{"report_id":"bc2aceb8-e1ef-4d05-9582-aef8eb0e6abc","version":0,"status":"done","tags":[],"date":"2026-07-14T17:45:31Z","url":{"schema":"http","addr":"bytedrop.cfd","fqdn":"bytedrop.cfd","domain":"bytedrop.cfd","tld":"cfd"},"ip":{"addr":"172.67.148.207","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"bytedrop.cfd/","fqdn":"bytedrop.cfd","domain":"bytedrop.cfd","tld":"cfd"},"title":"ByteDrop | EVM Signal Gate","dom":{"size":12441,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"ad1b17235dddeab03431ad999459947d","sha1":"bebe22bed88be490b429479d24c9d7e8db4d6884","sha256":"69c458d9a6affbb3581be5cc44d687252753c34bc57e9e3a8bd88f3a3f560dce","sha512":"75a7decd945013c7bb5b1d524df157555a067c9fad24809817ead1b49a2c737deba006f8b60e6df89c23b53d246af0abfc79b885bc9c6e78597380fc8b2419d0","ssdeep":"192:EvwU0E01xxb6rETE3cGVBWf+SndAbMGwMnS85z2BFptFrJ6VMQ7+rtQqTzuatjUp:Evwp+fXHoFoSJTzptjUuuojxPo7","tlshash":"0f42322251f36436452795cd2b9b5b0a2ea5d003e50bc8243bed43898feac8ded9377d","dom_hash":"domhash07c165fd0310afb2b70058956352cc0f","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"bytedrop.cfd","fqdn":"bytedrop.cfd","domain":"bytedrop.cfd","tld":"cfd"},"ip":{"addr":"172.67.148.207","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-08-18T17:45:31Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":3}},"detection":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-14","alert":"Sinkholed","trigger":"zen.claims","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-14","alert":"Sinkholed","trigger":"zen.claims","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-14","alert":"Sinkholed","trigger":"zen.claims","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null},"summary":[{"fqdn":"guard-api-b4ca.pages.dev","ip":{"addr":"172.66.47.4","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2020-09-02","domain_rank":0,"first_seen":"2026-07-14T17:45:24.468227Z","last_seen":"2026-07-14T17:45:24.468228Z","alert_count":0,"request_count":2,"received_data":45517,"sent_data":1076,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"bsc-dataseed2.bnbchain.org","ip":{"addr":"54.220.41.248","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"domain_registered":"2020-01-13","domain_rank":4924478,"first_seen":"2023-11-12T11:28:58Z","last_seen":"2026-07-14T17:45:25.20991Z","alert_count":0,"request_count":1,"received_data":458,"sent_data":550,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"zen.claims","ip":{"addr":"104.21.70.23","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-07-05T10:30:02.141035Z","last_seen":"2026-07-05T10:30:02.141035Z","alert_count":15,"request_count":5,"received_data":2502842,"sent_data":2678,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"bytedrop.cfd","ip":{"addr":"104.21.79.213","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-07-03","domain_rank":0,"first_seen":"2026-07-05T10:30:02.142577Z","last_seen":"2026-07-05T10:30:02.142577Z","alert_count":0,"request_count":5,"received_data":24923,"sent_data":2267,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"guard-api-b4ca.pages.dev/assets/index-BFMgf9ym.js","fqdn":"guard-api-b4ca.pages.dev","domain":"guard-api-b4ca.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.47.4","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"56294c73a80b3ddb73a406da7988fb34","sha1":"e43f2383d3f90812968b75f5179f4e9d50c90c8f","sha256":"e91887a772df8a5d107f9236ea55744971098342b25df684c157667521439f60","sha512":"94a648bf5058b6adf1185269ba9136b9e07021048ae095ac23c3c3d4b54a9fc6a7906f34d8af535ad76c96e7c1045175f1ff1e3dceae33f85a49b29e56628b9f","ssdeep":"768:2EmJl42/wD5Uk6Od+ghdKIx+Qoydzje4dvE7OYbN0jMyppQanIMI8:2Em82Idd+g3K/QoydG4UrbN0jMyrNbI8","tlshash":"7d13c09c3972224102ad1fe82e9f59c86e1ccfe1a55c986fc022c091df6a1ab14efdd5","size":42907,"data":"","first_seen":"2026-07-14T17:45:28.777315Z","last_seen":"2026-07-14T17:50:59.788254Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"guard-api-b4ca.pages.dev/?host=https%3A%2F%2Fbytedrop.cfd","fqdn":"guard-api-b4ca.pages.dev","domain":"guard-api-b4ca.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.47.4","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"d42750fda9fed4d066f571a103c1f9f2","sha1":"850b5157a9915cc881774a8a6fc719ff16423fa7","sha256":"69f32fbd96c5f048587d9d15d82bbc5bd002446f80a78bc8aebd38822e51f912","sha512":"fd2372d735dd0f1d71677f5b524b0e26f0f585a04e0e13717b39ac3d49047d3e714038d70882215f0a2fa60d7410ff2d564916cff3597e86397ce903696598a6","ssdeep":"768:GWgxSgcPsNXCXWPrtfbqBSENokm+vliE8508Tggif7mP+OmnDhC6xQHo+WjWkhEV:GRfcPsNOB82yQL8xN","tlshash":"d733a66062d07d94274b5ff7332f7ae1f85f088e79644d8fc254bc94a6aa21bd6e0930","size":50716,"data":"","first_seen":"2026-07-14T17:45:28.831671Z","last_seen":"2026-07-14T17:50:59.847592Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bytedrop.cfd/main.js","fqdn":"bytedrop.cfd","domain":"bytedrop.cfd","tld":"cfd"},"ip":{"addr":"104.21.79.213","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"226dd845cc29b6874fcf47cac24940d4","sha1":"f67e1060f37f144a3813164e638ad068ed570657","sha256":"c86971b88319ad15fcf7480ede59dfc62896a5e9e6590cc2a831a4b5ffce336d","sha512":"a09751c3713435c134b33a192f11eabb91eda206fc208edfdc274eee8bc722083399a301ed8555b85ae28789829a28697c106a22c2109bf52fe9c680050af78c","ssdeep":"","tlshash":"e741d008e371053d44b65235697f721872aba1271e07ec98795c80807ffa876aabdf61","size":2436,"data":"","first_seen":"2026-07-05T10:30:11.109634Z","last_seen":"2026-07-14T17:46:23.770175Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bytedrop.cfd/5cfc762d9e.js","fqdn":"bytedrop.cfd","domain":"bytedrop.cfd","tld":"cfd"},"ip":{"addr":"104.21.79.213","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"6836d2fa519114e23930e18de4e74f1e","sha1":"2d5354fa623f7040b3985329d03a043ade4a9725","sha256":"6187dc7ba079d14ca3eee3d7693bb4538c196614a7d5a611e8e7aebff767b631","sha512":"b7cc0fc832c365bbe5ed9129b538ac6cda29068ed8da602fed66d454bafd3342f3491cb34c513cc782cb21331437e88b5d8a68f593ea9db8c10e7baf33e36c87","ssdeep":"","tlshash":"3621c0dbba52b4401785b7b6986fb40d9b77bd0accd98428d40059c23dbeb2fd0125a8","size":1416,"data":"","first_seen":"2026-07-05T10:30:11.09693Z","last_seen":"2026-07-14T17:46:23.779661Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bytedrop.cfd/","fqdn":"bytedrop.cfd","domain":"bytedrop.cfd","tld":"cfd"},"ip":{"addr":"104.21.79.213","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"e7d8ab449567700db32d4e3978956da6","sha1":"9d1b16472943e0aa290527d9179f47faa0ed5a98","sha256":"d3f4ef4133530c1ae6c834dc1defe2c7d4dd73636f418c8900d937d2cdcf6588","sha512":"02d1eecdded7fc6191635d2538377a5afb73a5165238407b0a9a56505b7b1e5ac62b49ef8c2b37fa2245df1b5c449edb079176b61a975dfed29c83b3911a7185","ssdeep":"192:oF5lUA2YSZNfRqVNOtJaDFqPye2RHt5yH:nOVNcJaDFKyLRHt5yH","tlshash":"8af1442334d2b14b02d54b7e355957e5c066c90ada8e940ef348eee8b8dc9a77a1d2f0","size":7549,"data":"","first_seen":"2026-07-14T17:45:36.981847Z","last_seen":"2026-07-14T17:45:36.981847Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bytedrop.cfd/","fqdn":"bytedrop.cfd","domain":"bytedrop.cfd","tld":"cfd"},"ip":{"addr":"104.21.79.213","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"aeec6634ea72dadf2022b49146193409","sha1":"10921bd078f1653d92139db12ac6cd5890b0e593","sha256":"0c555f2c672e354d26025b921060d35f7dce837a02b865ca6251ef8c6cd818b5","sha512":"3cb7751ab079ac53cc77e2ee648049f991a94ef1bdbab8d6bd5bc279eb0d00a902797837caac4fadf9a3d6427de8df74e180bd8598eb0315cf1913e128275781","ssdeep":"24576:Lkph/sGj/qisZeIZTPXUiax7zSRyeP/q3H3/1ef6tKXkPDnuTC+qW6H5AQjDjFht:gSPXU3Z4Vzy1A+0a1kkv","tlshash":"0dc5029948338669639802f87c5f0bc83ea06bdcd098e73b9475d0f7b7861eb50d6876","size":2499186,"data":"","first_seen":"2026-07-14T17:45:36.983253Z","last_seen":"2026-07-14T17:50:59.851247Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bytedrop.cfd/","fqdn":"bytedrop.cfd","domain":"bytedrop.cfd","tld":"cfd"},"ip":{"addr":"104.21.79.213","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"f9be0d096f16f3c10609ed1baadc98e7","sha1":"cde36f1b9cf2ee038d818dc29599bf04f3f010d1","sha256":"d8a9615ce77dfb942c0624f8b2cc4021d80b4ea62ef682732e9427ee92e0b56c","sha512":"4f7d849ddf1ce9c42dec61322569f0d15d76ca5188fe1ce2f7b78a7abff72ff35943ba9cbb99599728ef784f12569f01fa11c950a38905252627f7df5d94dd87","ssdeep":"49152:pI6Dpd2EZTamfcSf3xBB4eBTETkugIV9y9HOwuLNImWZW22z3pjDegHuI9tQ0UU2:IOWDxBHuIualQ1x","tlshash":"9e168db173a1b065079352d814671001f239a84bb40d80ecf7acd9eb7fa99ca957bf36","size":4086223,"data":"","first_seen":"2026-07-14T17:45:36.985888Z","last_seen":"2026-07-14T17:50:59.845699Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"guard-api-b4ca.pages.dev/?host=https%3A%2F%2Fbytedrop.cfd","fqdn":"guard-api-b4ca.pages.dev","domain":"guard-api-b4ca.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.47.4","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"030125497fcc7b8de5dbaeada99c12ae","sha1":"1eeb65c627fb6f825d50b78ea53184a393e61b52","sha256":"2b7537ddbe256bd2b435101e4f8076f4cc225548342ae58a1b4861a6c494a7f2","sha512":"c9d8b59527527c6f24b931e622a756936e5b87021ba851b28c9833a51c6d8ba036f10b9c810cec75f1995dfc26aee4e47d0e5248ae340c4dc1e5daf722b30804","ssdeep":"","tlshash":"310128a54a9700b108f7dae63f5f3f12776201460084c5103ebde7aaaf23d5b84199c4","size":733,"data":"","first_seen":"2026-06-11T06:03:26.798628Z","last_seen":"2026-07-22T14:02:08.511842Z","times_seen":36,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"zen.claims/x7k/gf","fqdn":"zen.claims","domain":"zen.claims","tld":"claims"},"ip":{"addr":"104.21.70.23","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://bytedrop.cfd/","date":"2026-07-14T17:45:03.045Z","timestamp":1784051103045,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zen.claims","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 14:24:48 GMT","end":"Sat, 26 Sep 2026 15:22:24 GMT"},"fingerprint":{"sha1":"E7:4D:AD:22:67:E0:E5:88:2C:ED:21:6C:9F:E4:D8:73:CB:3D:47:C8","sha256":"48:14:21:57:B6:65:54:B2:E8:E5:66:2C:C9:F1:89:85:5D:7E:1D:56:22:3B:5F:85:A2:25:D8:63:E1:D8:0E:86"}}},"request":{"raw":"POST /x7k/gf HTTP/1.1\r\nHost: zen.claims\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nContent-Length: 37\r\nOrigin: https://bytedrop.cfd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bytedrop.cfd/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":37,"data":"{\"permit_key\":\"C9OsGmEdgCvNJBbWOAFP\"}"}},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 14 Jul 2026 17:45:03 GMT\r\ncontent-type: application/javascript\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: no-cache\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: *\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\ncontent-encoding: zstd\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kmO%2FSJjZ2c2%2BecV79061vlQfcc291zPcw1j688KdoqlfQnPNfEpTrr7aM3TLFT5yr7gD%2FWDYDVbes3q%2BFN3xI4Q5j%2FA0f2V1ht0wZXy7dyoWPLHxn9jbEqyRRUxR\"}]}\r\ncf-ray: a1b256c24e381a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2499160,"size_decoded":1920392,"mime_type":"application/javascript","magic":"data","md5":"a391c5fe60d39a2d047624c8e22ec2f7","sha1":"503f1f854a8617ade3b36419fe369bc69ed9f10d","sha256":"e86b0c8e81336e5a9f5d93afd8f7fbbaacda72b3403c3717e47739a3c695d1d8","sha512":"67455eaf8e921bae4d95faa380eff0f8875cf0aaa549d11c9964ba1257da83850f4610bd0ecbe806a7e2f6eeb74a00ac77eaecc2a6b52ab239f9bbfe2b7be5f8","ssdeep":"24576:skph/sGj/qisZeIZTPXUiax7zSRyeP/q3H3/1ef6tKf:pSPXU3Z4Z","tlshash":"f135f299483342a5669c06f86c5f1fc83d646bdce088a73b8478d0b6bbc61ff50d6876","first_seen":"2026-07-14T17:45:36.969484Z","last_seen":"2026-07-14T17:45:36.969484Z","times_seen":1,"resource_available":false,"data":null}},"time_used":357,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":159,"receive":198,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-14","alert":"Sinkholed","trigger":"zen.claims","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-14","alert":"Sinkholed","trigger":"zen.claims","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-14","alert":"Sinkholed","trigger":"zen.claims","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bytedrop.cfd/styles.css","fqdn":"bytedrop.cfd","domain":"bytedrop.cfd","tld":"cfd"},"ip":{"addr":"104.21.79.213","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://bytedrop.cfd/","date":"2026-07-14T17:45:01.821Z","timestamp":1784051101821,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bytedrop.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 03 Jul 2026 06:13:54 GMT","end":"Thu, 01 Oct 2026 07:12:38 GMT"},"fingerprint":{"sha1":"5D:C4:C2:89:52:A6:1D:F6:0D:CB:DF:6F:EF:D1:A5:AB:E9:09:DD:02","sha256":"17:C4:9D:E0:B3:04:99:7A:7D:78:E3:67:E3:53:CC:C0:89:20:E9:5D:20:40:C9:55:65:89:B4:54:04:8E:83:D2"}}},"request":{"raw":"GET /styles.css HTTP/1.1\r\nHost: bytedrop.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://bytedrop.cfd/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 14 Jul 2026 17:45:01 GMT\r\ncontent-type: text/css\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\nlast-modified: Thu, 02 Jul 2026 05:08:08 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-content-type-options: nosniff, nosniff\r\nx-frame-options: SAMEORIGIN, SAMEORIGIN\r\nreferrer-policy: no-referrer-when-downgrade, no-referrer-when-downgrade\r\npermissions-policy: camera=(), microphone=(), geolocation=(), camera=(), microphone=(), geolocation=()\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=C2aaRjiupokf%2BYgTwUBY%2BC6e4EmifAr2bxxVrkMm6O5TuTvMwMP1f%2BQlfbwhrNJMFZSG%2BQQbSleBh%2Fw9K%2FbSHZJK6P2QhjzeU07LlnKdTRbRgi3mRtAuXTK7Ijf4gsc%3D\"}]}\r\ncache-control: max-age=31536000\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\netag: W/\"6a45f238-2a22\"\r\ncf-ray: a1b256ba6fc556b5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10786,"size_decoded":4155,"mime_type":"text/css","magic":"ASCII text","md5":"062bc3a8c3f6433473871dce03d58657","sha1":"755353f27b62b1456bcd52bdbc5c1059fae45fff","sha256":"c0b19585e8268ab6b7ae70c255cf6d7ab4f05b928c06f1c5b7d5381a3f4e1e10","sha512":"494c61c60035a7c12a7109d97743bed9e2c375990390a8933d32ef7015e4be1807c4ba2e27b446df7ed0fc4d26ff7402b988048c6ab09bdaef53bc9cb3def767","ssdeep":"192:VOTXOmQmwYgsrYVNvrersWGxOlOHedSAJYKYK8H0/yvbm0jPj:ZGYV5yC+e7H","tlshash":"202297a567f11624b83fa4d4aad79b05b37dd013c10ece786be5202c6f8c1ea6262b45","first_seen":"2026-07-05T10:30:11.104093Z","last_seen":"2026-07-14T17:46:23.784473Z","times_seen":3,"resource_available":false,"data":null}},"time_used":83,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":83,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zen.claims/api/fp","fqdn":"zen.claims","domain":"zen.claims","tld":"claims"},"ip":{"addr":"104.21.70.23","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://bytedrop.cfd/","date":"2026-07-14T17:45:04.993Z","timestamp":1784051104993,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zen.claims","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 14:24:48 GMT","end":"Sat, 26 Sep 2026 15:22:24 GMT"},"fingerprint":{"sha1":"E7:4D:AD:22:67:E0:E5:88:2C:ED:21:6C:9F:E4:D8:73:CB:3D:47:C8","sha256":"48:14:21:57:B6:65:54:B2:E8:E5:66:2C:C9:F1:89:85:5D:7E:1D:56:22:3B:5F:85:A2:25:D8:63:E1:D8:0E:86"}}},"request":{"raw":"OPTIONS /api/fp HTTP/1.1\r\nHost: zen.claims\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: x-worker-hint\r\nReferer: https://bytedrop.cfd/\r\nOrigin: https://bytedrop.cfd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 204 \r\nserver: cloudflare\r\ndate: Tue, 14 Jul 2026 17:45:05 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: *\r\naccess-control-max-age: 86400\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3rdzYGuGWj%2BkwUds5wzKUhrMntXL1ewsizGTLFgPZmgJFL50EZFHjVno8UoNgyIGUHIke2top76TOujnioudie8k2B%2FPfGnjSZgsFpgCK5kU%2FLS0%2BHAjzNRItmH6\"}]}\r\ncf-ray: a1b256ce384e1a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":664,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-23T04:24:25.861741Z","times_seen":17468186,"resource_available":true,"data":null}},"time_used":34,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-14","alert":"Sinkholed","trigger":"zen.claims","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-14","alert":"Sinkholed","trigger":"zen.claims","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-14","alert":"Sinkholed","trigger":"zen.claims","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bytedrop.cfd/5cfc762d9e.js","fqdn":"bytedrop.cfd","domain":"bytedrop.cfd","tld":"cfd"},"ip":{"addr":"104.21.79.213","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bytedrop.cfd/","date":"2026-07-14T17:45:01.825Z","timestamp":1784051101825,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bytedrop.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 03 Jul 2026 06:13:54 GMT","end":"Thu, 01 Oct 2026 07:12:38 GMT"},"fingerprint":{"sha1":"5D:C4:C2:89:52:A6:1D:F6:0D:CB:DF:6F:EF:D1:A5:AB:E9:09:DD:02","sha256":"17:C4:9D:E0:B3:04:99:7A:7D:78:E3:67:E3:53:CC:C0:89:20:E9:5D:20:40:C9:55:65:89:B4:54:04:8E:83:D2"}}},"request":{"raw":"GET /5cfc762d9e.js HTTP/1.1\r\nHost: bytedrop.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://bytedrop.cfd/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 14 Jul 2026 17:45:01 GMT\r\ncontent-type: application/javascript\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\nlast-modified: Wed, 01 Jul 2026 17:24:06 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-content-type-options: nosniff, nosniff\r\nx-frame-options: SAMEORIGIN, SAMEORIGIN\r\nreferrer-policy: no-referrer-when-downgrade, no-referrer-when-downgrade\r\npermissions-policy: camera=(), microphone=(), geolocation=(), camera=(), microphone=(), geolocation=()\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=K%2FfHl8lptOgvdYar8Cwk%2BiTGUM4ZU2nIDis%2FAYEbwcTcKk%2FE6sI0%2FW8OthpXwOe3SPHQFbCVYfXncyTsN%2F7XrIwD1GgZAWep%2F%2Bla1mCrfyjTDd62eQOETT4t2jChslU%3D\"}]}\r\ncache-control: max-age=31536000\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\netag: W/\"6a454d36-588\"\r\ncf-ray: a1b256ba6fc656b5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1416,"size_decoded":1756,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1416), with no line terminators","md5":"6836d2fa519114e23930e18de4e74f1e","sha1":"2d5354fa623f7040b3985329d03a043ade4a9725","sha256":"6187dc7ba079d14ca3eee3d7693bb4538c196614a7d5a611e8e7aebff767b631","sha512":"b7cc0fc832c365bbe5ed9129b538ac6cda29068ed8da602fed66d454bafd3342f3491cb34c513cc782cb21331437e88b5d8a68f593ea9db8c10e7baf33e36c87","ssdeep":"","tlshash":"3621c0dbba52b4401785b7b6986fb40d9b77bd0accd98428d40059c23dbeb2fd0125a8","first_seen":"2026-07-05T10:30:11.09693Z","last_seen":"2026-07-14T17:46:23.779661Z","times_seen":3,"resource_available":true,"data":null}},"time_used":74,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":74,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zen.claims/x7k/gc","fqdn":"zen.claims","domain":"zen.claims","tld":"claims"},"ip":{"addr":"104.21.70.23","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://bytedrop.cfd/","date":"2026-07-14T17:45:02.362Z","timestamp":1784051102362,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zen.claims","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 14:24:48 GMT","end":"Sat, 26 Sep 2026 15:22:24 GMT"},"fingerprint":{"sha1":"E7:4D:AD:22:67:E0:E5:88:2C:ED:21:6C:9F:E4:D8:73:CB:3D:47:C8","sha256":"48:14:21:57:B6:65:54:B2:E8:E5:66:2C:C9:F1:89:85:5D:7E:1D:56:22:3B:5F:85:A2:25:D8:63:E1:D8:0E:86"}}},"request":{"raw":"OPTIONS /x7k/gc HTTP/1.1\r\nHost: zen.claims\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://bytedrop.cfd/\r\nOrigin: https://bytedrop.cfd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 204 \r\nserver: cloudflare\r\ndate: Tue, 14 Jul 2026 17:45:02 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: *\r\naccess-control-max-age: 86400\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tKMo%2BrI3AvrwevAu%2BgP%2Fm7Pqqcn5k66Iz0tkBoS9go4AKuGWZ8eCyGAKNH3WZqPKk5JCF2PGxX1bq%2BCletchQRwJSCCMcxmJNqSRdfzYVAYgSPMDcaldWOStlz98\"}]}\r\ncf-ray: a1b256bf2dc71a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":664,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-23T04:24:25.861741Z","times_seen":17468186,"resource_available":true,"data":null}},"time_used":322,"timings":{"blocked":0,"dns":206,"connect":12,"send":0,"wait":104,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-14","alert":"Sinkholed","trigger":"zen.claims","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-14","alert":"Sinkholed","trigger":"zen.claims","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-14","alert":"Sinkholed","trigger":"zen.claims","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zen.claims/x7k/gf","fqdn":"zen.claims","domain":"zen.claims","tld":"claims"},"ip":{"addr":"104.21.70.23","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://bytedrop.cfd/","date":"2026-07-14T17:45:03.047Z","timestamp":1784051103047,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zen.claims","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 14:24:48 GMT","end":"Sat, 26 Sep 2026 15:22:24 GMT"},"fingerprint":{"sha1":"E7:4D:AD:22:67:E0:E5:88:2C:ED:21:6C:9F:E4:D8:73:CB:3D:47:C8","sha256":"48:14:21:57:B6:65:54:B2:E8:E5:66:2C:C9:F1:89:85:5D:7E:1D:56:22:3B:5F:85:A2:25:D8:63:E1:D8:0E:86"}}},"request":{"raw":"OPTIONS /x7k/gf HTTP/1.1\r\nHost: zen.claims\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://bytedrop.cfd/\r\nOrigin: https://bytedrop.cfd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 204 \r\nserver: cloudflare\r\ndate: Tue, 14 Jul 2026 17:45:03 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: *\r\naccess-control-max-age: 86400\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FqWQg8T5wOa8GiEUBceemlEJdX%2FCBrV2toGveqFSoLtjZxbhHjulFd8ZbcIcyApKSw0bzpGPrub%2FZbU3b82zvj0O0Oyc7qvCBkjxo%2FoqBzFa03O8jSvyTs3ByESU\"}]}\r\ncf-ray: a1b256c20e351a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":664,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-23T04:24:25.861741Z","times_seen":17468186,"resource_available":true,"data":null}},"time_used":34,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-14","alert":"Sinkholed","trigger":"zen.claims","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-14","alert":"Sinkholed","trigger":"zen.claims","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-14","alert":"Sinkholed","trigger":"zen.claims","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"guard-api-b4ca.pages.dev/?host=https%3A%2F%2Fbytedrop.cfd","fqdn":"guard-api-b4ca.pages.dev","domain":"guard-api-b4ca.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.47.4","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://bytedrop.cfd/","date":"2026-07-14T17:45:04.809Z","timestamp":1784051104809,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"guard-api-b4ca.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Jul 2026 13:52:24 GMT","end":"Sun, 11 Oct 2026 14:50:55 GMT"},"fingerprint":{"sha1":"08:31:E0:9A:C4:DE:4C:97:3A:3C:15:EC:09:2E:6D:9F:FA:23:C1:E4","sha256":"09:51:8C:5C:07:AA:86:21:E5:E7:BC:F8:84:2F:A5:0F:B3:EB:C9:A7:F9:71:12:FD:CC:D1:47:09:C1:EE:D5:A8"}}},"request":{"raw":"GET /?host=https%3A%2F%2Fbytedrop.cfd HTTP/1.1\r\nHost: guard-api-b4ca.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bytedrop.cfd/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 14 Jul 2026 17:45:04 GMT\r\ncontent-type: text/html; charset=utf-8\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=4,i=?0\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KSuTLcp88sWePoKWMCJPRXk8CbqS5t16Ss9zTWlx42fXJ1nobVqhIZCJOwVP7eCySGXd9swTFSglqYFw1VInxKjuKEx9%2Byxk9VzvuQwCHLRF%2B0fDXw5zIybvUdNcNJgbOqX%2BlD4Ow5QHgFw%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: a1b256cd3e0b5688-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1086,"size_decoded":1186,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"dccd9e9ab7c59b0179197f3066815b4f","sha1":"c88f2217ef9b20f9fcebe05f1e532030e9936957","sha256":"9c7e96b7633e4aaeae6e0eab538aa4b370ef13241193e04e43fb4a34283b8b3a","sha512":"20f8f4962982e0e46980d2ba556c753ccefc9e5817b2f2cad9911d8489272be73dd95527cb5c5dc7a48fbc5cf189e511d5d2120e0584c9c44b49cc16cdf97ae3","ssdeep":"","tlshash":"69118e450d57407115f38a963b5f7e05a666924640c4c5002ffae2a7af53e4b8805ad8","first_seen":"2026-07-14T17:45:28.783981Z","last_seen":"2026-07-14T17:50:59.77625Z","times_seen":9,"resource_available":false,"data":null}},"time_used":52,"timings":{"blocked":0,"dns":7,"connect":15,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zen.claims/api/fp","fqdn":"zen.claims","domain":"zen.claims","tld":"claims"},"ip":{"addr":"104.21.70.23","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://bytedrop.cfd/","date":"2026-07-14T17:45:04.991Z","timestamp":1784051104991,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zen.claims","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 14:24:48 GMT","end":"Sat, 26 Sep 2026 15:22:24 GMT"},"fingerprint":{"sha1":"E7:4D:AD:22:67:E0:E5:88:2C:ED:21:6C:9F:E4:D8:73:CB:3D:47:C8","sha256":"48:14:21:57:B6:65:54:B2:E8:E5:66:2C:C9:F1:89:85:5D:7E:1D:56:22:3B:5F:85:A2:25:D8:63:E1:D8:0E:86"}}},"request":{"raw":"POST /api/fp HTTP/1.1\r\nHost: zen.claims\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: text/plain\r\nX-Worker-Hint: 223188484f9bdfc9da147a297012e46b\r\nContent-Length: 1316\r\nOrigin: https://bytedrop.cfd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bytedrop.cfd/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":1316,"data":"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"}},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 14 Jul 2026 17:45:05 GMT\r\ncontent-type: application/json; charset=utf-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: *\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\ncontent-encoding: zstd\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UV89K2zjEj3jCKKcoW1tMeG5Nf9SV7rTxvNzJHpklo0Db9iCwzzeDW6qJR%2F3CpqgOg6SpHV1br7KiUJSEQmVO81pxBQNVZrtItBeofD5LSZ898gPOzYew8WzvfTs\"}]}\r\ncf-ray: a1b256ce685b1a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":270,"size_decoded":957,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"efabc78dc26520dcff81aaf1d90f898c","sha1":"122ea155066fae0afb1d824eae2a9e8da103852f","sha256":"c2e33ee26ad3db8807ec467f6accc59b5882f9b099f4f52ed4cfa9afbc41514e","sha512":"171b8603e9a5210fd6b289e726a12ac2138ecfb86cfcbdc20ee823bb7ff20d0219d42e67b825d31afe25ac0b2cda4b4f897e1f5cfdf2ce039968bf581ae0778c","ssdeep":"","tlshash":"e6d02bc75b2c8a6ff17c128ba03937942c9c66b463c50cdd501e57124167580bd07652","first_seen":"2026-07-14T17:45:36.975334Z","last_seen":"2026-07-14T17:45:36.975334Z","times_seen":1,"resource_available":false,"data":null}},"time_used":101,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":101,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-14","alert":"Sinkholed","trigger":"zen.claims","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-14","alert":"Sinkholed","trigger":"zen.claims","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-14","alert":"Sinkholed","trigger":"zen.claims","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bytedrop.cfd/","fqdn":"bytedrop.cfd","domain":"bytedrop.cfd","tld":"cfd"},"ip":{"addr":"104.21.79.213","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-07-14T17:45:01.487Z","timestamp":1784051101487,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bytedrop.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 03 Jul 2026 06:13:54 GMT","end":"Thu, 01 Oct 2026 07:12:38 GMT"},"fingerprint":{"sha1":"5D:C4:C2:89:52:A6:1D:F6:0D:CB:DF:6F:EF:D1:A5:AB:E9:09:DD:02","sha256":"17:C4:9D:E0:B3:04:99:7A:7D:78:E3:67:E3:53:CC:C0:89:20:E9:5D:20:40:C9:55:65:89:B4:54:04:8E:83:D2"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: bytedrop.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 14 Jul 2026 17:45:01 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Thu, 02 Jul 2026 05:09:26 GMT\r\nvary: accept-encoding\r\nx-content-type-options: nosniff, nosniff\r\nx-frame-options: SAMEORIGIN, SAMEORIGIN\r\nreferrer-policy: no-referrer-when-downgrade, no-referrer-when-downgrade\r\npermissions-policy: camera=(), microphone=(), geolocation=(), camera=(), microphone=(), geolocation=()\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LU6eZPcJSV6MPbRE0I3pKV9XgcmiTHjWHM14Kc%2FZ3%2BJ5zywqaZZ8t8agpzRw6ri0RwU8R7FpU5njhhfoviYohOn1ViBEJmFBvv%2BAT4%2Bbz3YWINuk39x7SHqYecUAz0U%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: zstd\r\ncf-ray: a1b256b8cd7d23eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5152,"size_decoded":2561,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"00b6994295e16b3b30bfeb8f6b7211ef","sha1":"c5bcd26ceafe2bf4be556c617d1ea3324729c470","sha256":"8f3d984f7ff3c99f0e9f7f0e0168a68d53290081b530a5ea781d74de22e32aae","sha512":"93e8d3c5715943d631ae86ff4a7448e07dce2f6c7b80a3145f11cd4f323570fe7972547040ccf5b8108eec3c227dd517f90e1803bd98098733e33f96c8ec4cf6","ssdeep":"96:PvMH1Gci/zuaYCBAeeWTSjSjS34ffNh8e0/9+bQ:PvwmzuatjUuuo9h6U0","tlshash":"68b1ab1190f26ab702b3d1c655aa5b2b6fe4d013d59b0100b3ae87d90feedc2b85356f","first_seen":"2026-07-05T10:30:11.102787Z","last_seen":"2026-07-14T17:46:23.782818Z","times_seen":3,"resource_available":true,"data":null}},"time_used":146,"timings":{"blocked":-1,"dns":60,"connect":1,"send":0,"wait":71,"receive":0,"ssl":14},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bytedrop.cfd/main.js","fqdn":"bytedrop.cfd","domain":"bytedrop.cfd","tld":"cfd"},"ip":{"addr":"104.21.79.213","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bytedrop.cfd/","date":"2026-07-14T17:45:01.823Z","timestamp":1784051101823,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bytedrop.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 03 Jul 2026 06:13:54 GMT","end":"Thu, 01 Oct 2026 07:12:38 GMT"},"fingerprint":{"sha1":"5D:C4:C2:89:52:A6:1D:F6:0D:CB:DF:6F:EF:D1:A5:AB:E9:09:DD:02","sha256":"17:C4:9D:E0:B3:04:99:7A:7D:78:E3:67:E3:53:CC:C0:89:20:E9:5D:20:40:C9:55:65:89:B4:54:04:8E:83:D2"}}},"request":{"raw":"GET /main.js HTTP/1.1\r\nHost: bytedrop.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://bytedrop.cfd/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 14 Jul 2026 17:45:01 GMT\r\ncontent-type: application/javascript\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\nlast-modified: Thu, 02 Jul 2026 05:08:08 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-content-type-options: nosniff, nosniff\r\nx-frame-options: SAMEORIGIN, SAMEORIGIN\r\nreferrer-policy: no-referrer-when-downgrade, no-referrer-when-downgrade\r\npermissions-policy: camera=(), microphone=(), geolocation=(), camera=(), microphone=(), geolocation=()\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gptOYvnawKbrpJV6NB%2Bj%2FS0Ir%2B9UJF4xNGHBDccbV4zMdlGoi4YrxLLPbauehGeou0nHdtPoeHc0GP4O98cniR%2F7Iw%2FWr9ePgQAjLhe0xbL0Ld4EnnmlcKr0xYzL6Uk%3D\"}]}\r\ncache-control: max-age=31536000\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\netag: W/\"6a45f238-984\"\r\ncf-ray: a1b256ba6fc756b5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2436,"size_decoded":2066,"mime_type":"application/javascript","magic":"ASCII text","md5":"226dd845cc29b6874fcf47cac24940d4","sha1":"f67e1060f37f144a3813164e638ad068ed570657","sha256":"c86971b88319ad15fcf7480ede59dfc62896a5e9e6590cc2a831a4b5ffce336d","sha512":"a09751c3713435c134b33a192f11eabb91eda206fc208edfdc274eee8bc722083399a301ed8555b85ae28789829a28697c106a22c2109bf52fe9c680050af78c","ssdeep":"","tlshash":"e741d008e371053d44b65235697f721872aba1271e07ec98795c80807ffa876aabdf61","first_seen":"2026-07-05T10:30:11.109634Z","last_seen":"2026-07-14T17:46:23.770175Z","times_seen":3,"resource_available":true,"data":null}},"time_used":83,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":83,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bytedrop.cfd/favicon.ico","fqdn":"bytedrop.cfd","domain":"bytedrop.cfd","tld":"cfd"},"ip":{"addr":"104.21.79.213","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bytedrop.cfd/","date":"2026-07-14T17:45:02.283Z","timestamp":1784051102283,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bytedrop.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 03 Jul 2026 06:13:54 GMT","end":"Thu, 01 Oct 2026 07:12:38 GMT"},"fingerprint":{"sha1":"5D:C4:C2:89:52:A6:1D:F6:0D:CB:DF:6F:EF:D1:A5:AB:E9:09:DD:02","sha256":"17:C4:9D:E0:B3:04:99:7A:7D:78:E3:67:E3:53:CC:C0:89:20:E9:5D:20:40:C9:55:65:89:B4:54:04:8E:83:D2"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: bytedrop.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://bytedrop.cfd/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\nserver: cloudflare\r\ndate: Tue, 14 Jul 2026 17:45:02 GMT\r\ncontent-type: text/html\r\nvary: accept-encoding\r\npriority: u=6,i=?0\r\nx-content-type-options: nosniff, nosniff\r\nx-frame-options: SAMEORIGIN, SAMEORIGIN\r\nreferrer-policy: no-referrer-when-downgrade, no-referrer-when-downgrade\r\npermissions-policy: camera=(), microphone=(), geolocation=(), camera=(), microphone=(), geolocation=()\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7ta3bA0dN2GXnQkVaHnfrmli4ZlMi0jUNKf55OdcoIMVMVppEIcOmZ6dKynhjFeZ2OhJpFu6t%2FFtPyWXQ95YAkyuhq%2F3c9RdPYSZNKoyuVZ7u5QrDW8OOu5F6lxkW2Y%3D\"}]}\r\ncache-control: max-age=31536000\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1b256bd483156b5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":146,"size_decoded":1050,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"8eec510e57f5f732fd2cce73df7b73ef","sha1":"3c0af39ecb3753c5fee3b53d063c7286019eac3b","sha256":"55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0","sha512":"73bbf698482132b5fd60a0b58926fddec9055f8095a53bc52714e211e9340c3419736ceafd6b279667810114d306bfccdcfcddf51c0b67fe9e3c73c54583e574","ssdeep":"","tlshash":"b7c02b2d35133c4cc563313423c37140c0d6833b687a41110400c00371cf2998ec3397","first_seen":"2023-03-07T12:05:15Z","last_seen":"2026-07-23T04:26:11.038784Z","times_seen":543037,"resource_available":true,"data":null}},"time_used":46,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":46,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"guard-api-b4ca.pages.dev/assets/index-BFMgf9ym.js","fqdn":"guard-api-b4ca.pages.dev","domain":"guard-api-b4ca.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.47.4","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://guard-api-b4ca.pages.dev/?host=https%3A%2F%2Fbytedrop.cfd","date":"2026-07-14T17:45:04.931Z","timestamp":1784051104931,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"guard-api-b4ca.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Jul 2026 13:52:24 GMT","end":"Sun, 11 Oct 2026 14:50:55 GMT"},"fingerprint":{"sha1":"08:31:E0:9A:C4:DE:4C:97:3A:3C:15:EC:09:2E:6D:9F:FA:23:C1:E4","sha256":"09:51:8C:5C:07:AA:86:21:E5:E7:BC:F8:84:2F:A5:0F:B3:EB:C9:A7:F9:71:12:FD:CC:D1:47:09:C1:EE:D5:A8"}}},"request":{"raw":"GET /assets/index-BFMgf9ym.js HTTP/1.1\r\nHost: guard-api-b4ca.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://guard-api-b4ca.pages.dev/?host=https%3A%2F%2Fbytedrop.cfd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 14 Jul 2026 17:45:04 GMT\r\ncontent-type: application/javascript\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=3,i=?0\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fWbOtnrFUDCjrsGWxRCO6B%2Bx72NEOiGHQ8D2jIgJH1A6FHNNAvs79HTYRjIHmBp0FHE1BmPZ7fkfZ%2FekSjA6%2FXVlzDaUkN2VylmlHzZxHlB1MuNPuojjbSFf8AebjnAxX7g2p%2FSk6L2u8fQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"f607c59b23e15d664fe420da215b20a1\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: a1b256cdde7e5688-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":42907,"size_decoded":31586,"mime_type":"application/javascript","magic":"data","md5":"56294c73a80b3ddb73a406da7988fb34","sha1":"e43f2383d3f90812968b75f5179f4e9d50c90c8f","sha256":"e91887a772df8a5d107f9236ea55744971098342b25df684c157667521439f60","sha512":"94a648bf5058b6adf1185269ba9136b9e07021048ae095ac23c3c3d4b54a9fc6a7906f34d8af535ad76c96e7c1045175f1ff1e3dceae33f85a49b29e56628b9f","ssdeep":"768:2EmJl42/wD5Uk6Od+ghdKIx+Qoydzje4dvE7OYbN0jMyppQanIMI8:2Em82Idd+g3K/QoydG4UrbN0jMyrNbI8","tlshash":"7d13c09c3972224102ad1fe82e9f59c86e1ccfe1a55c986fc022c091df6a1ab14efdd5","first_seen":"2026-07-14T17:45:28.777315Z","last_seen":"2026-07-14T17:50:59.788254Z","times_seen":9,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":17,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bsc-dataseed2.bnbchain.org/","fqdn":"bsc-dataseed2.bnbchain.org","domain":"bnbchain.org","tld":"org"},"ip":{"addr":"54.220.41.248","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://bytedrop.cfd/","date":"2026-07-14T17:45:02.187Z","timestamp":1784051102187,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"bnbchain.org","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Fri, 10 Apr 2026 00:00:00 GMT","end":"Sat, 24 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"AD:51:35:3C:6A:BD:00:80:7E:C2:BB:61:75:B1:0A:D8:28:8C:62:89","sha256":"3E:F5:AA:B6:AF:7A:6B:4C:8C:99:02:80:C8:8D:C7:A8:56:7D:40:10:01:15:9D:68:B3:94:4D:05:F5:41:C3:94"}}},"request":{"raw":"OPTIONS / HTTP/1.1\r\nHost: bsc-dataseed2.bnbchain.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://bytedrop.cfd/\r\nOrigin: https://bytedrop.cfd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 \r\ndate: Tue, 14 Jul 2026 17:45:02 GMT\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: POST, GET, OPTIONS\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 600\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubdomains\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":458,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-23T04:24:25.861741Z","times_seen":17468186,"resource_available":true,"data":null}},"time_used":133,"timings":{"blocked":0,"dns":2,"connect":31,"send":0,"wait":33,"receive":0,"ssl":67},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}