{"report_id":"cc2631a9-7521-4add-9a01-cd91dc0d3983","version":6,"status":"done","tags":[],"date":"2026-01-12T13:38:32Z","url":{"schema":"http","addr":"airs-solan.com","fqdn":"airs-solan.com","domain":"airs-solan.com","tld":"com"},"ip":{"addr":"104.21.31.75","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"airs-solan.com/","fqdn":"airs-solan.com","domain":"airs-solan.com","tld":"com"},"title":"SolDrop - Claim Your 15 SOL Airdrop","dom":{"size":42459,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (27328)","md5":"e0adc74b1752ada676dd60841c3320a6","sha1":"cbc515b606d941acb8e44451c19381886da9b139","sha256":"134ee85bbc83d46e131453ffb141bd3f14be17b906471f6ad8802705df4ea885","sha512":"ab86a14495e1fd7d4033491f57bea3e7185cbb63e1e3be4980207eebb47d54a35da63dffa582bdb1b7dd82b3900a16635f20ed0d333c65d837a2fdc67dbe6803","ssdeep":"768:Bj+8FYTbfsTQ+YDGDPKHs9TvfqaSQXOQGMWYWf:Bj+8FYTbfsTQ+YDWPKHshqa/XOnrf","tlshash":"9f1396176780462c9c5392a8f399e54ea32df694ef6359eef7c22410c2d93ff088b456","dom_hash":"domhash5a2e7b986a359100c1311ce7180015d1","first_seen":"2025-11-16T09:39:29.944421Z","last_seen":"2026-01-12T13:38:54.622076Z","times_seen":6,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"airs-solan.com","fqdn":"airs-solan.com","domain":"airs-solan.com","tld":"com"},"ip":{"addr":"104.21.31.75","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-02-16T13:38:32Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":4}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-12","alert":"Sinkholed","trigger":"airs-solan.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-12","alert":"Sinkholed","trigger":"airs-solan.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-12","alert":"Sinkholed","trigger":"aodefevrgdkhqltdnwgzbyjoywrlbntbhfwq.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-12","alert":"Sinkholed","trigger":"aodefevrgdkhqltdnwgzbyjoywrlbntbhfwq.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"www.smartsuppchat.com","ip":{"addr":"185.76.9.11","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"domain_registered":"unknown","domain_rank":491650,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":1,"received_data":18645,"sent_data":419,"comment":"","tags":null,"fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}]},{"fqdn":"airs-solan.com","ip":{"addr":"172.67.175.69","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":10,"request_count":5,"received_data":477932,"sent_data":2314,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"bootstrap.smartsuppchat.com","ip":{"addr":"3.125.249.105","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"domain_registered":"unknown","domain_rank":425291,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":1,"received_data":1553,"sent_data":521,"comment":"","tags":null,"fingerprints":null},{"fqdn":"widget-v3.smartsuppcdn.com","ip":{"addr":"185.76.9.27","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"domain_registered":"unknown","domain_rank":532262,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":3,"received_data":309868,"sent_data":1361,"comment":"","tags":null,"fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}]},{"fqdn":"websocket-visitors.smartsupp.com","ip":{"addr":"3.69.8.215","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"domain_registered":"unknown","domain_rank":411464,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":1,"received_data":224,"sent_data":603,"comment":"","tags":null,"fingerprints":null},{"fqdn":"translations.smartsuppcdn.com","ip":{"addr":"185.76.9.11","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"domain_registered":"unknown","domain_rank":560346,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":1,"received_data":7545,"sent_data":488,"comment":"","tags":null,"fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}]},{"fqdn":"aodefevrgdkhqltdnwgzbyjoywrlbntbhfwq.com","ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":6,"request_count":3,"received_data":643380,"sent_data":1604,"comment":"","tags":null,"fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}]},{"fqdn":"corsproxy.io","ip":{"addr":"172.67.73.211","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":175528,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":2,"received_data":2983,"sent_data":1069,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"airs-solan.com/","fqdn":"airs-solan.com","domain":"airs-solan.com","tld":"com"},"ip":{"addr":"172.67.175.69","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"25edfce5ed14e6ad0a368e29490feecb","sha1":"8cb0a76c5b977addc6551c53ca497ad9c12be280","sha256":"3b1740c1f59239448fbeed5b3eaffd09d843d7dc1ba28f7447b5d2cc4d239052","sha512":"ed089724b6df506955db855ce9a391daf50443f126829a7a352d2a6514dd00e1bb35f00a584016c1d2111929b3527732896525c17f40d7c6c761cd1015326a5c","ssdeep":"","tlshash":"9ae0613d3c7981d547d240b8c2b7e63c3d1630604455dd57e896d96d6cf0fca7d01594","size":418,"data":"","first_seen":"2025-11-16T09:39:29.973164Z","last_seen":"2026-04-18T19:23:16.456338Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"widget-v3.smartsuppcdn.com/assets/main-ptirgKus.js","fqdn":"widget-v3.smartsuppcdn.com","domain":"smartsuppcdn.com","tld":"com"},"ip":{"addr":"185.76.9.27","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"introduction_type":"scriptElement","is_inline":false,"md5":"afde9472e3db3df71612c4f70cc3921c","sha1":"b26b3bd915971c08457792a9b8bb72109076100b","sha256":"6a4142c101d89013fba3f970945a5c413bff59e364fd1838675c08ea4001ee68","sha512":"076680b772164b64d7019309a9753dc5dec6568df0793ad2d8f0b11aeba226700220451f03b4f1dbc4fa12044eccfd8a42da9b70b363d79cbee547dad35ae4c6","ssdeep":"3072:hnJZidXrd0K4V7VaTduwYVPVBzeiDF5CmM7l72xYinrHnP0Qupkj7623PSbJhQP8:4cCmMJaiin7P0QupI623P+huCf","tlshash":"7f444ad47195743543a700e5607f1006b23e5c29a809c068f6aeddf67db99c8a2bbfbc","size":269534,"data":"","first_seen":"2025-11-03T07:55:21.251479Z","last_seen":"2026-01-13T13:06:51.417735Z","times_seen":3416,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aodefevrgdkhqltdnwgzbyjoywrlbntbhfwq.com/@v1/cdn/js/contentful.min.min.js?t=29470418\u0026u=haSstKqFPIHSheyaGDY5MjU2NDRjMjhjZmYzYzM0MDI3ZDdlZLuxKhwsi8et6WqOyQ","fqdn":"aodefevrgdkhqltdnwgzbyjoywrlbntbhfwq.com","domain":"aodefevrgdkhqltdnwgzbyjoywrlbntbhfwq.com","tld":"com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"c835ce0aa761a791b29ba4c102a85e28","sha1":"828e40328ca8ff740f1090e6f63e170c1592a62c","sha256":"4ee6631554867dc1bfadbfe5f4b4ebf4cec5164ba142f8db92f840c2028496cf","sha512":"49cefc3ca9614cebafe201eef12b5cdebcdd19da6ab30f530d7a81a8ef91fca5f02eb63108b8056c2dbd4c22b8b337aae939a712f4a876bdeef21a1e2a9f3225","ssdeep":"6144:9ujB8gltIeTM5/S8g6zRhNgDzQebuazBzqXQPkBAUvVdZcml4L:ihltVM/g6ZszQeqazNqXQcBvK","tlshash":"29d4bcec970a167788cb97b6423363afef884d1a236b3c406ec19cd1574a74e53ea15c","size":641034,"data":"","first_seen":"2026-01-01T19:22:06.925398Z","last_seen":"2026-03-30T11:52:16.142566Z","times_seen":405,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"airs-solan.com/","fqdn":"airs-solan.com","domain":"airs-solan.com","tld":"com"},"ip":{"addr":"172.67.175.69","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"3315c0053e9abd478a6141680d2173ae","sha1":"8e6c3fcbf7b7a63b976cf8bb370fd583e0b52bde","sha256":"9b9310d29ee04a7d833aa972d98ca69d86b6e4ef9c70c7a2f2f6de9a3b5702bd","sha512":"189446e233c93c4a73c0efd007e2345dcb423432b4c2b05ccf0800b96ea80a1090ab9fadf81f8802d227ab4abf43edb89b94a1e9d4d71b29d0577c799430d423","ssdeep":"","tlshash":"a141652c29b70012c17f212763bfdb4431220087158f9d4035bd9968afb0d72b6f1b74","size":1958,"data":"","first_seen":"2025-12-16T19:23:40.585285Z","last_seen":"2026-04-26T22:44:14.756933Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.smartsuppchat.com/loader.js?","fqdn":"www.smartsuppchat.com","domain":"smartsuppchat.com","tld":"com"},"ip":{"addr":"185.76.9.11","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"introduction_type":"scriptElement","is_inline":false,"md5":"b67300767490ee626178325c8efa3b14","sha1":"4378b772ab209e5280e60af15dd03414f2578f3d","sha256":"e3ccd7d38ffd01f14809ed081950d4a8c964d31fd6abb90a4433fb3574b9c8e0","sha512":"3c8acd1d71e685e71b69de130506fe13326f0908310caf3ac0bdf205cae4824c0dd0ef54eed3a7041cb37bd623308877df76973a28c8e691904e055e46fa706f","ssdeep":"384:fUx/y2k3g7xT7dWbEelfE4YYdWbE0rIcvCSI/a4GUpG:fUx/y2k3gli84YY8JeabB","tlshash":"4482a5ccb791a16543eb61b4843f710ff237692970098821ba65dae13c7898ee037f78","size":18141,"data":"","first_seen":"2025-05-05T10:50:11.676089Z","last_seen":"2026-07-27T14:00:09.825615Z","times_seen":9281,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"airs-solan.com/","fqdn":"airs-solan.com","domain":"airs-solan.com","tld":"com"},"ip":{"addr":"172.67.175.69","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"70a93bf1a68672a978e9153bbc630fd2","sha1":"014141851009143938f3bd3ca2c853a02cdc738e","sha256":"68940085e27dbf518c0bcf23a716a2d808fad46b41a5ef52dc274fbc9069e158","sha512":"5c6754a1009233b1dd623c53cd005f55cc7cc69786d30df69faf24b382159e8f90bc4d157e61d79728b7f916a1e6a445a6279fab447c0d57bb9c1ee5d3a19393","ssdeep":"3072:O9GfBCqT+My/VWnf2RF/yFKau8GGcnXymqz4+emX0b67yMd3y/NiA70ri4BsA9Uy:KGfB9q/VWf2vyFKWxcXyY+G67yXxP8","tlshash":"3f9431a639d30b1df22db204270882c9a780557a46bffc70b7afb341e6a1c5e91d1977","size":427040,"data":"","first_seen":"2025-12-31T12:32:52.192642Z","last_seen":"2026-01-12T13:38:54.635792Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"airs-solan.com/commander.iife.min.js","fqdn":"airs-solan.com","domain":"airs-solan.com","tld":"com"},"ip":{"addr":"172.67.175.69","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"29edb324838fc0b3872e3c56afe515c2","sha1":"5f17ccf3dad03d04ac0e60cf045964b17dcfa281","sha256":"71b3d59fb21560f1d06752ebbb7c100ea067f7749728d8f7840ad7e02f285fea","sha512":"5ceb240b14f08706177a198286110bbe5b44735cab85053205297fed342f7cd3f08fb216f75f2f30644a041506941abf911a7a8b782af3c75c82036a43d094a8","ssdeep":"3072:LgU9I8Hkf8adScCHGqDySUSynXeONM66GOemX0B67A2ddCPNiA70rK+jqg9UDtC:MU9IAkfvdSRmq1byXegx3OY67Anxfo","tlshash":"1a9451a639d30b1df22db204170882cda780557a4abffc60b79fb381e2a5c5e91d1977","size":434395,"data":"","first_seen":"2025-12-31T12:32:52.190088Z","last_seen":"2026-01-12T13:38:54.631624Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"www.smartsuppchat.com/loader.js?","fqdn":"www.smartsuppchat.com","domain":"smartsuppchat.com","tld":"com"},"ip":{"addr":"185.76.9.11","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://airs-solan.com/","date":"2026-01-12T13:38:10.871Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1161431244.rsc.cdn77.org","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 06 Nov 2025 03:38:21 GMT","end":"Wed, 04 Feb 2026 03:38:20 GMT"},"fingerprint":{"sha1":"20:22:46:AD:41:FB:E2:25:E8:9E:07:B9:A1:89:34:4E:C4:6A:72:1D","sha256":"EB:B1:F4:50:CA:74:9B:EA:9D:6D:23:2F:E5:17:88:07:A2:DA:B7:89:5C:C4:C4:34:60:4C:15:4E:1E:5A:D9:45"}}},"request":{"raw":"GET /loader.js? HTTP/1.1\r\nHost: www.smartsuppchat.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://airs-solan.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 12 Jan 2026 13:38:10 GMT\r\ncontent-type: application/javascript\r\ncache-control: max-age=300, public, s-maxage=60\r\netag: W/\"68e92ecd-46dd\"\r\nexpires: Mon, 12 Jan 2026 13:42:42 GMT\r\nlast-modified: Fri, 10 Oct 2025 16:05:33 GMT\r\nx-77-nzt: EwwBuUwJCgH3HAAAAAwBuUwKCQH3AAAAAAwBJRPCNAG3AAAAAA\r\nx-77-nzt-ray: e2f754207d72f6f942f96469b96f0a38\r\nx-77-cache: HIT\r\nx-77-age: 28\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nserver: CDN77-Turbo\r\nx-77-pop: stockholmSE\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":18141,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (18068)","md5":"b67300767490ee626178325c8efa3b14","sha1":"4378b772ab209e5280e60af15dd03414f2578f3d","sha256":"e3ccd7d38ffd01f14809ed081950d4a8c964d31fd6abb90a4433fb3574b9c8e0","sha512":"3c8acd1d71e685e71b69de130506fe13326f0908310caf3ac0bdf205cae4824c0dd0ef54eed3a7041cb37bd623308877df76973a28c8e691904e055e46fa706f","ssdeep":"384:fUx/y2k3g7xT7dWbEelfE4YYdWbE0rIcvCSI/a4GUpG:fUx/y2k3gli84YY8JeabB","tlshash":"4482a5ccb791a16543eb61b4843f710ff237692970098821ba65dae13c7898ee037f78","first_seen":"2025-05-05T10:50:11.676089Z","last_seen":"2026-07-27T14:00:09.825615Z","times_seen":9281,"resource_available":true,"data":null}},"time_used":133,"timings":{"blocked":62,"dns":36,"connect":7,"send":0,"wait":8,"receive":0,"ssl":18},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"airs-solan.com/secureproxy?e=ping_proxy","fqdn":"airs-solan.com","domain":"airs-solan.com","tld":"com"},"ip":{"addr":"172.67.175.69","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://airs-solan.com/","date":"2026-01-12T13:38:11.357Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"airs-solan.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 04 Jan 2026 14:37:05 GMT","end":"Sat, 04 Apr 2026 15:31:43 GMT"},"fingerprint":{"sha1":"10:4C:CA:49:40:E7:A3:03:D5:95:2F:D6:39:B1:BA:47:86:E4:34:3B","sha256":"3E:ED:BF:A4:83:51:CB:41:3D:E9:94:0E:34:2B:54:A8:B3:9C:14:EC:87:1B:D2:D3:22:03:79:F0:FE:B8:46:0D"}}},"request":{"raw":"GET /secureproxy?e=ping_proxy HTTP/1.1\r\nHost: airs-solan.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://airs-solan.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\nserver: cloudflare\r\ndate: Mon, 12 Jan 2026 13:38:11 GMT\r\ncontent-type: text/html; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MH%2FDVEJEF2mNkYdrFH7TSrhHOvhON4OVj8S5rWdJ4WMmaZu1C%2BPJ%2B7HU17EDoMXbkIEiLgsoxcI%2FxieZVX9xJ6H8mR1r%2FSi4fEpeK2yC\"}]}\r\npriority: u=4,i=?0\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9bcd0d84fe97723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":153,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"8259bd2dc96b69fffb7c7e1f3411275e","sha1":"e945be7ea901f4a7cf170e184711c81bcd3527e6","sha256":"c375e42b6328de1880de1424a93267d573a1afa2ed37f72a35d8218f6880dd58","sha512":"b6c638e4421bf99ca1c8156247c5af6233e696f956f72cfccc88ac1521bc3d9c4ec6d2fc33e9ad78dd7eb95735543d9eea96dd5caa27878b8bc5c6a5a7dcb8c9","ssdeep":"","tlshash":"48c02b2d35137c4cc5a3317432c37080c0da833764ba41128440800331cf2a98ac7397","first_seen":"2025-05-03T23:55:22.499243Z","last_seen":"2026-08-05T09:22:39.733178Z","times_seen":18191,"resource_available":true,"data":null}},"time_used":113,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":110,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-12","alert":"Sinkholed","trigger":"airs-solan.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-12","alert":"Sinkholed","trigger":"airs-solan.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bootstrap.smartsuppchat.com/widget/81da6b50d7bb42fdcc97346a006aece888cb24da.json","fqdn":"bootstrap.smartsuppchat.com","domain":"smartsuppchat.com","tld":"com"},"ip":{"addr":"3.125.249.105","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://airs-solan.com/","date":"2026-01-12T13:38:11.445Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.smartsuppchat.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 02 Dec 2025 00:00:00 GMT","end":"Wed, 30 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"DC:47:26:FC:2D:4B:14:19:23:BC:B7:70:14:DA:60:A6:21:B0:1E:81","sha256":"0D:5E:FD:70:25:9E:DE:DD:47:CF:0C:58:1C:08:A2:A1:05:AC:A6:7E:0C:43:6F:50:E7:49:E0:A1:60:D0:0E:0F"}}},"request":{"raw":"GET /widget/81da6b50d7bb42fdcc97346a006aece888cb24da.json HTTP/1.1\r\nHost: bootstrap.smartsuppchat.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain\r\nOrigin: https://airs-solan.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://airs-solan.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 12 Jan 2026 13:38:11 GMT\r\ncontent-type: application/json; charset=utf-8\r\nx-version: 144a363f30d9c9165f08f3a591e8e2bf34692360\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\ncache-control: private, max-age=0, must-revalidate\r\nx-hit: redis\r\netag: \"4ab-uLHo/IBbizWcNlNpadCaXymvjJ8\"\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1195,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"4e5325cbeacd5e0bdf90bfb891a62a68","sha1":"b8b1e8fc805b8b359c36536969d09a5f29af8c9f","sha256":"5a9e02d319876d19fc4b5d61f000368fb9f2e8648b49ab6fcfcb02e532d088de","sha512":"1cc1cfbdc23c40f8cd02b3e65c7ccd9cc38a8cb3676d62b75f6e40401cb86ddbc63a0ab8d8fa3dcb82595b2320a5ff90fafad9bd61d18ab93a08f0d3ad38779b","ssdeep":"","tlshash":"0821466d4a6822fd9245c6d6c5047f075fbcdcb371043a7dfa0d0a4e60db2e6113546b","first_seen":"2025-11-16T09:39:29.959933Z","last_seen":"2026-03-02T16:45:50.663603Z","times_seen":79,"resource_available":false,"data":null}},"time_used":294,"timings":{"blocked":129,"dns":11,"connect":21,"send":0,"wait":27,"receive":0,"ssl":103},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"widget-v3.smartsuppcdn.com/manifest.json","fqdn":"widget-v3.smartsuppcdn.com","domain":"smartsuppcdn.com","tld":"com"},"ip":{"addr":"185.76.9.27","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://airs-solan.com/","date":"2026-01-12T13:38:11.691Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1857279285.rsc.cdn77.org","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 06 Nov 2025 03:19:53 GMT","end":"Wed, 04 Feb 2026 03:19:52 GMT"},"fingerprint":{"sha1":"36:81:90:95:C4:4F:26:A4:21:AB:05:A8:6B:A0:13:56:8F:14:C2:BE","sha256":"CF:0F:9E:ED:A3:A7:C2:EE:51:A6:8F:47:DC:A8:9B:B7:7C:85:12:3D:B9:BE:DA:C2:EF:D1:17:68:C0:C5:AC:70"}}},"request":{"raw":"GET /manifest.json HTTP/1.1\r\nHost: widget-v3.smartsuppcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain\r\nOrigin: https://airs-solan.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://airs-solan.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 12 Jan 2026 13:38:11 GMT\r\ncontent-type: application/json\r\naccess-control-allow-origin: *\r\ncache-control: max-age=300, public, s-maxage=60\r\netag: W/\"69085dca-7b0\"\r\nexpires: Mon, 03 Nov 2025 07:53:33 GMT\r\nlast-modified: Mon, 03 Nov 2025 07:46:18 GMT\r\nx-77-nzt: EwwBuUwJGwH3CwAAAAwBuUwKCQH3AgAAAAwBw7WvAgG3AAAAAA\r\nx-77-nzt-ray: fdb541239935052d43f964695dfb072e\r\nx-77-cache: HIT\r\nx-77-age: 11\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nserver: CDN77-Turbo\r\nx-77-pop: stockholmSE\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":1968,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"bbc9d37f7ca509d3f2faf0216a2dbc60","sha1":"b141cae5428c630f961ba82494ff8fd0521105f2","sha256":"2285b0615deb1cd53267994a4cd044d2c4512b5516fbf099e3e8e353c705b208","sha512":"383444b84c22c67c4b8550a8c76b68bfe083f5d9f2245b1a1c8493d787ba4a670f3cf5d290a1c8091645e02030165d026347be719104393c9bafa8697925db63","ssdeep":"","tlshash":"e2410693c0b80d531b9c612bb8945a414d54c3c7e88a3d0d366d8a7f2f0ceba10e67ad","first_seen":"2025-11-03T07:55:21.200063Z","last_seen":"2026-01-13T13:06:51.401082Z","times_seen":3414,"resource_available":false,"data":null}},"time_used":156,"timings":{"blocked":75,"dns":37,"connect":8,"send":0,"wait":7,"receive":0,"ssl":25},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"translations.smartsuppcdn.com/api/v1/widget/translations/lang/en/defaults","fqdn":"translations.smartsuppcdn.com","domain":"smartsuppcdn.com","tld":"com"},"ip":{"addr":"185.76.9.11","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://airs-solan.com/","date":"2026-01-12T13:38:11.937Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1087630013.rsc.cdn77.org","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Nov 2025 03:05:44 GMT","end":"Tue, 03 Feb 2026 03:05:43 GMT"},"fingerprint":{"sha1":"37:BA:FA:5B:53:2D:84:E0:FB:81:87:85:C5:A9:5B:0E:05:63:86:5E","sha256":"CB:7A:FB:73:78:5B:E8:CC:67:2D:67:04:0B:9F:6A:DD:44:91:50:28:4F:04:0A:8B:F6:0C:29:08:3A:C5:CC:60"}}},"request":{"raw":"GET /api/v1/widget/translations/lang/en/defaults HTTP/1.1\r\nHost: translations.smartsuppcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://airs-solan.com/\r\nOrigin: https://airs-solan.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 12 Jan 2026 13:38:12 GMT\r\ncontent-type: application/json; charset=utf-8\r\naccess-control-allow-origin: *\r\ncache-control: max-age=600\r\nx-response-time: 0ms\r\nx-version: 33763f6ddfb2a85ff042089718edfb908868528e\r\nx-77-nzt: EwwBuUwJCgH3FgEAAAwBuUwKEwH3BwAAAAwBw7WvFwG3AAAAAA\r\nx-77-nzt-ray: e2f7542081a6742344f964698e026b00\r\nx-77-cache: HIT\r\nx-77-age: 278\r\nvary: Origin, Accept-Encoding\r\ncontent-encoding: gzip\r\nserver: CDN77-Turbo\r\nx-77-pop: stockholmSE\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":7048,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"eaa6ba52943a5e44f695684fe0452d88","sha1":"be3068ed1bee23685694678914dbc831269e2c81","sha256":"f2bf55f12f577af380f9e18e2223493abf01887c75367b9cbf106bd7a021d4bc","sha512":"1852e89a1e925807dbec8bd9a2e82787351cf5c83afe476b3695c00bed34cd1cbd091db8053acb697e3d81c2bdee590e35cc2cf76e7652377e6e39ff92088d8e","ssdeep":"192:P4lkA+UC1IY8pZbXF/UQq29yg4zPYfXhIIdeD/n:Al3GKYKZrJA2Yg48fXPdeD/n","tlshash":"f3e1c64f9a144da987c6438276cfb84675bc80734250993afd8cc8b842697cd63e3b98","first_seen":"2025-10-06T22:02:44.567758Z","last_seen":"2026-01-13T07:56:55.665114Z","times_seen":4037,"resource_available":false,"data":null}},"time_used":134,"timings":{"blocked":63,"dns":36,"connect":7,"send":0,"wait":7,"receive":0,"ssl":17},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"wss","addr":"websocket-visitors.smartsupp.com/socket/?EIO=3\u0026transport=websocket","fqdn":"websocket-visitors.smartsupp.com","domain":"smartsupp.com","tld":"com"},"ip":{"addr":"3.69.8.215","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://airs-solan.com/","date":"2026-01-12T13:38:12.067Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.smartsupp.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M02","organization":"Amazon"},"validity":{"start":"Fri, 25 Jul 2025 00:00:00 GMT","end":"Sat, 22 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"35:57:04:01:81:87:91:69:91:5F:FB:F3:51:3F:C3:50:59:25:59:2D","sha256":"D8:0F:70:51:28:C9:4C:A6:5A:C3:91:80:AC:41:82:E2:B2:73:5A:0B:A4:07:51:81:EC:03:09:9E:87:4F:81:F7"}}},"request":{"raw":"GET /socket/?EIO=3\u0026transport=websocket HTTP/1.1\r\nHost: websocket-visitors.smartsupp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nSec-WebSocket-Version: 13\r\nOrigin: https://airs-solan.com\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: RTakSjbjLFpUeLYjBJnIGw==\r\nDNT: 1\r\nConnection: keep-alive, Upgrade\r\nSec-Fetch-Dest: websocket\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 Switching Protocols\r\nDate: Mon, 12 Jan 2026 13:38:12 GMT\r\nConnection: upgrade\r\nUpgrade: websocket\r\nSec-WebSocket-Accept: VU2ZN1h4mallVzoebeJnhzTb5FY=\r\nSec-WebSocket-Version: 13\r\nWebSocket-Server: uWebSockets\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"Switching Protocols","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-06T03:01:06.849517Z","times_seen":17735808,"resource_available":true,"data":null}},"time_used":333,"timings":{"blocked":0,"dns":123,"connect":143,"send":0,"wait":30,"receive":1,"ssl":158},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aodefevrgdkhqltdnwgzbyjoywrlbntbhfwq.com/@v1/cdn/js/contentful.min.min.js?t=29470418\u0026u=haSstKqFPIHSheyaGDY5MjU2NDRjMjhjZmYzYzM0MDI3ZDdlZLuxKhwsi8et6WqOyQ","fqdn":"aodefevrgdkhqltdnwgzbyjoywrlbntbhfwq.com","domain":"aodefevrgdkhqltdnwgzbyjoywrlbntbhfwq.com","tld":"com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://airs-solan.com/","date":"2026-01-12T13:38:12.557Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aodefevrgdkhqltdnwgzbyjoywrlbntbhfwq.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 08 Jan 2026 15:05:58 GMT","end":"Wed, 08 Apr 2026 15:05:57 GMT"},"fingerprint":{"sha1":"4D:1D:3C:6D:9E:2D:29:38:F6:A3:C5:A2:A9:6E:00:65:21:FD:F7:14","sha256":"B2:0A:D0:D4:D9:66:A7:A6:38:55:71:26:B9:06:E7:A1:A5:4B:C4:7B:C4:E5:D6:9A:6B:FF:D1:0E:21:E9:BB:C1"}}},"request":{"raw":"GET /@v1/cdn/js/contentful.min.min.js?t=29470418\u0026u=haSstKqFPIHSheyaGDY5MjU2NDRjMjhjZmYzYzM0MDI3ZDdlZLuxKhwsi8et6WqOyQ HTTP/1.1\r\nHost: aodefevrgdkhqltdnwgzbyjoywrlbntbhfwq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://airs-solan.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 12 Jan 2026 13:38:12 GMT\r\ncontent-type: text/javascript\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 4623665\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, PATCH, OPTIONS\r\ncache-control: no-store, must-revalidate, no-cache\r\ncontent-encoding: br\r\netag: W/\"9c80a-go5AMoyo/3QPEJDm9j4XDBWSpiw\"\r\nexpires: 0\r\npragma: no-cache\r\ncontent-disposition: attachment; filename=contentful.min.min.js\r\ncdn-proxyver: 1.43\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 01/12/2026 13:38:12\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 75e2d38ac247c580b461b8d3837d41db\r\ncdn-cache: MISS\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":641034,"size_decoded":0,"mime_type":"text/javascript","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"c835ce0aa761a791b29ba4c102a85e28","sha1":"828e40328ca8ff740f1090e6f63e170c1592a62c","sha256":"4ee6631554867dc1bfadbfe5f4b4ebf4cec5164ba142f8db92f840c2028496cf","sha512":"49cefc3ca9614cebafe201eef12b5cdebcdd19da6ab30f530d7a81a8ef91fca5f02eb63108b8056c2dbd4c22b8b337aae939a712f4a876bdeef21a1e2a9f3225","ssdeep":"6144:9ujB8gltIeTM5/S8g6zRhNgDzQebuazBzqXQPkBAUvVdZcml4L:ihltVM/g6ZszQeqazNqXQcBvK","tlshash":"29d4bcec970a167788cb97b6423363afef884d1a236b3c406ec19cd1574a74e53ea15c","first_seen":"2026-01-01T19:22:06.925398Z","last_seen":"2026-03-30T11:52:16.142566Z","times_seen":405,"resource_available":true,"data":null}},"time_used":305,"timings":{"blocked":34,"dns":24,"connect":1,"send":0,"wait":236,"receive":0,"ssl":6},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-12","alert":"Sinkholed","trigger":"aodefevrgdkhqltdnwgzbyjoywrlbntbhfwq.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-12","alert":"Sinkholed","trigger":"aodefevrgdkhqltdnwgzbyjoywrlbntbhfwq.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aodefevrgdkhqltdnwgzbyjoywrlbntbhfwq.com/jmpd/","fqdn":"aodefevrgdkhqltdnwgzbyjoywrlbntbhfwq.com","domain":"aodefevrgdkhqltdnwgzbyjoywrlbntbhfwq.com","tld":"com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://airs-solan.com/","date":"2026-01-12T13:38:13.282Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aodefevrgdkhqltdnwgzbyjoywrlbntbhfwq.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 08 Jan 2026 15:05:58 GMT","end":"Wed, 08 Apr 2026 15:05:57 GMT"},"fingerprint":{"sha1":"4D:1D:3C:6D:9E:2D:29:38:F6:A3:C5:A2:A9:6E:00:65:21:FD:F7:14","sha256":"B2:0A:D0:D4:D9:66:A7:A6:38:55:71:26:B9:06:E7:A1:A5:4B:C4:7B:C4:E5:D6:9A:6B:FF:D1:0E:21:E9:BB:C1"}}},"request":{"raw":"POST /jmpd/ HTTP/1.1\r\nHost: aodefevrgdkhqltdnwgzbyjoywrlbntbhfwq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://airs-solan.com/\r\ncontent-type: application/json\r\nContent-Length: 2305\r\nOrigin: https://airs-solan.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":2305,"data":"{\"route\":\"8XUwkBv9vhPYfVpD1fxb7EC65sUXJdqr\",\"payload\":\"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\"}"}},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Mon, 12 Jan 2026 13:38:13 GMT\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 4623665\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, PATCH, OPTIONS\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ncache-control: no-cache\r\netag: W/\"a-bAsFyilMr4Ra1hIU5PyoyFRunpI\"\r\nx-ratelimit-limit: 10000\r\nx-ratelimit-remaining: 9999\r\nx-ratelimit-reset: 1768225153299\r\ncdn-proxyver: 1.43\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 204\r\ncdn-cachedat: 01/12/2026 13:38:13\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 085a601b5161a9c3e79c1a360976dc3e\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-06T03:01:06.849517Z","times_seen":17735808,"resource_available":true,"data":null}},"time_used":251,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":250,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-12","alert":"Sinkholed","trigger":"aodefevrgdkhqltdnwgzbyjoywrlbntbhfwq.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-12","alert":"Sinkholed","trigger":"aodefevrgdkhqltdnwgzbyjoywrlbntbhfwq.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"widget-v3.smartsuppcdn.com/assets/main-ptirgKus.js","fqdn":"widget-v3.smartsuppcdn.com","domain":"smartsuppcdn.com","tld":"com"},"ip":{"addr":"185.76.9.27","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://airs-solan.com/","date":"2026-01-12T13:38:11.824Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1857279285.rsc.cdn77.org","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 06 Nov 2025 03:19:53 GMT","end":"Wed, 04 Feb 2026 03:19:52 GMT"},"fingerprint":{"sha1":"36:81:90:95:C4:4F:26:A4:21:AB:05:A8:6B:A0:13:56:8F:14:C2:BE","sha256":"CF:0F:9E:ED:A3:A7:C2:EE:51:A6:8F:47:DC:A8:9B:B7:7C:85:12:3D:B9:BE:DA:C2:EF:D1:17:68:C0:C5:AC:70"}}},"request":{"raw":"GET /assets/main-ptirgKus.js HTTP/1.1\r\nHost: widget-v3.smartsuppcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://airs-solan.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 12 Jan 2026 13:38:11 GMT\r\ncontent-type: application/javascript\r\naccess-control-allow-origin: *\r\ncache-control: max-age=31536000, public, immutable\r\netag: W/\"69085dca-41cde\"\r\nexpires: Tue, 03 Nov 2026 07:48:27 GMT\r\nlast-modified: Mon, 03 Nov 2025 07:46:18 GMT\r\nx-77-nzt: EwwBuUwJGwH33ppcAAwBuUwKEwH3FAAAAAwBT3/Y+AG3BgAAAA\r\nx-77-nzt-ray: fdb541239935052d43f964694fe56931\r\nx-77-cache: HIT\r\nx-77-age: 6068958\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nserver: CDN77-Turbo\r\nx-77-pop: stockholmSE\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":269534,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (28080)","md5":"afde9472e3db3df71612c4f70cc3921c","sha1":"b26b3bd915971c08457792a9b8bb72109076100b","sha256":"6a4142c101d89013fba3f970945a5c413bff59e364fd1838675c08ea4001ee68","sha512":"076680b772164b64d7019309a9753dc5dec6568df0793ad2d8f0b11aeba226700220451f03b4f1dbc4fa12044eccfd8a42da9b70b363d79cbee547dad35ae4c6","ssdeep":"3072:hnJZidXrd0K4V7VaTduwYVPVBzeiDF5CmM7l72xYinrHnP0Qupkj7623PSbJhQP8:4cCmMJaiin7P0QupI623P+huCf","tlshash":"7f444ad47195743543a700e5607f1006b23e5c29a809c068f6aeddf67db99c8a2bbfbc","first_seen":"2025-11-03T07:55:21.251479Z","last_seen":"2026-01-13T13:06:51.417735Z","times_seen":3416,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"widget-v3.smartsuppcdn.com/assets/style-C69Zid5j.css","fqdn":"widget-v3.smartsuppcdn.com","domain":"smartsuppcdn.com","tld":"com"},"ip":{"addr":"185.76.9.27","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://airs-solan.com/","date":"2026-01-12T13:38:11.826Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1857279285.rsc.cdn77.org","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 06 Nov 2025 03:19:53 GMT","end":"Wed, 04 Feb 2026 03:19:52 GMT"},"fingerprint":{"sha1":"36:81:90:95:C4:4F:26:A4:21:AB:05:A8:6B:A0:13:56:8F:14:C2:BE","sha256":"CF:0F:9E:ED:A3:A7:C2:EE:51:A6:8F:47:DC:A8:9B:B7:7C:85:12:3D:B9:BE:DA:C2:EF:D1:17:68:C0:C5:AC:70"}}},"request":{"raw":"GET /assets/style-C69Zid5j.css HTTP/1.1\r\nHost: widget-v3.smartsuppcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://airs-solan.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 12 Jan 2026 13:38:11 GMT\r\ncontent-type: text/css\r\naccess-control-allow-origin: *\r\ncache-control: max-age=31536000, public, immutable\r\netag: W/\"68f60ab9-8f9a\"\r\nexpires: Tue, 20 Oct 2026 10:14:33 GMT\r\nlast-modified: Mon, 20 Oct 2025 10:11:05 GMT\r\nx-77-nzt: EwwBuUwJGwH3qO1uAAwBuUwKEwH3EgAAAAwBJRPCNAG3AAAAAA\r\nx-77-nzt-ray: fdb541239935052d43f964693f948231\r\nx-77-cache: HIT\r\nx-77-age: 7269800\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nserver: CDN77-Turbo\r\nx-77-pop: stockholmSE\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":36762,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (36761)","md5":"7e896f506ee5b96cde339ba33f8593d0","sha1":"63a333eecbd0975faf126844168040c7d87da274","sha256":"6995412d91a42aef46fe8e139774aa00988bb18028a15bac2feb7c15ac28a623","sha512":"dcea6a83bbac485b50a9180be076e3fb6616545fbef0d3e531cbd998c9183d001f5c28ced200ca860bf5204d060971fb6678e6c079559b8353ac383ac1c97b0c","ssdeep":"768:E8H95TcrWYtvcXFOxrnSJPHs24v9+ggFgZ:E8d5TcrWYtkXIuPF4g2Z","tlshash":"2bf2975daad5093cec33c166e3f8e18c9629e5d1df321adaf64339048ac27bf1987514","first_seen":"2025-10-20T10:59:25.0177Z","last_seen":"2026-01-13T13:06:51.378879Z","times_seen":3895,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"airs-solan.com/h1xcCTEc.php?s=%2F%40v1%2Fcdn%2Fjs%2Fcontentful.min.min.js%3Ft%3D29470418%26u%3DhaSstKqFPIHSheyaGDY5MjU2NDRjMjhjZmYzYzM0MDI3ZDdlZLuxKhwsi8et6WqOyQ","fqdn":"airs-solan.com","domain":"airs-solan.com","tld":"com"},"ip":{"addr":"172.67.175.69","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://airs-solan.com/","date":"2026-01-12T13:38:11.525Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"airs-solan.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 04 Jan 2026 14:37:05 GMT","end":"Sat, 04 Apr 2026 15:31:43 GMT"},"fingerprint":{"sha1":"10:4C:CA:49:40:E7:A3:03:D5:95:2F:D6:39:B1:BA:47:86:E4:34:3B","sha256":"3E:ED:BF:A4:83:51:CB:41:3D:E9:94:0E:34:2B:54:A8:B3:9C:14:EC:87:1B:D2:D3:22:03:79:F0:FE:B8:46:0D"}}},"request":{"raw":"GET /h1xcCTEc.php?s=%2F%40v1%2Fcdn%2Fjs%2Fcontentful.min.min.js%3Ft%3D29470418%26u%3DhaSstKqFPIHSheyaGDY5MjU2NDRjMjhjZmYzYzM0MDI3ZDdlZLuxKhwsi8et6WqOyQ HTTP/1.1\r\nHost: airs-solan.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://airs-solan.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 12 Jan 2026 13:38:11 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 16334\r\nlast-modified: Fri, 12 Dec 2025 21:04:21 GMT\r\npriority: u=3,i=?0\r\netag: \"693c8355-3fce\"\r\naccept-ranges: bytes\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NjOw%2FzP108zg4uT1EbMF4q75%2FPQ64%2FzPAFnIwJnCg16bjFNDWiu3Vj2HurjlyHRydAAZZkRc0mYgWSsAMFKFWd4sn03MIOrbVctPk1GM\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9bcd0d860ec6723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16334,"size_decoded":0,"mime_type":"application/octet-stream","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-06T03:01:06.849517Z","times_seen":17735808,"resource_available":true,"data":null}},"time_used":76,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":72,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-12","alert":"Sinkholed","trigger":"airs-solan.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-12","alert":"Sinkholed","trigger":"airs-solan.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"airs-solan.com/favicon.ico","fqdn":"airs-solan.com","domain":"airs-solan.com","tld":"com"},"ip":{"addr":"172.67.175.69","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://airs-solan.com/","date":"2026-01-12T13:38:11.662Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"airs-solan.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 04 Jan 2026 14:37:05 GMT","end":"Sat, 04 Apr 2026 15:31:43 GMT"},"fingerprint":{"sha1":"10:4C:CA:49:40:E7:A3:03:D5:95:2F:D6:39:B1:BA:47:86:E4:34:3B","sha256":"3E:ED:BF:A4:83:51:CB:41:3D:E9:94:0E:34:2B:54:A8:B3:9C:14:EC:87:1B:D2:D3:22:03:79:F0:FE:B8:46:0D"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: airs-solan.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://airs-solan.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\nserver: cloudflare\r\ndate: Mon, 12 Jan 2026 13:38:11 GMT\r\ncontent-type: text/html; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mZY2Zmpge8yon3krMlwfn%2BVonw7fG%2FdkhoTxhNLwV1b1WnmuZsqKgAK2QuPp3LOQ26J52GFUheIeYxwH%2BfGH%2FPv9Q5MEC4jB4CCEwGkV\"}]}\r\npriority: u=6,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9bcd0d86ef08723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":153,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"8259bd2dc96b69fffb7c7e1f3411275e","sha1":"e945be7ea901f4a7cf170e184711c81bcd3527e6","sha256":"c375e42b6328de1880de1424a93267d573a1afa2ed37f72a35d8218f6880dd58","sha512":"b6c638e4421bf99ca1c8156247c5af6233e696f956f72cfccc88ac1521bc3d9c4ec6d2fc33e9ad78dd7eb95735543d9eea96dd5caa27878b8bc5c6a5a7dcb8c9","ssdeep":"","tlshash":"48c02b2d35137c4cc5a3317432c37080c0da833764ba41128440800331cf2a98ac7397","first_seen":"2025-05-03T23:55:22.499243Z","last_seen":"2026-08-05T09:22:39.733178Z","times_seen":18191,"resource_available":true,"data":null}},"time_used":117,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":117,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-12","alert":"Sinkholed","trigger":"airs-solan.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-12","alert":"Sinkholed","trigger":"airs-solan.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"airs-solan.com/","fqdn":"airs-solan.com","domain":"airs-solan.com","tld":"com"},"ip":{"addr":"172.67.175.69","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-01-12T13:38:10.490Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"airs-solan.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 04 Jan 2026 14:37:05 GMT","end":"Sat, 04 Apr 2026 15:31:43 GMT"},"fingerprint":{"sha1":"10:4C:CA:49:40:E7:A3:03:D5:95:2F:D6:39:B1:BA:47:86:E4:34:3B","sha256":"3E:ED:BF:A4:83:51:CB:41:3D:E9:94:0E:34:2B:54:A8:B3:9C:14:EC:87:1B:D2:D3:22:03:79:F0:FE:B8:46:0D"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: airs-solan.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 12 Jan 2026 13:38:10 GMT\r\ncontent-type: text/html; charset=utf-8\r\nserver: cloudflare\r\nlast-modified: Fri, 12 Dec 2025 21:06:11 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eMvJg04WQiu1MI6Hp6fDC9EV6I0LpHexADVR2hr5%2FHHUOt%2FOCcbI1Rxbymq4E6%2FEhwmz8gp7q9ayRceuiZChShBQ8MOmQ8oWC587IA%3D%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9bcd0d7fba6756c9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":23750,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"63fbb5c9c0037f9758aa3d20e0dc030d","sha1":"c7971da36e2332b95904ad707bcd93510a09ac84","sha256":"815839822773867ba1097bcc3d6116164b93803c95f34b954f3c8058de35b8ad","sha512":"f6bbf54fa0a2c44fd452518e3b730760dc1d7e7843d9f12cb9ffb6612ce766a5d6d1e403d8853cae111e846b873b026cdff47578c749190d4c3413bafb27f22e","ssdeep":"384:YunhE9AQiAnAKi7RScUUzZUnEx5VnMUnh5bj5fR:YmhE9AQiAndi7RScbjJR","tlshash":"8fb2931c5af30211681395a52bf7475a37b4d407c147ca6c3bee2694cf85ee8e8a3b8d","first_seen":"2025-12-31T12:32:52.1892Z","last_seen":"2026-01-12T13:38:54.631037Z","times_seen":3,"resource_available":false,"data":null}},"time_used":164,"timings":{"blocked":22,"dns":1,"connect":1,"send":0,"wait":119,"receive":0,"ssl":17},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-12","alert":"Sinkholed","trigger":"airs-solan.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-12","alert":"Sinkholed","trigger":"airs-solan.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"airs-solan.com/commander.iife.min.js","fqdn":"airs-solan.com","domain":"airs-solan.com","tld":"com"},"ip":{"addr":"172.67.175.69","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://airs-solan.com/","date":"2026-01-12T13:38:10.868Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"airs-solan.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 04 Jan 2026 14:37:05 GMT","end":"Sat, 04 Apr 2026 15:31:43 GMT"},"fingerprint":{"sha1":"10:4C:CA:49:40:E7:A3:03:D5:95:2F:D6:39:B1:BA:47:86:E4:34:3B","sha256":"3E:ED:BF:A4:83:51:CB:41:3D:E9:94:0E:34:2B:54:A8:B3:9C:14:EC:87:1B:D2:D3:22:03:79:F0:FE:B8:46:0D"}}},"request":{"raw":"GET /commander.iife.min.js HTTP/1.1\r\nHost: airs-solan.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://airs-solan.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 12 Jan 2026 13:38:11 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Fri, 12 Dec 2025 21:05:03 GMT\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\netag: W/\"693c837f-6a0db\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vvTPUbypHwQVmeqpMBsCFIMs9tFSQ%2FseVd%2BwTGm4bMZ2k82HevUVhIVsNiUiYVL1H0AeNg1r6LtSsC7pBJHRVlk3D2gEJs%2F9YcDgHsTx\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9bcd0d81edf6723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":434395,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65057)","md5":"29edb324838fc0b3872e3c56afe515c2","sha1":"5f17ccf3dad03d04ac0e60cf045964b17dcfa281","sha256":"71b3d59fb21560f1d06752ebbb7c100ea067f7749728d8f7840ad7e02f285fea","sha512":"5ceb240b14f08706177a198286110bbe5b44735cab85053205297fed342f7cd3f08fb216f75f2f30644a041506941abf911a7a8b782af3c75c82036a43d094a8","ssdeep":"3072:LgU9I8Hkf8adScCHGqDySUSynXeONM66GOemX0B67A2ddCPNiA70rK+jqg9UDtC:MU9IAkfvdSRmq1byXegx3OY67Anxfo","tlshash":"1a9451a639d30b1df22db204170882cda780557a4abffc60b79fb381e2a5c5e91d1977","first_seen":"2025-12-31T12:32:52.190088Z","last_seen":"2026-01-12T13:38:54.631624Z","times_seen":3,"resource_available":true,"data":null}},"time_used":217,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":151,"receive":66,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-12","alert":"Sinkholed","trigger":"airs-solan.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-12","alert":"Sinkholed","trigger":"airs-solan.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"corsproxy.io/?https://api.mainnet-beta.solana.com","fqdn":"corsproxy.io","domain":"corsproxy.io","tld":"io"},"ip":{"addr":"172.67.73.211","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://airs-solan.com/","date":"2026-01-12T13:38:12.231Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"corsproxy.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 18 Dec 2025 12:31:51 GMT","end":"Wed, 18 Mar 2026 13:31:47 GMT"},"fingerprint":{"sha1":"F1:18:C6:C5:DE:D3:95:FA:F6:75:63:47:58:50:9A:A8:A0:A4:AA:1B","sha256":"80:C5:28:D3:6E:6F:09:64:63:08:DD:D0:AE:1D:86:93:4A:26:7C:CD:00:81:67:0B:6B:3E:A6:79:6B:A4:D5:2E"}}},"request":{"raw":"OPTIONS /?https://api.mainnet-beta.solana.com HTTP/1.1\r\nHost: corsproxy.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://airs-solan.com/\r\nOrigin: https://airs-solan.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Mon, 12 Jan 2026 13:38:12 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: false\r\naccess-control-allow-headers: content-type\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS, HEAD, PATCH\r\naccess-control-max-age: 86400\r\nstrict-transport-security: max-age=2592000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iKA1Hw69OqtPRGI7xHDpA5w9tux8z%2ByOvs4W8ZygYihAd3yCBHt%2FdiO0XSPYVrio%2F9sbS%2Fn9nrhPL%2FvWqx5wf5COFD4RboAFOqWK\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: same-origin\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nserver: cloudflare\r\ncf-ray: 9bcd0d8acbacb28a-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-06T03:01:06.849517Z","times_seen":17735808,"resource_available":true,"data":null}},"time_used":105,"timings":{"blocked":48,"dns":7,"connect":1,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"corsproxy.io/?https://api.mainnet-beta.solana.com","fqdn":"corsproxy.io","domain":"corsproxy.io","tld":"io"},"ip":{"addr":"172.67.73.211","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://airs-solan.com/","date":"2026-01-12T13:38:12.356Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"corsproxy.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 18 Dec 2025 12:31:51 GMT","end":"Wed, 18 Mar 2026 13:31:47 GMT"},"fingerprint":{"sha1":"F1:18:C6:C5:DE:D3:95:FA:F6:75:63:47:58:50:9A:A8:A0:A4:AA:1B","sha256":"80:C5:28:D3:6E:6F:09:64:63:08:DD:D0:AE:1D:86:93:4A:26:7C:CD:00:81:67:0B:6B:3E:A6:79:6B:A4:D5:2E"}}},"request":{"raw":"POST /?https://api.mainnet-beta.solana.com HTTP/1.1\r\nHost: corsproxy.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://airs-solan.com/\r\nContent-Type: application/json\r\nContent-Length: 130\r\nOrigin: https://airs-solan.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":130,"data":"{\"jsonrpc\":\"2.0\",\"id\":1,\"method\":\"getAccountInfo\",\"params\":[\"8ycauMwVE61B4uWz87B2k2G8mMK7iFjRoBHooaVAcP4k\",{\"encoding\":\"base64\"}]}"}},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 12 Jan 2026 13:38:12 GMT\r\ncontent-type: application/json; charset=utf-8\r\naccess-control-allow-origin: *\r\nallow: OPTIONS, POST, GET\r\ncache-control: public, s-maxage=3600, max-age=3600\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\naccess-control-allow-credentials: false\r\nx-cache-body-hash: cd0fcd93326a493dbfbef017045ba271\r\nx-cache-read: miss\r\nx-cache-saved: 2026-01-12T13:38:12.473Z\r\nx-cache-status: MISS\r\nx-cache-write: saved\r\nx-proxy-service: CORS Proxy\r\nx-proxy-time: 144ms\r\nx-proxy-version: 2.4.2\r\nx-request-id: 06c6dc00-2077-47d6-8952-a9d657bdc37b\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS, HEAD, PATCH\r\naccess-control-max-age: 86400\r\nx-content-type-options: nosniff\r\nx-ratelimit-conn-limit: 40\r\nx-ratelimit-conn-remaining: 39\r\nx-ratelimit-connrate-limit: 40\r\nx-ratelimit-connrate-remaining: 39\r\nx-ratelimit-endpoint-limit: unlimited\r\nx-ratelimit-endpoint-remaining: -1883\r\nx-ratelimit-method-limit: 30\r\nx-ratelimit-method-remaining: 29\r\nx-ratelimit-pubsub-limit: 5\r\nx-ratelimit-pubsub-remaining: 5\r\nx-ratelimit-rps-limit: 100\r\nx-ratelimit-rps-remaining: 99\r\nx-ratelimit-tier: free\r\nx-rpc-node: ams346\r\nstrict-transport-security: max-age=2592000; includeSubDomains; preload\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kr6kWGQ1bS5%2Fp17t4W1yRoUMu1%2BShM3GmRj0xFwyRNpzVMlyybQxj%2FsNZvRKaxuB3mrZEbw4ifj65J%2FrjUh66z1YL9Wmgwa9J92m\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: same-origin\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\ncf-ray: 9bcd0d8b0c84b28a-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":327,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"48af2617ed0b77613a10c0547ce2da62","sha1":"e66fa01bc6269bf72b912e488d13edab5f72bb4c","sha256":"790e3aa6f7be9c34b53a4056f69a83872f2aa400bb65a4a7e30fee151751e282","sha512":"d4eb58a7784dfdcbed55a256ab543b63d6f60950d83f3249e4056d6ae2a09b7ed9e383f094e09430c23a779cfdb05d95462ece9fa9d559270b6dba0b02234d74","ssdeep":"","tlshash":"b5e07dc07d090bbf9ed88e57ca1561aad3c108a95b004a8713eb1d55b1c959da00b5bb","first_seen":"2026-01-12T13:38:54.632231Z","last_seen":"2026-01-12T13:38:54.632231Z","times_seen":1,"resource_available":false,"data":null}},"time_used":160,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":160,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aodefevrgdkhqltdnwgzbyjoywrlbntbhfwq.com/jmpd/","fqdn":"aodefevrgdkhqltdnwgzbyjoywrlbntbhfwq.com","domain":"aodefevrgdkhqltdnwgzbyjoywrlbntbhfwq.com","tld":"com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://airs-solan.com/","date":"2026-01-12T13:38:13.214Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aodefevrgdkhqltdnwgzbyjoywrlbntbhfwq.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 08 Jan 2026 15:05:58 GMT","end":"Wed, 08 Apr 2026 15:05:57 GMT"},"fingerprint":{"sha1":"4D:1D:3C:6D:9E:2D:29:38:F6:A3:C5:A2:A9:6E:00:65:21:FD:F7:14","sha256":"B2:0A:D0:D4:D9:66:A7:A6:38:55:71:26:B9:06:E7:A1:A5:4B:C4:7B:C4:E5:D6:9A:6B:FF:D1:0E:21:E9:BB:C1"}}},"request":{"raw":"OPTIONS /jmpd/ HTTP/1.1\r\nHost: aodefevrgdkhqltdnwgzbyjoywrlbntbhfwq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://airs-solan.com/\r\nOrigin: https://airs-solan.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Mon, 12 Jan 2026 13:38:13 GMT\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 4623665\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, PATCH, OPTIONS\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\naccess-control-max-age: 86400\r\ncache-control: no-cache\r\ncdn-proxyver: 1.43\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 204\r\ncdn-cachedat: 01/12/2026 13:38:13\r\ncdn-edgestorageid: 830\r\ncdn-requestid: d52f002ad854b4deb444224946eb8a6e\r\ncdn-status: 204\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-06T03:01:06.849517Z","times_seen":17735808,"resource_available":true,"data":null}},"time_used":83,"timings":{"blocked":19,"dns":10,"connect":1,"send":0,"wait":44,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-12","alert":"Sinkholed","trigger":"aodefevrgdkhqltdnwgzbyjoywrlbntbhfwq.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-12","alert":"Sinkholed","trigger":"aodefevrgdkhqltdnwgzbyjoywrlbntbhfwq.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}