{"report_id":"d6c41ead-538a-4207-be9d-b93055474d55","version":6,"status":"done","tags":[],"date":"2025-11-04T11:02:27Z","url":{"schema":"https","addr":"airdrop-mmtfinance.app/","fqdn":"airdrop-mmtfinance.app","domain":"airdrop-mmtfinance.app","tld":"app"},"ip":{"addr":"172.67.155.243","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"airdrop-mmtfinance.app/","fqdn":"airdrop-mmtfinance.app","domain":"airdrop-mmtfinance.app","tld":"app"},"title":"Momentum Airdrop","dom":{"size":14910,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (14166)","md5":"43e856261dc8411b984545bd8401eb2b","sha1":"c32aa1c5e771827f0a1dd73b5e9fbd795f3b2f35","sha256":"508e69be52493b387d9281c857085be8743e19fc5cb022d0ff10454342e59433","sha512":"1c59e5bbc31e8351589955f31585294f17138d1e5ba728339f22e8a40ee9a36175e711cf9c3b4441ce2a03315fa79c57ade3c92483570024361e92416547d645","ssdeep":"384:uG7eHONkoy/LWw6aX2e/FQuishmGnNFmYMkAozoCma:7SHONkoy/LEaX2e/FQuis4G7mY9vzoCH","tlshash":"77621834a700033f89178eecee94fa466897b912d206185c766d928773dfc7485bae4b","dom_hash":"domhash23197ab7706acbe1186bd6ee923c63c5","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":"PGh0bWwgY2xhc3M9ImRhcmsgdGV4dC1mb3JlZ3JvdW5kIGJnLWJhY2tncm91bmQgaC1mdWxsIG92ZXJmbG93LXgtaGlkZGVuIiBkYXRhLXNjcmFwYm9vay1zb3VyY2U9Imh0dHBzOi8vYWlyZHJvcC5tbXQuZmluYW5jZS8iIGRhdGEtc2NyYXBib29rLWNyZWF0ZT0iMjAyNTExMDMxNzI4MTMzNzkiIGxhbmc9ImVuIj48aGVhZD48c2NyaXB0PgogICAgICAgIGRvY3VtZW50LmFkZEV2ZW50TGlzdGVuZXIoJ0RPTUNvbnRlbnRMb2FkZWQnLCBmdW5jdGlvbiAoKSB7CiAgICAgICAgICB2YXIgbGlua3MgPSBkb2N1bWVudC5xdWVyeVNlbGVjdG9yQWxsKCdib2R5IGEnKTsKICAgICAgICAgIGZvciAodmFyIGkgPSAwOyBpIDwgbGlua3MubGVuZ3RoOyBpKyspIHsKICAgICAgICAgIHZhciBsaW5rID0gbGlua3NbaV07CiAgICAgICAgICBsaW5rLnJlbW92ZUF0dHJpYnV0ZSgnaHJlZicpOwogICAgICAgICAgbGluay5jbGFzc0xpc3QuYWRkKCdjb25uZWN0LXdhbGxldCcpOwogICAgICAgICAgfQogICAgICAgICAgfSk7CiAgICAgICAgICA8L3NjcmlwdD4gIDxzY3JpcHQgdHlwZT0ibW9kdWxlIiBkZWZlcj0iIiBjcm9zc29yaWdpbj0iIiBzcmM9Ii4vYXNzZXRzL2VsZXZlbi5qcyI+PC9zY3JpcHQ+PHN0eWxlIGlkPSJyZWFjdC1hcmlhLXByZXNzYWJsZS1zdHlsZSI+QGxheWVyIHsKICBbZGF0YS1yZWFjdC1hcmlhLXByZXNzYWJsZV0gewogICAgdG91Y2gtYWN0aW9uOiBwYW4teCBwYW4teSBwaW5jaC16b29tOwogIH0KfTwvc3R5bGU+PG1ldGEgY2hhcnNldD0iVVRGLTgiPjxtZXRhIG5hbWU9InZpZXdwb3J0IiBjb250ZW50PSJ3aWR0aD1kZXZpY2Utd2lkdGgsIGluaXRpYWwtc2NhbGU9MSI+PGxpbmsgcmVsPSJzdHlsZXNoZWV0IiBocmVmPSJjN2NmMDUwMmE1YTA0Yjk3LmNzcyIgZGF0YS1wcmVjZWRlbmNlPSJuZXh0Ij48bGluayByZWw9InN0eWxlc2hlZXQiIGhyZWY9ImFiZjljNGFhZGY4MmU2NTguY3NzIiBkYXRhLXByZWNlZGVuY2U9Im5leHQiPjxzdHlsZSBkYXRhLXByZWNlZGVuY2U9ImRlZmF1bHQiIGRhdGEtaHJlZj0ibXlzdGVuLWRhcHAta2l0LXRoZW1lIj5bZGF0YS1kYXBwLWtpdF0gey0tZGFwcC1raXQtYmx1cnMtbW9kYWxPdmVybGF5OmJsdXIoMCk7LS1kYXBwLWtpdC1iYWNrZ3JvdW5kQ29sb3JzLXByaW1hcnlCdXR0b246I0Y2RjdGOTstLWRhcHAta2l0LWJhY2tncm91bmRDb2xvcnMtcHJpbWFyeUJ1dHRvbkhvdmVyOiNGMEYyRjU7LS1kYXBwLWtpdC1iYWNrZ3JvdW5kQ29sb3JzLW91dGxpbmVCdXR0b25Ib3ZlcjojRjRGNEY1Oy0tZGFwcC1raXQtYmFja2dyb3VuZENvbG9ycy1tb2RhbE92ZXJsYXk6cmdiYSgyNCAzNiA1MyAvIDIwJSk7LS1kYXBwLWtpdC1iYWNrZ3JvdW5kQ29sb3JzLW1vZGFsUHJpbWFyeTp3aGl0ZTstLWRhcHAta2l0LWJhY2tncm91bmRDb2xvcnMtbW9kYWxTZWNvbmRhcnk6I0Y3RjhGODstLWRhcHAta2l0LWJhY2tncm91bmRDb2xvcnMtaWNvbkJ1dHRvbjp0cmFuc3BhcmVudDstLWRhcHAta2l0LWJhY2tncm91bmRDb2xvcnMtaWNvbkJ1dHRvbkhvdmVyOiNGMEYxRjI7LS1kYXBwLWtpdC1iYWNrZ3JvdW5kQ29sb3JzLWRyb3Bkb3duTWVudTojRkZGRkZGOy0tZGFwcC1raXQtYmFja2dyb3VuZENvbG9ycy1kcm9wZG93bk1lbnVTZXBhcmF0b3I6I0YzRjZGODstLWRhcHAta2l0LWJhY2tncm91bmRDb2xvcnMtd2FsbGV0SXRlbVNlbGVjdGVkOndoaXRlOy0tZGFwcC1raXQtYmFja2dyb3VuZENvbG9ycy13YWxsZXRJdGVtSG92ZXI6IzNDNDI0MjI2Oy0tZGFwcC1raXQtYm9yZGVyQ29sb3JzLW91dGxpbmVCdXR0b246I0U0RTRFNzstLWRhcHAta2l0LWNvbG9ycy1wcmltYXJ5QnV0dG9uOiMzNzM3Mzc7LS1kYXBwLWtpdC1jb2xvcnMtb3V0bGluZUJ1dHRvbjojMzczNzM3Oy0tZGFwcC1raXQtY29sb3JzLWljb25CdXR0b246IzAwMDAwMDstLWRhcHAta2l0LWNvbG9ycy1ib2R5OiMxODI0MzU7LS1kYXBwLWtpdC1jb2xvcnMtYm9keU11dGVkOiM3NjdBODE7LS1kYXBwLWtpdC1jb2xvcnMtYm9keURhbmdlcjojRkY3OTRCOy0tZGFwcC1raXQtcmFkaWktc21hbGw6NnB4Oy0tZGFwcC1raXQtcmFkaWktbWVkaXVtOjhweDstLWRhcHAta2l0LXJhZGlpLWxhcmdlOjEycHg7LS1kYXBwLWtpdC1yYWRpaS14bGFyZ2U6MTZweDstLWRhcHAta2l0LXNoYWRvd3MtcHJpbWFyeUJ1dHRvbjowcHggNHB4IDEycHggcmdiYSgwLCAwLCAwLCAwLjEpOy0tZGFwcC1raXQtc2hhZG93cy13YWxsZXRJdGVtU2VsZWN0ZWQ6MHB4IDJweCA2cHggcmdiYSgwLCAwLCAwLCAwLjA1KTstLWRhcHAta2l0LWZvbnRXZWlnaHRzLW5vcm1hbDo0MDA7LS1kYXBwLWtpdC1mb250V2VpZ2h0cy1tZWRpdW06NTAwOy0tZGFwcC1raXQtZm9udFdlaWdodHMtYm9sZDo2MDA7LS1kYXBwLWtpdC1mb250U2l6ZXMtc21hbGw6MTRweDstLWRhcHAta2l0LWZvbnRTaXplcy1tZWRpdW06MTZweDstLWRhcHAta2l0LWZvbnRTaXplcy1sYXJnZToxOHB4Oy0tZGFwcC1raXQtZm9udFNpemVzLXhsYXJnZToyMHB4Oy0tZGFwcC1raXQtdHlwb2dyYXBoeS1mb250RmFtaWx5OnVpLXNhbnMtc2VyaWYsIHN5c3RlbS11aSwgLWFwcGxlLXN5c3RlbSwgQmxpbmtNYWNTeXN0ZW1Gb250LCAiU2Vnb2UgVUkiLCBSb2JvdG8sICJIZWx2ZXRpY2EgTmV1ZSIsIEFyaWFsLCAiTm90byBTYW5zIiwgc2Fucy1zZXJpZiwgIkFwcGxlIENvbG9yIEVtb2ppIiwgIlNlZ29lIFVJIEVtb2ppIiwgIlNlZ29lIFVJIFN5bWJvbCIsICJOb3RvIENvbG9yIEVtb2ppIjstLWRhcHAta2l0LXR5cG9ncmFwaHktZm9udFN0eWxlOm5vcm1hbDstLWRhcHAta2l0LXR5cG9ncmFwaHktbGluZUhlaWdodDoxLjM7LS1kYXBwLWtpdC10eXBvZ3JhcGh5LWxldHRlclNwYWNpbmc6MTt9PC9zdHlsZT48bWV0YSBuYW1lPSJuZXh0LXNpemUtYWRqdXN0IiBjb250ZW50PSIiPjx0aXRsZT5Nb21lbnR1bSBBaXJkcm9wPC90aXRsZT48bWV0YSBuYW1lPSJkZXNjcmlwdGlvbiIgY29udGVudD0iVGhlIE1vbWVudHVtIEFpcmRyb3AgcG9ydGFsIHByb3ZpZGVzIHZlcmlmaWNhdGlvbiwgc3Vic2NyaXB0aW9uIGFuZCBhdXRvbWF0ZWQgTU1UIHRva2VuIGFsbG9jYXRpb24gZm9yIGVsaWdpYmxlIHBhcnRpY2lwYW50cyBpbiB0aGUgTW9tZW50dW0gZWNvc3lzdGVtLiI+PGxpbmsgcmVsPSJzaG9ydGN1dCBpY29uIiBocmVmPSJmYXZpY29uLmljbyI+PHNjcmlwdCBkYXRhLXNjcmFwYm9vay1lbGVtPSJjdXN0b20tZWxlbWVudHMtbG9hZGVyIj4oZnVuY3Rpb24gKG5hbWVzKSB7IGlmICghY3VzdG9tRWxlbWVudHMpIHsgcmV0dXJuOyB9IGZvciAoY29uc3QgbmFtZSBvZiBuYW1lcykgeyBjdXN0b21FbGVtZW50cy5kZWZpbmUobmFtZSwgY2xhc3MgQ3VzdG9tRWxlbWVudCBleHRlbmRzIEhUTUxFbGVtZW50IHt9KTsgfSB9KShbIm5leHQtcm91dGUtYW5ub3VuY2VyIl0pPC9zY3JpcHQ+PGxpbmsgcmVsPSJzdHlsZXNoZWV0IiBocmVmPSJodHRwczovL2ZvbnRzLmdvb2dsZWFwaXMuY29tL2NzczI/ZmFtaWx5PUludGVyOml0YWwsb3Bzeix3Z2h0QDAsMTQuLjMyLDEwMC4uOTAwOzEsMTQuLjMyLDEwMC4uOTAwJmFtcDtkaXNwbGF5PXN3YXAiPjxsaW5rIHJlbD0ic3R5bGVzaGVldCIgaHJlZj0iaHR0cHM6Ly9mb250cy5nb29nbGVhcGlzLmNvbS9jc3MyP2ZhbWlseT1QaXhlbGlmeStTYW5zOndnaHRANDAwLi43MDAmYW1wO2ZhbWlseT1QcmVzcytTdGFydCsyUCZhbXA7ZGlzcGxheT1zd2FwIj48bGluayByZWw9InN0eWxlc2hlZXQiIGhyZWY9Imh0dHBzOi8vZm9udHMuZ29vZ2xlYXBpcy5jb20vY3NzMj9mYW1pbHk9RmlyYStDb2RlOndnaHRAMzAwLi43MDAmYW1wO2Rpc3BsYXk9c3dhcCI+PC9oZWFkPjxib2R5IGNsYXNzPSJib3JuYV9iNmE3NTdmNi1tb2R1bGVfX0tFdlljcV9fY2xhc3NOYW1lIHNjcm9sbGJhci1oaWRlIGgtZnVsbCBvdmVyZmxvdy14LWhpZGRlbiBvdmVyZmxvdy15LWF1dG8iPjxkaXYgaGlkZGVuPSIiPjwhLS0kLS0+PCEtLS8kLS0+PC9kaXY+PGRpdiBkYXRhLW92ZXJsYXktY29udGFpbmVyPSJ0cnVlIj48ZGl2IGNsYXNzPSJyZWxhdGl2ZSBtaW4taC1zY3JlZW4iPjxkaXYgY2xhc3M9InBvaW50ZXItZXZlbnRzLW5vbmUgYWJzb2x1dGUgdG9wLTAgbGVmdC0wIHotMCBmbGV4IGgtWzc1MHB4XSB3LWZ1bGwgLXRyYW5zbGF0ZS15LTgganVzdGlmeS1jZW50ZXIgbGc6aC1bOTAwcHhdIGxnOnRyYW5zbGF0ZS15LTQiPjxkaXYgY2xhc3M9InJlbGF0aXZlIHctZnVsbCBtYXgtdy03eGwiPjxkaXYgY2xhc3M9ImFic29sdXRlIHRvcC1bMjUlXSBsZWZ0LTEvMiBzaXplLTMwMCAtdHJhbnNsYXRlLXgtMS8yIC10cmFuc2xhdGUteS0xLzIgc2NhbGUtNTAgb3ZlcmZsb3ctaGlkZGVuIGxnOnRvcC1bNiVdIGxnOmxlZnQtWzUyJV0gbGc6c2NhbGUtMTAwIj48ZGl2IHN0eWxlPSJ3aWR0aDoxMDAlO2hlaWdodDoxMDAlO292ZXJmbG93OmhpZGRlbjtvcGFjaXR5OjEiIGNsYXNzPSItbWwtOCByb3RhdGUtMTggYmctYmxhY2sgdHJhbnNpdGlvbi1vcGFjaXR5IGR1cmF0aW9uLTMwMCI+PGNhbnZhcyBzdHlsZT0iZGlzcGxheTogYmxvY2s7IHdpZHRoOiAxMDAlOyBoZWlnaHQ6IDEwMCU7IGN1cnNvcjogbm9uZTsiIHdpZHRoPSIxMjAwIiBoZWlnaHQ9IjEyMDAiPjwvY2FudmFzPjwvZGl2PjwvZGl2PjwvZGl2PjwvZGl2PjxkaXYgY2xhc3M9InBvaW50ZXItZXZlbnRzLW5vbmUgYWJzb2x1dGUgdG9wLTAgbGVmdC0wIGZsZXggaC1bNzUwcHhdIHctZnVsbCAtdHJhbnNsYXRlLXktOCBqdXN0aWZ5LWNlbnRlciBsZzpoLVs5MDBweF0gbGc6dHJhbnNsYXRlLXktNCI+PGRpdiBjbGFzcz0icmVsYXRpdmUgdy1mdWxsIG1heC13LTd4bCI+PGltZyBhbHQ9IiIgZGVjb2Rpbmc9ImFzeW5jIiBkYXRhLW5pbWc9IjEiIGNsYXNzPSJhYnNvbHV0ZSBoaWRkZW4gdy0xNiBsZzp0b3AtWy02LjIlXSBsZzpyaWdodC1bMTIlXSBsZzpibG9jayBsZzp3LVsxMjBweF0iIHN0eWxlPSJjb2xvcjp0cmFuc3BhcmVudDthbmltYXRpb246ZmxvYXQgM3MgZWFzZS1pbi1vdXQgaW5maW5pdGUiIHNyY3NldD0iY29pbi0xLTEucG5nIDF4LCBjb2luLTEucG5nIDJ4IiBzcmM9ImNvaW4tMS5wbmciIHdpZHRoPSIxMjAiIGhlaWdodD0iMTIwIj48aW1nIGFsdD0iIiBkZWNvZGluZz0iYXN5bmMiIGRhdGEtbmltZz0iMSIgY2xhc3M9ImFic29sdXRlIHRvcC1bMzklXSBsZWZ0LVstNC41JV0gdy0xNiBsZzp0b3AtWzI0LjIlXSBsZzpyaWdodC1bLTQlXSBsZzpsZWZ0LWF1dG8gbGc6dy1bMTIwcHhdIiBzdHlsZT0iY29sb3I6dHJhbnNwYXJlbnQ7YW5pbWF0aW9uOmZsb2F0IDRzIGVhc2UtaW4tb3V0IGluZmluaXRlO2FuaW1hdGlvbi1kZWxheTowLjVzIiBzcmNzZXQ9ImNvaW4tMi0xLnBuZyAxeCwgY29pbi0yLnBuZyAyeCIgc3JjPSJjb2luLTIucG5nIiB3aWR0aD0iMTIwIiBoZWlnaHQ9IjEyMCI+PGRpdiBjbGFzcz0iYWJzb2x1dGUgdG9wLVsxOSVdIHJpZ2h0LVstMyVdIHctMjAgbGc6dG9wLVsxNy42JV0gbGc6cmlnaHQtWzEwJV0gbGc6dy1bMTIwcHhdIiBzdHlsZT0iYW5pbWF0aW9uOmZsb2F0IDMuNXMgZWFzZS1pbi1vdXQgaW5maW5pdGU7YW5pbWF0aW9uLWRlbGF5OjFzIj48aW1nIGFsdD0iIiBkZWNvZGluZz0iYXN5bmMiIGRhdGEtbmltZz0iMSIgY2xhc3M9InJvdGF0ZS0zNiIgc3R5bGU9ImNvbG9yOnRyYW5zcGFyZW50IiBzcmNzZXQ9ImNvaW4tMy0xLnBuZyAxeCwgY29pbi0zLnBuZyAyeCIgc3JjPSJjb2luLTMucG5nIiB3aWR0aD0iMTIwIiBoZWlnaHQ9IjEyMCI+PC9kaXY+PGltZyBhbHQ9IiIgZGVjb2Rpbmc9ImFzeW5jIiBkYXRhLW5pbWc9IjEiIGNsYXNzPSJhYnNvbHV0ZSB0b3AtWzE2LjUlXSBsZWZ0LVsyLjclXSB3LTE2IGxnOnRvcC1bMjIuMyVdIGxnOmxlZnQtWzclXSBsZzp3LVsxMjBweF0iIHN0eWxlPSJjb2xvcjp0cmFuc3BhcmVudDthbmltYXRpb246ZmxvYXQgNC41cyBlYXNlLWluLW91dCBpbmZpbml0ZTthbmltYXRpb24tZGVsYXk6MS41cyIgc3Jjc2V0PSJjb2luLTQtMS5wbmcgMXgsIGNvaW4tNC5wbmcgMngiIHNyYz0iY29pbi00LnBuZyIgd2lkdGg9IjEyMCIgaGVpZ2h0PSIxMjAiPjwvZGl2PjwvZGl2PjxkaXYgY2xhc3M9InBvaW50ZXItZXZlbnRzLW5vbmUgYWJzb2x1dGUgdG9wLTAgbGVmdC0wIGZsZXggaC1bNzUwcHhdIHctZnVsbCAtdHJhbnNsYXRlLXktOCBqdXN0aWZ5LWNlbnRlciBsZzpoLVs5MDBweF0gbGc6dHJhbnNsYXRlLXktNCI+PGRpdiBjbGFzcz0icmVsYXRpdmUgdy1mdWxsIG1heC13LTd4bCI+PGltZyBhbHQ9IiIgZGVjb2Rpbmc9ImFzeW5jIiBkYXRhLW5pbWc9IjEiIGNsYXNzPSJwb2ludGVyLWV2ZW50cy1ub25lIGFic29sdXRlIHRvcC1bNTIlXSByaWdodC1bLTIlXSB3LVs3MnB4XSBsZzp0b3AtWzQwJV0gbGc6cmlnaHQtWzEzJV0gbGc6dy1bMTA4cHhdIiBzdHlsZT0iY29sb3I6dHJhbnNwYXJlbnQ7YW5pbWF0aW9uOmZsb2F0IDMuOHMgZWFzZS1pbi1vdXQgaW5maW5pdGU7YW5pbWF0aW9uLWRlbGF5OjAuOHMiIHNyY3NldD0iY29pbi01LTEucG5nIDF4LCBjb2luLTUucG5nIDJ4IiBzcmM9ImNvaW4tNS5wbmciIHdpZHRoPSIxMjAiIGhlaWdodD0iMTIwIj48L2Rpdj48L2Rpdj48bmF2IGNsYXNzPSJmbGV4IHotNDAgdy1mdWxsIGgtYXV0byBpdGVtcy1jZW50ZXIganVzdGlmeS1jZW50ZXIgZGF0YS1bbWVudS1vcGVuPXRydWVdOmJvcmRlci1ub25lIHN0aWNreSB0b3AtMCBpbnNldC14LTAgYmctdHJhbnNwYXJlbnQgdHJhbnNpdGlvbi1hbGwgZHVyYXRpb24tMzAwIiBzdHlsZT0iLS1uYXZiYXItaGVpZ2h0OjRyZW0iPjxoZWFkZXIgY2xhc3M9InotNDAgZmxleCBnYXAtNCB3LWZ1bGwgZmxleC1yb3cgcmVsYXRpdmUgZmxleC1ub3dyYXAgaXRlbXMtY2VudGVyIGp1c3RpZnktYmV0d2VlbiBoLVt2YXIoLS1uYXZiYXItaGVpZ2h0KV0gbWF4LXctWzEyODBweF0gcHgtNSBtZDpweC02Ij48ZGl2IGNsYXNzPSJmbGV4IGJhc2lzLTAgZmxleC1yb3cgZmxleC1ncm93IGZsZXgtbm93cmFwIGp1c3RpZnktc3RhcnQgYmctdHJhbnNwYXJlbnQgaXRlbXMtY2VudGVyIG5vLXVuZGVybGluZSB0ZXh0LW1lZGl1bSB3aGl0ZXNwYWNlLW5vd3JhcCBib3gtYm9yZGVyIj48YSBjbGFzcz0iY29ubmVjdC13YWxsZXQiPjxpbWcgYWx0PSJNb21lbnR1bSIgZGVjb2Rpbmc9ImFzeW5jIiBkYXRhLW5pbWc9IjEiIGNsYXNzPSJtZDpoaWRkZW4iIHN0eWxlPSJjb2xvcjp0cmFuc3BhcmVudCIgc3JjPSJsb2dvLWljb24uMjUyMTk5ZGQuc3ZnIiB3aWR0aD0iMzYiIGhlaWdodD0iMjQiPjxpbWcgYWx0PSJNb21lbnR1bSIgZGVjb2Rpbmc9ImFzeW5jIiBkYXRhLW5pbWc9IjEiIGNsYXNzPSJoaWRkZW4gbWQ6YmxvY2siIHN0eWxlPSJjb2xvcjp0cmFuc3BhcmVudCIgc3JjPSJsb2dvLWRhcmsuMGQ2ZDk0N2Uuc3ZnIiB3aWR0aD0iMTY1IiBoZWlnaHQ9IjI0Ij48L2E+PC9kaXY+PHVsIGNsYXNzPSJmbGV4IGdhcC00IGgtZnVsbCBmbGV4LXJvdyBmbGV4LW5vd3JhcCBpdGVtcy1jZW50ZXIgZGF0YS1banVzdGlmeT1zdGFydF06anVzdGlmeS1zdGFydCBkYXRhLVtqdXN0aWZ5PXN0YXJ0XTpmbGV4LWdyb3cgZGF0YS1banVzdGlmeT1zdGFydF06YmFzaXMtMCBkYXRhLVtqdXN0aWZ5PWNlbnRlcl06anVzdGlmeS1jZW50ZXIgZGF0YS1banVzdGlmeT1lbmRdOmp1c3RpZnktZW5kIGRhdGEtW2p1c3RpZnk9ZW5kXTpmbGV4LWdyb3cgZGF0YS1banVzdGlmeT1lbmRdOmJhc2lzLTAiIGRhdGEtanVzdGlmeT0iZW5kIj48YnV0dG9uIHR5cGU9ImJ1dHRvbiIgdGFiaW5kZXg9IjAiIGRhdGEtcmVhY3QtYXJpYS1wcmVzc2FibGU9InRydWUiIGRhdGEtc3RhdGU9ImNsb3NlZCIgYXJpYS1oYXNwb3B1cD0iZGlhbG9nIiBhcmlhLWV4cGFuZGVkPSJmYWxzZSIgYXJpYS1jb250cm9scz0icmFkaXgtX1JfMTZsYl8iIGNsYXNzPSJjbm5jdEFwckJ0biB6LTAgZ3JvdXAgcmVsYXRpdmUgYm94LWJvcmRlciBhcHBlYXJhbmNlLW5vbmUgc2VsZWN0LW5vbmUgd2hpdGVzcGFjZS1ub3dyYXAgc3VicGl4ZWwtYW50aWFsaWFzZWQgb3ZlcmZsb3ctaGlkZGVuIHRhcC1oaWdobGlnaHQtdHJhbnNwYXJlbnQgdHJhbnNmb3JtLWdwdSBkYXRhLVtwcmVzc2VkPXRydWVdOnNjYWxlLVswLjk3XSBjdXJzb3ItcG9pbnRlciBvdXRsaW5lLXNvbGlkIG91dGxpbmUtdHJhbnNwYXJlbnQgZGF0YS1bZm9jdXMtdmlzaWJsZT10cnVlXTp6LTEwIGRhdGEtW2ZvY3VzLXZpc2libGU9dHJ1ZV06b3V0bGluZS0yIGRhdGEtW2ZvY3VzLXZpc2libGU9dHJ1ZV06b3V0bGluZS1mb2N1cyBkYXRhLVtmb2N1cy12aXNpYmxlPXRydWVdOm91dGxpbmUtb2Zmc2V0LTIgcHgtNCBtaW4tdy0yMCBoLTEwIHJvdW5kZWQtZnVsbCBbJmFtcDs+c3ZnXTptYXgtdy1bdGhlbWUoc3BhY2luZy44KV0gdHJhbnNpdGlvbi10cmFuc2Zvcm0tY29sb3JzLW9wYWNpdHkgbW90aW9uLXJlZHVjZTp0cmFuc2l0aW9uLW5vbmUgYmctdHJhbnNwYXJlbnQgYm9yZGVyLWRlZmF1bHQgdGV4dC1mb3JlZ3JvdW5kIGRhdGEtW2hvdmVyPXRydWVdOm9wYWNpdHktaG92ZXIgZmxleCBpdGVtcy1jZW50ZXIganVzdGlmeS1jZW50ZXIgZ2FwLTEgYm9yZGVyLTEgdGV4dC1zbSBmb250LW1lZGl1bSBiYWNrZHJvcC1ibHVyLW1kIGhvdmVyOmJnLXdoaXRlIGhvdmVyOnRleHQtYmxhY2sgaG92ZXI6IW9wYWNpdHktMTAwIj48c3ZnIGNsYXNzPSJzaXplLTYiIHZpZXdCb3g9IjAgMCAyNCAyNCIgZmlsbD0ibm9uZSIgeG1sbnM9Imh0dHA6Ly93d3cudzMub3JnLzIwMDAvc3ZnIiBhcmlhLWhpZGRlbj0idHJ1ZSIgZm9jdXNhYmxlPSJmYWxzZSI+PHBhdGggZD0iTTMgN2EyIDIgMCAwIDEgMi0yaDExYTEgMSAwIDAgMSAwIDJINXYxMGgxNHYtMmgtM2EzIDMgMCAxIDEgMC02aDNWN2gtMSIgc3Ryb2tlPSJjdXJyZW50Q29sb3IiIHN0cm9rZS13aWR0aD0iMS41IiBzdHJva2UtbGluZWNhcD0icm91bmQiIHN0cm9rZS1saW5lam9pbj0icm91bmQiPjwvcGF0aD48Y2lyY2xlIGN4PSIxNiIgY3k9IjEyIiByPSIxLjUiIGZpbGw9ImN1cnJlbnRDb2xvciI+PC9jaXJjbGU+PC9zdmc+PHNwYW4gY2xhc3M9InctMjgiPkNvbm5lY3QgV2FsbGV0PC9zcGFuPjwvYnV0dG9uPjwvdWw+PC9oZWFkZXI+PC9uYXY+PG1haW4gY2xhc3M9InctZnVsbCBwLTQgbWQ6cC02Ij48c2VjdGlvbiBjbGFzcz0iY25uY3RBcHJCdG4gcmVsYXRpdmUgei0xMCBteC1hdXRvIGZsZXggbWF4LXctNHhsIGZsZXgtY29sIGl0ZW1zLWNlbnRlciBqdXN0aWZ5LXN0YXJ0IHB5LTEyIHRleHQtY2VudGVyIHRleHQtc2hhZG93LXNtIG1kOnB4LTYgbWQ6cHktMjAiPjxoMSBjbGFzcz0ibWItNCBibG9jayB0ZXh0LTV4bCBmb250LXNlbWlib2xkIG1kOmhpZGRlbiI+PHNwYW4gY2xhc3M9ImJsb2NrIj5Nb21lbnR1bTwvc3Bhbj48c3BhbiBjbGFzcz0iYmxvY2siPkFpcmRyb3A8L3NwYW4+PC9oMT48aDEgY2xhc3M9Im1iLTQgaGlkZGVuIHRleHQtWzgwcHhdIGZvbnQtc2VtaWJvbGQgd2hpdGVzcGFjZS1ub3dyYXAgbWQ6YmxvY2siPk1vbWVudHVtIEFpcmRyb3A8L2gxPjxwIGNsYXNzPSJtYi0xIHRleHQtMnhsIGZvbnQtbWVkaXVtIG9wYWNpdHktODAgbWQ6bWItMTAiPlN1YnNjcmliZSBmb3IgV2F2ZSAxPC9wPjxkaXYgY2xhc3M9Im10LTEyIGZsZXggbWF4LXctZnVsbCBmbGV4LWNvbCBpdGVtcy1jZW50ZXIgZ2FwLTEwIj48cCBjbGFzcz0ibWF4LXctMTQwIHRleHQtY2VudGVyIHRleHQtMnhsIGZvbnQtc2VtaWJvbGQgdGV4dC13aGl0ZSI+Q29ubmVjdCB5b3VyIHdhbGxldCBhbmQgYmluZCB5b3VyIFggdG8gcXVhbGlmeSBmb3IgdGhlIE1vbWVudHVtIEFpcmRyb3AgV2F2ZSAxIHdoaWxlIHRoZSB0aW1lciBpcyBhY3RpdmUuPC9wPjxkaXYgY2xhc3M9ImZsZXggZmxleC1jb2wgaXRlbXMtY2VudGVyIGdhcC0zIj48L2Rpdj48ZGl2IGNsYXNzPSJmbGV4IHctZnVsbCBmbGV4LWNvbCBpdGVtcy1jZW50ZXIgZ2FwLTQgcHgtNCI+PGRpdiBjbGFzcz0iZmxleCB3LWZ1bGwgbWF4LXctbWQgZmxleC1jb2wgaXRlbXMtY2VudGVyIGp1c3RpZnktY2VudGVyIGdhcC00IG1kOm1heC13LW5vbmUgbWQ6ZmxleC1yb3ciPjxidXR0b24gdHlwZT0iYnV0dG9uIiB0YWJpbmRleD0iMCIgZGF0YS1yZWFjdC1hcmlhLXByZXNzYWJsZT0idHJ1ZSIgZGF0YS1zdGF0ZT0iY2xvc2VkIiBhcmlhLWhhc3BvcHVwPSJkaWFsb2ciIGFyaWEtZXhwYW5kZWQ9ImZhbHNlIiBhcmlhLWNvbnRyb2xzPSJyYWRpeC1fUl9lMmx2bGJfIiBjbGFzcz0iY25uY3RBcHJCdG4gei0wIGdyb3VwIHJlbGF0aXZlIGlubGluZS1mbGV4IGl0ZW1zLWNlbnRlciBqdXN0aWZ5LWNlbnRlciBib3gtYm9yZGVyIGFwcGVhcmFuY2Utbm9uZSBzZWxlY3Qtbm9uZSB3aGl0ZXNwYWNlLW5vd3JhcCBzdWJwaXhlbC1hbnRpYWxpYXNlZCBvdmVyZmxvdy1oaWRkZW4gdGFwLWhpZ2hsaWdodC10cmFuc3BhcmVudCB0cmFuc2Zvcm0tZ3B1IGRhdGEtW3ByZXNzZWQ9dHJ1ZV06c2NhbGUtWzAuOTddIGN1cnNvci1wb2ludGVyIG91dGxpbmUtc29saWQgb3V0bGluZS10cmFuc3BhcmVudCBkYXRhLVtmb2N1cy12aXNpYmxlPXRydWVdOnotMTAgZGF0YS1bZm9jdXMtdmlzaWJsZT10cnVlXTpvdXRsaW5lLTIgZGF0YS1bZm9jdXMtdmlzaWJsZT10cnVlXTpvdXRsaW5lLWZvY3VzIGRhdGEtW2ZvY3VzLXZpc2libGU9dHJ1ZV06b3V0bGluZS1vZmZzZXQtMiBtaW4tdy0yMCByb3VuZGVkLWZ1bGwgWyZhbXA7PnN2Z106bWF4LXctW3RoZW1lKHNwYWNpbmcuOCldIG1vdGlvbi1yZWR1Y2U6dHJhbnNpdGlvbi1ub25lIGRhdGEtW2hvdmVyPXRydWVdOm9wYWNpdHktaG92ZXIgaC0xMiBnYXAtMi41IGJnLVsjMjg3MGZmXSBweC0xNiB0ZXh0LXNtIGZvbnQtbWVkaXVtIHRleHQtd2hpdGUgc2hhZG93LW1kIHRyYW5zaXRpb24tY29sb3JzIGR1cmF0aW9uLTIwMCBkYXRhLVtob3Zlcj10cnVlXTpiZy1bIzI0NjVFNl0gZGF0YS1baG92ZXI9dHJ1ZV06IW9wYWNpdHktMTAwIj5Db25uZWN0IFdhbGxldDwvYnV0dG9uPjwvZGl2PjwvZGl2PjwvZGl2Pjwvc2VjdGlvbj48IS0tJC0tPjwhLS0vJC0tPjwvbWFpbj48L2Rpdj48L2Rpdj48bmV4dC1yb3V0ZS1hbm5vdW5jZXIgc3R5bGU9InBvc2l0aW9uOiBhYnNvbHV0ZTsiPjwvbmV4dC1yb3V0ZS1hbm5vdW5jZXI+PHNjcmlwdCBkYXRhLXNjcmFwYm9vay1lbGVtPSJiYXNpYy1sb2FkZXIiPihmdW5jdGlvbiAoKSB7IHZhciBrMSA9ICJkYXRhLXNjcmFwYm9vay1zaGFkb3dkb20iLCBrMiA9ICJkYXRhLXNjcmFwYm9vay1jYW52YXMiLCBrMyA9ICJkYXRhLXNjcmFwYm9vay1pbnB1dC1pbmRldGVybWluYXRlIiwgazQgPSAiZGF0YS1zY3JhcGJvb2staW5wdXQtY2hlY2tlZCIsIGs1ID0gImRhdGEtc2NyYXBib29rLW9wdGlvbi1zZWxlY3RlZCIsIGs2ID0gImRhdGEtc2NyYXBib29rLWlucHV0LXZhbHVlIiwgazcgPSAiZGF0YS1zY3JhcGJvb2stdGV4dGFyZWEtdmFsdWUiLCBrOCA9ICJkYXRhLXNjcmFwYm9vay1hZG9wdGVkc3R5bGVzaGVldHMiLCBrOSA9IC9eZGF0YS1zY3JhcGJvb2stYWRvcHRlZHN0eWxlc2hlZXQtKFxkKykkLywgazEwID0gImRhdGEtc2NyYXBib29rLXNoYWRvd2RvbS1tb2RlIiwgazExID0gImRhdGEtc2NyYXBib29rLXNoYWRvd2RvbS1jbG9uYWJsZSIsIGsxMiA9ICJkYXRhLXNjcmFwYm9vay1zaGFkb3dkb20tZGVsZWdhdGVzLWZvY3VzIiwgazEzID0gImRhdGEtc2NyYXBib29rLXNoYWRvd2RvbS1zZXJpYWxpemFibGUiLCBrMTQgPSAiZGF0YS1zY3JhcGJvb2stc2hhZG93ZG9tLXNsb3QtYXNzaWdubWVudCIsIGsxNSA9ICJkYXRhLXNjcmFwYm9vay1zbG90LWFzc2lnbmVkIiwgazE2ID0gImRhdGEtc2NyYXBib29rLXNsb3QtaW5kZXgiLCBrMTcgPSAvXnNjcmFwYm9vay1zbG90LWluZGV4PShcZCspJC8sIGsxOCA9ICcvc2NyYXBib29rLXNsb3QtaW5kZXgnLCBkID0gZG9jdW1lbnQsIHIgPSBkLmRvY3VtZW50RWxlbWVudCwgJHMgPSAhIXIuYXR0YWNoU2hhZG93LCAkYXMgPSAhIWQuYWRvcHRlZFN0eWxlU2hlZXRzLCAkYyA9ICEhd2luZG93LkhUTUxDYW52YXNFbGVtZW50LCAkc2EgPSAhIWQuY3JlYXRlRWxlbWVudCgnc2xvdCcpLmFzc2lnbiwgc2xlID0gW10sIHNscyA9IFtdLCBzbHQgPSBmdW5jdGlvbiAocikgeyBpZiAoJHNhKSB7IHZhciBFID0gci5jaGlsZE5vZGVzLCBpLCBlLCBzLCBtOyBmb3IgKGkgPSAwOyBpIDwgRS5sZW5ndGg7IGkrKykgeyBlID0gRVtpXTsgaWYgKGUubm9kZVR5cGUgPT09IDgpIHsgcyA9IGUubm9kZVZhbHVlOyBpZiAobSA9IHMubWF0Y2goazE3KSkgeyBzID0gZS5uZXh0U2libGluZzsgaWYgKHMubm9kZVR5cGUgPT09IDMpIHsgc2xzW21bMV1dID0gczsgfSByLnJlbW92ZUNoaWxkKGUpOyBpLS07IH0gZWxzZSBpZiAocyA9PT0gazE4KSB7IHIucmVtb3ZlQ2hpbGQoZSk7IGktLTsgfSB9IH0gfSB9LCBzbCA9IGZ1bmN0aW9uICgpIHsgdmFyIGkgPSBzbGUubGVuZ3RoLCBqLCBkLCBlOyB3aGlsZSAoaS0tKSB7IGQgPSBzbGVbaV07IGUgPSBkLmVsZW07IGQgPSBkLnZhbHVlLnNwbGl0KCcsJyk7IGogPSBkLmxlbmd0aDsgd2hpbGUgKGotLSkgeyBkW2pdID0gc2xzW3BhcnNlSW50KGRbal0sIDEwKV07IH0gdHJ5IHsgdHJ5IHsgZS5hc3NpZ24uYXBwbHkoZSwgZCk7IH0gY2F0Y2ggKGV4KSB7IGlmIChleC5tZXNzYWdlLmluY2x1ZGVzKCdtdXN0IGhhdmUgYSBjYWxsYWJsZSBAQGl0ZXJhdG9yJykpIHsgZS5hc3NpZ24oZCk7IH0gZWxzZSB7IHRocm93IGV4OyB9IH0gfSBjYXRjaCAoZXgpIHsgY29uc29sZS5lcnJvcihleCk7IH0gfSB9LCBhc2wgPSAoZnVuY3Rpb24gKHIpIHsgdmFyIGwgPSBbXSwgRSwgaSwgZSwgbSwgYywgajsgaWYgKCRhcykgeyBFID0gci5hdHRyaWJ1dGVzOyBpID0gRS5sZW5ndGg7IHdoaWxlIChpLS0pIHsgZSA9IEVbaV07IGlmICghKG0gPSBlLm5vZGVOYW1lLm1hdGNoKGs5KSkpIHsgY29udGludWU7IH0gYyA9IGxbbVsxXV0gPSBuZXcgQ1NTU3R5bGVTaGVldCgpOyByLnJlbW92ZUF0dHJpYnV0ZShtWzBdKTsgbSA9IGUubm9kZVZhbHVlLnNwbGl0KCdcblxuJyk7IGogPSBtLmxlbmd0aDsgd2hpbGUgKGotLSkgeyB0cnkgeyBtW2pdICYmIGMuaW5zZXJ0UnVsZShtW2pdKTsgfSBjYXRjaCAoZXgpIHsgY29uc29sZS5lcnJvcihleCk7IH0gfSB9IH0gcmV0dXJuIGw7IH0pKHIpLCBhcyA9IGZ1bmN0aW9uIChkLCBlKSB7IHZhciBsLCBpLCBJOyBpZiAoJGFzICYmIChsID0gZS5nZXRBdHRyaWJ1dGUoazgpKSAhPT0gbnVsbCkgeyBsID0gbC5zcGxpdCgnLCcpLm1hcChpID0+IGFzbFtpXSk7IGQuYWRvcHRlZFN0eWxlU2hlZXRzID0gZC5hZG9wdGVkU3R5bGVTaGVldHMuY29uY2F0KGwpOyBlLnJlbW92ZUF0dHJpYnV0ZShrOCk7IH0gfSwgZm4gPSBmdW5jdGlvbiAocikgeyB2YXIgRSA9IHIucXVlcnlTZWxlY3RvckFsbCA/IHIucXVlcnlTZWxlY3RvckFsbCgiKiIpIDogci5nZXRFbGVtZW50c0J5VGFnTmFtZSgiKiIpLCBpID0gRS5sZW5ndGgsIGUsIGQsIHMsIG07IHdoaWxlIChpLS0pIHsgZSA9IEVbaV07IHMgPSBlLnNoYWRvd1Jvb3Q7IGlmICgkcyAmJiAoZCA9IGUuZ2V0QXR0cmlidXRlKGsxKSkpIHsgaWYgKCFzKSB7IHRyeSB7IHMgPSBlLmF0dGFjaFNoYWRvdyh7IG1vZGU6IChtID0gZS5nZXRBdHRyaWJ1dGUoazEwKSkgIT09IG51bGwgPyBtIDogJ29wZW4nLCBjbG9uYWJsZTogZS5oYXNBdHRyaWJ1dGUoazExKSwgZGVsZWdhdGVzRm9jdXM6IGUuaGFzQXR0cmlidXRlKGsxMiksIHNlcmlhbGl6YWJsZTogZS5oYXNBdHRyaWJ1dGUoazEzKSwgc2xvdEFzc2lnbm1lbnQ6IChtID0gZS5nZXRBdHRyaWJ1dGUoazE0KSkgIT09IG51bGwgPyBtIDogdm9pZCAwLCB9KTsgcy5pbm5lckhUTUwgPSBkOyB9IGNhdGNoIChleCkgeyBjb25zb2xlLmVycm9yKGV4KTsgfSB9IGUucmVtb3ZlQXR0cmlidXRlKGsxKTsgZS5yZW1vdmVBdHRyaWJ1dGUoazEwKTsgZS5yZW1vdmVBdHRyaWJ1dGUoazExKTsgZS5yZW1vdmVBdHRyaWJ1dGUoazEyKTsgZS5yZW1vdmVBdHRyaWJ1dGUoazEzKTsgZS5yZW1vdmVBdHRyaWJ1dGUoazE0KTsgfSBpZiAoJGMgJiYgKGQgPSBlLmdldEF0dHJpYnV0ZShrMikpICE9PSBudWxsKSB7IChmdW5jdGlvbiAoKSB7IHZhciBjID0gZSwgZyA9IG5ldyBJbWFnZSgpOyBnLm9ubG9hZCA9IGZ1bmN0aW9uICgpIHsgYy5nZXRDb250ZXh0KCcyZCcpLmRyYXdJbWFnZShnLCAwLCAwKTsgfTsgZy5zcmMgPSBkOyB9KSgpOyBlLnJlbW92ZUF0dHJpYnV0ZShrMik7IH0gaWYgKChkID0gZS5nZXRBdHRyaWJ1dGUoazMpKSAhPT0gbnVsbCkgeyBlLmluZGV0ZXJtaW5hdGUgPSB0cnVlOyBlLnJlbW92ZUF0dHJpYnV0ZShrMyk7IH0gaWYgKChkID0gZS5nZXRBdHRyaWJ1dGUoazQpKSAhPT0gbnVsbCkgeyBlLmNoZWNrZWQgPSBkID09PSAndHJ1ZSc7IGUucmVtb3ZlQXR0cmlidXRlKGs0KTsgfSBpZiAoKGQgPSBlLmdldEF0dHJpYnV0ZShrNSkpICE9PSBudWxsKSB7IGUuc2VsZWN0ZWQgPSBkID09PSAndHJ1ZSc7IGUucmVtb3ZlQXR0cmlidXRlKGs1KTsgfSBpZiAoKGQgPSBlLmdldEF0dHJpYnV0ZShrNikpICE9PSBudWxsKSB7IGUudmFsdWUgPSBkOyBlLnJlbW92ZUF0dHJpYnV0ZShrNik7IH0gaWYgKChkID0gZS5nZXRBdHRyaWJ1dGUoazcpKSAhPT0gbnVsbCkgeyBlLnZhbHVlID0gZDsgZS5yZW1vdmVBdHRyaWJ1dGUoazcpOyB9IGlmICgkc2EgJiYgKGQgPSBlLmdldEF0dHJpYnV0ZShrMTUpKSAhPT0gbnVsbCkgeyBzbGUucHVzaCh7ZWxlbTogZSwgdmFsdWU6IGR9KTsgZS5yZW1vdmVBdHRyaWJ1dGUoazE1KTsgfSBpZiAoJHNhICYmIChkID0gZS5nZXRBdHRyaWJ1dGUoazE2KSkgIT09IG51bGwpIHsgc2xzW2RdID0gZTsgZS5yZW1vdmVBdHRyaWJ1dGUoazE2KTsgfSBpZiAocykgeyBzbHQoZSk7IGFzKHMsIGUpOyBmbihzKTsgfSB9IH07IGFzKGQsIHIpOyBmbihkKTsgc2woKTsgfSkoKTwvc2NyaXB0PjxkaXY+PC9kaXY+PGRpdj48L2Rpdj48ZGl2PjwvZGl2PjxkaXY+PC9kaXY+PGRpdj48L2Rpdj48ZGl2PjwvZGl2PjwvYm9keT48L2h0bWw+"}},"submit":{"url":{"schema":"https","addr":"airdrop-mmtfinance.app/","fqdn":"airdrop-mmtfinance.app","domain":"airdrop-mmtfinance.app","tld":"app"},"ip":{"addr":"172.67.155.243","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null,"user":{"user_id":"akbkyowd9geqr98","country_code":"zz"}},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-12-09T11:02:27Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":1,"urlquery":0,"analyzer":1}},"detection":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-11-04T11:02:06Z","timestamp":1762254126,"ip_dst":{"addr":"104.26.13.205","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"172.18.0.19","port":49488,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO External IP Address Lookup Domain (ipify .org) in TLS SNI","source":"{\"timestamp\":\"2025-11-04T11:02:06.614457+0000\",\"flow_id\":1681418982672247,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.19\",\"src_port\":49488,\"dest_ip\":\"104.26.13.205\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2047703,\"rev\":1,\"signature\":\"ET INFO External IP Address Lookup Domain (ipify .org) in TLS SNI\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"affected_product\":[\"Any\"],\"attack_target\":[\"Client_and_Server\"],\"confidence\":[\"High\"],\"created_at\":[\"2023_08_22\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Low\"],\"reviewed_at\":[\"2023_08_22\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"External_IP_Lookup\"],\"updated_at\":[\"2023_08_22\"]}},\"tls\":{\"sni\":\"api.ipify.org\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"eb1d94daa7e0344597e756a1fb6e7054\",\"string\":\"771,4865,51-43\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":5,\"bytes_toserver\":915,\"bytes_toclient\":3512,\"start\":\"2025-11-04T11:02:06.608119+0000\"}}"}],"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-04","alert":"Sinkholed","trigger":"airdrop-mmtfinance.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null},"summary":[{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2025-11-02T22:12:55.494707Z","alert_count":0,"request_count":1,"received_data":73799,"sent_data":545,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.74.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2025-11-02T22:12:57.589972Z","alert_count":0,"request_count":4,"received_data":14996,"sent_data":1962,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"airdrop-mmtfinance.app","ip":{"addr":"104.21.56.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2025-11-04T11:02:28.825285Z","last_seen":"2025-11-04T11:02:28.825285Z","alert_count":19,"request_count":19,"received_data":3986034,"sent_data":8724,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"React","description":"React is an open-source JavaScript library for building user interfaces or UI components.","website":"https://reactjs.org","common_platform_enumeration":"cpe:2.3:a:facebook:react:*:*:*:*:*:*:*:*","icon":"React.svg","categories":["JavaScript frameworks"]}]},{"fqdn":"api.ipify.org","ip":{"addr":"104.26.13.205","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2014-01-05","domain_rank":8166,"first_seen":"2014-10-06T12:38:43Z","last_seen":"2025-11-03T00:12:47.594918Z","alert_count":0,"request_count":1,"received_data":271,"sent_data":457,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-11-04T11:02:06Z","timestamp":1762254126,"ip_dst":{"addr":"104.26.13.205","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"172.18.0.19","port":49488,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO External IP Address Lookup Domain (ipify .org) in TLS SNI","source":"{\"timestamp\":\"2025-11-04T11:02:06.614457+0000\",\"flow_id\":1681418982672247,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.19\",\"src_port\":49488,\"dest_ip\":\"104.26.13.205\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2047703,\"rev\":1,\"signature\":\"ET INFO External IP Address Lookup Domain (ipify .org) in TLS SNI\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"affected_product\":[\"Any\"],\"attack_target\":[\"Client_and_Server\"],\"confidence\":[\"High\"],\"created_at\":[\"2023_08_22\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Low\"],\"reviewed_at\":[\"2023_08_22\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"External_IP_Lookup\"],\"updated_at\":[\"2023_08_22\"]}},\"tls\":{\"sni\":\"api.ipify.org\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"eb1d94daa7e0344597e756a1fb6e7054\",\"string\":\"771,4865,51-43\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":5,\"bytes_toserver\":915,\"bytes_toclient\":3512,\"start\":\"2025-11-04T11:02:06.608119+0000\"}}"}]}],"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"airdrop-mmtfinance.app/assets/eleven.js","fqdn":"airdrop-mmtfinance.app","domain":"airdrop-mmtfinance.app","tld":"app"},"ip":{"addr":"104.21.56.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"e8e62fc25c364281f188a3bb03aa0784","sha1":"fdc03d3d9eeea7d0f28a59346015f55e9111ca4e","sha256":"e6b6ad3d45df2d245a0a3adc03f66c055761f02dbdbb8a696619ea23dcb112fa","sha512":"082f993db1e50ee105a52822415438623440b2b0c03bc36227095c9727a4d404663b576f98ed6d0132a006353d6e1a87645e851bfa181e0e1f6919e942c3575c","ssdeep":"98304:PATRnbjWyvNVm1dCyIxmZSQeyUiv3fVxE:PSRbjWyvNVm1dCyIxmZSQeyUiv3fVxE","tlshash":"3cf57c8073b1a079439741e494bb1501f238a85a7408c0acfbecd9f7af999c9897bf75","size":3554132,"data":"","first_seen":"2025-11-03T13:11:54.907691Z","last_seen":"2026-01-24T19:40:00.231282Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"airdrop-mmtfinance.app/","fqdn":"airdrop-mmtfinance.app","domain":"airdrop-mmtfinance.app","tld":"app"},"ip":{"addr":"104.21.56.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"f68e784a0312a878ed45aac4ceb8d1a6","sha1":"52f4c53a1debbd31d7282cbe64d6d5ad56cf078c","sha256":"cd36a991a7d553482798d4a9d5db7b10fd90e1ef140d60bf0f9ae7e936107123","sha512":"234bc9dac62b99288008582c53eb60d60a6650c10c05720454f6aa274a9e61743ca76268f64af3fe9b0f3d178bcb8855d63431d05ba940da9fc6732dd36ca491","ssdeep":"","tlshash":"37e02b286f6651f926b33595c71f7280e86000735042c801fe1cf64a4f80f1938b0fc9","size":334,"data":"","first_seen":"2025-07-21T04:20:59.807781Z","last_seen":"2026-06-04T04:08:18.207034Z","times_seen":158,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"airdrop-mmtfinance.app/","fqdn":"airdrop-mmtfinance.app","domain":"airdrop-mmtfinance.app","tld":"app"},"ip":{"addr":"104.21.56.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"76244d8526da359429886b03a7ada498","sha1":"90415cd87cc2f928fc8e16b7740dfb09f7e5bc10","sha256":"3f699786f5f750c5ee9696bce7941003b51f5e5628b55aa6ca59917195d8b490","sha512":"3ba24210155df81c4378587bf70fa4a66f8eb44e60d01deca3b32a8ccdd092d350a1fd870334d90469b750c2fc86822743811cba384e7baa95635291061c3adb","ssdeep":"","tlshash":"dcc0125970206966048e787d4ccf088ebe268412a20849c999dcd8547fb1e6c42e484c","size":184,"data":"","first_seen":"2023-09-20T06:28:52Z","last_seen":"2026-08-16T09:03:58.854852Z","times_seen":1983,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"airdrop-mmtfinance.app/","fqdn":"airdrop-mmtfinance.app","domain":"airdrop-mmtfinance.app","tld":"app"},"ip":{"addr":"104.21.56.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"297a907d4e5b4c2198915e66274d9c9a","sha1":"e0f98af49ab0f7a270e2d739436181f924449098","sha256":"0fdbc26d9d5bd7f6a4bc38acfb91fc663c57463d43a08447f1386b3354cd84de","sha512":"48487cbd59e60a259a5836fc0315243da500d617e94e06b3073f79bb834bd141c9e5cfb59c42a3c2086c920c21be5996e589d4658513cf31d95bfc5757a4a44e","ssdeep":"","tlshash":"1371bc3beb00173bdc8fb9fdced5b4c02e62497262496560691ce102b16cd7087bed88","size":3741,"data":"","first_seen":"2025-08-14T22:39:51.132287Z","last_seen":"2026-08-15T18:29:27.711588Z","times_seen":3242,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Press+Start+2P\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.74.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://airdrop-mmtfinance.app/","date":"2025-11-04T11:02:06.291Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Oct 2025 08:38:51 GMT","end":"Mon, 05 Jan 2026 08:38:50 GMT"},"fingerprint":{"sha1":"1D:8E:3A:85:91:AC:63:71:94:8B:0E:61:45:34:D9:86:AB:A6:E2:CE","sha256":"E6:93:4E:53:89:15:41:28:27:59:AA:84:50:96:96:1E:2A:98:7E:08:60:AE:68:62:AE:DD:86:AB:DB:0F:FE:2B"}}},"request":{"raw":"GET /css2?family=Press+Start+2P\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://airdrop-mmtfinance.app/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Tue, 04 Nov 2025 11:02:06 GMT\r\ndate: Tue, 04 Nov 2025 11:02:06 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1860,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"b7cad844ac5ba76f2eaa0a5f19927973","sha1":"0f619ace2a91abd4ba25e81b02b34e50708501aa","sha256":"c432858c887f02896894b1e44507b18fa1d22287d3bac0c1da9883849c63a118","sha512":"1056d64979f32cc0013a2564c64a6142439088d81b298c3da42cbd73ac308a5e0622cb5fee52c560d6e993e35eaaaea05d10226b42c65379b22a5c4252d1e632","ssdeep":"","tlshash":"043167e6052b94409b931cd373cf7e36de0e2125649184699efe1c84acbaca60391b5e","first_seen":"2025-09-17T02:54:26.564123Z","last_seen":"2026-08-16T10:42:36.970422Z","times_seen":1530,"resource_available":false,"data":null}},"time_used":195,"timings":{"blocked":88,"dns":0,"connect":9,"send":0,"wait":17,"receive":0,"ssl":78},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"airdrop-mmtfinance.app/assets/secure.php?req=ping","fqdn":"airdrop-mmtfinance.app","domain":"airdrop-mmtfinance.app","tld":"app"},"ip":{"addr":"104.21.56.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://airdrop-mmtfinance.app/","date":"2025-11-04T11:02:06.612Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"airdrop-mmtfinance.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 03 Nov 2025 16:36:27 GMT","end":"Sun, 01 Feb 2026 17:35:00 GMT"},"fingerprint":{"sha1":"6E:08:EC:59:BE:69:AD:6D:03:54:41:E9:8D:16:61:81:8D:28:C8:85","sha256":"D9:7B:A6:4B:F4:0C:2C:DD:80:D3:AD:7A:BA:7A:BD:04:60:FE:36:DA:19:BE:D5:C5:25:70:E3:5A:BA:9D:B1:6D"}}},"request":{"raw":"GET /assets/secure.php?req=ping HTTP/1.1\r\nHost: airdrop-mmtfinance.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://airdrop-mmtfinance.app/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 04 Nov 2025 11:02:07 GMT\r\ncontent-type: application/json\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PqG3odVq%2FrMl2GvsU1fSjzrsaqdEJ4qXldX1K36LCVT0If9CvuavybGyaJa0Rn%2F%2BWvJE9dTJZwGDlbJ8RTAAnU6J%2F6uwAeHIHZbwSSHzbJ6eT82gHyM%3D\"}]}\r\nset-cookie: PHPSESSID=livd0lrdaa9ue9ooo3tl0rh6ou; Path=/\r\nvary: Accept-Encoding\r\npriority: u=4,i=?0\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\npragma: no-cache\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, PUT, PATCH, DELETE, OPTIONS\r\naccess-control-allow-headers: Content-Type, Cache-Control\r\ncache-control: no-cache\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 99939e03489049c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":14,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"594d96ea0628a6a87187b8e17a7fa4b0","sha1":"5fbf4e5362196240e62d4e192bd93777898755b2","sha256":"cb100e693b55b36a08dc2b04eb312835069a4f2fc406ff374b21313b1f56b5cd","sha512":"c92fac11849dbd07dd610982d2d2e49f7aa59ec6048782145992bed639b1a518c539d9603bea6b79e4f29aa745e301923edaa9d96e1dec3ce27a8a2f4c2f2f4c","ssdeep":"","tlshash":"d96000330c0c0330030c0cc0300fcf030cc0c0c00000fcc000000300c300c000c00300","first_seen":"2025-10-03T14:25:47.505502Z","last_seen":"2026-08-13T23:41:17.437933Z","times_seen":843,"resource_available":false,"data":null}},"time_used":456,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":456,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-04","alert":"Sinkholed","trigger":"airdrop-mmtfinance.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.ipify.org/?format=json","fqdn":"api.ipify.org","domain":"ipify.org","tld":"org"},"ip":{"addr":"104.26.13.205","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://airdrop-mmtfinance.app/","date":"2025-11-04T11:02:06.613Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ipify.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 03 Nov 2025 07:43:05 GMT","end":"Sun, 01 Feb 2026 08:42:55 GMT"},"fingerprint":{"sha1":"BE:9D:76:9E:9E:2C:F2:8E:38:C4:E9:42:11:6A:45:24:E9:59:0A:5F","sha256":"D1:C5:0F:C4:11:DF:FE:54:9C:EF:8C:40:56:6C:79:4E:F3:E6:0B:24:15:B8:E1:60:2B:49:C2:41:96:C9:79:83"}}},"request":{"raw":"GET /?format=json HTTP/1.1\r\nHost: api.ipify.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://airdrop-mmtfinance.app/\r\nOrigin: https://airdrop-mmtfinance.app\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 04 Nov 2025 11:02:06 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\naccess-control-allow-origin: *\r\nvary: Origin\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 99939e03696cb4ee-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"7d69c71af0f191e9a72db6153f8018d1","sha1":"f67c5f2887bc05654b47f76e9621e53a4091aed1","sha256":"5bac6e06cf0e1ad38c55f9f9d12122272bf4b8157877629fe68cd33fe2133c65","sha512":"fdf43a8f3d843fe9008949d6709c8e2a5cd640f6101522319745f0a829f21dc8f4bd4d70ff3e2f6e1fd53ca0d2dd872bf3588c593a403071102ab28763cbdba5","ssdeep":"","tlshash":"b8700022000000208c80800eca0a032223a0000ac20a00088e800b2288a0b380282032","first_seen":"2023-04-05T02:54:03Z","last_seen":"2026-06-07T07:51:18.251001Z","times_seen":93313,"resource_available":false,"data":null}},"time_used":133,"timings":{"blocked":13,"dns":1,"connect":1,"send":0,"wait":101,"receive":0,"ssl":13},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"airdrop-mmtfinance.app/assets/modal1and2/wallet_connect.png","fqdn":"airdrop-mmtfinance.app","domain":"airdrop-mmtfinance.app","tld":"app"},"ip":{"addr":"104.21.56.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://airdrop-mmtfinance.app/","date":"2025-11-04T11:02:06.686Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"airdrop-mmtfinance.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 03 Nov 2025 16:36:27 GMT","end":"Sun, 01 Feb 2026 17:35:00 GMT"},"fingerprint":{"sha1":"6E:08:EC:59:BE:69:AD:6D:03:54:41:E9:8D:16:61:81:8D:28:C8:85","sha256":"D9:7B:A6:4B:F4:0C:2C:DD:80:D3:AD:7A:BA:7A:BD:04:60:FE:36:DA:19:BE:D5:C5:25:70:E3:5A:BA:9D:B1:6D"}}},"request":{"raw":"GET /assets/modal1and2/wallet_connect.png HTTP/1.1\r\nHost: airdrop-mmtfinance.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://airdrop-mmtfinance.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 04 Nov 2025 11:02:06 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 01 Nov 2025 22:33:28 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AXJSM2NTOk2WypdQWRbO00GbDfphcOP7GhMFRBxUik90ZTTewEVELLhL8hDXsw9cQIlpcRIK8VVSQ6wDqEBlxMvY40xIdVJFT%2BnTTsAR22a%2F4eoLTSI%3D\"}]}\r\nvary: Accept-Encoding\r\netag: W/\"69068ab8-7f0\"\r\nexpires: Thu, 04 Dec 2025 11:02:06 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\ncf-ray: 99939e03c8c549c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2032,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 136 x 84, 8-bit/color RGBA, non-interlaced","md5":"0260261695464c62c4dc4b69be6e4b91","sha1":"97dbc54cef588e9b2c15312f830784d53ba55f73","sha256":"7e06b76629235ff6ccedc59b3e5419ffac46616388c6810d5e4ef6097669bcd2","sha512":"ac0e4a981f4542357d1d250fc2136997da2422a0e247df2703799fba5491896b4354d5a432a9671c8b57622c7cfa863ccf3f5a7a4a003aecb0cb17a9f14bae09","ssdeep":"","tlshash":"f4410a5aad5941687d3ecfb24f5bb3daa040a09c030f942d1cd2f4253dcde2cba82567","first_seen":"2025-05-28T10:21:28.941282Z","last_seen":"2026-03-11T00:02:21.80752Z","times_seen":103,"resource_available":false,"data":null}},"time_used":70,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":70,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-04","alert":"Sinkholed","trigger":"airdrop-mmtfinance.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"airdrop-mmtfinance.app/assets/eleven.js","fqdn":"airdrop-mmtfinance.app","domain":"airdrop-mmtfinance.app","tld":"app"},"ip":{"addr":"104.21.56.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://airdrop-mmtfinance.app/","date":"2025-11-04T11:02:05.139Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"airdrop-mmtfinance.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 03 Nov 2025 16:36:27 GMT","end":"Sun, 01 Feb 2026 17:35:00 GMT"},"fingerprint":{"sha1":"6E:08:EC:59:BE:69:AD:6D:03:54:41:E9:8D:16:61:81:8D:28:C8:85","sha256":"D9:7B:A6:4B:F4:0C:2C:DD:80:D3:AD:7A:BA:7A:BD:04:60:FE:36:DA:19:BE:D5:C5:25:70:E3:5A:BA:9D:B1:6D"}}},"request":{"raw":"GET /assets/eleven.js HTTP/1.1\r\nHost: airdrop-mmtfinance.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://airdrop-mmtfinance.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 04 Nov 2025 11:02:05 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sat, 01 Nov 2025 22:33:28 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2aU4epai1D9YfCur6ZNvf0rLXEXbCuMEj%2BaNqeaOPC8rQkyiHcsgKsMWM%2BkWEQWND7NxM682Yz3UClj3uY50CKrxgPO%2BV2OT7DyQRN5gnvRLw%2F%2FM6hY%3D\"}]}\r\nvary: Accept-Encoding\r\netag: W/\"69068ab8-363b54\"\r\nexpires: Tue, 04 Nov 2025 23:02:05 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\ncf-ray: 99939dfa1f4249c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3554132,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65534), with no line terminators","md5":"663dba852b95f1faf2bec36591dfb29a","sha1":"6b43cfbd45ddae62e263c56ae4021f9978505b35","sha256":"32c77181636921711220e4534fb437a26246d7518645396994dabf3c6dfe180c","sha512":"7240ad4245bbf58bd234c30f701aefa9450ae8fd56c6852eea16170e42f88898de5e2cdbc1a294197768b7e8a81930fc8555c86b7af8e3670eb6413e0be7be0c","ssdeep":"24576:PAvrLk2kEiQZBQobL0HwTPM+HM4ZWyguM:PAvrw2kEzZBQ+L0HwbXdZWyvM","tlshash":"5d254c9073a5b06243da14e4187b1006f279bc68744d80acf69cecfb7da9d84967bf39","first_seen":"2025-11-03T13:11:54.830099Z","last_seen":"2026-01-24T19:40:00.222854Z","times_seen":4,"resource_available":false,"data":null}},"time_used":254,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":79,"receive":175,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-04","alert":"Sinkholed","trigger":"airdrop-mmtfinance.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"airdrop-mmtfinance.app/coin-5-1.png","fqdn":"airdrop-mmtfinance.app","domain":"airdrop-mmtfinance.app","tld":"app"},"ip":{"addr":"104.21.56.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://airdrop-mmtfinance.app/","date":"2025-11-04T11:02:05.149Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"airdrop-mmtfinance.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 03 Nov 2025 16:36:27 GMT","end":"Sun, 01 Feb 2026 17:35:00 GMT"},"fingerprint":{"sha1":"6E:08:EC:59:BE:69:AD:6D:03:54:41:E9:8D:16:61:81:8D:28:C8:85","sha256":"D9:7B:A6:4B:F4:0C:2C:DD:80:D3:AD:7A:BA:7A:BD:04:60:FE:36:DA:19:BE:D5:C5:25:70:E3:5A:BA:9D:B1:6D"}}},"request":{"raw":"GET /coin-5-1.png HTTP/1.1\r\nHost: airdrop-mmtfinance.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://airdrop-mmtfinance.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 04 Nov 2025 11:02:05 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 03 Nov 2025 18:28:14 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZFoIklLHN1KvBduuB%2FiFe07OI3%2B0cOV44DMOK%2FGKPgQW2UIvOHUzwctYCGA87YCwYQt3Rv89aXCQ1pX7PGzpFdpvtr%2FwCHIAxXKqr2mS%2Ff2W9LAqPW8%3D\"}]}\r\nvary: Accept-Encoding\r\netag: W/\"6908f43e-2ae2\"\r\nexpires: Thu, 04 Dec 2025 11:02:05 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\ncf-ray: 99939dfa1f4b49c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10978,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 128 x 157, 8-bit colormap, non-interlaced","md5":"700243f78a79a7ec51a98ba237fa84a4","sha1":"2349a9d7177a857cbe14e1ce3fb16861e6704113","sha256":"13995f77e7edc11bb39cc7b84b21d393162117ca835d491241cfb2342f8d2c4e","sha512":"a8e4e110e213b16d1d8f01cae56ca2ee50d3f34db7e4f717b3e33c958d2214a3d5d9fa4d0733f9fac2cf6d0cab55d7af85b04ec61551b48af8081d83feb82ff9","ssdeep":"192:6OcYPjZVSdwD7Pn5g/JzRX9WQ56dH5khLhJm3vgB2s0QmAGC6pXjZU:nZ902fkRXF56dH2m3oB2sQG","tlshash":"df32bfcc54a1992d4163ea9cdf010085350d4f4edbe8e9acde79bad743fb251874e09a","first_seen":"2025-11-04T11:02:36.633347Z","last_seen":"2025-11-13T18:57:32.787828Z","times_seen":3,"resource_available":false,"data":null}},"time_used":79,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":73,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-04","alert":"Sinkholed","trigger":"airdrop-mmtfinance.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcCo3FwrK3iLTcviYwYZ90A2N58.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://airdrop-mmtfinance.app/","date":"2025-11-04T11:02:06.699Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Oct 2025 08:38:51 GMT","end":"Mon, 05 Jan 2026 08:38:50 GMT"},"fingerprint":{"sha1":"89:73:B0:EF:F1:BA:6A:DA:6C:2C:87:70:0D:17:11:82:30:E9:13:68","sha256":"96:8D:5D:62:3A:3A:D6:CD:06:9A:CE:52:F4:2D:91:F9:66:13:40:F4:5F:9B:88:3D:55:04:79:E3:14:96:51:FA"}}},"request":{"raw":"GET /s/inter/v20/UcCo3FwrK3iLTcviYwYZ90A2N58.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://airdrop-mmtfinance.app\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 72964\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 30 Oct 2025 09:34:45 GMT\r\nexpires: Fri, 30 Oct 2026 09:34:45 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 09 Sep 2025 18:33:18 GMT\r\ncontent-type: font/woff2\r\nage: 437241\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":72964,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 72964, version 1.0","md5":"91247c94dcda6ff52b445d71d6bbfb81","sha1":"ad2f62363ed047b430b91f32afa31df51fcd7c5e","sha256":"6a3c3e024b31eeacbf1f19c3c7be78612d91c623186f64035a50038241dad4f9","sha512":"a12dcac84e9f9ae02df3aabe29d76994281cd1005edca471194605cfcd6a0456eec872fd28c63c72ae124804d0b47d8377048caae49c40b0a18b5d6be4d6213f","ssdeep":"768:zbw+rLBkMxbCkupj4Y69/Yr71+j9pWiKahMM6+AWEqXB0oGuNGku+QCcIKE205C7:zbw+iwuS/iZWeaO1zP1/9Esvf8fXnm1","tlshash":"8f6302244e3c50c2a54d33aa286940f6f6e79c75b2b79ba4a69c589cd410f329cdfdc4","first_seen":"2025-05-29T18:51:13.223047Z","last_seen":"2026-08-16T12:23:02.056519Z","times_seen":32091,"resource_available":false,"data":null}},"time_used":208,"timings":{"blocked":75,"dns":0,"connect":20,"send":0,"wait":21,"receive":37,"ssl":51},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"airdrop-mmtfinance.app/coin-4-1.png","fqdn":"airdrop-mmtfinance.app","domain":"airdrop-mmtfinance.app","tld":"app"},"ip":{"addr":"104.21.56.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://airdrop-mmtfinance.app/","date":"2025-11-04T11:02:05.148Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"airdrop-mmtfinance.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 03 Nov 2025 16:36:27 GMT","end":"Sun, 01 Feb 2026 17:35:00 GMT"},"fingerprint":{"sha1":"6E:08:EC:59:BE:69:AD:6D:03:54:41:E9:8D:16:61:81:8D:28:C8:85","sha256":"D9:7B:A6:4B:F4:0C:2C:DD:80:D3:AD:7A:BA:7A:BD:04:60:FE:36:DA:19:BE:D5:C5:25:70:E3:5A:BA:9D:B1:6D"}}},"request":{"raw":"GET /coin-4-1.png HTTP/1.1\r\nHost: airdrop-mmtfinance.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://airdrop-mmtfinance.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 04 Nov 2025 11:02:05 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 03 Nov 2025 18:28:14 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Yb%2F9m3oCqSJT9sB7OCg%2Bu1oShQlZHGcFaBtBmL%2F2%2BBw9zPPqNU6mX47gO8gyKbpZMepnuGNXw0hNK6C99QFuAGYSrLJuDfiKIoKwbL8YTsGMA6qDbDU%3D\"}]}\r\nvary: Accept-Encoding\r\netag: W/\"6908f43e-1a9d\"\r\nexpires: Thu, 04 Dec 2025 11:02:05 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\ncf-ray: 99939dfa1f4a49c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6813,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 128 x 128, 8-bit colormap, non-interlaced","md5":"8905e3e5a7bf9ae9ba52b1ced85bd936","sha1":"0636bada22d417885dc842087ee43842fc9152bc","sha256":"88dfa802d6cb40a76c57d3fbd3b9c11b0b4407bdfe63c09347509aef1cdf0319","sha512":"a2a0c7c5c5814e15be0666599d22db8da1a1937ccd6acb78d97be8841bfd9b5d8bde9e2edd70f8458166f8909a35afc9e1cfb367c3eace77c2d7da0efca44539","ssdeep":"192:LxNeSc8Cfw5ScorH/BvX+2LGJA0ZMU7JCic3oXmJxYv4:LxbX8ZzJfA+Q7Aj3o4ev4","tlshash":"04e19ff343d90d12384e3aca012f47725681a70895a40e4e965bc15cb701dd9b67eb72","first_seen":"2025-11-04T11:02:36.636847Z","last_seen":"2025-11-13T18:57:32.806112Z","times_seen":3,"resource_available":false,"data":null}},"time_used":78,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":73,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-04","alert":"Sinkholed","trigger":"airdrop-mmtfinance.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Fira+Code:wght@300..700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.74.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://airdrop-mmtfinance.app/","date":"2025-11-04T11:02:06.292Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Oct 2025 08:38:51 GMT","end":"Mon, 05 Jan 2026 08:38:50 GMT"},"fingerprint":{"sha1":"1D:8E:3A:85:91:AC:63:71:94:8B:0E:61:45:34:D9:86:AB:A6:E2:CE","sha256":"E6:93:4E:53:89:15:41:28:27:59:AA:84:50:96:96:1E:2A:98:7E:08:60:AE:68:62:AE:DD:86:AB:DB:0F:FE:2B"}}},"request":{"raw":"GET /css2?family=Fira+Code:wght@300..700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://airdrop-mmtfinance.app/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Tue, 04 Nov 2025 11:02:06 GMT\r\ndate: Tue, 04 Nov 2025 11:02:06 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2425,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"364d80757a1c7c81dccbf8d6caeb7ae7","sha1":"abf8e3b38eb2295c6378231fb2ecabae5ecd4b2f","sha256":"17babf90f4bae4a92ef7f4f24552b88b41c391b89328f46faa49286f5c2c2c6a","sha512":"6a0c6519a03917cedd40ecfe91e6cb8d30a42a61c005244bf8c09934a12132ba0fe963dd6e5c77a9baa19944cadb274ecf81e1780697acc5f3e22ae85b02c131","ssdeep":"","tlshash":"1c41aaa601a79400afa30cc177cebe779e1e2198b041c6b95efd08989ce7d32435472e","first_seen":"2025-09-17T03:18:47.282954Z","last_seen":"2026-08-15T22:47:35.645266Z","times_seen":908,"resource_available":false,"data":null}},"time_used":180,"timings":{"blocked":78,"dns":0,"connect":20,"send":0,"wait":17,"receive":0,"ssl":61},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Inter:ital,opsz,wght@0,14..32,100..900;1,14..32,100..900\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.74.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://airdrop-mmtfinance.app/","date":"2025-11-04T11:02:06.285Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Oct 2025 08:38:51 GMT","end":"Mon, 05 Jan 2026 08:38:50 GMT"},"fingerprint":{"sha1":"1D:8E:3A:85:91:AC:63:71:94:8B:0E:61:45:34:D9:86:AB:A6:E2:CE","sha256":"E6:93:4E:53:89:15:41:28:27:59:AA:84:50:96:96:1E:2A:98:7E:08:60:AE:68:62:AE:DD:86:AB:DB:0F:FE:2B"}}},"request":{"raw":"GET /css2?family=Inter:ital,opsz,wght@0,14..32,100..900;1,14..32,100..900\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://airdrop-mmtfinance.app/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Tue, 04 Nov 2025 11:02:06 GMT\r\ndate: Tue, 04 Nov 2025 11:02:06 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4887,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"3fd96ba77783845730c343cf00ac7a93","sha1":"bc4f7f4f71aeae387232155c55c4f031c5f3f769","sha256":"27b95b2fcbc857ba25f7e5a707c5c4c06c5cf93415519b7669c19f4045edca37","sha512":"20b137cf9c61842c7bad62dd6c36125833022552379ad97324dbee2c2e9cb0303b17a9aee813ea2bcdbb68541c8c6edbfecfcfb2858cf27c2cff480d756d80cd","ssdeep":"96:aYg4aMzqYg4aybFZHYg4agkYg4aUJ3vYg4aERYg4aYGJc+uTYg4aR6NDO4a3qO4L:vywfydyGy63gy/yFVyR73xpmj3U8fHN","tlshash":"37a1ed91006f9104ea431dd627cf7e32ad8e51956082e27d6ffd2dca6cdbd23122874c","first_seen":"2025-09-10T21:50:06.177565Z","last_seen":"2026-08-16T12:35:48.839335Z","times_seen":20868,"resource_available":false,"data":null}},"time_used":190,"timings":{"blocked":75,"dns":6,"connect":7,"send":0,"wait":37,"receive":0,"ssl":62},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"airdrop-mmtfinance.app/coin-2-1.png","fqdn":"airdrop-mmtfinance.app","domain":"airdrop-mmtfinance.app","tld":"app"},"ip":{"addr":"104.21.56.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://airdrop-mmtfinance.app/","date":"2025-11-04T11:02:05.145Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"airdrop-mmtfinance.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 03 Nov 2025 16:36:27 GMT","end":"Sun, 01 Feb 2026 17:35:00 GMT"},"fingerprint":{"sha1":"6E:08:EC:59:BE:69:AD:6D:03:54:41:E9:8D:16:61:81:8D:28:C8:85","sha256":"D9:7B:A6:4B:F4:0C:2C:DD:80:D3:AD:7A:BA:7A:BD:04:60:FE:36:DA:19:BE:D5:C5:25:70:E3:5A:BA:9D:B1:6D"}}},"request":{"raw":"GET /coin-2-1.png HTTP/1.1\r\nHost: airdrop-mmtfinance.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://airdrop-mmtfinance.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 04 Nov 2025 11:02:05 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 03 Nov 2025 18:28:14 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=myPHcbSVQIz1JzVdHNbDKL9LYZHWIDsC7bw%2F1EtSMGKLj5B%2BtL9UpL59pC3w%2B2BIQsRFnW1Mb1LsdlVpRMJz3R6JgPeVC2iV%2BPhm%2FMpmAnk%2FwxEg%2FzA%3D\"}]}\r\nvary: Accept-Encoding\r\netag: W/\"6908f43e-165e\"\r\nexpires: Thu, 04 Dec 2025 11:02:05 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\ncf-ray: 99939dfa1f4749c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5726,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 128 x 128, 8-bit colormap, non-interlaced","md5":"b6e2d0055f984f7da94faeeb643b4c83","sha1":"bcb74566e28ca5b71eb1acd142c6dbe8b9c88487","sha256":"c42be4c1898ab29f4b65c99075913e0a8aeb23e3b68f1ea87ecf1d3c19265350","sha512":"0ae31bca1d4e8a4066443cfb81462de0a508446610d2aa798c036c1e72b29a4ca722bb4d4aa62b810ce477faa54e7d0aaeb6ca290c4be508d3fd5b942c926c49","ssdeep":"96:tDt5CzHAE0SS3e7OZJZCrkmQ+DHd21dvd8jzz5pZot3dKHsv1hOdVYyaqRsL:53U0SSLZTuHA1v8SLKM9hOdVfq","tlshash":"7cc19ed03a15a8858039fbd7b14b094d7d627ec5771bf8fac0ca7a382dbd92f4024981","first_seen":"2025-11-04T11:02:36.641093Z","last_seen":"2025-11-13T18:57:32.712788Z","times_seen":3,"resource_available":false,"data":null}},"time_used":83,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":83,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-04","alert":"Sinkholed","trigger":"airdrop-mmtfinance.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"airdrop-mmtfinance.app/coin-1-1.png","fqdn":"airdrop-mmtfinance.app","domain":"airdrop-mmtfinance.app","tld":"app"},"ip":{"addr":"104.21.56.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://airdrop-mmtfinance.app/","date":"2025-11-04T11:02:05.143Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"airdrop-mmtfinance.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 03 Nov 2025 16:36:27 GMT","end":"Sun, 01 Feb 2026 17:35:00 GMT"},"fingerprint":{"sha1":"6E:08:EC:59:BE:69:AD:6D:03:54:41:E9:8D:16:61:81:8D:28:C8:85","sha256":"D9:7B:A6:4B:F4:0C:2C:DD:80:D3:AD:7A:BA:7A:BD:04:60:FE:36:DA:19:BE:D5:C5:25:70:E3:5A:BA:9D:B1:6D"}}},"request":{"raw":"GET /coin-1-1.png HTTP/1.1\r\nHost: airdrop-mmtfinance.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://airdrop-mmtfinance.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 04 Nov 2025 11:02:05 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 03 Nov 2025 18:28:14 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=E2uv7IDHwdQqcgYqqKUoB9naBZ%2FyjhgXEttbO0tZOyC%2BZ0hBP6abZfXa76N3%2BGBFuuksKZgMFNWXiUpazrywZeKbS9j2pNMIZeL7e7fvUfU5gHYe2dM%3D\"}]}\r\nvary: Accept-Encoding\r\netag: W/\"6908f43e-1b48\"\r\nexpires: Thu, 04 Dec 2025 11:02:05 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\ncf-ray: 99939dfa1f4649c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6984,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 128 x 128, 8-bit colormap, non-interlaced","md5":"d09565131abfdec1fac9b05212142599","sha1":"ad9b2c5a8b7c1b5d94cdda597ea93f6c73d6b9ea","sha256":"492999198c4fbd2b643c293c3ce676d507064e531bf69d903d242830b2247bfd","sha512":"ed38b8cfe76ab6a7b695d6c0c3b9ec6eeac50ffd693365e1307531ba63b073d00e4d52d7dc738a559a730c6b37cfb2f0fad2badcedc9109794710125e8e487a5","ssdeep":"192:SHXg9Sdi82WpOUKgOFrYz96BVpFC4syBf8t9q:S3DdoJULv6B8qBUtc","tlshash":"52e19fab149b5679dac535947842c0d909d11cbf3f72b0be2403bb15eb7e171b5aa070","first_seen":"2025-11-04T11:02:36.64327Z","last_seen":"2025-11-13T18:57:32.802874Z","times_seen":3,"resource_available":false,"data":null}},"time_used":78,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":73,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-04","alert":"Sinkholed","trigger":"airdrop-mmtfinance.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"airdrop-mmtfinance.app/borna_semibold_webfont-s.p.62b1a72d.woff","fqdn":"airdrop-mmtfinance.app","domain":"airdrop-mmtfinance.app","tld":"app"},"ip":{"addr":"104.21.56.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://airdrop-mmtfinance.app/","date":"2025-11-04T11:02:05.340Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"airdrop-mmtfinance.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 03 Nov 2025 16:36:27 GMT","end":"Sun, 01 Feb 2026 17:35:00 GMT"},"fingerprint":{"sha1":"6E:08:EC:59:BE:69:AD:6D:03:54:41:E9:8D:16:61:81:8D:28:C8:85","sha256":"D9:7B:A6:4B:F4:0C:2C:DD:80:D3:AD:7A:BA:7A:BD:04:60:FE:36:DA:19:BE:D5:C5:25:70:E3:5A:BA:9D:B1:6D"}}},"request":{"raw":"GET /borna_semibold_webfont-s.p.62b1a72d.woff HTTP/1.1\r\nHost: airdrop-mmtfinance.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://airdrop-mmtfinance.app/c7cf0502a5a04b97.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 04 Nov 2025 11:02:05 GMT\r\ncontent-type: font/woff\r\ncontent-length: 21388\r\nlast-modified: Mon, 03 Nov 2025 18:28:14 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JGKguSpjyGQg00JtERDxNX6GCaDOPKmcQQAtrSCbyBGz4%2F%2B%2FzDpn4JbEXF7gVRIG69zL4yt%2BOXfDob3p9fY%2BY65jKKJJAlifnT1u2UdZ3lslu2L7ulM%3D\"}]}\r\netag: \"6908f43e-538c\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 99939dfb5f7d49c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21388,"size_decoded":0,"mime_type":"font/woff","magic":"Web Open Font Format, TrueType, length 21388, version 1.0","md5":"f0ee9443e7da9b4b57580a85f543ae68","sha1":"4cd41e5385efaa59b97575bd1339632c13d043c8","sha256":"a1e1b04d2242811f2a99c561c77f7fd8ef79c10b3d2887b95b3bc65d0fe56ccb","sha512":"ac2224400f0f54d5dcba0f6743c9259a1cf43645032b849b81e13194d8be6498b69cb9ef8aaf6af57fe1c93ec027585ddc723bea5cd419d7d41d30f385c6870a","ssdeep":"384:uuRPf/tv5FGIk24QLjsVJdq8ZEGDhBBRVbHaHVkkKl/JUqlrR7bFUaSr:uS/tv58z23LyHqtkBvVDy1hqld7qaSr","tlshash":"41a2e0b918b66954c0d4d0faf44a3bc0a8e37dc0fdbdc844185b8cae25653b2a70e90e","first_seen":"2025-11-04T11:02:36.645665Z","last_seen":"2025-11-13T18:57:32.816582Z","times_seen":3,"resource_available":false,"data":null}},"time_used":64,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":27,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-04","alert":"Sinkholed","trigger":"airdrop-mmtfinance.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"airdrop-mmtfinance.app/settings.json","fqdn":"airdrop-mmtfinance.app","domain":"airdrop-mmtfinance.app","tld":"app"},"ip":{"addr":"104.21.56.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://airdrop-mmtfinance.app/","date":"2025-11-04T11:02:06.264Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"airdrop-mmtfinance.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 03 Nov 2025 16:36:27 GMT","end":"Sun, 01 Feb 2026 17:35:00 GMT"},"fingerprint":{"sha1":"6E:08:EC:59:BE:69:AD:6D:03:54:41:E9:8D:16:61:81:8D:28:C8:85","sha256":"D9:7B:A6:4B:F4:0C:2C:DD:80:D3:AD:7A:BA:7A:BD:04:60:FE:36:DA:19:BE:D5:C5:25:70:E3:5A:BA:9D:B1:6D"}}},"request":{"raw":"GET /settings.json HTTP/1.1\r\nHost: airdrop-mmtfinance.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://airdrop-mmtfinance.app/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 04 Nov 2025 11:02:06 GMT\r\ncontent-type: application/json\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EbtCGVnH0nCu17hOmgYivtPTgEA1wQ6QzteWhO8nMip7PTlyTxgcwUvl%2F6jPA%2BLUdJpLjjhtuJCScmljz0crTh65g5oYmJAzqrEtOm7v5gxh7KRyBLg%3D\"}]}\r\nlast-modified: Mon, 03 Nov 2025 16:06:02 GMT\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"6908d2ea-344\"\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\ncf-ray: 99939e01284e49c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":836,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"65fd41b753c29e2bb5326624209297f3","sha1":"f25db1d06c32f4d79b3c19afe9d06039b0b6f6b6","sha256":"69f2d9522a3638d76ccd0e482f7cf2ddf5717091e14488c5d982c8fdb3e3f136","sha512":"6d362a922feae32e353cfef95555b5a15d7d18fd46164654a4902632c189118519beb6c52d3e8d2503ae9c6a7b2c75ef8d512be40883e678b46b8816c75ecb9b","ssdeep":"","tlshash":"c801ce099d91482be6c90528b15e921509156d67cb543d606f1b5028ab2e6af0f727cd","first_seen":"2025-11-04T11:02:36.647991Z","last_seen":"2025-11-04T11:02:36.647991Z","times_seen":1,"resource_available":false,"data":null}},"time_used":66,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":66,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-04","alert":"Sinkholed","trigger":"airdrop-mmtfinance.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"airdrop-mmtfinance.app/settings.json","fqdn":"airdrop-mmtfinance.app","domain":"airdrop-mmtfinance.app","tld":"app"},"ip":{"addr":"104.21.56.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://airdrop-mmtfinance.app/","date":"2025-11-04T11:02:06.614Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"airdrop-mmtfinance.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 03 Nov 2025 16:36:27 GMT","end":"Sun, 01 Feb 2026 17:35:00 GMT"},"fingerprint":{"sha1":"6E:08:EC:59:BE:69:AD:6D:03:54:41:E9:8D:16:61:81:8D:28:C8:85","sha256":"D9:7B:A6:4B:F4:0C:2C:DD:80:D3:AD:7A:BA:7A:BD:04:60:FE:36:DA:19:BE:D5:C5:25:70:E3:5A:BA:9D:B1:6D"}}},"request":{"raw":"GET /settings.json HTTP/1.1\r\nHost: airdrop-mmtfinance.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://airdrop-mmtfinance.app/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 04 Nov 2025 11:02:06 GMT\r\ncontent-type: application/json\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xRVHUOPFtFkOp5bK3l0bBKoirXxt%2FlakUyVrQBSbCBkMYWQTdyfWdUTljJ4YR3%2BMmb54fhv1oelzsZXum5rLpxYNSof8PwI00H%2F6xGqvesZmf7smwfM%3D\"}]}\r\nlast-modified: Mon, 03 Nov 2025 16:06:02 GMT\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"6908d2ea-344\"\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\ncf-ray: 99939e03489149c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":836,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"65fd41b753c29e2bb5326624209297f3","sha1":"f25db1d06c32f4d79b3c19afe9d06039b0b6f6b6","sha256":"69f2d9522a3638d76ccd0e482f7cf2ddf5717091e14488c5d982c8fdb3e3f136","sha512":"6d362a922feae32e353cfef95555b5a15d7d18fd46164654a4902632c189118519beb6c52d3e8d2503ae9c6a7b2c75ef8d512be40883e678b46b8816c75ecb9b","ssdeep":"","tlshash":"c801ce099d91482be6c90528b15e921509156d67cb543d606f1b5028ab2e6af0f727cd","first_seen":"2025-11-04T11:02:36.647991Z","last_seen":"2025-11-04T11:02:36.647991Z","times_seen":1,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-04","alert":"Sinkholed","trigger":"airdrop-mmtfinance.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"airdrop-mmtfinance.app/","fqdn":"airdrop-mmtfinance.app","domain":"airdrop-mmtfinance.app","tld":"app"},"ip":{"addr":"104.21.56.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-11-04T11:02:04.753Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"airdrop-mmtfinance.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 03 Nov 2025 16:36:27 GMT","end":"Sun, 01 Feb 2026 17:35:00 GMT"},"fingerprint":{"sha1":"6E:08:EC:59:BE:69:AD:6D:03:54:41:E9:8D:16:61:81:8D:28:C8:85","sha256":"D9:7B:A6:4B:F4:0C:2C:DD:80:D3:AD:7A:BA:7A:BD:04:60:FE:36:DA:19:BE:D5:C5:25:70:E3:5A:BA:9D:B1:6D"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: airdrop-mmtfinance.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 04 Nov 2025 11:02:04 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\nlast-modified: Mon, 03 Nov 2025 18:28:40 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=f%2B5JmhOoRcRt5HupT%2FcivYMwNI%2FgMOkbIy9vcVbsMNK3bihydS7bE5QUvBT2vDDodG3dA0IqfF4kaJPoQmzI66xn61pIl3%2F6BXfE7IcrE6kP9jfo\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 99939df80d055697-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"React","description":"React is an open-source JavaScript library for building user interfaces or UI components.","website":"https://reactjs.org","common_platform_enumeration":"cpe:2.3:a:facebook:react:*:*:*:*:*:*:*:*","icon":"React.svg","categories":["JavaScript frameworks"]}],"data":{"size":14817,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (14036)","md5":"a0ee8398b8d1d7e01625eb89d66ed609","sha1":"ba0d37e72968398153993bfb5863a043b7af8a6c","sha256":"e0588897eae00bbb7783525795f53d8ca289152221e9f8582e037d1485dd95f9","sha512":"180decfa467b933b9bf73cd1c0a8e62d31b71c3da7adf9c40352d5295cf951bbeefc52a74fc37e87b11f627c985289df748ede4abfa1e7d9744630206f9b3e91","ssdeep":"384:zC7eHONkoy/LdwhMXXe/uyuks4FEnNF2yiMkAozoCms:eSHONkoy/LwMXXe/uyuksGE72yi9vzoU","tlshash":"5c621934a700033f88179decee94fa866957f912d2061c5c766d928773dfc3486baa4b","first_seen":"2025-11-04T11:02:36.650056Z","last_seen":"2025-11-04T11:02:36.650056Z","times_seen":1,"resource_available":false,"data":null}},"time_used":189,"timings":{"blocked":54,"dns":38,"connect":1,"send":0,"wait":77,"receive":0,"ssl":17},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-04","alert":"Sinkholed","trigger":"airdrop-mmtfinance.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"airdrop-mmtfinance.app/coin-3-1.png","fqdn":"airdrop-mmtfinance.app","domain":"airdrop-mmtfinance.app","tld":"app"},"ip":{"addr":"104.21.56.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://airdrop-mmtfinance.app/","date":"2025-11-04T11:02:05.147Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"airdrop-mmtfinance.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 03 Nov 2025 16:36:27 GMT","end":"Sun, 01 Feb 2026 17:35:00 GMT"},"fingerprint":{"sha1":"6E:08:EC:59:BE:69:AD:6D:03:54:41:E9:8D:16:61:81:8D:28:C8:85","sha256":"D9:7B:A6:4B:F4:0C:2C:DD:80:D3:AD:7A:BA:7A:BD:04:60:FE:36:DA:19:BE:D5:C5:25:70:E3:5A:BA:9D:B1:6D"}}},"request":{"raw":"GET /coin-3-1.png HTTP/1.1\r\nHost: airdrop-mmtfinance.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://airdrop-mmtfinance.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 04 Nov 2025 11:02:05 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 03 Nov 2025 18:28:14 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oCJG6uqJwNDvXDmlmR%2FVhR3tz%2BoH3eNiaxa6FzEuj3HoHroQf8ZsN4LHyiSxr8E7kqRf7cwHkS05iVAjOrzL8oUdG8mWaMmYvMhFWeS9VBKOqe%2BkvgA%3D\"}]}\r\nvary: Accept-Encoding\r\netag: W/\"6908f43e-d89\"\r\nexpires: Thu, 04 Dec 2025 11:02:05 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\ncf-ray: 99939dfa1f4849c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3465,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 128 x 128, 8-bit colormap, non-interlaced","md5":"166f7f26efcd39ef586ff0851947e9b2","sha1":"4370b56e92b08cfaaf0684b224a7551c80191758","sha256":"50c69527549293551cebdfdac3a97827c608a1ef99602ee0818d87006bac3c93","sha512":"4f337a13519d6f43d0c7728f72496c32d4c6ce0e2939be7001a0552fc71ae740fc116655cca1947698580bd7b35f3e0be71de5d75db40699befc50f07294893e","ssdeep":"","tlshash":"ab613dc8d179c7aa4f498d76569f32b119991e24031458fcdc5335acc1f28441f5e1f7","first_seen":"2025-11-04T11:02:36.652246Z","last_seen":"2025-11-13T18:57:32.805144Z","times_seen":3,"resource_available":false,"data":null}},"time_used":73,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":71,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-04","alert":"Sinkholed","trigger":"airdrop-mmtfinance.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"airdrop-mmtfinance.app/logo-icon.252199dd.svg","fqdn":"airdrop-mmtfinance.app","domain":"airdrop-mmtfinance.app","tld":"app"},"ip":{"addr":"104.21.56.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://airdrop-mmtfinance.app/","date":"2025-11-04T11:02:05.150Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"airdrop-mmtfinance.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 03 Nov 2025 16:36:27 GMT","end":"Sun, 01 Feb 2026 17:35:00 GMT"},"fingerprint":{"sha1":"6E:08:EC:59:BE:69:AD:6D:03:54:41:E9:8D:16:61:81:8D:28:C8:85","sha256":"D9:7B:A6:4B:F4:0C:2C:DD:80:D3:AD:7A:BA:7A:BD:04:60:FE:36:DA:19:BE:D5:C5:25:70:E3:5A:BA:9D:B1:6D"}}},"request":{"raw":"GET /logo-icon.252199dd.svg HTTP/1.1\r\nHost: airdrop-mmtfinance.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://airdrop-mmtfinance.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 04 Nov 2025 11:02:05 GMT\r\ncontent-type: image/svg+xml\r\nvary: accept-encoding\r\nlast-modified: Mon, 03 Nov 2025 18:28:14 GMT\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"6908f43e-206\"\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LhSy6v4nADPLW%2BLjVB828p%2FUBN7f%2BtOO%2FPQQetQgX0vl%2FR2LpZHhLhStINHRrMBx8c6Sw129cUMD54xirS%2BOtMrqkb1aRf9JwMrkXDTTe6JZdAjCjLk%3D\"}]}\r\ncf-ray: 99939dfa1f4c49c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":518,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"301d2741d1e02ead7f66bdebe8b99911","sha1":"f3fc12f74e416cab15b1ce825ab3223b3475e218","sha256":"548e08c2f077c1301519feee3a7d712354ca63121976172836760649eb07c8d5","sha512":"463b3e85e23eb75529e22dda1924a4416ec754d250ef26f299690e132ceb00de35c8cad845e558b45bf3af944372b519423d3e228efb1ca4faa2267bc4bbe3ec","ssdeep":"","tlshash":"2ef09ef020edd3b05a1496409b3c3977257321df85e450c6f05c2fadfa454d2592a99c","first_seen":"2025-11-04T11:02:36.654197Z","last_seen":"2025-11-15T23:29:04.075378Z","times_seen":5,"resource_available":false,"data":null}},"time_used":75,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":75,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-04","alert":"Sinkholed","trigger":"airdrop-mmtfinance.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"airdrop-mmtfinance.app/logo-dark.0d6d947e.svg","fqdn":"airdrop-mmtfinance.app","domain":"airdrop-mmtfinance.app","tld":"app"},"ip":{"addr":"104.21.56.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://airdrop-mmtfinance.app/","date":"2025-11-04T11:02:05.151Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"airdrop-mmtfinance.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 03 Nov 2025 16:36:27 GMT","end":"Sun, 01 Feb 2026 17:35:00 GMT"},"fingerprint":{"sha1":"6E:08:EC:59:BE:69:AD:6D:03:54:41:E9:8D:16:61:81:8D:28:C8:85","sha256":"D9:7B:A6:4B:F4:0C:2C:DD:80:D3:AD:7A:BA:7A:BD:04:60:FE:36:DA:19:BE:D5:C5:25:70:E3:5A:BA:9D:B1:6D"}}},"request":{"raw":"GET /logo-dark.0d6d947e.svg HTTP/1.1\r\nHost: airdrop-mmtfinance.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://airdrop-mmtfinance.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 04 Nov 2025 11:02:05 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Mon, 03 Nov 2025 18:28:14 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XRDMVRwVdK8oFcm8dWJfGp8C%2B0Hqi4jWgqT9JnyX6%2FzGqZSDBL0ShtJkY5AlBGddEVaeIB65gONGFRoawdk3VcZYqWvEnCToGx3rSIym95ElMO8B0lQ%3D\"}]}\r\nvary: Accept-Encoding\r\netag: W/\"6908f43e-df5\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\ncf-ray: 99939dfa1f4d49c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3573,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"b2a3a78682630719c67ba57fb66aafcd","sha1":"a4ad521af5e491215b37721d3d6d0bdc7b4b7c30","sha256":"87b99fd5485f6ef46af8e6dd2f2ad7a87f784c55fb874904dfa227c951684979","sha512":"358454b60f69bd9bb5ad9a4a9d9c358702229920f97fb9d02a309c4aebc78149eda7ea03db39b4f1bbc45c925926cdd936ffc6d3eb3f244004798d08730039f1","ssdeep":"","tlshash":"547188c4336462f4574cf7ab2b686476350215e7faa8818ff79c1d8e9b5047c09ea5c8","first_seen":"2025-11-04T11:02:36.656136Z","last_seen":"2025-11-15T23:29:04.103182Z","times_seen":5,"resource_available":false,"data":null}},"time_used":72,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":71,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-04","alert":"Sinkholed","trigger":"airdrop-mmtfinance.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"airdrop-mmtfinance.app/borna_medium_webfont-s.p.387902d1.woff","fqdn":"airdrop-mmtfinance.app","domain":"airdrop-mmtfinance.app","tld":"app"},"ip":{"addr":"104.21.56.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://airdrop-mmtfinance.app/","date":"2025-11-04T11:02:05.338Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"airdrop-mmtfinance.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 03 Nov 2025 16:36:27 GMT","end":"Sun, 01 Feb 2026 17:35:00 GMT"},"fingerprint":{"sha1":"6E:08:EC:59:BE:69:AD:6D:03:54:41:E9:8D:16:61:81:8D:28:C8:85","sha256":"D9:7B:A6:4B:F4:0C:2C:DD:80:D3:AD:7A:BA:7A:BD:04:60:FE:36:DA:19:BE:D5:C5:25:70:E3:5A:BA:9D:B1:6D"}}},"request":{"raw":"GET /borna_medium_webfont-s.p.387902d1.woff HTTP/1.1\r\nHost: airdrop-mmtfinance.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://airdrop-mmtfinance.app/c7cf0502a5a04b97.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 04 Nov 2025 11:02:05 GMT\r\ncontent-type: font/woff\r\ncontent-length: 21456\r\nlast-modified: Mon, 03 Nov 2025 18:28:14 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hwKolFrFN10J3bkbOY%2BvE6cr4OMkvirLN1z69GBUdItUYa2ka4f5qM0QVEo4%2Fak8J9ZHrDJnlLnijGIaTOD%2BwhxGPkzVpKHQhSA68czBt6zqxIUmO8s%3D\"}]}\r\netag: \"6908f43e-53d0\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 99939dfb5f7c49c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21456,"size_decoded":0,"mime_type":"font/woff","magic":"Web Open Font Format, TrueType, length 21456, version 1.0","md5":"13c93b50ca818b7b3ccd7ea40f7d47c0","sha1":"d06a50e429fac1b4034289960e05b1edaeddde39","sha256":"4485e655a635c6b406d06e43818f29abe4eeb913c774580315bfbcbbf1cb2e59","sha512":"7cd9674fe0e91af5922009e13638d447c3a409861e662d93e6fa0e889ef0e918e24fb93840145fc09307ed455d24416d6936ac1de671d90f80f57269d3101a2e","ssdeep":"384:B/uPT6qp12QPFCjuflLBgmojcDWt1ZMkltCOgvBqlrR7SYezkOLZxcR:jW3PFBNLB9q2Wt8kMZqld7SYeYkZWR","tlshash":"80a2e081456bb590d70bb5f845347819a65dfb0da47c5c3026bee6383001eb8a73dead","first_seen":"2025-11-04T11:02:36.657851Z","last_seen":"2025-11-13T18:57:32.714382Z","times_seen":3,"resource_available":false,"data":null}},"time_used":96,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":67,"receive":29,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-04","alert":"Sinkholed","trigger":"airdrop-mmtfinance.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"airdrop-mmtfinance.app/favicon.ico","fqdn":"airdrop-mmtfinance.app","domain":"airdrop-mmtfinance.app","tld":"app"},"ip":{"addr":"104.21.56.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://airdrop-mmtfinance.app/","date":"2025-11-04T11:02:06.035Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"airdrop-mmtfinance.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 03 Nov 2025 16:36:27 GMT","end":"Sun, 01 Feb 2026 17:35:00 GMT"},"fingerprint":{"sha1":"6E:08:EC:59:BE:69:AD:6D:03:54:41:E9:8D:16:61:81:8D:28:C8:85","sha256":"D9:7B:A6:4B:F4:0C:2C:DD:80:D3:AD:7A:BA:7A:BD:04:60:FE:36:DA:19:BE:D5:C5:25:70:E3:5A:BA:9D:B1:6D"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: airdrop-mmtfinance.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://airdrop-mmtfinance.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 04 Nov 2025 11:02:06 GMT\r\ncontent-type: image/x-icon\r\nvary: accept-encoding\r\nlast-modified: Mon, 03 Nov 2025 18:28:14 GMT\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"6908f43e-3c2e\"\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\npriority: u=6,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=l5Dc3VXCuXJrYNfk4eYK6BccXD%2B8KzTvYP6MP96LjlnA%2BzEKq5xSLsS%2BD6nWf%2B47W3CVm75Lw0INRgTg2ZOer45mgpRPCkraveOeRZD2BT5eRgsKYx0%3D\"}]}\r\ncf-ray: 99939dffb81a49c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15406,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 3 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel","md5":"d0e45a62090c16bd628a9fac1cb4c38a","sha1":"1c8ab3ed5768631caefa33a475a677b4033fe368","sha256":"90453d98a1c289c3982164bcbecf36a67589898f0172244b69f1e194dc7f8f5a","sha512":"53083cac3616c76792a21f2454c088cdacf83c485e5557745befedde40735cf3e6bf972536eef1a2e647b2c6d98cc7d96cfc82f9669d9ac4096ce8e53a6846e7","ssdeep":"48:7cwqsayJQWCpwwlOHGHDKafxfuoS1M31TTxL+VKSu7P4hMuXaWwaFfYck75vgyqM:73nDwpw6DV1SC1T0WBHbqfY2DM4e4","tlshash":"3f624459f5a76404ce5af3388f27c520bfddfd2ac2b794a884d67c82c4979a017821dc","first_seen":"2025-11-04T11:02:36.660161Z","last_seen":"2025-11-13T18:57:32.784456Z","times_seen":3,"resource_available":false,"data":null}},"time_used":98,"timings":{"blocked":3,"dns":0,"connect":0,"send":0,"wait":69,"receive":26,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-04","alert":"Sinkholed","trigger":"airdrop-mmtfinance.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Pixelify+Sans:wght@400..700\u0026family=Press+Start+2P\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.74.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://airdrop-mmtfinance.app/","date":"2025-11-04T11:02:06.289Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Oct 2025 08:38:51 GMT","end":"Mon, 05 Jan 2026 08:38:50 GMT"},"fingerprint":{"sha1":"1D:8E:3A:85:91:AC:63:71:94:8B:0E:61:45:34:D9:86:AB:A6:E2:CE","sha256":"E6:93:4E:53:89:15:41:28:27:59:AA:84:50:96:96:1E:2A:98:7E:08:60:AE:68:62:AE:DD:86:AB:DB:0F:FE:2B"}}},"request":{"raw":"GET /css2?family=Pixelify+Sans:wght@400..700\u0026family=Press+Start+2P\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://airdrop-mmtfinance.app/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Tue, 04 Nov 2025 11:02:06 GMT\r\ndate: Tue, 04 Nov 2025 11:02:06 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3080,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"d4e6d79c776bf8fc41c61de47e83d957","sha1":"8bc1ade7d4f4e91f3caa6d459dc1c6e3c0b05528","sha256":"fdaed61fd01a57851820b356beb641c643c8b4e699faddae0b72fa64c5d20bad","sha512":"7044230275f8f8d2e4725a69add094387aea08d50c588f7026b9c1aa00f4e576abae59e8bc05b3eb58f8601bcdee55a9ca9508200e51f6121b8a577bac04c82b","ssdeep":"","tlshash":"1851ddd5052bd040eb931cc233cf7e36ee0f21266495d8699efe18d4acbad664351b4e","first_seen":"2025-09-17T03:18:47.287526Z","last_seen":"2026-08-13T18:02:18.793894Z","times_seen":759,"resource_available":false,"data":null}},"time_used":210,"timings":{"blocked":93,"dns":1,"connect":20,"send":0,"wait":16,"receive":0,"ssl":76},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"airdrop-mmtfinance.app/assets/styles2.css","fqdn":"airdrop-mmtfinance.app","domain":"airdrop-mmtfinance.app","tld":"app"},"ip":{"addr":"104.21.56.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://airdrop-mmtfinance.app/","date":"2025-11-04T11:02:06.615Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"airdrop-mmtfinance.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 03 Nov 2025 16:36:27 GMT","end":"Sun, 01 Feb 2026 17:35:00 GMT"},"fingerprint":{"sha1":"6E:08:EC:59:BE:69:AD:6D:03:54:41:E9:8D:16:61:81:8D:28:C8:85","sha256":"D9:7B:A6:4B:F4:0C:2C:DD:80:D3:AD:7A:BA:7A:BD:04:60:FE:36:DA:19:BE:D5:C5:25:70:E3:5A:BA:9D:B1:6D"}}},"request":{"raw":"GET /assets/styles2.css HTTP/1.1\r\nHost: airdrop-mmtfinance.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://airdrop-mmtfinance.app/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 04 Nov 2025 11:02:06 GMT\r\ncontent-type: text/css\r\nlast-modified: Sat, 01 Nov 2025 22:33:28 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tbadKnL%2BkWbHHW77IHyMz8EEJT0LiVLyZDPRjxFmE2V7X5WNiZ5Jbx9NVgcyZAPuTRaoLCJtNeym22uZpe6MwZa3e7%2BX0mrHhY1pNxroiCtlsqXygWA%3D\"}]}\r\nvary: Accept-Encoding\r\netag: W/\"69068ab8-514f\"\r\nexpires: Tue, 04 Nov 2025 23:02:06 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\ncf-ray: 99939e03489249c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":20815,"size_decoded":0,"mime_type":"text/css","magic":"assembler source, ASCII text","md5":"26a98be97c73ea443515cf62f698e0f4","sha1":"5ffde5d1a86eed9e06d518413577a1f9edd758a1","sha256":"8d872130fb28672c251f0eb6993cf5f4f193a9c4b8bfebb7b1906c1e836e4dc6","sha512":"488d74b767ebc83bff259a6a505038030dc3f815355dfc74effde90bb8744a348995cf19327753357b72383b06f1efb4154cb2ea25f0ba79d3ae05517d983082","ssdeep":"384:5IZwMnVFsSOfphgPXZ73GI0+AswSgCqZGoBmEOg9F1CRy5Nxt8LQqeSS4lOH:5IZwMnVFsSOfphgPXZ73GI0dsBw9F1Co","tlshash":"41924211b6b1c5b13c33967d27eea64c7338a043d918deadb7c422209f893b95d92b64","first_seen":"2025-09-05T22:41:39.471006Z","last_seen":"2026-03-11T00:02:21.806625Z","times_seen":37,"resource_available":false,"data":null}},"time_used":70,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":70,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-04","alert":"Sinkholed","trigger":"airdrop-mmtfinance.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"airdrop-mmtfinance.app/c7cf0502a5a04b97.css","fqdn":"airdrop-mmtfinance.app","domain":"airdrop-mmtfinance.app","tld":"app"},"ip":{"addr":"104.21.56.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://airdrop-mmtfinance.app/","date":"2025-11-04T11:02:05.141Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"airdrop-mmtfinance.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 03 Nov 2025 16:36:27 GMT","end":"Sun, 01 Feb 2026 17:35:00 GMT"},"fingerprint":{"sha1":"6E:08:EC:59:BE:69:AD:6D:03:54:41:E9:8D:16:61:81:8D:28:C8:85","sha256":"D9:7B:A6:4B:F4:0C:2C:DD:80:D3:AD:7A:BA:7A:BD:04:60:FE:36:DA:19:BE:D5:C5:25:70:E3:5A:BA:9D:B1:6D"}}},"request":{"raw":"GET /c7cf0502a5a04b97.css HTTP/1.1\r\nHost: airdrop-mmtfinance.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://airdrop-mmtfinance.app/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 04 Nov 2025 11:02:05 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 03 Nov 2025 18:28:14 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=w0qEbMFFnrJuLRNTzfq5pugFz9MNED0HZgBn1pCy%2BDFv91R5f2OFd168mf54tX%2BWkoljBaVs8yy6mkg2TPPHew5ePXNKZQQy8Ic%2F%2Fdsh7xoYO5vheJI%3D\"}]}\r\nvary: Accept-Encoding\r\netag: W/\"6908f43e-9516\"\r\nexpires: Tue, 04 Nov 2025 23:02:05 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\npriority: u=2,i=?0\r\ncf-ray: 99939dfa1f4349c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":38166,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (23879)","md5":"1aa4eaf2c608437d1d0bd5d4927b4a68","sha1":"ccd6b9828b9ca8c9a7c1afd834555b9be1d71ce7","sha256":"2550cb2933046c322a053d7e2cb173378d16da1dbe8731719c739f017201131c","sha512":"65b27f7c7e7628c902d87f4bfc9853c3a1f10b4e976afebad7f0c7df4458e545636d59f3273ca3623abb92bbef0989200a44b074f9a6a968fac0ef423ae7aa07","ssdeep":"768:Uw1QLnLHJLvasDuNQfdnwafeMfryMOdDrJb/+kF8fB/s/c/hv/inEBPcxChk:WLn1Lv9uNQfdnwafeMfryMwcHv/inEBM","tlshash":"370354884ba40119825344779eceab594e3cbc9a25736caf3265254f07827f933fa737","first_seen":"2025-11-04T11:02:36.663701Z","last_seen":"2025-11-13T18:57:32.799791Z","times_seen":3,"resource_available":false,"data":null}},"time_used":80,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":77,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-04","alert":"Sinkholed","trigger":"airdrop-mmtfinance.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"airdrop-mmtfinance.app/abf9c4aadf82e658.css","fqdn":"airdrop-mmtfinance.app","domain":"airdrop-mmtfinance.app","tld":"app"},"ip":{"addr":"104.21.56.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://airdrop-mmtfinance.app/","date":"2025-11-04T11:02:05.142Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"airdrop-mmtfinance.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 03 Nov 2025 16:36:27 GMT","end":"Sun, 01 Feb 2026 17:35:00 GMT"},"fingerprint":{"sha1":"6E:08:EC:59:BE:69:AD:6D:03:54:41:E9:8D:16:61:81:8D:28:C8:85","sha256":"D9:7B:A6:4B:F4:0C:2C:DD:80:D3:AD:7A:BA:7A:BD:04:60:FE:36:DA:19:BE:D5:C5:25:70:E3:5A:BA:9D:B1:6D"}}},"request":{"raw":"GET /abf9c4aadf82e658.css HTTP/1.1\r\nHost: airdrop-mmtfinance.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://airdrop-mmtfinance.app/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 04 Nov 2025 11:02:05 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 03 Nov 2025 18:28:14 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=78A334Q50R0aLbAMm68n%2BgH2rcq8cLgkf8JJnJCWlLLwtb7zik3kpRK7op0eqanGpITiB4TXVNeW2cU%2FkxgvZtkW7wyytrvgoGaOZ7W4Ht4b9mVFb44%3D\"}]}\r\nvary: Accept-Encoding\r\netag: W/\"6908f43e-3bb73\"\r\nexpires: Tue, 04 Nov 2025 23:02:05 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\npriority: u=2,i=?0\r\ncf-ray: 99939dfa1f4549c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":244595,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"6e3aa0707d771285cf705f588d7c814f","sha1":"18a670515fc3a633cb9ffa7b3a5cdd6e6746c74a","sha256":"0eb5ee9b608ff93c11c7e74148046e54335a6f5951283b1c3b77d573623c38a7","sha512":"e5d50f33402a71aefbf88012196aa6db9da20fdd56698733a0ae1d86cffa2d7a16deb02f507683c8606fa9ac151ebda2b3582cf4e02e762b477bf9ae73113a3c","ssdeep":"6144:7O1DL+p0xiOmwWIoJXeFL/2+O3X54uzXL+vM:t3Ks","tlshash":"b8349291b509d0fa3e6ba8fe238cf8ddc105b081de795ea9f646912523c37f37a61205","first_seen":"2025-11-04T11:02:36.6654Z","last_seen":"2025-11-04T11:02:36.6654Z","times_seen":1,"resource_available":false,"data":null}},"time_used":103,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":77,"receive":26,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-04","alert":"Sinkholed","trigger":"airdrop-mmtfinance.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}}]}
