{"report_id":"82f6f2d5-3516-4075-9ae9-21cce466988b","version":0,"status":"done","tags":[],"date":"2026-06-30T21:46:44Z","url":{"schema":"http","addr":"evm.eventdrop.org","fqdn":"evm.eventdrop.org","domain":"eventdrop.org","tld":"org"},"ip":{"addr":"104.21.65.45","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"evm.eventdrop.org/","fqdn":"evm.eventdrop.org","domain":"eventdrop.org","tld":"org"},"title":"Security Check","dom":{"size":14507,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (12172)","md5":"f4b30068d44c3ac8c921a8db3414bafa","sha1":"8d359474aaea5464dd976fb11947d3a19e490c85","sha256":"c3637206b27db62a6b18233c36f38319674406f3627b77af34f0a86a06d5945b","sha512":"df1e75d945e88a9fd3fa014312b730df4cfd8732977a33594a72976403d0404f34c2dc85836c38d7298174be6f292cb2eca2780860538874ebea6b6f99c9ef01","ssdeep":"384:6kbAwov9Lw5DtQLQGq9yT/VIHsbxPkElsLGERJS0AikcMJikH:6Eov9Lw5DtQLQpOPbxPvlsKyJnAikcMV","tlshash":"6b5261419dc06cd86ff74e6f264ba1d6ec21294d7a0640cbeb5c9cb0e4a1647ee61bf0","dom_hash":"domhash14b55690d8d48d095dceec73efff3647","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"evm.eventdrop.org","fqdn":"evm.eventdrop.org","domain":"eventdrop.org","tld":"org"},"ip":{"addr":"104.21.65.45","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-08-04T21:46:44Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"evm.eventdrop.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"evm.eventdrop.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"1.1.1.1","ip":{"addr":"1.1.1.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2012-05-30T07:40:31Z","last_seen":"2019-03-28T08:40:04Z","alert_count":0,"request_count":1,"received_data":473,"sent_data":508,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"web-181.pages.dev","ip":{"addr":"172.66.46.230","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2020-09-02","domain_rank":0,"first_seen":"2026-06-30T21:46:45.185691Z","last_seen":"2026-06-30T21:46:45.185691Z","alert_count":0,"request_count":4,"received_data":9981,"sent_data":2118,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"evm.eventdrop.org","ip":{"addr":"172.67.158.82","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-06-29","domain_rank":0,"first_seen":"2026-06-30T19:14:30.61869Z","last_seen":"2026-06-30T19:14:30.61869Z","alert_count":20,"request_count":10,"received_data":534264,"sent_data":5468,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"evm.eventdrop.org/3020a608-e1c3-40d4-9bfb-3b14e3470141","fqdn":"evm.eventdrop.org","domain":"eventdrop.org","tld":"org"},"ip":{"addr":"172.67.158.82","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"7e59da69294578d1e2d35e83a35ad2b6","sha1":"36e9560a122dbd3e59ef1e360003e999721cb363","sha256":"b90f8831383a58d7cf13014a67eb3b8ff76f7362401100472ff9c1649d8bf1fc","sha512":"70a50b89f9ae52dbff52bd093e28ec2c11c52b2e8de4b24a0f1d033ad6e3af9e2555619629e22147e23a758adc47caf71965cfd9ac35af7e5ed5a22f2828aceb","ssdeep":"1536:pNyX8lcsk3o4bazERt/EZxeLHtaz5o1rNPxPOVAxB6+6:pNyX8l63o4eARtcALHINo1r/OVD+6","tlshash":"4d933a49ab9312366933317f57af726c7236c0075402cda0b9ac9740af91e6253b9bfd","size":88899,"data":"","first_seen":"2026-06-13T10:01:43.877106Z","last_seen":"2026-06-30T21:46:47.77941Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"evm.eventdrop.org/","fqdn":"evm.eventdrop.org","domain":"eventdrop.org","tld":"org"},"ip":{"addr":"172.67.158.82","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"7b5cd2aae13f39203a296d6f0094d070","sha1":"80d6c6b97f479ca6f1f60099957bc6e668276065","sha256":"e6b540505c63967edf43fb4d8cb2b7c869ac905cd1e68cd3e33ddd73b05c68eb","sha512":"77146b2e926f1e327a84401fe3c0b4471c7c6975d75affd6955a3c484d535dd554a20898a9cbc62e486a45b98a83d495491513add8e2f7f05d6d3d94b9eeb39b","ssdeep":"","tlshash":"37c02b141d049e03169074323b347ec0152011e07d03ac96942d3e00070815f7576413","size":139,"data":"","first_seen":"2026-06-30T21:46:47.780045Z","last_seen":"2026-06-30T21:46:47.780045Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"evm.eventdrop.org/","fqdn":"evm.eventdrop.org","domain":"eventdrop.org","tld":"org"},"ip":{"addr":"172.67.158.82","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"535a579200b2aa87ba5ea7b1e64d2907","sha1":"e99543790a8de1241d265a0f41c833d0d2b8505a","sha256":"3bb7844b28c51cf6df70879ce1b34d8312909fbb3667c0dd667939c656164c3f","sha512":"7f82608baeec47a18c91bc47f2f6450b198439d5acb3f922542c9f955341211786a0c8de41233ed346b04938081476b930b2d0610a43bf77296488ca7f5022b1","ssdeep":"192:mAw3s9Pn9Lw5DtQLXAGto9yT/VIHslpEm+2DPkExjsLLaEUwbKYHgzIVAikcP:mAwov9Lw5DtQLQGq9yT/VIHsbxPkElsV","tlshash":"8a320d42adc06cd85fea4e6b275b91d6ed163a4c3a0640cbdb5c9cb0e06164bfe51bf0","size":11772,"data":"","first_seen":"2026-06-30T19:14:35.100223Z","last_seen":"2026-06-30T21:46:47.780867Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"evm.eventdrop.org/assets/evm-noir.js?d=19","fqdn":"evm.eventdrop.org","domain":"eventdrop.org","tld":"org"},"ip":{"addr":"172.67.158.82","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"1655d02bc51e29df29824805b5e9b3da","sha1":"d5ee417adbd51edb8fc1bd89342918af5ad0f418","sha256":"186109cb9ba243171abfe20b1b01bf0674a902cfd06371464cca3806bd96cb2c","sha512":"e379308f03613eeced0cfac8001c889d15b3f5bd7274d29536b1117ffab8bbfdfdeb295d1cc7967dda72c4166b926b2b5c8100b72d2a9cf3be5a756c52096631","ssdeep":"1536:RFhVu5HfP6rildKus7O3Tpm8DGSSwZ5qvX20r1FTtefGnaN1DhE+slWqs+1Vnxnw:q","tlshash":"ea447dd35398939e67c108c9444d350708eac2355c2e528eaef2a9dffd3ea41a637b71","size":263165,"data":"","first_seen":"2026-06-13T10:01:43.859991Z","last_seen":"2026-06-30T21:46:47.777846Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"evm.eventdrop.org/evm/evmairdrop/js/app.js","fqdn":"evm.eventdrop.org","domain":"eventdrop.org","tld":"org"},"ip":{"addr":"172.67.158.82","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"47daf5fcc6b480f0ef83b829b23b15db","sha1":"242b757bf3e9c74643c1157ffd863b499f5a4b32","sha256":"754d9c51cf034589839f9af505477d251bbd6158d9c8d881f4a9cc90fee31362","sha512":"c070f1059eb1e874201bdd8f5a440e68497434051c6dd7fd6a85f6f5c77994c36f31813bcd14151fac0fcd614b797b7f337a0a4cc997a1d4e3795a39be191c12","ssdeep":"768:WXYaasHF6K1DDgbO03LZb0sqvGqLjgbKLz:WX/68gbOgt9qbjNn","tlshash":"ef03c72d7ae31126a233357a8b9f91a83934a403540dd9253eecd7805fe09255ebbfdc","size":40669,"data":"","first_seen":"2026-06-30T19:14:35.082668Z","last_seen":"2026-06-30T21:46:47.771723Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"evm.eventdrop.org/evm/evmairdrop/css/main.css","fqdn":"evm.eventdrop.org","domain":"eventdrop.org","tld":"org"},"ip":{"addr":"172.67.158.82","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://evm.eventdrop.org/","date":"2026-06-30T21:46:22.737Z","timestamp":1782855982737,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eventdrop.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 15:54:59 GMT","end":"Sun, 27 Sep 2026 16:53:44 GMT"},"fingerprint":{"sha1":"D8:66:56:1A:A2:C5:60:B7:7E:36:49:B0:90:95:7E:A5:4A:46:8E:E2","sha256":"57:F3:14:C3:4B:7C:B5:99:CF:23:14:26:A0:C1:E3:4B:24:71:0E:18:50:EB:45:A0:E5:C4:AE:E9:91:65:7A:73"}}},"request":{"raw":"GET /evm/evmairdrop/css/main.css HTTP/1.1\r\nHost: evm.eventdrop.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://evm.eventdrop.org/\r\nCookie: ch=1782855981; id=jcl2cbzc; chid=\"\"; chsol=d0de6172842c00c5a92b2cb2cebf7bd2\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 30 Jun 2026 21:46:22 GMT\r\ncontent-type: text/css\r\netag: W/\"6a32fe41-1b394\"\r\nlast-modified: Wed, 17 Jun 2026 20:06:25 GMT\r\npriority: u=2,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=l9I2GTwqUEFbK8RxCKI7Iovq1MLtJgf%2FoB1N5qg7Ri%2BHq7if3Jj4F5TEe69qTHLPLlF6QzyZequCHduLv7bOv8wJv%2FFktHtuHYCwfZb6F%2BJD3n0s6HmIaXlCG76aXjJFc%2F3M8w%3D%3D\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\ncontent-encoding: zstd\r\ncf-ray: a1405d041c1f712a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":111508,"size_decoded":21833,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (28007)","md5":"8ab796f9dd4773cb9fd65f2fe26755a4","sha1":"75ef856698cbcfc38758f299a10c6567ea6f8db1","sha256":"76f2c7c1273f2f0b2c59faa38145e54489e5c127aa85ab49782018846c3fc0e8","sha512":"b14a112210c6e03132be911ccc6f15d71b8d84be4cdebbcaaa7822ebf84f132561631dfe50e4b59964565b2ceb78870b523ea2d3224518584284083ac2ac4238","ssdeep":"768:KpSUJCAgzyAcoKPFEwFH69ODS2aBFUxrTp7Gtk2lYf+dR70EIJ9P+Gf/e/uBkCH9:nAgzyAuH+ODS2QFiHlr8pja","tlshash":"a2b3e934be0d3a3e7523e76945c0819d6207b35bde3b03aaeea113784dca39b2975710","first_seen":"2026-06-30T19:14:35.092566Z","last_seen":"2026-06-30T21:46:47.770939Z","times_seen":2,"resource_available":false,"data":null}},"time_used":117,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":115,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"evm.eventdrop.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"evm.eventdrop.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"evm.eventdrop.org/evm/evmairdrop/js/app.js","fqdn":"evm.eventdrop.org","domain":"eventdrop.org","tld":"org"},"ip":{"addr":"172.67.158.82","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://evm.eventdrop.org/","date":"2026-06-30T21:46:22.738Z","timestamp":1782855982738,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eventdrop.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 15:54:59 GMT","end":"Sun, 27 Sep 2026 16:53:44 GMT"},"fingerprint":{"sha1":"D8:66:56:1A:A2:C5:60:B7:7E:36:49:B0:90:95:7E:A5:4A:46:8E:E2","sha256":"57:F3:14:C3:4B:7C:B5:99:CF:23:14:26:A0:C1:E3:4B:24:71:0E:18:50:EB:45:A0:E5:C4:AE:E9:91:65:7A:73"}}},"request":{"raw":"GET /evm/evmairdrop/js/app.js HTTP/1.1\r\nHost: evm.eventdrop.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://evm.eventdrop.org/\r\nCookie: ch=1782855981; id=jcl2cbzc; chid=\"\"; chsol=d0de6172842c00c5a92b2cb2cebf7bd2\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 30 Jun 2026 21:46:22 GMT\r\ncontent-type: application/javascript\r\netag: W/\"6a372164-9edd\"\r\nlast-modified: Sat, 20 Jun 2026 23:25:24 GMT\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SBy80en89lIx5tMDzszxsrOjie0QbyGEYU7sN1sA1ZbyZCUs90vhkoYV48S0fjjdLZQSbse5r4bMIFaFbrKVbYF1lCrZnkwSpKQR8ce8lZMDbMDMA5PH25Iq0vkp20e4guXvAw%3D%3D\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\ncontent-encoding: zstd\r\ncf-ray: a1405d041c20712a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":40669,"size_decoded":11484,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (613)","md5":"47daf5fcc6b480f0ef83b829b23b15db","sha1":"242b757bf3e9c74643c1157ffd863b499f5a4b32","sha256":"754d9c51cf034589839f9af505477d251bbd6158d9c8d881f4a9cc90fee31362","sha512":"c070f1059eb1e874201bdd8f5a440e68497434051c6dd7fd6a85f6f5c77994c36f31813bcd14151fac0fcd614b797b7f337a0a4cc997a1d4e3795a39be191c12","ssdeep":"768:WXYaasHF6K1DDgbO03LZb0sqvGqLjgbKLz:WX/68gbOgt9qbjNn","tlshash":"ef03c72d7ae31126a233357a8b9f91a83934a403540dd9253eecd7805fe09255ebbfdc","first_seen":"2026-06-30T19:14:35.082668Z","last_seen":"2026-06-30T21:46:47.771723Z","times_seen":2,"resource_available":true,"data":null}},"time_used":124,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":122,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"evm.eventdrop.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"evm.eventdrop.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"evm.eventdrop.org/stat?op=1\u0026host=evm.eventdrop.org\u0026id=jcl2cbzc","fqdn":"evm.eventdrop.org","domain":"eventdrop.org","tld":"org"},"ip":{"addr":"172.67.158.82","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://evm.eventdrop.org/","date":"2026-06-30T21:46:22.742Z","timestamp":1782855982742,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eventdrop.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 15:54:59 GMT","end":"Sun, 27 Sep 2026 16:53:44 GMT"},"fingerprint":{"sha1":"D8:66:56:1A:A2:C5:60:B7:7E:36:49:B0:90:95:7E:A5:4A:46:8E:E2","sha256":"57:F3:14:C3:4B:7C:B5:99:CF:23:14:26:A0:C1:E3:4B:24:71:0E:18:50:EB:45:A0:E5:C4:AE:E9:91:65:7A:73"}}},"request":{"raw":"GET /stat?op=1\u0026host=evm.eventdrop.org\u0026id=jcl2cbzc HTTP/1.1\r\nHost: evm.eventdrop.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://evm.eventdrop.org/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: ch=1782855981; id=jcl2cbzc; chid=\"\"; chsol=d0de6172842c00c5a92b2cb2cebf7bd2\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 30 Jun 2026 21:46:22 GMT\r\ncontent-type: text/html; charset=utf-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\naccess-control-allow-origin: *\r\ncache-control: no-store\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wQgsBoMmy96Wv5N30%2BFPXR%2FyySE23BFIfCK%2F3x9Qo6eW8kQzna4C%2F4pg4vUVDIy859OcPvRk6VOt%2BPKUofJGkc5dJkw5k4aiR94zIaQhFP7LW%2B3c1nXB8XARJ%2F7sR96e%2BMGQpA%3D%3D\"}]}\r\ncontent-length: 4\r\ncf-ray: a1405d042c21712a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4,"size_decoded":662,"mime_type":"text/html; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"ce7129b555fd0208c1751956ecab4952","sha1":"e4ca2609b3c50b5c18b969f5cff1373b22dd0bb3","sha256":"23491e95922f078abf97fcd95fb579fbefd3b13421f83ee48f349ec8a1d88ef6","sha512":"e12016a9381320c985b13cd5acdb45b3365771b5e9751514c2861b99bcbd68240229648699984deaf129e5ca16d9a95622bd66fc86e6b1354654875153de528e","ssdeep":"","tlshash":"ef30000000000000000000000000000000000000000003000000000000000000000000","first_seen":"2026-06-30T19:14:35.085291Z","last_seen":"2026-06-30T21:46:47.772451Z","times_seen":2,"resource_available":false,"data":null}},"time_used":73,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":73,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"evm.eventdrop.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"evm.eventdrop.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1.1.1.1/dns-query?name=_r.noir.black\u0026type=TXT","fqdn":"1.1.1.1","domain":"1.1.1.1","tld":""},"ip":{"addr":"1.1.1.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://evm.eventdrop.org/","date":"2026-06-30T21:46:23.497Z","timestamp":1782855983497,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cloudflare-dns.com","organization":""},"issuer":{"commonName":"SSL.com SSL Intermediate CA ECC R2","organization":"SSL Corp"},"validity":{"start":"Wed, 31 Dec 2025 19:20:01 GMT","end":"Mon, 21 Dec 2026 19:20:01 GMT"},"fingerprint":{"sha1":"F8:86:35:01:72:60:D4:0B:9E:B4:17:BE:E7:37:37:91:1B:63:0E:59","sha256":"E3:B0:28:26:78:9D:65:3D:22:4D:3E:DA:CB:E4:E8:77:CB:72:86:FC:4C:92:26:72:F6:22:67:41:CA:57:AD:65"}}},"request":{"raw":"GET /dns-query?name=_r.noir.black\u0026type=TXT HTTP/1.1\r\nHost: 1.1.1.1\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/dns-json\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://evm.eventdrop.org/\r\nOrigin: https://evm.eventdrop.org\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: cloudflare\r\ndate: Tue, 30 Jun 2026 21:46:23 GMT\r\ncontent-type: application/dns-json\r\naccess-control-allow-origin: *\r\nx-content-type-options: nosniff\r\ncontent-length: 199\r\ncf-ray: a1405d08f850723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":199,"size_decoded":473,"mime_type":"application/dns-json","magic":"JSON text data","md5":"df41226a4f29f7ffbc02b61c5e5efffa","sha1":"8b1c252a12e73da3e29fe8676e776b8fb7ebb7ae","sha256":"0d3f9924afe10e13358fe1adb448139624e18a19a28503d541776b6fa93640f3","sha512":"41588c2b9ce8852f6a75de027fdb379178488172e8719d09e249f2b62ff67355aaf4ce2bdc99d3d5326a229f60679e1cbfee4feef5c2d611304db5559e21340f","ssdeep":"","tlshash":"77d02289018280b8aa129340c4c3064befaa2262b01e2ca4af102f24c38f1a390a012f","first_seen":"2026-06-30T21:46:47.77346Z","last_seen":"2026-06-30T21:46:47.77346Z","times_seen":1,"resource_available":false,"data":null}},"time_used":90,"timings":{"blocked":-1,"dns":0,"connect":1,"send":0,"wait":74,"receive":0,"ssl":15},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"web-181.pages.dev/api/v1/config/mode?id=6a217093087136ea044ff2bb","fqdn":"web-181.pages.dev","domain":"web-181.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.46.230","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://evm.eventdrop.org/","date":"2026-06-30T21:46:23.618Z","timestamp":1782855983618,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"web-181.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Jun 2026 10:38:24 GMT","end":"Mon, 28 Sep 2026 11:35:53 GMT"},"fingerprint":{"sha1":"03:5F:20:C0:F1:C8:8C:DA:9C:D3:7A:EA:67:45:46:AD:E1:EA:20:BF","sha256":"79:DD:6F:29:86:EB:0F:70:3C:C3:F2:36:1E:28:C5:BD:F6:7B:C6:EA:21:D1:9F:27:11:EB:D2:C3:84:84:85:86"}}},"request":{"raw":"GET /api/v1/config/mode?id=6a217093087136ea044ff2bb HTTP/1.1\r\nHost: web-181.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://evm.eventdrop.org/\r\nOrigin: https://evm.eventdrop.org\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 30 Jun 2026 21:46:24 GMT\r\ncontent-type: application/json\r\ncf-ray: a1405d09bc25a0f0-OSL\r\ncf-cache-status: DYNAMIC\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS\r\ncross-origin-embedder-policy: require-corp\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: same-origin\r\norigin-agent-cluster: ?1\r\nreferrer-policy: no-referrer\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: DENY\r\nx-permitted-cross-domain-policies: none\r\nx-ratelimit-limit: 30\r\nx-ratelimit-remaining: 28\r\nx-ratelimit-reset: 30\r\nx-request-id: b4564ff0f5f6fa90bcb26f00d38b4a09\r\nx-xss-protection: 0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eR2GqijP%2B%2Biwf19Aa9jJYGVjldIca4pfUqxxXeTQ0u9ENaqRQcFRdUUjTUpJ%2FzrV%2B4UFvC8BKODedvwTP%2FgUz2s%2FL6XkkfYa4gkO2U%2FBWgPAJ59qbUX5zeHRRajJ7OCKTy4uTw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":199,"size_decoded":1397,"mime_type":"application/json","magic":"JSON text data","md5":"7a69c89f9e12e92b7138b1883133b7a1","sha1":"9927c2d61c7899b42e948197837c453daf94506d","sha256":"f0b01fc888bb421f8800b1b62338cdecf7d31c5f4c935afceb1544c3510483c8","sha512":"ffbb9003198f66cd28e84aca1f373debaebd4da689b30e4ecbe942134606d12ddd182d9aaee69cb1850389b83d9d4aa383d04131a0a027ecbd8a6c6ee694ca5d","ssdeep":"","tlshash":"b7d01251392c6cb686c70f4887587f200c3d027711453465b9ad618cd939136404795f","first_seen":"2026-06-08T14:41:36.800609Z","last_seen":"2026-07-02T12:50:14.026575Z","times_seen":1659,"resource_available":false,"data":null}},"time_used":431,"timings":{"blocked":0,"dns":6,"connect":1,"send":0,"wait":413,"receive":0,"ssl":10},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"evm.eventdrop.org/stat?ping=20.0\u0026id=jcl2cbzc","fqdn":"evm.eventdrop.org","domain":"eventdrop.org","tld":"org"},"ip":{"addr":"172.67.158.82","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://evm.eventdrop.org/","date":"2026-06-30T21:46:42.726Z","timestamp":1782856002726,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eventdrop.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 15:54:59 GMT","end":"Sun, 27 Sep 2026 16:53:44 GMT"},"fingerprint":{"sha1":"D8:66:56:1A:A2:C5:60:B7:7E:36:49:B0:90:95:7E:A5:4A:46:8E:E2","sha256":"57:F3:14:C3:4B:7C:B5:99:CF:23:14:26:A0:C1:E3:4B:24:71:0E:18:50:EB:45:A0:E5:C4:AE:E9:91:65:7A:73"}}},"request":{"raw":"GET /stat?ping=20.0\u0026id=jcl2cbzc HTTP/1.1\r\nHost: evm.eventdrop.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://evm.eventdrop.org/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: ch=1782855981; id=jcl2cbzc; chid=\"\"; chsol=d0de6172842c00c5a92b2cb2cebf7bd2\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 30 Jun 2026 21:46:42 GMT\r\ncontent-type: text/html; charset=utf-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\naccess-control-allow-origin: *\r\ncache-control: no-store\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0j3vyLSu7ZG7sIj3rfeiTgksyU4%2BsrJkWJZMn3drxrrOUmupNf2OomF17YsxIFv1JCFJm%2FE3LkcG5XhZYsT1JqdHX%2F9D8Lzr%2FUWI8uWz62z60D5vQr3kc586mE%2Bw1owCPcl%2FRw%3D%3D\"}]}\r\ncontent-length: 4\r\ncf-ray: a1405d81093a712a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4,"size_decoded":658,"mime_type":"text/html; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"ce7129b555fd0208c1751956ecab4952","sha1":"e4ca2609b3c50b5c18b969f5cff1373b22dd0bb3","sha256":"23491e95922f078abf97fcd95fb579fbefd3b13421f83ee48f349ec8a1d88ef6","sha512":"e12016a9381320c985b13cd5acdb45b3365771b5e9751514c2861b99bcbd68240229648699984deaf129e5ca16d9a95622bd66fc86e6b1354654875153de528e","ssdeep":"","tlshash":"ef30000000000000000000000000000000000000000003000000000000000000000000","first_seen":"2026-06-30T19:14:35.085291Z","last_seen":"2026-06-30T21:46:47.772451Z","times_seen":2,"resource_available":false,"data":null}},"time_used":76,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":76,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"evm.eventdrop.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"evm.eventdrop.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"evm.eventdrop.org/","fqdn":"evm.eventdrop.org","domain":"eventdrop.org","tld":"org"},"ip":{"addr":"172.67.158.82","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-06-30T21:46:22.474Z","timestamp":1782855982474,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eventdrop.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 15:54:59 GMT","end":"Sun, 27 Sep 2026 16:53:44 GMT"},"fingerprint":{"sha1":"D8:66:56:1A:A2:C5:60:B7:7E:36:49:B0:90:95:7E:A5:4A:46:8E:E2","sha256":"57:F3:14:C3:4B:7C:B5:99:CF:23:14:26:A0:C1:E3:4B:24:71:0E:18:50:EB:45:A0:E5:C4:AE:E9:91:65:7A:73"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: evm.eventdrop.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: ch=1782855981; id=jcl2cbzc; chid=jcl2cbzc; chsol=d0de6172842c00c5a92b2cb2cebf7bd2\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 30 Jun 2026 21:46:22 GMT\r\ncontent-type: text/html; charset=utf-8\r\nvary: accept-encoding\r\npriority: u=0,i\r\naccess-control-allow-origin: *\r\ncache-control: no-store\r\nset-cookie: id=jcl2cbzc; Max-Age=86400; Path=/\nchid=\"\"; Max-Age=86400; Path=/\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=odxGxDhQMYwATQ8wA%2FBU6o1wlGWsasA3kuvPVNgb%2F7L5Ldz1SDAqLuAJlWDokPaVYiFsm%2FQx%2B4t2b3uzTVdtMzuYOrxBEGdPc9yOeA7jP0ctdBTXLiz1i%2Fh6iF%2BvU53wY4R6Nw%3D%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: zstd\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1405d027c18712a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":111538,"size_decoded":12312,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (11908)","md5":"a9aa977701848c0f8fe616abececfa80","sha1":"f2de8374a9fac03c1262615058227f8ae6757f98","sha256":"6d5531883813dc3b36b327c4f0eaee4261b5e21df4fa6ab949fdfb98e8e01632","sha512":"141a07f90e273f000e3fbde72fd099e09901c3c5684fcbbfec4bc105a26c0d0f2c3d5182909d02fc9197e52bfc83c204f18f43bcf4966f60d36ba2dced7ad04a","ssdeep":"768:uov9Lw5DtQLQpOPbxPvlsKyJnAikcmlA4O+uTXGG2xzxgX+yYi17S7TATFF:xGJj4O+OBNQ6","tlshash":"a1b329e0bdf4241f9600174e860864d5ab57e08bab7e4004b9dc233a5f97d4beda367e","first_seen":"2026-06-30T19:14:35.086385Z","last_seen":"2026-06-30T21:46:47.77515Z","times_seen":2,"resource_available":true,"data":null}},"time_used":163,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":134,"receive":29,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"evm.eventdrop.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"evm.eventdrop.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"evm.eventdrop.org/favicon.ico","fqdn":"evm.eventdrop.org","domain":"eventdrop.org","tld":"org"},"ip":{"addr":"172.67.158.82","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://evm.eventdrop.org/","date":"2026-06-30T21:46:23.202Z","timestamp":1782855983202,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eventdrop.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 15:54:59 GMT","end":"Sun, 27 Sep 2026 16:53:44 GMT"},"fingerprint":{"sha1":"D8:66:56:1A:A2:C5:60:B7:7E:36:49:B0:90:95:7E:A5:4A:46:8E:E2","sha256":"57:F3:14:C3:4B:7C:B5:99:CF:23:14:26:A0:C1:E3:4B:24:71:0E:18:50:EB:45:A0:E5:C4:AE:E9:91:65:7A:73"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: evm.eventdrop.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://evm.eventdrop.org/\r\nCookie: ch=1782855981; id=jcl2cbzc; chid=\"\"; chsol=d0de6172842c00c5a92b2cb2cebf7bd2\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\nserver: cloudflare\r\ndate: Tue, 30 Jun 2026 21:46:23 GMT\r\ncontent-type: text/html\r\nvary: accept-encoding\r\npriority: u=6,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5NRAvkjgUfR%2F8AkdKrC5U1d0Nm9%2Bv6lZ98GIiTUhGY6TXnBB3uimJw%2F9WhuKwkHb2lHdv7VPythsvuPjqecbuuAx8LIbdzFtFBSUdaqpz1ZEtnbjPBO185ax16r4LnrTKBS%2BxQ%3D%3D\"}]}\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1405d070c3b712a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":153,"size_decoded":751,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"998368d7c95ea4293237f2320546e440","sha1":"30dfd2d3bb8a7e3241bd7792e90a98ebb70be3a4","sha256":"533a1ca5d6595793725bca7641d9461a0f00dd1732dded3e4281196f5dd21736","sha512":"648c4720a85dbf834be1ba00f0e1b4167cc670fe15896efb00a77fb6e0c225a13aae3da10d85fa6e7f726420d9bb3c20c43466e02296d44153c127b7160e0b97","ssdeep":"","tlshash":"4fc02b2d7513bc4cc563317832c37080c0c6833769bb4112c440800331cf2998bc3397","first_seen":"2023-04-06T02:01:38Z","last_seen":"2026-07-02T13:54:02.835818Z","times_seen":5248,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"evm.eventdrop.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"evm.eventdrop.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"web-181.pages.dev/api/v1/cloaker-log","fqdn":"web-181.pages.dev","domain":"web-181.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.46.230","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://evm.eventdrop.org/","date":"2026-06-30T21:46:24.069Z","timestamp":1782855984069,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"web-181.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Jun 2026 10:38:24 GMT","end":"Mon, 28 Sep 2026 11:35:53 GMT"},"fingerprint":{"sha1":"03:5F:20:C0:F1:C8:8C:DA:9C:D3:7A:EA:67:45:46:AD:E1:EA:20:BF","sha256":"79:DD:6F:29:86:EB:0F:70:3C:C3:F2:36:1E:28:C5:BD:F6:7B:C6:EA:21:D1:9F:27:11:EB:D2:C3:84:84:85:86"}}},"request":{"raw":"POST /api/v1/cloaker-log HTTP/1.1\r\nHost: web-181.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nX-Config-Id: 6a217093087136ea044ff2bb\r\nReferer: https://evm.eventdrop.org/\r\nContent-Length: 380\r\nOrigin: https://evm.eventdrop.org\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 502 \r\ndate: Tue, 30 Jun 2026 21:46:24 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncf-ray: a1405d0c8c80a0f0-OSL\r\naccess-control-allow-origin: *\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nretry-after: 60\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS\r\nreferrer-policy: same-origin\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uzCWWlHbD5ot6yT0enkuycZWazcOwaqESa3aJHQD%2B0YS3mFQI3KHjgIEiqeZyXAaQt1QJ1fq73afWw9MI3jCUBTH8LnIsVJUKeunws2nssfJkcy2OvlxYePjfw3q7vDutXGQvQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"502","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6405,"size_decoded":7265,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (396)","md5":"1565418c3756f7901f4bf31e176811c9","sha1":"e11c669b6609e162a6310df540b0b636af27a5c1","sha256":"250e0d6ede5f9d098de6924706e9e824b9a424c712d8a9ae91f2ae6df91bde9a","sha512":"3a8930c971a7c3eeae8dcbbbbe623d331eb7f101e15278e61fb6d544d72995633b07076d18aaf1e17153dc287c46fd53e16f19b038e0f23256d0a4f41732d079","ssdeep":"96:1j9jwIjYjODK/D9KUnuG4Fh8/G4F25c424Fw+skKmtmnia7RJleaQxP:1j9jhjYj6K/Brueo1SVMna7vl5eP","tlshash":"0fd14271b1b512b610e3c2933695eb1ab9e4c613cbef4494b3dcc6632f9ee81a943194","first_seen":"2026-06-30T21:46:47.77635Z","last_seen":"2026-06-30T21:46:47.77635Z","times_seen":1,"resource_available":false,"data":null}},"time_used":507,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":506,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"web-181.pages.dev/api/v1/cloaker-log","fqdn":"web-181.pages.dev","domain":"web-181.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.46.230","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://evm.eventdrop.org/","date":"2026-06-30T21:46:25.581Z","timestamp":1782855985581,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"web-181.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Jun 2026 10:38:24 GMT","end":"Mon, 28 Sep 2026 11:35:53 GMT"},"fingerprint":{"sha1":"03:5F:20:C0:F1:C8:8C:DA:9C:D3:7A:EA:67:45:46:AD:E1:EA:20:BF","sha256":"79:DD:6F:29:86:EB:0F:70:3C:C3:F2:36:1E:28:C5:BD:F6:7B:C6:EA:21:D1:9F:27:11:EB:D2:C3:84:84:85:86"}}},"request":{"raw":"OPTIONS /api/v1/cloaker-log HTTP/1.1\r\nHost: web-181.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,x-config-id\r\nReferer: https://evm.eventdrop.org/\r\nOrigin: https://evm.eventdrop.org\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 204 \r\ndate: Tue, 30 Jun 2026 21:46:25 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7ZOOqttV2M80L8bw06FZ%2FHnmzABXubahgZ6s1q%2BorG%2BlUSPvhIIA7MZjvaNFuxSuq90zRW3yyAxRtHlFPXqd71q%2Ff%2FFnKqRM4kVkItjHZr1OzXxmU0F7XekD6hOX%2FXY16IE2mg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\ncf-ray: a1405d15ee2356c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":640,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-02T13:08:15.710003Z","times_seen":16912657,"resource_available":true,"data":null}},"time_used":26,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"evm.eventdrop.org/stat?ping=10.0\u0026id=jcl2cbzc","fqdn":"evm.eventdrop.org","domain":"eventdrop.org","tld":"org"},"ip":{"addr":"172.67.158.82","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://evm.eventdrop.org/","date":"2026-06-30T21:46:32.726Z","timestamp":1782855992726,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eventdrop.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 15:54:59 GMT","end":"Sun, 27 Sep 2026 16:53:44 GMT"},"fingerprint":{"sha1":"D8:66:56:1A:A2:C5:60:B7:7E:36:49:B0:90:95:7E:A5:4A:46:8E:E2","sha256":"57:F3:14:C3:4B:7C:B5:99:CF:23:14:26:A0:C1:E3:4B:24:71:0E:18:50:EB:45:A0:E5:C4:AE:E9:91:65:7A:73"}}},"request":{"raw":"GET /stat?ping=10.0\u0026id=jcl2cbzc HTTP/1.1\r\nHost: evm.eventdrop.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://evm.eventdrop.org/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: ch=1782855981; id=jcl2cbzc; chid=\"\"; chsol=d0de6172842c00c5a92b2cb2cebf7bd2\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 30 Jun 2026 21:46:32 GMT\r\ncontent-type: text/html; charset=utf-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\naccess-control-allow-origin: *\r\ncache-control: no-store\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Aw3cllb4ilgKmtKEZ5XuLk%2FC2uUQEmKSscAXtuS8Rtr3cn5HOOdGaDOH%2BAcPieoQ1je%2BeRMA4VMyQoVHcpkBoEZcpSmNVwESCsgW%2Bkid1%2FnnOzzLNFZQs%2FqfMjFE99VrGBSVKg%3D%3D\"}]}\r\ncontent-length: 4\r\ncf-ray: a1405d428edc712a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4,"size_decoded":658,"mime_type":"text/html; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"ce7129b555fd0208c1751956ecab4952","sha1":"e4ca2609b3c50b5c18b969f5cff1373b22dd0bb3","sha256":"23491e95922f078abf97fcd95fb579fbefd3b13421f83ee48f349ec8a1d88ef6","sha512":"e12016a9381320c985b13cd5acdb45b3365771b5e9751514c2861b99bcbd68240229648699984deaf129e5ca16d9a95622bd66fc86e6b1354654875153de528e","ssdeep":"","tlshash":"ef30000000000000000000000000000000000000000003000000000000000000000000","first_seen":"2026-06-30T19:14:35.085291Z","last_seen":"2026-06-30T21:46:47.772451Z","times_seen":2,"resource_available":false,"data":null}},"time_used":71,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":71,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"evm.eventdrop.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"evm.eventdrop.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"evm.eventdrop.org/assets/evm-noir.js?d=19","fqdn":"evm.eventdrop.org","domain":"eventdrop.org","tld":"org"},"ip":{"addr":"172.67.158.82","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://evm.eventdrop.org/","date":"2026-06-30T21:46:22.735Z","timestamp":1782855982735,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eventdrop.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 15:54:59 GMT","end":"Sun, 27 Sep 2026 16:53:44 GMT"},"fingerprint":{"sha1":"D8:66:56:1A:A2:C5:60:B7:7E:36:49:B0:90:95:7E:A5:4A:46:8E:E2","sha256":"57:F3:14:C3:4B:7C:B5:99:CF:23:14:26:A0:C1:E3:4B:24:71:0E:18:50:EB:45:A0:E5:C4:AE:E9:91:65:7A:73"}}},"request":{"raw":"GET /assets/evm-noir.js?d=19 HTTP/1.1\r\nHost: evm.eventdrop.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://evm.eventdrop.org/\r\nCookie: ch=1782855981; id=jcl2cbzc; chid=\"\"; chsol=d0de6172842c00c5a92b2cb2cebf7bd2\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 30 Jun 2026 21:46:22 GMT\r\ncontent-type: application/javascript\r\netag: W/\"6a21b835-403fd\"\r\nlast-modified: Thu, 04 Jun 2026 17:39:01 GMT\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=i3c905xiASfL%2Fd%2FuMqrBrJdfgqqpYgHiHq3C%2FIe%2FGy8A3V3w9F6xkbe39b4X7lJn94ypmlDdQjxslzeXETwDD%2Bael2ot639xSftWyIDh8V4BUpd7RcYGo27f1kqliJJ4kebTTQ%3D%3D\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\ncontent-encoding: zstd\r\ncf-ray: a1405d041c1e712a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":263165,"size_decoded":35065,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"1655d02bc51e29df29824805b5e9b3da","sha1":"d5ee417adbd51edb8fc1bd89342918af5ad0f418","sha256":"186109cb9ba243171abfe20b1b01bf0674a902cfd06371464cca3806bd96cb2c","sha512":"e379308f03613eeced0cfac8001c889d15b3f5bd7274d29536b1117ffab8bbfdfdeb295d1cc7967dda72c4166b926b2b5c8100b72d2a9cf3be5a756c52096631","ssdeep":"1536:RFhVu5HfP6rildKus7O3Tpm8DGSSwZ5qvX20r1FTtefGnaN1DhE+slWqs+1Vnxnw:q","tlshash":"ea447dd35398939e67c108c9444d350708eac2355c2e528eaef2a9dffd3ea41a637b71","first_seen":"2026-06-13T10:01:43.859991Z","last_seen":"2026-06-30T21:46:47.777846Z","times_seen":3,"resource_available":true,"data":null}},"time_used":106,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":101,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"evm.eventdrop.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"evm.eventdrop.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"evm.eventdrop.org/stat?ld=1\u0026ld_time=0.6\u0026wallets=\u0026id=jcl2cbzc","fqdn":"evm.eventdrop.org","domain":"eventdrop.org","tld":"org"},"ip":{"addr":"172.67.158.82","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://evm.eventdrop.org/","date":"2026-06-30T21:46:23.500Z","timestamp":1782855983500,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eventdrop.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 15:54:59 GMT","end":"Sun, 27 Sep 2026 16:53:44 GMT"},"fingerprint":{"sha1":"D8:66:56:1A:A2:C5:60:B7:7E:36:49:B0:90:95:7E:A5:4A:46:8E:E2","sha256":"57:F3:14:C3:4B:7C:B5:99:CF:23:14:26:A0:C1:E3:4B:24:71:0E:18:50:EB:45:A0:E5:C4:AE:E9:91:65:7A:73"}}},"request":{"raw":"GET /stat?ld=1\u0026ld_time=0.6\u0026wallets=\u0026id=jcl2cbzc HTTP/1.1\r\nHost: evm.eventdrop.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://evm.eventdrop.org/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: ch=1782855981; id=jcl2cbzc; chid=\"\"; chsol=d0de6172842c00c5a92b2cb2cebf7bd2\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 30 Jun 2026 21:46:23 GMT\r\ncontent-type: text/html; charset=utf-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\naccess-control-allow-origin: *\r\ncache-control: no-store\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2F5rp9Tvyg4M34BxemeQ7PzQ6eGxY%2BWFW9FCH3zb19NVcKAPYhtkVkCjgJIjoswUHZU20bVQu5i36wtXiHexDqQuhC07Sh%2BIqW%2FL5wKZsm%2FxBELUqtY2UA89%2FDRBohmug2D1QTQ%3D%3D\"}]}\r\ncontent-length: 4\r\ncf-ray: a1405d08ec49712a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4,"size_decoded":658,"mime_type":"text/html; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"ce7129b555fd0208c1751956ecab4952","sha1":"e4ca2609b3c50b5c18b969f5cff1373b22dd0bb3","sha256":"23491e95922f078abf97fcd95fb579fbefd3b13421f83ee48f349ec8a1d88ef6","sha512":"e12016a9381320c985b13cd5acdb45b3365771b5e9751514c2861b99bcbd68240229648699984deaf129e5ca16d9a95622bd66fc86e6b1354654875153de528e","ssdeep":"","tlshash":"ef30000000000000000000000000000000000000000003000000000000000000000000","first_seen":"2026-06-30T19:14:35.085291Z","last_seen":"2026-06-30T21:46:47.772451Z","times_seen":2,"resource_available":false,"data":null}},"time_used":77,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":77,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"evm.eventdrop.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"evm.eventdrop.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"web-181.pages.dev/api/v1/cloaker-log","fqdn":"web-181.pages.dev","domain":"web-181.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.46.230","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://evm.eventdrop.org/","date":"2026-06-30T21:46:24.073Z","timestamp":1782855984073,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"web-181.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Jun 2026 10:38:24 GMT","end":"Mon, 28 Sep 2026 11:35:53 GMT"},"fingerprint":{"sha1":"03:5F:20:C0:F1:C8:8C:DA:9C:D3:7A:EA:67:45:46:AD:E1:EA:20:BF","sha256":"79:DD:6F:29:86:EB:0F:70:3C:C3:F2:36:1E:28:C5:BD:F6:7B:C6:EA:21:D1:9F:27:11:EB:D2:C3:84:84:85:86"}}},"request":{"raw":"OPTIONS /api/v1/cloaker-log HTTP/1.1\r\nHost: web-181.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,x-config-id\r\nReferer: https://evm.eventdrop.org/\r\nOrigin: https://evm.eventdrop.org\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 \r\ndate: Tue, 30 Jun 2026 21:46:24 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=335OzZJFrj91G%2BA2XfPbW171r1EQfpBf7eoAeRXv1f%2BXG0gCR85ZBAWBCFEC6PQcWDIU9QYpN98YS%2B5Fd3jZAowjxlQyCk57U4Jn10%2Ft4uTYTO5F4hYcmAlowP1pmP9rDkIg%2Bw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: a1405d0c7c51a0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":613,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-02T13:08:15.710003Z","times_seen":16912657,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"evm.eventdrop.org/","fqdn":"evm.eventdrop.org","domain":"eventdrop.org","tld":"org"},"ip":{"addr":"172.67.158.82","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-06-30T21:46:21.712Z","timestamp":1782855981712,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eventdrop.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 15:54:59 GMT","end":"Sun, 27 Sep 2026 16:53:44 GMT"},"fingerprint":{"sha1":"D8:66:56:1A:A2:C5:60:B7:7E:36:49:B0:90:95:7E:A5:4A:46:8E:E2","sha256":"57:F3:14:C3:4B:7C:B5:99:CF:23:14:26:A0:C1:E3:4B:24:71:0E:18:50:EB:45:A0:E5:C4:AE:E9:91:65:7A:73"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: evm.eventdrop.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 30 Jun 2026 21:46:21 GMT\r\ncontent-type: text/html; charset=utf-8\r\nvary: accept-encoding\r\npriority: u=0,i\r\naccess-control-allow-origin: *\r\ncache-control: no-store\r\nset-cookie: ch=1782855981; Max-Age=86400; Path=/\nid=jcl2cbzc; Max-Age=86400; Path=/\nchid=jcl2cbzc; Max-Age=86400; Path=/\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VGFQtXUSz5osJyzjaMjfsh0QAOwrRL9du6dDaOYw6375d8hbDX51P4kFy3p23GasfKxrkCSsFCfQJsrfg1koC0qumceB5y5c3wJR6X0XyfehvwKJ69wgjIDmTI8BEu7rrTZe9g%3D%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: zstd\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1405cfe6c02712a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":321,"size_decoded":1058,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"cb3cd034cc2be5806918e4b0d53a6f71","sha1":"b06ef7a23a8329579fe31a416e9f56cdb17ae0b7","sha256":"d0f22fc565de683c2d04a1cc068bff3c8755cfeb1566b6c5cc73cbed0e84abf6","sha512":"b80155be0db34eb3d96d97291163a3ea71b6f566298ca8cee7fe87dfc2cc8e7ca1745117cac651152a638ac736b621756cb89e3db820993668f8e7bb75e68365","ssdeep":"","tlshash":"bee07d653c004d164aa0b9742ff0f2949aa211a4fe326a5264dc3c12168473ffe82a82","first_seen":"2026-06-30T21:46:47.778405Z","last_seen":"2026-06-30T21:46:47.778405Z","times_seen":1,"resource_available":true,"data":null}},"time_used":221,"timings":{"blocked":-1,"dns":89,"connect":15,"send":0,"wait":116,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"evm.eventdrop.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"evm.eventdrop.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}