{"report_id":"d6e7f7a9-62f0-4f65-97de-6c5609128223","version":6,"status":"done","tags":[],"date":"2026-03-02T16:45:45Z","url":{"schema":"https","addr":"syncflrdrop.xyz/","fqdn":"syncflrdrop.xyz","domain":"syncflrdrop.xyz","tld":"xyz"},"ip":{"addr":"172.67.169.73","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"syncflrdrop.xyz/","fqdn":"syncflrdrop.xyz","domain":"syncflrdrop.xyz","tld":"xyz"},"title":"Flare Network - EVM Hub for Web 3.0","dom":{"size":20325,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (466)","md5":"06811d2603089e2693f600bc2aad0810","sha1":"1a5e9333144c85ea95bd57eb99e73e2d789ba53d","sha256":"35427109ce80b9667e76ee5542837ebd110d46b1ed35f3fbde2df4c513d1d113","sha512":"b9949551a2220e113c8e8b357ca721ca689011f4c7474d3e19dd5ae32d5a05246581c915387ff8ea08e46e9c69839b33a518e50579b94fec0f1967f8e68b366a","ssdeep":"384:hXtFjUfx2EsFc3SdicJ9mX70nFinhf1FJt:xXEZS9Ji70nFinhf1FJt","tlshash":"e2921024a0f028374083d1d169342beaafe1da47c60b461432fc6bd95fdbf86cd5ba59","dom_hash":"domhash4617c955f7421d434c5e0d1653442b79","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"syncflrdrop.xyz/","fqdn":"syncflrdrop.xyz","domain":"syncflrdrop.xyz","tld":"xyz"},"ip":{"addr":"172.67.169.73","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-04-06T16:45:45Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":2,"urlquery":0,"analyzer":2}},"detection":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-03-02T16:45:24Z","timestamp":1772469924,"ip_dst":{"addr":"149.154.166.110","port":443,"asn":62041,"as":"Telegram Messenger Inc","country":"United Kingdom","country_code":"GB"},"ip_src":{"addr":"Client IP","port":58540,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET HUNTING Observed Telegram API Domain (api .telegram .org in TLS SNI)","source":"{\"timestamp\":\"2026-03-02T16:45:24.957375+0000\",\"flow_id\":913306519133283,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.46\",\"src_port\":58540,\"dest_ip\":\"149.154.166.110\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2033967,\"rev\":1,\"signature\":\"ET HUNTING Observed Telegram API Domain (api .telegram .org in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2021_09_16\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2021_09_16\"]}},\"tls\":{\"sni\":\"api.telegram.org\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"15af977ce25de452b96affa2addb1036\",\"string\":\"771,4866,43-51\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":6,\"bytes_toserver\":789,\"bytes_toclient\":4500,\"start\":\"2026-03-02T16:45:24.908387+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-03-02T16:45:24Z","timestamp":1772469924,"ip_dst":{"addr":"149.154.166.110","port":443,"asn":62041,"as":"Telegram Messenger Inc","country":"United Kingdom","country_code":"GB"},"ip_src":{"addr":"Client IP","port":58554,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET HUNTING Observed Telegram API Domain (api .telegram .org in TLS SNI)","source":"{\"timestamp\":\"2026-03-02T16:45:24.962839+0000\",\"flow_id\":1624239570738431,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.46\",\"src_port\":58554,\"dest_ip\":\"149.154.166.110\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2033967,\"rev\":1,\"signature\":\"ET HUNTING Observed Telegram API Domain (api .telegram .org in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2021_09_16\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2021_09_16\"]}},\"tls\":{\"sni\":\"api.telegram.org\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"15af977ce25de452b96affa2addb1036\",\"string\":\"771,4866,43-51\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":6,\"bytes_toserver\":789,\"bytes_toclient\":4500,\"start\":\"2026-03-02T16:45:24.908543+0000\"}}"}],"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"syncflrdrop.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"syncflrdrop.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"fonts.googleapis.com","ip":{"addr":"216.58.207.202","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-03-01T22:18:12.522658Z","alert_count":0,"request_count":1,"received_data":6307,"sent_data":602,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"ipapi.co","ip":{"addr":"172.67.69.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2016-04-19","domain_rank":7936,"first_seen":"2017-01-31T09:07:01Z","last_seen":"2026-02-25T13:40:07.535585Z","alert_count":0,"request_count":1,"received_data":2478,"sent_data":431,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"syncflrdrop.xyz","ip":{"addr":"172.67.169.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-02-27","domain_rank":0,"first_seen":"2026-03-02T16:45:46.378394Z","last_seen":"2026-03-02T16:45:46.378394Z","alert_count":72,"request_count":36,"received_data":1922946,"sent_data":16308,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"jQuery:3.6.0","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Slick","description":"","website":"https://kenwheeler.github.io/slick","common_platform_enumeration":"","icon":"Slick.svg","categories":["JavaScript libraries"]},{"name":"WOW","description":"Reveal CSS animation as you scroll down a page.","website":"https://www.delac.io/WOW","common_platform_enumeration":"","icon":"","categories":["JavaScript frameworks","Web frameworks","JavaScript graphics"]},{"name":"Magnific Popup","description":"Magnific Popup is a responsive lightbox \u0026 dialog script with focus on performance and providing best experience for user with any device.","website":"https://dimsemenov.com/plugins/magnific-popup/","common_platform_enumeration":"","icon":"Magnific Popup.png","categories":["JavaScript libraries"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"216.58.207.195","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-03-01T22:15:00.771016Z","alert_count":0,"request_count":4,"received_data":131772,"sent_data":2160,"comment":"","tags":null,"fingerprints":null},{"fqdn":"api.telegram.org","ip":{"addr":"149.154.166.110","port":443,"asn":62041,"as":"Telegram Messenger Inc","country":"United Kingdom","country_code":"GB"},"domain_registered":"2003-12-15","domain_rank":206724,"first_seen":"2015-06-25T10:09:00Z","last_seen":"2026-02-27T20:05:35.942475Z","alert_count":0,"request_count":2,"received_data":745,"sent_data":1131,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"syncflrdrop.xyz/assets/js/jquery.appear.js","fqdn":"syncflrdrop.xyz","domain":"syncflrdrop.xyz","tld":"xyz"},"ip":{"addr":"172.67.169.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d18fe7c86d2bcea69a0810de7b81e676","sha1":"3bc98b3a47dc6f09238bbd0e496fa11daa3caa98","sha256":"70f721f0d6aaebc5c683551fb12668e6a91a02d17ac1b41f8a4dda0fa91dcbd5","sha512":"0fc73474dfb4fa9247793332815cbc70f6b575058381032981f2a05e87432e904f275a76567511841c568d554b3426c4c548c55fb775bc9b5c1d1d6bb35efd7d","ssdeep":"48:Wl3XwqL924ayV+9FLAPfnUIeohhR9zIr0FfFoBSxMEh1u1cWSKjf4WJzw:y3XUz19FkkDo7R9crgYSpTocWZAUzw","tlshash":"2b91dc4a759b2ab54877622a9f1fb20cd721513b0202c2113cedde6c6f71864a197fdc","size":4424,"data":"","first_seen":"2023-03-07T12:08:36Z","last_seen":"2026-07-20T06:27:26.653978Z","times_seen":754,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"syncflrdrop.xyz/assets/js/jquery.easing.js","fqdn":"syncflrdrop.xyz","domain":"syncflrdrop.xyz","tld":"xyz"},"ip":{"addr":"172.67.169.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"96550741c997fd57758441aa1759b21c","sha1":"28179d80067a74176c1ff7bb8028c12d7ed6940e","sha256":"e5c0fa2f30aef4faf40adcf7a23b18c01453066fe5aa0088b3344a37811d6b8c","sha512":"4c1158fe0f47fdbb97751c8f720a6699cf32592c254dd1f485d1de11b0815b6cee9e1c877d6d922d06a5ea6c88f1a7080e569dff9cb0062e1b6830a75c73848c","ssdeep":"96:Jg1rrQ4ZK8C2vFfMJjIck9kJqBs8RPjoGs1scfX+YGW3cSniU9kZwSalaKEcrTeC:JIvHK8FMrCUMoykjl","tlshash":"e4917fa877dea50653213470491b50ce62bd7a02cc1c9d6ecc4c8c9879a4a3b92a7f3c","size":4297,"data":"","first_seen":"2023-03-11T19:12:19Z","last_seen":"2026-07-18T22:47:13.086665Z","times_seen":1397,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"syncflrdrop.xyz/assets/js/imagesloaded.pkgd.min.js","fqdn":"syncflrdrop.xyz","domain":"syncflrdrop.xyz","tld":"xyz"},"ip":{"addr":"172.67.169.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"b5a148b45df1e1fa221e7822378e9284","sha1":"bf61ffb0f1382cbf316bfdc050b7a5ae6cea4940","sha256":"8410c03e020bdd19a6bd5059a0b2e4ff5478ee74e32d4687b9b3852ac7f8ec26","sha512":"92e6a2fd7e6bb146dca55e3737fb9479fc009f564970008783854e677c1ab8514bfd158bba2e752c341b2a5bc7c70f3173684b69c0315dd9bfc7b46b578fa314","ssdeep":"96:ixr6taZX+8LrrSnUfQHcUzGw89B6t32uV6SDHRkgrc46PTG97+5xVGWyR+odfB6e:arvcwrr9wcU09otLNkyiyV/dfB6e","tlshash":"efb121cd77a67531229bf0b3a61f020f727a406e6428825d7959ecf55cbcd192a33bb0","size":5388,"data":"","first_seen":"2023-11-07T15:50:29Z","last_seen":"2026-07-19T11:47:36.793912Z","times_seen":467,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"syncflrdrop.xyz/assets/js/syncnow.js","fqdn":"syncflrdrop.xyz","domain":"syncflrdrop.xyz","tld":"xyz"},"ip":{"addr":"172.67.169.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"e56542184f1b6b22715f4503f87c92f3","sha1":"68e2583a359fcdd8dfa5980988039aa2ff0dd32c","sha256":"d84288f523afd2bd42dca2be9b7d60c3dd9af6f873459f7a3e3ace41b42b6ed3","sha512":"1debfd612f1fb3dbd8eeae81b4a64e36cd139b6e6fc3000fae4f7212a90f4f95191f060cc0e0e762cff3273834c6d1a368ea58e851d5cacd909e5ebd9bb4b4e1","ssdeep":"","tlshash":"1e5108a503375e7e987196049d357e0ee8f8d8b65f9be01b59177484cd3e2f04780319","size":2523,"data":"","first_seen":"2026-03-02T16:45:50.209577Z","last_seen":"2026-03-02T16:45:50.209577Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"syncflrdrop.xyz/assets/js/slick.min.js","fqdn":"syncflrdrop.xyz","domain":"syncflrdrop.xyz","tld":"xyz"},"ip":{"addr":"172.67.169.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d5a61c749e44e47159af8a6579dda121","sha1":"3b41b3bc956685015a347a2238e71db29dfa0dbb","sha256":"0c7178cc6ca34fb18e30f070a5e7a1c287b2d7ccfcba2cfdf06e0f46eda55740","sha512":"5ed98cb4311c373da3ede92bb47bce551e22c30683ea8fc55097baf99abe1e0702b24de48f8b9241047cc1e4364158f5a343e4e8fc182e8866db4e99ccd7ee6e","ssdeep":"768:4rkkX123A5YHi6pWzYdlNWYcx16nnYdXRRMd2KYCQCsPShb1ez7RFmYH:EPrYdlNixEePiYH","tlshash":"e513a549d205276285d721e62105c40eb3f7fb3cba22c0e475c9d3ea646ec4896d7bfa","size":42863,"data":"","first_seen":"2023-03-07T01:06:34Z","last_seen":"2026-07-24T11:46:57.31116Z","times_seen":108574,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"syncflrdrop.xyz/assets/js/bootstrap.min.js","fqdn":"syncflrdrop.xyz","domain":"syncflrdrop.xyz","tld":"xyz"},"ip":{"addr":"172.67.169.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"dfd824922bdcd8afddd7a123029bba09","sha1":"093df67442d6d55091d9278701071d241a3d02ad","sha256":"286fc75be1e7b08b6e8f8c70b4b6f69bf77fcd9bec929694d122b44ecbb4858d","sha512":"71ed1ae8aa3845ee9467b730d2affdd05f33e929e210d1f13c13bde9dced6beea3e7dc232cb21efaa50f7be917b7f1e328c78ce06208de5dce0a3308012965ad","ssdeep":"1536:pppbTNR2t4NEdiK5J2w8gGzjJVPOW7tI+r9ixR2nwZ7:T36WJr9ixF","tlshash":"5e73c5493254b8730ade45a68037470bf3265994b14b802cb5bcadde2a3dd8672b7f7c","size":78080,"data":"","first_seen":"2023-03-07T12:08:04Z","last_seen":"2026-07-24T11:26:26.125255Z","times_seen":2609,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"syncflrdrop.xyz/assets/js/isotope.pkgd.min.js","fqdn":"syncflrdrop.xyz","domain":"syncflrdrop.xyz","tld":"xyz"},"ip":{"addr":"172.67.169.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"45a9a223a6d34a35dde83e8b5b9af5d5","sha1":"ed452572b1ac8abd34ffc6abaee41fa528431927","sha256":"c0054382ba8b033faf0748492b9c8772fa485106e0426280a85747a6db4b0fa0","sha512":"423baebf2713878ce33b6d592c2db45bf881c251d2127651a6621ebc31d0b15e0b6d70c00d973161127790965bc11bfd5ac79b4ba2329b28b09c6dced240d83c","ssdeep":"768:1iQAKk0GVAc2GsZPjEntPIFvkp01zsD6rD68DAfk3ADzkp1rBF:pktVRUP4ntPIFvFzsD6rD6zfkwDzYF","tlshash":"edf2c88f73443925468bf066966f160f7137a52c6a4290acfa6ad8db1c7984d7033fbc","size":34825,"data":"","first_seen":"2023-03-26T11:29:40Z","last_seen":"2026-07-23T22:27:15.807432Z","times_seen":983,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"syncflrdrop.xyz/assets/js/jquery.countdown.min.js","fqdn":"syncflrdrop.xyz","domain":"syncflrdrop.xyz","tld":"xyz"},"ip":{"addr":"172.67.169.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"fe51f891c801862316c1410111e11c0d","sha1":"a271198e3ef757d52012a945cffcf0d070b3f6d6","sha256":"9db3db6b06b7114de220c34e557c3455e185157cf4396e2322f2fb567578aaef","sha512":"df977b72410677bd21c7d04fd61e0634a00128c93cda19e9a5024a4182aee72e73ba2b97caa7199ac8aafaa2b72371cec5aa3c6e41c840929b9f279997018e06","ssdeep":"96:UXpMQHIXWxs9bIb9TMlF9NQA3qAZRzblMJDi4jr2R2fylzM905qO2Jo1yVsqVMHC:JQHraUTcF953zzb6rffylzM9cqO2JoQR","tlshash":"a8c1604973f1222265aeb2105d9e4854a338e74bf1c7445c78ecd6c87a258bc85bfdb8","size":6041,"data":"","first_seen":"2025-03-31T19:32:34.653162Z","last_seen":"2026-06-24T22:30:42.515729Z","times_seen":26,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"syncflrdrop.xyz/assets/js/ajax-form.js","fqdn":"syncflrdrop.xyz","domain":"syncflrdrop.xyz","tld":"xyz"},"ip":{"addr":"172.67.169.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"1be30d77e5267cbcf399d6152253e315","sha1":"8875c6e6232be6cb571e8a90e312107a44c0d4b8","sha256":"e9d3e2a6c29998bcec8abc8ec7618f03d61a52ec8d4c7d5281e6ab2ec54ecd85","sha512":"4cbd6c3be98c32da0f0c28b62d20967751728fa9fe94eeaf28b0bf6a3933de82e51c89f923bf90a2d630ba9f026efbe294fe2ea12ae4029718e7f79199a00946","ssdeep":"","tlshash":"3b21af847e6f0b6e1a47221576fd72c9fb2dd1728207622aa7e9083916841cc17c27ee","size":1250,"data":"","first_seen":"2023-03-08T07:03:22Z","last_seen":"2026-07-22T06:15:31.621575Z","times_seen":1047,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"syncflrdrop.xyz/assets/js/wow.min.js","fqdn":"syncflrdrop.xyz","domain":"syncflrdrop.xyz","tld":"xyz"},"ip":{"addr":"172.67.169.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"36050285bfeeb7395752f0f9bbc08273","sha1":"5924f7bbbf1dfa3f0926851d01f782f23a59e805","sha256":"0ec632e6ab02d4fdd514da7f5edc74aa28c9d4c71af76f1c8b93a1fba85bcc69","sha512":"bf887e087c52583114b77bfb417d7dffa0ee8634d39155af14591a24b2add9ef4c8a0c0555364122800d07a55f5f1fb0c723b39541b069a437ff558ddbf380a3","ssdeep":"96:UrZgL1xvPV6GqKgR6TYLWHFMLJA6pOROVEE1fosvGeaMozHImBaoqbl:Ury9PVfIFrlAJROVEEdos+eatzHILoA","tlshash":"750267c97a967031d75796f6833f0106b6361aeeb028047cb5b88dd57c78868523bf38","size":8415,"data":"","first_seen":"2023-03-07T01:02:45Z","last_seen":"2026-07-24T11:12:42.58393Z","times_seen":13792,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"syncflrdrop.xyz/assets/js/vendor/jquery-3.6.0.min.js","fqdn":"syncflrdrop.xyz","domain":"syncflrdrop.xyz","tld":"xyz"},"ip":{"addr":"172.67.169.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"e86504b92c4745b9315d7f4f9b73fc2a","sha1":"b9b4714b5c1cbc03d9444c9f60a17eecb8e0750d","sha256":"878796facbcbeadeddda79c14175bb3967519b61d1db46ae49a36b5dc84e5dd9","sha512":"b68bab355239d15d094c62bbe79cde78267f7636d15db229da584ce0d7276edb6d0844f05fb903d3f341ab5252004de893c9d9ba60d8a739e883d56695466491","ssdeep":"1536:b7/cnTfIbdDSRjlJTQPWVTagPShkMnJuxlk6WRIvQEtUK9G2CWKeYcftIougRuOk:bLd2oe9G2CWPtmK4Y3OFnG7KokA98J","tlshash":"4fb3b69973d63335864bf0b69c9fcd4df2b9595c23c98409a60cc5a6a830878877edec","size":107748,"data":"","first_seen":"2023-03-07T12:08:36Z","last_seen":"2026-07-24T10:10:34.025013Z","times_seen":1343,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"syncflrdrop.xyz/assets/js/jquery.magnific-popup.min.js","fqdn":"syncflrdrop.xyz","domain":"syncflrdrop.xyz","tld":"xyz"},"ip":{"addr":"172.67.169.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"b9baaaa7ce28c03a807bd1583995142c","sha1":"dca06b455988bd045bc5750f297a5da5c9e2abf7","sha256":"b5e8f4795c4db9bfedcf7dfd26ce3af55e0315f3e9b8ebebe9ddd71ce37dbc89","sha512":"4f5ab302c40bfc1f126c11c52e46349d7dae4914a00cfbfeff5c31eb84212f6e39e57f20a6058faca3b4fd4a0fd89df3af3b7330aa651baf5af99ddaecf6b0e3","ssdeep":"384:Oe8oi7ilJSsfw8RdkRHaODp+A+n//jsP6Wa2wDMK2uHMigZz3q:O8WsdA+n/+hazF2usiw3q","tlshash":"d892e958f1a3f22783ab75b86c5f240c3b72e652d907c0056659d4a86dfde88a127f3c","size":20214,"data":"","first_seen":"2023-12-01T05:01:13Z","last_seen":"2026-07-23T22:27:15.812922Z","times_seen":492,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"syncflrdrop.xyz/assets/js/main.js","fqdn":"syncflrdrop.xyz","domain":"syncflrdrop.xyz","tld":"xyz"},"ip":{"addr":"172.67.169.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"3a9f4dacce92996b65c173dd76206c94","sha1":"5338eac52d7f6d1f86989134507a2bf557a3af55","sha256":"c6c9b2f76e9c624b8d2b7e81e5fcfbc1d9bd4ea521149fb5a724d3100b467848","sha512":"19af11135e6e14de1b0d79889450a3f3029a11dff17e8b6f3c3557563e56a73342d8d6b1b02f223ef2555f811d9dba688a2e60ff10b4ae90a42bdee2932c15dd","ssdeep":"192:WTbjTH2LE+zsbUh1iFQ0UI4Y9jpaHThJOQPYJ8/c4N:WeR0hL1pQ9a2NN","tlshash":"03620e067a0e607f40ef63249436d702c79dd522c22391b7f8ed19249b9876f22d9aed","size":15379,"data":"","first_seen":"2024-08-19T13:09:29.215178Z","last_seen":"2026-06-24T22:30:42.509289Z","times_seen":46,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"syncflrdrop.xyz/","fqdn":"syncflrdrop.xyz","domain":"syncflrdrop.xyz","tld":"xyz"},"ip":{"addr":"172.67.169.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-02T16:45:23.419Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"syncflrdrop.xyz","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 27 Feb 2026 14:29:44 GMT","end":"Thu, 28 May 2026 14:29:43 GMT"},"fingerprint":{"sha1":"AC:BE:69:F3:6B:37:B0:3F:AB:31:7B:7D:BB:AC:18:0F:3A:E6:27:B4","sha256":"CB:6D:9A:E6:B3:93:4F:D5:48:7D:6F:8D:1F:31:A0:A6:86:D5:87:C3:1D:52:4C:6E:2D:15:C6:3E:2D:5B:16:56"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: syncflrdrop.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 02 Mar 2026 16:45:23 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Fri, 27 Feb 2026 14:58:07 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lRU9983dndVF7OKJ%2BxGByr84687IxD1TmSiO7yoTkx8FH%2FDx8EhHizMvwenFsOBzgew9lWUJS9aKu7RCsaR%2Fofh%2FAdfQ82C%2BqPIGZL1T3Q%3D%3D\"}]}\r\nage: 93882\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncf-ray: 9d61df1ded9a1806-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"jQuery:3.6.0","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Slick","description":"","website":"https://kenwheeler.github.io/slick","common_platform_enumeration":"","icon":"Slick.svg","categories":["JavaScript libraries"]},{"name":"WOW","description":"Reveal CSS animation as you scroll down a page.","website":"https://www.delac.io/WOW","common_platform_enumeration":"","icon":"","categories":["JavaScript frameworks","Web frameworks","JavaScript graphics"]},{"name":"Magnific Popup","description":"Magnific Popup is a responsive lightbox \u0026 dialog script with focus on performance and providing best experience for user with any device.","website":"https://dimsemenov.com/plugins/magnific-popup/","common_platform_enumeration":"","icon":"Magnific Popup.png","categories":["JavaScript libraries"]}],"data":{"size":19961,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (466)","md5":"54e4d7a1216084e087fbc62a682147d7","sha1":"733310f3ce3c932e27d24a43e5958b5d17b23959","sha256":"11ed4d0b660b51eadb9bca3a8bc1632a1ade3ec8f52392c0c86e463d59069ee3","sha512":"f53d4f45019fc75f13416662675ce63cbdb3ae697baf9c52783b605764d62f2394b85707d360383ed7c429c844dfe8a484cd2a078bb5bb900e75d82e0f30f23b","ssdeep":"384:k7TvjUWx2EsFc3Sdicb7mX70nFinhf1FJ9:YjHZS9bQ70nFinhf1FJ9","tlshash":"8b921024a4f028374083d1d129342beaafd1da47c60b451872fc6be95fdbf86cd5ba58","first_seen":"2026-01-31T13:52:22.512215Z","last_seen":"2026-03-02T16:45:50.1978Z","times_seen":3,"resource_available":false,"data":null}},"time_used":183,"timings":{"blocked":79,"dns":54,"connect":8,"send":0,"wait":22,"receive":0,"ssl":18},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"syncflrdrop.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"syncflrdrop.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"syncflrdrop.xyz/assets/img/update/feature/feature-shape-2-1.png","fqdn":"syncflrdrop.xyz","domain":"syncflrdrop.xyz","tld":"xyz"},"ip":{"addr":"172.67.169.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://syncflrdrop.xyz/","date":"2026-03-02T16:45:23.728Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"syncflrdrop.xyz","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 27 Feb 2026 14:29:44 GMT","end":"Thu, 28 May 2026 14:29:43 GMT"},"fingerprint":{"sha1":"AC:BE:69:F3:6B:37:B0:3F:AB:31:7B:7D:BB:AC:18:0F:3A:E6:27:B4","sha256":"CB:6D:9A:E6:B3:93:4F:D5:48:7D:6F:8D:1F:31:A0:A6:86:D5:87:C3:1D:52:4C:6E:2D:15:C6:3E:2D:5B:16:56"}}},"request":{"raw":"GET /assets/img/update/feature/feature-shape-2-1.png HTTP/1.1\r\nHost: syncflrdrop.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://syncflrdrop.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 02 Mar 2026 16:45:23 GMT\r\ncontent-type: image/png\r\ncontent-length: 30114\r\ncast-mode: default\r\nlast-modified: Fri, 27 Feb 2026 14:58:07 GMT\r\netag: \"69a1b0ff-75a2\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SJOE8Ju5NDdIUYFb6sR%2FfLecvRb51ZZKayFT7%2B0GBp3ekgUsz0E2ZxhxcmF4pqiKdY%2Bl6ybWN3IfNxT8mDomJU%2BlCb51SAXb5BYWngMuBg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9d61df1f2b66b7b2-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":30114,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 271 x 271, 8-bit/color RGBA, non-interlaced","md5":"159bfdfd53992642a8587ec5c32d747d","sha1":"071309a7a7e6f33c2f629e1d0b40b2b369891684","sha256":"d1a278892e066e560842875136b0277e2b866198ceda5baec48847cde7ab2535","sha512":"9daf8a1205c7c5e40d95f0e8fc2d887dfd741264d4599b6dbdb3ee7bfa4b12a6832a4585cb70206e4718913d1026239020ecb2a20b8f34a538f7eb723c3aca52","ssdeep":"768:CnRJy1HH5OefPkl9LFK362r7J1TwKKQ8EUFButy7UJ1DT5vtbj:Ca1HHYe36LFz2J1T3KQHUFButyAJ1DTj","tlshash":"19d2e1942a857c71cfdfac20d56909797893f7edb207aa10783456f3f78126aa793c80","first_seen":"2025-03-31T19:32:34.632774Z","last_seen":"2026-06-24T22:30:42.536998Z","times_seen":59,"resource_available":false,"data":null}},"time_used":256,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":202,"receive":54,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"syncflrdrop.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"syncflrdrop.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"syncflrdrop.xyz/assets/img/update/feature/feature-shape-2-2.png","fqdn":"syncflrdrop.xyz","domain":"syncflrdrop.xyz","tld":"xyz"},"ip":{"addr":"172.67.169.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://syncflrdrop.xyz/","date":"2026-03-02T16:45:23.731Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"syncflrdrop.xyz","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 27 Feb 2026 14:29:44 GMT","end":"Thu, 28 May 2026 14:29:43 GMT"},"fingerprint":{"sha1":"AC:BE:69:F3:6B:37:B0:3F:AB:31:7B:7D:BB:AC:18:0F:3A:E6:27:B4","sha256":"CB:6D:9A:E6:B3:93:4F:D5:48:7D:6F:8D:1F:31:A0:A6:86:D5:87:C3:1D:52:4C:6E:2D:15:C6:3E:2D:5B:16:56"}}},"request":{"raw":"GET /assets/img/update/feature/feature-shape-2-2.png HTTP/1.1\r\nHost: syncflrdrop.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://syncflrdrop.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 02 Mar 2026 16:45:23 GMT\r\ncontent-type: image/png\r\ncontent-length: 3236\r\ncast-mode: default\r\nlast-modified: Fri, 27 Feb 2026 14:58:07 GMT\r\netag: \"69a1b0ff-ca4\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=t3Biw0OTS9Imt2mFsa%2BhFLBxiwA70xDcjAYlfMyS9RNeQpDuZeOaijthGQKW3E7JqrKTsg%2FAuh9wd6eyV3QnmrSbiotKB7MS70sdUifB7A%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9d61df1f2b67b7b2-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3236,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 49 x 83, 8-bit/color RGBA, non-interlaced","md5":"1b0e45748cb294f72975c1048b4f81f6","sha1":"4688bffec628ed485aa406e73fc9e69c5efa00c3","sha256":"d07cc66eb4d1f177168a753366bb80c043b3177d0cd57df0a188b73b48f9d7c2","sha512":"d73d5e2675a6fdd4dc1eb615e84f8ee99fb9cd983d0fec38ef832e594019b4daa12e2cf562ddd449ff8a8095600e7fd2488c61ec2dcce4be75503008386156ce","ssdeep":"","tlshash":"20617d37325ce8739f7a2037f0373a81989aebcd46981827a90a15539ce3fc3108ce20","first_seen":"2025-03-31T19:32:34.622636Z","last_seen":"2026-06-24T22:30:42.520577Z","times_seen":59,"resource_available":false,"data":null}},"time_used":146,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":144,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"syncflrdrop.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"syncflrdrop.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/outfit/v15/QGYvz_MVcBeNP4NJtEtqUYTkntBJ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"216.58.207.195","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://syncflrdrop.xyz/","date":"2026-03-02T16:45:24.236Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:00 GMT","end":"Mon, 27 Apr 2026 08:37:59 GMT"},"fingerprint":{"sha1":"43:A0:56:D7:CE:45:C9:96:6F:34:12:13:53:CC:34:DD:63:FB:5D:20","sha256":"A4:AF:37:76:AF:D3:DB:1B:79:93:8F:E9:D4:21:4B:BA:43:54:3D:F9:56:DC:18:E9:5C:CA:1A:7C:B2:C7:DF:9B"}}},"request":{"raw":"GET /s/outfit/v15/QGYvz_MVcBeNP4NJtEtqUYTkntBJ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://syncflrdrop.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 32108\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 26 Feb 2026 08:42:15 GMT\r\nexpires: Fri, 26 Feb 2027 08:42:15 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Thu, 04 Sep 2025 17:18:28 GMT\r\ncontent-type: font/woff2\r\nage: 374589\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":32108,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 32108, version 1.0","md5":"e414fe5664f376c8f145acd792939183","sha1":"5b69d46adc3a06af762193adb2dddbc359b2e786","sha256":"fa31c7981483e52cbb8b8bc1eb0dc6326f160b8699cc0899349f977f0517a9df","sha512":"51c251910e5cce616b3c336bcb63853f83c306e16e9b79e0a18f924a738ba06b3e2cb8132ff9bc6e720527234eb80e90be2625b860e1728b66d4fe86ac9bafe5","ssdeep":"768:gUX6jLkDeuAkZHs27nAflEFIapAgCauwIFPo3zjERcgmcjz:3X6tkpNAf6FIapAgCaMFozInjz","tlshash":"6ee2e14f8beb009ef3828a7812c46b3195b305d569cbfa901eef85d76b5c247c1474a8","first_seen":"2025-09-05T02:25:45.343777Z","last_seen":"2026-07-24T11:01:44.046443Z","times_seen":27226,"resource_available":false,"data":null}},"time_used":260,"timings":{"blocked":124,"dns":1,"connect":21,"send":0,"wait":8,"receive":3,"ssl":100},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"syncflrdrop.xyz/assets/css/animate.min.css","fqdn":"syncflrdrop.xyz","domain":"syncflrdrop.xyz","tld":"xyz"},"ip":{"addr":"172.67.169.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://syncflrdrop.xyz/","date":"2026-03-02T16:45:23.718Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"syncflrdrop.xyz","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 27 Feb 2026 14:29:44 GMT","end":"Thu, 28 May 2026 14:29:43 GMT"},"fingerprint":{"sha1":"AC:BE:69:F3:6B:37:B0:3F:AB:31:7B:7D:BB:AC:18:0F:3A:E6:27:B4","sha256":"CB:6D:9A:E6:B3:93:4F:D5:48:7D:6F:8D:1F:31:A0:A6:86:D5:87:C3:1D:52:4C:6E:2D:15:C6:3E:2D:5B:16:56"}}},"request":{"raw":"GET /assets/css/animate.min.css HTTP/1.1\r\nHost: syncflrdrop.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://syncflrdrop.xyz/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 02 Mar 2026 16:45:23 GMT\r\ncontent-type: text/css\r\ncast-mode: default\r\nlast-modified: Fri, 27 Feb 2026 14:58:07 GMT\r\netag: W/\"69a1b0ff-10bf9\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\npriority: u=2,i=?0\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iqvqojOrhAvbiym2d1jge9pwO%2BAdeNp9FlqKvces3H%2FVLgQKNXBd%2B1v7%2BZdLVqJxxfoXgjGswSYBaPWuj3fHfZCMxXXuvox%2FfkbsBrvn7Q%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9d61df1f1b5bb7b2-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":68601,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (460)","md5":"8ea67bf7d4ccacd55a30e2046f9241b2","sha1":"9e7eadfdcdf03a5664aaef256c76248ee786dd3b","sha256":"5d825a730b53e73c1ebf5e26ad9b5fc8e67ba28324ac6a55d5c966f4df4aa7b6","sha512":"1336cc299baba59cdcd3af3d2a9968a721ecc3ee2fbf15f62d295c761de8e88488caaaf27a8002f044ee3084e6306d6bde9a680c61bb5de71ef8056244c7f14a","ssdeep":"192:LIQHnIwf2T/awfDZUiduG+MONjnbimZbHMxymDSVbyPiVEzfukrWL7XU+qLmfRvw:LIW/yffHf7SpS/fjf7","tlshash":"9063096929e1114466370a15c7df9f78263ce5a31826ecfab3d2588bcf41fac23c9617","first_seen":"2023-04-13T23:00:03Z","last_seen":"2026-07-21T06:12:06.485546Z","times_seen":879,"resource_available":false,"data":null}},"time_used":243,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":215,"receive":28,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"syncflrdrop.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"syncflrdrop.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"syncflrdrop.xyz/assets/css/slick.css","fqdn":"syncflrdrop.xyz","domain":"syncflrdrop.xyz","tld":"xyz"},"ip":{"addr":"172.67.169.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://syncflrdrop.xyz/","date":"2026-03-02T16:45:23.723Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"syncflrdrop.xyz","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 27 Feb 2026 14:29:44 GMT","end":"Thu, 28 May 2026 14:29:43 GMT"},"fingerprint":{"sha1":"AC:BE:69:F3:6B:37:B0:3F:AB:31:7B:7D:BB:AC:18:0F:3A:E6:27:B4","sha256":"CB:6D:9A:E6:B3:93:4F:D5:48:7D:6F:8D:1F:31:A0:A6:86:D5:87:C3:1D:52:4C:6E:2D:15:C6:3E:2D:5B:16:56"}}},"request":{"raw":"GET /assets/css/slick.css HTTP/1.1\r\nHost: syncflrdrop.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://syncflrdrop.xyz/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 02 Mar 2026 16:45:23 GMT\r\ncontent-type: text/css\r\ncast-mode: default\r\nlast-modified: Fri, 27 Feb 2026 14:58:07 GMT\r\netag: W/\"69a1b0ff-6f0\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\npriority: u=2,i=?0\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tSNYYBExcst0GpEEb6krw9iKapYTLSiD4fm7jMf0Kgss768iPNrL5pqOfl8HUjuZT2rluEJkRGI7Lu2%2BFugwTHwRVWmKtk%2FNq2HhanPJhw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9d61df1f2b5fb7b2-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1776,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"f38b2db10e01b1572732a3191d538707","sha1":"a94a059b3178b4adec09e3281ace2819a30095a4","sha256":"de1e399b07289f3b0a8d35142e363e128124a1185770e214e25e58030dad48e5","sha512":"c11e283612c11dfeec9a3cb42b8a2acdd5ae99dfabe7ffba40efef0dd6bbe8c5b98ae8383d3eeff3a168124c922097eddd703401ee9ac6122f1ebab09bbf7737","ssdeep":"","tlshash":"c931294845b389468416808d5fd7ca6d2bfff0130829e199ba8d1306cfce7d8a9c26b2","first_seen":"2023-04-05T08:37:21Z","last_seen":"2026-07-24T10:57:38.39955Z","times_seen":71948,"resource_available":false,"data":null}},"time_used":152,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":152,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"syncflrdrop.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"syncflrdrop.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"syncflrdrop.xyz/assets/js/syncnow.js","fqdn":"syncflrdrop.xyz","domain":"syncflrdrop.xyz","tld":"xyz"},"ip":{"addr":"172.67.169.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://syncflrdrop.xyz/","date":"2026-03-02T16:45:23.750Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"syncflrdrop.xyz","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 27 Feb 2026 14:29:44 GMT","end":"Thu, 28 May 2026 14:29:43 GMT"},"fingerprint":{"sha1":"AC:BE:69:F3:6B:37:B0:3F:AB:31:7B:7D:BB:AC:18:0F:3A:E6:27:B4","sha256":"CB:6D:9A:E6:B3:93:4F:D5:48:7D:6F:8D:1F:31:A0:A6:86:D5:87:C3:1D:52:4C:6E:2D:15:C6:3E:2D:5B:16:56"}}},"request":{"raw":"GET /assets/js/syncnow.js HTTP/1.1\r\nHost: syncflrdrop.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://syncflrdrop.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 02 Mar 2026 16:45:23 GMT\r\ncontent-type: application/javascript\r\ncast-mode: default\r\nlast-modified: Fri, 27 Feb 2026 14:58:07 GMT\r\netag: W/\"69a1b0ff-9db\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\npriority: u=3,i=?0\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wETjadkWUrOsKhHGOsnb5XExCL3MBQrEVYdPa%2FjUQE0Mzyxp4YHbQB%2BuFPWlGI5IGcQT7Ims5vN%2BzJeAH148Y7IAXqMQ43yNJdiC3cX4Nw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9d61df1f4b7eb7b2-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2523,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (2523), with no line terminators","md5":"e56542184f1b6b22715f4503f87c92f3","sha1":"68e2583a359fcdd8dfa5980988039aa2ff0dd32c","sha256":"d84288f523afd2bd42dca2be9b7d60c3dd9af6f873459f7a3e3ace41b42b6ed3","sha512":"1debfd612f1fb3dbd8eeae81b4a64e36cd139b6e6fc3000fae4f7212a90f4f95191f060cc0e0e762cff3273834c6d1a368ea58e851d5cacd909e5ebd9bb4b4e1","ssdeep":"","tlshash":"1e5108a503375e7e987196049d357e0ee8f8d8b65f9be01b59177484cd3e2f04780319","first_seen":"2026-03-02T16:45:50.209577Z","last_seen":"2026-03-02T16:45:50.209577Z","times_seen":1,"resource_available":true,"data":null}},"time_used":182,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":182,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"syncflrdrop.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"syncflrdrop.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/outfit/v15/QGYvz_MVcBeNP4NJtEtqUYTkntBJ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"216.58.207.195","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://syncflrdrop.xyz/","date":"2026-03-02T16:45:24.230Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:00 GMT","end":"Mon, 27 Apr 2026 08:37:59 GMT"},"fingerprint":{"sha1":"43:A0:56:D7:CE:45:C9:96:6F:34:12:13:53:CC:34:DD:63:FB:5D:20","sha256":"A4:AF:37:76:AF:D3:DB:1B:79:93:8F:E9:D4:21:4B:BA:43:54:3D:F9:56:DC:18:E9:5C:CA:1A:7C:B2:C7:DF:9B"}}},"request":{"raw":"GET /s/outfit/v15/QGYvz_MVcBeNP4NJtEtqUYTkntBJ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://syncflrdrop.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 32108\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 26 Feb 2026 08:42:15 GMT\r\nexpires: Fri, 26 Feb 2027 08:42:15 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Thu, 04 Sep 2025 17:18:28 GMT\r\ncontent-type: font/woff2\r\nage: 374589\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":32108,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 32108, version 1.0","md5":"e414fe5664f376c8f145acd792939183","sha1":"5b69d46adc3a06af762193adb2dddbc359b2e786","sha256":"fa31c7981483e52cbb8b8bc1eb0dc6326f160b8699cc0899349f977f0517a9df","sha512":"51c251910e5cce616b3c336bcb63853f83c306e16e9b79e0a18f924a738ba06b3e2cb8132ff9bc6e720527234eb80e90be2625b860e1728b66d4fe86ac9bafe5","ssdeep":"768:gUX6jLkDeuAkZHs27nAflEFIapAgCauwIFPo3zjERcgmcjz:3X6tkpNAf6FIapAgCaMFozInjz","tlshash":"6ee2e14f8beb009ef3828a7812c46b3195b305d569cbfa901eef85d76b5c247c1474a8","first_seen":"2025-09-05T02:25:45.343777Z","last_seen":"2026-07-24T11:01:44.046443Z","times_seen":27226,"resource_available":false,"data":null}},"time_used":168,"timings":{"blocked":78,"dns":4,"connect":7,"send":0,"wait":9,"receive":8,"ssl":59},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"syncflrdrop.xyz/assets/fonts/fa-brands-400.woff2","fqdn":"syncflrdrop.xyz","domain":"syncflrdrop.xyz","tld":"xyz"},"ip":{"addr":"172.67.169.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://syncflrdrop.xyz/","date":"2026-03-02T16:45:24.246Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"syncflrdrop.xyz","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 27 Feb 2026 14:29:44 GMT","end":"Thu, 28 May 2026 14:29:43 GMT"},"fingerprint":{"sha1":"AC:BE:69:F3:6B:37:B0:3F:AB:31:7B:7D:BB:AC:18:0F:3A:E6:27:B4","sha256":"CB:6D:9A:E6:B3:93:4F:D5:48:7D:6F:8D:1F:31:A0:A6:86:D5:87:C3:1D:52:4C:6E:2D:15:C6:3E:2D:5B:16:56"}}},"request":{"raw":"GET /assets/fonts/fa-brands-400.woff2 HTTP/1.1\r\nHost: syncflrdrop.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://syncflrdrop.xyz/assets/css/fontawesome-all.min.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 02 Mar 2026 16:45:24 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 76736\r\ncast-mode: default\r\nlast-modified: Fri, 27 Feb 2026 14:58:07 GMT\r\netag: \"69a1b0ff-12bc0\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YQPfXshQlX9Bvn4T45Aj8JNXa14aOfW5Ql2jjrNWZvmqE8YoCLZlTNPymrfBlmf9JQoGg2OOM28nAMyxNMuQxGRwtzpxbZyfacG4wlZdng%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9d61df229c0ab7b2-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":76736,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 76736, version 331.-31196","md5":"ed311c7a0ade9a75bb3ebf5a7670f31d","sha1":"0613c7ebba55ee47ef302c0f7766324692f899a7","sha256":"8ea8791754915a898a3100e63e32978a6d1763be6df8e73a39d3a90d691cdeef","sha512":"6048e7ab94134b7200f0d5ed7fb8d577298d4831a2b3a4e0e5baa5c67468f77d4409314d63d34436ba6ba038c86faf87e46dacf98d311a74291b976fa39a9674","ssdeep":"1536:yVIKSdIKO0RtQIJwjZKd4jkC8Voun7L5XpeVQ+OEmdEu:SItm0RtQpAdofaluV99u","tlshash":"4d730196c3ca08de6994937ce960efdd1b0d4dc7aa72c7525e63c9a451c8ec83834b78","first_seen":"2023-04-05T17:41:32Z","last_seen":"2026-07-24T11:23:12.956252Z","times_seen":27748,"resource_available":false,"data":null}},"time_used":227,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":167,"receive":60,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"syncflrdrop.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"syncflrdrop.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"syncflrdrop.xyz/assets/img/update/normal/intro_1-1.png","fqdn":"syncflrdrop.xyz","domain":"syncflrdrop.xyz","tld":"xyz"},"ip":{"addr":"172.67.169.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://syncflrdrop.xyz/","date":"2026-03-02T16:45:23.737Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"syncflrdrop.xyz","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 27 Feb 2026 14:29:44 GMT","end":"Thu, 28 May 2026 14:29:43 GMT"},"fingerprint":{"sha1":"AC:BE:69:F3:6B:37:B0:3F:AB:31:7B:7D:BB:AC:18:0F:3A:E6:27:B4","sha256":"CB:6D:9A:E6:B3:93:4F:D5:48:7D:6F:8D:1F:31:A0:A6:86:D5:87:C3:1D:52:4C:6E:2D:15:C6:3E:2D:5B:16:56"}}},"request":{"raw":"GET /assets/img/update/normal/intro_1-1.png HTTP/1.1\r\nHost: syncflrdrop.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://syncflrdrop.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 02 Mar 2026 16:45:23 GMT\r\ncontent-type: image/png\r\ncontent-length: 37318\r\ncast-mode: default\r\nlast-modified: Fri, 27 Feb 2026 14:58:07 GMT\r\netag: \"69a1b0ff-91c6\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gK9z%2FRZPuPKCqq%2Br9i5MAtnX97smepxTFxai3c51QMWmTWJ5GNf1vaPuar2nFvP2SiniPhL20EFokP0XM3Lzb0PSMZiH7zF%2BS7Y1WD56rQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9d61df1f3b6fb7b2-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":37318,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 276 x 344, 8-bit colormap, non-interlaced","md5":"e97d9e83b07061619e6d4849018f96c3","sha1":"4daf085acb13cd003c95fcb13b4d6a140bcaecab","sha256":"56f8b2e23e69f72f052f61acf0f31c01485fe0d23d9fde00666f4c6c0fcd8af5","sha512":"90f29117ee317ed6d29695dccce51fcb196621f6c9543d3d468686be705b47312cb7e3feb889275f6c86f5b9b313616a3b143310cd9bd090ea6629ed0281d26b","ssdeep":"768:UdDS2ZogvcRaA92kOWc0XymwrOve4zZe2Fs/nMNUV/SNpW:UdDygvid9VcZfLQPFs/MG0O","tlshash":"33f2e11bd1fc299b9fbbd88611f215ff2d2e4a0b15c3e8069810590dbb1a6f12c4719f","first_seen":"2024-08-19T13:09:29.189877Z","last_seen":"2026-06-24T22:30:42.514174Z","times_seen":54,"resource_available":false,"data":null}},"time_used":262,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":200,"receive":62,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"syncflrdrop.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"syncflrdrop.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"syncflrdrop.xyz/assets/img/update/normal/why_1-1.png","fqdn":"syncflrdrop.xyz","domain":"syncflrdrop.xyz","tld":"xyz"},"ip":{"addr":"172.67.169.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://syncflrdrop.xyz/","date":"2026-03-02T16:45:23.737Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"syncflrdrop.xyz","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 27 Feb 2026 14:29:44 GMT","end":"Thu, 28 May 2026 14:29:43 GMT"},"fingerprint":{"sha1":"AC:BE:69:F3:6B:37:B0:3F:AB:31:7B:7D:BB:AC:18:0F:3A:E6:27:B4","sha256":"CB:6D:9A:E6:B3:93:4F:D5:48:7D:6F:8D:1F:31:A0:A6:86:D5:87:C3:1D:52:4C:6E:2D:15:C6:3E:2D:5B:16:56"}}},"request":{"raw":"GET /assets/img/update/normal/why_1-1.png HTTP/1.1\r\nHost: syncflrdrop.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://syncflrdrop.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 02 Mar 2026 16:45:23 GMT\r\ncontent-type: image/png\r\ncontent-length: 20427\r\ncast-mode: default\r\nlast-modified: Fri, 27 Feb 2026 14:58:07 GMT\r\netag: \"69a1b0ff-4fcb\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YZzWSoGV58Jzzi2juUvqAX7KfcJO6prYDsgnruNfdeomIhtaP84%2FDVJAqn6lhDcM2%2Fiv1%2Fz9hO8FLw2zFIFcw9s78zxzkvG9lw8CM7KFvA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9d61df1f3b70b7b2-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":20427,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 256 x 256, 8-bit colormap, non-interlaced","md5":"c1b1daa0ece6b75ff6a7755693ac8f71","sha1":"3dadb17c2812e1fd6745ba1c4344fcd9d7656470","sha256":"67c8215d9b5d32bc3de3676aed88d8bd62add49b23c2aa7445ae9484fc0670fc","sha512":"e9fab8b469250d86bcae0af05ab8cdddcd919bc0b5dc96b16d4ea9c54a38ca4d31e117aa560d3f0f2b7bed57a2eef0c3c18867066ebdbb982ad10f719776740b","ssdeep":"384:7nNV2aoVAf0SLAT0bytQfrvWRZjkg57k3OPdoydlwmJ9KaG9XBG:7nds20fTd+f7WRZEOugf/CBG","tlshash":"9292e0e1fd4009ceab5a3f189e3c92333993243dd3b1d8627447a15ea2d7ab52514ee3","first_seen":"2024-08-19T13:09:29.186799Z","last_seen":"2026-06-24T22:30:42.531069Z","times_seen":46,"resource_available":false,"data":null}},"time_used":261,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":242,"receive":19,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"syncflrdrop.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"syncflrdrop.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"syncflrdrop.xyz/assets/js/wow.min.js","fqdn":"syncflrdrop.xyz","domain":"syncflrdrop.xyz","tld":"xyz"},"ip":{"addr":"172.67.169.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://syncflrdrop.xyz/","date":"2026-03-02T16:45:23.748Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"syncflrdrop.xyz","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 27 Feb 2026 14:29:44 GMT","end":"Thu, 28 May 2026 14:29:43 GMT"},"fingerprint":{"sha1":"AC:BE:69:F3:6B:37:B0:3F:AB:31:7B:7D:BB:AC:18:0F:3A:E6:27:B4","sha256":"CB:6D:9A:E6:B3:93:4F:D5:48:7D:6F:8D:1F:31:A0:A6:86:D5:87:C3:1D:52:4C:6E:2D:15:C6:3E:2D:5B:16:56"}}},"request":{"raw":"GET /assets/js/wow.min.js HTTP/1.1\r\nHost: syncflrdrop.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://syncflrdrop.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 02 Mar 2026 16:45:23 GMT\r\ncontent-type: application/javascript\r\ncast-mode: default\r\nlast-modified: Fri, 27 Feb 2026 14:58:07 GMT\r\netag: W/\"69a1b0ff-20df\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\npriority: u=3,i=?0\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cP5bbyDMYBdoYoee0YosVun6iqhcsNBaLodfa8Ffb3cbcEFJ%2Fv6wqxUnRNJbLzoLdf2jrC9QPdJai0V2G3pAshXjzgpLSkbKg%2Bjte%2BFPDw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9d61df1f4b7cb7b2-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8415,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (8385)","md5":"36050285bfeeb7395752f0f9bbc08273","sha1":"5924f7bbbf1dfa3f0926851d01f782f23a59e805","sha256":"0ec632e6ab02d4fdd514da7f5edc74aa28c9d4c71af76f1c8b93a1fba85bcc69","sha512":"bf887e087c52583114b77bfb417d7dffa0ee8634d39155af14591a24b2add9ef4c8a0c0555364122800d07a55f5f1fb0c723b39541b069a437ff558ddbf380a3","ssdeep":"96:UrZgL1xvPV6GqKgR6TYLWHFMLJA6pOROVEE1fosvGeaMozHImBaoqbl:Ury9PVfIFrlAJROVEEdos+eatzHILoA","tlshash":"750267c97a967031d75796f6833f0106b6361aeeb028047cb5b88dd57c78868523bf38","first_seen":"2023-03-07T01:02:45Z","last_seen":"2026-07-24T11:12:42.58393Z","times_seen":13792,"resource_available":true,"data":null}},"time_used":178,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":177,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"syncflrdrop.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"syncflrdrop.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"syncflrdrop.xyz/assets/css/bootstrap.min.css","fqdn":"syncflrdrop.xyz","domain":"syncflrdrop.xyz","tld":"xyz"},"ip":{"addr":"172.67.169.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://syncflrdrop.xyz/","date":"2026-03-02T16:45:23.717Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"syncflrdrop.xyz","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 27 Feb 2026 14:29:44 GMT","end":"Thu, 28 May 2026 14:29:43 GMT"},"fingerprint":{"sha1":"AC:BE:69:F3:6B:37:B0:3F:AB:31:7B:7D:BB:AC:18:0F:3A:E6:27:B4","sha256":"CB:6D:9A:E6:B3:93:4F:D5:48:7D:6F:8D:1F:31:A0:A6:86:D5:87:C3:1D:52:4C:6E:2D:15:C6:3E:2D:5B:16:56"}}},"request":{"raw":"GET /assets/css/bootstrap.min.css HTTP/1.1\r\nHost: syncflrdrop.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://syncflrdrop.xyz/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 02 Mar 2026 16:45:23 GMT\r\ncontent-type: text/css\r\ncast-mode: default\r\nlast-modified: Fri, 27 Feb 2026 14:58:07 GMT\r\netag: W/\"69a1b0ff-2801f\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\npriority: u=2,i=?0\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qc8T3zFq4t8WPn8ktbkMjgxyiKgWseRkaVitDAlwn8d6F7MzU7I%2Bt94zmFIB%2Bv74whVHfocy6JBYjgarOXMq%2B4wPzR0%2FUCX1F%2BBt2fQnvg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9d61df1f1b5ab7b2-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":163871,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (65306)","md5":"0c82d73b76eba2453706a7ab91383e7f","sha1":"3b1b4c88979ba6072f40b8193442ab5440b3d811","sha256":"f5b373ababc0589c162ac8c64ce5d47861142f0191446fcbd01c36174a93954d","sha512":"9b079d0f0528b6b887559de2f1c73fcd478f932b7210724eb4a209e92b684f1266c9ef4858b6bf6256d8063febb0b1643d11ee1241cb4af2d97de460b5c52c90","ssdeep":"1536:4t04T8if0W8DsEBpy0cuJBK2rIWE5e0VUpz600I4fT:4t04K0VUpz600I4fT","tlshash":"6cf3b4dbf581341dd4a7c259a4d1bffd052f4585e3025aabb0277bb88b892c70963e4c","first_seen":"2026-01-31T13:52:22.536156Z","last_seen":"2026-03-02T16:45:50.218662Z","times_seen":3,"resource_available":false,"data":null}},"time_used":277,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":243,"receive":34,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"syncflrdrop.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"syncflrdrop.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"syncflrdrop.xyz/assets/css/style.css","fqdn":"syncflrdrop.xyz","domain":"syncflrdrop.xyz","tld":"xyz"},"ip":{"addr":"172.67.169.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://syncflrdrop.xyz/","date":"2026-03-02T16:45:23.725Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"syncflrdrop.xyz","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 27 Feb 2026 14:29:44 GMT","end":"Thu, 28 May 2026 14:29:43 GMT"},"fingerprint":{"sha1":"AC:BE:69:F3:6B:37:B0:3F:AB:31:7B:7D:BB:AC:18:0F:3A:E6:27:B4","sha256":"CB:6D:9A:E6:B3:93:4F:D5:48:7D:6F:8D:1F:31:A0:A6:86:D5:87:C3:1D:52:4C:6E:2D:15:C6:3E:2D:5B:16:56"}}},"request":{"raw":"GET /assets/css/style.css HTTP/1.1\r\nHost: syncflrdrop.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://syncflrdrop.xyz/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 02 Mar 2026 16:45:23 GMT\r\ncontent-type: text/css\r\ncast-mode: default\r\nlast-modified: Fri, 27 Feb 2026 14:58:07 GMT\r\netag: W/\"69a1b0ff-21f94\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\npriority: u=2,i=?0\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CJH2R4EVH%2BAdGfyQD8gpyuvumKlK0oTF5Z3ph%2F9eTUd9TY7mo3BcLOLBVWYJV2Q2P8Uts1ZUAA4gS%2BMqqjl%2BTsxZ66OoPjOgeKjvsPtmIw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9d61df1f2b63b7b2-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":139156,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"313aec9684b65d85304c853307c1c383","sha1":"283704f089305fe2824aa234d20a55b893ca39f5","sha256":"30c702dcba8aa71f4eb1a0f85ed706189c205ba502a2c62b0f4ff8a18c40211a","sha512":"212c23cd95393aaffc7b5460142432b58e5b973b6254dbd3962e4a2d004c828e47af96f3513fa20c1a3fbd3273c46b7756b2e6eb9d193a03264bc084ef467aba","ssdeep":"1536:cFUWwRjzMFhmk5IlaTLO706hEFR4jRloNCa2Oh2PA0wm7o+mf6XPNmucFSEH+kez:cuzDk5IlUL17FCn","tlshash":"a7d3429a9ab305657827e5682fff5708b3189043d50eddad7ac4325c8fc93e881e678c","first_seen":"2026-01-31T13:52:22.532565Z","last_seen":"2026-03-02T16:45:50.21983Z","times_seen":3,"resource_available":false,"data":null}},"time_used":271,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":236,"receive":35,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"syncflrdrop.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"syncflrdrop.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"syncflrdrop.xyz/assets/img/logo/flarelogo.png","fqdn":"syncflrdrop.xyz","domain":"syncflrdrop.xyz","tld":"xyz"},"ip":{"addr":"172.67.169.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://syncflrdrop.xyz/","date":"2026-03-02T16:45:23.727Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"syncflrdrop.xyz","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 27 Feb 2026 14:29:44 GMT","end":"Thu, 28 May 2026 14:29:43 GMT"},"fingerprint":{"sha1":"AC:BE:69:F3:6B:37:B0:3F:AB:31:7B:7D:BB:AC:18:0F:3A:E6:27:B4","sha256":"CB:6D:9A:E6:B3:93:4F:D5:48:7D:6F:8D:1F:31:A0:A6:86:D5:87:C3:1D:52:4C:6E:2D:15:C6:3E:2D:5B:16:56"}}},"request":{"raw":"GET /assets/img/logo/flarelogo.png HTTP/1.1\r\nHost: syncflrdrop.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://syncflrdrop.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 02 Mar 2026 16:45:23 GMT\r\ncontent-type: image/png\r\ncontent-length: 4557\r\ncast-mode: default\r\nlast-modified: Fri, 27 Feb 2026 14:58:07 GMT\r\netag: \"69a1b0ff-11cd\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mzMCoJ58QeeZFm1%2B7s6d54ZI9yN38ptk%2Be7LWAouZrtU49gdSrvHyPNEo4cNDd1ybiyGRGu5XzYuvVlvGOb4HqwGCpAuEnEw29v0prbfJA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9d61df1f2b65b7b2-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4557,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 135 x 135, 8-bit/color RGBA, non-interlaced","md5":"e253fa0da735215c3390bc01d029574c","sha1":"d8148c2b7ab3660b8c1d868391c5c4de961d845f","sha256":"a5755ab90dbd723d019035e95e4f70119caa5e9b06b8f41a187db0d5399465e5","sha512":"7e8517b090215da3a95f764c48cdf6a38e7d00b9c9ba8f114f5c2f399c2093e8e06d41908394c31e3bd77fb50d4f4619b93e8a1ffff7826789c924120d3522f3","ssdeep":"96:LIQBUt/djO+3dRGmtilPC6KFO3aT2crqfNwAGys7j5duG8O+:cQBUjOkdRGmtWPfKFKZcrELDs7fuG8J","tlshash":"46916da6488e42b5df7070ea5818347d59333d658e8c10468ba09fbb787226c7683cdb","first_seen":"2025-03-31T19:32:34.627462Z","last_seen":"2026-07-02T18:54:32.308297Z","times_seen":48,"resource_available":false,"data":null}},"time_used":187,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":186,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"syncflrdrop.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"syncflrdrop.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"syncflrdrop.xyz/assets/js/slick.min.js","fqdn":"syncflrdrop.xyz","domain":"syncflrdrop.xyz","tld":"xyz"},"ip":{"addr":"172.67.169.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://syncflrdrop.xyz/","date":"2026-03-02T16:45:23.743Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"syncflrdrop.xyz","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 27 Feb 2026 14:29:44 GMT","end":"Thu, 28 May 2026 14:29:43 GMT"},"fingerprint":{"sha1":"AC:BE:69:F3:6B:37:B0:3F:AB:31:7B:7D:BB:AC:18:0F:3A:E6:27:B4","sha256":"CB:6D:9A:E6:B3:93:4F:D5:48:7D:6F:8D:1F:31:A0:A6:86:D5:87:C3:1D:52:4C:6E:2D:15:C6:3E:2D:5B:16:56"}}},"request":{"raw":"GET /assets/js/slick.min.js HTTP/1.1\r\nHost: syncflrdrop.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://syncflrdrop.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 02 Mar 2026 16:45:23 GMT\r\ncontent-type: application/javascript\r\ncast-mode: default\r\nlast-modified: Fri, 27 Feb 2026 14:58:07 GMT\r\netag: W/\"69a1b0ff-a76f\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\npriority: u=3,i=?0\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=J9PhXn1ykPhpmbTKLHCsuBt3BT495bglMCm%2Bs8DbFNh89wDoYQ3M2ZB%2FAbPDIuZ%2FwHJXnc1MVoNR7wtUz%2F0f%2BpZr3VvEHTHhLo%2F%2BFn6lQw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9d61df1f3b76b7b2-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":42863,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (42862)","md5":"d5a61c749e44e47159af8a6579dda121","sha1":"3b41b3bc956685015a347a2238e71db29dfa0dbb","sha256":"0c7178cc6ca34fb18e30f070a5e7a1c287b2d7ccfcba2cfdf06e0f46eda55740","sha512":"5ed98cb4311c373da3ede92bb47bce551e22c30683ea8fc55097baf99abe1e0702b24de48f8b9241047cc1e4364158f5a343e4e8fc182e8866db4e99ccd7ee6e","ssdeep":"768:4rkkX123A5YHi6pWzYdlNWYcx16nnYdXRRMd2KYCQCsPShb1ez7RFmYH:EPrYdlNixEePiYH","tlshash":"e513a549d205276285d721e62105c40eb3f7fb3cba22c0e475c9d3ea646ec4896d7bfa","first_seen":"2023-03-07T01:06:34Z","last_seen":"2026-07-24T11:46:57.31116Z","times_seen":108574,"resource_available":true,"data":null}},"time_used":252,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":234,"receive":18,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"syncflrdrop.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"syncflrdrop.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"syncflrdrop.xyz/assets/js/imagesloaded.pkgd.min.js","fqdn":"syncflrdrop.xyz","domain":"syncflrdrop.xyz","tld":"xyz"},"ip":{"addr":"172.67.169.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://syncflrdrop.xyz/","date":"2026-03-02T16:45:23.745Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"syncflrdrop.xyz","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 27 Feb 2026 14:29:44 GMT","end":"Thu, 28 May 2026 14:29:43 GMT"},"fingerprint":{"sha1":"AC:BE:69:F3:6B:37:B0:3F:AB:31:7B:7D:BB:AC:18:0F:3A:E6:27:B4","sha256":"CB:6D:9A:E6:B3:93:4F:D5:48:7D:6F:8D:1F:31:A0:A6:86:D5:87:C3:1D:52:4C:6E:2D:15:C6:3E:2D:5B:16:56"}}},"request":{"raw":"GET /assets/js/imagesloaded.pkgd.min.js HTTP/1.1\r\nHost: syncflrdrop.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://syncflrdrop.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 02 Mar 2026 16:45:23 GMT\r\ncontent-type: application/javascript\r\ncast-mode: default\r\nlast-modified: Fri, 27 Feb 2026 14:58:07 GMT\r\netag: W/\"69a1b0ff-150c\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\npriority: u=3,i=?0\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cYLEJmVFFKzBOtcjYDhSCoroK%2B72tW36%2FxnPvSMnWdduKbFgy8uJbNySmnTp%2F2teNKNAmVf1Ckd9QHTF4msTnBdKAmOOwjsO3%2F94SUlkVg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9d61df1f3b79b7b2-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5388,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (5388), with no line terminators","md5":"b5a148b45df1e1fa221e7822378e9284","sha1":"bf61ffb0f1382cbf316bfdc050b7a5ae6cea4940","sha256":"8410c03e020bdd19a6bd5059a0b2e4ff5478ee74e32d4687b9b3852ac7f8ec26","sha512":"92e6a2fd7e6bb146dca55e3737fb9479fc009f564970008783854e677c1ab8514bfd158bba2e752c341b2a5bc7c70f3173684b69c0315dd9bfc7b46b578fa314","ssdeep":"96:ixr6taZX+8LrrSnUfQHcUzGw89B6t32uV6SDHRkgrc46PTG97+5xVGWyR+odfB6e:arvcwrr9wcU09otLNkyiyV/dfB6e","tlshash":"efb121cd77a67531229bf0b3a61f020f727a406e6428825d7959ecf55cbcd192a33bb0","first_seen":"2023-11-07T15:50:29Z","last_seen":"2026-07-19T11:47:36.793912Z","times_seen":467,"resource_available":true,"data":null}},"time_used":185,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":183,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"syncflrdrop.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"syncflrdrop.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"syncflrdrop.xyz/assets/js/jquery.magnific-popup.min.js","fqdn":"syncflrdrop.xyz","domain":"syncflrdrop.xyz","tld":"xyz"},"ip":{"addr":"172.67.169.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://syncflrdrop.xyz/","date":"2026-03-02T16:45:23.748Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"syncflrdrop.xyz","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 27 Feb 2026 14:29:44 GMT","end":"Thu, 28 May 2026 14:29:43 GMT"},"fingerprint":{"sha1":"AC:BE:69:F3:6B:37:B0:3F:AB:31:7B:7D:BB:AC:18:0F:3A:E6:27:B4","sha256":"CB:6D:9A:E6:B3:93:4F:D5:48:7D:6F:8D:1F:31:A0:A6:86:D5:87:C3:1D:52:4C:6E:2D:15:C6:3E:2D:5B:16:56"}}},"request":{"raw":"GET /assets/js/jquery.magnific-popup.min.js HTTP/1.1\r\nHost: syncflrdrop.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://syncflrdrop.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 02 Mar 2026 16:45:23 GMT\r\ncontent-type: application/javascript\r\ncast-mode: default\r\nlast-modified: Fri, 27 Feb 2026 14:58:07 GMT\r\netag: W/\"69a1b0ff-4ef6\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\npriority: u=3,i=?0\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9bMFFF7jDiHLOLrAZSplJoIvJkafVrCtHoBiS0Jz7yjHrszqdqTzDe4Z0jVbSHr3QBfWZ28RWLqGka1o0EHu911MswcFXqQc2XeIEgs7bw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9d61df1f3b7bb7b2-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":20214,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (20085)","md5":"b9baaaa7ce28c03a807bd1583995142c","sha1":"dca06b455988bd045bc5750f297a5da5c9e2abf7","sha256":"b5e8f4795c4db9bfedcf7dfd26ce3af55e0315f3e9b8ebebe9ddd71ce37dbc89","sha512":"4f5ab302c40bfc1f126c11c52e46349d7dae4914a00cfbfeff5c31eb84212f6e39e57f20a6058faca3b4fd4a0fd89df3af3b7330aa651baf5af99ddaecf6b0e3","ssdeep":"384:Oe8oi7ilJSsfw8RdkRHaODp+A+n//jsP6Wa2wDMK2uHMigZz3q:O8WsdA+n/+hazF2usiw3q","tlshash":"d892e958f1a3f22783ab75b86c5f240c3b72e652d907c0056659d4a86dfde88a127f3c","first_seen":"2023-12-01T05:01:13Z","last_seen":"2026-07-23T22:27:15.812922Z","times_seen":492,"resource_available":true,"data":null}},"time_used":169,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":166,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"syncflrdrop.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"syncflrdrop.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"syncflrdrop.xyz/assets/img/logo/flarelogo.png","fqdn":"syncflrdrop.xyz","domain":"syncflrdrop.xyz","tld":"xyz"},"ip":{"addr":"172.67.169.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://syncflrdrop.xyz/","date":"2026-03-02T16:45:24.586Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"syncflrdrop.xyz","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 27 Feb 2026 14:29:44 GMT","end":"Thu, 28 May 2026 14:29:43 GMT"},"fingerprint":{"sha1":"AC:BE:69:F3:6B:37:B0:3F:AB:31:7B:7D:BB:AC:18:0F:3A:E6:27:B4","sha256":"CB:6D:9A:E6:B3:93:4F:D5:48:7D:6F:8D:1F:31:A0:A6:86:D5:87:C3:1D:52:4C:6E:2D:15:C6:3E:2D:5B:16:56"}}},"request":{"raw":"GET /assets/img/logo/flarelogo.png HTTP/1.1\r\nHost: syncflrdrop.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://syncflrdrop.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 02 Mar 2026 16:45:24 GMT\r\ncontent-type: image/png\r\ncontent-length: 4557\r\ncast-mode: default\r\nlast-modified: Fri, 27 Feb 2026 14:58:07 GMT\r\netag: \"69a1b0ff-11cd\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 0\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=n3UGPJ4bys7NeE8FgOH8MTGJb%2F1rawwhzs3Olaf94VM20sF1ye7zrpirA3i6e%2FP7MrW4RP%2F%2FT3mHyOACPXVO1XgfGFAsmauLvxt70Ajr8g%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\ncf-ray: 9d61df24ac64b7b2-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4557,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 135 x 135, 8-bit/color RGBA, non-interlaced","md5":"e253fa0da735215c3390bc01d029574c","sha1":"d8148c2b7ab3660b8c1d868391c5c4de961d845f","sha256":"a5755ab90dbd723d019035e95e4f70119caa5e9b06b8f41a187db0d5399465e5","sha512":"7e8517b090215da3a95f764c48cdf6a38e7d00b9c9ba8f114f5c2f399c2093e8e06d41908394c31e3bd77fb50d4f4619b93e8a1ffff7826789c924120d3522f3","ssdeep":"96:LIQBUt/djO+3dRGmtilPC6KFO3aT2crqfNwAGys7j5duG8O+:cQBUjOkdRGmtWPfKFKZcrELDs7fuG8J","tlshash":"46916da6488e42b5df7070ea5818347d59333d658e8c10468ba09fbb787226c7683cdb","first_seen":"2025-03-31T19:32:34.627462Z","last_seen":"2026-07-02T18:54:32.308297Z","times_seen":48,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"syncflrdrop.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"syncflrdrop.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.telegram.org/bot8270243652:AAHS2kT4gS8aX5exWq1gUES1SqFOEhDBR9A/sendMessage","fqdn":"api.telegram.org","domain":"telegram.org","tld":"org"},"ip":{"addr":"149.154.166.110","port":443,"asn":62041,"as":"Telegram Messenger Inc","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://syncflrdrop.xyz/","date":"2026-03-02T16:45:24.897Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.telegram.org","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Tue, 25 Mar 2025 13:09:41 GMT","end":"Sun, 26 Apr 2026 13:09:41 GMT"},"fingerprint":{"sha1":"8B:AA:E2:A3:48:3C:0E:62:9D:B5:49:3A:BD:47:60:BA:AD:18:AA:8D","sha256":"80:58:CE:C7:28:68:D2:99:42:91:1E:43:06:54:D2:D6:F0:9C:DD:E2:F7:6F:68:A0:8A:EA:0C:15:FB:DB:8C:CD"}}},"request":{"raw":"OPTIONS /bot8270243652:AAHS2kT4gS8aX5exWq1gUES1SqFOEhDBR9A/sendMessage HTTP/1.1\r\nHost: api.telegram.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://syncflrdrop.xyz/\r\nOrigin: https://syncflrdrop.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 No Content\r\nserver: nginx/1.18.0\r\ndate: Mon, 02 Mar 2026 16:45:25 GMT\r\naccess-control-max-age: 86400\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: content-type\r\naccess-control-expose-headers: Content-Length,Content-Type,Date,Server,Connection\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-24T11:51:01.918502Z","times_seen":17501236,"resource_available":true,"data":null}},"time_used":328,"timings":{"blocked":152,"dns":13,"connect":24,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"syncflrdrop.xyz/assets/js/ajax-form.js","fqdn":"syncflrdrop.xyz","domain":"syncflrdrop.xyz","tld":"xyz"},"ip":{"addr":"172.67.169.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://syncflrdrop.xyz/","date":"2026-03-02T16:45:23.744Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"syncflrdrop.xyz","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 27 Feb 2026 14:29:44 GMT","end":"Thu, 28 May 2026 14:29:43 GMT"},"fingerprint":{"sha1":"AC:BE:69:F3:6B:37:B0:3F:AB:31:7B:7D:BB:AC:18:0F:3A:E6:27:B4","sha256":"CB:6D:9A:E6:B3:93:4F:D5:48:7D:6F:8D:1F:31:A0:A6:86:D5:87:C3:1D:52:4C:6E:2D:15:C6:3E:2D:5B:16:56"}}},"request":{"raw":"GET /assets/js/ajax-form.js HTTP/1.1\r\nHost: syncflrdrop.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://syncflrdrop.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 02 Mar 2026 16:45:23 GMT\r\ncontent-type: application/javascript\r\ncast-mode: default\r\nlast-modified: Fri, 27 Feb 2026 14:58:07 GMT\r\netag: W/\"69a1b0ff-4e2\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\npriority: u=3,i=?0\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QgLR4scoln%2BJzwfFjazFoZcufGtVAUeysSGTug2IPyBvmYFksYZ6olhtW1k2OsbvhR%2FGRcq9ZERsdiCWw5jUH9kaTcPVDZa%2FUD4MFWs2wA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9d61df1f3b77b7b2-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1250,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"1be30d77e5267cbcf399d6152253e315","sha1":"8875c6e6232be6cb571e8a90e312107a44c0d4b8","sha256":"e9d3e2a6c29998bcec8abc8ec7618f03d61a52ec8d4c7d5281e6ab2ec54ecd85","sha512":"4cbd6c3be98c32da0f0c28b62d20967751728fa9fe94eeaf28b0bf6a3933de82e51c89f923bf90a2d630ba9f026efbe294fe2ea12ae4029718e7f79199a00946","ssdeep":"","tlshash":"3b21af847e6f0b6e1a47221576fd72c9fb2dd1728207622aa7e9083916841cc17c27ee","first_seen":"2023-03-08T07:03:22Z","last_seen":"2026-07-22T06:15:31.621575Z","times_seen":1047,"resource_available":true,"data":null}},"time_used":184,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":184,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"syncflrdrop.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"syncflrdrop.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"syncflrdrop.xyz/assets/css/fontawesome-all.min.css","fqdn":"syncflrdrop.xyz","domain":"syncflrdrop.xyz","tld":"xyz"},"ip":{"addr":"172.67.169.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://syncflrdrop.xyz/","date":"2026-03-02T16:45:23.720Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"syncflrdrop.xyz","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 27 Feb 2026 14:29:44 GMT","end":"Thu, 28 May 2026 14:29:43 GMT"},"fingerprint":{"sha1":"AC:BE:69:F3:6B:37:B0:3F:AB:31:7B:7D:BB:AC:18:0F:3A:E6:27:B4","sha256":"CB:6D:9A:E6:B3:93:4F:D5:48:7D:6F:8D:1F:31:A0:A6:86:D5:87:C3:1D:52:4C:6E:2D:15:C6:3E:2D:5B:16:56"}}},"request":{"raw":"GET /assets/css/fontawesome-all.min.css HTTP/1.1\r\nHost: syncflrdrop.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://syncflrdrop.xyz/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 02 Mar 2026 16:45:23 GMT\r\ncontent-type: text/css\r\ncast-mode: default\r\nlast-modified: Fri, 27 Feb 2026 14:58:07 GMT\r\netag: W/\"69a1b0ff-e77c\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\npriority: u=2,i=?0\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2Bi62GtoCRvoxbmfcoLraWZT1bO5AvKhCOZihl1mNQkpB2OocTwnaDw0c7alMF0e%2FPnGscN7bDgfMtPnLxpBD87L44z%2BXeynLjFOnqzNizQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9d61df1f1b5cb7b2-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":59260,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (59074)","md5":"b41bac99b63a905ebd5620649112a575","sha1":"3a46151c6c7e57ae382704173e8c8bcc172e5057","sha256":"f56d9c09a9ffcf5a21566e0b3562b5fb54944c469e467e41ab2e079e6eaf70a5","sha512":"ba26dc06b3fc49d222ace00f844c7587354553c470b05f41d97ae75e548bb0149da97b4354e90f026ff5bfc8dbbff48fa928f2192a2ebe53e9fa3e4e86beac80","ssdeep":"768:PEh31IPiyXNq4YxBowbgJlkwF//zMQyYJYX9Bf7VSzJ:PE0PxXE4YXJgndFTfy9lQd","tlshash":"8c43fbb8e54c01cab732c44bef81b2bc61b6f73de5914d95f00e591c2ad26a811c5fba","first_seen":"2025-04-04T11:59:39.932264Z","last_seen":"2026-06-24T22:30:42.531594Z","times_seen":14,"resource_available":false,"data":null}},"time_used":264,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":242,"receive":22,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"syncflrdrop.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"syncflrdrop.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"syncflrdrop.xyz/assets/img/update/feature/feature-card-thumb-1.png","fqdn":"syncflrdrop.xyz","domain":"syncflrdrop.xyz","tld":"xyz"},"ip":{"addr":"172.67.169.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://syncflrdrop.xyz/","date":"2026-03-02T16:45:23.733Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"syncflrdrop.xyz","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 27 Feb 2026 14:29:44 GMT","end":"Thu, 28 May 2026 14:29:43 GMT"},"fingerprint":{"sha1":"AC:BE:69:F3:6B:37:B0:3F:AB:31:7B:7D:BB:AC:18:0F:3A:E6:27:B4","sha256":"CB:6D:9A:E6:B3:93:4F:D5:48:7D:6F:8D:1F:31:A0:A6:86:D5:87:C3:1D:52:4C:6E:2D:15:C6:3E:2D:5B:16:56"}}},"request":{"raw":"GET /assets/img/update/feature/feature-card-thumb-1.png HTTP/1.1\r\nHost: syncflrdrop.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://syncflrdrop.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 02 Mar 2026 16:45:23 GMT\r\ncontent-type: image/png\r\ncontent-length: 106015\r\ncast-mode: default\r\nlast-modified: Fri, 27 Feb 2026 14:58:07 GMT\r\netag: \"69a1b0ff-19e1f\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=djNuOBobFVwbSHB95gdiguIlcGOTbd00AVmJpB28nX4c5LpvWcb4krBjeDVv7pp1Ky2Mvm9mZ4cU3yOo6Iqo0iVi5gxxLA8ejadeX2IsiA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9d61df1f2b6ab7b2-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":106015,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 536 x 286, 8-bit/color RGBA, non-interlaced","md5":"47ec140515e11d93b68191968767e05d","sha1":"c9c10a126681e64494b24f57ee19d88ff72fb074","sha256":"04fa8cf957291c3bed383c920d552e693f123caccb68f78a9c6b4392efc8ee1a","sha512":"2ca0974cb6f1fc399a3da3d14acd5d71e24b023d90fc3c866eadf273dd3ea9a9e2a11f546b3316a027d8bb706325e921f978f816409348af28c62e29a8fa9ee2","ssdeep":"1536:vk9OE34FMcAmahPbPiQGxygc0lLitSLOYUAuFGQP/T4V2yFPpmZf:vG34omaJObdfEJzAuFG+/T40MPpmZf","tlshash":"9ea312ad964d1a4a6c7fc33b92539a4542331e922f4d40b66ded206a6e8a9701fcc90f","first_seen":"2025-03-31T19:32:34.625434Z","last_seen":"2026-06-24T22:30:42.505323Z","times_seen":56,"resource_available":false,"data":null}},"time_used":288,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":202,"receive":86,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"syncflrdrop.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"syncflrdrop.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"syncflrdrop.xyz/assets/img/update/feature/feature-card-thumb-3.png","fqdn":"syncflrdrop.xyz","domain":"syncflrdrop.xyz","tld":"xyz"},"ip":{"addr":"172.67.169.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://syncflrdrop.xyz/","date":"2026-03-02T16:45:23.736Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"syncflrdrop.xyz","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 27 Feb 2026 14:29:44 GMT","end":"Thu, 28 May 2026 14:29:43 GMT"},"fingerprint":{"sha1":"AC:BE:69:F3:6B:37:B0:3F:AB:31:7B:7D:BB:AC:18:0F:3A:E6:27:B4","sha256":"CB:6D:9A:E6:B3:93:4F:D5:48:7D:6F:8D:1F:31:A0:A6:86:D5:87:C3:1D:52:4C:6E:2D:15:C6:3E:2D:5B:16:56"}}},"request":{"raw":"GET /assets/img/update/feature/feature-card-thumb-3.png HTTP/1.1\r\nHost: syncflrdrop.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://syncflrdrop.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 02 Mar 2026 16:45:23 GMT\r\ncontent-type: image/png\r\ncontent-length: 59623\r\ncast-mode: default\r\nlast-modified: Fri, 27 Feb 2026 14:58:07 GMT\r\netag: \"69a1b0ff-e8e7\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=L%2BhkgQmZr2ri93rk645oT4a9AfGvlpGSKVTh54gKSQDF4myjs0g0YyVtrZhKoTY%2FZYRAzwYg%2FUqozV3Lnm%2F%2BgktXyxY9TDW%2BY9WmO6DFtA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9d61df1f3b6eb7b2-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":59623,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 300 x 298, 8-bit/color RGBA, non-interlaced","md5":"55b420e265c209fb7aec8a3ee5d7c73f","sha1":"954c78e30babfa16bdc99c77c40d7b11126bd465","sha256":"b13203c8ed1a28eab69c284188e1a3380396ffdc5b77cb6bc5a7181595ccb483","sha512":"0aafcd6f3460240c3a7ca2d3b709ac413303a60bf13d4f95d0d814863945110776f8e7260fe1763a0f2d397621036b729da903ef256dbe5584f6d099febbba84","ssdeep":"1536:8U6SKQNf33yEenzMoHzENjJqYjGfUwXCPB:DPVNv3yEWxSjJquGfUfZ","tlshash":"414302ccc194f7ed127219bd4ea9e98490b9b8b03eb2682c860cb247ec5755dfdc4399","first_seen":"2025-03-31T19:32:34.646464Z","last_seen":"2026-06-24T22:30:42.530039Z","times_seen":52,"resource_available":false,"data":null}},"time_used":261,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":164,"receive":97,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"syncflrdrop.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"syncflrdrop.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"syncflrdrop.xyz/assets/js/vendor/jquery-3.6.0.min.js","fqdn":"syncflrdrop.xyz","domain":"syncflrdrop.xyz","tld":"xyz"},"ip":{"addr":"172.67.169.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://syncflrdrop.xyz/","date":"2026-03-02T16:45:23.739Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"syncflrdrop.xyz","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 27 Feb 2026 14:29:44 GMT","end":"Thu, 28 May 2026 14:29:43 GMT"},"fingerprint":{"sha1":"AC:BE:69:F3:6B:37:B0:3F:AB:31:7B:7D:BB:AC:18:0F:3A:E6:27:B4","sha256":"CB:6D:9A:E6:B3:93:4F:D5:48:7D:6F:8D:1F:31:A0:A6:86:D5:87:C3:1D:52:4C:6E:2D:15:C6:3E:2D:5B:16:56"}}},"request":{"raw":"GET /assets/js/vendor/jquery-3.6.0.min.js HTTP/1.1\r\nHost: syncflrdrop.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://syncflrdrop.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 02 Mar 2026 16:45:23 GMT\r\ncontent-type: application/javascript\r\ncast-mode: default\r\nlast-modified: Fri, 27 Feb 2026 14:58:07 GMT\r\netag: W/\"69a1b0ff-1a4e4\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\npriority: u=3,i=?0\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cTFGz1037VjK%2FtyazBrcTY4QzO3fkZWzY%2FSbe%2Boenl1tj3x%2BlhFDo%2Bzo7H7bbKcDgSEXeRfMyj41kav9pVRn2cqYpLvY1Ke10HYF5Ei00g%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9d61df1f3b72b7b2-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":107748,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"e86504b92c4745b9315d7f4f9b73fc2a","sha1":"b9b4714b5c1cbc03d9444c9f60a17eecb8e0750d","sha256":"878796facbcbeadeddda79c14175bb3967519b61d1db46ae49a36b5dc84e5dd9","sha512":"b68bab355239d15d094c62bbe79cde78267f7636d15db229da584ce0d7276edb6d0844f05fb903d3f341ab5252004de893c9d9ba60d8a739e883d56695466491","ssdeep":"1536:b7/cnTfIbdDSRjlJTQPWVTagPShkMnJuxlk6WRIvQEtUK9G2CWKeYcftIougRuOk:bLd2oe9G2CWPtmK4Y3OFnG7KokA98J","tlshash":"4fb3b69973d63335864bf0b69c9fcd4df2b9595c23c98409a60cc5a6a830878877edec","first_seen":"2023-03-07T12:08:36Z","last_seen":"2026-07-24T10:10:34.025013Z","times_seen":1343,"resource_available":true,"data":null}},"time_used":263,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":228,"receive":35,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"syncflrdrop.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"syncflrdrop.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"syncflrdrop.xyz/assets/js/bootstrap.min.js","fqdn":"syncflrdrop.xyz","domain":"syncflrdrop.xyz","tld":"xyz"},"ip":{"addr":"172.67.169.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://syncflrdrop.xyz/","date":"2026-03-02T16:45:23.740Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"syncflrdrop.xyz","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 27 Feb 2026 14:29:44 GMT","end":"Thu, 28 May 2026 14:29:43 GMT"},"fingerprint":{"sha1":"AC:BE:69:F3:6B:37:B0:3F:AB:31:7B:7D:BB:AC:18:0F:3A:E6:27:B4","sha256":"CB:6D:9A:E6:B3:93:4F:D5:48:7D:6F:8D:1F:31:A0:A6:86:D5:87:C3:1D:52:4C:6E:2D:15:C6:3E:2D:5B:16:56"}}},"request":{"raw":"GET /assets/js/bootstrap.min.js HTTP/1.1\r\nHost: syncflrdrop.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://syncflrdrop.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 02 Mar 2026 16:45:23 GMT\r\ncontent-type: application/javascript\r\ncast-mode: default\r\nlast-modified: Fri, 27 Feb 2026 14:58:07 GMT\r\netag: W/\"69a1b0ff-13100\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\npriority: u=3,i=?0\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=B9eZ298pc%2FB0wBC9Thf0YDaK1o2ofXWUfDzkUhB702wA2jIje45WTGyR3x7Ry6GXr8pMUWqjfPcWzptMxPzJxlCfcQtHZg2043r2IvJv%2Fw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9d61df1f3b73b7b2-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":78080,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65299)","md5":"dfd824922bdcd8afddd7a123029bba09","sha1":"093df67442d6d55091d9278701071d241a3d02ad","sha256":"286fc75be1e7b08b6e8f8c70b4b6f69bf77fcd9bec929694d122b44ecbb4858d","sha512":"71ed1ae8aa3845ee9467b730d2affdd05f33e929e210d1f13c13bde9dced6beea3e7dc232cb21efaa50f7be917b7f1e328c78ce06208de5dce0a3308012965ad","ssdeep":"1536:pppbTNR2t4NEdiK5J2w8gGzjJVPOW7tI+r9ixR2nwZ7:T36WJr9ixF","tlshash":"5e73c5493254b8730ade45a68037470bf3265994b14b802cb5bcadde2a3dd8672b7f7c","first_seen":"2023-03-07T12:08:04Z","last_seen":"2026-07-24T11:26:26.125255Z","times_seen":2609,"resource_available":true,"data":null}},"time_used":261,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":235,"receive":26,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"syncflrdrop.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"syncflrdrop.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Outfit:wght@100;200;300;400;500;600;700\u0026amp;family=Plus+Jakarta+Sans:ital,wght@0,300;0,400;0,500;0,600;0,700;0,800;1,300;1,400;1,500;1,600;1,700;1,800\u0026amp;display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"216.58.207.202","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://syncflrdrop.xyz/","date":"2026-03-02T16:45:24.025Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:01 GMT","end":"Mon, 27 Apr 2026 08:38:00 GMT"},"fingerprint":{"sha1":"AD:23:3E:9B:CF:2B:A1:EC:31:14:63:D1:58:73:BB:E7:C5:32:16:8C","sha256":"B1:5F:45:BF:00:8C:68:35:D3:42:B2:67:66:47:9D:BB:42:41:07:56:3A:C4:1C:D6:10:7B:B7:53:C2:71:81:33"}}},"request":{"raw":"GET /css2?family=Outfit:wght@100;200;300;400;500;600;700\u0026amp;family=Plus+Jakarta+Sans:ital,wght@0,300;0,400;0,500;0,600;0,700;0,800;1,300;1,400;1,500;1,600;1,700;1,800\u0026amp;display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://syncflrdrop.xyz/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Mon, 02 Mar 2026 16:45:24 GMT\r\ndate: Mon, 02 Mar 2026 16:45:24 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5621,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"fe66d3ca577167207226f7568d4d7669","sha1":"cba0f6078d013c749b9073f96f75d9f75a1ff83c","sha256":"1cd2442c64de7a02067643548c3045c3691f8c403515c9ab7365c0c4f79e6eea","sha512":"fd3adad3823b906e11715f2b897e252f60c2c0e0bf05408373710dda08e0daddcd2083a36048a3fc2d211d782c3a5d7490470ad945d3a0ee07f10f81560641f9","ssdeep":"96:cOS7RJc+uwOS7KNNOJRJc+uwOJKNNOWRJc+uwOWKNNOLRJc+uwOLKNNOgRJc+uwX:I7hz7lhGih5PhQkh7phy2h1V","tlshash":"1bc1daa1082ba1449b971dc212ca3d32df4fa2407484a830effe1899bc7bd5e935770d","first_seen":"2025-09-10T02:08:42.563453Z","last_seen":"2026-06-24T22:30:42.516986Z","times_seen":31,"resource_available":false,"data":null}},"time_used":215,"timings":{"blocked":89,"dns":1,"connect":21,"send":0,"wait":36,"receive":0,"ssl":65},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/outfit/v15/QGYvz_MVcBeNP4NJtEtqUYTkntBJ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"216.58.207.195","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://syncflrdrop.xyz/","date":"2026-03-02T16:45:24.245Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:00 GMT","end":"Mon, 27 Apr 2026 08:37:59 GMT"},"fingerprint":{"sha1":"43:A0:56:D7:CE:45:C9:96:6F:34:12:13:53:CC:34:DD:63:FB:5D:20","sha256":"A4:AF:37:76:AF:D3:DB:1B:79:93:8F:E9:D4:21:4B:BA:43:54:3D:F9:56:DC:18:E9:5C:CA:1A:7C:B2:C7:DF:9B"}}},"request":{"raw":"GET /s/outfit/v15/QGYvz_MVcBeNP4NJtEtqUYTkntBJ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://syncflrdrop.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 32108\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 26 Feb 2026 08:42:15 GMT\r\nexpires: Fri, 26 Feb 2027 08:42:15 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Thu, 04 Sep 2025 17:18:28 GMT\r\ncontent-type: font/woff2\r\nage: 374589\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":32108,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 32108, version 1.0","md5":"e414fe5664f376c8f145acd792939183","sha1":"5b69d46adc3a06af762193adb2dddbc359b2e786","sha256":"fa31c7981483e52cbb8b8bc1eb0dc6326f160b8699cc0899349f977f0517a9df","sha512":"51c251910e5cce616b3c336bcb63853f83c306e16e9b79e0a18f924a738ba06b3e2cb8132ff9bc6e720527234eb80e90be2625b860e1728b66d4fe86ac9bafe5","ssdeep":"768:gUX6jLkDeuAkZHs27nAflEFIapAgCauwIFPo3zjERcgmcjz:3X6tkpNAf6FIapAgCaMFozInjz","tlshash":"6ee2e14f8beb009ef3828a7812c46b3195b305d569cbfa901eef85d76b5c247c1474a8","first_seen":"2025-09-05T02:25:45.343777Z","last_seen":"2026-07-24T11:01:44.046443Z","times_seen":27226,"resource_available":false,"data":null}},"time_used":247,"timings":{"blocked":115,"dns":1,"connect":22,"send":0,"wait":11,"receive":5,"ssl":90},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"syncflrdrop.xyz/assets/css/responsive.css","fqdn":"syncflrdrop.xyz","domain":"syncflrdrop.xyz","tld":"xyz"},"ip":{"addr":"172.67.169.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://syncflrdrop.xyz/","date":"2026-03-02T16:45:23.726Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"syncflrdrop.xyz","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 27 Feb 2026 14:29:44 GMT","end":"Thu, 28 May 2026 14:29:43 GMT"},"fingerprint":{"sha1":"AC:BE:69:F3:6B:37:B0:3F:AB:31:7B:7D:BB:AC:18:0F:3A:E6:27:B4","sha256":"CB:6D:9A:E6:B3:93:4F:D5:48:7D:6F:8D:1F:31:A0:A6:86:D5:87:C3:1D:52:4C:6E:2D:15:C6:3E:2D:5B:16:56"}}},"request":{"raw":"GET /assets/css/responsive.css HTTP/1.1\r\nHost: syncflrdrop.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://syncflrdrop.xyz/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 02 Mar 2026 16:45:23 GMT\r\ncontent-type: text/css\r\ncast-mode: default\r\nlast-modified: Fri, 27 Feb 2026 14:58:07 GMT\r\netag: W/\"69a1b0ff-2f71\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\npriority: u=2,i=?0\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3V0rkI%2BFa099HIx9%2FKCFQFP68Ybaba6bHMSHEHS27O5WitvUgb8cLYHS574%2FUrITUwEi3yLkTCT3292woTT4FCbdsZGXi6nvQ1otLhQNQQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9d61df1f2b64b7b2-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":12145,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"cae6ea58b1f6537666531b063e33a0b2","sha1":"b7b53f83fb9e22ab94962a32035b86826a2d2eae","sha256":"2465a47440c4ba502aea1a9b0dc571ecc996183cb332457f59a22c23b821953b","sha512":"da8022f977d0207c83feea00d118e64ed821d043dccd64db7a27599f70942f9cdd92378c7d54386a35aa95a7d6c64a5520eac38d96c49ce920545e7344708004","ssdeep":"192:Z2Jul0vYX8wbrcG3YYSGDwheGs7aEGd4G0JgMdkoTLMkoTrMAIrVEAhAebjwM/9u:NECFGElRI0E5iVml","tlshash":"da4288dce94101646336eb768fba4654fe0c14f39e8a11e8b86041599fff6ba8191fcc","first_seen":"2024-08-16T06:37:06Z","last_seen":"2026-06-24T22:56:01.233007Z","times_seen":158,"resource_available":false,"data":null}},"time_used":189,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":189,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"syncflrdrop.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"syncflrdrop.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"syncflrdrop.xyz/assets/img/update/feature/feature-shape-2-3.png","fqdn":"syncflrdrop.xyz","domain":"syncflrdrop.xyz","tld":"xyz"},"ip":{"addr":"172.67.169.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://syncflrdrop.xyz/","date":"2026-03-02T16:45:23.732Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"syncflrdrop.xyz","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 27 Feb 2026 14:29:44 GMT","end":"Thu, 28 May 2026 14:29:43 GMT"},"fingerprint":{"sha1":"AC:BE:69:F3:6B:37:B0:3F:AB:31:7B:7D:BB:AC:18:0F:3A:E6:27:B4","sha256":"CB:6D:9A:E6:B3:93:4F:D5:48:7D:6F:8D:1F:31:A0:A6:86:D5:87:C3:1D:52:4C:6E:2D:15:C6:3E:2D:5B:16:56"}}},"request":{"raw":"GET /assets/img/update/feature/feature-shape-2-3.png HTTP/1.1\r\nHost: syncflrdrop.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://syncflrdrop.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 02 Mar 2026 16:45:23 GMT\r\ncontent-type: image/png\r\ncontent-length: 4761\r\ncast-mode: default\r\nlast-modified: Fri, 27 Feb 2026 14:58:07 GMT\r\netag: \"69a1b0ff-1299\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oUxS0lMikNjutoNr%2BFNyU9HkIEifWnlPDwNKCpgccUfEXtHoxUP0wablkQckpQgJGjRlZ6DY8TTieuzrxQukh7IJTbvgFczawAxAYWN1UQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9d61df1f2b69b7b2-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4761,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 71 x 60, 8-bit/color RGBA, non-interlaced","md5":"814f2d0577190afc01a6c01e8f083267","sha1":"9bf75c2e4c99b4e682a337045b2a1f512e3af813","sha256":"0a18c87be3fbe17edc0e1d739cdd62cf8d770a490ce6bc683e740a638b21dfc9","sha512":"deb4ee8eb9077553c4fc87e2c95f26b74d206cccaf9cc5af2388ac41352c2461871ef511e1216ccb8ff02edae06b620c65643d022808ead8b68c2aa10b3b75ca","ssdeep":"96:1ST+dG2nwc5z1x7pp+cntOhxNI/NprdrgIT/SO+2q1L:1ST+dGIJhpjtOhmCIT/SOg1L","tlshash":"1aa18ec09e90928f72ac5d4ec309f530feed9b565c9121d4dca402d3b98e49e0a163ab","first_seen":"2025-03-31T19:32:34.64543Z","last_seen":"2026-06-24T22:30:42.527494Z","times_seen":59,"resource_available":false,"data":null}},"time_used":187,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":186,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"syncflrdrop.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"syncflrdrop.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"syncflrdrop.xyz/assets/img/update/feature/feature-card-thumb-2.png","fqdn":"syncflrdrop.xyz","domain":"syncflrdrop.xyz","tld":"xyz"},"ip":{"addr":"172.67.169.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://syncflrdrop.xyz/","date":"2026-03-02T16:45:23.734Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"syncflrdrop.xyz","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 27 Feb 2026 14:29:44 GMT","end":"Thu, 28 May 2026 14:29:43 GMT"},"fingerprint":{"sha1":"AC:BE:69:F3:6B:37:B0:3F:AB:31:7B:7D:BB:AC:18:0F:3A:E6:27:B4","sha256":"CB:6D:9A:E6:B3:93:4F:D5:48:7D:6F:8D:1F:31:A0:A6:86:D5:87:C3:1D:52:4C:6E:2D:15:C6:3E:2D:5B:16:56"}}},"request":{"raw":"GET /assets/img/update/feature/feature-card-thumb-2.png HTTP/1.1\r\nHost: syncflrdrop.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://syncflrdrop.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 02 Mar 2026 16:45:23 GMT\r\ncontent-type: image/png\r\ncontent-length: 38472\r\ncast-mode: default\r\nlast-modified: Fri, 27 Feb 2026 14:58:07 GMT\r\netag: \"69a1b0ff-9648\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1SPZToDK2rCnOJ4mR%2Fi3Fbx0d8VLB9cguEbqiRTAaQn20T%2FeK4dq8re4uYtMFdP7n3n0QJoIZUwhUUaJDw80Zxa4f3ZiOhGf31jUyp7%2Fgw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9d61df1f2b6bb7b2-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":38472,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 254 x 245, 8-bit/color RGBA, non-interlaced","md5":"ed2358b094453b442a7223ac46d12e07","sha1":"8db8d2e6718284a83e8cf1b34de013e506f7beb4","sha256":"8192f74be3a04dd10bf98910f1ea6883fd93885df4563bab96ce0b84ff873c9b","sha512":"4bfec58a740e23639dce9e8bb19a558f8f6e9abc0be08b8f40a07c9bd8be71f4e5e52b308be6d0f47d15201f4e8c5eb923fdd48055a2d6a54ad80f1ed2609ea7","ssdeep":"768:csR+KHB3uth1dAaN5oF+KBGuIVynmJdQbhM3xExJTVpy:5T3O1dAauiymJ2UxEbpY","tlshash":"8e03e17d0ce32b7c8ec9c4f6246fca01dd391a8f85d215d45d0ea863398b1fa97a2127","first_seen":"2025-03-31T19:32:34.620541Z","last_seen":"2026-06-24T22:30:42.537947Z","times_seen":55,"resource_available":false,"data":null}},"time_used":265,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":204,"receive":61,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"syncflrdrop.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"syncflrdrop.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"syncflrdrop.xyz/assets/img/update/normal/cta_3-1.png","fqdn":"syncflrdrop.xyz","domain":"syncflrdrop.xyz","tld":"xyz"},"ip":{"addr":"172.67.169.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://syncflrdrop.xyz/","date":"2026-03-02T16:45:23.738Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"syncflrdrop.xyz","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 27 Feb 2026 14:29:44 GMT","end":"Thu, 28 May 2026 14:29:43 GMT"},"fingerprint":{"sha1":"AC:BE:69:F3:6B:37:B0:3F:AB:31:7B:7D:BB:AC:18:0F:3A:E6:27:B4","sha256":"CB:6D:9A:E6:B3:93:4F:D5:48:7D:6F:8D:1F:31:A0:A6:86:D5:87:C3:1D:52:4C:6E:2D:15:C6:3E:2D:5B:16:56"}}},"request":{"raw":"GET /assets/img/update/normal/cta_3-1.png HTTP/1.1\r\nHost: syncflrdrop.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://syncflrdrop.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 02 Mar 2026 16:45:23 GMT\r\ncontent-type: image/png\r\ncontent-length: 55557\r\ncast-mode: default\r\nlast-modified: Fri, 27 Feb 2026 14:58:07 GMT\r\netag: \"69a1b0ff-d905\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=D5%2BQHvj%2FTXOiOleOOLyMyI5%2FFA6tQBcCsA%2BOHgub1M2e5Q%2Br0TYe7%2FR3aX1RkUz%2BESm0aD%2F5fxIG1UB18%2B%2F2QnGojdUeHlO18yFJTa4xeQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9d61df1f3b71b7b2-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":55557,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 405 x 404, 8-bit colormap, non-interlaced","md5":"c2d6a590d57342973ba44e9055cf3483","sha1":"6bd2b9f70aef162baf47031f97e8861b24f25a46","sha256":"6fa59b2e29c1daf059ff5c62f9630cec572b7a6541e52c6d4908484fc2f71eb5","sha512":"bf8cf6066d17a2c47fcd227cf74912a79f1dce7163f80de42de28074e86979d8e9e903b879a909f55f86d7d88642c7107a41a13203da1e1bc5ae4dfe3018e98a","ssdeep":"768:4jLog9G/62r10dy0clTKDeJJtBnTKntRmoaLVZjqMAQAhZBl6/tZYFm4iOIn/GXg:MllclTNiso+3/OhZ2Zom4HIn+1rwZnEm","tlshash":"df4301918005a74fb6b0fea8de7713b46afeb903849cf9a417a84572243f170489ee45","first_seen":"2025-03-31T19:32:34.643795Z","last_seen":"2026-06-24T22:30:42.521317Z","times_seen":43,"resource_available":false,"data":null}},"time_used":290,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":242,"receive":48,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"syncflrdrop.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"syncflrdrop.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"syncflrdrop.xyz/assets/js/jquery.countdown.min.js","fqdn":"syncflrdrop.xyz","domain":"syncflrdrop.xyz","tld":"xyz"},"ip":{"addr":"172.67.169.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://syncflrdrop.xyz/","date":"2026-03-02T16:45:23.741Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"syncflrdrop.xyz","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 27 Feb 2026 14:29:44 GMT","end":"Thu, 28 May 2026 14:29:43 GMT"},"fingerprint":{"sha1":"AC:BE:69:F3:6B:37:B0:3F:AB:31:7B:7D:BB:AC:18:0F:3A:E6:27:B4","sha256":"CB:6D:9A:E6:B3:93:4F:D5:48:7D:6F:8D:1F:31:A0:A6:86:D5:87:C3:1D:52:4C:6E:2D:15:C6:3E:2D:5B:16:56"}}},"request":{"raw":"GET /assets/js/jquery.countdown.min.js HTTP/1.1\r\nHost: syncflrdrop.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://syncflrdrop.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 02 Mar 2026 16:45:23 GMT\r\ncontent-type: application/javascript\r\ncast-mode: default\r\nlast-modified: Fri, 27 Feb 2026 14:58:07 GMT\r\netag: W/\"69a1b0ff-1799\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\npriority: u=3,i=?0\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RbufKM8WPi%2FXskpDgJbpvm3dHotHxQKlcUXVJoX17l8SVHELfz%2FhAnA7LQnFDCODvEInR%2BvBJu1dMjC%2FNEC8AFg2yLAGgRuwiigDCJrudw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9d61df1f3b74b7b2-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6041,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (4820), with CRLF line terminators","md5":"fe51f891c801862316c1410111e11c0d","sha1":"a271198e3ef757d52012a945cffcf0d070b3f6d6","sha256":"9db3db6b06b7114de220c34e557c3455e185157cf4396e2322f2fb567578aaef","sha512":"df977b72410677bd21c7d04fd61e0634a00128c93cda19e9a5024a4182aee72e73ba2b97caa7199ac8aafaa2b72371cec5aa3c6e41c840929b9f279997018e06","ssdeep":"96:UXpMQHIXWxs9bIb9TMlF9NQA3qAZRzblMJDi4jr2R2fylzM905qO2Jo1yVsqVMHC:JQHraUTcF953zzb6rffylzM9cqO2JoQR","tlshash":"a8c1604973f1222265aeb2105d9e4854a338e74bf1c7445c78ecd6c87a258bc85bfdb8","first_seen":"2025-03-31T19:32:34.653162Z","last_seen":"2026-06-24T22:30:42.515729Z","times_seen":26,"resource_available":true,"data":null}},"time_used":188,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":186,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"syncflrdrop.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"syncflrdrop.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"syncflrdrop.xyz/assets/js/jquery.appear.js","fqdn":"syncflrdrop.xyz","domain":"syncflrdrop.xyz","tld":"xyz"},"ip":{"addr":"172.67.169.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://syncflrdrop.xyz/","date":"2026-03-02T16:45:23.742Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"syncflrdrop.xyz","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 27 Feb 2026 14:29:44 GMT","end":"Thu, 28 May 2026 14:29:43 GMT"},"fingerprint":{"sha1":"AC:BE:69:F3:6B:37:B0:3F:AB:31:7B:7D:BB:AC:18:0F:3A:E6:27:B4","sha256":"CB:6D:9A:E6:B3:93:4F:D5:48:7D:6F:8D:1F:31:A0:A6:86:D5:87:C3:1D:52:4C:6E:2D:15:C6:3E:2D:5B:16:56"}}},"request":{"raw":"GET /assets/js/jquery.appear.js HTTP/1.1\r\nHost: syncflrdrop.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://syncflrdrop.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 02 Mar 2026 16:45:23 GMT\r\ncontent-type: application/javascript\r\ncast-mode: default\r\nlast-modified: Fri, 27 Feb 2026 14:58:07 GMT\r\netag: W/\"69a1b0ff-1148\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\npriority: u=3,i=?0\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GIiqq85eCDN2%2FPbv5PHx8aABNP7UjGxMetlL5ov6kfml2fOBFALLVLfDnrSVTdS1jQMuRo7Kj0SSytNrU0yDLOEyIs2kgQKwWuP7j2L1Kg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9d61df1f3b75b7b2-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4424,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"d18fe7c86d2bcea69a0810de7b81e676","sha1":"3bc98b3a47dc6f09238bbd0e496fa11daa3caa98","sha256":"70f721f0d6aaebc5c683551fb12668e6a91a02d17ac1b41f8a4dda0fa91dcbd5","sha512":"0fc73474dfb4fa9247793332815cbc70f6b575058381032981f2a05e87432e904f275a76567511841c568d554b3426c4c548c55fb775bc9b5c1d1d6bb35efd7d","ssdeep":"48:Wl3XwqL924ayV+9FLAPfnUIeohhR9zIr0FfFoBSxMEh1u1cWSKjf4WJzw:y3XUz19FkkDo7R9crgYSpTocWZAUzw","tlshash":"2b91dc4a759b2ab54877622a9f1fb20cd721513b0202c2113cedde6c6f71864a197fdc","first_seen":"2023-03-07T12:08:36Z","last_seen":"2026-07-20T06:27:26.653978Z","times_seen":754,"resource_available":true,"data":null}},"time_used":184,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":183,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"syncflrdrop.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"syncflrdrop.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"syncflrdrop.xyz/assets/js/isotope.pkgd.min.js","fqdn":"syncflrdrop.xyz","domain":"syncflrdrop.xyz","tld":"xyz"},"ip":{"addr":"172.67.169.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://syncflrdrop.xyz/","date":"2026-03-02T16:45:23.747Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"syncflrdrop.xyz","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 27 Feb 2026 14:29:44 GMT","end":"Thu, 28 May 2026 14:29:43 GMT"},"fingerprint":{"sha1":"AC:BE:69:F3:6B:37:B0:3F:AB:31:7B:7D:BB:AC:18:0F:3A:E6:27:B4","sha256":"CB:6D:9A:E6:B3:93:4F:D5:48:7D:6F:8D:1F:31:A0:A6:86:D5:87:C3:1D:52:4C:6E:2D:15:C6:3E:2D:5B:16:56"}}},"request":{"raw":"GET /assets/js/isotope.pkgd.min.js HTTP/1.1\r\nHost: syncflrdrop.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://syncflrdrop.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 02 Mar 2026 16:45:23 GMT\r\ncontent-type: application/javascript\r\ncast-mode: default\r\nlast-modified: Fri, 27 Feb 2026 14:58:07 GMT\r\netag: W/\"69a1b0ff-8809\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\npriority: u=3,i=?0\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9mDiP2Znj0EZmlL0GmZ4nN7nruqTkWXINRYpaJRAfKnAkL%2BhWjkOzmsCiDmNUMFpaeuKBIzcVoyBi9IXZK8fgaYaKaJzJA0WLTA7MFrKjQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9d61df1f3b7ab7b2-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":34825,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (34825), with no line terminators","md5":"45a9a223a6d34a35dde83e8b5b9af5d5","sha1":"ed452572b1ac8abd34ffc6abaee41fa528431927","sha256":"c0054382ba8b033faf0748492b9c8772fa485106e0426280a85747a6db4b0fa0","sha512":"423baebf2713878ce33b6d592c2db45bf881c251d2127651a6621ebc31d0b15e0b6d70c00d973161127790965bc11bfd5ac79b4ba2329b28b09c6dced240d83c","ssdeep":"768:1iQAKk0GVAc2GsZPjEntPIFvkp01zsD6rD68DAfk3ADzkp1rBF:pktVRUP4ntPIFvFzsD6rD6zfkwDzYF","tlshash":"edf2c88f73443925468bf066966f160f7137a52c6a4290acfa6ad8db1c7984d7033fbc","first_seen":"2023-03-26T11:29:40Z","last_seen":"2026-07-23T22:27:15.807432Z","times_seen":983,"resource_available":true,"data":null}},"time_used":240,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":222,"receive":18,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"syncflrdrop.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"syncflrdrop.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"syncflrdrop.xyz/assets/fonts/fa-solid-900.woff2","fqdn":"syncflrdrop.xyz","domain":"syncflrdrop.xyz","tld":"xyz"},"ip":{"addr":"172.67.169.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://syncflrdrop.xyz/","date":"2026-03-02T16:45:24.248Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"syncflrdrop.xyz","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 27 Feb 2026 14:29:44 GMT","end":"Thu, 28 May 2026 14:29:43 GMT"},"fingerprint":{"sha1":"AC:BE:69:F3:6B:37:B0:3F:AB:31:7B:7D:BB:AC:18:0F:3A:E6:27:B4","sha256":"CB:6D:9A:E6:B3:93:4F:D5:48:7D:6F:8D:1F:31:A0:A6:86:D5:87:C3:1D:52:4C:6E:2D:15:C6:3E:2D:5B:16:56"}}},"request":{"raw":"GET /assets/fonts/fa-solid-900.woff2 HTTP/1.1\r\nHost: syncflrdrop.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://syncflrdrop.xyz/assets/css/fontawesome-all.min.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 02 Mar 2026 16:45:24 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 78268\r\ncast-mode: default\r\nlast-modified: Fri, 27 Feb 2026 14:58:07 GMT\r\netag: \"69a1b0ff-131bc\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=01uAUEGocWmyQhIysYf53EABZu8%2B2nD6Be%2F3h3J3BtVcmVPrG2PpiohPheWTJ37jamiJ68VmT32WDyJnIya9fmOCQO6LtD9McMIO3maKsg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9d61df229c0bb7b2-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":78268,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 78268, version 331.-31196","md5":"d824df7eb2e268626a2dd9a6a741ac4e","sha1":"0ccb2c814a7e4ca12c4778821633809cb0361eaa","sha256":"9834b82ad26e2a37583d22676a12dd2eb0fe7c80356a2114d0db1aa8b3899537","sha512":"a84e13f216ea95146af285af98aef0b464cd962440e161a1c602ca2178a179e04ae4ed2a2f98d5b2eb165480ec6920e0e88de77d5f1eb7f11ed772b092daf865","ssdeep":"1536:AOhrLFyv3lzKb1hkG8l0o4HXWj2uwgcdSJSls7ZahNpUFl8a/KdDe8Y7fN5O:AOhfMv3ILc0Dm3wA4LpKKdO7a","tlshash":"c97312aba6cd77ac88dd14565f0043533afdfb35ab27864349eca2e01a300677b5712b","first_seen":"2023-04-05T13:28:45Z","last_seen":"2026-07-24T11:02:45.471733Z","times_seen":56396,"resource_available":false,"data":null}},"time_used":263,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":202,"receive":61,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"syncflrdrop.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"syncflrdrop.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"syncflrdrop.xyz/assets/css/magnific-popup.min.css","fqdn":"syncflrdrop.xyz","domain":"syncflrdrop.xyz","tld":"xyz"},"ip":{"addr":"172.67.169.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://syncflrdrop.xyz/","date":"2026-03-02T16:45:23.721Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"syncflrdrop.xyz","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 27 Feb 2026 14:29:44 GMT","end":"Thu, 28 May 2026 14:29:43 GMT"},"fingerprint":{"sha1":"AC:BE:69:F3:6B:37:B0:3F:AB:31:7B:7D:BB:AC:18:0F:3A:E6:27:B4","sha256":"CB:6D:9A:E6:B3:93:4F:D5:48:7D:6F:8D:1F:31:A0:A6:86:D5:87:C3:1D:52:4C:6E:2D:15:C6:3E:2D:5B:16:56"}}},"request":{"raw":"GET /assets/css/magnific-popup.min.css HTTP/1.1\r\nHost: syncflrdrop.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://syncflrdrop.xyz/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 02 Mar 2026 16:45:23 GMT\r\ncontent-type: text/css\r\ncast-mode: default\r\nlast-modified: Fri, 27 Feb 2026 14:58:07 GMT\r\netag: W/\"69a1b0ff-1498\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\npriority: u=2,i=?0\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=v3F%2B7dkgVICTm7eV8U6NWhqMC%2BxcCYbPQdMrXUqJb%2BOG%2FPsqWZKfrWKtvmsThkpwSOhJIGTetWz5w9PUmlkq3cbEMxrGmfTf%2BXDzwiWTlQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9d61df1f2b5db7b2-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5272,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (5272), with no line terminators","md5":"183e80c33bbbb7dc750bc69128dff5f0","sha1":"a835bd1ce5ed8fa1b413498ad2f19df11fbb2358","sha256":"1bc944be7b79571526b7bf4a8a93a72b316031df2bf77f6f2c19c821ce2bcc2b","sha512":"867d2ee284616dc3a8e8b0c47f0d611632bd82fcd7b1e1a7504f7177e6f7e49531c4c7e3d14502e267b6226744c87b331c13e7f4066058fbfb61198a6c5185f2","ssdeep":"96:ifa4SCORWWNj0aZ6X8EiUkXudlsO9DAdVMk9rCWhN:if0CORWWNwaZ6MEiGdVwMk9GWhN","tlshash":"a8b165e3a941313ac637c926d1c39b9c3227a227f2a356dfdf869419c6ce4dc0669748","first_seen":"2023-08-01T00:42:45Z","last_seen":"2026-07-23T22:27:15.775192Z","times_seen":674,"resource_available":false,"data":null}},"time_used":192,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":192,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"syncflrdrop.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"syncflrdrop.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"syncflrdrop.xyz/assets/img/update/bg/feature-area-bg.png","fqdn":"syncflrdrop.xyz","domain":"syncflrdrop.xyz","tld":"xyz"},"ip":{"addr":"172.67.169.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://syncflrdrop.xyz/","date":"2026-03-02T16:45:24.218Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"syncflrdrop.xyz","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 27 Feb 2026 14:29:44 GMT","end":"Thu, 28 May 2026 14:29:43 GMT"},"fingerprint":{"sha1":"AC:BE:69:F3:6B:37:B0:3F:AB:31:7B:7D:BB:AC:18:0F:3A:E6:27:B4","sha256":"CB:6D:9A:E6:B3:93:4F:D5:48:7D:6F:8D:1F:31:A0:A6:86:D5:87:C3:1D:52:4C:6E:2D:15:C6:3E:2D:5B:16:56"}}},"request":{"raw":"GET /assets/img/update/bg/feature-area-bg.png HTTP/1.1\r\nHost: syncflrdrop.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://syncflrdrop.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 02 Mar 2026 16:45:24 GMT\r\ncontent-type: image/png\r\ncontent-length: 560278\r\ncast-mode: default\r\nlast-modified: Fri, 27 Feb 2026 14:58:07 GMT\r\netag: \"69a1b0ff-88c96\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=h6fyqV0db7gx9YUFNTiCpxob9iZkccGHknk29v9bsJd4Rwh1%2FhDjUcHp73eRMC%2BVKhGoPhvtBZJCjthzL74tPAr1lTF0eQW2oqH9BzE6HQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9d61df226bffb7b2-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":560278,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1920 x 1154, 8-bit/color RGBA, non-interlaced","md5":"53217c217529a926def4eb09e3fb38f4","sha1":"f380286c432fe196d4e11682802b6558924e1362","sha256":"b7faa59d11178296bd9d62bc922acbd080643f4b45febcc75057284ef8076367","sha512":"ff7f8f3639c110136d46af12848234aa2cf9d49ae70a89a09710eb4b8bdc1dd239e0c7c4c53db680b85db3e9cd885cd28d5bb8fd53847e7a45d775343cdde079","ssdeep":"12288:8hQ8DzwhqCLYYMXxBxWnEaaAtWymcEMGDlZteisg8Ns:8hrA8CgXx3o4AtEEGxZ18u","tlshash":"f2c411689a3ad6adccd302b9a7a50f374b17c217dacb1725e8b1099e1c00d26de5dc7c","first_seen":"2025-03-31T19:32:34.617098Z","last_seen":"2026-06-24T22:30:42.507585Z","times_seen":54,"resource_available":false,"data":null}},"time_used":355,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":201,"receive":154,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"syncflrdrop.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"syncflrdrop.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/outfit/v15/QGYvz_MVcBeNP4NJtEtqUYTkntBJ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"216.58.207.195","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://syncflrdrop.xyz/","date":"2026-03-02T16:45:24.240Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:00 GMT","end":"Mon, 27 Apr 2026 08:37:59 GMT"},"fingerprint":{"sha1":"43:A0:56:D7:CE:45:C9:96:6F:34:12:13:53:CC:34:DD:63:FB:5D:20","sha256":"A4:AF:37:76:AF:D3:DB:1B:79:93:8F:E9:D4:21:4B:BA:43:54:3D:F9:56:DC:18:E9:5C:CA:1A:7C:B2:C7:DF:9B"}}},"request":{"raw":"GET /s/outfit/v15/QGYvz_MVcBeNP4NJtEtqUYTkntBJ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://syncflrdrop.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 32108\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 26 Feb 2026 08:42:15 GMT\r\nexpires: Fri, 26 Feb 2027 08:42:15 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Thu, 04 Sep 2025 17:18:28 GMT\r\ncontent-type: font/woff2\r\nage: 374589\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":32108,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 32108, version 1.0","md5":"e414fe5664f376c8f145acd792939183","sha1":"5b69d46adc3a06af762193adb2dddbc359b2e786","sha256":"fa31c7981483e52cbb8b8bc1eb0dc6326f160b8699cc0899349f977f0517a9df","sha512":"51c251910e5cce616b3c336bcb63853f83c306e16e9b79e0a18f924a738ba06b3e2cb8132ff9bc6e720527234eb80e90be2625b860e1728b66d4fe86ac9bafe5","ssdeep":"768:gUX6jLkDeuAkZHs27nAflEFIapAgCauwIFPo3zjERcgmcjz:3X6tkpNAf6FIapAgCaMFozInjz","tlshash":"6ee2e14f8beb009ef3828a7812c46b3195b305d569cbfa901eef85d76b5c247c1474a8","first_seen":"2025-09-05T02:25:45.343777Z","last_seen":"2026-07-24T11:01:44.046443Z","times_seen":27226,"resource_available":false,"data":null}},"time_used":253,"timings":{"blocked":127,"dns":0,"connect":0,"send":0,"wait":10,"receive":2,"ssl":114},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"syncflrdrop.xyz/assets/css/default.css","fqdn":"syncflrdrop.xyz","domain":"syncflrdrop.xyz","tld":"xyz"},"ip":{"addr":"172.67.169.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://syncflrdrop.xyz/","date":"2026-03-02T16:45:23.724Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"syncflrdrop.xyz","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 27 Feb 2026 14:29:44 GMT","end":"Thu, 28 May 2026 14:29:43 GMT"},"fingerprint":{"sha1":"AC:BE:69:F3:6B:37:B0:3F:AB:31:7B:7D:BB:AC:18:0F:3A:E6:27:B4","sha256":"CB:6D:9A:E6:B3:93:4F:D5:48:7D:6F:8D:1F:31:A0:A6:86:D5:87:C3:1D:52:4C:6E:2D:15:C6:3E:2D:5B:16:56"}}},"request":{"raw":"GET /assets/css/default.css HTTP/1.1\r\nHost: syncflrdrop.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://syncflrdrop.xyz/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 02 Mar 2026 16:45:23 GMT\r\ncontent-type: text/css\r\ncast-mode: default\r\nlast-modified: Fri, 27 Feb 2026 14:58:07 GMT\r\netag: W/\"69a1b0ff-21bc\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\npriority: u=2,i=?0\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pCSaviopmRjCIJz4bugc8peARDOYMejJkc1uN08GDBjCSEx0aI6jgbCUPDCHUPnBOU1%2BEK7UlKz8NV3d1%2Bm8pgMNT7IZ3oAk7DoPau5HJA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9d61df1f2b61b7b2-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8636,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"e3547138fb21a6708e8731cfed5d3be4","sha1":"395366968470bf6e8a545ddeb3a2a69c856ae140","sha256":"79fca8b9e341cec8be3997631300e4a50857c7a4e5d00c6796811df5825169f1","sha512":"09351bde403f0341eff0d4e8fe9c2ff64a30dbcd9f33ce5d912647198b4e0458e6bd390cd29bd421e792e771d9b554f1acfe18813fc20c6356279d179a1dd357","ssdeep":"96:8Vdlp2Lc6NCJWF8tyBEZu98FixkkqkuV2ziV+1nKVW7KF+XaPCkmjd/syqviq6XK:CcsIKDk1BauK","tlshash":"a70276c9aed314cd831a6fe2cbb6a060ef4d21f34a4d65dfb450254aec87a9d21624cd","first_seen":"2023-04-13T23:00:03Z","last_seen":"2026-07-20T06:27:26.636887Z","times_seen":489,"resource_available":false,"data":null}},"time_used":191,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":191,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"syncflrdrop.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"syncflrdrop.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"syncflrdrop.xyz/assets/js/jquery.easing.js","fqdn":"syncflrdrop.xyz","domain":"syncflrdrop.xyz","tld":"xyz"},"ip":{"addr":"172.67.169.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://syncflrdrop.xyz/","date":"2026-03-02T16:45:23.745Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"syncflrdrop.xyz","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 27 Feb 2026 14:29:44 GMT","end":"Thu, 28 May 2026 14:29:43 GMT"},"fingerprint":{"sha1":"AC:BE:69:F3:6B:37:B0:3F:AB:31:7B:7D:BB:AC:18:0F:3A:E6:27:B4","sha256":"CB:6D:9A:E6:B3:93:4F:D5:48:7D:6F:8D:1F:31:A0:A6:86:D5:87:C3:1D:52:4C:6E:2D:15:C6:3E:2D:5B:16:56"}}},"request":{"raw":"GET /assets/js/jquery.easing.js HTTP/1.1\r\nHost: syncflrdrop.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://syncflrdrop.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 02 Mar 2026 16:45:23 GMT\r\ncontent-type: application/javascript\r\ncast-mode: default\r\nlast-modified: Fri, 27 Feb 2026 14:58:07 GMT\r\netag: W/\"69a1b0ff-10c9\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\npriority: u=3,i=?0\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=84XcxkRJq55jZOmYGAISiCDyqj%2B56CyyUlkBUaEVX%2FxVp2%2FsByp2QDDlRvWdhcAXzThywW5rNU3lxnjQ8EgYo2pxgoqIB9gN%2FXsJ2rpAgA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9d61df1f3b78b7b2-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4297,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"96550741c997fd57758441aa1759b21c","sha1":"28179d80067a74176c1ff7bb8028c12d7ed6940e","sha256":"e5c0fa2f30aef4faf40adcf7a23b18c01453066fe5aa0088b3344a37811d6b8c","sha512":"4c1158fe0f47fdbb97751c8f720a6699cf32592c254dd1f485d1de11b0815b6cee9e1c877d6d922d06a5ea6c88f1a7080e569dff9cb0062e1b6830a75c73848c","ssdeep":"96:Jg1rrQ4ZK8C2vFfMJjIck9kJqBs8RPjoGs1scfX+YGW3cSniU9kZwSalaKEcrTeC:JIvHK8FMrCUMoykjl","tlshash":"e4917fa877dea50653213470491b50ce62bd7a02cc1c9d6ecc4c8c9879a4a3b92a7f3c","first_seen":"2023-03-11T19:12:19Z","last_seen":"2026-07-18T22:47:13.086665Z","times_seen":1397,"resource_available":true,"data":null}},"time_used":185,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":185,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"syncflrdrop.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"syncflrdrop.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"syncflrdrop.xyz/assets/js/main.js","fqdn":"syncflrdrop.xyz","domain":"syncflrdrop.xyz","tld":"xyz"},"ip":{"addr":"172.67.169.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://syncflrdrop.xyz/","date":"2026-03-02T16:45:23.749Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"syncflrdrop.xyz","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 27 Feb 2026 14:29:44 GMT","end":"Thu, 28 May 2026 14:29:43 GMT"},"fingerprint":{"sha1":"AC:BE:69:F3:6B:37:B0:3F:AB:31:7B:7D:BB:AC:18:0F:3A:E6:27:B4","sha256":"CB:6D:9A:E6:B3:93:4F:D5:48:7D:6F:8D:1F:31:A0:A6:86:D5:87:C3:1D:52:4C:6E:2D:15:C6:3E:2D:5B:16:56"}}},"request":{"raw":"GET /assets/js/main.js HTTP/1.1\r\nHost: syncflrdrop.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://syncflrdrop.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 02 Mar 2026 16:45:23 GMT\r\ncontent-type: application/javascript\r\ncast-mode: default\r\nlast-modified: Fri, 27 Feb 2026 14:58:07 GMT\r\netag: W/\"69a1b0ff-3c13\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\npriority: u=3,i=?0\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wsAZNAH8w4hyVhw5Pq3fRYloWS8SM4oyJVswDCOPqwwAIdRfdWGlL2p4bP5Gilymbcw1U1gKKobz2CNfk%2B%2FJNyPgJyP7zOGufbIVa50PMw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9d61df1f4b7db7b2-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15379,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"3a9f4dacce92996b65c173dd76206c94","sha1":"5338eac52d7f6d1f86989134507a2bf557a3af55","sha256":"c6c9b2f76e9c624b8d2b7e81e5fcfbc1d9bd4ea521149fb5a724d3100b467848","sha512":"19af11135e6e14de1b0d79889450a3f3029a11dff17e8b6f3c3557563e56a73342d8d6b1b02f223ef2555f811d9dba688a2e60ff10b4ae90a42bdee2932c15dd","ssdeep":"192:WTbjTH2LE+zsbUh1iFQ0UI4Y9jpaHThJOQPYJ8/c4N:WeR0hL1pQ9a2NN","tlshash":"03620e067a0e607f40ef63249436d702c79dd522c22391b7f8ed19249b9876f22d9aed","first_seen":"2024-08-19T13:09:29.215178Z","last_seen":"2026-06-24T22:30:42.509289Z","times_seen":46,"resource_available":true,"data":null}},"time_used":235,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":230,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"syncflrdrop.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"syncflrdrop.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ipapi.co/json/","fqdn":"ipapi.co","domain":"ipapi.co","tld":"co"},"ip":{"addr":"172.67.69.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://syncflrdrop.xyz/","date":"2026-03-02T16:45:24.590Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"ipapi.co","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 16 Feb 2026 15:59:25 GMT","end":"Sun, 17 May 2026 16:59:23 GMT"},"fingerprint":{"sha1":"37:8F:7A:B7:BF:60:24:8D:1C:83:4F:C2:59:C3:0A:0C:EE:B3:75:A5","sha256":"8D:E6:B5:3D:41:1D:D8:B2:FA:03:95:07:E2:54:7C:1F:A2:22:E9:05:05:5E:D2:99:7D:DF:46:3F:32:52:53:F9"}}},"request":{"raw":"GET /json/ HTTP/1.1\r\nHost: ipapi.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://syncflrdrop.xyz/\r\nOrigin: https://syncflrdrop.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 02 Mar 2026 16:45:24 GMT\r\ncontent-type: application/json\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nallow: GET, OPTIONS, HEAD, POST, OPTIONS\r\nx-frame-options: DENY\r\nvary: Host, origin\r\naccess-control-allow-origin: https://syncflrdrop.xyz\r\nx-content-type-options: nosniff\r\nreferrer-policy: same-origin\r\ncross-origin-opener-policy: same-origin\r\ncontent-security-policy-report-only: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.stripe.com https://*.paddle.com https://www.google.com https://www.gstatic.com https://maps.gstatic.com https://maps.googleapis.com https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/; style-src 'self' 'unsafe-inline' https://*.paddle.com https://fonts.gstatic.com https://fonts.googleapis.com; img-src 'self' data: https://ipapi.co https://maps.gstatic.com https://maps.googleapis.com https://*.stripe.com; font-src 'self' data: https://fonts.gstatic.com https://fonts.googleapis.com; frame-src 'self' https://www.google.com https://*.stripe.com https://*.paddle.com https://www.google.com/recaptcha/ https://recaptcha.google.com/recaptcha/; connect-src 'self' https://ipapi.co/ https://*.paddle.com https://*.stripe.com https://maps.googleapis.com https://www.google.com/recaptcha/; object-src 'none'; frame-ancestors 'none'; base-uri 'self'; form-action 'self';\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0ZewNJO1hRkBcamywQniZd1mlFqFYdpApUolJyiGPNGXKyur5NgChu5rLOnaAGxEb28uSWYY2tXCXII12%2F%2BOEOqHzdr31cE%3D\"}]}\r\ncontent-encoding: br\r\ncf-ray: 9d61df24eded8b20-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":748,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"e04f1469fffe997f86caaa7556ea45e3","sha1":"1d27c4b7717eb0815a21b1cc77b4ecfa46da686b","sha256":"de7561aa66cb3b68b9ca8c76e969396ca71f8b045e3dc76024fd96aae7cce322","sha512":"c2b87b634c6cded9140ef5ceb496f18359645a78fd5b19f9e1953d5f47d3d7a447c32b352720691f07853b90a0445fd1fe1d3cdad3e391e308b850bb0a7856a7","ssdeep":"","tlshash":"82012428e4680e7b88b80358b4686a07162422075f16354e7fd4874d0f8d8bf20b124e","first_seen":"2026-02-11T12:27:33.810968Z","last_seen":"2026-03-11T11:01:39.516772Z","times_seen":1299,"resource_available":false,"data":null}},"time_used":295,"timings":{"blocked":32,"dns":1,"connect":8,"send":0,"wait":230,"receive":0,"ssl":21},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.telegram.org/bot8270243652:AAHS2kT4gS8aX5exWq1gUES1SqFOEhDBR9A/sendMessage","fqdn":"api.telegram.org","domain":"telegram.org","tld":"org"},"ip":{"addr":"149.154.166.110","port":443,"asn":62041,"as":"Telegram Messenger Inc","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://syncflrdrop.xyz/","date":"2026-03-02T16:45:25.092Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.telegram.org","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Tue, 25 Mar 2025 13:09:41 GMT","end":"Sun, 26 Apr 2026 13:09:41 GMT"},"fingerprint":{"sha1":"8B:AA:E2:A3:48:3C:0E:62:9D:B5:49:3A:BD:47:60:BA:AD:18:AA:8D","sha256":"80:58:CE:C7:28:68:D2:99:42:91:1E:43:06:54:D2:D6:F0:9C:DD:E2:F7:6F:68:A0:8A:EA:0C:15:FB:DB:8C:CD"}}},"request":{"raw":"POST /bot8270243652:AAHS2kT4gS8aX5exWq1gUES1SqFOEhDBR9A/sendMessage HTTP/1.1\r\nHost: api.telegram.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://syncflrdrop.xyz/\r\nContent-Type: application/json\r\nContent-Length: 191\r\nOrigin: https://syncflrdrop.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 400 Bad Request\r\nserver: nginx/1.18.0\r\ndate: Mon, 02 Mar 2026 16:45:25 GMT\r\ncontent-type: application/json\r\ncontent-length: 56\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Content-Length,Content-Type,Date,Server,Connection\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"400","status_text":"Bad Request","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":56,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"d948d5845276032d39194409db9ad97b","sha1":"475fe4e71224df85d494e34e0cb8ed799afcdb0d","sha256":"a0a1e0f24b392c6da875c10977d169497a47f669b7e671e62330e125a56721fb","sha512":"3e538a78d85dc32eb47db705c97d627ed8851f6dd87904e2e39aa1d5357cdeaea2a7746fc2ccddbde9bcbcab66ddcceff4ab5cf8db169c49e0f81c592104c67f","ssdeep":"","tlshash":"22900244098ed56744da11605935954855b756b8641964404d95611d56421ea58f240a","first_seen":"2023-07-28T20:34:41Z","last_seen":"2026-07-24T03:02:25.633269Z","times_seen":457,"resource_available":true,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}