{"report_id":"aabd4501-c611-4e94-90e4-6d95cef4bd4a","version":6,"status":"done","tags":[],"date":"2026-04-06T21:33:31Z","url":{"schema":"http","addr":"airdropx.tech","fqdn":"airdropx.tech","domain":"airdropx.tech","tld":"tech"},"ip":{"addr":"185.158.133.1","port":0,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"final":{"url":{"schema":"https","addr":"airdropx.tech/","fqdn":"airdropx.tech","domain":"airdropx.tech","tld":"tech"},"title":"AirdropX - NFT Airdrop Tool | Send Tokens to NFT Holders","dom":{"size":47598,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (29309)","md5":"b21004243d037c31a4ed7a7af334fdc0","sha1":"2f791688e41c8b6636b63201215376e5719ab5ba","sha256":"0696f1cebdbc56cfa7dcf36584aef2cbd71a7bc658e28aa982e45d394768e2d0","sha512":"5eed7c3b5a75f42fd3c4d5122ae6ce46c31b259bcdcac76f7a91024d487928330d35416ae401af82abe59c80ade869c4a88485fb0b626a47424177214a56fd61","ssdeep":"768:XMsnB7cxksc64Jysq7vGPho9ROVSb0UwNgyOmeLQpK:8Xx/c64Jysq7v1gkp","tlshash":"6123ea557208167d5a1b9690f7d0bb3ce039f242df5b8828f25c00a3a7c7fe8696b794","dom_hash":"domhash04bedf055a73f9f93047f9bf9f779354","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"airdropx.tech","fqdn":"airdropx.tech","domain":"airdropx.tech","tld":"tech"},"ip":{"addr":"185.158.133.1","port":0,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-05-11T21:33:31Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-06","alert":"Sinkholed","trigger":"airdropx.tech","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"airdropx.tech","ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"domain_registered":"2026-01-31","domain_rank":0,"first_seen":"2026-02-02T09:59:57.541304Z","last_seen":"2026-02-02T09:59:57.541304Z","alert_count":8,"request_count":8,"received_data":4085134,"sent_data":5153,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"www.googletagmanager.com","ip":{"addr":"142.251.143.136","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2011-11-11","domain_rank":283,"first_seen":"2012-10-04T01:07:32Z","last_seen":"2026-04-05T22:24:03.651898Z","alert_count":0,"request_count":1,"received_data":229255,"sent_data":446,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"airdropx.tech/","fqdn":"airdropx.tech","domain":"airdropx.tech","tld":"tech"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"introduction_type":"scriptElement","is_inline":true,"md5":"6a9f800fa4b3d6bfebe4f6f367551fa9","sha1":"990c527aa81523df3ada8eb744e0d79095b6981b","sha256":"befa79899719e3ac075ff6062a588785e368ff75db26bb8ac8fc4fc4f8423069","sha512":"4cdf43379b7dee6f219644ff769a58d51d9e97cea2493ff1f281dd676e583da9829853062a70ca2e0c36aeb84bcd1ea0e83abe906f5f51dcc475ac560fb680ed","ssdeep":"","tlshash":"9ec08c88220b0cb05aab2e050b2fb200f427221394a09a203a0fa3485f30e03eb4c8a4","size":184,"data":"","first_seen":"2026-04-06T21:33:36.48457Z","last_seen":"2026-04-06T21:34:44.223691Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=%VITE_GA_MEASUREMENT_ID%","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.251.143.136","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"3de8fe5ce481e5251de9228e7c2bb065","sha1":"1caa566834a0a20a17a9d9e5372fce336ea275df","sha256":"e50109b3179cba4aa4128cddb89904303dfcf1f18fa3e971a888ad66a6608f38","sha512":"ea39be05d83fe1dde2aaf408cb477bdd8678e405a2b4b26de25f7a38ca663c06c527408bd9b8cc41c519a8c677038725f16d680b311f6ce91058f2e6303a0c2a","ssdeep":"3072:9kxOuOLyw510aVDrJu0kg4FvIq2yr19JW6faxauvmw7ViZcbjvRAroQ+Rc:isLyeGRToz8uvmOiZcbjvRaoQV","tlshash":"ba2429ddb7d6706643a3b5b8903f014bb27a79a2f84cc890e142d8c46e7466a4273f7d","size":228606,"data":"","first_seen":"2026-04-06T21:33:36.479356Z","last_seen":"2026-04-06T21:34:44.219465Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"airdropx.tech/assets/index-B_eNGUkc.js","fqdn":"airdropx.tech","domain":"airdropx.tech","tld":"tech"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"introduction_type":"scriptElement","is_inline":false,"md5":"b6bd7b6e77bc5ec56c57a86a522093e0","sha1":"f655edc0ac68478cb926b36be50b533d88bc870a","sha256":"5318e511e4934a083794232af6b0c5d4d36453525e63a4a22c85466853345e99","sha512":"ea51fb4034e0871364de4929ebcaafc4261157e059e28cc20ea2c599759ac2228931761c0113312de26d1ff02f4d487f2551d4c7ec857ded1a715fd08d203e9c","ssdeep":"12288:D5DP2z3A0OyA9YHzjajZ4x42vNKd1UvghP4Rba2svYqzdDTKMcskiQfudZMh7tt:FDP57Ag4x42FKd1jhP4Rba2oYqzMKUpt","tlshash":"8d255bd871e7b17587e644e0803b0102f23d6955b40e80a8f23c9eeb3e75549a6bbf79","size":1040161,"data":"","first_seen":"2026-04-06T21:33:36.482369Z","last_seen":"2026-04-06T21:34:44.220795Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"airdropx.tech/~flock.js","fqdn":"airdropx.tech","domain":"airdropx.tech","tld":"tech"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"introduction_type":"scriptElement","is_inline":false,"md5":"ed557a78d5301fbb961abfe911a42b62","sha1":"d11a2a4e9fee28c4b1abc38cd8136bffec7e325b","sha256":"a86e084b4f82709814be6c15fd6305daa783fda87ad95402da9a4d3a1dd6d748","sha512":"18dd1525e2b4d89e3c46d92367fca020cf99fb07856acfd96a25dc7410611eea83b438c91691683983495945eb04a9427bc63e2a383cbe93449f4df0eb1ddb51","ssdeep":"384:FtUCBXTpeaFEo5TTThri1t/mCsOCXiTNZruJ4vKFlcEhRCDxOcX/YM2Vybyq/kmt:n7XTpeauI/Thri1CKWM4ldRzurwkTO0D","tlshash":"cea2b6d61007243d57ead1a13929f7d63177ea98a0caec8a7de91f84d414c83f3f294a","size":21296,"data":"","first_seen":"2025-07-30T15:25:28.733337Z","last_seen":"2026-04-13T00:52:53.148238Z","times_seen":6078,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null},"http":[{"url":{"schema":"https","addr":"airdropx.tech/","fqdn":"airdropx.tech","domain":"airdropx.tech","tld":"tech"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-04-06T21:33:08.375Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"airdropx.tech","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 31 Mar 2026 19:23:31 GMT","end":"Mon, 29 Jun 2026 20:23:22 GMT"},"fingerprint":{"sha1":"61:D8:8E:F9:0C:22:79:38:25:3E:75:E1:6C:89:B2:72:BC:DB:46:73","sha256":"20:D9:2C:7B:4E:79:97:E0:15:51:B1:A9:4E:82:F9:74:F9:2A:7C:06:A2:62:8B:1D:D7:5A:AB:86:91:B7:88:E2"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: airdropx.tech\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 06 Apr 2026 21:33:08 GMT\r\ncontent-type: text/html; charset=utf-8\r\nset-cookie: __cf_bm=F2HUAtVB5dxxGmKBml3zvNH_F0s2L3E_PoPhwZTSZa0-1775511188.4608486-1.0.1.1-nTjhlQKKQcb.AxGS6s9lLFXKUWFxy3FuKnyIWqCTXCxBINWEK4Rj86X5RY7UUz56lnYKjPF3sWTOfK8vOiWhPSfKauCkfKBxAXbXI5qEtGyYexD7z.Umsn8.PN1.xyVO; HttpOnly; Secure; Path=/; Domain=airdropx.tech; Expires=Mon, 06 Apr 2026 22:03:08 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\netag: W/\"f41bac4df68f961d1ea9628f7d932f36\"\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-ray: 9e83e8bfdf125685-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3707,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"c8babb51c84b3e916ec39d9992ef71b6","sha1":"41cbd832b2304c189991b0de6045a18c4b6c1e2e","sha256":"5b215a78b9877517a487f8d83372e5df343d118ceeadf6aa1e22e5a030d509ce","sha512":"2db33eca01c3cce86393b451f725e7f037b1d38d44baa46cd4d793e1ae4c74af1cbc2fe103fa4f3cb36073a3f813af12f630001065a04945c3070db6e1c21d08","ssdeep":"","tlshash":"fc711f8bed50981122b8895026d2fb249973500f87c8b915ba9c569c0fdafcbc7fb35c","first_seen":"2026-04-06T21:33:36.478537Z","last_seen":"2026-04-06T21:34:44.218428Z","times_seen":2,"resource_available":true,"data":null}},"time_used":487,"timings":{"blocked":83,"dns":63,"connect":1,"send":0,"wait":321,"receive":0,"ssl":17},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-06","alert":"Sinkholed","trigger":"airdropx.tech","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=%VITE_GA_MEASUREMENT_ID%","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.251.143.136","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://airdropx.tech/","date":"2026-04-06T21:33:08.921Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 16 Mar 2026 08:36:32 GMT","end":"Mon, 08 Jun 2026 08:36:31 GMT"},"fingerprint":{"sha1":"F1:EC:3B:52:4B:66:50:1D:0B:50:65:93:DD:B9:FD:40:BF:2D:6E:7B","sha256":"46:A7:13:4E:73:FB:45:6B:0B:73:AF:6C:C5:72:C7:83:79:46:1B:0D:3F:B2:A1:0C:AD:70:4A:EA:1E:4A:D1:2B"}}},"request":{"raw":"GET /gtag/js?id=%VITE_GA_MEASUREMENT_ID% HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://airdropx.tech/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Mon, 06 Apr 2026 21:33:09 GMT\r\nexpires: Mon, 06 Apr 2026 21:33:09 GMT\r\ncache-control: private, max-age=900\r\nlast-modified: Mon, 06 Apr 2026 21:14:00 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 83712\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":228606,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (4591)","md5":"3de8fe5ce481e5251de9228e7c2bb065","sha1":"1caa566834a0a20a17a9d9e5372fce336ea275df","sha256":"e50109b3179cba4aa4128cddb89904303dfcf1f18fa3e971a888ad66a6608f38","sha512":"ea39be05d83fe1dde2aaf408cb477bdd8678e405a2b4b26de25f7a38ca663c06c527408bd9b8cc41c519a8c677038725f16d680b311f6ce91058f2e6303a0c2a","ssdeep":"3072:9kxOuOLyw510aVDrJu0kg4FvIq2yr19JW6faxauvmw7ViZcbjvRAroQ+Rc:isLyeGRToz8uvmOiZcbjvRaoQV","tlshash":"ba2429ddb7d6706643a3b5b8903f014bb27a79a2f84cc890e142d8c46e7466a4273f7d","first_seen":"2026-04-06T21:33:36.479356Z","last_seen":"2026-04-06T21:34:44.219465Z","times_seen":2,"resource_available":true,"data":null}},"time_used":216,"timings":{"blocked":84,"dns":0,"connect":8,"send":0,"wait":29,"receive":17,"ssl":75},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"airdropx.tech/assets/index-gQVaHRtM.css","fqdn":"airdropx.tech","domain":"airdropx.tech","tld":"tech"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://airdropx.tech/","date":"2026-04-06T21:33:08.924Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"airdropx.tech","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 31 Mar 2026 19:23:31 GMT","end":"Mon, 29 Jun 2026 20:23:22 GMT"},"fingerprint":{"sha1":"61:D8:8E:F9:0C:22:79:38:25:3E:75:E1:6C:89:B2:72:BC:DB:46:73","sha256":"20:D9:2C:7B:4E:79:97:E0:15:51:B1:A9:4E:82:F9:74:F9:2A:7C:06:A2:62:8B:1D:D7:5A:AB:86:91:B7:88:E2"}}},"request":{"raw":"GET /assets/index-gQVaHRtM.css HTTP/1.1\r\nHost: airdropx.tech\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://airdropx.tech/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: __cf_bm=F2HUAtVB5dxxGmKBml3zvNH_F0s2L3E_PoPhwZTSZa0-1775511188.4608486-1.0.1.1-nTjhlQKKQcb.AxGS6s9lLFXKUWFxy3FuKnyIWqCTXCxBINWEK4Rj86X5RY7UUz56lnYKjPF3sWTOfK8vOiWhPSfKauCkfKBxAXbXI5qEtGyYexD7z.Umsn8.PN1.xyVO\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 06 Apr 2026 21:33:08 GMT\r\ncontent-type: text/css; charset=utf-8\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\netag: W/\"6e5f5065ed34587589a4a3e60b66ca53\"\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-ray: 9e83e8c2c97b5685-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":78826,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"6e5f5065ed34587589a4a3e60b66ca53","sha1":"5e30a142ceaa78dc163681ac4cb8b2b0778006c7","sha256":"aa85bf5d3c3c070e67a2735f8c790ba8d85f899d7fe4ac20dcc50d84a388c3a6","sha512":"89051990afb4b079bf077d784489f2430bea776ccfb1911c7f97f2acdbbb2db4bf590a51e9b13802cc8d2a0a0ce6927cd2eb1b73218d3f5ab3e025394d557dc3","ssdeep":"1536:EkRh7zovlYtk66HUqztGPCw378VQZkt5FNCo2t:Ph7zovAk7UqztGPCw378VQZkt5Ff2t","tlshash":"e473631dba19603f3c2790f8d3ccb9aca11af0c0de3a46b9be9a41215bd27f61d67514","first_seen":"2026-04-06T21:33:36.480173Z","last_seen":"2026-04-06T21:34:44.221678Z","times_seen":2,"resource_available":false,"data":null}},"time_used":68,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":68,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-06","alert":"Sinkholed","trigger":"airdropx.tech","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"airdropx.tech/assets/mascot-DnAFPmCJ.png","fqdn":"airdropx.tech","domain":"airdropx.tech","tld":"tech"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://airdropx.tech/","date":"2026-04-06T21:33:09.329Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"airdropx.tech","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 31 Mar 2026 19:23:31 GMT","end":"Mon, 29 Jun 2026 20:23:22 GMT"},"fingerprint":{"sha1":"61:D8:8E:F9:0C:22:79:38:25:3E:75:E1:6C:89:B2:72:BC:DB:46:73","sha256":"20:D9:2C:7B:4E:79:97:E0:15:51:B1:A9:4E:82:F9:74:F9:2A:7C:06:A2:62:8B:1D:D7:5A:AB:86:91:B7:88:E2"}}},"request":{"raw":"GET /assets/mascot-DnAFPmCJ.png HTTP/1.1\r\nHost: airdropx.tech\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://airdropx.tech/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: __cf_bm=F2HUAtVB5dxxGmKBml3zvNH_F0s2L3E_PoPhwZTSZa0-1775511188.4608486-1.0.1.1-nTjhlQKKQcb.AxGS6s9lLFXKUWFxy3FuKnyIWqCTXCxBINWEK4Rj86X5RY7UUz56lnYKjPF3sWTOfK8vOiWhPSfKauCkfKBxAXbXI5qEtGyYexD7z.Umsn8.PN1.xyVO\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 06 Apr 2026 21:33:09 GMT\r\ncontent-type: image/png\r\ncontent-length: 48091\r\netag: \"c7d037fe24e4c5f9566203d27df472d7\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nserver: cloudflare\r\ncf-ray: 9e83e8c55b305685-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":48091,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 542 x 632, 8-bit/color RGBA, non-interlaced","md5":"c7d037fe24e4c5f9566203d27df472d7","sha1":"7785c921853ca6f28b5bf26b49cb06a4cd2dc637","sha256":"64a86dcb5d0c4793116bb97965223bfacb473783f62e22151d767d1b5ff80a57","sha512":"f6c1285c94c6cb7fb5df6f7a121ffe93ab37d99008ca7f9712c0fb306e2cc03c7cecf0117d0e25af188a23be3c793baf6b9faa31ee2e752a4431bb64ca3d32bb","ssdeep":"768:98UcXumWRoa4mDSodVWl/pb+c56Q/iT2NgsM2C2riEEirQ6TTzH0Ub/zRDZwF:9AXupRmmDSqWl/t56QSi7iuc6/z0Ub/a","tlshash":"0523e14347b2ebf9c940c7a09eac10b8657dda49d79df09d62e35b21f2ad7a700b7004","first_seen":"2026-04-06T21:33:36.481068Z","last_seen":"2026-04-06T21:34:44.216467Z","times_seen":2,"resource_available":false,"data":null}},"time_used":83,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":82,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-06","alert":"Sinkholed","trigger":"airdropx.tech","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"airdropx.tech/~flock.js","fqdn":"airdropx.tech","domain":"airdropx.tech","tld":"tech"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://airdropx.tech/","date":"2026-04-06T21:33:08.925Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"airdropx.tech","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 31 Mar 2026 19:23:31 GMT","end":"Mon, 29 Jun 2026 20:23:22 GMT"},"fingerprint":{"sha1":"61:D8:8E:F9:0C:22:79:38:25:3E:75:E1:6C:89:B2:72:BC:DB:46:73","sha256":"20:D9:2C:7B:4E:79:97:E0:15:51:B1:A9:4E:82:F9:74:F9:2A:7C:06:A2:62:8B:1D:D7:5A:AB:86:91:B7:88:E2"}}},"request":{"raw":"GET /~flock.js HTTP/1.1\r\nHost: airdropx.tech\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://airdropx.tech/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: __cf_bm=F2HUAtVB5dxxGmKBml3zvNH_F0s2L3E_PoPhwZTSZa0-1775511188.4608486-1.0.1.1-nTjhlQKKQcb.AxGS6s9lLFXKUWFxy3FuKnyIWqCTXCxBINWEK4Rj86X5RY7UUz56lnYKjPF3sWTOfK8vOiWhPSfKauCkfKBxAXbXI5qEtGyYexD7z.Umsn8.PN1.xyVO\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 06 Apr 2026 21:33:08 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncache-control: max-age=1500\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-ray: 9e83e8c2c97c5685-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21296,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (21296), with no line terminators","md5":"ed557a78d5301fbb961abfe911a42b62","sha1":"d11a2a4e9fee28c4b1abc38cd8136bffec7e325b","sha256":"a86e084b4f82709814be6c15fd6305daa783fda87ad95402da9a4d3a1dd6d748","sha512":"18dd1525e2b4d89e3c46d92367fca020cf99fb07856acfd96a25dc7410611eea83b438c91691683983495945eb04a9427bc63e2a383cbe93449f4df0eb1ddb51","ssdeep":"384:FtUCBXTpeaFEo5TTThri1t/mCsOCXiTNZruJ4vKFlcEhRCDxOcX/YM2Vybyq/kmt:n7XTpeauI/Thri1CKWM4ldRzurwkTO0D","tlshash":"cea2b6d61007243d57ead1a13929f7d63177ea98a0caec8a7de91f84d414c83f3f294a","first_seen":"2025-07-30T15:25:28.733337Z","last_seen":"2026-04-13T00:52:53.148238Z","times_seen":6078,"resource_available":true,"data":null}},"time_used":44,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":44,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-06","alert":"Sinkholed","trigger":"airdropx.tech","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"airdropx.tech/assets/index-B_eNGUkc.js","fqdn":"airdropx.tech","domain":"airdropx.tech","tld":"tech"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://airdropx.tech/","date":"2026-04-06T21:33:08.922Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"airdropx.tech","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 31 Mar 2026 19:23:31 GMT","end":"Mon, 29 Jun 2026 20:23:22 GMT"},"fingerprint":{"sha1":"61:D8:8E:F9:0C:22:79:38:25:3E:75:E1:6C:89:B2:72:BC:DB:46:73","sha256":"20:D9:2C:7B:4E:79:97:E0:15:51:B1:A9:4E:82:F9:74:F9:2A:7C:06:A2:62:8B:1D:D7:5A:AB:86:91:B7:88:E2"}}},"request":{"raw":"GET /assets/index-B_eNGUkc.js HTTP/1.1\r\nHost: airdropx.tech\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://airdropx.tech/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: __cf_bm=F2HUAtVB5dxxGmKBml3zvNH_F0s2L3E_PoPhwZTSZa0-1775511188.4608486-1.0.1.1-nTjhlQKKQcb.AxGS6s9lLFXKUWFxy3FuKnyIWqCTXCxBINWEK4Rj86X5RY7UUz56lnYKjPF3sWTOfK8vOiWhPSfKauCkfKBxAXbXI5qEtGyYexD7z.Umsn8.PN1.xyVO\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 06 Apr 2026 21:33:09 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\netag: W/\"b6bd7b6e77bc5ec56c57a86a522093e0\"\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-ray: 9e83e8c2c9785685-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1040161,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (37534)","md5":"b6bd7b6e77bc5ec56c57a86a522093e0","sha1":"f655edc0ac68478cb926b36be50b533d88bc870a","sha256":"5318e511e4934a083794232af6b0c5d4d36453525e63a4a22c85466853345e99","sha512":"ea51fb4034e0871364de4929ebcaafc4261157e059e28cc20ea2c599759ac2228931761c0113312de26d1ff02f4d487f2551d4c7ec857ded1a715fd08d203e9c","ssdeep":"12288:D5DP2z3A0OyA9YHzjajZ4x42vNKd1UvghP4Rba2svYqzdDTKMcskiQfudZMh7tt:FDP57Ag4x42FKd1jhP4Rba2oYqzMKUpt","tlshash":"8d255bd871e7b17587e644e0803b0102f23d6955b40e80a8f23c9eeb3e75549a6bbf79","first_seen":"2026-04-06T21:33:36.482369Z","last_seen":"2026-04-06T21:34:44.220795Z","times_seen":2,"resource_available":true,"data":null}},"time_used":87,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":87,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-06","alert":"Sinkholed","trigger":"airdropx.tech","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"airdropx.tech/assets/hero-background-Cu5o0x0g.png","fqdn":"airdropx.tech","domain":"airdropx.tech","tld":"tech"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://airdropx.tech/","date":"2026-04-06T21:33:09.433Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"airdropx.tech","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 31 Mar 2026 19:23:31 GMT","end":"Mon, 29 Jun 2026 20:23:22 GMT"},"fingerprint":{"sha1":"61:D8:8E:F9:0C:22:79:38:25:3E:75:E1:6C:89:B2:72:BC:DB:46:73","sha256":"20:D9:2C:7B:4E:79:97:E0:15:51:B1:A9:4E:82:F9:74:F9:2A:7C:06:A2:62:8B:1D:D7:5A:AB:86:91:B7:88:E2"}}},"request":{"raw":"GET /assets/hero-background-Cu5o0x0g.png HTTP/1.1\r\nHost: airdropx.tech\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://airdropx.tech/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: __cf_bm=F2HUAtVB5dxxGmKBml3zvNH_F0s2L3E_PoPhwZTSZa0-1775511188.4608486-1.0.1.1-nTjhlQKKQcb.AxGS6s9lLFXKUWFxy3FuKnyIWqCTXCxBINWEK4Rj86X5RY7UUz56lnYKjPF3sWTOfK8vOiWhPSfKauCkfKBxAXbXI5qEtGyYexD7z.Umsn8.PN1.xyVO\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 06 Apr 2026 21:33:09 GMT\r\ncontent-type: image/png\r\ncontent-length: 2841722\r\netag: \"0edba3fca3b9cc515428088e3ef7371b\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nserver: cloudflare\r\ncf-ray: 9e83e8c5fb9e5685-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2841722,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1920 x 1323, 8-bit/color RGB, non-interlaced","md5":"825459b3cae84b9fc4ddac45f89506b7","sha1":"7ef20f6f743486b2f222b97bf18630eb0e3acf7f","sha256":"0861da5898a63c2f9441f2965b132886bfdaf030b5bb7f6fd46f2e401196e88e","sha512":"8af59bb92cb1aaa80e01f2d5e5bccbed30937000b1ab77f25a538048ed616557cf735b2d05afcc1763257d25f6562f4c020788a4000d3bebc48a062f7fad3ddf","ssdeep":"24576:XLc2j3hKz0Bzr+ekQNR58I0WjEeRaWOmBW5Nwcav9OQ5H:QKxWE+ekgR5FRZp4w511B","tlshash":"04253394724adb9a935c46055700fc332ac697f1b56e044f6ffed11a8c092afe60d4af","first_seen":"2026-04-06T21:33:36.48322Z","last_seen":"2026-04-06T21:34:44.222629Z","times_seen":2,"resource_available":false,"data":null}},"time_used":201,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":99,"receive":102,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-06","alert":"Sinkholed","trigger":"airdropx.tech","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"airdropx.tech/favicon.png","fqdn":"airdropx.tech","domain":"airdropx.tech","tld":"tech"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://airdropx.tech/","date":"2026-04-06T21:33:09.598Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"airdropx.tech","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 31 Mar 2026 19:23:31 GMT","end":"Mon, 29 Jun 2026 20:23:22 GMT"},"fingerprint":{"sha1":"61:D8:8E:F9:0C:22:79:38:25:3E:75:E1:6C:89:B2:72:BC:DB:46:73","sha256":"20:D9:2C:7B:4E:79:97:E0:15:51:B1:A9:4E:82:F9:74:F9:2A:7C:06:A2:62:8B:1D:D7:5A:AB:86:91:B7:88:E2"}}},"request":{"raw":"GET /favicon.png HTTP/1.1\r\nHost: airdropx.tech\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://airdropx.tech/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: __cf_bm=F2HUAtVB5dxxGmKBml3zvNH_F0s2L3E_PoPhwZTSZa0-1775511188.4608486-1.0.1.1-nTjhlQKKQcb.AxGS6s9lLFXKUWFxy3FuKnyIWqCTXCxBINWEK4Rj86X5RY7UUz56lnYKjPF3sWTOfK8vOiWhPSfKauCkfKBxAXbXI5qEtGyYexD7z.Umsn8.PN1.xyVO\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 06 Apr 2026 21:33:09 GMT\r\ncontent-type: image/png\r\ncontent-length: 48091\r\netag: \"c7d037fe24e4c5f9566203d27df472d7\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nserver: cloudflare\r\ncf-ray: 9e83e8c73cb65685-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":48091,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 542 x 632, 8-bit/color RGBA, non-interlaced","md5":"c7d037fe24e4c5f9566203d27df472d7","sha1":"7785c921853ca6f28b5bf26b49cb06a4cd2dc637","sha256":"64a86dcb5d0c4793116bb97965223bfacb473783f62e22151d767d1b5ff80a57","sha512":"f6c1285c94c6cb7fb5df6f7a121ffe93ab37d99008ca7f9712c0fb306e2cc03c7cecf0117d0e25af188a23be3c793baf6b9faa31ee2e752a4431bb64ca3d32bb","ssdeep":"768:98UcXumWRoa4mDSodVWl/pb+c56Q/iT2NgsM2C2riEEirQ6TTzH0Ub/zRDZwF:9AXupRmmDSqWl/t56QSi7iuc6/z0Ub/a","tlshash":"0523e14347b2ebf9c940c7a09eac10b8657dda49d79df09d62e35b21f2ad7a700b7004","first_seen":"2026-04-06T21:33:36.481068Z","last_seen":"2026-04-06T21:34:44.216467Z","times_seen":2,"resource_available":false,"data":null}},"time_used":131,"timings":{"blocked":37,"dns":0,"connect":0,"send":0,"wait":92,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-06","alert":"Sinkholed","trigger":"airdropx.tech","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"airdropx.tech/~api/analytics","fqdn":"airdropx.tech","domain":"airdropx.tech","tld":"tech"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://airdropx.tech/","date":"2026-04-06T21:33:09.656Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"airdropx.tech","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 31 Mar 2026 19:23:31 GMT","end":"Mon, 29 Jun 2026 20:23:22 GMT"},"fingerprint":{"sha1":"61:D8:8E:F9:0C:22:79:38:25:3E:75:E1:6C:89:B2:72:BC:DB:46:73","sha256":"20:D9:2C:7B:4E:79:97:E0:15:51:B1:A9:4E:82:F9:74:F9:2A:7C:06:A2:62:8B:1D:D7:5A:AB:86:91:B7:88:E2"}}},"request":{"raw":"POST /~api/analytics HTTP/1.1\r\nHost: airdropx.tech\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://airdropx.tech/\r\nContent-Type: application/json\r\nContent-Length: 334\r\nOrigin: https://airdropx.tech\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: __cf_bm=F2HUAtVB5dxxGmKBml3zvNH_F0s2L3E_PoPhwZTSZa0-1775511188.4608486-1.0.1.1-nTjhlQKKQcb.AxGS6s9lLFXKUWFxy3FuKnyIWqCTXCxBINWEK4Rj86X5RY7UUz56lnYKjPF3sWTOfK8vOiWhPSfKauCkfKBxAXbXI5qEtGyYexD7z.Umsn8.PN1.xyVO; session-id=98d616bd-752c-4df1-8d9a-0515c943b1dd\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":334,"data":"{\"timestamp\":\"2026-04-06T21:33:09.640Z\",\"action\":\"page_hit\",\"version\":\"1\",\"session_id\":\"98d616bd-752c-4df1-8d9a-0515c943b1dd\",\"payload\":\"{\\\"user-agent\\\":\\\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\\\",\\\"locale\\\":\\\"en-US\\\",\\\"referrer\\\":\\\"\\\",\\\"pathname\\\":\\\"/\\\",\\\"href\\\":\\\"https://airdropx.tech/\\\"}\"}"}},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 06 Apr 2026 21:33:10 GMT\r\ncontent-type: text/plain; charset=UTF-8\r\ncontent-length: 4\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nserver: cloudflare\r\ncf-ray: 9e83e8c75cc85685-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4,"size_decoded":0,"mime_type":"text/plain; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"f92965e2c8a7afb3c1b9a5c09a263636","sha1":"e9b450d14bc2363d292c84f17cfad5cfbd58a458","sha256":"11a6767d5674c7e45f7e00dc525762275b3a48491ad6045427d2609cc496c516","sha512":"25775ba3c567970fc3df3f8107f2a78a67c5619d54bfb37704423acceec253316949eee77b81100a01b91c742e475b4f6157dd2427a9f9fafd87a4078f2d65df","ssdeep":"","tlshash":"54300000000000000000c00c00000000000000000c0000000000000000000000000000","first_seen":"2023-04-09T18:20:08Z","last_seen":"2026-04-13T00:52:53.144595Z","times_seen":6208,"resource_available":true,"data":null}},"time_used":1076,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":1073,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-06","alert":"Sinkholed","trigger":"airdropx.tech","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}
