{"report_id":"b5ae80e1-7d2d-4d69-9e82-0967773ffd42","version":6,"status":"done","tags":[],"date":"2026-03-21T12:51:14Z","url":{"schema":"https","addr":"1drop.life/","fqdn":"1drop.life","domain":"1drop.life","tld":"life"},"ip":{"addr":"104.21.57.244","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"1drop.life/","fqdn":"1drop.life","domain":"1drop.life","tld":"life"},"title":"Airdrop Live | Claim Solana Token Airdrops","dom":{"size":344,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (344), with no line terminators","md5":"e47ec69cd7469e5227ce2cf274a87e21","sha1":"2f31b38d99f4c84f2a256d167f0beb7c36a77ce3","sha256":"0af2273948da0152176d56e4f4d0f2cf4c56e0028a1b1e6f8055c5025334c142","sha512":"bc6153d583576544f96d8876d2201c112d80f3a7db8652d25fe1d90e377cbad8f1c26c375319347d7748ff4ec8d7b3b2b5f66664c2e1832b47e9f26a91e757b9","ssdeep":"","tlshash":"12e026ea1c7ac83565f4038a20b5e2ac162061a0b711e64482d8d8bb9f10fd34ca3988","dom_hash":"domhashfa92bf49a0529f3ae8099507699ba65b","first_seen":"2026-03-21T12:51:19.875633Z","last_seen":"2026-03-21T12:51:19.875633Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"1drop.life/","fqdn":"1drop.life","domain":"1drop.life","tld":"life"},"ip":{"addr":"104.21.57.244","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-04-25T12:51:14Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":4}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"dallying-reveler.fontmaxplugin.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"dallying-reveler.fontmaxplugin.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"dallying-reveler.fontmaxplugin.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"dallying-reveler.fontmaxplugin.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null},"summary":[{"fqdn":"api.coingecko.com","ip":{"addr":"172.66.172.219","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2014-03-26","domain_rank":442226,"first_seen":"2018-05-18T12:16:11Z","last_seen":"2026-03-20T17:01:53.941471Z","alert_count":0,"request_count":1,"received_data":1275,"sent_data":473,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"dallying-reveler.fontmaxplugin.cc","ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-11-02","domain_rank":0,"first_seen":"2026-02-24T21:05:37.722165Z","last_seen":"2026-03-20T20:37:20.128759Z","alert_count":16,"request_count":4,"received_data":1002597,"sent_data":1890,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"172.217.20.170","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-03-15T22:19:58.945817Z","alert_count":0,"request_count":1,"received_data":10794,"sent_data":469,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"1drop.life","ip":{"addr":"172.67.152.27","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-03-21T12:51:15.667519Z","last_seen":"2026-03-21T12:51:15.667519Z","alert_count":0,"request_count":4,"received_data":3185252,"sent_data":1948,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nuxt.js","description":"Nuxt is a Vue framework for developing modern web applications.","website":"https://nuxt.com","common_platform_enumeration":"","icon":"Nuxt.js.svg","categories":["JavaScript frameworks","Web frameworks","Web servers","Static site generator"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Vue.js","description":"Vue.js is an open-source model–view–viewmodel JavaScript framework for building user interfaces and single-page applications.","website":"https://vuejs.org","common_platform_enumeration":"","icon":"vue.svg","categories":["JavaScript frameworks"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"about","addr":"about:blank","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"3128944e19f3769b01e665c3c22c681b","sha1":"4aa7eeab1c8088e3938e0e2083881a70b6eacc28","sha256":"bd861d669f740475446f2e04ae7c7f39aa90a759ccaa274f3254ad7e90ddd431","sha512":"a46ff2639469f115fbf9f592295030a5f71710240b352769c7b0857694ecc1431ac760d687c5c6e338052b97ab511c86931a64c25bb70d5f0f42a96a321931af","ssdeep":"","tlshash":"90d023951c75c93161d8024f2075e3f5276031607711f140c1ccccab7f11dd314f2598","size":217,"data":"","first_seen":"2026-03-21T12:51:19.885272Z","last_seen":"2026-03-21T12:51:19.885272Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1drop.life/cdn-cgi/challenge-platform/scripts/jsd/main.js","fqdn":"1drop.life","domain":"1drop.life","tld":"life"},"ip":{"addr":"172.67.152.27","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"46aa91f15a31a05d49f3e8f879ce2c26","sha1":"4278ae484c8a182351ac03beff0c102300c3664e","sha256":"e01ce4b6e65f2ea501ecd3f54db458e48365acc12432ef5366493e864fef1073","sha512":"6acaffa2b38fd59590cfea19fa42d4e4722a20bfa49ca201906d286476da3c381abfa15a4f862409e19c1881e296d826c58d776bcb575cbdf31b97bb6d761b14","ssdeep":"768:X+mhMASuBu5+2FZhVsw7c6Ywa6gLZ/ohnB2499JnhMTV:ump8wiDo","tlshash":"20c284867dc9fa6c43aa70b51cfb7ac7a2fabc8120186542c2109df4fcb1744556bde8","size":26089,"data":"","first_seen":"2026-03-21T12:51:19.877048Z","last_seen":"2026-03-21T13:46:51.237723Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"1drop.life/cdn-cgi/challenge-platform/h/g/scripts/jsd/ea2d291c0fdc/main.js?","fqdn":"1drop.life","domain":"1drop.life","tld":"life"},"ip":{"addr":"172.67.152.27","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1drop.life/","date":"2026-03-21T12:50:54.112Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1drop.life","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 20 Mar 2026 16:47:15 GMT","end":"Thu, 18 Jun 2026 16:47:14 GMT"},"fingerprint":{"sha1":"B7:F9:9E:EF:68:8B:DC:C4:79:CE:8B:B8:7A:18:51:F2:B5:FA:A6:72","sha256":"C8:A0:7D:9A:E9:37:72:79:F4:BD:88:AB:F7:90:64:E9:D0:F7:13:7B:09:4A:89:E3:1E:A0:E3:A2:52:FF:21:1C"}}},"request":{"raw":"GET /cdn-cgi/challenge-platform/h/g/scripts/jsd/ea2d291c0fdc/main.js? HTTP/1.1\r\nHost: 1drop.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\ncache-control: max-age=14400, stale-if-error=10800, stale-while-revalidate=10800, public\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\ndate: Sat, 21 Mar 2026 12:50:54 GMT\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncf-ray: 9dfd15c038d5dd81-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":26089,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"ASCII text, with very long lines (26089), with no line terminators","md5":"46aa91f15a31a05d49f3e8f879ce2c26","sha1":"4278ae484c8a182351ac03beff0c102300c3664e","sha256":"e01ce4b6e65f2ea501ecd3f54db458e48365acc12432ef5366493e864fef1073","sha512":"6acaffa2b38fd59590cfea19fa42d4e4722a20bfa49ca201906d286476da3c381abfa15a4f862409e19c1881e296d826c58d776bcb575cbdf31b97bb6d761b14","ssdeep":"768:X+mhMASuBu5+2FZhVsw7c6Ywa6gLZ/ohnB2499JnhMTV:ump8wiDo","tlshash":"20c284867dc9fa6c43aa70b51cfb7ac7a2fabc8120186542c2109df4fcb1744556bde8","first_seen":"2026-03-21T12:51:19.877048Z","last_seen":"2026-03-21T13:46:51.237723Z","times_seen":8,"resource_available":true,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1drop.life/","fqdn":"1drop.life","domain":"1drop.life","tld":"life"},"ip":{"addr":"172.67.152.27","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-21T12:50:51.854Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1drop.life","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 20 Mar 2026 16:47:15 GMT","end":"Thu, 18 Jun 2026 16:47:14 GMT"},"fingerprint":{"sha1":"B7:F9:9E:EF:68:8B:DC:C4:79:CE:8B:B8:7A:18:51:F2:B5:FA:A6:72","sha256":"C8:A0:7D:9A:E9:37:72:79:F4:BD:88:AB:F7:90:64:E9:D0:F7:13:7B:09:4A:89:E3:1E:A0:E3:A2:52:FF:21:1C"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: 1drop.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 21 Mar 2026 12:50:51 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KvUHHin4d9txQtfQS92q8DDvE1DuzsMiw%2FaCvc51cdct0xWiGHbzuP8V47L43SLloQEpQk8CiQQVqzQRENzZm%2FekzJX%2F7AyZn7A%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncf-ray: 9dfd15b27af68a33-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nuxt.js","description":"Nuxt is a Vue framework for developing modern web applications.","website":"https://nuxt.com","common_platform_enumeration":"","icon":"Nuxt.js.svg","categories":["JavaScript frameworks","Web frameworks","Web servers","Static site generator"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Vue.js","description":"Vue.js is an open-source model–view–viewmodel JavaScript framework for building user interfaces and single-page applications.","website":"https://vuejs.org","common_platform_enumeration":"","icon":"vue.svg","categories":["JavaScript frameworks"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3130961,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (52452)","md5":"3bf1b7d29a1766b12adf2bda5f832d16","sha1":"d6ec0b06e1df0e55ffd0d1ab397f4f0beb01a4d8","sha256":"063e0741a719c564c0c3ea1d2a6ab539b7bfd8650553eba17861412531cd20bd","sha512":"0dffe313b8edec19900baa026836924530843b49cfc16e1976bf8f0817cea89c5ae5063ff902f781a7b2f17fda87115a18ebdc4728d32034cbdb5f12717a6542","ssdeep":"24576:o4Yqh9mfXICgNUl1vbiOl9V8c/8xvXEdlp:o4BQvWPm","tlshash":"4d2572b991af15c45b12e460130622406b2df627c908cc1cfacfba9edfd6155ceea6dc","first_seen":"2026-03-21T12:51:19.878235Z","last_seen":"2026-03-21T12:55:42.034898Z","times_seen":2,"resource_available":false,"data":null}},"time_used":193,"timings":{"blocked":55,"dns":27,"connect":8,"send":0,"wait":77,"receive":0,"ssl":23},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.coingecko.com/api/v3/simple/price?ids=solana\u0026vs_currencies=usd","fqdn":"api.coingecko.com","domain":"coingecko.com","tld":"com"},"ip":{"addr":"172.66.172.219","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://1drop.life/","date":"2026-03-21T12:50:52.387Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.coingecko.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 07 Mar 2026 16:39:57 GMT","end":"Fri, 05 Jun 2026 17:39:55 GMT"},"fingerprint":{"sha1":"B1:44:A5:9B:AC:F3:25:52:00:21:91:75:61:8B:17:93:85:F4:78:C4","sha256":"E0:56:40:D8:85:96:53:52:4F:90:29:79:2C:CF:17:88:F0:D7:07:24:3B:53:CE:49:85:97:D9:4A:B3:F6:97:4A"}}},"request":{"raw":"GET /api/v3/simple/price?ids=solana\u0026vs_currencies=usd HTTP/1.1\r\nHost: api.coingecko.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://1drop.life/\r\nOrigin: https://1drop.life\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 21 Mar 2026 12:50:52 GMT\r\ncontent-type: application/json; charset=utf-8\r\nserver: cloudflare\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: POST, PUT, DELETE, GET, OPTIONS\r\naccess-control-expose-headers: link, per-page, total\r\naccess-control-max-age: 7200\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 0\r\nx-content-type-options: nosniff\r\nx-download-options: noopen\r\nx-permitted-cross-domain-policies: none\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncache-control: max-age=30, public, must-revalidate, s-maxage=60\r\naccess-control-request-method: *\r\naccess-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept, Authorization\r\nvary: Accept-Encoding, Origin\r\ncontent-encoding: gzip\r\netag: W/\"d4da1ebac9c07fc437c32b532b7deea5\"\r\nx-request-id: 3c1c90f5-70d5-4eff-abdd-7ed6ac019107\r\nx-runtime: 0.003461\r\nalternate-protocol: 443:npn-spdy/2\r\ncontent-security-policy-report-only: script-src https://accounts.google.com/gsi/client; frame-src https://accounts.google.com/gsi/; connect-src https://accounts.google.com/gsi/;\r\nstrict-transport-security: max-age=15724800; includeSubdomains\r\ncf-cache-status: EXPIRED\r\ncf-ray: 9dfd15b5ba94c272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":24,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"0e473321343210a1f214637ae406f61c","sha1":"8750160ff141cb7f094ec10f7025ad5a75203918","sha256":"494096abd0292cdcdc004bb861b321924a545302e0ea6fd0aee83cbb47016683","sha512":"abdbea59eef22515867b347c770af7e2ea8a8842f881ae71fe6a25a66315a4c366c144f34883d424394b2e421c72f148e7cf6857d76d8cba4dbc29b63966a426","ssdeep":"","tlshash":"6a70000202e808b30c8020a388b00220e28300220028020c8808a8000c8c38a20008ea","first_seen":"2026-03-21T12:51:19.87966Z","last_seen":"2026-03-24T03:30:41.388084Z","times_seen":2,"resource_available":false,"data":null}},"time_used":263,"timings":{"blocked":43,"dns":22,"connect":2,"send":0,"wait":176,"receive":0,"ssl":16},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1drop.life/cdn-cgi/challenge-platform/scripts/jsd/main.js","fqdn":"1drop.life","domain":"1drop.life","tld":"life"},"ip":{"addr":"172.67.152.27","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1drop.life/","date":"2026-03-21T12:50:54.012Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1drop.life","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 20 Mar 2026 16:47:15 GMT","end":"Thu, 18 Jun 2026 16:47:14 GMT"},"fingerprint":{"sha1":"B7:F9:9E:EF:68:8B:DC:C4:79:CE:8B:B8:7A:18:51:F2:B5:FA:A6:72","sha256":"C8:A0:7D:9A:E9:37:72:79:F4:BD:88:AB:F7:90:64:E9:D0:F7:13:7B:09:4A:89:E3:1E:A0:E3:A2:52:FF:21:1C"}}},"request":{"raw":"GET /cdn-cgi/challenge-platform/scripts/jsd/main.js HTTP/1.1\r\nHost: 1drop.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 302 Found\r\nlocation: /cdn-cgi/challenge-platform/h/g/scripts/jsd/ea2d291c0fdc/main.js?\r\ncache-control: max-age=300, stale-if-error=10800, stale-while-revalidate=10800, public\r\naccess-control-allow-origin: *\r\ncontent-length: 0\r\ndate: Sat, 21 Mar 2026 12:50:54 GMT\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncf-ray: 9dfd15bf98d1dd81-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":26089,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T20:49:10.945342Z","times_seen":17805789,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dallying-reveler.fontmaxplugin.cc/api/is-banned","fqdn":"dallying-reveler.fontmaxplugin.cc","domain":"fontmaxplugin.cc","tld":"cc"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://1drop.life/","date":"2026-03-21T12:50:54.015Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fontmaxplugin.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 28 Feb 2026 12:28:07 GMT","end":"Fri, 29 May 2026 13:25:31 GMT"},"fingerprint":{"sha1":"FF:C9:44:AB:1D:80:02:3E:4A:9D:9D:16:1E:F9:2D:B9:CE:66:09:5E","sha256":"D9:44:FF:7F:09:14:1A:62:5B:82:92:B7:7A:13:81:95:94:8D:9B:8A:52:C0:EC:FB:45:F7:AD:03:48:F0:A7:67"}}},"request":{"raw":"GET /api/is-banned HTTP/1.1\r\nHost: dallying-reveler.fontmaxplugin.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://1drop.life/\r\nOrigin: https://1drop.life\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 21 Mar 2026 12:50:54 GMT\r\ncontent-type: text/plain;charset=utf-8\r\ncontent-length: 1\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-max-age: 86400\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, POST\r\ncache-control: private, max-age=300\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UAR9uiH5xrOudnphjO%2BuYjFcPoYL0pD3Tc58rdA0D7qiwUen4QRJiRFzwVrLIyr6UdYEx%2BOfNSCbJQ2AxG1iEW0oSTosFFqoX4%2BgTc8w0get%2BwfDtIPdOffUNfhKj%2BK3wQ%3D%3D\"}]}\r\ncf-ray: 9dfd15bf9ac88a33-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"very short file (no magic)","md5":"cfcd208495d565ef66e7dff9f98764da","sha1":"b6589fc6ab0dc82cf12099d1c2d40ab994e8410c","sha256":"5feceb66ffc86f38d952786c6d696c79c2dbc239dd4e91b46729d73a27fb57e9","sha512":"31bca02094eb78126a517b206a88c73cfa9ec6f704c7030d18212cace820f025f00bf0ea68dbf3f3a5436ca63b53bf7bf80ad8d5de7d8359d0b7fed9dbc3ab99","ssdeep":"","tlshash":"c700000000000000c00000300000000000000000000000000000000000000000000000","first_seen":"2023-03-07T01:37:31Z","last_seen":"2026-08-09T20:31:03.77491Z","times_seen":119120,"resource_available":true,"data":null}},"time_used":224,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":224,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"dallying-reveler.fontmaxplugin.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"dallying-reveler.fontmaxplugin.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"dallying-reveler.fontmaxplugin.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"dallying-reveler.fontmaxplugin.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1drop.life/cdn-cgi/challenge-platform/h/g/jsd/oneshot/ea2d291c0fdc/0.4049895078416226:1774096538:Sy1chG1V60ZCNSAmX7Bv5A03-fFNd8uWM0vMzNgh7Ag/9dfd15b27af68a33","fqdn":"1drop.life","domain":"1drop.life","tld":"life"},"ip":{"addr":"172.67.152.27","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://1drop.life/","date":"2026-03-21T12:50:54.248Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1drop.life","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 20 Mar 2026 16:47:15 GMT","end":"Thu, 18 Jun 2026 16:47:14 GMT"},"fingerprint":{"sha1":"B7:F9:9E:EF:68:8B:DC:C4:79:CE:8B:B8:7A:18:51:F2:B5:FA:A6:72","sha256":"C8:A0:7D:9A:E9:37:72:79:F4:BD:88:AB:F7:90:64:E9:D0:F7:13:7B:09:4A:89:E3:1E:A0:E3:A2:52:FF:21:1C"}}},"request":{"raw":"POST /cdn-cgi/challenge-platform/h/g/jsd/oneshot/ea2d291c0fdc/0.4049895078416226:1774096538:Sy1chG1V60ZCNSAmX7Bv5A03-fFNd8uWM0vMzNgh7Ag/9dfd15b27af68a33 HTTP/1.1\r\nHost: 1drop.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 12125\r\nOrigin: https://1drop.life\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1drop.life/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":12125,"data":"2UIiSkq41AaWWqJFAqELqv0F0TFYFgiTuli1NFLioJ1CJyuCbFzi2Ji$yFEFZZFN0Z4Fws1QEFAYxq3VBeIqotB7IF8RR1LlFPVjgAFuQKGWl9ByHNTF$dH7N8wkUlFXIO++sl4l6Jhnu4FFf8EtfLlIquoruLSHFcos1F8LaXARX3QBTUjBTxFqyLojGcoRJFghbETemxJExX+LX4FgdRF16FXt2SFN7NbVnl2n$psVO1ACYU99x4FgZXFF6jjSVgbpQQFa3vu4-n4tsFqh3GA1TlFgf40NflgLTF2PuHTvoCBwg4F17XANUZqARQPLPUCqhFgg41IvV3sFqjNjAEIimKuXKGXTFEtRFKeWLTF1RlUKYIyLqTF7XHCSHHsk+h$uh$TvHpRBV7$1SwPAj1oRyRBeHsF1wOk1FISZ43583FIXbi3BH2BEqqgEbdoHaRwSSwxBM5RgVvHFKTLXFFAsXO01sSUsyymfIvfI3VXm7U9-65tWbenjOymyfVT$HVAeVWiqkTtmMlk7Z2gbCIKld-aGRXpR2f4jLCH1AjRCznJFYqV47QX$8hOqY44cb8IYfQp060Yp-RnlR3GtSlFE2fLpY05+nU20Wofk2M+T69NXGCvZ1PbkhLOZpX4TLyGvjCyqm9l8XlKl0y2r6bBJOg3Mb$q9Axq5zr$A5X7QWc9POku6isZmQZoWcHF0FR95X4a9aohMstIa8XgoguLX7A-85463SKt7Is28buQEagdvFiepZ+qgEQr83TLzIzVHPcqXTIglFK4QBTBTQKT0j1TQSruNoBqL7zw60aFXHtK48HregFz8HfA8SqWEHrg8YgOVTBLLqnAFnjAojRNUmU4FJKk81nol8TTXsUVTXiQaUYj1q0TI5q08iUyUljGj1XijaFpJL1TIlfZ91lCaFKkLTjBuUvAyqBjjhjLqkCR8a1AqpQMTLHFqpGfCmBg923Tl7g$Aqga1Uw5kElR7NUhi8a0vSRk0mjJ+ZFX4TQILCK0TLvC$3RMbT8n0ZQFBHWXtqqbQ00HbsaRkXRhjngsLgRNR6Xm3nQTb-Q8-6rAISx318-rZ1MSp+$mbEoTZT8N38i7KMar2-PBi7KkHGoCq0j9BnYIcQNx3RaP30FTzn11WqEjhNTThTtqmgI4lPK1-r+rjjNywLdN8TQRNJ4ZBjCaPoRQNrljXajTHHNJ2u4qBWV5yqXVnzb3YET3lisTjtkpwA4jzA0rjzoIlNsKRAQLaTCQyWI0vU8ZOHWQ$4811plLuwTBre4WSt4qAIV3cQ7U5aFwSfwFhbtW$oJsVZYisaP0b+aFljaykmJ7FLBlSKfOIrkWZl37kZTr+6+LSFBPgPCk6EsTrM$J57YijayAFrZXj$4KZXj5gebi81B7$8NHcOmg8yqmC6is8Nq5LIXv2PlKu+Hkqsct11JlLP6gVqBtfcLBVf7OM6Od+aJVj+Qa1Np4Nq+jSaf2Ugu-MlhvvzpdH9zpn8ZzcB7UjLuv30Bn57izrMb-nl1b4u-uoC5ecFQMgqAqMh8cuM8K7xa9u9m5QFFq+64aLkho6hqd68FlEhNFAW1qFNcfcVONQEU7aISGCUzvk1WTi1z+3Jqp1sTTBsYVTFHs5qSa+ZJtvSqgkdmmVThCZWFqn9FLFWLASfplSlnqNHsKlfiSqQTQ13wdzE773HQTTKe7QxZNObsx-lMjX6Kq1NHRlzXEqfUm2BCB7IjqLqsoMTJfl$W8qqtbrCL$gicq41n36Emrsa$z1W7Ha4Ii9KFjmZUdHL7CJvF30+cH4bFVPtj1JwsuLuruN41OtFfBJLLBsaTCBLByOBSjqlCna7eObomSfEl8qWQbBFIh+BbFmyh2$NsWf+lvSEPGr1KB4L1VZqTTWAFHxzJeSkBytFHeB8hKnbllBAIRJuGkITEB1Xs14Nqy8cmf8JVu1BTuKRCZ1amK$XJ43eAQq1FAWuvCCWtIUNEBJg3$zp-PtkC7Xn+L6qu18W3ewN8CqoaPvydwfJpJdqMXFqT-Jy8hqLKft0Iicj-XnZhiFfkIpl671VmQXdg7bu8FitXAA9SmlhOVgfCwJTuKf9iLKIRI8vez1VE12BkkjzamqQVmKzSbc2TUQNwC82Qfm8FIjx+1qnsiOnyNEboEba8WjFW$TXphgRFqvvGm36mn-A3bZjjhrhVk1eWhSVQ+IYygIBPZcZHICjGIgq627AXEq0QQ6hRlTXJZX5ZxGSJ3Z$alliYHWLpBUchOZ-fzbe9fFNjbKWGa$N8j6xws-Rq2swtTX7s24bFn7d1CpBeq$rAqK$HUU0IVqRZ34UuZj3Gidm-mb2tRsFp9TvRZTXG3J-BsN0NQIiuFnaoVv5REF7thG1ENfUusJeQ+vzyA7sii7AbwwRRdW7CiNXuYQmi7ipJWTQcQnnC-5y3iCbA6XYaqFdbjpaTFoHmrCrFAIFuGFAU6P8chQzIjQtuaJ8wSbiag7Yoav0vv4I7gFW+lkRuZjEIv1-tPQCeqjJIHPLuITZmnrZtKbm5diYXYyHToAXihm0fUg9cwAFfwzYpHTAp9FbOJhQ1WRlvRGGKNTN9cmxkJq8kxlbCN9j5a5qF-9XLeN77BvzE$LHuPYA3eFnnlFLvjrWWzIFwTsZU7KlgRIzZ5Cb+7pTlSMi+BhS1mpI$IvTauLjWfpwkZU0EjUoQqKjizqFeZJRY2Z3BNUqu2QMm-0xK4S9lL2z$Zuy13lAIP$itnnBIwc$u8PeskOLHnn5O51Nlhhs48tN4FInL0jmRljNKZ93MUcUFxivdiCQTAx77VaRBuVcpJW-EkVgu-NnQKYQNLwHciJNlie-B3NasOw37GAi1zwhgiqL9VwzRieSeoT9kfzcXmWMg6BteoRAhuipQ436vz+IhUlGHamFUcUzS391Z$4smGY0Mz1OAqSkEwdA2sPS1T1so8ZWF8kaMFJN-0Gt1n1ysuUbplrk6BL169nRRey5-8luP763Tl6XTaGNsLjRolfp5A72Jqi0nFkTstFz6-VE7CvGoSeFKVqz7cuCKxQhQeonYrOK4V7q59jkIw0nijyqsW9Q1BVNAvAOkBLPsMP6WOWJrftFHXjZeWW1HsrOemQX-GoRNTVfwhEPTHdxZlRLZrSwzfyCQ600+1TITVnnoQoMbGvAMegGRTy3qlGTlv7nvRGBZN6LYybKFm77qfb$NRZ-A$puLiUy-dckJb2WGaVRZ$N31Mdx3VmAQqXf3pQg2AC63gboRb58apFVQG$ylXClFucyRb6XSLue+N1CInrMiGaURn0QVQrsGouxNxCH8mV9cId-eJYmZWNFkFKP4QQU0i9Y8+h4fZ5cs81ziG4rZuX50p03TH2lEFVvemrJbfVbR94ttET-K9EFfx9-LWrylkVTwA1eyIJNVe2hNN2PFhhsbHfL1654bTFISwYGocNS2btp0LwcN+vTBY2xE8XsEMabAN0gXigk0o0vNxJt2bTsgk7xgiwP0ecZ7W0-L8pc8rtZToXba408vYhiLNEl4i4T18IRBzBa4-t30-TCwU7UKaoa1i6bL-8y1aJFMmhYt-T01ZRZvR4JT04CSH83avh-XpTa832UL5png$lH4qRF3cvTwswi8V422o2ZgTN7E77j1izg4Lg9wm29LJli0P1IKs4TXoKQ1+t7LgploiaQIR8i6zE8oaSFilQv1Fd+viMFj8wLhYXctlZ3awXJtRp-clG$4x8o2S1QBT8+vL4XNKEBlRXP0ooA1dSkAf0o0TIw8igRqG050Qv5SK4zKdtXhbqKE7axJH2QqT0tppToRbRcB98skOAowF3g1sWiupliqlPTL8lbEARIjoAov3rOpJ6eBk2I0Q8icFTJGwLIG8lr7W8sOsrdosyF2jNhBL0aX7RyR3yt0sOma47UErvRKjYe2U7Y4J+MKtBPgPSi75S+R285cwzZw0gHXgXJ0c1GvchnXTBivS0QSShoEBphpZNU6zt3BlqVYFOSvizSa+wkgzq97JZ3l-1T-aJ21CcjXsq5SXqE7tJSXTpPTYqGLJIsEBIgBF6cSRIo2y+u8j1T8-qGvzcIhhtUx5clFTQYpnhi8ssRJRTYTovc2QJULiploNaOTot78kpn1QJU97LuNTJUsbh+2pFhuYIb8pXlhFOk4FQvtVRnlhyhsi4i4MzU5VXTJ36lXhIgajo-llajSjYQ7-1hjncIelcUhvISXGIhzE8iLi2U2bLjIgF7Y4tXIi-Whd180a8c8iYcwkhYX7XTOyCBXhFIlFQTIoKjK4KRcF1KIsJ0Il2jAULYIAfio3U+XizGFTtC1Q1+lbajLUXio8gUf0wfmy$Y1AWJig7Ajh$aY38ivioA$OKZhlihrz0ChrcURRlO7UTOlTXo2QJNFAWFcEglEM2WxzqsmwNchy6X14um0og78igogZt3zqNTzYXArw0IRVp5RX8WH2gTjT5IaUtRRRp6ngcrKld8pI-wp-cKS+7Ax+NrILguYUhY2ghl2W6hs1rFQTTJWFMTz-cl8TmjcUcFY5v243wFMi5aF1dIOoTFs1ny7iz4gkw3i1H5w50knRt3rP4u1WWK0WGpvW$Kq4WfTQcl4xX7I$1sBkAfY88jhs$3nPE$0024m1P+01VJ9wa8EMBegVoJ93EXQiKiFsFfdwqyMpTK10BQATWl9vg$4c8n4Xo3ZXCJ0C4l5nXliP0C043ZTFXhRitQ7m3FV7wiw5EX3K4bNJPiE4rT6bJ5798N0w15pCLppmuF+3eA-LETaEI8JUm-F0zAnwXidwqAjGTaqTNmYiLmYoRnLKY3LUBJTsR+gGlZ2eB5cs0lVWPKamImb$IgpS8dzVLpRx7ndG0HYmc5omiuoIErtFEovqzXPTFc0TZLTsFUVsmT1MtRv21s-BqGtmr2vf62oAIyos8iLrgl7Fx2NvhYl0-dXhBJzEtavRlJCBcI1i71yKL4U2cvAIXpBepPNAytzSlTy9KFYRfnYzJyMMKUcI0BwRcF83-2hY8Iv3BiakuRwniZhRg-EIKkWTZ3N52hnRdw0XbJi1sb2WUazRry9kQQg11IBTMm$CTcwPaRMQCIZ0c-2QrvcwhdhZo3u0Flc-JRd6y$6TavTJy4F5FsNNm71J8GER9BB-NhyRY36bphI377BkmqAE4bJQfXuyOmBnsr7NguFzhRANiRYIYm4lpRwO7dw9liT58NSmG970mIbPGsVA5vkjoUAwo+A4shm$$CX7Kgav2kUkm71RrJk90olOplclw4mQ3J6clF$8Nihl1JEJ2$5IXk80O$WfTGBxAf4ynCXplf61jGcIzIjkQ3eNgi0JdwJ69wqGTJTaAaliJl6W+cAAWJmsXJb9BewC2UR0VjLkKP46j0kGwetgByPi+3fYcbYCFStI5Ia2JaRx1suNQtYNmh9TM1OSB-1INRPi7rIUttXA$vt1yfdx1LTp4TuPePdUgRW2SCE7o5olE7LPxbhnbkIQIIkjw0whk+R+zpltaAUopRn3B$atlmXYoPCIzf8f8yMTWggTpF$iR2vC7$clEMNId8FcwIssefsFVQJPGUl3dfmdwTUkshx-ETBfdYv2qM$908B-p+FZt0WA3gvCdNLJtCc$y$Qj-kphqEfk$oXTZlRjIRYmmhaESwoUoRqCRxKUqwSR25XphUnxp3dCK+K3OTkQzP$lysYgXLsP0iBlunb-v4PiNNi7hnI7Yv7TORpKF1do0TyTmp8383KUw8av1+qC5NYqRN7lFBHtE9l1mT1ynTqGt7a$MlXg7$2bJUyaIyvB0A8L3MyFTEHkS+vL6lzE2QcuvsCIJUvaIO8sHHHUgTJ70PUT-HXp2WdU+3I4WqVNrvkjlbcEQQfACQsQHQuQuwhCs3FsIsL81m-VAAyLCq0i6nf0-Og58dLxaoadSdoAmW6KIXnKzE1phYLKwKJHA-t7INHxJU5A$6fnAwssJsFm+h-VKRLiETjksbRyc0i16ngpXi1$AJzsmpeNav1sPqFg1s+EPLsW5IF8F97zaWOIdQ1+aCnx7lrkFsPsACwWMikiBiiTY2FjBl1vlplRGRcGgHkAGf3CnGK4YkwuPG8sJKF1sleyAMiRSiIsivigwCCBo5NkUkjRPsGNlRwRRR7LihLJfXySKQaJeScqnLnuZlNukwW4GN3l1EmsomC1rQsQUve0z0E1xmnxSCVCkQggfYt3iZqkHK0AlgM-Tspq6iwpHEIfCfffbk$nGZCC$aKZjkbeXjfP5mezwE0Ewbez1Lq+tnFshYBeTCPrhcS76uK7fvUr7XmCiKpmne83hYz7pwLwTlTwuRbkaRgzvWCbOoKQt-TeXF5hZQi+viu0gU2U7iyL63KkBfGtJfeECBhbZ3JRm92m9CkAf33C$L6CeQffP6Z3hrhn7hOrwxg3UwZdw2SwsXmKEWnyqtluBWkA$X3q5NCdOij+vUZM6+J-Ap1Q2M3e0$TlTHms8PHFWQylAIStqGBh$ig+omdtXTzdRVtnwiatKk0jGkBU8nVacUTP-pjTzL92dUSuAECyyCCZuv6buiBsKWQdjuFJ1IYmpThN5dtsBvW2iZ2snBbmM5olvu-qVqrPoqCMT8zZY-LA$t1sqJXsc$k+2jiZoEHj9z3ecbZ88QH2x0AvCaWCmCh4bPm7Jv3lLAnVtXlgB2BLcmtJWYcCivVmPiguhdblmhqtcmKTUepuRMH7Cus1fWyl+mW5Bdo2HzH8zdAs1+2gli1L7CpJIH5iHZhfjf5UUrzZTLrwo8kEt6HAeWtaz30SRfMTJUbZCHZjFx$xOa-pJn6bRw-UeP0P-HbbGRimf7472BdLjwAiQafHkGLEPf$vVKSwL8tQM2bMmkxORjlThcpltp-bCIBZSe2NYIR6QOhncXb8hgQwy0xf8Bm31sg-Qykjthb$l6Z5B1WYT4oeC1sVJVh7Vpbre1Mh$69ZY0QwEwEdt2ywnyNAultchGWRuR0oRw3gcZWZ0RKXP2TQIUKQXgmkxEOUBBICiEU71RV8LXi1iRb8sg9OIzcdcBeFVUFCEIcuImhX$L6X6x2Wyscj$PwKcm80AeyIO4EnC7AisgjkmPWIlLfRKHfGhlIoNxe2+IOIvxCMMgwPt7oe3YBug16bQsPO-LgUAx5KMbTAGl$bICxG4l0jdN$7XZGT7rVr-ChV6GkVCxygZT0edUwjvCelhXjTBm8XXtm+SEkYCIp$elcl-Gafy1$H+cT4TCbY3Vh6iSwgXBidYlQTL8l+SkqaY0175y80IBpTFpMozkeWhhwGnn+gW$dIhYoWPvBhjl7hdVptEMphos7lpQcmtpurUdG8OOY8URRnHLFG3uKz79mi8sUzKnpLHL9RwLsTIxHRdUt-I4kx3LazX6uWeWezwek+2W58hnvgAnzbnBOz1By2Ww7bmplwJw7zS1UKnnNimh+3UQr+9+M9yF2NiJg7-Gr5KGOb4k6zNSWsMh8smc62ofdFuJ5ItbcVHZHpGQUQeAi8Lt$gEYnbvGxwelL3flynCBLvrmNiPhWIgoOUld13iHs4m96jAJkFm3yfWasAfJHHlISfF9nTzi3wvXUiJiiSHlTqTYcl2f1hupH6pYrpTC$tjSfU-TjWTsFvG1Hz4jTwiR$dsijbL2sCWvYbQWV3KT7byNa1UAe8wYT3t0ecRckKjPF+qmF4BRnaWF78fwny+44cRzHPFwLxptfTsaWTBkSWQvtaL+aiqPFrq5fJFRUbJ1n8madi3i8$g-7LrlJgqeVNN1e7kInaU3fiOI1AZfiHygFvuJOK32KrRBSFTktXKwgsFy2H00iOJBYKEalZy1b9TTqZK$L1qE3ZgclBa8Bqj1yfTlMlgTAj-JjpiWlftkSiXg3Bi3Alk4KTBgmzlUJwIvPgKi4sijkjCOgIhhSqSkLQqqglzAL8RK71q3OR1+IfSIH+lvialfTTfolgL3WqKWKFzqjqqyHam-lOJR31nqiFHjulfYNf2piK6BsulOzBA8jBZJuj2uXJ1IaQ3GfisulZqyqalJA7ejIiK8bNkzB0gzj8lfUzuKEKZuhjClxIvfiXTu1isgyomQhEbByivI3MBH2WNMKEH+iOsOJIH1Tal6n4wISbaZ1RiclljPsIQaWQjTNTijyiWyo1E0O+la1a70VWugLKmwfLVlisbSZHTIgTLVft322fcXZLkL1IrTwxTHm5aT3CWhlgHhQqyiLiG1ROnh2qFRskjThh13VKkiijNL$R0wIREPqzBVJg0FIEr8wTzqK6rARhYSyNs8iBLONAURwQLUlkBq5KwVn6ZqT6ssqCsdrSVVWjhH23AY14NkRmjZZdyeI$+KiBurgZFW3lOI20oAuyilLqoTUpIKawyjgqAASf7JIjgB3GLSl1fhNNmjoalHUJZf8fkPO9IfjLuXiTWawHmagjxy0lQFg8NjrbjNJQmSrjGgLAmjpJ9Q1thSNS6llMRK4SxFVq4qnHWImJFUShSUqslRiokgho0gUb-4LsO3pfBXNex4FHt1AwJsHwqiA3TooaNABqNzgvHP$AhvJ1bLKZd0-IPWwsK-TGkIlc3GdSNlUidr2HTUXJAeg9Ndkml$UvsyAV$jga5JupIWzWK8i+yUlJs+wQTes1ur9IOTv3cCr6jlAkjHNLdNRRh1hFvF8fvL3uKxJijFBsTGiBa7mb+FcTTUzEIBmQTzbJB+selTimawEFdHLU$wBjE-iij$3C7SEBWhuXbiilGUhlSiaUFQFvH0ow8ywayOj18FvpzS1rTViuBJA8TTIBJgLsqJPBbfwN1$jfiYyjF5TVFSbK6qkXlFjHKRyJVRlmXdp+48VnYHdjaBUl-qAbiHtw8nWmvA3PlNGGzsQFtiobtFTcfoBfs1M2lwzrv7PYHlvBWCJY1aeAq+U+iRiE7K8K2bUWcFqQIGIag4GPl+LEqRi0ivqaUhRTSTMT+JoXiTdqFulvkXJFFqX+l2yqsoWqX6YfLnoia02-XXBO0WqqLnIKUl-4aRzApuItKyKwFKTdkos8CaBGMXrypiQuK1glg$1JmYOq4Je23BJdN16C8j2J2PaOWNPpSKJRhgnJFjbFpiGXg+QhqUy5q4INcj0HAKYFW6SFcntLRd38iIboJyJhQZsuqi-nTtoOZfR3FVyoLxZAy1Ga1qkrJl742AhNa0V+WFBwi70vXgBLkkoAKyAhJ6qg--lrMwIqQoiqujkk$Hymz$cnjwOAB9beZqZZfIqqsjrndJjzg-HqaMLzLZhe$4LrggiiIlOJk4IuNALI42HWIHiouK$LTmkjpUZlKE2pZELyMZAWy18ALafGhsfJaX2X7E$Gqi3vKzsNJT$13uI67I+sYitIqdrJEy6TTKsavr1qZLlJTJInIQqZFoLdivbb0N3a9qViuX4g2xEEjnqhs87hX2vE-rPLKilfd3o1v2ZH4pJ1ZSOFHldZaX-wEK1QqlKuyZLGITiewriKWkQLBUxyFmTwazQ-lZihfyBkF1xVSk9F8FvRQOobkLGZXf4uiFUoyqNF5FYOTG+w1Eqwb3uLP0PEVAMNpGoTTRYbqHErZ7FOU$4$NqVSMGLGG$M4ZlFsNayuGo3i$2PvP21ierlu84dCtG7-Qa3y38HKCvyKriMGEuMio83NlOZdkxId4VkEZy-ZE8IyOytgnzfkL+uZuayFgKGGzZQF3uM4WsIYgWqCGBW6i0itutWjKG6hnirChcRpjCmx0d6yOn7T9Vumx0bhlaRNhdr9G7FJ6CIowa0acy8uYW+M0IKjqNmQFl1ORoLknk5mzpLUsq8-H7izGsgl6CqzML+VumvIRglSowayqLs9w4iY6Vi-rVuGTuZMaC7uF88vU9wliCp7FnJFZ6cuz1yNSl-v18L6uS1GtN+SBuOJR39AIOoIqpqVwGwpcTlIiGzVFS61n7aCwL25LWSfX21WLwY1FR4S76GWAL78V-gCmUwIiB$B373tF4nA4IpLpi-gL5yHgpFOMvJbdgWsrgK49XAoKo8JSeLNWNEJGas7ESSFF1UjpUWxkdHKgus0uoKa4tMRhua1OQATCl7pSiZI1UpvTdAHxG0gmzqw2UbW8buVucyBB4TbXhkd6uIsXvzRINFPS3gOloBzSAPgEFEUF4MA7HazHJSpU7X+lN+EJF9wBAkjILhfntBKBSJU6u2+pkiJCS5MM4$ry4kiJ2S2gL72QBOgoy0wpZgA1Hpi-sSWe$ZO4MmASosIpbQZxyFTX6Pis-RgZ$mrbtA3OQ-SVJlm6ik+StQvFRZM4fiAhTWqplcIM4nC14yOLesNg8me7E1r+VumlLMFlbh8rVjvAsicmVRC-73hi-l3ZmW-owT3aLFTwK4MmK1CsvjlvHk5Bg7zAqyf1mg7lo8j4oWk8qF6gA0tBGyUvE80gURIZ81aYTkF17dWQTy8jEuCmHU1vLo+wTiGYLN7G5hEEVaWixq43iW50JwqUv5167xZIcRxqWhiisuGmr$pB1Ma4lSjyn9CS4CA8U4oIyIM7Y6EUk6LUlV57TEA2Jv+1KIhWxNjRCP1MGr7FsXgpSS2vLG+gRffetU-khIA-7wIaA4hH$VOw87rAjui0ZzTh1iscioaT1y-KpSyps0OJ1h+L-jnuwhWjvt3KatPlRFKWsezO2zt-G5wTUL2zl1aVwmfeOmmJ2+B-QNnJuk4d2XvC7SBm0FKiAd7fvg74L4eQ0Mdtua-h6-w7SWBoNvdSZZnRud0OdtnC2VemNejneCp5vKvabLZr0yzzT-8hr-UZA$szqT-K7bqaZknmp09gthGmRJanksI+AUXsrGZ5RH70XkcQN-1e50fQT5ry8O-vFXR8HJ0+oQhSNee6xz80nMvNntu34lYCM3cynF9uB$H7t-LthP-sgz$H7pFCVv2-sg4$ma8FW1hsY+m11WacFnKgIYhgS$Zwwi-8hURg72n5q00y2vZ-NeB1mLJn+IhrHCNr0$jYPW3em2Geohvl3P+J7b-PgT$se7sn0$6SdmFk+4yABdtkSaecN+IqIdKvR-bgEeLrtIC3eWYggZRurX3+o7xwgNO4H773bfvrrg7MkPS2C-JiXJX2iQQfhqWAuvSfuhQZ8lQiybe-JZGkQb7jC6viY429kdqlLC6vsRk29kHalu+1h3Yo2bQ1a4uC1tlYa7kXnGwJ1mh-r+e5yTS8$ruKj0y2HXkevhC9vuRTdwlgeJP+0vGmY2$vbwzp3mfhsdZpfH7tZ-wkNYbZsm-z7ZW2vVRLZmQQez73bk8Rfexvy-7f+otKSxZ$v7rJn+09gY2Z-XVWYW+Iq-SpdVXbkNe-Pt2YGZ00dS062JnvqoHpnClKH1QN9kZdCQSyckiT7hU5AaFhjX1FWazIzd+ET8zWKt1oq$LwI2dXJli1bjmixsTbtN-6-9rzWysS1rWNpj6FrMdOYhcmbNygH61z9JIt3oWiOdtbRvM28xdjTHnFirPuTYB3lZxdp7OReABUFvL1qIFFFpiH9lFeemf$n-CgTrpL9PZ3hyAMNlLnLdTxsSLEbg8qS3GFMPpUK83Al1LhsfZY2lFFIZiFUAWKkTl89Fzicy4lKEhd1j4t1rhpkEAStgIjKiAldXB7BWlT$zFEsEWYSbsa3qdiXFzVlFFbFirUFFB86OBzVF23Qe78FPFQF$Tl9lUSF1y3LzKlAtLr+7P0$dzuC$ihIKwPUjPzBUatlFNuPzuCHqKOnv1qOPzQWNFg0FlF0$xzOE5xNrT3FJOLlXFT6TVn89W$wTysFmTWNHfL$2zjCO63l1KjLBhsWpZiELR79YqmgjQK0nQafFFq0RyRyIZPAFaFiR94atnJaeOpivFXmT93qvtLSlX0PiolNYeWqIIjq14FzIJg01ulZ32gScyxuQBIIzyz6lgKxXbiZlfJv+tLTsiwG0kNWlfvhAVnHFSby4M4bUVnreHhsY0rKwUq0qNsZxoVgTqFvo1U$jym6vfgz8PqQqSlZsq5hqAUXviyF73qozFF8e1lmstCfhBFKlqIq3aIy81IG2sGeLKI7IeAE1Vb9rXSH7Im1N1LoBTkmBfla542KfqAFyaYpVFAwEUaruYlZqreL7KsAUqYlTsd78daLVWahsFFJyV9JgIIwPyx-8qL9OzfzvEVKpz8H9SsAzd3gNRIq6LtFFF+VI0FF"}},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/plain; charset=UTF-8\r\ncf-chl-out-s: 8KHFq7BuGBYHLlw0fz142w==$HPeApcfLnZgpqcXjmp7cgQ==\r\nset-cookie: cf_clearance=n_tzBHq0gXbCzzp4SbJ.IO_CJX7.b7aAB9ud7zsde8Q-1774097454-1.2.1.1-s6YV2BOfsdJllgA8TTYqiTey6XPjEBnwrPutzcNFjZNjaLkrA0SphkpXXOvNQmtYfXgDm.mfRc70dM7S15.SWhrjNqf8wuoR1xukgnKa4gQC1XA7ui0_A992C_8aM4XrrpkDjrR.QNPDoPYwkh2aYvWtfprzpbEVe9vgJVOTvw57gEgufnwMjG0kzgS3exgIXH32k5JlVExBccGWUCFZU4OsYaCQGFGYTfUpYGKTDSw; HttpOnly; SameSite=None; Partitioned; Secure; Path=/; Domain=1drop.life; Expires=Sun, 21 Mar 2027 12:50:54 GMT\r\ntiming-allow-origin: https://1drop.life\r\ndate: Sat, 21 Mar 2026 12:50:54 GMT\r\ncontent-length: 0\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\ncf-ray: 9dfd15c118dfdd81-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T20:49:10.945342Z","times_seen":17805789,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dallying-reveler.fontmaxplugin.cc/_nuxt/assets/index.js","fqdn":"dallying-reveler.fontmaxplugin.cc","domain":"fontmaxplugin.cc","tld":"cc"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1drop.life/","date":"2026-03-21T12:50:52.249Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fontmaxplugin.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 28 Feb 2026 12:28:07 GMT","end":"Fri, 29 May 2026 13:25:31 GMT"},"fingerprint":{"sha1":"FF:C9:44:AB:1D:80:02:3E:4A:9D:9D:16:1E:F9:2D:B9:CE:66:09:5E","sha256":"D9:44:FF:7F:09:14:1A:62:5B:82:92:B7:7A:13:81:95:94:8D:9B:8A:52:C0:EC:FB:45:F7:AD:03:48:F0:A7:67"}}},"request":{"raw":"GET /_nuxt/assets/index.js HTTP/1.1\r\nHost: dallying-reveler.fontmaxplugin.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://1drop.life\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1drop.life/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 21 Mar 2026 12:50:52 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Fri, 20 Mar 2026 13:49:33 GMT\r\netag: \"69bd506d-f4033\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=300, must-revalidate\r\ncontent-encoding: gzip\r\ncf-cache-status: REVALIDATED\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6tpCdGcPjITMbJGfpsaiIBV2BnDwrXxF6%2FFKevAY62Bq74Po4buslpOgsjKcxD%2FadwHA5DaDp1rCJczplXFDB8IPkPZO%2Bl5TaSnMGrEbYRn14RpHT4qMLSt6MLDHixK7FQ%3D%3D\"}]}\r\ncf-ray: 9dfd15b519f08a33-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":999475,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"Unicode text, UTF-8 text, with very long lines (63044), with no line terminators","md5":"4c69db1d732c18cda71927000dcd8b2b","sha1":"ca57ef741751064de79b864603a7a45a47a8e0c6","sha256":"a9c86f0b9db4f0b5b006253af1d29daf7f09b6198e19b139ffc8294c93fc56e9","sha512":"95b57d14c6241cc2f2cf20e7fc1f95e0267d5d69dcc858461d2931eeed2c2fe9a4b9e59340ff347f3629f9b9914dd2d7f7cc27a926eadf5397a906971f00b96f","ssdeep":"24576:HzRI7jNDZADJvsFQ5TgUsiRQD19mYC46GhBd4B+A7hRE1N1Krt+CG:H/5TgUsiemYC8hBmFR7t+CG","tlshash":"c22595db100ee778de502cf53cb43cb50cde5881ec2854b8b542bc9269777faa389a59","first_seen":"2026-03-20T20:08:30.140669Z","last_seen":"2026-03-28T14:30:52.903387Z","times_seen":163,"resource_available":true,"data":null}},"time_used":380,"timings":{"blocked":78,"dns":44,"connect":11,"send":0,"wait":221,"receive":0,"ssl":24},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"dallying-reveler.fontmaxplugin.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"dallying-reveler.fontmaxplugin.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"dallying-reveler.fontmaxplugin.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"dallying-reveler.fontmaxplugin.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Inter:wght@400;500;600;700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"172.217.20.170","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://1drop.life/","date":"2026-03-21T12:50:53.621Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Feb 2026 18:21:09 GMT","end":"Mon, 18 May 2026 18:21:08 GMT"},"fingerprint":{"sha1":"63:D1:AE:99:1E:49:D7:6C:71:F3:BA:F5:BA:47:74:1E:EB:90:E7:D6","sha256":"69:90:BB:9D:82:60:82:88:FF:CE:F6:B3:3D:DD:B5:B5:FB:F0:56:17:FD:FA:0D:BC:9C:5B:83:51:98:0D:2F:CF"}}},"request":{"raw":"GET /css2?family=Inter:wght@400;500;600;700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1drop.life/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sat, 21 Mar 2026 12:50:53 GMT\r\ndate: Sat, 21 Mar 2026 12:50:53 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10108,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"e85517dadd43448782d60d7f207fddce","sha1":"6cd31f870727ba8090fac9602b42524b4139a619","sha256":"88fbd0b95222be288587a149c324189ecbd8de0d6f0c94f528ec53857e52b66c","sha512":"5edc78df5bb062a9a2e1ea6724c14dd7eb80d77ea0fa9572de4bb0d52bbd0d163815b08a1ae77084f99fbefbb07715da1c61f0bb36fb498710c91387792955f8","ssdeep":"192:9NNIxO34OxDENOPCO3/Nx8NNryfO3iExlONEhYO3RrxGx:vXuM0p2+4","tlshash":"04227792002ba400ab971dc233cf7f3aaece50896085d1b95ffd0dc59cead66436876d","first_seen":"2025-09-10T18:13:11.065101Z","last_seen":"2026-08-09T20:19:12.734424Z","times_seen":39893,"resource_available":false,"data":null}},"time_used":209,"timings":{"blocked":95,"dns":1,"connect":8,"send":0,"wait":19,"receive":0,"ssl":83},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dallying-reveler.fontmaxplugin.cc/api/config","fqdn":"dallying-reveler.fontmaxplugin.cc","domain":"fontmaxplugin.cc","tld":"cc"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://1drop.life/","date":"2026-03-21T12:50:54.018Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fontmaxplugin.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 28 Feb 2026 12:28:07 GMT","end":"Fri, 29 May 2026 13:25:31 GMT"},"fingerprint":{"sha1":"FF:C9:44:AB:1D:80:02:3E:4A:9D:9D:16:1E:F9:2D:B9:CE:66:09:5E","sha256":"D9:44:FF:7F:09:14:1A:62:5B:82:92:B7:7A:13:81:95:94:8D:9B:8A:52:C0:EC:FB:45:F7:AD:03:48:F0:A7:67"}}},"request":{"raw":"GET /api/config HTTP/1.1\r\nHost: dallying-reveler.fontmaxplugin.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://1drop.life/\r\ncontent-language: en-US,q=0.8;en\r\nOrigin: https://1drop.life\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 21 Mar 2026 12:50:54 GMT\r\ncontent-type: text/plain; charset=utf-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-max-age: 86400\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, POST\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0xUyNaMeZLSxA6IQTKt51OkScnTQ29hoS5AThfUzLv15%2BNKO0ajy3KBEtuSPJGSUDWp4%2BnHGnnJcohR4Pf2a0fjsl%2Fy4yslWdU3IubVOGCvuTMsAYhJI40Lf%2FXx4g4GwpQ%3D%3D\"}]}\r\ncontent-encoding: br\r\ncf-ray: 9dfd15bf9acd8a33-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":184,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"data","md5":"a18244b1489730a876db3e8aa071f914","sha1":"12612f3580091bd40647b457fa04cdb9f4923cfc","sha256":"4462bf287f1d62f78d123ca01dc82fa39fa8d235144b328a556f3c3f704b5685","sha512":"0af18e219c889403a8614db22a634030c331afb494902258b82eb83474f58145b508e2d639a3991bce1eedc765cbe6e98f299f54f1940285436c89946b062939","ssdeep":"","tlshash":"d3d0ebc0e21df3008a60024be330889cd804eae0018004f96af0cc4e06baa2243de022","first_seen":"2026-03-21T12:51:19.883629Z","last_seen":"2026-03-21T12:51:19.883629Z","times_seen":1,"resource_available":false,"data":null}},"time_used":224,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":224,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"dallying-reveler.fontmaxplugin.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"dallying-reveler.fontmaxplugin.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"dallying-reveler.fontmaxplugin.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"dallying-reveler.fontmaxplugin.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dallying-reveler.fontmaxplugin.cc/api/visit?origin=1drop.life","fqdn":"dallying-reveler.fontmaxplugin.cc","domain":"fontmaxplugin.cc","tld":"cc"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://1drop.life/","date":"2026-03-21T12:50:54.095Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fontmaxplugin.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 28 Feb 2026 12:28:07 GMT","end":"Fri, 29 May 2026 13:25:31 GMT"},"fingerprint":{"sha1":"FF:C9:44:AB:1D:80:02:3E:4A:9D:9D:16:1E:F9:2D:B9:CE:66:09:5E","sha256":"D9:44:FF:7F:09:14:1A:62:5B:82:92:B7:7A:13:81:95:94:8D:9B:8A:52:C0:EC:FB:45:F7:AD:03:48:F0:A7:67"}}},"request":{"raw":"POST /api/visit?origin=1drop.life HTTP/1.1\r\nHost: dallying-reveler.fontmaxplugin.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://1drop.life/\r\nOrigin: https://1drop.life\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 21 Mar 2026 12:50:54 GMT\r\ncontent-type: text/plain;charset=utf-8\r\ncontent-length: 2\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\naccess-control-max-age: 86400\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, POST\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bfCQHCHK9IRugT2qX5OtKqri93f1va05y4eusTsbxUcMZmhF2cLwsd8O199dRRbmrSSP05molR1Q22Z6g32DESdkeo0dwOxvDOLpscSV7XjaOa2ZV09EDu7WHeY%2F1IvhWA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9dfd15c01b618b20-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"444bcb3a3fcf8389296c49467f27e1d6","sha1":"7a85f4764bbd6daf1c3545efbbf0f279a6dc0beb","sha256":"2689367b205c16ce32ed4200942b8b8b1e262dfc70d9bc9fbc77c49699a4f1df","sha512":"9fbbbb5a0f329f9782e2356fa41d89cf9b3694327c1a934d6af2a9df2d7f936ce83717fb513196a4ce5548471708cd7134c2ae99b3c357bcabb2eafc7b9b7570","ssdeep":"","tlshash":"c710000000000000300000000000000000000000000000000000000000000c0000c000","first_seen":"2023-03-08T02:32:37Z","last_seen":"2026-08-09T20:50:30.278003Z","times_seen":446986,"resource_available":true,"data":null}},"time_used":255,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":255,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"dallying-reveler.fontmaxplugin.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"dallying-reveler.fontmaxplugin.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"dallying-reveler.fontmaxplugin.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"dallying-reveler.fontmaxplugin.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}}]}