{"report_id":"7ec0adb8-95ba-4c5f-af7d-914f47995cbf","version":6,"status":"done","tags":[],"date":"2025-09-05T14:30:40Z","url":{"schema":"http","addr":"airdrop-linea.xyz/","fqdn":"airdrop-linea.xyz","domain":"airdrop-linea.xyz","tld":"xyz"},"ip":{"addr":"172.67.182.157","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"airdrop-linea.xyz/","fqdn":"airdrop-linea.xyz","domain":"airdrop-linea.xyz","tld":"xyz"},"title":"Linea Hub | Airdrop"},"submit":{"url":{"schema":"http","addr":"airdrop-linea.xyz/","fqdn":"airdrop-linea.xyz","domain":"airdrop-linea.xyz","tld":"xyz"},"ip":{"addr":"172.67.182.157","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null,"user":{"user_id":"akbkyowd9geqr98"}},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-10-10T14:30:40Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-05","alert":"Sinkholed","trigger":"airdrop-linea.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-05","alert":"Sinkholed","trigger":"1.1.1.1","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"airdrop-linea.xyz","ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-09-03","domain_rank":0,"first_seen":"2025-09-05T14:30:41.062735Z","last_seen":"2025-09-05T14:30:41.062735Z","alert_count":19,"request_count":19,"received_data":4549498,"sent_data":8747,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Contentful","description":"Contentful is an API-first content management platform to create, manage and publish content on any digital channel.","website":"https://www.contentful.com","common_platform_enumeration":"","icon":"Contentful.svg","categories":["CMS"]}]},{"fqdn":"cdn.jsdelivr.net","ip":{"addr":"151.101.193.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2012-05-16","domain_rank":1678,"first_seen":"2012-09-30T00:15:09Z","last_seen":"2025-09-03T15:27:27.695589Z","alert_count":0,"request_count":1,"received_data":760963,"sent_data":446,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"1.1.1.1","ip":{"addr":"1.1.1.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2012-05-30T07:40:31Z","last_seen":"2019-03-28T08:40:04Z","alert_count":1,"request_count":1,"received_data":585,"sent_data":442,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":null}],"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/ethers@5.7.2/dist/ethers.umd.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.193.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"71f8c498e792c6179d4e2840228f777a","sha1":"b651545587f6257345dc3de9ddaa444b10dedf3e","sha256":"a66293a6a2bb4dee061a68612be0be3c5c0ab7e4068ab8d98a4a357baf664c73","sha512":"14371563e83bbdce425c035bad34a0d4ae6a2f2ae20ac183602134d8b8b5b5711874d40fbcb3c7344fab4f63237a2f0dedf65b7b458b870dbb8f64ab191a5d32","ssdeep":"12288:TfamYTKkkAJs8P+H8Xb2F/nNuwEYtnob6qQr:TfjkhPaNnN9EYtwo","tlshash":"35f43b80b3b1b0b583c729a4143f6046f63af46a505840a8f659faf279f9d4c957bb3c","size":760171,"data":"","first_seen":"2023-03-13T00:48:53Z","last_seen":"2026-08-16T22:48:21.134989Z","times_seen":3811,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"airdrop-linea.xyz/","fqdn":"airdrop-linea.xyz","domain":"airdrop-linea.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"f68e784a0312a878ed45aac4ceb8d1a6","sha1":"52f4c53a1debbd31d7282cbe64d6d5ad56cf078c","sha256":"cd36a991a7d553482798d4a9d5db7b10fd90e1ef140d60bf0f9ae7e936107123","sha512":"234bc9dac62b99288008582c53eb60d60a6650c10c05720454f6aa274a9e61743ca76268f64af3fe9b0f3d178bcb8855d63431d05ba940da9fc6732dd36ca491","ssdeep":"","tlshash":"37e02b286f6651f926b33595c71f7280e86000735042c801fe1cf64a4f80f1938b0fc9","size":334,"data":"","first_seen":"2025-07-21T04:20:59.807781Z","last_seen":"2026-06-04T04:08:18.207034Z","times_seen":158,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"airdrop-linea.xyz/main.js","fqdn":"airdrop-linea.xyz","domain":"airdrop-linea.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d58e3e0470d2eba9050a07d2b40218a8","sha1":"56f28ae58ad3e7ca1047eeebe5c3551f930fe920","sha256":"c3d3c7121bd7e684caafbd617266b26f3ae12e03e4e3428657ae1a45c8e0affe","sha512":"a61e7c89206f902b5d41907c074c93934a3541b3c6b084003cbc76b2bd3feb03584e05602a4f05e10711b999b66d64a0ec0cc6e462fd625c10d9f49ae85e5e9c","ssdeep":"6144:Yc7cWYpyQm+kvBcXOvGUpd+j3hKUNoabgxYEPi0PcupxJo3OQBkc+Fk:VB1G64oJIkI","tlshash":"1d44e85d2b83db27bb628705903b9b7d970946685fdc3dc8b280a094a1545ea7cfb3f0","size":258098,"data":"","first_seen":"2025-09-03T17:44:20.811392Z","last_seen":"2025-09-07T16:26:07.3536Z","times_seen":16,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"airdrop-linea.xyz/","fqdn":"airdrop-linea.xyz","domain":"airdrop-linea.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"9e0f768d47980a45dc74948f95e6ab8a","sha1":"6a22126ad7579c789ef6bf00c42bf6eb6c7f3461","sha256":"c5976fbca4176b338a59268bf4b3117ae574dc8c5f9b62806728451c3c6f1162","sha512":"4012956e49562f8db4014cf18338b81d0d8d4a50a7bf74546eb37a19e7561d4cca30f0725164f98d6db24e16176e432bb9eee2e55f7fe5b3842f22df0ea2474a","ssdeep":"","tlshash":"bcc0120a7478667a549e7c7d0c4f08ca7e378812620849c598edcc587fb1f6946a584c","size":186,"data":"","first_seen":"2025-06-21T01:03:38.393734Z","last_seen":"2025-09-05T14:30:44.622271Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"airdrop-linea.xyz/0a996570e22eee0ad3cb61973905faaade9b07ff.svg","fqdn":"airdrop-linea.xyz","domain":"airdrop-linea.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://airdrop-linea.xyz/","date":"2025-09-05T14:30:17.619Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"airdrop-linea.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Sep 2025 10:39:31 GMT","end":"Tue, 02 Dec 2025 11:36:54 GMT"},"fingerprint":{"sha1":"72:61:41:BB:F7:58:E3:48:87:6D:57:6E:7F:1B:99:5F:06:F5:D3:02","sha256":"65:8D:F0:13:49:D3:77:AE:53:4A:B6:CE:21:CE:4C:0A:37:3F:1D:C3:E0:3D:D8:44:D4:2D:4C:45:EB:EE:12:01"}}},"request":{"raw":"GET /0a996570e22eee0ad3cb61973905faaade9b07ff.svg HTTP/1.1\r\nHost: airdrop-linea.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://airdrop-linea.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 05 Sep 2025 14:30:17 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Wed, 03 Sep 2025 12:06:47 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TlE4%2F7rvg3Nd3ZD%2F2%2Bxi%2Bx6ODbqfpPf0bk5FzTlX2PibmJNsJ3fhunwQOBRIpzfMbgoDFtVdArBu4eQB0CD%2BiJjKGhfxrORR2nCvDTaC1g%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\netag: W/\"2df-63de47066f2c8\"\r\ncontent-encoding: br\r\ncf-ray: 97a66c7809050b06-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":735,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"ea968ce8e697455a23ff17936cf17de9","sha1":"0a996570e22eee0ad3cb61973905faaade9b07ff","sha256":"d4b0c630e8cdf4c305fb28961e7f1f2a3fedea6a4e726231509dc438ab2fc01d","sha512":"f8aba8738180031ce26bcda69429d907ee63bdeb25497e3e59335d746f597f41240de1d7e9020e4c46dcda9fd1bb3886f2e938b8df14fa9a7433591da36af7ab","ssdeep":"","tlshash":"340168f7c9fae2c8c24f9307ace2309ec497144103148ed98cf1aa91cee2ce45b15c50","first_seen":"2025-07-31T08:00:00.403588Z","last_seen":"2026-08-08T05:54:57.536106Z","times_seen":33,"resource_available":false,"data":null}},"time_used":162,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":162,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-05","alert":"Sinkholed","trigger":"airdrop-linea.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"airdrop-linea.xyz/modals.js","fqdn":"airdrop-linea.xyz","domain":"airdrop-linea.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://airdrop-linea.xyz/","date":"2025-09-05T14:30:18.322Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"airdrop-linea.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Sep 2025 10:39:31 GMT","end":"Tue, 02 Dec 2025 11:36:54 GMT"},"fingerprint":{"sha1":"72:61:41:BB:F7:58:E3:48:87:6D:57:6E:7F:1B:99:5F:06:F5:D3:02","sha256":"65:8D:F0:13:49:D3:77:AE:53:4A:B6:CE:21:CE:4C:0A:37:3F:1D:C3:E0:3D:D8:44:D4:2D:4C:45:EB:EE:12:01"}}},"request":{"raw":"GET /modals.js HTTP/1.1\r\nHost: airdrop-linea.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://airdrop-linea.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 05 Sep 2025 14:30:18 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 7497\r\nserver: cloudflare\r\nlast-modified: Wed, 03 Sep 2025 12:06:47 GMT\r\netag: \"ce61-63de47066eee0-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=T9sdtB3zvFDJYfOh%2BON%2FJJpi6yaTibC1FBIzRp7wUe4MxAaSpE0sOoA%2BZHTzRMyf2FvqwyPD%2FRhnpLiAuplXSUg6KcqwoR%2F%2Bm%2F9jztD47g%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 97a66c7c7c520b06-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":52833,"size_decoded":0,"mime_type":"text/javascript","magic":"Unicode text, UTF-8 text, with very long lines (52831), with no line terminators","md5":"ecbc5043a1e25f2bd5bbd6e3c3be49f0","sha1":"d66eb695679871221c52958d94029c6358b7613d","sha256":"6d0c2c8d032982e9a86a1bed14f709911058b6b693abb5d46335a0106c12c411","sha512":"38b9aedf74859ade1e5445634b338f560c4d0520ab126de202ad98942bc0f34e740b93c7123a3bc53dcdded31944c174ad06bf1ca006e137cb4e06a949e86088","ssdeep":"768:ywjvL/eQ0ae2vBKRDpoKvTQv4n59+Y44U7kFlaoGHv5:ywz2n59J4inM5","tlshash":"943311071cbe31361daf0fa3b7cc1a1b4e2eb351e612aaee71bd1446438bd74c5a5618","first_seen":"2025-07-20T10:23:41.460008Z","last_seen":"2026-08-10T20:36:38.765424Z","times_seen":755,"resource_available":true,"data":null}},"time_used":202,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":201,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-05","alert":"Sinkholed","trigger":"airdrop-linea.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"airdrop-linea.xyz/main.js","fqdn":"airdrop-linea.xyz","domain":"airdrop-linea.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://airdrop-linea.xyz/","date":"2025-09-05T14:30:17.594Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"airdrop-linea.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Sep 2025 10:39:31 GMT","end":"Tue, 02 Dec 2025 11:36:54 GMT"},"fingerprint":{"sha1":"72:61:41:BB:F7:58:E3:48:87:6D:57:6E:7F:1B:99:5F:06:F5:D3:02","sha256":"65:8D:F0:13:49:D3:77:AE:53:4A:B6:CE:21:CE:4C:0A:37:3F:1D:C3:E0:3D:D8:44:D4:2D:4C:45:EB:EE:12:01"}}},"request":{"raw":"GET /main.js HTTP/1.1\r\nHost: airdrop-linea.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://airdrop-linea.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 05 Sep 2025 14:30:17 GMT\r\ncontent-type: text/javascript\r\nserver: cloudflare\r\nlast-modified: Wed, 03 Sep 2025 12:06:47 GMT\r\netag: \"3f032-63de47066eaf8-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VYj7WJlijK1A32cOHADc9ucmw6MwuuWwhcpSShmiiHhIHlgCUhOt0LnSJzOKOpgUSOpXAz41AOYYmOi5M7fg7M%2B8soDnnMQtkbKTZGS%2Bog%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 97a66c77f8f10b06-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":258098,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"d58e3e0470d2eba9050a07d2b40218a8","sha1":"56f28ae58ad3e7ca1047eeebe5c3551f930fe920","sha256":"c3d3c7121bd7e684caafbd617266b26f3ae12e03e4e3428657ae1a45c8e0affe","sha512":"a61e7c89206f902b5d41907c074c93934a3541b3c6b084003cbc76b2bd3feb03584e05602a4f05e10711b999b66d64a0ec0cc6e462fd625c10d9f49ae85e5e9c","ssdeep":"6144:Yc7cWYpyQm+kvBcXOvGUpd+j3hKUNoabgxYEPi0PcupxJo3OQBkc+Fk:VB1G64oJIkI","tlshash":"1d44e85d2b83db27bb628705903b9b7d970946685fdc3dc8b280a094a1545ea7cfb3f0","first_seen":"2025-09-03T17:44:20.811392Z","last_seen":"2025-09-07T16:26:07.3536Z","times_seen":16,"resource_available":true,"data":null}},"time_used":144,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":86,"receive":58,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-05","alert":"Sinkholed","trigger":"airdrop-linea.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"airdrop-linea.xyz/css2.css","fqdn":"airdrop-linea.xyz","domain":"airdrop-linea.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://airdrop-linea.xyz/","date":"2025-09-05T14:30:17.597Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"airdrop-linea.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Sep 2025 10:39:31 GMT","end":"Tue, 02 Dec 2025 11:36:54 GMT"},"fingerprint":{"sha1":"72:61:41:BB:F7:58:E3:48:87:6D:57:6E:7F:1B:99:5F:06:F5:D3:02","sha256":"65:8D:F0:13:49:D3:77:AE:53:4A:B6:CE:21:CE:4C:0A:37:3F:1D:C3:E0:3D:D8:44:D4:2D:4C:45:EB:EE:12:01"}}},"request":{"raw":"GET /css2.css HTTP/1.1\r\nHost: airdrop-linea.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://airdrop-linea.xyz/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 05 Sep 2025 14:30:17 GMT\r\ncontent-type: text/css\r\ncontent-length: 638\r\nserver: cloudflare\r\nlast-modified: Wed, 03 Sep 2025 12:06:47 GMT\r\netag: \"1dcc-63de470669508-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZOxHp%2B5fM%2FcydtKpQDe0MEX1msyE8yguo2z8YH11YqudN4np%2FKeKNGonnLck7ZuBvdQYBaoUdPQflJ%2BsIELsU6GCrsStvOrTrgIucqddqQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 97a66c77f8f30b06-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7628,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"a945690afba190bdf35bdbc8dca91152","sha1":"d93d79ba5c4ff541fb62d683c5d6b488b9f53ba8","sha256":"e3588f89e8f3d36d7befdcd1ad777d37963acce98132704f84f1d7ab2d5e1b4b","sha512":"72a22e14d311d595ee72e60b3ae2692c0cf6745594fab8f6f60c522f0f91a227d67e0dbbbc34e4fdfae78e152a29498981398ad2f56e511e7abe26664268a393","ssdeep":"192:9/NAPt34yaDD/OnIt3/ha8G/rKht3iIall/E5yt3RPaGc:JwSfyGKVm","tlshash":"ebf14490046b9400eb872cd277cf7f376d9da148a045c9795ffd1898acded2613a1b4d","first_seen":"2024-12-17T11:31:53.647668Z","last_seen":"2026-08-14T17:25:53.35646Z","times_seen":634,"resource_available":false,"data":null}},"time_used":149,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":149,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-05","alert":"Sinkholed","trigger":"airdrop-linea.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"airdrop-linea.xyz/aa863cb5f48ee76098840b3011cee9312f156030.svg","fqdn":"airdrop-linea.xyz","domain":"airdrop-linea.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://airdrop-linea.xyz/","date":"2025-09-05T14:30:17.611Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"airdrop-linea.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Sep 2025 10:39:31 GMT","end":"Tue, 02 Dec 2025 11:36:54 GMT"},"fingerprint":{"sha1":"72:61:41:BB:F7:58:E3:48:87:6D:57:6E:7F:1B:99:5F:06:F5:D3:02","sha256":"65:8D:F0:13:49:D3:77:AE:53:4A:B6:CE:21:CE:4C:0A:37:3F:1D:C3:E0:3D:D8:44:D4:2D:4C:45:EB:EE:12:01"}}},"request":{"raw":"GET /aa863cb5f48ee76098840b3011cee9312f156030.svg HTTP/1.1\r\nHost: airdrop-linea.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://airdrop-linea.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 05 Sep 2025 14:30:17 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Wed, 03 Sep 2025 12:06:47 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tSKrpy5V2vrA7GbJm7RFEqtceV4V4PwDqtixVT4c7o7r6Tlg4HQNX5cVdrj4kwwgH9jzgpSeju4o%2F3dFaT01RVwURBY7EyKct5q%2BzXzDlg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\netag: W/\"39d-63de470671207\"\r\ncontent-encoding: br\r\ncf-ray: 97a66c7808fe0b06-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":925,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"83dd931fed6d78f638eda7197ada1e5f","sha1":"aa863cb5f48ee76098840b3011cee9312f156030","sha256":"e2e412de278ad9a3577a60926be5050caa7c63184004d62f4bf1e21269878f79","sha512":"3182431750a9adeb3513761813c9c79b15a8f51f837fb7c7f0a6253bfd0a50c282b3ca97cb35250637b5aa86c4d5ea76af2d935de28176958dff0d72c676bea6","ssdeep":"","tlshash":"ad115cec2fa5f0455a494af77b227d2d856288874cd98841c2083f2171e5dfe2c679ab","first_seen":"2025-05-04T15:11:52.67777Z","last_seen":"2026-08-08T05:54:57.525856Z","times_seen":36,"resource_available":false,"data":null}},"time_used":136,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":136,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-05","alert":"Sinkholed","trigger":"airdrop-linea.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"airdrop-linea.xyz/c8409d1c1c683d425bcf0ae3421f197f5217e586.png","fqdn":"airdrop-linea.xyz","domain":"airdrop-linea.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://airdrop-linea.xyz/","date":"2025-09-05T14:30:18.042Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"airdrop-linea.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Sep 2025 10:39:31 GMT","end":"Tue, 02 Dec 2025 11:36:54 GMT"},"fingerprint":{"sha1":"72:61:41:BB:F7:58:E3:48:87:6D:57:6E:7F:1B:99:5F:06:F5:D3:02","sha256":"65:8D:F0:13:49:D3:77:AE:53:4A:B6:CE:21:CE:4C:0A:37:3F:1D:C3:E0:3D:D8:44:D4:2D:4C:45:EB:EE:12:01"}}},"request":{"raw":"GET /c8409d1c1c683d425bcf0ae3421f197f5217e586.png HTTP/1.1\r\nHost: airdrop-linea.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://airdrop-linea.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 05 Sep 2025 14:30:18 GMT\r\ncontent-type: image/png\r\ncontent-length: 1601\r\nserver: cloudflare\r\nlast-modified: Wed, 03 Sep 2025 12:06:47 GMT\r\netag: \"641-63de470668d38\"\r\naccept-ranges: bytes\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=6,i=?0\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RVeL4JRXkSbfyrFxyuSeZPVZIfAAxkXbE17gC1lF8tWZPMF5lkhr3R9kqgGgdCAAIhWrW%2FR74mY%2FhoqvGc7pDxO2YSlbeKDcFe1A1RUqvw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 97a66c7acb050b06-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1601,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 196 x 196, 8-bit/color RGB, non-interlaced","md5":"efd0369bc84d4589d06a5fc867f9a637","sha1":"c8409d1c1c683d425bcf0ae3421f197f5217e586","sha256":"c8d8e7691a5661911da84593d87525ce8178905f1f7bb05da4ce6a8974768caf","sha512":"a5443a7acf2a77b90a3645b9d1ed74231a474d380ed0d72d9b54ae4c89a7106c3374e87dacffe6d32dee202532e358bcd48e1620ac4f875972b912903eb46b6d","ssdeep":"","tlshash":"923184dbe6dd8225f25376c56150c056c92fd31fb168cb84fc1e802a274f3c08ba2ba2","first_seen":"2025-09-05T13:50:08.88145Z","last_seen":"2026-06-10T16:55:23.004398Z","times_seen":12,"resource_available":false,"data":null}},"time_used":222,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":222,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-05","alert":"Sinkholed","trigger":"airdrop-linea.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/ethers@5.7.2/dist/ethers.umd.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.193.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://airdrop-linea.xyz/","date":"2025-09-05T14:30:18.314Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 02 Jun 2025 15:43:52 GMT","end":"Sat, 04 Jul 2026 15:43:51 GMT"},"fingerprint":{"sha1":"21:17:81:78:41:C6:8F:86:D6:CF:8D:98:CC:74:A8:F1:03:F8:C9:D4","sha256":"D0:E6:8D:08:11:05:7E:0C:2A:0D:C7:E0:ED:AE:9E:18:C8:74:32:12:3D:56:43:98:62:CD:A2:08:6F:64:5B:B0"}}},"request":{"raw":"GET /npm/ethers@5.7.2/dist/ethers.umd.min.js HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://airdrop-linea.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: application/javascript; charset=utf-8\r\nx-jsd-version: 5.7.2\r\nx-jsd-version-type: version\r\netag: W/\"b996b-tlFUVYf2JXNF3D3p3apESxDe3z4\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\nage: 317816\r\ndate: Fri, 05 Sep 2025 14:30:18 GMT\r\nx-served-by: cache-fra-eddf8230173-FRA, cache-hel1410032-HEL\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 155070\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":760171,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"71f8c498e792c6179d4e2840228f777a","sha1":"b651545587f6257345dc3de9ddaa444b10dedf3e","sha256":"a66293a6a2bb4dee061a68612be0be3c5c0ab7e4068ab8d98a4a357baf664c73","sha512":"14371563e83bbdce425c035bad34a0d4ae6a2f2ae20ac183602134d8b8b5b5711874d40fbcb3c7344fab4f63237a2f0dedf65b7b458b870dbb8f64ab191a5d32","ssdeep":"12288:TfamYTKkkAJs8P+H8Xb2F/nNuwEYtnob6qQr:TfjkhPaNnN9EYtwo","tlshash":"35f43b80b3b1b0b583c729a4143f6046f63af46a505840a8f659faf279f9d4c957bb3c","first_seen":"2023-03-13T00:48:53Z","last_seen":"2026-08-16T22:48:21.134989Z","times_seen":3811,"resource_available":true,"data":null}},"time_used":222,"timings":{"blocked":85,"dns":53,"connect":13,"send":0,"wait":15,"receive":32,"ssl":19},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"airdrop-linea.xyz/fpbundle.js","fqdn":"airdrop-linea.xyz","domain":"airdrop-linea.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://airdrop-linea.xyz/","date":"2025-09-05T14:30:18.324Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"airdrop-linea.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Sep 2025 10:39:31 GMT","end":"Tue, 02 Dec 2025 11:36:54 GMT"},"fingerprint":{"sha1":"72:61:41:BB:F7:58:E3:48:87:6D:57:6E:7F:1B:99:5F:06:F5:D3:02","sha256":"65:8D:F0:13:49:D3:77:AE:53:4A:B6:CE:21:CE:4C:0A:37:3F:1D:C3:E0:3D:D8:44:D4:2D:4C:45:EB:EE:12:01"}}},"request":{"raw":"GET /fpbundle.js HTTP/1.1\r\nHost: airdrop-linea.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://airdrop-linea.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 05 Sep 2025 14:30:18 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 17102\r\nserver: cloudflare\r\nlast-modified: Wed, 03 Sep 2025 12:06:47 GMT\r\netag: \"b1bf-63de47066a890-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BBGQHsWVbrRCUsMIpXrGPKtUN5zYxFGFjwFMaKjNKDiff%2FEmvsXFhFTK2fb9SUvzV0m4dYQKjs9LYRIxLgq6uX%2FeSUUzi6paDcPwd6OUUQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 97a66c7c7c540b06-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":45503,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (44961), with CRLF line terminators","md5":"1c59909ad8d56060bf239a34a275da3d","sha1":"1164057a0631f6b5dd80387a1c3a9e332fb00bb4","sha256":"126a8b465ef8734b4d7a289781e0535cd283ccf24394e08c44f23ae300be3a5a","sha512":"39d33737c908bf2a1430f157990f931a0644471a0cf20de61721596e1330fe5867108db7e47d1869576710a72f886ef42e7492a2c0ed05fde2644f6d338e3eac","ssdeep":"768:v8UXI0Nc5VArhXDh1bnUsAq1++umYUT15+2gT/RcKrNcFV3BT/Vo:vN/NcnArV7f5+9cxT6","tlshash":"a413c7a873c67139a217b0719dcf4845b67d6d182289884dca2ec4a4b879d3dc77ecec","first_seen":"2025-07-11T11:18:53.943693Z","last_seen":"2026-08-10T20:36:38.759665Z","times_seen":753,"resource_available":true,"data":null}},"time_used":183,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":99,"receive":84,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-05","alert":"Sinkholed","trigger":"airdrop-linea.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1.1.1.1/cdn-cgi/trace","fqdn":"1.1.1.1","domain":"1.1.1.1","tld":""},"ip":{"addr":"1.1.1.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://airdrop-linea.xyz/","date":"2025-09-05T14:30:19.550Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cloudflare-dns.com","organization":"Cloudflare, Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 02 Jan 2025 00:00:00 GMT","end":"Wed, 21 Jan 2026 23:59:59 GMT"},"fingerprint":{"sha1":"3B:A7:E9:F8:06:EB:30:D2:F4:E3:F9:05:E5:3F:07:E9:AC:F0:8E:1E","sha256":"73:B8:ED:5B:EC:F1:BA:64:93:D2:E2:21:5A:42:DF:DC:78:77:E9:1E:31:1F:F5:E5:9F:B4:3D:09:48:71:E6:99"}}},"request":{"raw":"GET /cdn-cgi/trace HTTP/1.1\r\nHost: 1.1.1.1\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://airdrop-linea.xyz/\r\nOrigin: https://airdrop-linea.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 05 Sep 2025 14:30:19 GMT\r\ncontent-type: text/plain\r\naccess-control-allow-origin: *\r\nserver: cloudflare\r\ncf-ray: 97a66c844b566d02-OSL\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\ncache-control: no-cache\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":258,"size_decoded":0,"mime_type":"text/plain","magic":"ASCII text","md5":"91367af0508e34c192a61f18aaad91bb","sha1":"a9d19214a46fedf87928bab1b690717ef4af41f9","sha256":"4fd401b69607fde619430bf8f2fc1a45a12f2d3ec54d45a0e1392f8a93ca5506","sha512":"58f2115098dba7ff08b12de613d983afa6a4aba36b446948644e39350898521f2b6b708884b0b3c241a5f44e3f99ca41caaee3f976c1e4ef234785f805e7b3f1","ssdeep":"","tlshash":"39d02bd7926d0068342c9445066aa642cb514517896b6921ede14504ae882d715d99e0","first_seen":"2025-09-05T14:30:44.605623Z","last_seen":"2025-09-05T14:30:44.605623Z","times_seen":1,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":15,"dns":1,"connect":1,"send":0,"wait":3,"receive":0,"ssl":11},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-05","alert":"Sinkholed","trigger":"1.1.1.1","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"airdrop-linea.xyz/1aa3d7ae275a8aaa4fb7a868e52ebc0ce8958f9a.svg","fqdn":"airdrop-linea.xyz","domain":"airdrop-linea.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://airdrop-linea.xyz/","date":"2025-09-05T14:30:17.610Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"airdrop-linea.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Sep 2025 10:39:31 GMT","end":"Tue, 02 Dec 2025 11:36:54 GMT"},"fingerprint":{"sha1":"72:61:41:BB:F7:58:E3:48:87:6D:57:6E:7F:1B:99:5F:06:F5:D3:02","sha256":"65:8D:F0:13:49:D3:77:AE:53:4A:B6:CE:21:CE:4C:0A:37:3F:1D:C3:E0:3D:D8:44:D4:2D:4C:45:EB:EE:12:01"}}},"request":{"raw":"GET /1aa3d7ae275a8aaa4fb7a868e52ebc0ce8958f9a.svg HTTP/1.1\r\nHost: airdrop-linea.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://airdrop-linea.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 05 Sep 2025 14:30:17 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Wed, 03 Sep 2025 12:06:47 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9cLHSm9DKKYV3BZDD8RgVwGH%2FAPY60HhRTmNv5%2FgKsJUbEG9UTPa7pypHzk7GrS%2FDz9o0i1jaHwpKgb7w3DvVwFe6IjOG1cWsL7%2FJOo%2Fqw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\netag: W/\"185-63de47066f6b0\"\r\ncontent-encoding: br\r\ncf-ray: 97a66c7808fc0b06-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":389,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"e96684af8ad6e01b62585df6d15e69e1","sha1":"1aa3d7ae275a8aaa4fb7a868e52ebc0ce8958f9a","sha256":"c9ebec8d47251f2857c0d83d5f37cb83f78d27cedb00bd0a0adae38614335ad0","sha512":"dc7e5a0ff47e256a116febfd50b4ccaa2d7629e9049b262167058ee2fd4b8ea49488d6135f1f00d9f80a8c254dac688687243a8a0ae0cb9e1bed5cd8ccf5773c","ssdeep":"","tlshash":"15e0f193a9cdd299e007f3542c6f795bf0e182be4f14c009e57b60087e260c74c1b9c4","first_seen":"2025-05-04T15:11:52.694347Z","last_seen":"2026-08-08T05:54:57.534534Z","times_seen":36,"resource_available":false,"data":null}},"time_used":199,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":199,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-05","alert":"Sinkholed","trigger":"airdrop-linea.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"airdrop-linea.xyz/adbd0bb4d0898709005e574b71e096e3e2e958e0.avif","fqdn":"airdrop-linea.xyz","domain":"airdrop-linea.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://airdrop-linea.xyz/","date":"2025-09-05T14:30:17.620Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"airdrop-linea.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Sep 2025 10:39:31 GMT","end":"Tue, 02 Dec 2025 11:36:54 GMT"},"fingerprint":{"sha1":"72:61:41:BB:F7:58:E3:48:87:6D:57:6E:7F:1B:99:5F:06:F5:D3:02","sha256":"65:8D:F0:13:49:D3:77:AE:53:4A:B6:CE:21:CE:4C:0A:37:3F:1D:C3:E0:3D:D8:44:D4:2D:4C:45:EB:EE:12:01"}}},"request":{"raw":"GET /adbd0bb4d0898709005e574b71e096e3e2e958e0.avif HTTP/1.1\r\nHost: airdrop-linea.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://airdrop-linea.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 05 Sep 2025 14:30:17 GMT\r\ncontent-type: image/avif\r\ncontent-length: 5931\r\nserver: cloudflare\r\nlast-modified: Wed, 03 Sep 2025 12:06:47 GMT\r\netag: \"172b-63de470660099\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Kor7ycTJjHSPcI0IEY45yil0jTiafchlf2C1z%2B7e5j5qwSEnBoY8UzDVrl9MTQN%2Fey6cD%2FLojQObH3U9PU0EUCN4a5s2lJH%2BPuuRnn5ldA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 97a66c7809060b06-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5931,"size_decoded":0,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"748ec56ef5176e4bca243077790b1eb0","sha1":"adbd0bb4d0898709005e574b71e096e3e2e958e0","sha256":"b248d9c4eac267ae6de646dc759065950acfbf5e1df2c95fc209e444c65086bc","sha512":"f0b8852172aca1c03e6b7017005fe841a2918550a8c7a6f90935217db867f1482f265e91df59436c6dcd6cef4bb7107e36990774a94d30309a0c8b3248e40ab2","ssdeep":"96:+zCj4yWPqyU1aDF5Z+OebpX35p6HOzOIDL02J/2FUve7SKrzBv6fmyrp2jxbs:+zC0TGaB+Oq9ryk//KXBSfmyYFbs","tlshash":"76c17d9e1674df47e8da7277051e534361f33a26125fb44d8d4363011670beee402eac","first_seen":"2025-09-03T18:24:07.379527Z","last_seen":"2025-09-24T03:04:19.221944Z","times_seen":10,"resource_available":false,"data":null}},"time_used":70,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":69,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-05","alert":"Sinkholed","trigger":"airdrop-linea.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"airdrop-linea.xyz/","fqdn":"airdrop-linea.xyz","domain":"airdrop-linea.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://airdrop-linea.xyz/","date":"2025-09-05T14:30:19.558Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"airdrop-linea.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Sep 2025 10:39:31 GMT","end":"Tue, 02 Dec 2025 11:36:54 GMT"},"fingerprint":{"sha1":"72:61:41:BB:F7:58:E3:48:87:6D:57:6E:7F:1B:99:5F:06:F5:D3:02","sha256":"65:8D:F0:13:49:D3:77:AE:53:4A:B6:CE:21:CE:4C:0A:37:3F:1D:C3:E0:3D:D8:44:D4:2D:4C:45:EB:EE:12:01"}}},"request":{"raw":"HEAD / HTTP/1.1\r\nHost: airdrop-linea.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://airdrop-linea.xyz/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"HEAD"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 05 Sep 2025 14:30:19 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\nlast-modified: Wed, 03 Sep 2025 12:06:47 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kbx9MeBnamgXaFJQ1Hi57u0z3SyU4wGSs8kRDKFzXzclBll6%2FS6z2KrencoiTuw0bdomplWy2qmM%2BEYy%2FAGjU4HqGCVqW5203%2Bf9WcdOQQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\ncontent-encoding: br\r\ncf-ray: 97a66c8449d60b06-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-17T14:43:00.040018Z","times_seen":17938268,"resource_available":true,"data":null}},"time_used":132,"timings":{"blocked":2,"dns":0,"connect":0,"send":0,"wait":130,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-05","alert":"Sinkholed","trigger":"airdrop-linea.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"airdrop-linea.xyz/90502c60b7142b9ad4df9ba413e3d9dab7a942d2.svg","fqdn":"airdrop-linea.xyz","domain":"airdrop-linea.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://airdrop-linea.xyz/","date":"2025-09-05T14:30:17.616Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"airdrop-linea.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Sep 2025 10:39:31 GMT","end":"Tue, 02 Dec 2025 11:36:54 GMT"},"fingerprint":{"sha1":"72:61:41:BB:F7:58:E3:48:87:6D:57:6E:7F:1B:99:5F:06:F5:D3:02","sha256":"65:8D:F0:13:49:D3:77:AE:53:4A:B6:CE:21:CE:4C:0A:37:3F:1D:C3:E0:3D:D8:44:D4:2D:4C:45:EB:EE:12:01"}}},"request":{"raw":"GET /90502c60b7142b9ad4df9ba413e3d9dab7a942d2.svg HTTP/1.1\r\nHost: airdrop-linea.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://airdrop-linea.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 05 Sep 2025 14:30:17 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Wed, 03 Sep 2025 12:06:47 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=U6nx%2BKiGV2fcECEvYmHphA2%2F9Cy7zmtuaLQgFqBGzL4zkhWwaryZhf%2B8exMO2wB2VwuP2OVseboqJ6ka%2FHEXh%2F7OyDv0dxZPfyjKa7v2gg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\netag: W/\"407-63de470670e1f\"\r\ncontent-encoding: br\r\ncf-ray: 97a66c7809020b06-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1031,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"d95e52611d260cd5550325e5d5580fd4","sha1":"90502c60b7142b9ad4df9ba413e3d9dab7a942d2","sha256":"916265061b402a619d7ab96417cd70354f70de83028231b0f53bccc3077018ea","sha512":"9f36b4132258d4f3b81492966a097ad63a4ae6f80d7318df4f2aecf89c78afa3a2dfe6d693ef50fe7cce1f1118fd3e18d802b7615a43acd1f7c437b432d1193d","ssdeep":"","tlshash":"03116abb81c5a5f09205f398ec732a58b85e283f3c13d189e4a6cd70e8562cc140ae9c","first_seen":"2025-05-04T15:11:52.618346Z","last_seen":"2026-08-08T05:54:57.535389Z","times_seen":36,"resource_available":false,"data":null}},"time_used":182,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":182,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-05","alert":"Sinkholed","trigger":"airdrop-linea.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"airdrop-linea.xyz/3ff4f0a827508a4d71941818462aa4d7593c9658.mp4","fqdn":"airdrop-linea.xyz","domain":"airdrop-linea.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://airdrop-linea.xyz/","date":"2025-09-05T14:30:17.942Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"airdrop-linea.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Sep 2025 10:39:31 GMT","end":"Tue, 02 Dec 2025 11:36:54 GMT"},"fingerprint":{"sha1":"72:61:41:BB:F7:58:E3:48:87:6D:57:6E:7F:1B:99:5F:06:F5:D3:02","sha256":"65:8D:F0:13:49:D3:77:AE:53:4A:B6:CE:21:CE:4C:0A:37:3F:1D:C3:E0:3D:D8:44:D4:2D:4C:45:EB:EE:12:01"}}},"request":{"raw":"GET /3ff4f0a827508a4d71941818462aa4d7593c9658.mp4 HTTP/1.1\r\nHost: airdrop-linea.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://airdrop-linea.xyz/\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 206 Partial Content\r\ndate: Fri, 05 Sep 2025 14:30:18 GMT\r\ncontent-type: video/mp4\r\ncontent-length: 305656\r\nserver: cloudflare\r\nlast-modified: Wed, 03 Sep 2025 12:06:47 GMT\r\netag: \"4a9f8-63de47067064f\"\r\naccept-ranges: bytes\r\ncontent-range: bytes 0-305655/305656\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=daGf5ghzKAzYdOtw%2BgxNAWGQhYcQgso5tOkjxe0w%2BAgeYnjJAFO3vAVPdBQbs%2BfB6tokbWcPhJNTKMNeXAmGMReD7j9Wmcjzme56C49d9A%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 97a66c7a2aa50b06-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":34462,"size_decoded":0,"mime_type":"video/mp4","magic":"ISO Media, MP4 v2 [ISO 14496-14]","md5":"5e08be8d8784ca1bc05c06d5e548b8d2","sha1":"1368dd5f6f59d8d4c2a4a81570e377664a38cc20","sha256":"7c8448e625a7832122bb14c2e7493ff93cfbe95824eba381da275fbe4c9928b3","sha512":"3464b73dbb6780f58bbc2da7b86c8e93012b1311f860fdafe6571f7de2b23a58d571daa50d1da77663aea727f854c29970fb504e7f4aa81fe031980248722fa3","ssdeep":"768:00YcLssKKNUzGyQYEFFks60bg6ZIJhoDJxVupHJf/:00hLcGUNQzFhbgmIJhodDupJf/","tlshash":"3cf2f1ab17c69b10cdb1617a18a5135f2380e65077c05bf9eae092ea9cb51f3b9d43cc","first_seen":"2025-09-05T14:30:44.611497Z","last_seen":"2025-09-11T14:21:17.18518Z","times_seen":2,"resource_available":false,"data":null}},"time_used":326,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":195,"receive":131,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-05","alert":"Sinkholed","trigger":"airdrop-linea.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"airdrop-linea.xyz/bundle.js","fqdn":"airdrop-linea.xyz","domain":"airdrop-linea.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://airdrop-linea.xyz/","date":"2025-09-05T14:30:18.320Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"airdrop-linea.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Sep 2025 10:39:31 GMT","end":"Tue, 02 Dec 2025 11:36:54 GMT"},"fingerprint":{"sha1":"72:61:41:BB:F7:58:E3:48:87:6D:57:6E:7F:1B:99:5F:06:F5:D3:02","sha256":"65:8D:F0:13:49:D3:77:AE:53:4A:B6:CE:21:CE:4C:0A:37:3F:1D:C3:E0:3D:D8:44:D4:2D:4C:45:EB:EE:12:01"}}},"request":{"raw":"GET /bundle.js HTTP/1.1\r\nHost: airdrop-linea.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://airdrop-linea.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 05 Sep 2025 14:30:18 GMT\r\ncontent-type: text/javascript\r\nserver: cloudflare\r\nlast-modified: Wed, 03 Sep 2025 12:06:47 GMT\r\netag: \"264e24-63de470668568-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lVbPMHcK4P%2BL%2BIpBce7o6tBJBYeMfuBsYgB2R1Md651QAZmzpxOSlko8kbVQErfXHZT1wWla73pTXOzT%2Fyadg9XeCX1OygXeaddWhH5lFg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 97a66c7c7c500b06-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2510372,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (11784), with CRLF line terminators","md5":"69a95c579379d1a32c544d105a13476f","sha1":"b7cd9e774342ee0396c8aacc52efa3a26ece9e15","sha256":"5aab5286ff8a24f0d6f19f26ccce37365c27b408eb5a77978ec450054ce0f671","sha512":"1ebe6e7d1032e9b2a3bb3bb20db4e04089c55491235d3ff1c8bf1f9019a283c842c3b16966d97b45fb531e0914c01ddae079478f20abefc79d17d2ffb687ace9","ssdeep":"24576:LREHMe8DbdUW4HlHZg+HY3yBgS6cUKZd3NlNUQ4G1SE0Byz5K:LRIMXDbdUW4HlHZg+HY3yBgS6cUKZJNs","tlshash":"93254c9072a6f07603a755d864761101f2385854700d90ecfafc9debbfa988a867ff39","first_seen":"2025-09-03T18:24:07.372838Z","last_seen":"2025-10-17T16:29:20.160609Z","times_seen":8,"resource_available":false,"data":null}},"time_used":465,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":138,"receive":327,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-05","alert":"Sinkholed","trigger":"airdrop-linea.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"airdrop-linea.xyz/","fqdn":"airdrop-linea.xyz","domain":"airdrop-linea.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-09-05T14:30:16.942Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"airdrop-linea.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Sep 2025 10:39:31 GMT","end":"Tue, 02 Dec 2025 11:36:54 GMT"},"fingerprint":{"sha1":"72:61:41:BB:F7:58:E3:48:87:6D:57:6E:7F:1B:99:5F:06:F5:D3:02","sha256":"65:8D:F0:13:49:D3:77:AE:53:4A:B6:CE:21:CE:4C:0A:37:3F:1D:C3:E0:3D:D8:44:D4:2D:4C:45:EB:EE:12:01"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: airdrop-linea.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 05 Sep 2025 14:30:17 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\nlast-modified: Wed, 03 Sep 2025 12:06:47 GMT\r\ncf-cache-status: DYNAMIC\r\nvary: Accept-Encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=593l373oxV4%2F0WBNeoicjQt%2BalZEyyyouOYf4%2B0aR7r5QBFHcNn1LBRsNNjAI18v%2BZqgbEB2Au01nLy%2BVzcKXjOBOcsZEyJy6aKPCODVcg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 97a66c745ab70b55-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Contentful","description":"Contentful is an API-first content management platform to create, manage and publish content on any digital channel.","website":"https://www.contentful.com","common_platform_enumeration":"","icon":"Contentful.svg","categories":["CMS"]}],"data":{"size":1610425,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (483)","md5":"2eaade714836686a41a6bbff8120742a","sha1":"8b5e226a09708cc18a1e11182af947284dfbc84e","sha256":"6c9e5ec21e90201e56bf1c718526bd663a11d4b6aada820448b82945203543ef","sha512":"3a39987a68284c2f37693159b44502d0f0d51c1ffd3b837f509a8b26f6e774f285394602dc863d25da633b6cf063091cf79f238082845a4ccdf7952747dcff13","ssdeep":"1536:fvhvf93aHSpCPoGRfGsTj5XzuQI+tUJ/C4LiO5PZlf2YiwTIn7B9v54xHhkpgL6m:XJfV9CPoYzu3+qLiO5PZJ//uNMzk6np","tlshash":"a225922f5a6311647d53a03d1bff5244a334c403d94add6c7ede6684cf8a3a8bda2788","first_seen":"2025-09-05T14:30:44.616657Z","last_seen":"2025-09-05T14:30:44.616657Z","times_seen":1,"resource_available":false,"data":null}},"time_used":313,"timings":{"blocked":71,"dns":51,"connect":1,"send":0,"wait":171,"receive":0,"ssl":17},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-05","alert":"Sinkholed","trigger":"airdrop-linea.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"airdrop-linea.xyz/e74118af675932b57f8986553df426ee5fe9e131.svg","fqdn":"airdrop-linea.xyz","domain":"airdrop-linea.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://airdrop-linea.xyz/","date":"2025-09-05T14:30:17.606Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"airdrop-linea.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Sep 2025 10:39:31 GMT","end":"Tue, 02 Dec 2025 11:36:54 GMT"},"fingerprint":{"sha1":"72:61:41:BB:F7:58:E3:48:87:6D:57:6E:7F:1B:99:5F:06:F5:D3:02","sha256":"65:8D:F0:13:49:D3:77:AE:53:4A:B6:CE:21:CE:4C:0A:37:3F:1D:C3:E0:3D:D8:44:D4:2D:4C:45:EB:EE:12:01"}}},"request":{"raw":"GET /e74118af675932b57f8986553df426ee5fe9e131.svg HTTP/1.1\r\nHost: airdrop-linea.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://airdrop-linea.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 05 Sep 2025 14:30:17 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Wed, 03 Sep 2025 12:06:47 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=m8O%2BYaXNX6dVF5sbmTw1HhcZ2b%2BxA06c%2BhE9HSiuGzmWuOhQvgmAzEtt9x9AvFNcf5tIpq5Wn4MkuqDX2lqRrWCmdn%2BeIXS0CZikGQwEKQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\netag: W/\"32b-63de470669cd8\"\r\ncontent-encoding: br\r\ncf-ray: 97a66c77f8fa0b06-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":811,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"3ccd42058f7155acc920ea59579a35da","sha1":"e74118af675932b57f8986553df426ee5fe9e131","sha256":"8461dc2e076da4fc03ffd07fa1ece78447ba2636a3605f96d61194253d4e79ef","sha512":"0c4289d934d832d85cd32117edd17087ec62faa1fdef26877e1184c6f61175f6a3fde8603fbd782317ca9e1b720f0ff4a2de8c7c7e0e01fdc4fa981b024abfae","ssdeep":"","tlshash":"760189fbb2f0ebc8ce1f9b17a8b4305b005778b21a0015f4c5c8dfa4d2a34d4aa04c50","first_seen":"2025-07-31T08:00:00.370417Z","last_seen":"2026-08-08T05:54:57.53207Z","times_seen":33,"resource_available":false,"data":null}},"time_used":221,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":221,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-05","alert":"Sinkholed","trigger":"airdrop-linea.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"airdrop-linea.xyz/48a32e72430ff7c8fe95f8f54436c5e3a2bd3436.svg","fqdn":"airdrop-linea.xyz","domain":"airdrop-linea.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://airdrop-linea.xyz/","date":"2025-09-05T14:30:17.614Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"airdrop-linea.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Sep 2025 10:39:31 GMT","end":"Tue, 02 Dec 2025 11:36:54 GMT"},"fingerprint":{"sha1":"72:61:41:BB:F7:58:E3:48:87:6D:57:6E:7F:1B:99:5F:06:F5:D3:02","sha256":"65:8D:F0:13:49:D3:77:AE:53:4A:B6:CE:21:CE:4C:0A:37:3F:1D:C3:E0:3D:D8:44:D4:2D:4C:45:EB:EE:12:01"}}},"request":{"raw":"GET /48a32e72430ff7c8fe95f8f54436c5e3a2bd3436.svg HTTP/1.1\r\nHost: airdrop-linea.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://airdrop-linea.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 05 Sep 2025 14:30:17 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Wed, 03 Sep 2025 12:06:47 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ygtuI026qnyaCkAfl0s7esij7c1OgYEIa0aEZo5GGHzq4747f3C9K39moy0sQgBdzO7q1HnehYv05pmEvYYWSyKzaJ17FLUVjb15A5vLig%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\netag: W/\"542-63de470670a37\"\r\ncontent-encoding: br\r\ncf-ray: 97a66c7809010b06-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1346,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"22d905a4479eedf38dcba0c84f4dd302","sha1":"48a32e72430ff7c8fe95f8f54436c5e3a2bd3436","sha256":"659be64035afb266e61e1b5320077699b252395d55dddebde083258013ecdc43","sha512":"b4d9644c426b5b3fd3c4db1aff3e64f201be3dc58f959e615aca39f7abdc61f4810dc428faa6f5001d7c4bdf6cb5be7969f762fa5ababa202ff1a6577c70824b","ssdeep":"","tlshash":"2b2136fa6788d3e0814bbf84ac27ac79fa4a247a775193450174fa106b145c1d59cc84","first_seen":"2025-05-04T15:11:52.680579Z","last_seen":"2026-08-08T05:54:57.533665Z","times_seen":36,"resource_available":false,"data":null}},"time_used":204,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":204,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-05","alert":"Sinkholed","trigger":"airdrop-linea.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"airdrop-linea.xyz/9c31e7246a8ddbc54de5293a374161a235bbce6c.svg","fqdn":"airdrop-linea.xyz","domain":"airdrop-linea.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://airdrop-linea.xyz/","date":"2025-09-05T14:30:17.608Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"airdrop-linea.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Sep 2025 10:39:31 GMT","end":"Tue, 02 Dec 2025 11:36:54 GMT"},"fingerprint":{"sha1":"72:61:41:BB:F7:58:E3:48:87:6D:57:6E:7F:1B:99:5F:06:F5:D3:02","sha256":"65:8D:F0:13:49:D3:77:AE:53:4A:B6:CE:21:CE:4C:0A:37:3F:1D:C3:E0:3D:D8:44:D4:2D:4C:45:EB:EE:12:01"}}},"request":{"raw":"GET /9c31e7246a8ddbc54de5293a374161a235bbce6c.svg HTTP/1.1\r\nHost: airdrop-linea.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://airdrop-linea.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 05 Sep 2025 14:30:17 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Wed, 03 Sep 2025 12:06:47 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4YVWjiMny2V2gS73zfgSYh6rD3ti9mCKYOajaVD684O1yvbABBwKTK0M6J0cMEVX8zyCon0zPeOGMAtTDrUyfw02AD6iyTXgrJI6M0dDRA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\netag: W/\"704-63de470670a37\"\r\ncontent-encoding: br\r\ncf-ray: 97a66c77f8fb0b06-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1796,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"7e8e4537a0d07d79ef66d1e99bccaa1b","sha1":"9c31e7246a8ddbc54de5293a374161a235bbce6c","sha256":"396a0523180f8bfd84f2281f5db0431f5d9fd55e00869eb00f866743e18a85a8","sha512":"5c072051645f7a4a904f1be2355723f97c28a1c3c9f976a1e31f8ec641899805f8b42c3e48c3e7dcbfacca157cb8382bfc880eff9ce5123c5310b66471a95fc9","ssdeep":"","tlshash":"0c31edf663b9f3c0d15d4723dcb3253da01bbdf56b005ae8606888e0a2f28d9af04c51","first_seen":"2025-07-31T08:00:00.379564Z","last_seen":"2026-08-08T05:54:57.532869Z","times_seen":33,"resource_available":false,"data":null}},"time_used":207,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":207,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-05","alert":"Sinkholed","trigger":"airdrop-linea.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"airdrop-linea.xyz/ceeb73d4d8a17a3870433d043c1bd29a3f0e7087.svg","fqdn":"airdrop-linea.xyz","domain":"airdrop-linea.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://airdrop-linea.xyz/","date":"2025-09-05T14:30:17.617Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"airdrop-linea.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Sep 2025 10:39:31 GMT","end":"Tue, 02 Dec 2025 11:36:54 GMT"},"fingerprint":{"sha1":"72:61:41:BB:F7:58:E3:48:87:6D:57:6E:7F:1B:99:5F:06:F5:D3:02","sha256":"65:8D:F0:13:49:D3:77:AE:53:4A:B6:CE:21:CE:4C:0A:37:3F:1D:C3:E0:3D:D8:44:D4:2D:4C:45:EB:EE:12:01"}}},"request":{"raw":"GET /ceeb73d4d8a17a3870433d043c1bd29a3f0e7087.svg HTTP/1.1\r\nHost: airdrop-linea.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://airdrop-linea.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 05 Sep 2025 14:30:17 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Wed, 03 Sep 2025 12:06:47 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kXeklAnbSNrFy08tklvu0fJGvJCJPkem%2BBCkY35Q42qF92XI%2FLvnC1niVhDzDA9sQ9zPQ44mZhfIJSgQi1Ih84lmMLV61FEuSlHvXQ6JuA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\netag: W/\"34c-63de470669120\"\r\ncontent-encoding: br\r\ncf-ray: 97a66c7809030b06-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":844,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"e341e4462189cb823c917d65cfe98dc5","sha1":"ceeb73d4d8a17a3870433d043c1bd29a3f0e7087","sha256":"cab459f3aa5c1602921694112a13f6ddd3771bb779894c2f1870cf216a4fc4b1","sha512":"2af38b4d9002f2865fcbf74d572da58e695d3988f9856d57d5d8e26d03385af602b224af041031bbad30478d2cf4e17a271c473961c2fe24b0cdb979047b2f32","ssdeep":"","tlshash":"1801efe6a18642985c48d5c8ea3965a0334e72f0e48e82d7754adbe0d0cb5e2f94591c","first_seen":"2025-07-31T08:00:00.37343Z","last_seen":"2026-08-08T05:54:57.54138Z","times_seen":35,"resource_available":false,"data":null}},"time_used":197,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":197,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-05","alert":"Sinkholed","trigger":"airdrop-linea.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"airdrop-linea.xyz/c8409d1c1c683d425bcf0ae3421f197f5217e586.png","fqdn":"airdrop-linea.xyz","domain":"airdrop-linea.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://airdrop-linea.xyz/","date":"2025-09-05T14:30:18.040Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"airdrop-linea.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Sep 2025 10:39:31 GMT","end":"Tue, 02 Dec 2025 11:36:54 GMT"},"fingerprint":{"sha1":"72:61:41:BB:F7:58:E3:48:87:6D:57:6E:7F:1B:99:5F:06:F5:D3:02","sha256":"65:8D:F0:13:49:D3:77:AE:53:4A:B6:CE:21:CE:4C:0A:37:3F:1D:C3:E0:3D:D8:44:D4:2D:4C:45:EB:EE:12:01"}}},"request":{"raw":"GET /c8409d1c1c683d425bcf0ae3421f197f5217e586.png HTTP/1.1\r\nHost: airdrop-linea.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://airdrop-linea.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 05 Sep 2025 14:30:18 GMT\r\ncontent-type: image/png\r\ncontent-length: 1601\r\nserver: cloudflare\r\nlast-modified: Wed, 03 Sep 2025 12:06:47 GMT\r\netag: \"641-63de470668d38\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\npriority: u=6,i=?0\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Fz45nC2kevnFK0WhvJtCPLGwdFn%2FZBLn7BA8J10mPOQaI%2FRZ%2BmtmOBz9SNasFb0CUDB00YM3ylhDRrrV5TSP9mQVvukdjpXhx04T%2BU7TVw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 97a66c7abb020b06-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1601,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 196 x 196, 8-bit/color RGB, non-interlaced","md5":"efd0369bc84d4589d06a5fc867f9a637","sha1":"c8409d1c1c683d425bcf0ae3421f197f5217e586","sha256":"c8d8e7691a5661911da84593d87525ce8178905f1f7bb05da4ce6a8974768caf","sha512":"a5443a7acf2a77b90a3645b9d1ed74231a474d380ed0d72d9b54ae4c89a7106c3374e87dacffe6d32dee202532e358bcd48e1620ac4f875972b912903eb46b6d","ssdeep":"","tlshash":"923184dbe6dd8225f25376c56150c056c92fd31fb168cb84fc1e802a274f3c08ba2ba2","first_seen":"2025-09-05T13:50:08.88145Z","last_seen":"2026-06-10T16:55:23.004398Z","times_seen":12,"resource_available":false,"data":null}},"time_used":222,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":222,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-05","alert":"Sinkholed","trigger":"airdrop-linea.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}}]}
