, 11 Aug 2026 09:41:19 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PMYYYMgG%2FcKSB9XfS%2BrnBkUKfnug%2BuVuVHGygBEIH5zP5h9YSURV04t49hk2lvMWchN%2FoBgFR7CC9OWHo33LfVZ4GoEKMEXo7yCXLtqjwn7sEEaXG6751yw%2Fzb28\"}]}\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: zstd\r\ncf-ray: a2cb62ba0fb456a5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1086,"size_decoded":1158,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"eafb32d221ff3f5c2132f50c936e6c84","sha1":"8f0d9a2e86c31099f845b88ee5c4e922dae55cba","sha256":"0bca7bb4a4fdff7194b9933a1a5a288fbf7d6062034a8106d974ac3df4eec827","sha512":"50e01ca8de98153c6ea81cf62df32654f631baefc3a77fded7e1a51fe7221499ee7469402d7553298aabbca4d4e03f58961b8ddcdbf84402b4e8eebc32d8c81c","ssdeep":"","tlshash":"01118e450d56407115b38a963b5f7f05a666924640c4c5002ffae2b7af53e4b8809ad8","first_seen":"2026-08-03T07:57:51.32157Z","last_seen":"2026-08-18T11:34:36.608892Z","times_seen":65,"resource_available":false,"data":null}},"time_used":345,"timings":{"blocked":-1,"dns":105,"connect":17,"send":0,"wait":222,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zen.claims/api/fp","fqdn":"zen.claims","domain":"zen.claims","tld":"claims"},"ip":{"addr":"172.67.218.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://evm.airdrop20.click/","date":"2026-08-17T20:21:31.905Z","timestamp":1786998091905,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zen.claims","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 14:24:48 GMT","end":"Sat, 26 Sep 2026 15:22:24 GMT"},"fingerprint":{"sha1":"E7:4D:AD:22:67:E0:E5:88:2C:ED:21:6C:9F:E4:D8:73:CB:3D:47:C8","sha256":"48:14:21:57:B6:65:54:B2:E8:E5:66:2C:C9:F1:89:85:5D:7E:1D:56:22:3B:5F:85:A2:25:D8:63:E1:D8:0E:86"}}},"request":{"raw":"POST /api/fp HTTP/1.1\r\nHost: zen.claims\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://evm.airdrop20.click/\r\nContent-Type: text/plain\r\nX-Worker-Hint: ff63406db742b798dead90f57febe2c3\r\nContent-Length: 1316\r\nOrigin: https://evm.airdrop20.click\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":1316,"data":"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"}},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 17 Aug 2026 20:21:35 GMT\r\ncontent-type: application/json; charset=utf-8\r\npriority: u=4,i=?0\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: *\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Rqiz1KyRdjnIsyUjtEQlajKDVu5ijZ%2BfJvocD9MwWYoBAdX72Ye4KmuDjf7%2Baeooj7inE4vDS61V9NaRMuAZcofX%2BvWZL%2B9LzprYYxJn3gQrh5zN9ShluvDK94fX\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: zstd\r\ncf-ray: a2cb62bafeaedfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":270,"size_decoded":963,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"1159dcfa1190fc49914474cfe3e78dea","sha1":"ed0172ffe3448f2d3fb9d424fe8cd41e1c310199","sha256":"2ba18183c21175c85b850b67752592bdfb0b79bfa66837b548329ef396472b0e","sha512":"a7c090db1aff15a419ea901a4db8813edb2a18d8abbc5011bc496e95d3ad6a8e8a6ce1d16f2819f577813dadf19198fe9b38118747d355342f2754ebc526ea44","ssdeep":"","tlshash":"f8d0eb0031916411288237f00012b43300aee65254de628c560a5206d4d28482c2fae2","first_seen":"2026-08-17T20:22:12.705638Z","last_seen":"2026-08-17T20:22:12.705638Z","times_seen":1,"resource_available":false,"data":null}},"time_used":3999,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3999,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-17","alert":"Sinkholed","trigger":"zen.claims","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-17","alert":"Sinkholed","trigger":"zen.claims","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"explorer-api.walletconnect.com/v3/wallets?projectId=9713e268acd3c6313b52e6ec7e4e5eea\u0026page=3\u0026entries=100","fqdn":"explorer-api.walletconnect.com","domain":"walletconnect.com","tld":"com"},"ip":{"addr":"172.66.147.126","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://evm.airdrop20.click/","date":"2026-08-17T20:21:31.954Z","timestamp":1786998091954,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"walletconnect.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 02 Aug 2026 09:21:35 GMT","end":"Sat, 31 Oct 2026 10:21:32 GMT"},"fingerprint":{"sha1":"2F:0B:9E:A7:63:A8:B6:83:0D:80:12:48:90:19:5E:70:3C:BA:E7:2B","sha256":"68:DA:70:B8:9C:22:69:29:9F:DD:81:28:74:BC:A9:6B:38:7E:E4:A0:54:C5:B2:2D:36:F8:A2:81:FF:3F:4B:51"}}},"request":{"raw":"GET /v3/wallets?projectId=9713e268acd3c6313b52e6ec7e4e5eea\u0026page=3\u0026entries=100 HTTP/1.1\r\nHost: explorer-api.walletconnect.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://evm.airdrop20.click/\r\nOrigin: https://evm.airdrop20.click\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 17 Aug 2026 20:21:31 GMT\r\npriority: u=4,i=?0\r\ncontent-type: application/json; charset=utf-8\r\nserver: cloudflare\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, s-maxage=86400\r\nx-robots-tag: noindex\r\ncontent-encoding: br\r\ncf-ray: a2cb62bab973b4f3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":176085,"size_decoded":29353,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"21169cfd44a90968d6d87f628149f958","sha1":"3404284a923d1b8beebc4635a7c425e275e6370f","sha256":"f1628b941a7c1cfec6ae2fc8d180066c18b4481da86d982cf41f246178011b34","sha512":"25a7b690e8a20219ab2c3f02d50285722bf9f500696b18d9256b9e79ea4cad81f03bfcef38152192fe523c3fdc27d9d6aef64ac3eae96da8d0ada2ef8d80e5d2","ssdeep":"768:aAmGpucBWlNozpBRxMm5/yCUZB2sTQrV8JB3zOoG7EF6t1zStxmSijeyB+BR5WIj:l/ZgZB2sTzV6UyB+BFPRyNxGpuC88Cqz","tlshash":"da0475ae8b04de662fb24388915cf9eca55fa117cdcd5ca2e2f1cf2440bc5f7215219a","first_seen":"2026-08-13T18:14:19.850107Z","last_seen":"2026-08-17T20:22:12.707267Z","times_seen":12,"resource_available":false,"data":null}},"time_used":59,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":48,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"evm.airdrop20.click/stat?ping=20.0\u0026id=274lp43n","fqdn":"evm.airdrop20.click","domain":"airdrop20.click","tld":"click"},"ip":{"addr":"104.21.91.8","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://evm.airdrop20.click/","date":"2026-08-17T20:21:42.606Z","timestamp":1786998102606,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"airdrop20.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 05:48:59 GMT","end":"Sun, 08 Nov 2026 06:47:45 GMT"},"fingerprint":{"sha1":"3A:CF:E3:C6:12:19:C6:06:04:EC:79:9A:D3:4C:05:4D:F4:44:DC:FD","sha256":"1B:39:49:80:66:B8:BD:A6:D1:C2:13:8C:82:36:D6:CC:D0:D2:14:D7:55:4A:E1:BA:84:2A:CB:1E:B1:8B:90:D5"}}},"request":{"raw":"GET /stat?ping=20.0\u0026id=274lp43n HTTP/1.1\r\nHost: evm.airdrop20.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://evm.airdrop20.click/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: ch=1786998081; id=274lp43n; chid=\"\"; chsol=087cf07d33f35e99f9e754735a560631\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 17 Aug 2026 20:21:42 GMT\r\ncontent-type: application/json; charset=utf-8\r\nserver-timing: cfExtPri\r\npriority: u=4,i=?0\r\naccess-control-allow-origin: *\r\ncache-control: no-store\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9%2BvSKsjjl2CaINcPl4ubeyddxKmrJwNYX1BZ9r0a%2B2jZVRlnFrcEaBVabI9BZt1tHxfQ1%2BoKqJwEoFZ9evwqXzT0gtHtsl87cUWMnxlC1zbKIBmc31RI%2B7BdZzA52oCRW3z5oe40\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2cb62fd48c6b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2,"size_decoded":655,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"99914b932bd37a50b983c5e7c90ae93b","sha1":"bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f","sha256":"44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a","sha512":"27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd","ssdeep":"","tlshash":"c7100000000000c00000000c00000000000000000c0000000000000000000000000000","first_seen":"2023-03-07T01:15:26Z","last_seen":"2026-08-23T14:22:25.167502Z","times_seen":765060,"resource_available":true,"data":null}},"time_used":110,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":110,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-17","alert":"Sinkholed","trigger":"evm.airdrop20.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-17","alert":"Phishing Block","trigger":"evm.airdrop20.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"evm.airdrop20.click/stat?op=1\u0026unq=1\u0026host=evm.airdrop20.click\u0026id=274lp43n","fqdn":"evm.airdrop20.click","domain":"airdrop20.click","tld":"click"},"ip":{"addr":"104.21.91.8","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://evm.airdrop20.click/","date":"2026-08-17T20:21:22.614Z","timestamp":1786998082614,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"airdrop20.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 05:48:59 GMT","end":"Sun, 08 Nov 2026 06:47:45 GMT"},"fingerprint":{"sha1":"3A:CF:E3:C6:12:19:C6:06:04:EC:79:9A:D3:4C:05:4D:F4:44:DC:FD","sha256":"1B:39:49:80:66:B8:BD:A6:D1:C2:13:8C:82:36:D6:CC:D0:D2:14:D7:55:4A:E1:BA:84:2A:CB:1E:B1:8B:90:D5"}}},"request":{"raw":"GET /stat?op=1\u0026unq=1\u0026host=evm.airdrop20.click\u0026id=274lp43n HTTP/1.1\r\nHost: evm.airdrop20.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://evm.airdrop20.click/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: ch=1786998081; id=274lp43n; chid=\"\"; chsol=087cf07d33f35e99f9e754735a560631\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 17 Aug 2026 20:21:22 GMT\r\ncontent-type: application/json; charset=utf-8\r\nserver-timing: cfExtPri\r\npriority: u=4,i=?0\r\naccess-control-allow-origin: *\r\ncache-control: no-store\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DuA7%2BuUM%2Bk6Y1XReRyZ7Cu0dWNWH%2FsjuhTnuCB9yydrhY0D7hh5xBHS%2BuoXQXZXUX2FQenaRnw9v3LY%2Br%2FnUx8RQ8g3hg0MLUNOKVg9QdcZ8AMvSvZI7jAMaoasAIgYtJ1ZinxF9\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2cb62805d58b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2,"size_decoded":659,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"99914b932bd37a50b983c5e7c90ae93b","sha1":"bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f","sha256":"44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a","sha512":"27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd","ssdeep":"","tlshash":"c7100000000000c00000000c00000000000000000c0000000000000000000000000000","first_seen":"2023-03-07T01:15:26Z","last_seen":"2026-08-23T14:22:25.167502Z","times_seen":765060,"resource_available":true,"data":null}},"time_used":104,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":104,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-17","alert":"Phishing Block","trigger":"evm.airdrop20.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-17","alert":"Sinkholed","trigger":"evm.airdrop20.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"esm.sh/@walletconnect/ethereum-provider@2.21.8/es2022/ethereum-provider.bundle.mjs","fqdn":"esm.sh","domain":"esm.sh","tld":"sh"},"ip":{"addr":"104.26.14.209","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://usdpad.org/?host=https%3A%2F%2Fevm.airdrop20.click\u0026href=https%3A%2F%2Fevm.airdrop20.click%2F\u0026pid=9713e268acd3c6313b52e6ec7e4e5eea","date":"2026-08-17T20:21:32.430Z","timestamp":1786998092430,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"esm.sh","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 21 Jun 2026 04:25:37 GMT","end":"Sat, 19 Sep 2026 05:25:34 GMT"},"fingerprint":{"sha1":"06:01:9A:2D:10:55:51:3D:71:BF:F8:20:33:F8:71:A5:9E:90:2A:AB","sha256":"1B:0D:06:A9:0C:41:8A:5B:EE:63:99:62:63:72:3A:1C:48:69:DD:7C:A6:61:EB:03:67:80:79:9E:62:BA:EA:CC"}}},"request":{"raw":"GET /@walletconnect/ethereum-provider@2.21.8/es2022/ethereum-provider.bundle.mjs HTTP/1.1\r\nHost: esm.sh\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://usdpad.org\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://esm.sh/@walletconnect/ethereum-provider@2.21.8?bundle-deps\u0026target=es2022\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, immutable\r\npriority: u=3,i=?0\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Mon, 11 Aug 2025 12:57:27 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\ndate: Mon, 17 Aug 2026 20:21:32 GMT\r\ncf-cache-status: HIT\r\nage: 556792\r\ncf-ray: a2cb62bdad52712e-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1046087,"size_decoded":381255,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (32044)","md5":"362ca438ae65cfc912b7a743a781ce7b","sha1":"8bd96bb53323eab2db38be0eb2b408ddf2b95b17","sha256":"06449c96378758359a50cc186e8017a20143e74a7dc5b57efaef3ea2c88f5017","sha512":"0ae63ee9d428f583c852ea0456d74d0a9cc5ce6341734c041ee00d5236c364738ca7fe0397c3e3818a86875cd48a7eba3419174a679258ba4bc4ab3f3ac97f04","ssdeep":"24576:fpISZZVokQyZ74ejf2kwwwCbUef690riXt2s0Fj6+6:RISZyyZ74ejf2kwwwCbpf690riXt70FY","tlshash":"9c256c907361b47a539b82a898ab0500f3395859500d802cfbecd9ebef949d9c5bff71","first_seen":"2026-08-03T07:57:51.324381Z","last_seen":"2026-08-20T13:42:04.125651Z","times_seen":105,"resource_available":true,"data":null}},"time_used":28,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":18,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"evm.airdrop20.click/","fqdn":"evm.airdrop20.click","domain":"airdrop20.click","tld":"click"},"ip":{"addr":"104.21.91.8","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-17T20:21:22.466Z","timestamp":1786998082466,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"airdrop20.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 05:48:59 GMT","end":"Sun, 08 Nov 2026 06:47:45 GMT"},"fingerprint":{"sha1":"3A:CF:E3:C6:12:19:C6:06:04:EC:79:9A:D3:4C:05:4D:F4:44:DC:FD","sha256":"1B:39:49:80:66:B8:BD:A6:D1:C2:13:8C:82:36:D6:CC:D0:D2:14:D7:55:4A:E1:BA:84:2A:CB:1E:B1:8B:90:D5"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: evm.airdrop20.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: ch=1786998081; id=274lp43n; chid=274lp43n; chsol=087cf07d33f35e99f9e754735a560631\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 17 Aug 2026 20:21:22 GMT\r\ncontent-type: text/html; charset=utf-8\r\nvary: accept-encoding\r\npriority: u=0,i\r\naccess-control-allow-origin: *\r\ncache-control: no-store\r\nset-cookie: id=274lp43n; Max-Age=86400; Path=/\nchid=\"\"; Max-Age=86400; Path=/\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5ZljrF7X4vURkpcc5gWcQocpCLMBDfjSefuoNmKzdo0GY7DDmpqYm%2FeyLge07srTywVxmu75WiU4Xl8MSz8Cl3LzHj1TaqPt2j6z%2FwMBEg6x4hA5gwpi7BWIpTRb68iV%2F66jyIo1\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: zstd\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2cb627f6d23b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":[{"name":"id","value":"274lp43n","quoted":false,"path":"/","max_age":86400,"secure":false,"http_only":false,"same_site":"","partitioned":false,"raw":"id=274lp43n; Max-Age=86400; Path=/"},{"name":"chid","value":"","quoted":true,"path":"/","max_age":86400,"secure":false,"http_only":false,"same_site":"","partitioned":false,"raw":"chid=\"\"; Max-Age=86400; Path=/"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":111532,"size_decoded":12357,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (11854)","md5":"a2c8547681c0852c56f99594a103136f","sha1":"f2671e58f35da2196f429f0d3b6ea1bbac2ff038","sha256":"d96b8ff8433011c90e83a65576ba8b1f488068e99b7f17ccc844163ce023ff4b","sha512":"fc58ba195ab635910ec991eef078cbd7f309fcecd06ab76d0b254718b33cea7c5ceaa64ca04e044951a3067aee117d0feae61dde534f991d0a9d38fef6d5967d","ssdeep":"768:j/x8YCDYz79ImI/B/yMlwEJdYbQ8F4+lsVWK1uu4QflA4l+hTXGG2xzxgX+yYi1W:KDXyMlwWdYbQEO44l+rBNp6","tlshash":"d4b316e0b9f4241f9601570e870864d5ab57e08b6b7e4004b9cc233a6f97d4beda367e","first_seen":"2026-07-31T21:22:48.842454Z","last_seen":"2026-08-17T20:22:12.709996Z","times_seen":54,"resource_available":false,"data":null}},"time_used":140,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":114,"receive":26,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-17","alert":"Phishing Block","trigger":"evm.airdrop20.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-17","alert":"Sinkholed","trigger":"evm.airdrop20.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zen.claims/x7k/gf","fqdn":"zen.claims","domain":"zen.claims","tld":"claims"},"ip":{"addr":"172.67.218.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://evm.airdrop20.click/","date":"2026-08-17T20:21:27.094Z","timestamp":1786998087094,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zen.claims","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 14:24:48 GMT","end":"Sat, 26 Sep 2026 15:22:24 GMT"},"fingerprint":{"sha1":"E7:4D:AD:22:67:E0:E5:88:2C:ED:21:6C:9F:E4:D8:73:CB:3D:47:C8","sha256":"48:14:21:57:B6:65:54:B2:E8:E5:66:2C:C9:F1:89:85:5D:7E:1D:56:22:3B:5F:85:A2:25:D8:63:E1:D8:0E:86"}}},"request":{"raw":"OPTIONS /x7k/gf HTTP/1.1\r\nHost: zen.claims\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://evm.airdrop20.click/\r\nOrigin: https://evm.airdrop20.click\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 \r\ndate: Mon, 17 Aug 2026 20:21:27 GMT\r\nserver: cloudflare\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: *\r\naccess-control-max-age: 86400\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BrIyfRPvO6%2FLCItBorzfwBLgeyMMUZFIF6Kp4yTkQBa1AknOKQCZS84HHgGvUoBkOaJhrY5WgreZ1RBWxHyB096dk7x7TvvfZ19DpotAxAPPhLXL6CdBVdtITkCk\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2cb629c5ecec272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":633,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-23T14:26:48.814208Z","times_seen":18056444,"resource_available":true,"data":null}},"time_used":139,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":138,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-17","alert":"Sinkholed","trigger":"zen.claims","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-17","alert":"Sinkholed","trigger":"zen.claims","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"explorer-api.walletconnect.com/v3/wallets?projectId=9713e268acd3c6313b52e6ec7e4e5eea\u0026page=1\u0026entries=100","fqdn":"explorer-api.walletconnect.com","domain":"walletconnect.com","tld":"com"},"ip":{"addr":"172.66.147.126","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://evm.airdrop20.click/","date":"2026-08-17T20:21:31.714Z","timestamp":1786998091714,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"walletconnect.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 02 Aug 2026 09:21:35 GMT","end":"Sat, 31 Oct 2026 10:21:32 GMT"},"fingerprint":{"sha1":"2F:0B:9E:A7:63:A8:B6:83:0D:80:12:48:90:19:5E:70:3C:BA:E7:2B","sha256":"68:DA:70:B8:9C:22:69:29:9F:DD:81:28:74:BC:A9:6B:38:7E:E4:A0:54:C5:B2:2D:36:F8:A2:81:FF:3F:4B:51"}}},"request":{"raw":"GET /v3/wallets?projectId=9713e268acd3c6313b52e6ec7e4e5eea\u0026page=1\u0026entries=100 HTTP/1.1\r\nHost: explorer-api.walletconnect.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://evm.airdrop20.click/\r\nOrigin: https://evm.airdrop20.click\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Mon, 17 Aug 2026 20:21:31 GMT\r\ncontent-type: application/json; charset=utf-8\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, s-maxage=86400\r\nx-robots-tag: noindex\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: a2cb62b959255689-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":226324,"size_decoded":31950,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"844e10852c6c9fde5520c75887b6ea29","sha1":"6f6552406196c39ea33334ffd0e0620fbe9af205","sha256":"e1e231242ebd382a82ff338d314fd404d566f4b26e9563d151387206e43e520a","sha512":"23318728ea62a7aee00792e1c59c5d715fb964ecdf604c1d5da4e4eaf8af5db6d22430144602266a835232f2a07518dbbc3daa41f3eb2c2d17ee6650f72e6c9d","ssdeep":"1536:TKFTcsEXxfWraLYrZYcG+mZBz48GxSt6rNBgZvk6VM:2FTcsixOraUZY/z48GxStINBgZva","tlshash":"8024446e4b409e566fb18388d25cf9eda16fe007c9cd5ce6e2f18e3444bc9f3215129a","first_seen":"2026-08-13T18:14:19.821982Z","last_seen":"2026-08-17T20:22:12.710811Z","times_seen":12,"resource_available":false,"data":null}},"time_used":132,"timings":{"blocked":0,"dns":3,"connect":4,"send":0,"wait":109,"receive":0,"ssl":16},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"w3connect.xyz/assets/index-ydvr3Ite.js","fqdn":"w3connect.xyz","domain":"w3connect.xyz","tld":"xyz"},"ip":{"addr":"104.21.87.205","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://w3connect.xyz/?host=https%3A%2F%2Fevm.airdrop20.click\u0026href=https%3A%2F%2Fevm.airdrop20.click%2F\u0026pid=9713e268acd3c6313b52e6ec7e4e5eea","date":"2026-08-17T20:21:32.030Z","timestamp":1786998092030,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"w3connect.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 12 Aug 2026 12:49:15 GMT","end":"Tue, 10 Nov 2026 13:44:15 GMT"},"fingerprint":{"sha1":"AF:38:4C:CC:A7:8C:E7:23:DF:A3:4F:7B:37:62:39:B7:50:B2:6F:E3","sha256":"53:91:0B:3A:5F:55:C6:5E:BF:B6:B3:F7:BA:0A:6F:7B:28:F9:21:34:E9:4B:81:F4:6C:93:3B:CB:D6:A6:D4:0D"}}},"request":{"raw":"GET /assets/index-ydvr3Ite.js HTTP/1.1\r\nHost: w3connect.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://w3connect.xyz/?host=https%3A%2F%2Fevm.airdrop20.click\u0026href=https%3A%2F%2Fevm.airdrop20.click%2F\u0026pid=9713e268acd3c6313b52e6ec7e4e5eea\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 17 Aug 2026 20:21:32 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 11 Aug 2026 10:24:24 GMT\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\netag: W/\"6a7af858-b64a\"\r\nexpires: Tue, 18 Aug 2026 20:21:32 GMT\r\ncache-control: max-age=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gpCfR0XhYc%2FicZJHoYi3lcD27XgIE3YZj6ey2Mgb1dyao%2BOwqb5sLq2NHdFvyiIwfRvy6B2yO4urlvHwbiEswmHSDSsUIzowsF8wvdWPpxEYBa%2Bx8ilCDvEJs2EjGJph\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2cb62bb3f86b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":46666,"size_decoded":35355,"mime_type":"application/javascript","magic":"data","md5":"69a121c7a09ba943b5a1986d895e39d5","sha1":"c6f1554cebb57962660acad7e682975254b7e3ac","sha256":"188a8559f685c8b370632b34a2f4277803e983889f617e1aae37b4fae6056047","sha512":"438ddb8c5a832402c8f65bce08d7c420e49658383813d0e949c0e451f0038f2d730a64a8d61b28a71fc6dabc776ad2c9c30b9396ff8d8cd2e6a1a18694d4a3bf","ssdeep":"768:FEmJF1MGcHXrir2SJTGcclC8HkKmCJMoDjDXtN/YhX2pr5VicJZZiDmNz:FEmxMGgkUc2CpOJNrtpMXeraeGq","tlshash":"1723d1ac5823920c05da477c1d5f1ec4acbd4fe8998d179bd42b90f4b7e284a44dfda8","first_seen":"2026-08-07T08:41:26.855141Z","last_seen":"2026-08-18T18:59:49.36952Z","times_seen":38,"resource_available":true,"data":null}},"time_used":211,"timings":{"blocked":2,"dns":0,"connect":0,"send":0,"wait":165,"receive":44,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"explorer-api.walletconnect.com/v3/wallets?projectId=9713e268acd3c6313b52e6ec7e4e5eea\u0026page=6\u0026entries=100","fqdn":"explorer-api.walletconnect.com","domain":"walletconnect.com","tld":"com"},"ip":{"addr":"172.66.147.126","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://evm.airdrop20.click/","date":"2026-08-17T20:21:32.244Z","timestamp":1786998092244,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"walletconnect.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 02 Aug 2026 09:21:35 GMT","end":"Sat, 31 Oct 2026 10:21:32 GMT"},"fingerprint":{"sha1":"2F:0B:9E:A7:63:A8:B6:83:0D:80:12:48:90:19:5E:70:3C:BA:E7:2B","sha256":"68:DA:70:B8:9C:22:69:29:9F:DD:81:28:74:BC:A9:6B:38:7E:E4:A0:54:C5:B2:2D:36:F8:A2:81:FF:3F:4B:51"}}},"request":{"raw":"GET /v3/wallets?projectId=9713e268acd3c6313b52e6ec7e4e5eea\u0026page=6\u0026entries=100 HTTP/1.1\r\nHost: explorer-api.walletconnect.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://evm.airdrop20.click/\r\nOrigin: https://evm.airdrop20.click\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 17 Aug 2026 20:21:32 GMT\r\npriority: u=4,i=?0\r\ncontent-type: application/json; charset=utf-8\r\nserver: cloudflare\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, s-maxage=86400\r\nx-robots-tag: noindex\r\ncontent-encoding: br\r\ncf-ray: a2cb62bc8996b4f3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":172671,"size_decoded":29876,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"8288ca07959ce35357cf277144ec5124","sha1":"1d90c12a663b1fc2c122537fb567d743a3e56656","sha256":"f21a5c29ca9489ec1b1f070476c6784d8be791fb098c2367520eb4825b099046","sha512":"4f69c2c47f3149723a68842ccf399adc701336086284b49713e45c21f58d848a1e5ae28fd9d4e8ff5b6faacab88b89f3fff2c5ab855d0c1fb9f467e84d2e7b12","ssdeep":"1536:AcG47KuIU15Z6bjzeFedubixbitI/YcZMfLFI2HqQh+mc5:AcT7KuIU150jzeFedC+ec1usmu","tlshash":"4ff3986e4b04de661fb25388914cf9eca18fa117c9cd9cf6e2e1cf3440b89f7255219a","first_seen":"2026-08-17T20:22:12.713416Z","last_seen":"2026-08-17T20:22:12.713416Z","times_seen":1,"resource_available":false,"data":null}},"time_used":49,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":48,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"esm.sh/node/async_hooks.mjs","fqdn":"esm.sh","domain":"esm.sh","tld":"sh"},"ip":{"addr":"104.26.14.209","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://w3connect.xyz/?host=https%3A%2F%2Fevm.airdrop20.click\u0026href=https%3A%2F%2Fevm.airdrop20.click%2F\u0026pid=9713e268acd3c6313b52e6ec7e4e5eea","date":"2026-08-17T20:21:32.344Z","timestamp":1786998092344,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"esm.sh","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 21 Jun 2026 04:25:37 GMT","end":"Sat, 19 Sep 2026 05:25:34 GMT"},"fingerprint":{"sha1":"06:01:9A:2D:10:55:51:3D:71:BF:F8:20:33:F8:71:A5:9E:90:2A:AB","sha256":"1B:0D:06:A9:0C:41:8A:5B:EE:63:99:62:63:72:3A:1C:48:69:DD:7C:A6:61:EB:03:67:80:79:9E:62:BA:EA:CC"}}},"request":{"raw":"GET /node/async_hooks.mjs HTTP/1.1\r\nHost: esm.sh\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://w3connect.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://esm.sh/node/events.mjs\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=86400\r\npriority: u=3,i=?0\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\netag: W/\"v137_8\"\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\ndate: Mon, 17 Aug 2026 20:21:32 GMT\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\nage: 15468\r\ncf-cache-status: HIT\r\ncf-ray: a2cb62bd2d46712e-OSL\r\ncontent-length: 1531\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2938,"size_decoded":1942,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (2937)","md5":"f78e3393d375d2bd75ee22e5bf0f3635","sha1":"2b6d82e3a17d6f4596fb2f6df083fcf498edaa99","sha256":"b7862dbfba8bbbca956f19e4e08280b529e4b27468779775a9093aef8c92dc1d","sha512":"280686efdbef542165cff092b795274efb660689426f8f15523b3478d967cc6bea03a0d7a66400552278a777655231d7e9ad2cba1bb4eb0a45f249e76102258d","ssdeep":"","tlshash":"3b515489a78bf9685b9eb176413a0103e10a0ec89d1c722cf049e9ee695e10c8774fb5","first_seen":"2025-10-29T19:17:04.32262Z","last_seen":"2026-08-23T02:38:08.822789Z","times_seen":739,"resource_available":true,"data":null}},"time_used":57,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":57,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"evm.airdrop20.click/","fqdn":"evm.airdrop20.click","domain":"airdrop20.click","tld":"click"},"ip":{"addr":"104.21.91.8","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-17T20:21:21.780Z","timestamp":1786998081780,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"airdrop20.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 05:48:59 GMT","end":"Sun, 08 Nov 2026 06:47:45 GMT"},"fingerprint":{"sha1":"3A:CF:E3:C6:12:19:C6:06:04:EC:79:9A:D3:4C:05:4D:F4:44:DC:FD","sha256":"1B:39:49:80:66:B8:BD:A6:D1:C2:13:8C:82:36:D6:CC:D0:D2:14:D7:55:4A:E1:BA:84:2A:CB:1E:B1:8B:90:D5"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: evm.airdrop20.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 17 Aug 2026 20:21:22 GMT\r\ncontent-type: text/html; charset=utf-8\r\nvary: accept-encoding\r\npriority: u=0,i\r\naccess-control-allow-origin: *\r\ncache-control: no-store\r\nset-cookie: ch=1786998081; Max-Age=86400; Path=/\nid=274lp43n; Max-Age=86400; Path=/\nchid=274lp43n; Max-Age=86400; Path=/\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=D5Ho4oSvBWmjxk8%2FxaHjA6e9PLSG%2BBcQDJgbo5DgLtGcQbkX5ctobTygbPQ2wHGkFn5x65e9nY3gquVTuZw7xb1xcBP0mrRBKGvfMh0o7xbBi4No5Ljf03lCmgXRXoDPXK5pwbtx\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: zstd\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2cb627b8ac1b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":[{"name":"ch","value":"1786998081","quoted":false,"path":"/","max_age":86400,"secure":false,"http_only":false,"same_site":"","partitioned":false,"raw":"ch=1786998081; Max-Age=86400; Path=/"},{"name":"id","value":"274lp43n","quoted":false,"path":"/","max_age":86400,"secure":false,"http_only":false,"same_site":"","partitioned":false,"raw":"id=274lp43n; Max-Age=86400; Path=/"},{"name":"chid","value":"274lp43n","quoted":false,"path":"/","max_age":86400,"secure":false,"http_only":false,"same_site":"","partitioned":false,"raw":"chid=274lp43n; Max-Age=86400; Path=/"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":329,"size_decoded":1066,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"30e385949419ee6ce491cbfe06cbb46f","sha1":"b342be29b8633c1374012cc8be970079233f7e6d","sha256":"1cb6818597633d0b1b665c37637e0fd3d50ef65e3c5cb644ede5f859294fc3d5","sha512":"c3090fadc6198ed4b1bb806e935ef7aad8255fea23fd62aa7384005f2fda1334bc7405339f6ff2105d80bb6d844057891424d705eaab108ce85a9fb92111a066","ssdeep":"","tlshash":"68e07de138004c194f60a7741ff0f394aab314a9f9729ba261892c92118473efe82ec5","first_seen":"2026-08-17T20:22:12.716218Z","last_seen":"2026-08-17T20:22:12.716218Z","times_seen":1,"resource_available":false,"data":null}},"time_used":244,"timings":{"blocked":-1,"dns":49,"connect":16,"send":0,"wait":179,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-17","alert":"Sinkholed","trigger":"evm.airdrop20.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-17","alert":"Phishing Block","trigger":"evm.airdrop20.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"evm.airdrop20.click/assets/f203210a29.js","fqdn":"evm.airdrop20.click","domain":"airdrop20.click","tld":"click"},"ip":{"addr":"104.21.91.8","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://evm.airdrop20.click/","date":"2026-08-17T20:21:22.611Z","timestamp":1786998082611,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"airdrop20.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 05:48:59 GMT","end":"Sun, 08 Nov 2026 06:47:45 GMT"},"fingerprint":{"sha1":"3A:CF:E3:C6:12:19:C6:06:04:EC:79:9A:D3:4C:05:4D:F4:44:DC:FD","sha256":"1B:39:49:80:66:B8:BD:A6:D1:C2:13:8C:82:36:D6:CC:D0:D2:14:D7:55:4A:E1:BA:84:2A:CB:1E:B1:8B:90:D5"}}},"request":{"raw":"GET /assets/f203210a29.js HTTP/1.1\r\nHost: evm.airdrop20.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://evm.airdrop20.click/\r\nCookie: ch=1786998081; id=274lp43n; chid=\"\"; chsol=087cf07d33f35e99f9e754735a560631\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 17 Aug 2026 20:21:22 GMT\r\ncontent-type: application/javascript\r\netag: W/\"6a4d9f73-588\"\r\nlast-modified: Wed, 08 Jul 2026 00:53:07 GMT\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gEkbG9qSlGh66A0guUzPLBPYS6WhZFsZu5k17mqztxd55yxEU5hjwC8zzf1UxBU8iCBwZ84u1OXM%2B7o3K%2FBY3xNz3fO2BUwr3%2BtuOOGqJeCanQflPyRaG%2BmjBXhkVKUPCKONM%2Fjn\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\ncf-ray: a2cb62804d56b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1416,"size_decoded":1407,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1416), with no line terminators","md5":"50bd713cc197998b44d8832ee0dfb224","sha1":"ec392973d17ae59f349d45af0222add83b5ea3be","sha256":"7f214d16f1ae75fb825ec4aab7aa80d9f8636353bb8869ff55ebfcb7f309eb2d","sha512":"56ac91a69c152c9d69b61f8e1acaf4db38dbe970575f785aae9c7fe7dc1c947393de9aa7939806acdf61052b47077b1c4ff9bc3b9a96b9ad94a0ef76fe8b0f49","ssdeep":"","tlshash":"7721c0dbba52f4401785b7b6986f740d9767bd0adcda4428d40055c23dbeb2fd012558","first_seen":"2026-07-21T08:06:09.065367Z","last_seen":"2026-08-17T20:22:12.717365Z","times_seen":55,"resource_available":true,"data":null}},"time_used":141,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":141,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-17","alert":"Phishing Block","trigger":"evm.airdrop20.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-17","alert":"Sinkholed","trigger":"evm.airdrop20.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"evm.airdrop20.click/favicon.ico","fqdn":"evm.airdrop20.click","domain":"airdrop20.click","tld":"click"},"ip":{"addr":"104.21.91.8","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://evm.airdrop20.click/","date":"2026-08-17T20:21:23.052Z","timestamp":1786998083052,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"airdrop20.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 05:48:59 GMT","end":"Sun, 08 Nov 2026 06:47:45 GMT"},"fingerprint":{"sha1":"3A:CF:E3:C6:12:19:C6:06:04:EC:79:9A:D3:4C:05:4D:F4:44:DC:FD","sha256":"1B:39:49:80:66:B8:BD:A6:D1:C2:13:8C:82:36:D6:CC:D0:D2:14:D7:55:4A:E1:BA:84:2A:CB:1E:B1:8B:90:D5"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: evm.airdrop20.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://evm.airdrop20.click/\r\nCookie: ch=1786998081; id=274lp43n; chid=\"\"; chsol=087cf07d33f35e99f9e754735a560631\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\nserver: cloudflare\r\ndate: Mon, 17 Aug 2026 20:21:23 GMT\r\ncontent-type: text/html\r\nvary: accept-encoding\r\npriority: u=6,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XgvJ%2FJ%2FeRgS4yWGfiMZmEgAtm9Vpdr0oEJ94g4fZTawvXeUNiPBxCxiAfwgrnj4oH4PM%2FdrWHFjth34OhyPzVTZwdUwD5jT3Z%2FyKUZUgInVDTapWlmYrqvOilWAihgK%2BYxJfEgiz\"}]}\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2cb62831de6b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":153,"size_decoded":749,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"998368d7c95ea4293237f2320546e440","sha1":"30dfd2d3bb8a7e3241bd7792e90a98ebb70be3a4","sha256":"533a1ca5d6595793725bca7641d9461a0f00dd1732dded3e4281196f5dd21736","sha512":"648c4720a85dbf834be1ba00f0e1b4167cc670fe15896efb00a77fb6e0c225a13aae3da10d85fa6e7f726420d9bb3c20c43466e02296d44153c127b7160e0b97","ssdeep":"","tlshash":"4fc02b2d7513bc4cc563317832c37080c0c6833769bb4112c440800331cf2998bc3397","first_seen":"2023-04-06T02:01:38Z","last_seen":"2026-08-23T11:47:37.464405Z","times_seen":6208,"resource_available":true,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-17","alert":"Phishing Block","trigger":"evm.airdrop20.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-17","alert":"Sinkholed","trigger":"evm.airdrop20.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"evm.airdrop20.click/evm/evmairdrop/fonts/RoobertMonoTRIAL-Bold-BF67243fd2cfa56.otf","fqdn":"evm.airdrop20.click","domain":"airdrop20.click","tld":"click"},"ip":{"addr":"104.21.91.8","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://evm.airdrop20.click/","date":"2026-08-17T20:21:23.056Z","timestamp":1786998083056,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"airdrop20.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 05:48:59 GMT","end":"Sun, 08 Nov 2026 06:47:45 GMT"},"fingerprint":{"sha1":"3A:CF:E3:C6:12:19:C6:06:04:EC:79:9A:D3:4C:05:4D:F4:44:DC:FD","sha256":"1B:39:49:80:66:B8:BD:A6:D1:C2:13:8C:82:36:D6:CC:D0:D2:14:D7:55:4A:E1:BA:84:2A:CB:1E:B1:8B:90:D5"}}},"request":{"raw":"GET /evm/evmairdrop/fonts/RoobertMonoTRIAL-Bold-BF67243fd2cfa56.otf HTTP/1.1\r\nHost: evm.airdrop20.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://evm.airdrop20.click/evm/evmairdrop/css/main.css\r\nCookie: ch=1786998081; id=274lp43n; chid=\"\"; chsol=087cf07d33f35e99f9e754735a560631\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 17 Aug 2026 20:21:23 GMT\r\ncontent-type: application/octet-stream\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 13 May 2026 16:29:02 GMT\r\npriority: u=3,i=?0\r\netag: \"6a04a6ce-16c48\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=D0XdMSrp1GsYnQHWsI5ozHHvCotWfFvcIgU9j5Pr%2Fo5XcY%2B5ILPU8L55Pk9BMzz0OvP36bK9eK%2B3B1lXoGIRdxY1LrujQXTtnjKhn%2FLiyyKKK9gY6uPaDPTrYmBCbu7mhZvPU1Zq\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2cb62831de8b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 93256\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":93256,"size_decoded":93968,"mime_type":"application/octet-stream","magic":"OpenType font data","md5":"7e376a03ed5daa80f015513ded63fe05","sha1":"c8f82e5d2a12b9769cd7b3839fbdf07d1b56d581","sha256":"c4f73301511d46076e9215ade52a0b1b16279776f41e5acb60e5f01e085f6872","sha512":"0da5891c96be3af1cc2498d789f778f95f3d0a6d683702a6c72dafd854fc2b3d54dd1585421a323ebaed43400bb855115964ef0f5c9db6678d832996a251dd42","ssdeep":"1536:m8dFD4B2hvFdIcLYhf/NsSDtXSC+tMlZ3GUNSwhXRCNMIpLDyA4jbWmRlwmu:DdAMdIcLYhf/+SDt+tMvZXMBXyVjymf+","tlshash":"9f93ae4fb70b9b48f9c70f343b360765a3399c64962edb8bd694a0509ddd0590ab82ce","first_seen":"2026-03-29T12:41:57.777802Z","last_seen":"2026-08-17T20:22:12.719873Z","times_seen":55,"resource_available":false,"data":null}},"time_used":135,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":80,"receive":55,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-17","alert":"Phishing Block","trigger":"evm.airdrop20.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-17","alert":"Sinkholed","trigger":"evm.airdrop20.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"explorer-api.walletconnect.com/v3/wallets?projectId=9713e268acd3c6313b52e6ec7e4e5eea\u0026page=7\u0026entries=100","fqdn":"explorer-api.walletconnect.com","domain":"walletconnect.com","tld":"com"},"ip":{"addr":"172.66.147.126","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://evm.airdrop20.click/","date":"2026-08-17T20:21:32.301Z","timestamp":1786998092301,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"walletconnect.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 02 Aug 2026 09:21:35 GMT","end":"Sat, 31 Oct 2026 10:21:32 GMT"},"fingerprint":{"sha1":"2F:0B:9E:A7:63:A8:B6:83:0D:80:12:48:90:19:5E:70:3C:BA:E7:2B","sha256":"68:DA:70:B8:9C:22:69:29:9F:DD:81:28:74:BC:A9:6B:38:7E:E4:A0:54:C5:B2:2D:36:F8:A2:81:FF:3F:4B:51"}}},"request":{"raw":"GET /v3/wallets?projectId=9713e268acd3c6313b52e6ec7e4e5eea\u0026page=7\u0026entries=100 HTTP/1.1\r\nHost: explorer-api.walletconnect.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://evm.airdrop20.click/\r\nOrigin: https://evm.airdrop20.click\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 17 Aug 2026 20:21:32 GMT\r\npriority: u=4,i=?0\r\ncontent-type: application/json; charset=utf-8\r\nserver: cloudflare\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, s-maxage=86400\r\nx-robots-tag: noindex\r\ncontent-encoding: br\r\ncf-ray: a2cb62bcd99eb4f3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":47058,"size_decoded":9153,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"6ea82a8a26bc519e8222ab836a807803","sha1":"b7fcc0cbe8998abc085192870bf4c527acd560dd","sha256":"b13b59de50c2dd6c3d444deff889fd0b229a9ea78cafb8020a92c326d93cda8b","sha512":"00cfbd8acbcfa76ef9cc19bb4fd13866f44464d8bf4cd64fdc9d2c6dfc0a0ec8f3e017e1661c22a33a30f458efc6070d2ce7eb45af11526ed5b9234283e786d5","ssdeep":"384:ve3UvQtzU1HMupr+BV6w856KtEmQ4yMup4:2Ev+U1lryV6w+6Kt9I4","tlshash":"3623766b8f14ee762bb213c9415c7deca24e2117cdca9cf6e2d1cf1440b4af7216219a","first_seen":"2026-08-17T20:22:12.72129Z","last_seen":"2026-08-17T20:22:12.72129Z","times_seen":1,"resource_available":false,"data":null}},"time_used":91,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":91,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"esm.sh/node/events.mjs","fqdn":"esm.sh","domain":"esm.sh","tld":"sh"},"ip":{"addr":"104.26.14.209","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://w3connect.xyz/?host=https%3A%2F%2Fevm.airdrop20.click\u0026href=https%3A%2F%2Fevm.airdrop20.click%2F\u0026pid=9713e268acd3c6313b52e6ec7e4e5eea","date":"2026-08-17T20:21:32.318Z","timestamp":1786998092318,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"esm.sh","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 21 Jun 2026 04:25:37 GMT","end":"Sat, 19 Sep 2026 05:25:34 GMT"},"fingerprint":{"sha1":"06:01:9A:2D:10:55:51:3D:71:BF:F8:20:33:F8:71:A5:9E:90:2A:AB","sha256":"1B:0D:06:A9:0C:41:8A:5B:EE:63:99:62:63:72:3A:1C:48:69:DD:7C:A6:61:EB:03:67:80:79:9E:62:BA:EA:CC"}}},"request":{"raw":"GET /node/events.mjs HTTP/1.1\r\nHost: esm.sh\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://w3connect.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://esm.sh/@walletconnect/ethereum-provider@2.21.8?bundle-deps\u0026target=es2022\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=86400\r\npriority: u=3,i=?0\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\netag: W/\"v137_8\"\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\ndate: Mon, 17 Aug 2026 20:21:32 GMT\r\ncf-cache-status: HIT\r\nage: 15468\r\ncf-ray: a2cb62bcfd41712e-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12122,"size_decoded":5175,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (9385)","md5":"acd05dc333042e32473eb39c7700cc9b","sha1":"a9ff738706c3e6ab2be579d296faecd67e438f47","sha256":"4c6150b88c1444aa1fe9331013e3f37eda9836206f629f7f3ae8f3743dd90fa8","sha512":"658a1eebb2727249df13bfd7f76d1bd38921ebc2dff63b8c1bf779973bd10483b7138649e7168a1ea7305c88542876be92a52b1da915331806436b0455f9a6a5","ssdeep":"96:yIJAOQoXa9RQ9bKVXQ6Z9cBBEMPg19H+MyLfLYCGZjiSl1YYS/07jfofxSXR261G:yyiZInEGaGLYCKt70WRRD7EE00WZ","tlshash":"404286ccb386b87113def3af707b4146f23459e0685c0408ba75fcf6292a98995a6f71","first_seen":"2025-10-29T19:17:04.387887Z","last_seen":"2026-08-23T02:38:08.815258Z","times_seen":741,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"esm.sh/@walletconnect/ethereum-provider@2.21.8/es2022/ethereum-provider.bundle.mjs","fqdn":"esm.sh","domain":"esm.sh","tld":"sh"},"ip":{"addr":"104.26.14.209","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://w3connect.xyz/?host=https%3A%2F%2Fevm.airdrop20.click\u0026href=https%3A%2F%2Fevm.airdrop20.click%2F\u0026pid=9713e268acd3c6313b52e6ec7e4e5eea","date":"2026-08-17T20:21:32.321Z","timestamp":1786998092321,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"esm.sh","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 21 Jun 2026 04:25:37 GMT","end":"Sat, 19 Sep 2026 05:25:34 GMT"},"fingerprint":{"sha1":"06:01:9A:2D:10:55:51:3D:71:BF:F8:20:33:F8:71:A5:9E:90:2A:AB","sha256":"1B:0D:06:A9:0C:41:8A:5B:EE:63:99:62:63:72:3A:1C:48:69:DD:7C:A6:61:EB:03:67:80:79:9E:62:BA:EA:CC"}}},"request":{"raw":"GET /@walletconnect/ethereum-provider@2.21.8/es2022/ethereum-provider.bundle.mjs HTTP/1.1\r\nHost: esm.sh\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://w3connect.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://esm.sh/@walletconnect/ethereum-provider@2.21.8?bundle-deps\u0026target=es2022\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, immutable\r\npriority: u=3,i=?0\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Mon, 11 Aug 2025 12:57:27 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\ndate: Mon, 17 Aug 2026 20:21:32 GMT\r\ncf-cache-status: HIT\r\nage: 274876\r\ncf-ray: a2cb62bcfd42712e-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1046087,"size_decoded":381255,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (32044)","md5":"362ca438ae65cfc912b7a743a781ce7b","sha1":"8bd96bb53323eab2db38be0eb2b408ddf2b95b17","sha256":"06449c96378758359a50cc186e8017a20143e74a7dc5b57efaef3ea2c88f5017","sha512":"0ae63ee9d428f583c852ea0456d74d0a9cc5ce6341734c041ee00d5236c364738ca7fe0397c3e3818a86875cd48a7eba3419174a679258ba4bc4ab3f3ac97f04","ssdeep":"24576:fpISZZVokQyZ74ejf2kwwwCbUef690riXt2s0Fj6+6:RISZyyZ74ejf2kwwwCbpf690riXt70FY","tlshash":"9c256c907361b47a539b82a898ab0500f3395859500d802cfbecd9ebef949d9c5bff71","first_seen":"2026-08-03T07:57:51.324381Z","last_seen":"2026-08-20T13:42:04.125651Z","times_seen":105,"resource_available":true,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":13,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"esm.sh/node/tty.mjs","fqdn":"esm.sh","domain":"esm.sh","tld":"sh"},"ip":{"addr":"104.26.14.209","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://usdpad.org/?host=https%3A%2F%2Fevm.airdrop20.click\u0026href=https%3A%2F%2Fevm.airdrop20.click%2F\u0026pid=9713e268acd3c6313b52e6ec7e4e5eea","date":"2026-08-17T20:21:32.455Z","timestamp":1786998092455,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"esm.sh","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 21 Jun 2026 04:25:37 GMT","end":"Sat, 19 Sep 2026 05:25:34 GMT"},"fingerprint":{"sha1":"06:01:9A:2D:10:55:51:3D:71:BF:F8:20:33:F8:71:A5:9E:90:2A:AB","sha256":"1B:0D:06:A9:0C:41:8A:5B:EE:63:99:62:63:72:3A:1C:48:69:DD:7C:A6:61:EB:03:67:80:79:9E:62:BA:EA:CC"}}},"request":{"raw":"GET /node/tty.mjs HTTP/1.1\r\nHost: esm.sh\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://usdpad.org\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://esm.sh/node/process.mjs\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=86400\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\ncontent-type: application/javascript; charset=utf-8\r\netag: W/\"v137_8\"\r\nserver: cloudflare\r\ndate: Mon, 17 Aug 2026 20:21:32 GMT\r\ncontent-encoding: br\r\nage: 36141\r\ncf-ray: a2cb62bddd55712e-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":685,"size_decoded":712,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (684)","md5":"dc159c105e1b73c18cfd63a84cc154ec","sha1":"347664300100736360aeda59495f5017a852a81f","sha256":"c66ff4b406bad449bfb2ced355f15badf16f4d9e035d2d300e33b5aeee64e3be","sha512":"96f99c368bef6857a0e9006efdc8ac0585af1bca468adb103b0c626ff5cada09eefeb07b317d6be3e71915f8c1a1412d4927fb743e4ed59e54c6e82af1b9d50a","ssdeep":"","tlshash":"cf01fef930f7b57246bb047444728a07f388e8f0b49ec4a0ba6599b43c655ced131676","first_seen":"2025-10-29T19:17:04.320253Z","last_seen":"2026-08-23T02:38:08.843404Z","times_seen":734,"resource_available":true,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"evm.airdrop20.click/evm/evmairdrop/css/main.css","fqdn":"evm.airdrop20.click","domain":"airdrop20.click","tld":"click"},"ip":{"addr":"104.21.91.8","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://evm.airdrop20.click/","date":"2026-08-17T20:21:22.613Z","timestamp":1786998082613,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"airdrop20.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 05:48:59 GMT","end":"Sun, 08 Nov 2026 06:47:45 GMT"},"fingerprint":{"sha1":"3A:CF:E3:C6:12:19:C6:06:04:EC:79:9A:D3:4C:05:4D:F4:44:DC:FD","sha256":"1B:39:49:80:66:B8:BD:A6:D1:C2:13:8C:82:36:D6:CC:D0:D2:14:D7:55:4A:E1:BA:84:2A:CB:1E:B1:8B:90:D5"}}},"request":{"raw":"GET /evm/evmairdrop/css/main.css HTTP/1.1\r\nHost: evm.airdrop20.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://evm.airdrop20.click/\r\nCookie: ch=1786998081; id=274lp43n; chid=\"\"; chsol=087cf07d33f35e99f9e754735a560631\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 17 Aug 2026 20:21:22 GMT\r\ncontent-type: text/css\r\netag: W/\"6a32fe41-1b394\"\r\nlast-modified: Wed, 17 Jun 2026 20:06:25 GMT\r\npriority: u=2,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JvvoFCfUY%2ByK%2BBG7Bpv%2B5VYEQRBMMVRcGBQdMGqbgKhkqmMYSODThWVJnj3CGeqE0gZp3TvflKPAZGiTLYT2AcdTcqlqQMFEMkyu9%2BVFn0l31bmEd2%2FuqZuyccJHtdFoiUWqtbKE\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\ncf-ray: a2cb62805d57b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":111508,"size_decoded":21914,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (28007)","md5":"8ab796f9dd4773cb9fd65f2fe26755a4","sha1":"75ef856698cbcfc38758f299a10c6567ea6f8db1","sha256":"76f2c7c1273f2f0b2c59faa38145e54489e5c127aa85ab49782018846c3fc0e8","sha512":"b14a112210c6e03132be911ccc6f15d71b8d84be4cdebbcaaa7822ebf84f132561631dfe50e4b59964565b2ceb78870b523ea2d3224518584284083ac2ac4238","ssdeep":"768:KpSUJCAgzyAcoKPFEwFH69ODS2aBFUxrTp7Gtk2lYf+dR70EIJ9P+Gf/e/uBkCH9:nAgzyAuH+ODS2QFiHlr8pja","tlshash":"a2b3e934be0d3a3e7523e76945c0819d6207b35bde3b03aaeea113784dca39b2975710","first_seen":"2026-06-30T19:14:35.092566Z","last_seen":"2026-08-17T20:22:12.724462Z","times_seen":57,"resource_available":false,"data":null}},"time_used":173,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":94,"receive":79,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-17","alert":"Sinkholed","trigger":"evm.airdrop20.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-17","alert":"Phishing Block","trigger":"evm.airdrop20.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"evm.airdrop20.click/evm/evmairdrop/fonts/Inter-VariableFont_opsz,wght.ttf","fqdn":"evm.airdrop20.click","domain":"airdrop20.click","tld":"click"},"ip":{"addr":"104.21.91.8","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://evm.airdrop20.click/","date":"2026-08-17T20:21:23.054Z","timestamp":1786998083054,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"airdrop20.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 05:48:59 GMT","end":"Sun, 08 Nov 2026 06:47:45 GMT"},"fingerprint":{"sha1":"3A:CF:E3:C6:12:19:C6:06:04:EC:79:9A:D3:4C:05:4D:F4:44:DC:FD","sha256":"1B:39:49:80:66:B8:BD:A6:D1:C2:13:8C:82:36:D6:CC:D0:D2:14:D7:55:4A:E1:BA:84:2A:CB:1E:B1:8B:90:D5"}}},"request":{"raw":"GET /evm/evmairdrop/fonts/Inter-VariableFont_opsz,wght.ttf HTTP/1.1\r\nHost: evm.airdrop20.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://evm.airdrop20.click/evm/evmairdrop/css/main.css\r\nCookie: ch=1786998081; id=274lp43n; chid=\"\"; chsol=087cf07d33f35e99f9e754735a560631\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 17 Aug 2026 20:21:23 GMT\r\ncontent-type: application/octet-stream\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 13 May 2026 16:42:30 GMT\r\npriority: u=3,i=?0\r\netag: \"6a04a9f6-d58d4\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7BXuEJNfWINDN04kuv36QlNTax3JaQLidIR01oh9FO9bGg8UIHgjbRfw316EdEVvH88etc0i%2F7XTjS61%2F29CoTg5kTj3iJQyZoMFMaW9yNkstzCsZVoIAiY1GoYYvBVOBsE8R5ZX\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2cb62831de7b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 874708\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":874708,"size_decoded":875417,"mime_type":"application/octet-stream","magic":"TrueType Font data, 21 tables, 1st \"GDEF\", 58 names, Microsoft, language 0x409","md5":"0a77e23a8fdbe6caefd53cb04c26fabc","sha1":"ee5c2e22ffeddefc433c9aa4c76779bb73a5c682","sha256":"0be2399ea925f1f83ff974764761da9860ec50742ed29a5d4c1ffd0c5c7ac3a8","sha512":"6012de93c8523799869b8976f620936651efc0395c66f1a6a56d417288c1b05675662c5c740800ea935eaae1968f2befe279d0264eb0805f6b98e5ab042a9316","ssdeep":"24576:Wap5PFuuuuPz2iKeRpJ6iruEOwRy+4FFNea:WapTL2iKeRpJ6iar9F7","tlshash":"f7158e53f282cf5ec2592b358a734b9462396870ff17130f696573b4aea33e0694d6e0","first_seen":"2024-12-10T16:54:08.570183Z","last_seen":"2026-08-23T11:41:39.035503Z","times_seen":3688,"resource_available":false,"data":null}},"time_used":287,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":130,"receive":157,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-17","alert":"Sinkholed","trigger":"evm.airdrop20.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-17","alert":"Phishing Block","trigger":"evm.airdrop20.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"evm.airdrop20.click/stat?ld=1\u0026ld_time=0.8\u0026wallets=\u0026id=274lp43n","fqdn":"evm.airdrop20.click","domain":"airdrop20.click","tld":"click"},"ip":{"addr":"104.21.91.8","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://evm.airdrop20.click/","date":"2026-08-17T20:21:23.372Z","timestamp":1786998083372,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"airdrop20.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 05:48:59 GMT","end":"Sun, 08 Nov 2026 06:47:45 GMT"},"fingerprint":{"sha1":"3A:CF:E3:C6:12:19:C6:06:04:EC:79:9A:D3:4C:05:4D:F4:44:DC:FD","sha256":"1B:39:49:80:66:B8:BD:A6:D1:C2:13:8C:82:36:D6:CC:D0:D2:14:D7:55:4A:E1:BA:84:2A:CB:1E:B1:8B:90:D5"}}},"request":{"raw":"GET /stat?ld=1\u0026ld_time=0.8\u0026wallets=\u0026id=274lp43n HTTP/1.1\r\nHost: evm.airdrop20.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://evm.airdrop20.click/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: ch=1786998081; id=274lp43n; chid=\"\"; chsol=087cf07d33f35e99f9e754735a560631\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 17 Aug 2026 20:21:23 GMT\r\ncontent-type: application/json; charset=utf-8\r\nserver-timing: cfExtPri\r\npriority: u=4,i=?0\r\naccess-control-allow-origin: *\r\ncache-control: no-store\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fdv%2BIF9OVskifYUPiqRZHXfUfUQYanl384QtGZTIbyCdAIVK0fnlFd7mRSuzSBxEYHVlozEwDI4lkegobgGhwHdygFZpxRA8bAZMiINuweTV8pY5uI6Mdy6w3QY1QFnxK%2F0empI5\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2cb62851ebdb28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2,"size_decoded":651,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"99914b932bd37a50b983c5e7c90ae93b","sha1":"bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f","sha256":"44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a","sha512":"27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd","ssdeep":"","tlshash":"c7100000000000c00000000c00000000000000000c0000000000000000000000000000","first_seen":"2023-03-07T01:15:26Z","last_seen":"2026-08-23T14:22:25.167502Z","times_seen":765060,"resource_available":true,"data":null}},"time_used":86,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":86,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-17","alert":"Sinkholed","trigger":"evm.airdrop20.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-17","alert":"Phishing Block","trigger":"evm.airdrop20.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zen.claims/api/fp","fqdn":"zen.claims","domain":"zen.claims","tld":"claims"},"ip":{"addr":"172.67.218.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://evm.airdrop20.click/","date":"2026-08-17T20:21:31.907Z","timestamp":1786998091907,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zen.claims","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 14:24:48 GMT","end":"Sat, 26 Sep 2026 15:22:24 GMT"},"fingerprint":{"sha1":"E7:4D:AD:22:67:E0:E5:88:2C:ED:21:6C:9F:E4:D8:73:CB:3D:47:C8","sha256":"48:14:21:57:B6:65:54:B2:E8:E5:66:2C:C9:F1:89:85:5D:7E:1D:56:22:3B:5F:85:A2:25:D8:63:E1:D8:0E:86"}}},"request":{"raw":"OPTIONS /api/fp HTTP/1.1\r\nHost: zen.claims\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: x-worker-hint\r\nReferer: https://evm.airdrop20.click/\r\nOrigin: https://evm.airdrop20.click\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 204 \r\nserver: cloudflare\r\ndate: Mon, 17 Aug 2026 20:21:31 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: *\r\naccess-control-max-age: 86400\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=f7sOQmegPjQQYegcpkHR1DVL6Epdw78oasC4WqCN237J9jeWLl9e7ww5Gou5mtio%2FJIdPLx3dq9C4KXXpjqbQPek9hQ2l4YsQB0FRjZQUcNt8OftWFPVDPQ5eJZH\"}]}\r\ncf-ray: a2cb62ba6e86dfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":658,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-23T14:26:48.814208Z","times_seen":18056444,"resource_available":true,"data":null}},"time_used":77,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":77,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-17","alert":"Sinkholed","trigger":"zen.claims","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-17","alert":"Sinkholed","trigger":"zen.claims","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"esm.sh/node/process.mjs","fqdn":"esm.sh","domain":"esm.sh","tld":"sh"},"ip":{"addr":"104.26.14.209","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://w3connect.xyz/?host=https%3A%2F%2Fevm.airdrop20.click\u0026href=https%3A%2F%2Fevm.airdrop20.click%2F\u0026pid=9713e268acd3c6313b52e6ec7e4e5eea","date":"2026-08-17T20:21:32.320Z","timestamp":1786998092320,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"esm.sh","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 21 Jun 2026 04:25:37 GMT","end":"Sat, 19 Sep 2026 05:25:34 GMT"},"fingerprint":{"sha1":"06:01:9A:2D:10:55:51:3D:71:BF:F8:20:33:F8:71:A5:9E:90:2A:AB","sha256":"1B:0D:06:A9:0C:41:8A:5B:EE:63:99:62:63:72:3A:1C:48:69:DD:7C:A6:61:EB:03:67:80:79:9E:62:BA:EA:CC"}}},"request":{"raw":"GET /node/process.mjs HTTP/1.1\r\nHost: esm.sh\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://w3connect.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://esm.sh/@walletconnect/ethereum-provider@2.21.8?bundle-deps\u0026target=es2022\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=86400\r\npriority: u=3,i=?0\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\netag: W/\"v137_8\"\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\ndate: Mon, 17 Aug 2026 20:21:32 GMT\r\ncf-cache-status: HIT\r\nage: 15468\r\ncf-ray: a2cb62bcfd43712e-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7861,"size_decoded":3892,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (7860)","md5":"f8382a3858672b98c93fd61c13d21c2c","sha1":"07e4611887908eb9326935084618e4964fb84550","sha256":"79e7646e87709989f575ea4ce02e0877bc9303081567b1c0d412527917ae9e91","sha512":"a1609e8e33a2b7369169fe7dc1f9fd187c4b431e9c7428e4c3929587bff4701d937b8df219b3dfa2bdc3f6b38f63afecc0d9025a6ec8901d91a5e123179ca5cf","ssdeep":"192:kFmwaFSK/rVyQhxkSULErvtAAQic6NR03ao8Yk33q:5wzEr8irU8Yk3a","tlshash":"a2f1d7dce29a743302c1eadaf0bb0123eaf407c855245650ea0bdcc736219e5a5b1f75","first_seen":"2025-10-29T19:17:04.329787Z","last_seen":"2026-08-23T02:38:08.849261Z","times_seen":741,"resource_available":true,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"esm.sh/node/events.mjs","fqdn":"esm.sh","domain":"esm.sh","tld":"sh"},"ip":{"addr":"104.26.14.209","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://usdpad.org/?host=https%3A%2F%2Fevm.airdrop20.click\u0026href=https%3A%2F%2Fevm.airdrop20.click%2F\u0026pid=9713e268acd3c6313b52e6ec7e4e5eea","date":"2026-08-17T20:21:32.426Z","timestamp":1786998092426,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"esm.sh","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 21 Jun 2026 04:25:37 GMT","end":"Sat, 19 Sep 2026 05:25:34 GMT"},"fingerprint":{"sha1":"06:01:9A:2D:10:55:51:3D:71:BF:F8:20:33:F8:71:A5:9E:90:2A:AB","sha256":"1B:0D:06:A9:0C:41:8A:5B:EE:63:99:62:63:72:3A:1C:48:69:DD:7C:A6:61:EB:03:67:80:79:9E:62:BA:EA:CC"}}},"request":{"raw":"GET /node/events.mjs HTTP/1.1\r\nHost: esm.sh\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://usdpad.org\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://esm.sh/@walletconnect/ethereum-provider@2.21.8?bundle-deps\u0026target=es2022\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=86400\r\npriority: u=3,i=?0\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\netag: W/\"v137_8\"\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\ndate: Mon, 17 Aug 2026 20:21:32 GMT\r\ncf-cache-status: HIT\r\nage: 36141\r\ncf-ray: a2cb62bdad50712e-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12122,"size_decoded":5175,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (9385)","md5":"acd05dc333042e32473eb39c7700cc9b","sha1":"a9ff738706c3e6ab2be579d296faecd67e438f47","sha256":"4c6150b88c1444aa1fe9331013e3f37eda9836206f629f7f3ae8f3743dd90fa8","sha512":"658a1eebb2727249df13bfd7f76d1bd38921ebc2dff63b8c1bf779973bd10483b7138649e7168a1ea7305c88542876be92a52b1da915331806436b0455f9a6a5","ssdeep":"96:yIJAOQoXa9RQ9bKVXQ6Z9cBBEMPg19H+MyLfLYCGZjiSl1YYS/07jfofxSXR261G:yyiZInEGaGLYCKt70WRRD7EE00WZ","tlshash":"404286ccb386b87113def3af707b4146f23459e0685c0408ba75fcf6292a98995a6f71","first_seen":"2025-10-29T19:17:04.387887Z","last_seen":"2026-08-23T02:38:08.815258Z","times_seen":741,"resource_available":true,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"esm.sh/node/async_hooks.mjs","fqdn":"esm.sh","domain":"esm.sh","tld":"sh"},"ip":{"addr":"104.26.14.209","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://usdpad.org/?host=https%3A%2F%2Fevm.airdrop20.click\u0026href=https%3A%2F%2Fevm.airdrop20.click%2F\u0026pid=9713e268acd3c6313b52e6ec7e4e5eea","date":"2026-08-17T20:21:32.470Z","timestamp":1786998092470,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"esm.sh","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 21 Jun 2026 04:25:37 GMT","end":"Sat, 19 Sep 2026 05:25:34 GMT"},"fingerprint":{"sha1":"06:01:9A:2D:10:55:51:3D:71:BF:F8:20:33:F8:71:A5:9E:90:2A:AB","sha256":"1B:0D:06:A9:0C:41:8A:5B:EE:63:99:62:63:72:3A:1C:48:69:DD:7C:A6:61:EB:03:67:80:79:9E:62:BA:EA:CC"}}},"request":{"raw":"GET /node/async_hooks.mjs HTTP/1.1\r\nHost: esm.sh\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://usdpad.org\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://esm.sh/node/events.mjs\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=86400\r\npriority: u=3,i=?0\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\netag: W/\"v137_8\"\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\ndate: Mon, 17 Aug 2026 20:21:32 GMT\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\nage: 36141\r\ncf-cache-status: HIT\r\ncf-ray: a2cb62bded56712e-OSL\r\ncontent-length: 1531\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2938,"size_decoded":1942,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (2937)","md5":"f78e3393d375d2bd75ee22e5bf0f3635","sha1":"2b6d82e3a17d6f4596fb2f6df083fcf498edaa99","sha256":"b7862dbfba8bbbca956f19e4e08280b529e4b27468779775a9093aef8c92dc1d","sha512":"280686efdbef542165cff092b795274efb660689426f8f15523b3478d967cc6bea03a0d7a66400552278a777655231d7e9ad2cba1bb4eb0a45f249e76102258d","ssdeep":"","tlshash":"3b515489a78bf9685b9eb176413a0103e10a0ec89d1c722cf049e9ee695e10c8774fb5","first_seen":"2025-10-29T19:17:04.32262Z","last_seen":"2026-08-23T02:38:08.822789Z","times_seen":739,"resource_available":true,"data":null}},"time_used":56,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":56,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"evm.airdrop20.click/stat?ping=10.0\u0026id=274lp43n","fqdn":"evm.airdrop20.click","domain":"airdrop20.click","tld":"click"},"ip":{"addr":"104.21.91.8","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://evm.airdrop20.click/","date":"2026-08-17T20:21:32.603Z","timestamp":1786998092603,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"airdrop20.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 05:48:59 GMT","end":"Sun, 08 Nov 2026 06:47:45 GMT"},"fingerprint":{"sha1":"3A:CF:E3:C6:12:19:C6:06:04:EC:79:9A:D3:4C:05:4D:F4:44:DC:FD","sha256":"1B:39:49:80:66:B8:BD:A6:D1:C2:13:8C:82:36:D6:CC:D0:D2:14:D7:55:4A:E1:BA:84:2A:CB:1E:B1:8B:90:D5"}}},"request":{"raw":"GET /stat?ping=10.0\u0026id=274lp43n HTTP/1.1\r\nHost: evm.airdrop20.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://evm.airdrop20.click/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: ch=1786998081; id=274lp43n; chid=\"\"; chsol=087cf07d33f35e99f9e754735a560631\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 17 Aug 2026 20:21:32 GMT\r\ncontent-type: application/json; charset=utf-8\r\nserver-timing: cfExtPri\r\npriority: u=4,i=?0\r\naccess-control-allow-origin: *\r\ncache-control: no-store\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=G7ZBZa1FgwQMamAWyvHQr4vRlPW5jr2R7ZvhmvkaA9ujBpM9wtRrx53z5qI9%2FJdlFComeAxd83lWmmuXTH0SR8GEio%2Bcz4EXPJo%2F6PyiT%2BTxiO1tP8o0nHISlVmf75cNvF19ETEz\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2cb62becbfeb28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2,"size_decoded":655,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"99914b932bd37a50b983c5e7c90ae93b","sha1":"bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f","sha256":"44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a","sha512":"27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd","ssdeep":"","tlshash":"c7100000000000c00000000c00000000000000000c0000000000000000000000000000","first_seen":"2023-03-07T01:15:26Z","last_seen":"2026-08-23T14:22:25.167502Z","times_seen":765060,"resource_available":true,"data":null}},"time_used":99,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":99,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-17","alert":"Phishing Block","trigger":"evm.airdrop20.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-17","alert":"Sinkholed","trigger":"evm.airdrop20.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bsc-dataseed2.bnbchain.org/","fqdn":"bsc-dataseed2.bnbchain.org","domain":"bnbchain.org","tld":"org"},"ip":{"addr":"52.49.2.151","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://evm.airdrop20.click/","date":"2026-08-17T20:21:23.057Z","timestamp":1786998083057,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"bnbchain.org","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Fri, 10 Apr 2026 00:00:00 GMT","end":"Sat, 24 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"AD:51:35:3C:6A:BD:00:80:7E:C2:BB:61:75:B1:0A:D8:28:8C:62:89","sha256":"3E:F5:AA:B6:AF:7A:6B:4C:8C:99:02:80:C8:8D:C7:A8:56:7D:40:10:01:15:9D:68:B3:94:4D:05:F5:41:C3:94"}}},"request":{"raw":"OPTIONS / HTTP/1.1\r\nHost: bsc-dataseed2.bnbchain.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://evm.airdrop20.click/\r\nOrigin: https://evm.airdrop20.click\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 \r\ndate: Mon, 17 Aug 2026 20:21:23 GMT\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: POST, GET, OPTIONS\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 600\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubdomains\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":458,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-23T14:26:48.814208Z","times_seen":18056444,"resource_available":true,"data":null}},"time_used":183,"timings":{"blocked":-1,"dns":22,"connect":31,"send":0,"wait":32,"receive":0,"ssl":97},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zen.claims/x7k/gc","fqdn":"zen.claims","domain":"zen.claims","tld":"claims"},"ip":{"addr":"172.67.218.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://evm.airdrop20.click/","date":"2026-08-17T20:21:23.319Z","timestamp":1786998083319,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zen.claims","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 14:24:48 GMT","end":"Sat, 26 Sep 2026 15:22:24 GMT"},"fingerprint":{"sha1":"E7:4D:AD:22:67:E0:E5:88:2C:ED:21:6C:9F:E4:D8:73:CB:3D:47:C8","sha256":"48:14:21:57:B6:65:54:B2:E8:E5:66:2C:C9:F1:89:85:5D:7E:1D:56:22:3B:5F:85:A2:25:D8:63:E1:D8:0E:86"}}},"request":{"raw":"OPTIONS /x7k/gc HTTP/1.1\r\nHost: zen.claims\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://evm.airdrop20.click/\r\nOrigin: https://evm.airdrop20.click\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 \r\ndate: Mon, 17 Aug 2026 20:21:23 GMT\r\nserver: cloudflare\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: *\r\naccess-control-max-age: 86400\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZLs5lukTWZnGmeEbTtoq4xDIXgZW46S7UD63Tc5J7ck%2BeKuls1KQMpFAn2xod0rY6IcSITxSr5QnEmrL8scwFGq94DwLGLvJyvLcaHRvFxtEKNLiNsU0VZmTAu2x\"}]}\r\ncf-ray: a2cb62855842c272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":633,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-23T14:26:48.814208Z","times_seen":18056444,"resource_available":true,"data":null}},"time_used":152,"timings":{"blocked":0,"dns":82,"connect":1,"send":0,"wait":55,"receive":0,"ssl":14},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-17","alert":"Sinkholed","trigger":"zen.claims","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-17","alert":"Sinkholed","trigger":"zen.claims","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"esm.sh/@walletconnect/ethereum-provider@2.21.8?bundle-deps\u0026target=es2022","fqdn":"esm.sh","domain":"esm.sh","tld":"sh"},"ip":{"addr":"104.26.14.209","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://usdpad.org/?host=https%3A%2F%2Fevm.airdrop20.click\u0026href=https%3A%2F%2Fevm.airdrop20.click%2F\u0026pid=9713e268acd3c6313b52e6ec7e4e5eea","date":"2026-08-17T20:21:32.399Z","timestamp":1786998092399,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"esm.sh","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 21 Jun 2026 04:25:37 GMT","end":"Sat, 19 Sep 2026 05:25:34 GMT"},"fingerprint":{"sha1":"06:01:9A:2D:10:55:51:3D:71:BF:F8:20:33:F8:71:A5:9E:90:2A:AB","sha256":"1B:0D:06:A9:0C:41:8A:5B:EE:63:99:62:63:72:3A:1C:48:69:DD:7C:A6:61:EB:03:67:80:79:9E:62:BA:EA:CC"}}},"request":{"raw":"GET /@walletconnect/ethereum-provider@2.21.8?bundle-deps\u0026target=es2022 HTTP/1.1\r\nHost: esm.sh\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://usdpad.org\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://usdpad.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: X-ESM-Path, X-TypeScript-Types\r\ncache-control: public, max-age=31536000, immutable\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: cloudflare\r\nx-esm-path: /@walletconnect/ethereum-provider@2.21.8/es2022/ethereum-provider.bundle.mjs\r\nx-typescript-types: https://esm.sh/@walletconnect/ethereum-provider@2.21.8/dist/types/index.d.ts\r\ndate: Mon, 17 Aug 2026 20:21:32 GMT\r\ncontent-encoding: br\r\nage: 556792\r\nlast-modified: Sun, 16 Aug 2026 19:57:27 GMT\r\ncf-ray: a2cb62bd7d4b712e-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":335,"size_decoded":769,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text","md5":"7ca4c1770e526303c8b96ec681271e67","sha1":"040ceca3f1799eb067ee3e0c5c3f97e8d48e8492","sha256":"9b69c924617de012e3a6252d715e48202d0bd07eccae08190bc9d0565405d1dd","sha512":"0180a2c052ce5feedb836fc6a1e5d82f2edaa25574f0951b679029a28ca6c0e4098c0fde61858a88c4dc4fb2ee2ac196f3f681864fab71b3d205a0baf010c4f3","ssdeep":"","tlshash":"13e0867181174b8423b80da5ad81af3bebab1758a945215c334ec633f517654c9441f7","first_seen":"2026-08-03T07:57:51.315431Z","last_seen":"2026-08-20T13:42:04.124354Z","times_seen":106,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"esm.sh/node/buffer.mjs","fqdn":"esm.sh","domain":"esm.sh","tld":"sh"},"ip":{"addr":"104.26.14.209","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://usdpad.org/?host=https%3A%2F%2Fevm.airdrop20.click\u0026href=https%3A%2F%2Fevm.airdrop20.click%2F\u0026pid=9713e268acd3c6313b52e6ec7e4e5eea","date":"2026-08-17T20:21:32.423Z","timestamp":1786998092423,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"esm.sh","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 21 Jun 2026 04:25:37 GMT","end":"Sat, 19 Sep 2026 05:25:34 GMT"},"fingerprint":{"sha1":"06:01:9A:2D:10:55:51:3D:71:BF:F8:20:33:F8:71:A5:9E:90:2A:AB","sha256":"1B:0D:06:A9:0C:41:8A:5B:EE:63:99:62:63:72:3A:1C:48:69:DD:7C:A6:61:EB:03:67:80:79:9E:62:BA:EA:CC"}}},"request":{"raw":"GET /node/buffer.mjs HTTP/1.1\r\nHost: esm.sh\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://usdpad.org\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://esm.sh/@walletconnect/ethereum-provider@2.21.8?bundle-deps\u0026target=es2022\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=86400\r\npriority: u=3,i=?0\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\netag: W/\"v137_8\"\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\ndate: Mon, 17 Aug 2026 20:21:32 GMT\r\ncf-cache-status: HIT\r\nage: 36141\r\ncf-ray: a2cb62bdad4f712e-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":28845,"size_decoded":10674,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (28468)","md5":"39e6418dc1a8a38a7baf7cbf64e6bc9b","sha1":"036b9f42abe9026454886016987cdd479ce3f33c","sha256":"64fb61aa5f48644d685f9ceabedba60ea6b5d6ce03dac1943e863d00d9e574f3","sha512":"de01074341e2a0ad5d0b74108a593811ef91c72bd775fc2ab20f98c941fc4635f541fd7983f08cd93700d7f6f582c55b95fdfaed785258eef4f0b55322df151c","ssdeep":"384:f2ROO9YwKOX7MW/I55zmhYuC2rUV5w+c7LW+M444MMazyXDNcyO9+C9YDNqWRMzI:fKewKOX7MWwGzCrfTc7LW+bcp9a60","tlshash":"d3d2b694f795b032439e65a50057980ef2b8f928640d198cf6a0f5f728b59ce88eff74","first_seen":"2025-10-30T08:47:32.392454Z","last_seen":"2026-08-22T22:06:29.903138Z","times_seen":583,"resource_available":true,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"explorer-api.walletconnect.com/v3/wallets?projectId=9713e268acd3c6313b52e6ec7e4e5eea\u0026page=4\u0026entries=100","fqdn":"explorer-api.walletconnect.com","domain":"walletconnect.com","tld":"com"},"ip":{"addr":"172.66.147.126","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://evm.airdrop20.click/","date":"2026-08-17T20:21:32.028Z","timestamp":1786998092028,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"walletconnect.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 02 Aug 2026 09:21:35 GMT","end":"Sat, 31 Oct 2026 10:21:32 GMT"},"fingerprint":{"sha1":"2F:0B:9E:A7:63:A8:B6:83:0D:80:12:48:90:19:5E:70:3C:BA:E7:2B","sha256":"68:DA:70:B8:9C:22:69:29:9F:DD:81:28:74:BC:A9:6B:38:7E:E4:A0:54:C5:B2:2D:36:F8:A2:81:FF:3F:4B:51"}}},"request":{"raw":"GET /v3/wallets?projectId=9713e268acd3c6313b52e6ec7e4e5eea\u0026page=4\u0026entries=100 HTTP/1.1\r\nHost: explorer-api.walletconnect.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://evm.airdrop20.click/\r\nOrigin: https://evm.airdrop20.click\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 17 Aug 2026 20:21:32 GMT\r\npriority: u=4,i=?0\r\ncontent-type: application/json; charset=utf-8\r\nserver: cloudflare\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, s-maxage=86400\r\nx-robots-tag: noindex\r\ncontent-encoding: br\r\ncf-ray: a2cb62bb2985b4f3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":179135,"size_decoded":29126,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"27bc930768c51b2b44fc1825482f908c","sha1":"10078c3335739496052cacbdedd553da40df3b23","sha256":"689cb20bf878115aba8414d5ed9bc9524bf3931718bcf9cfce4007a7269f93cd","sha512":"a018d64443f8efc2f12f852221c688d75a9181c173d5e8d976a406d14775a043971f5f270ccbf00b5d5676e532acab721cd6a182aa51d4d9c961eeeaf5d3dfb2","ssdeep":"1536:i6+0ASzSzHu+/PwjEZhiEYZPCuTOReu8zos9bI4IUWsZxkkoyvunaKt:M9Ssu+gjEZhiEGPCu8eTWsMnaKt","tlshash":"ee04636e8b049e662fb25388d15cf9eca15ee117c9cd5ca2d2f1cf3440bc9f7215229a","first_seen":"2026-08-17T20:22:12.726833Z","last_seen":"2026-08-17T20:22:12.726833Z","times_seen":1,"resource_available":false,"data":null}},"time_used":115,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":107,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"esm.sh/@walletconnect/ethereum-provider@2.21.8?bundle-deps\u0026target=es2022","fqdn":"esm.sh","domain":"esm.sh","tld":"sh"},"ip":{"addr":"104.26.14.209","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://w3connect.xyz/?host=https%3A%2F%2Fevm.airdrop20.click\u0026href=https%3A%2F%2Fevm.airdrop20.click%2F\u0026pid=9713e268acd3c6313b52e6ec7e4e5eea","date":"2026-08-17T20:21:32.266Z","timestamp":1786998092266,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"esm.sh","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 21 Jun 2026 04:25:37 GMT","end":"Sat, 19 Sep 2026 05:25:34 GMT"},"fingerprint":{"sha1":"06:01:9A:2D:10:55:51:3D:71:BF:F8:20:33:F8:71:A5:9E:90:2A:AB","sha256":"1B:0D:06:A9:0C:41:8A:5B:EE:63:99:62:63:72:3A:1C:48:69:DD:7C:A6:61:EB:03:67:80:79:9E:62:BA:EA:CC"}}},"request":{"raw":"GET /@walletconnect/ethereum-provider@2.21.8?bundle-deps\u0026target=es2022 HTTP/1.1\r\nHost: esm.sh\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://w3connect.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://w3connect.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: X-ESM-Path, X-TypeScript-Types\r\ncache-control: public, max-age=31536000, immutable\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: cloudflare\r\nx-esm-path: /@walletconnect/ethereum-provider@2.21.8/es2022/ethereum-provider.bundle.mjs\r\nx-typescript-types: https://esm.sh/@walletconnect/ethereum-provider@2.21.8/dist/types/index.d.ts\r\ndate: Mon, 17 Aug 2026 20:21:32 GMT\r\ncontent-encoding: br\r\nage: 274876\r\nlast-modified: Sun, 16 Aug 2026 19:57:27 GMT\r\ncf-ray: a2cb62bcbd3e712e-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":335,"size_decoded":769,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text","md5":"7ca4c1770e526303c8b96ec681271e67","sha1":"040ceca3f1799eb067ee3e0c5c3f97e8d48e8492","sha256":"9b69c924617de012e3a6252d715e48202d0bd07eccae08190bc9d0565405d1dd","sha512":"0180a2c052ce5feedb836fc6a1e5d82f2edaa25574f0951b679029a28ca6c0e4098c0fde61858a88c4dc4fb2ee2ac196f3f681864fab71b3d205a0baf010c4f3","ssdeep":"","tlshash":"13e0867181174b8423b80da5ad81af3bebab1758a945215c334ec633f517654c9441f7","first_seen":"2026-08-03T07:57:51.315431Z","last_seen":"2026-08-20T13:42:04.124354Z","times_seen":106,"resource_available":true,"data":null}},"time_used":34,"timings":{"blocked":0,"dns":4,"connect":11,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"wss","addr":"wss://relay.walletconnect.org/?auth=eyJhbGciOiJFZERTQSIsInR5cCI6IkpXVCJ9.eyJpc3MiOiJkaWQ6a2V5Ono2TWtnSDR1RllVc2c5eHduNTZrWGFOWnFHOVBEUm9hYkV3RXlodVM2anNzNG9QVSIsInN1YiI6IjFlODhhNzA0M2VmMTZjNTUzYzI5OWJkODVlZjdiODczNzRkM2JiNzI0MmMyY2JlZjM2YWNjMDZiNjVkNjY4YmYiLCJhdWQiOiJ3c3M6Ly9yZWxheS53YWxsZXRjb25uZWN0Lm9yZyIsImlhdCI6MTc4Njk5ODA5MiwiZXhwIjoxNzg3MDg0NDkyfQ.VHhWaG79xnH3QdMEvG9z4VcNf2zqkDh9rPpJlFkOiD7JAwcdTJSThGYiaELoGkQzzY10z4Cg0yLh82QwmXddDg\u0026projectId=9713e268acd3c6313b52e6ec7e4e5eea\u0026ua=wc-2%2Fjs-2.21.8%2Fwindows10-firefox-134.0.0%2Fnode\u0026useOnCloseEvent=true","fqdn":"relay.walletconnect.org","domain":"walletconnect.org","tld":"org"},"ip":{"addr":"18.196.230.0","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://usdpad.org/?host=https%3A%2F%2Fevm.airdrop20.click\u0026href=https%3A%2F%2Fevm.airdrop20.click%2F\u0026pid=9713e268acd3c6313b52e6ec7e4e5eea","date":"2026-08-17T20:21:32.811Z","timestamp":1786998092811,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"relay.reown.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Sun, 25 Jan 2026 00:00:00 GMT","end":"Tue, 23 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"90:24:50:19:3B:DA:52:35:62:2B:85:B8:D3:E7:0A:03:24:F8:84:7E","sha256":"A4:45:7F:C8:5C:09:EA:D9:34:3C:56:81:67:1A:5F:6A:3A:C0:13:7B:5E:4F:C5:F9:06:CE:FD:53:A3:9B:88:77"}}},"request":{"raw":"GET /?auth=eyJhbGciOiJFZERTQSIsInR5cCI6IkpXVCJ9.eyJpc3MiOiJkaWQ6a2V5Ono2TWtnSDR1RllVc2c5eHduNTZrWGFOWnFHOVBEUm9hYkV3RXlodVM2anNzNG9QVSIsInN1YiI6IjFlODhhNzA0M2VmMTZjNTUzYzI5OWJkODVlZjdiODczNzRkM2JiNzI0MmMyY2JlZjM2YWNjMDZiNjVkNjY4YmYiLCJhdWQiOiJ3c3M6Ly9yZWxheS53YWxsZXRjb25uZWN0Lm9yZyIsImlhdCI6MTc4Njk5ODA5MiwiZXhwIjoxNzg3MDg0NDkyfQ.VHhWaG79xnH3QdMEvG9z4VcNf2zqkDh9rPpJlFkOiD7JAwcdTJSThGYiaELoGkQzzY10z4Cg0yLh82QwmXddDg\u0026projectId=9713e268acd3c6313b52e6ec7e4e5eea\u0026ua=wc-2%2Fjs-2.21.8%2Fwindows10-firefox-134.0.0%2Fnode\u0026useOnCloseEvent=true HTTP/1.1\r\nHost: relay.walletconnect.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-WebSocket-Version: 13\r\nOrigin: https://usdpad.org\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: qke0CKb4FfFR9gWASIF6ng==\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: Upgrade\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 Switching Protocols\r\nDate: Mon, 17 Aug 2026 20:21:32 GMT\r\nConnection: upgrade\r\nupgrade: websocket\r\nsec-websocket-accept: nTUj5Ki+31Szx0drDDPkTo2Se34=\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"Switching Protocols","fingerprints":[{"name":"WebSocket","description":"WebSocket is a communication protocol that provides full-duplex communication channels over a single, long-lived connection, enabling interactive communication between web browsers and servers.","website":"https://en.wikipedia.org/wiki/WebSocket","common_platform_enumeration":"","icon":"WebSocket.svg","categories":["Miscellaneous"]}],"data":{"size":0,"size_decoded":166,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-23T14:26:48.814208Z","times_seen":18056444,"resource_available":true,"data":null}},"time_used":251,"timings":{"blocked":0,"dns":93,"connect":110,"send":0,"wait":24,"receive":0,"ssl":24},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"evm.airdrop20.click/evm/evmairdrop/js/app.js","fqdn":"evm.airdrop20.click","domain":"airdrop20.click","tld":"click"},"ip":{"addr":"104.21.91.8","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://evm.airdrop20.click/","date":"2026-08-17T20:21:22.625Z","timestamp":1786998082625,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"airdrop20.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 05:48:59 GMT","end":"Sun, 08 Nov 2026 06:47:45 GMT"},"fingerprint":{"sha1":"3A:CF:E3:C6:12:19:C6:06:04:EC:79:9A:D3:4C:05:4D:F4:44:DC:FD","sha256":"1B:39:49:80:66:B8:BD:A6:D1:C2:13:8C:82:36:D6:CC:D0:D2:14:D7:55:4A:E1:BA:84:2A:CB:1E:B1:8B:90:D5"}}},"request":{"raw":"GET /evm/evmairdrop/js/app.js HTTP/1.1\r\nHost: evm.airdrop20.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://evm.airdrop20.click/\r\nCookie: ch=1786998081; id=274lp43n; chid=\"\"; chsol=087cf07d33f35e99f9e754735a560631\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 17 Aug 2026 20:21:22 GMT\r\ncontent-type: application/javascript\r\netag: W/\"6a5de37b-9ee9\"\r\nlast-modified: Mon, 20 Jul 2026 08:59:39 GMT\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hdVKkuVZ%2BLLU5rhQHV3m%2BSmGlef5kVdQ7ONegKbUWEv3L5z1JwNKgpHQzaRRljmrtUXtAoEOS3OwZ2VXE%2BfFEKwQ6%2Bf3rtLhwPwyGxJuDd%2Bubk%2F7LuvdCZb%2F0VhFU8SZiT3MbYfi\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\ncf-ray: a2cb62806d5cb28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":40681,"size_decoded":11771,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (613)","md5":"0a803d00ecbb43bfd2d1a44fcea14aee","sha1":"66dfeb6260dc01367b13b77ba251368a48a2840d","sha256":"2837225aea99a89b881a6549c1954f1b59d90ff87b638974411de7e20ea7e658","sha512":"3939d32adbf71a8c339b8f1738b4a77a0652029c630e057aac1d599e2dc948b5854d44a171eb0cff162268d911b08d768a6afe82af5d70c8d8c4b7bccea8c9d1","ssdeep":"768:WXYaasHF6K1D9gbO03LZb0sqvGqLjgbKLz:WX/68ybOgt9qbjNn","tlshash":"d203c72d7ae31126a233357a8b9f91a83934a403540dd9253eecd7805fe09255ebbfdc","first_seen":"2026-07-21T08:06:09.067093Z","last_seen":"2026-08-17T20:22:12.729103Z","times_seen":55,"resource_available":true,"data":null}},"time_used":119,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":93,"receive":26,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-17","alert":"Sinkholed","trigger":"evm.airdrop20.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-17","alert":"Phishing Block","trigger":"evm.airdrop20.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"w3connect.xyz/?host=https%3A%2F%2Fevm.airdrop20.click\u0026href=https%3A%2F%2Fevm.airdrop20.click%2F\u0026pid=9713e268acd3c6313b52e6ec7e4e5eea","fqdn":"w3connect.xyz","domain":"w3connect.xyz","tld":"xyz"},"ip":{"addr":"104.21.87.205","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://evm.airdrop20.click/","date":"2026-08-17T20:21:31.726Z","timestamp":1786998091726,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"w3connect.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 12 Aug 2026 12:49:15 GMT","end":"Tue, 10 Nov 2026 13:44:15 GMT"},"fingerprint":{"sha1":"AF:38:4C:CC:A7:8C:E7:23:DF:A3:4F:7B:37:62:39:B7:50:B2:6F:E3","sha256":"53:91:0B:3A:5F:55:C6:5E:BF:B6:B3:F7:BA:0A:6F:7B:28:F9:21:34:E9:4B:81:F4:6C:93:3B:CB:D6:A6:D4:0D"}}},"request":{"raw":"GET /?host=https%3A%2F%2Fevm.airdrop20.click\u0026href=https%3A%2F%2Fevm.airdrop20.click%2F\u0026pid=9713e268acd3c6313b52e6ec7e4e5eea HTTP/1.1\r\nHost: w3connect.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://evm.airdrop20.click/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 17 Aug 2026 20:21:31 GMT\r\ncontent-type: text/html\r\nlast-modified: Tue, 11 Aug 2026 10:24:23 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LiKKTVzGCp9A3K0vUfaalfPxTC7L8wO4UIuOEfHgRVS5pj%2BC%2B74Wkv54LkGom%2FNDKExL50kjxJRTVGMTF18vhqLdSlZQooQMnSLCupuWQLdWTeYDCYomySUbGMKHDakj\"}]}\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: zstd\r\ncf-ray: a2cb62b9ff5cb1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1086,"size_decoded":1155,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"8244776a12c3c828ed236b22ff3821d6","sha1":"3cbebf83ff294ef58cb8d1417e6050769b0cf68c","sha256":"d30bd5ac130ed30a6c2b414db38a9a9ec64ae9f5ce45e550af7a93ba7dd91c2e","sha512":"552339a21b32311e05c8d5d973974d0591ccb09635cc26eea20e14293b33464b79d5ac052b5f6502d49ae62a3317391d865c53440772671c43e71a781a374c72","ssdeep":"","tlshash":"d0118e450d57407115b38a963b5f7e05a767924640c4c5002ffae2b7af53e4b8805ad8","first_seen":"2026-08-05T23:56:49.814782Z","last_seen":"2026-08-18T18:59:49.354556Z","times_seen":42,"resource_available":false,"data":null}},"time_used":249,"timings":{"blocked":0,"dns":93,"connect":17,"send":0,"wait":139,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}
