{"report_id":"c5b09b92-b2d8-47c8-b16c-e2eb1f4a78b5","version":6,"status":"done","tags":[],"date":"2025-09-03T18:27:23Z","url":{"schema":"https","addr":"yzytoken-drop.xyz/","fqdn":"yzytoken-drop.xyz","domain":"yzytoken-drop.xyz","tld":"xyz"},"ip":{"addr":"104.21.24.183","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"yzytoken-drop.xyz/","fqdn":"yzytoken-drop.xyz","domain":"yzytoken-drop.xyz","tld":"xyz"},"title":"YZY AIRDROP"},"submit":{"url":{"schema":"https","addr":"yzytoken-drop.xyz/","fqdn":"yzytoken-drop.xyz","domain":"yzytoken-drop.xyz","tld":"xyz"},"ip":{"addr":"104.21.24.183","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null,"user":{"user_id":"akbkyowd9geqr98"}},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-10-08T18:27:23Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-03","alert":"Sinkholed","trigger":"coinmarketcop-api.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"coinmarketcop-api.com","ip":{"addr":"104.21.62.252","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-08-22","domain_rank":0,"first_seen":"2025-08-22T20:51:30.781912Z","last_seen":"2025-08-31T03:13:34.09748Z","alert_count":6,"request_count":6,"received_data":5166,"sent_data":4438,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"yzytoken-drop.xyz","ip":{"addr":"104.21.24.183","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-08-26","domain_rank":0,"first_seen":"2025-09-03T18:27:24.19655Z","last_seen":"2025-09-03T18:27:24.19655Z","alert_count":0,"request_count":10,"received_data":187582,"sent_data":4470,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2025-09-03T15:14:36.780259Z","alert_count":0,"request_count":1,"received_data":9481,"sent_data":556,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":null}],"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"yzytoken-drop.xyz/","fqdn":"yzytoken-drop.xyz","domain":"yzytoken-drop.xyz","tld":"xyz"},"ip":{"addr":"104.21.24.183","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"c2f73d12b72fc8f8a9179d31584636fe","sha1":"7a44292568fd723a9a9acba3d57838991b181403","sha256":"2f9aa65d5bf858c39bcf8d1bc64563af87318bfe702814e881844df549273a30","sha512":"f7788a6336138ad7af9ff40caf32923b1fe7c99fcda04d7211bc1e86510e85cc3e3fae047cba165e09bcf7d9f65ec9fc9f0114d9cc31781162ec479a2eabe2b0","ssdeep":"","tlshash":"9de02b286a5714f925737491cb1f7240e8a000735043c801fd1cf54a0f80e1838b0fcd","size":328,"data":"","first_seen":"2025-08-21T04:00:37.9397Z","last_seen":"2025-09-03T18:27:26.818877Z","times_seen":18,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yzytoken-drop.xyz/","fqdn":"yzytoken-drop.xyz","domain":"yzytoken-drop.xyz","tld":"xyz"},"ip":{"addr":"104.21.24.183","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"1ce18ec8cffab0d07a14ec35e48861e5","sha1":"87c0e1b69a8d54900631635fd157156bf89991ab","sha256":"e23fad71aa8d8f66a806eec191eae87522c403b81b6f63899759a0c78abc5031","sha512":"0a089b13a9b964771a3a2cc183163b49050b38d7ac0fc048fdfdc13cd6902263d0eca53b20a5e04920bb27bc8d66144486f9b6b0d1b4199137623f9ac94f9621","ssdeep":"768:XubGpv+roG7GLskmHE4qSsYipQIgAPtiXJIpLZPHbA/w9bmV5niFug2dssrjKhMN:+cskmDASITbUWb/ug2ys3KhUr","tlshash":"ddc322061253a1ac8f93e12ccf2912cda6b149640be65db1bb54ae1ff91d16332e77c3","size":120043,"data":"","first_seen":"2025-08-27T17:25:21.863015Z","last_seen":"2025-09-03T18:27:26.819806Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yzytoken-drop.xyz/pQ4yO3oeG7hp.js","fqdn":"yzytoken-drop.xyz","domain":"yzytoken-drop.xyz","tld":"xyz"},"ip":{"addr":"104.21.24.183","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d0f81f60cdcbaaa035f09b10d648f4e7","sha1":"ff7e966fcd2d2be4d28e0935ab0477699361fb3c","sha256":"5c049dcc49112fb4c8e002fe0662299790b2dfc12da2d519e965f94c3d3d3a92","sha512":"63b3ef43d330c223c50f3a153a262d5926f2c1d9acaccdb716d6baf031fc2f30677da529b46a7dc9e132e5112faacd800a49e40af23b1cc8ec184c9a321f1a6e","ssdeep":"768:SHP8/Gpv+roG7GLukmJY4qSsgipJKJddZQmk8zIP3InJfXDL2eq8Iii1VOK21sys:SHUIukmEKJ/Zpc3IJfXRuVOK2aypkdWI","tlshash":"04c3334b115361ac8f93a12ccf6925cca6b145540be68cb6bb449e9ffa0d56332e73c3","size":124610,"data":"","first_seen":"2025-08-27T17:25:21.834444Z","last_seen":"2025-09-03T18:27:26.792471Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yzytoken-drop.xyz/","fqdn":"yzytoken-drop.xyz","domain":"yzytoken-drop.xyz","tld":"xyz"},"ip":{"addr":"104.21.24.183","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"297a907d4e5b4c2198915e66274d9c9a","sha1":"e0f98af49ab0f7a270e2d739436181f924449098","sha256":"0fdbc26d9d5bd7f6a4bc38acfb91fc663c57463d43a08447f1386b3354cd84de","sha512":"48487cbd59e60a259a5836fc0315243da500d617e94e06b3073f79bb834bd141c9e5cfb59c42a3c2086c920c21be5996e589d4658513cf31d95bfc5757a4a44e","ssdeep":"","tlshash":"1371bc3beb00173bdc8fb9fdced5b4c02e62497262496560691ce102b16cd7087bed88","size":3741,"data":"","first_seen":"2025-08-14T22:39:51.132287Z","last_seen":"2026-04-01T03:19:00.187129Z","times_seen":3001,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coinmarketcop-api.com/@v1/cdn/bundles/front-worker.js?t=29282067","fqdn":"coinmarketcop-api.com","domain":"coinmarketcop-api.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"2ff74d0adff4fa95cf23170466507633","sha1":"a6b14ff065b51e7cadb9b6b57eed7be140f02fd1","sha256":"53fbb9bc38a9a008a5c8d3b701d8109a7bf4cb26a7ee054ad5eaa997f7ccc444","sha512":"b57a34bf3879d0919a083a8526e79f230abd679d6626b7d8cd04646960f59e53425972d368816b09d96128b1704d49fe3b298bc1a642557ca5a2c1e0c8b4b6d2","ssdeep":"6144:Us6RCjrjOJMZOk6p1ZsJzO3fXegHhlhmVKACxW:R64fj0PWCvXegHzAGW","tlshash":"fb748c917280617916634fda41bf094ab238f1206409896cf75cc8d32bb99dad9bff7c","size":339418,"data":"","first_seen":"2025-08-22T20:51:35.798965Z","last_seen":"2025-09-07T16:24:51.919535Z","times_seen":70,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null},"http":[{"url":{"schema":"https","addr":"coinmarketcop-api.com/@v1/log/join","fqdn":"coinmarketcop-api.com","domain":"coinmarketcop-api.com","tld":"com"},"ip":{"addr":"104.21.62.252","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://yzytoken-drop.xyz/","date":"2025-09-03T18:27:04.272Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinmarketcop-api.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 22 Aug 2025 15:47:41 GMT","end":"Thu, 20 Nov 2025 16:45:54 GMT"},"fingerprint":{"sha1":"B0:CF:37:BB:3E:5D:19:87:C9:06:DA:2B:3A:C5:0B:77:11:4C:A2:47","sha256":"FC:6B:44:07:4E:C2:B7:3E:B8:95:B0:E9:D0:96:D9:1C:DC:FE:A5:D7:F6:6B:A4:D5:79:CF:BE:F3:E3:05:67:8E"}}},"request":{"raw":"POST /@v1/log/join HTTP/1.1\r\nHost: coinmarketcop-api.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nx-scale-referrer: yzytoken-drop.xyz\r\nauthorization: eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJjdXN0b21lcklkIjoiSmtmRDY0MnVXcSIsImdyb3VwX2lkIjo2MzQsImlhdCI6MTc1NjE1MDQ4NX0.e8Fzheom7oQ-QFcGQ0EWdbuCEZmradM_2KPkSwbdsvg\r\nx-device: 0:Windows:Firefox\r\nContent-Length: 2\r\nOrigin: https://yzytoken-drop.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://yzytoken-drop.xyz/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 03 Sep 2025 18:27:05 GMT\r\ncontent-type: application/json; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dixQBTwnHItI%2Fp9SJaqfqkx9y2YWu75s8sA7DQDWdlVsUrIFgvpMFsDra7w%2F%2B5INj8sTsnWbTB%2FDdYOGIWEOQT6y%2B8lGZbe%2FSDmockRIKmR%2FZg0%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-origin: https://yzytoken-drop.xyz\r\nvary: Origin, Accept-Encoding\r\naccess-control-allow-credentials: true\r\netag: W/\"20-llti1nxI8SZi+xVpiFYUSfGpvg8\"\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\ncf-ray: 97974c8fbf40568f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":32,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"3b5b4d21f8c87c5e6534b5a1d9d4574a","sha1":"965b62d67c48f12662fb156988561449f1a9be0f","sha256":"24dcf0603597089c21d0ab963001064690004c39e72221981b7faf7a5edd5f25","sha512":"1218be959182a70f35f2eeaeadc640c721f546b6b46b48f21f9acb3dead02d478da0ac6855f6c55777fbf33486b967fad262e93a5da6327ac7517933f9663ba8","ssdeep":"","tlshash":"d18000000e00aca83bc20802b2832028aaf22a80808b20a2800c803a0b028e0c22ba0c","first_seen":"2025-07-26T22:59:19.534167Z","last_seen":"2025-10-13T01:44:36.478944Z","times_seen":529,"resource_available":false,"data":null}},"time_used":788,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":788,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-03","alert":"Sinkholed","trigger":"coinmarketcop-api.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"yzytoken-drop.xyz/","fqdn":"yzytoken-drop.xyz","domain":"yzytoken-drop.xyz","tld":"xyz"},"ip":{"addr":"104.21.24.183","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-09-03T18:27:02.360Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yzytoken-drop.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 26 Aug 2025 00:18:00 GMT","end":"Mon, 24 Nov 2025 01:16:19 GMT"},"fingerprint":{"sha1":"F2:66:94:CD:6D:0E:71:07:ED:21:13:5A:63:FD:A5:C8:80:07:FD:64","sha256":"08:3E:39:51:8E:54:0E:AF:B5:E9:C9:93:D5:EA:3F:48:7F:10:B4:40:4E:C4:09:84:B5:6E:A3:A0:F3:79:CA:7F"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: yzytoken-drop.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 03 Sep 2025 18:27:02 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\nlast-modified: Tue, 26 Aug 2025 00:43:12 GMT\r\ncf-cache-status: DYNAMIC\r\nvary: Accept-Encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WiTGVE%2F5NF6RzO8vqDxtzhVxWtTNRS5V8vvFJ5HaxFTW13Uxp%2BEKSLuCeC8jIWiwHJ3GlxoCpNrUnZ4%2FqgOEKxWj4azMzrX3%2FE%2BHuH070A%3D%3D\"}]}\r\ncontent-encoding: br\r\ncf-ray: 97974c83df615685-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":29414,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (15876)","md5":"f7cabfafb28f62dbccf41e76546a0136","sha1":"444bed36530d7b59bc888182bf65dad55822d5a1","sha256":"4466bd3a98c81ea7bb23d3acef9fae1dc5a005bdf16f60e9a4e11683525e93d2","sha512":"aec6c38e016f7b89e7f8448778b3edc055f38004d9d64dea614594134007b12062dd6d8c50d72f9b8e77295e9af61f591844c60dc908ccb0b7e80eebda73fe8a","ssdeep":"768:N+qy767hPCNPOuzQH2L0r82It4uSRhKut5NFgl+FU+xHyvfSDIJPJWf3b8fzwZPa:HYzqyrYynCNVUfmAvzoCx","tlshash":"ebd22065f9408a3f3a0ba2fe06d4ce9c6251741198137a5d72fc91c6e3caef34db6818","first_seen":"2025-09-03T18:27:26.788786Z","last_seen":"2025-09-03T18:27:26.788786Z","times_seen":1,"resource_available":false,"data":null}},"time_used":219,"timings":{"blocked":14,"dns":6,"connect":1,"send":0,"wait":173,"receive":0,"ssl":21},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yzytoken-drop.xyz/pQ4yO3oeG7hp.js","fqdn":"yzytoken-drop.xyz","domain":"yzytoken-drop.xyz","tld":"xyz"},"ip":{"addr":"104.21.24.183","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://yzytoken-drop.xyz/","date":"2025-09-03T18:27:02.735Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yzytoken-drop.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 26 Aug 2025 00:18:00 GMT","end":"Mon, 24 Nov 2025 01:16:19 GMT"},"fingerprint":{"sha1":"F2:66:94:CD:6D:0E:71:07:ED:21:13:5A:63:FD:A5:C8:80:07:FD:64","sha256":"08:3E:39:51:8E:54:0E:AF:B5:E9:C9:93:D5:EA:3F:48:7F:10:B4:40:4E:C4:09:84:B5:6E:A3:A0:F3:79:CA:7F"}}},"request":{"raw":"GET /pQ4yO3oeG7hp.js HTTP/1.1\r\nHost: yzytoken-drop.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://yzytoken-drop.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 03 Sep 2025 18:27:02 GMT\r\nserver: cloudflare\r\nlast-modified: Tue, 26 Aug 2025 00:43:12 GMT\r\netag: \"1e6c2-63d39f4f7b992-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-length: 28205\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7LsG5D36zKKNpOtPwkD6MZrGHEpXYuIwO5wd2uwzPs4opucOYXGm7QplOXJTkXSAmEDfDWnNYCpSupJs%2FYOUA%2FtbfriLjW0B2S8m8krK9NHV\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: text/javascript\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncf-ray: 97974c860dd535a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":124610,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (63984)","md5":"d0f81f60cdcbaaa035f09b10d648f4e7","sha1":"ff7e966fcd2d2be4d28e0935ab0477699361fb3c","sha256":"5c049dcc49112fb4c8e002fe0662299790b2dfc12da2d519e965f94c3d3d3a92","sha512":"63b3ef43d330c223c50f3a153a262d5926f2c1d9acaccdb716d6baf031fc2f30677da529b46a7dc9e132e5112faacd800a49e40af23b1cc8ec184c9a321f1a6e","ssdeep":"768:SHP8/Gpv+roG7GLukmJY4qSsgipJKJddZQmk8zIP3InJfXDL2eq8Iii1VOK21sys:SHUIukmEKJ/Zpc3IJfXRuVOK2aypkdWI","tlshash":"04c3334b115361ac8f93a12ccf6925cca6b145540be68cb6bb449e9ffa0d56332e73c3","first_seen":"2025-08-27T17:25:21.834444Z","last_seen":"2025-09-03T18:27:26.792471Z","times_seen":6,"resource_available":true,"data":null}},"time_used":352,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":226,"receive":126,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yzytoken-drop.xyz/styles.css","fqdn":"yzytoken-drop.xyz","domain":"yzytoken-drop.xyz","tld":"xyz"},"ip":{"addr":"104.21.24.183","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://yzytoken-drop.xyz/","date":"2025-09-03T18:27:02.737Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yzytoken-drop.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 26 Aug 2025 00:18:00 GMT","end":"Mon, 24 Nov 2025 01:16:19 GMT"},"fingerprint":{"sha1":"F2:66:94:CD:6D:0E:71:07:ED:21:13:5A:63:FD:A5:C8:80:07:FD:64","sha256":"08:3E:39:51:8E:54:0E:AF:B5:E9:C9:93:D5:EA:3F:48:7F:10:B4:40:4E:C4:09:84:B5:6E:A3:A0:F3:79:CA:7F"}}},"request":{"raw":"GET /styles.css HTTP/1.1\r\nHost: yzytoken-drop.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://yzytoken-drop.xyz/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 03 Sep 2025 18:27:02 GMT\r\nserver: cloudflare\r\nlast-modified: Tue, 26 Aug 2025 00:43:12 GMT\r\netag: \"14d7-63d39f4f7bd7a-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-length: 1139\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OtuKzpYE3EiGa9263HJjEkbJl6O3YppxLuGni9iql1A9L4BiVReI7cav2hqSNBWXQHY%2FF8cFcqrzbvHrb%2FfzKJzvL4JEvRb9uProex0lpIqE\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: text/css\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncf-ray: 97974c860dd635a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5335,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"4886c7ae1efa527891903bec382920f9","sha1":"e7dad62518ded3276984cf3be21b14aae93b7507","sha256":"23eaa067bc889e6c131dd8e398ef4626d1b44c86496d533e461877525fed92e3","sha512":"93c68eedc8f75da332e4010bf143295edefdf8acbd94de9a3c572af04a1f977947e662522fe285d9f3773a012f78c2dd0a936ac9f1550ccefc9ece6e91436546","ssdeep":"96:WXwfzGKo/Qw/Z84cSeqetTv+DdO5NTMAr3xDOPjSg:EwfzGKo/QwuRSeHtTvrPTD9ejSg","tlshash":"e5b1bd5de6056000e233ad7a6bb20b21fa4945678b06c8747fd86508cff91ad6752fcd","first_seen":"2025-09-03T18:27:26.793787Z","last_seen":"2025-09-03T18:27:26.793787Z","times_seen":1,"resource_available":false,"data":null}},"time_used":155,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":154,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yzytoken-drop.xyz/684e5662d94c69e1-s.p.woff2","fqdn":"yzytoken-drop.xyz","domain":"yzytoken-drop.xyz","tld":"xyz"},"ip":{"addr":"104.21.24.183","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://yzytoken-drop.xyz/","date":"2025-09-03T18:27:03.185Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yzytoken-drop.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 26 Aug 2025 00:18:00 GMT","end":"Mon, 24 Nov 2025 01:16:19 GMT"},"fingerprint":{"sha1":"F2:66:94:CD:6D:0E:71:07:ED:21:13:5A:63:FD:A5:C8:80:07:FD:64","sha256":"08:3E:39:51:8E:54:0E:AF:B5:E9:C9:93:D5:EA:3F:48:7F:10:B4:40:4E:C4:09:84:B5:6E:A3:A0:F3:79:CA:7F"}}},"request":{"raw":"GET /684e5662d94c69e1-s.p.woff2 HTTP/1.1\r\nHost: yzytoken-drop.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://yzytoken-drop.xyz/styles.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 03 Sep 2025 18:27:03 GMT\r\nserver: cloudflare\r\nlast-modified: Tue, 26 Aug 2025 00:43:12 GMT\r\netag: \"2794-63d39f4f7d4ea\"\r\naccept-ranges: bytes\r\ncontent-length: 10132\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FZVvTguoQtbwgnOwbaI14e6Flrj6mfRRQQ7wA5FT284h9425e%2BhcO76OIxB6MLuQFVRWs0RHFi4pKtfDHQp7bQMAwCYq2uvAhfUPqRBs2pI%2F\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: font/woff2\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\ncf-ray: 97974c88ee3935a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10132,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 10132, version 1.0","md5":"a1e11d00feb82d3b4f7cd3f2f7c26d34","sha1":"cd76209a05a8d42204222ab675b44d65a84f7709","sha256":"7cc6a8cf805d59d3a7b93b9f7a076fab2134d53413715eb4f891cd55a765f3d7","sha512":"c0d49c884362602bfe95d82316869ba8ed89fde04ac0184601c0fd378bea3c01a8eaceeaa6101efbbcc82a321459804660b4aaf59310299d438b1af0c4093493","ssdeep":"192:DGI0Zbz5JzOg+i6k1MJcFaSzRSxKm4ZqKYAjJO/neg7X8+R0:DcbPRv1MJDQLRJgnlb8+i","tlshash":"d122b052706884ddb76dc6e94f6f0bff6794a2c61602dd0fbceb7536246210301155bd","first_seen":"2023-07-12T17:25:23Z","last_seen":"2026-03-06T22:07:22.609814Z","times_seen":110,"resource_available":false,"data":null}},"time_used":152,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":151,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coinmarketcop-api.com/@v1/log/join","fqdn":"coinmarketcop-api.com","domain":"coinmarketcop-api.com","tld":"com"},"ip":{"addr":"104.21.62.252","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://yzytoken-drop.xyz/","date":"2025-09-03T18:27:03.890Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinmarketcop-api.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 22 Aug 2025 15:47:41 GMT","end":"Thu, 20 Nov 2025 16:45:54 GMT"},"fingerprint":{"sha1":"B0:CF:37:BB:3E:5D:19:87:C9:06:DA:2B:3A:C5:0B:77:11:4C:A2:47","sha256":"FC:6B:44:07:4E:C2:B7:3E:B8:95:B0:E9:D0:96:D9:1C:DC:FE:A5:D7:F6:6B:A4:D5:79:CF:BE:F3:E3:05:67:8E"}}},"request":{"raw":"OPTIONS /@v1/log/join HTTP/1.1\r\nHost: coinmarketcop-api.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: authorization,content-type,x-device,x-scale-referrer\r\nReferer: https://yzytoken-drop.xyz/\r\nOrigin: https://yzytoken-drop.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 03 Sep 2025 18:27:04 GMT\r\ncontent-length: 0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-origin: https://yzytoken-drop.xyz\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET,POST,PUT,DELETE,OPTIONS,PATCH\r\naccess-control-allow-headers: *\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tcFbNwDDI5PxWRP9IAw45Vef35LjVXrUb3lACc%2Bcp79DjiPra7%2FWaCqCBjn72ltZWTByW7CWPMD8aYSI3l21eli6RMGEsAADsP0ZICxBKzBnuTw%3D\"}]}\r\ncf-ray: 97974c8d7f16568f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-03T20:30:56.573385Z","times_seen":13302581,"resource_available":true,"data":null}},"time_used":380,"timings":{"blocked":25,"dns":1,"connect":0,"send":0,"wait":353,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-03","alert":"Sinkholed","trigger":"coinmarketcop-api.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Inter:ital,opsz,wght@0,14..32,100..900;1,14..32,100..900\u0026family=Montserrat:ital,wght@0,100..900;1,100..900\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://yzytoken-drop.xyz/","date":"2025-09-03T18:27:04.065Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 11 Aug 2025 19:22:25 GMT","end":"Mon, 03 Nov 2025 19:22:24 GMT"},"fingerprint":{"sha1":"05:AF:87:21:D4:6B:A6:86:ED:A7:D2:07:92:06:E4:D4:79:84:27:E8","sha256":"F6:EC:75:67:99:66:34:CC:0C:0F:9D:D7:8B:6A:04:94:98:0C:7B:B5:47:E2:47:37:A6:F8:E2:08:99:72:AB:BE"}}},"request":{"raw":"GET /css2?family=Inter:ital,opsz,wght@0,14..32,100..900;1,14..32,100..900\u0026family=Montserrat:ital,wght@0,100..900;1,100..900\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://yzytoken-drop.xyz/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Wed, 03 Sep 2025 18:27:04 GMT\r\ndate: Wed, 03 Sep 2025 18:27:04 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":8795,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"fcc7337bdb7e062b31a0ac4cda15300e","sha1":"a5bcb7bd4e54fb9ef7ed36e30a813a5d75fb5551","sha256":"d4c121b4b1065679f9c0c0c517ddde1532004adccb4fd00404c42e684a73974b","sha512":"9a30e3113b47ea77dde949070ba7848492f32a9fa5481c233302eeafdd0820bcc56a8477ee1c6d3f079accbecc0d0c88ebdc7dd95b5a1835520e37e4b4e9ee15","ssdeep":"192:vyEfyZy6yG3gyLyZVyV77xd6n3UQjH+yZwyqFy/yauyVukS3mp6b8:vtfcHjg8cicOgwFFWWRd+","tlshash":"1302fe91052b9104ea471cc927cf7e369e8e62a67481d17d7ffe2cd9acead22132471c","first_seen":"2025-06-01T07:54:44.821026Z","last_seen":"2025-09-04T14:12:36.317208Z","times_seen":160,"resource_available":false,"data":null}},"time_used":483,"timings":{"blocked":215,"dns":2,"connect":28,"send":0,"wait":46,"receive":0,"ssl":188},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coinmarketcop-api.com/@v1/services/connector?referrer=yzytoken-drop.xyz","fqdn":"coinmarketcop-api.com","domain":"coinmarketcop-api.com","tld":"com"},"ip":{"addr":"104.21.62.252","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://yzytoken-drop.xyz/","date":"2025-09-03T18:27:04.097Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinmarketcop-api.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 22 Aug 2025 15:47:41 GMT","end":"Thu, 20 Nov 2025 16:45:54 GMT"},"fingerprint":{"sha1":"B0:CF:37:BB:3E:5D:19:87:C9:06:DA:2B:3A:C5:0B:77:11:4C:A2:47","sha256":"FC:6B:44:07:4E:C2:B7:3E:B8:95:B0:E9:D0:96:D9:1C:DC:FE:A5:D7:F6:6B:A4:D5:79:CF:BE:F3:E3:05:67:8E"}}},"request":{"raw":"OPTIONS /@v1/services/connector?referrer=yzytoken-drop.xyz HTTP/1.1\r\nHost: coinmarketcop-api.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: authorization,x-auth-key,x-direction-safe,x-scale-referrer\r\nReferer: https://yzytoken-drop.xyz/\r\nOrigin: https://yzytoken-drop.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 03 Sep 2025 18:27:04 GMT\r\ncontent-length: 0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-origin: https://yzytoken-drop.xyz\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET,POST,PUT,DELETE,OPTIONS,PATCH\r\naccess-control-allow-headers: *\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MFCZtbs0Ni%2F3N9yNiWFMmEOQvydePUabpatxXlz2ACzFKEynnXEfxTFCBe4zVBuFlX%2FC1u5bIUFJy6Gp3crN%2BuNME7E07C1LAVCwwZMPmfkyXx8%3D\"}]}\r\ncf-ray: 97974c8e9f2b568f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-03T20:30:56.573385Z","times_seen":13302581,"resource_available":true,"data":null}},"time_used":677,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":677,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-03","alert":"Sinkholed","trigger":"coinmarketcop-api.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"coinmarketcop-api.com/@v1/services/temp-link/create?referrer=yzytoken-drop.xyz","fqdn":"coinmarketcop-api.com","domain":"coinmarketcop-api.com","tld":"com"},"ip":{"addr":"104.21.62.252","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://yzytoken-drop.xyz/","date":"2025-09-03T18:27:04.472Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinmarketcop-api.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 22 Aug 2025 15:47:41 GMT","end":"Thu, 20 Nov 2025 16:45:54 GMT"},"fingerprint":{"sha1":"B0:CF:37:BB:3E:5D:19:87:C9:06:DA:2B:3A:C5:0B:77:11:4C:A2:47","sha256":"FC:6B:44:07:4E:C2:B7:3E:B8:95:B0:E9:D0:96:D9:1C:DC:FE:A5:D7:F6:6B:A4:D5:79:CF:BE:F3:E3:05:67:8E"}}},"request":{"raw":"POST /@v1/services/temp-link/create?referrer=yzytoken-drop.xyz HTTP/1.1\r\nHost: coinmarketcop-api.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nAuthorization: eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJjdXN0b21lcklkIjoiSmtmRDY0MnVXcSIsImdyb3VwX2lkIjo2MzQsImlhdCI6MTc1NjE1MDQ4NX0.e8Fzheom7oQ-QFcGQ0EWdbuCEZmradM_2KPkSwbdsvg\r\nX-Direction-Safe: 1756924024023\r\nX-Scale-Referrer: yzytoken-drop.xyz\r\nX-Auth-Key: JN8FM3%2F4b7ALn3EDzXyOP%2Foy7h7S2nl0BNZTN5L8vRE%3D\r\nX-Auth-Key-V2: 0AIzkybLgGXvhg4VUno%2BpdQMb6%2Bh4f0hDJ3zro7r8VU%3D\r\nContent-Length: 2029\r\nOrigin: https://yzytoken-drop.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://yzytoken-drop.xyz/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 03 Sep 2025 18:27:05 GMT\r\ncontent-type: application/json; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rArzBzRNOVTIPGho2wK4LIZtWzIm1XfJvMNj%2FwXW5wpAuSbv13HnjvoA7lC4l%2BMtsOXrD0OTN8IPb9lE7jKSJqklwhfbAuKQ2jV7U99vG%2Fuvt48%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-origin: https://yzytoken-drop.xyz\r\nvary: Origin, Accept-Encoding\r\naccess-control-allow-credentials: true\r\netag: W/\"250-4zYp5oAbk4vLCMtPI471PTLITG8\"\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\ncf-ray: 97974c90ff56568f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":592,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"75e0fd9ff413a25d204ef26073dcb3ff","sha1":"e33629e6801b938bcb08cb4f238ef53d32c84c6f","sha256":"f2f9fc1317532bcb5af517c06d83877fcd546eedbf4a0af923e729015ebee1ff","sha512":"ea51544feda767e8f15eae500eda62a794f05cf48931669fa0cf48c9c0e066e792aaf1a7c5a2f330027aeada0a5dd78dbc3f2d291b16c78b002a04a44ecc4467","ssdeep":"","tlshash":"31f062035e7a2a4a928c88a31bcf3ed84a520d698c8501992439322ec6cf401b81bb02","first_seen":"2025-09-03T18:27:26.803479Z","last_seen":"2025-09-03T18:27:26.803479Z","times_seen":1,"resource_available":false,"data":null}},"time_used":910,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":910,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-03","alert":"Sinkholed","trigger":"coinmarketcop-api.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"yzytoken-drop.xyz/css2.css","fqdn":"yzytoken-drop.xyz","domain":"yzytoken-drop.xyz","tld":"xyz"},"ip":{"addr":"104.21.24.183","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://yzytoken-drop.xyz/","date":"2025-09-03T18:27:02.739Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yzytoken-drop.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 26 Aug 2025 00:18:00 GMT","end":"Mon, 24 Nov 2025 01:16:19 GMT"},"fingerprint":{"sha1":"F2:66:94:CD:6D:0E:71:07:ED:21:13:5A:63:FD:A5:C8:80:07:FD:64","sha256":"08:3E:39:51:8E:54:0E:AF:B5:E9:C9:93:D5:EA:3F:48:7F:10:B4:40:4E:C4:09:84:B5:6E:A3:A0:F3:79:CA:7F"}}},"request":{"raw":"GET /css2.css HTTP/1.1\r\nHost: yzytoken-drop.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://yzytoken-drop.xyz/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 03 Sep 2025 18:27:02 GMT\r\nserver: cloudflare\r\nlast-modified: Tue, 26 Aug 2025 00:43:12 GMT\r\netag: \"1dcc-63d39f4f7d8d2-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-length: 638\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RYrjRhsvjRnMM0dWDbfuNQceZKUWoBqpcAKzASgfnxJZhX9%2FPd5f%2FIhdmLffx31phPbOz6EcfxjUDGvzwt3kZomRsTfgr8AJnhy9E2s3F%2Fso\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: text/css\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncf-ray: 97974c861dd735a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7628,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"a945690afba190bdf35bdbc8dca91152","sha1":"d93d79ba5c4ff541fb62d683c5d6b488b9f53ba8","sha256":"e3588f89e8f3d36d7befdcd1ad777d37963acce98132704f84f1d7ab2d5e1b4b","sha512":"72a22e14d311d595ee72e60b3ae2692c0cf6745594fab8f6f60c522f0f91a227d67e0dbbbc34e4fdfae78e152a29498981398ad2f56e511e7abe26664268a393","ssdeep":"192:9/NAPt34yaDD/OnIt3/ha8G/rKht3iIall/E5yt3RPaGc:JwSfyGKVm","tlshash":"ebf14490046b9400eb872cd277cf7f376d9da148a045c9795ffd1898acded2613a1b4d","first_seen":"2024-12-17T11:31:53.647668Z","last_seen":"2026-03-31T13:48:51.726803Z","times_seen":454,"resource_available":false,"data":null}},"time_used":149,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":149,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yzytoken-drop.xyz/yeezy.svg","fqdn":"yzytoken-drop.xyz","domain":"yzytoken-drop.xyz","tld":"xyz"},"ip":{"addr":"104.21.24.183","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://yzytoken-drop.xyz/","date":"2025-09-03T18:27:02.741Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yzytoken-drop.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 26 Aug 2025 00:18:00 GMT","end":"Mon, 24 Nov 2025 01:16:19 GMT"},"fingerprint":{"sha1":"F2:66:94:CD:6D:0E:71:07:ED:21:13:5A:63:FD:A5:C8:80:07:FD:64","sha256":"08:3E:39:51:8E:54:0E:AF:B5:E9:C9:93:D5:EA:3F:48:7F:10:B4:40:4E:C4:09:84:B5:6E:A3:A0:F3:79:CA:7F"}}},"request":{"raw":"GET /yeezy.svg HTTP/1.1\r\nHost: yzytoken-drop.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://yzytoken-drop.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 03 Sep 2025 18:27:03 GMT\r\nserver: cloudflare\r\nlast-modified: Tue, 26 Aug 2025 00:43:12 GMT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TtqJm0ldG6vTAmdqEsm1C4S5MMwKpJ935J00sol1Te9BmNXP85rFya9nDjrKYb1Tkfahns32fLfa%2BLESCSGn1JtpLqiz8w18lcnnkWP1%2BgAN\"}]}\r\netag: W/\"100-63d39f4f7d102\"\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/svg+xml\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncf-ray: 97974c861dd935a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":256,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"7eaf40b60545cb285ea97d82fa1f13e2","sha1":"0dcd855692a78080b3ccaafc7105240faa95f91e","sha256":"0ea7050447f6aad202210ad26394b45973d15d2d05bab026d9679c31cf9972b6","sha512":"4ba787825666846832f1226e238add1abb0eb087fef8996d4de6008854c5db8b7654e51d1c75a173c188c0a3461ccd4026546494e831dd6ea5f9a61de0f2ff9e","ssdeep":"","tlshash":"d7d095d4023c95c4dc14433e66345451b4a6f0e3024c02f9cc4af9d560f435baf901bc","first_seen":"2025-08-22T20:51:16.578137Z","last_seen":"2025-09-03T18:27:26.806898Z","times_seen":4,"resource_available":false,"data":null}},"time_used":1256,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1256,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yzytoken-drop.xyz/favicon.png","fqdn":"yzytoken-drop.xyz","domain":"yzytoken-drop.xyz","tld":"xyz"},"ip":{"addr":"104.21.24.183","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://yzytoken-drop.xyz/","date":"2025-09-03T18:27:03.641Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yzytoken-drop.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 26 Aug 2025 00:18:00 GMT","end":"Mon, 24 Nov 2025 01:16:19 GMT"},"fingerprint":{"sha1":"F2:66:94:CD:6D:0E:71:07:ED:21:13:5A:63:FD:A5:C8:80:07:FD:64","sha256":"08:3E:39:51:8E:54:0E:AF:B5:E9:C9:93:D5:EA:3F:48:7F:10:B4:40:4E:C4:09:84:B5:6E:A3:A0:F3:79:CA:7F"}}},"request":{"raw":"GET /favicon.png HTTP/1.1\r\nHost: yzytoken-drop.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://yzytoken-drop.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 03 Sep 2025 18:27:03 GMT\r\nserver: cloudflare\r\nlast-modified: Tue, 26 Aug 2025 00:43:12 GMT\r\netag: \"6a4-63d39f4f7dcba\"\r\naccept-ranges: bytes\r\ncontent-length: 1700\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=y%2FaWj6j8iE6hiBAbMIsLYNvazBY%2BVQW0V%2BiKKlm9Q97mN2z4HfNZACmFc3BkTig9nre5DGxaDwtFbiqS6RiciwtoFlTEIt3MbKMc%2BLFpUWca\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/png\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\ncf-ray: 97974c8bceb835a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1700,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 126 x 90, 8-bit/color RGBA, non-interlaced","md5":"38715f81b810b6c55e5aa0d83f3a8c23","sha1":"095a7db450c9f7679b70b98add93e51d5121e201","sha256":"c7d9ef0c8ea14f22b194721942cfe327f69b3214a1a5a4d0e4ded07024696561","sha512":"303d3d9c8ba42891e8dbe23beffde493189113b971f3aaaa240dda9a9e45bc44a66ad922415f4b65798cf3f9dc0df734fdf8df7a0e14a138d8998787304226d7","ssdeep":"","tlshash":"e631f8d8719f96faf64e1a09c2bee1deb18bc8002d64c506aee11478472f140372a77c","first_seen":"2025-08-22T20:51:16.603495Z","last_seen":"2025-09-03T18:27:26.809199Z","times_seen":2,"resource_available":false,"data":null}},"time_used":184,"timings":{"blocked":6,"dns":0,"connect":0,"send":0,"wait":178,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coinmarketcop-api.com/@v1/services/temp-link/create?referrer=yzytoken-drop.xyz","fqdn":"coinmarketcop-api.com","domain":"coinmarketcop-api.com","tld":"com"},"ip":{"addr":"104.21.62.252","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://yzytoken-drop.xyz/","date":"2025-09-03T18:27:04.037Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinmarketcop-api.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 22 Aug 2025 15:47:41 GMT","end":"Thu, 20 Nov 2025 16:45:54 GMT"},"fingerprint":{"sha1":"B0:CF:37:BB:3E:5D:19:87:C9:06:DA:2B:3A:C5:0B:77:11:4C:A2:47","sha256":"FC:6B:44:07:4E:C2:B7:3E:B8:95:B0:E9:D0:96:D9:1C:DC:FE:A5:D7:F6:6B:A4:D5:79:CF:BE:F3:E3:05:67:8E"}}},"request":{"raw":"OPTIONS /@v1/services/temp-link/create?referrer=yzytoken-drop.xyz HTTP/1.1\r\nHost: coinmarketcop-api.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: authorization,content-type,x-auth-key,x-auth-key-v2,x-direction-safe,x-scale-referrer\r\nReferer: https://yzytoken-drop.xyz/\r\nOrigin: https://yzytoken-drop.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 03 Sep 2025 18:27:04 GMT\r\ncontent-length: 0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-origin: https://yzytoken-drop.xyz\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET,POST,PUT,DELETE,OPTIONS,PATCH\r\naccess-control-allow-headers: *\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=e5rv%2FcY%2FsWAmvlecGCMEejudnRJPrBNvIw1yl9wF4a8j5mE3%2BQJVsAR2DEBpgi899kW%2Fb4Ta%2FjnoRfRYlW%2BEtzH7GZfhGp9Xv9kFWQ9ib8SpAVU%3D\"}]}\r\ncf-ray: 97974c8e3f25568f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-03T20:30:56.573385Z","times_seen":13302581,"resource_available":true,"data":null}},"time_used":430,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":429,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-03","alert":"Sinkholed","trigger":"coinmarketcop-api.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"coinmarketcop-api.com/@v1/services/connector?referrer=yzytoken-drop.xyz","fqdn":"coinmarketcop-api.com","domain":"coinmarketcop-api.com","tld":"com"},"ip":{"addr":"104.21.62.252","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://yzytoken-drop.xyz/","date":"2025-09-03T18:27:04.776Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinmarketcop-api.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 22 Aug 2025 15:47:41 GMT","end":"Thu, 20 Nov 2025 16:45:54 GMT"},"fingerprint":{"sha1":"B0:CF:37:BB:3E:5D:19:87:C9:06:DA:2B:3A:C5:0B:77:11:4C:A2:47","sha256":"FC:6B:44:07:4E:C2:B7:3E:B8:95:B0:E9:D0:96:D9:1C:DC:FE:A5:D7:F6:6B:A4:D5:79:CF:BE:F3:E3:05:67:8E"}}},"request":{"raw":"GET /@v1/services/connector?referrer=yzytoken-drop.xyz HTTP/1.1\r\nHost: coinmarketcop-api.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAuthorization: eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJjdXN0b21lcklkIjoiSmtmRDY0MnVXcSIsImdyb3VwX2lkIjo2MzQsImlhdCI6MTc1NjE1MDQ4NX0.e8Fzheom7oQ-QFcGQ0EWdbuCEZmradM_2KPkSwbdsvg\r\nX-Direction-Safe: 1756924024085\r\nX-Scale-Referrer: yzytoken-drop.xyz\r\nX-Auth-Key: poxcR2oT9Idoqee%2BVKgrLdx42ibxwlX03acJgF6AElQ%3D\r\nOrigin: https://yzytoken-drop.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://yzytoken-drop.xyz/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 03 Sep 2025 18:27:05 GMT\r\ncontent-type: application/json; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8MkI1GmgowSYanU3yLMWDJO%2BJjeomtwSipaIQS83iHLTAZ7OXRxjHH2x5lUrMZcSr0SOG4Dvbn5MNvfYRnzF0nv0PAUSQBuxxDatfevUOaGcowg%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-origin: https://yzytoken-drop.xyz\r\nvary: Origin, Accept-Encoding\r\naccess-control-allow-credentials: true\r\netag: W/\"161-XwPjlmjgZHYDKLVxD2aVaEanGIY\"\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\ncf-ray: 97974c92df7a568f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":353,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"659e9a473d3891f88f2d522f6fcdf86a","sha1":"5f03e39668e064760328b5710f66956846a71886","sha256":"bac4a3362c40fffa12bf3292d3fe6c378f0916ecbf8c47887a60bcee4a99e815","sha512":"ee7c293726f1a5aaa260e83b7630a4c4689a716583ad5bb5ecfc6ebeb75c7d2c27f2047a5008fb20fe4e7e607a75f12c2dc394504f5d43c727fc0697536865d1","ssdeep":"","tlshash":"f9e0c05264577bcead710581216517eec874bf807d18d43035d70d5381952113206e99","first_seen":"2025-09-03T18:27:26.812414Z","last_seen":"2025-09-03T18:27:26.812414Z","times_seen":1,"resource_available":false,"data":null}},"time_used":827,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":827,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-03","alert":"Sinkholed","trigger":"coinmarketcop-api.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"yzytoken-drop.xyz/telegram.svg","fqdn":"yzytoken-drop.xyz","domain":"yzytoken-drop.xyz","tld":"xyz"},"ip":{"addr":"104.21.24.183","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://yzytoken-drop.xyz/","date":"2025-09-03T18:27:02.743Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yzytoken-drop.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 26 Aug 2025 00:18:00 GMT","end":"Mon, 24 Nov 2025 01:16:19 GMT"},"fingerprint":{"sha1":"F2:66:94:CD:6D:0E:71:07:ED:21:13:5A:63:FD:A5:C8:80:07:FD:64","sha256":"08:3E:39:51:8E:54:0E:AF:B5:E9:C9:93:D5:EA:3F:48:7F:10:B4:40:4E:C4:09:84:B5:6E:A3:A0:F3:79:CA:7F"}}},"request":{"raw":"GET /telegram.svg HTTP/1.1\r\nHost: yzytoken-drop.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://yzytoken-drop.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 03 Sep 2025 18:27:03 GMT\r\nserver: cloudflare\r\nlast-modified: Tue, 26 Aug 2025 00:43:12 GMT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AAJvda7td%2BNt08RUrDO0E0bRPagyruu7z12dq65uanzg2bo9J2zBxZbuW5ptPfe8GO2%2B4MDLCvbJaFRN9e%2FYXpaBExURjmAN2c%2F1j4C%2FhSbF\"}]}\r\netag: W/\"433-63d39f4f7c54a\"\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/svg+xml\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncf-ray: 97974c861dda35a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1075,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"b9a2741fcc5464fa9f4ddbfd2032747a","sha1":"0024b1b891f20b18b55480aeeba5b4df5ceb28d0","sha256":"cdfbcadbd4200cd5519c0e277c958bcca2f1c9c9a634ad2876827f9214f9a311","sha512":"c3bb54ac4933bec051f7c7deb70d66019196fad123ddebda12abbe50eeec38650291cb0dc9d573d761efa84f93e785ccccd1f8b2869a71e0dfe6f66756e60457","ssdeep":"","tlshash":"f911f0fb93d8a9d1d4178bb5ed3201e550ab2cf52bc052d813e0ec211ca01eac908d08","first_seen":"2025-08-22T20:51:16.608561Z","last_seen":"2025-09-03T18:27:26.81459Z","times_seen":4,"resource_available":false,"data":null}},"time_used":1209,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1208,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yzytoken-drop.xyz/x-icon.svg","fqdn":"yzytoken-drop.xyz","domain":"yzytoken-drop.xyz","tld":"xyz"},"ip":{"addr":"104.21.24.183","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://yzytoken-drop.xyz/","date":"2025-09-03T18:27:02.745Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yzytoken-drop.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 26 Aug 2025 00:18:00 GMT","end":"Mon, 24 Nov 2025 01:16:19 GMT"},"fingerprint":{"sha1":"F2:66:94:CD:6D:0E:71:07:ED:21:13:5A:63:FD:A5:C8:80:07:FD:64","sha256":"08:3E:39:51:8E:54:0E:AF:B5:E9:C9:93:D5:EA:3F:48:7F:10:B4:40:4E:C4:09:84:B5:6E:A3:A0:F3:79:CA:7F"}}},"request":{"raw":"GET /x-icon.svg HTTP/1.1\r\nHost: yzytoken-drop.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://yzytoken-drop.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 03 Sep 2025 18:27:02 GMT\r\nserver: cloudflare\r\nlast-modified: Tue, 26 Aug 2025 00:43:12 GMT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7QGs76TlCd4khZ%2BPr5QKnSZ56n98Ga6oyLiheqrMSVxl1SA0ZoAQL%2BvjtrbTlPUsVga6fZuc1c6tJt9j9mG30C3xeoIhLomiO4CmVtbo739Q\"}]}\r\netag: W/\"1c8-63d39f4f7cd1a\"\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/svg+xml\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncf-ray: 97974c861ddb35a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":456,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"122b86294c5e008d758bc286e2aefaf8","sha1":"3bd585fbfefc516e86504ac8c22d670a37c364a1","sha256":"f8837339f39b4de89bcdc5b4705e44d0007a8728881c70d1010f9973dff06306","sha512":"5cea3e396aba2dfd5fa1e08284bbe6cbe515431e00279e35dec0479f4ecf8bb2ddca392b82293326c921ad9ebe3b7186daae03d3ff33dd22ae819cca70831053","ssdeep":"","tlshash":"b5f05cbcc8d0948994ae9bf1ff7d17cb58e3105f741d44e496c11a0660595b10948ab9","first_seen":"2024-05-15T11:06:59Z","last_seen":"2026-04-02T03:01:26.088458Z","times_seen":70,"resource_available":false,"data":null}},"time_used":205,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":205,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yzytoken-drop.xyz/tiktok.png","fqdn":"yzytoken-drop.xyz","domain":"yzytoken-drop.xyz","tld":"xyz"},"ip":{"addr":"104.21.24.183","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://yzytoken-drop.xyz/","date":"2025-09-03T18:27:02.746Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yzytoken-drop.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 26 Aug 2025 00:18:00 GMT","end":"Mon, 24 Nov 2025 01:16:19 GMT"},"fingerprint":{"sha1":"F2:66:94:CD:6D:0E:71:07:ED:21:13:5A:63:FD:A5:C8:80:07:FD:64","sha256":"08:3E:39:51:8E:54:0E:AF:B5:E9:C9:93:D5:EA:3F:48:7F:10:B4:40:4E:C4:09:84:B5:6E:A3:A0:F3:79:CA:7F"}}},"request":{"raw":"GET /tiktok.png HTTP/1.1\r\nHost: yzytoken-drop.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://yzytoken-drop.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 03 Sep 2025 18:27:02 GMT\r\nserver: cloudflare\r\nlast-modified: Tue, 26 Aug 2025 00:43:12 GMT\r\netag: \"1e9-63d39f4f7c932\"\r\naccept-ranges: bytes\r\ncontent-length: 489\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=49iuv38b8NAEx5yLas9mJZQ7TH8gBiGxbl%2BPFuSlJgRdBWF5DLFlrszqaeeH%2F6aaeykN3dTFh3tLC63MiUcgtmrfzO4UChIILI1f3FF9B82e\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/png\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\ncf-ray: 97974c861ddc35a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":489,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 31 x 36, 8-bit/color RGBA, non-interlaced","md5":"61e9f58e9d0952dc1bf626c9b12010ad","sha1":"9d977f2a597ef3dfbd471e4ed1c5714378dee50a","sha256":"618f968bcfbf1984a827c59a2bc66ac4271312db441081e32d87e45c7fcfe743","sha512":"213ce26894556ceee35b7492c85c9a5901d29fb8b1c6f3d0c3644943fdd9555f29f589b1cee675a10ece3ba6699ce5395962defb8f5a89a06b9b1893fd851dbe","ssdeep":"","tlshash":"86f054defd04f0a689748a764b7d9a1359f784cd9090342a8cf2ad1d3416d81e1c37fa","first_seen":"2025-08-22T20:51:16.61087Z","last_seen":"2025-09-03T18:27:26.817985Z","times_seen":4,"resource_available":false,"data":null}},"time_used":76,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":75,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}