{"report_id":"d9e76024-2db2-453e-a6ac-5b39a0de49f9","version":0,"status":"done","tags":["suspicious"],"date":"2026-07-04T11:04:50Z","url":{"schema":"http","addr":"solairdrop.redlify.lol","fqdn":"solairdrop.redlify.lol","domain":"redlify.lol","tld":"lol"},"ip":{"addr":"104.21.80.232","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"solairdrop.redlify.lol/","fqdn":"solairdrop.redlify.lol","domain":"redlify.lol","tld":"lol"},"title":"Security Check","dom":{"size":14510,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (12175)","md5":"7a967949ecf1540cde79243154ac9b79","sha1":"0dc327e38d2328f23c7bdf2ec663f70ef58b0191","sha256":"b7742e4ff43dbbe0de9b4f85304a1f312ef9578ec6d8b8f53545d8a9b80b78b6","sha512":"5d7cc4dbff118f085913a2d476db391e11b25e676a7a17415aec12e368cd64ee811cf62ff850cf2efb081f6909d1c2f2c2e24d6a4874f798c80cf7e202c7a189","ssdeep":"384:WbAwov9Lw5DtQLQGq9yT/VIHsbxPkElsLGERJS0Aikciwigh:Kov9Lw5DtQLQpOPbxPvlsKyJnAikciwf","tlshash":"fe5262419dc06cd86ff74e6b264ba1d6ec21294c7a0640cbeb5c9cb0e4a1647fe61bf0","dom_hash":"domhash14b55690d8d48d095dceec73efff3647","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"solairdrop.redlify.lol","fqdn":"solairdrop.redlify.lol","domain":"redlify.lol","tld":"lol"},"ip":{"addr":"104.21.80.232","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-08-08T11:04:50Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":2,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-04","alert":"Sinkholed","trigger":"solairdrop.redlify.lol","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-04","alert":"Sinkholed","trigger":"solairdrop.redlify.lol","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Suspicious - Anti-debugging code","verdict":"suspicious","severity":"low","comment":"","tags":["suspicious"],"meta":null},{"sensor_name":"urlquery","alert":"Suspicious - Anti-debugging code","verdict":"suspicious","severity":"low","comment":"","tags":["suspicious"],"meta":null}]},"summary":[{"fqdn":"solairdrop.redlify.lol","ip":{"addr":"172.67.155.19","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-06-20","domain_rank":0,"first_seen":"2026-07-04T11:04:51.866822Z","last_seen":"2026-07-04T11:04:51.866822Z","alert_count":24,"request_count":12,"received_data":1523518,"sent_data":6879,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"static-297.pages.dev","ip":{"addr":"172.66.44.254","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2020-09-02","domain_rank":0,"first_seen":"2026-07-04T11:04:51.864745Z","last_seen":"2026-07-04T11:04:51.864745Z","alert_count":0,"request_count":5,"received_data":5124,"sent_data":2715,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"1.1.1.1","ip":{"addr":"1.1.1.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2012-05-30T07:40:31Z","last_seen":"2019-03-28T08:40:04Z","alert_count":0,"request_count":1,"received_data":476,"sent_data":518,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Suspicious - Anti-debugging code","verdict":"suspicious","severity":"low","comment":"","tags":["suspicious"],"meta":null}]},"javascript":{"script":[{"url":{"schema":"https","addr":"solairdrop.redlify.lol/aafae87c-a091-403d-b3e5-a37b10c9a4c3","fqdn":"solairdrop.redlify.lol","domain":"redlify.lol","tld":"lol"},"ip":{"addr":"172.67.155.19","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"32a7b6857fcf56e62e1c2dcda85f761c","sha1":"a5ec9a4bfee28455c943c00e6fae91f46d95389f","sha256":"466c62e4669651ccef2beac58b1ddebdacf827451e6894d4a5bdfb5a542aae73","sha512":"7934c60488ca5faca93f75798cbc8d4d39f0a94ac6ea981d1986e168a5e4251a1d3ca9c6a9ea30b89837137739f9de5968fffdd06a6f1672c24743a1870e59bd","ssdeep":"1536:QNyX82lsQGOyW3hEZlNzf9VNZYSj1rNPxPOVAxBSrOP:QNyX821GObmDj9VNmA1r/OV16P","tlshash":"77834a09bba312397533716f1b7fb16c3235c0039406ca50f9ad9344efa4a6516b6bed","size":80960,"data":"","first_seen":"2026-07-04T11:04:55.339562Z","last_seen":"2026-07-04T11:04:55.339562Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"solairdrop.redlify.lol/","fqdn":"solairdrop.redlify.lol","domain":"redlify.lol","tld":"lol"},"ip":{"addr":"172.67.155.19","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"535a579200b2aa87ba5ea7b1e64d2907","sha1":"e99543790a8de1241d265a0f41c833d0d2b8505a","sha256":"3bb7844b28c51cf6df70879ce1b34d8312909fbb3667c0dd667939c656164c3f","sha512":"7f82608baeec47a18c91bc47f2f6450b198439d5acb3f922542c9f955341211786a0c8de41233ed346b04938081476b930b2d0610a43bf77296488ca7f5022b1","ssdeep":"192:mAw3s9Pn9Lw5DtQLXAGto9yT/VIHslpEm+2DPkExjsLLaEUwbKYHgzIVAikcP:mAwov9Lw5DtQLQGq9yT/VIHsbxPkElsV","tlshash":"8a320d42adc06cd85fea4e6b275b91d6ed163a4c3a0640cbdb5c9cb0e06164bfe51bf0","size":11772,"data":"","first_seen":"2026-06-30T19:14:35.100223Z","last_seen":"2026-07-12T18:49:06.897731Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"solairdrop.redlify.lol/solana/airdrop/js/app.js","fqdn":"solairdrop.redlify.lol","domain":"redlify.lol","tld":"lol"},"ip":{"addr":"172.67.155.19","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ec2d2798c356e794a6cb100aa51e10a9","sha1":"59c2bad7acfda33457e39f85f1c0c5c709c839aa","sha256":"fdda4bf0349682af2787e3641cd5e53431a7eedea3eb37d354fcc0918f2d5b55","sha512":"5ba4fa41cc4f0c0c0bbe4e9bb6acadd64b4ac85e72e8a9d6131ff06367c494cb55540fd8499f1a78d828e240f50181a63cfad12535e02876b05246400c1201c1","ssdeep":"768:hXYaasliIC6J4gbO03LZi7yql9PVKbKLz:hXvu6PbOgtrq1n","tlshash":"d703b81d79e31126a633357a8b9fa2a83d346403140dd9253eecd7802fe09255ebbbdc","size":38332,"data":"","first_seen":"2026-07-04T11:04:55.332861Z","last_seen":"2026-07-04T11:04:55.332861Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"solairdrop.redlify.lol/assets/k304yfb9s3o.js?d=19","fqdn":"solairdrop.redlify.lol","domain":"redlify.lol","tld":"lol"},"ip":{"addr":"172.67.155.19","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9446553814373bf78294d6b39907b8f4","sha1":"e4b2f0cca7e469f1e4ac8677bce9f14aab63c417","sha256":"9a74115d16e9c3603cb848cabbe86aa2583ce7f119db385e497ea2082d49ab98","sha512":"258b40ace0d445aadd1b3c625e95544552dfb5cbd259a36e9b3388fc076dd8d9ffd45b8b3d7fe25cf37ca983e8f87116c4242f9485eb4bf49577d3ef6ae7ca5a","ssdeep":"1536:H0bg3Gy6ahXl09jhs+HZbvo2zt6hfiwQfJ:Q","tlshash":"6d548ed2e3842badb0488cd673dbb23361a1e05f3535266aeee5d753a43dd247930a34","size":285694,"data":"","first_seen":"2026-07-04T11:04:55.331554Z","last_seen":"2026-07-04T11:04:55.331554Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"1.1.1.1/dns-query?name=_r.noir.black\u0026type=TXT","fqdn":"1.1.1.1","domain":"1.1.1.1","tld":""},"ip":{"addr":"1.1.1.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://solairdrop.redlify.lol/","date":"2026-07-04T11:04:29.374Z","timestamp":1783163069374,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cloudflare-dns.com","organization":""},"issuer":{"commonName":"SSL.com SSL Intermediate CA ECC R2","organization":"SSL Corp"},"validity":{"start":"Wed, 31 Dec 2025 19:20:01 GMT","end":"Mon, 21 Dec 2026 19:20:01 GMT"},"fingerprint":{"sha1":"F8:86:35:01:72:60:D4:0B:9E:B4:17:BE:E7:37:37:91:1B:63:0E:59","sha256":"E3:B0:28:26:78:9D:65:3D:22:4D:3E:DA:CB:E4:E8:77:CB:72:86:FC:4C:92:26:72:F6:22:67:41:CA:57:AD:65"}}},"request":{"raw":"GET /dns-query?name=_r.noir.black\u0026type=TXT HTTP/1.1\r\nHost: 1.1.1.1\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/dns-json\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://solairdrop.redlify.lol/\r\nOrigin: https://solairdrop.redlify.lol\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: cloudflare\r\ndate: Sat, 04 Jul 2026 11:04:29 GMT\r\ncontent-type: application/dns-json\r\naccess-control-allow-origin: *\r\nx-content-type-options: nosniff\r\ncontent-length: 202\r\ncf-ray: a15da63fbafb0b55-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":202,"size_decoded":476,"mime_type":"application/dns-json","magic":"JSON text data","md5":"12438bacde0697ce815e4104b42f4f21","sha1":"6df7d7d5e9cedfb8cf92fb4993d2bc25f088ed21","sha256":"3e92507c3dd9f3c5fa222b5fab641411dbbb5bea834e485a972ed50d4f401577","sha512":"7d9f14a477c6aaa7f8c805bd509279da48677e1dad5480d68bb73bcc264cf76583107f1dcdc2e0c34059ab4a605058344b749a4f7b6b77e946435d8a1cd1b6fe","ssdeep":"","tlshash":"70d02288028184f8a8439300c4d30257dfe926b2b02e2ca4eb082f74c39f062808102b","first_seen":"2026-07-04T11:04:55.325414Z","last_seen":"2026-07-04T11:04:55.325414Z","times_seen":1,"resource_available":false,"data":null}},"time_used":88,"timings":{"blocked":-1,"dns":0,"connect":2,"send":0,"wait":73,"receive":0,"ssl":13},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"solairdrop.redlify.lol/stat?ld=1\u0026ld_time=0.7\u0026wallets=\u0026id=g46tbqzd","fqdn":"solairdrop.redlify.lol","domain":"redlify.lol","tld":"lol"},"ip":{"addr":"172.67.155.19","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://solairdrop.redlify.lol/","date":"2026-07-04T11:04:29.395Z","timestamp":1783163069395,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"redlify.lol","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 20 Jun 2026 03:35:05 GMT","end":"Fri, 18 Sep 2026 04:33:34 GMT"},"fingerprint":{"sha1":"88:05:2D:B0:8E:E1:22:52:77:2B:85:1A:B3:AA:99:2A:97:E8:49:48","sha256":"D1:73:25:1B:AA:37:22:F0:61:5E:D3:A2:56:BB:5F:F9:9D:3A:79:20:E3:CF:59:E8:5D:BD:01:4D:D0:12:FE:EC"}}},"request":{"raw":"GET /stat?ld=1\u0026ld_time=0.7\u0026wallets=\u0026id=g46tbqzd HTTP/1.1\r\nHost: solairdrop.redlify.lol\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://solairdrop.redlify.lol/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: ch=1783163067; id=g46tbqzd; chid=\"\"; chsol=9d08ecc1434f56165212517df369fb0f\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 04 Jul 2026 11:04:29 GMT\r\ncontent-type: text/html; charset=utf-8\r\nserver-timing: cfExtPri\r\npriority: u=4,i=?0\r\naccess-control-allow-origin: *\r\ncache-control: no-store\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pDkGK9S4%2F9zNQWv19z37NoSD0704ZXwiH47J5XsT2EZRvg0q9sUvmgk9WhK3dSIEpjpdwcsTCTwV1IKL6lHWL5G1ZZBHVx2AbxRk5VycqFTrCXF3sl0YD57tct2kprHYKEf84Uylu5Dn\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a15da63fbbb356c6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 4\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4,"size_decoded":648,"mime_type":"text/html; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"ce7129b555fd0208c1751956ecab4952","sha1":"e4ca2609b3c50b5c18b969f5cff1373b22dd0bb3","sha256":"23491e95922f078abf97fcd95fb579fbefd3b13421f83ee48f349ec8a1d88ef6","sha512":"e12016a9381320c985b13cd5acdb45b3365771b5e9751514c2861b99bcbd68240229648699984deaf129e5ca16d9a95622bd66fc86e6b1354654875153de528e","ssdeep":"","tlshash":"ef30000000000000000000000000000000000000000003000000000000000000000000","first_seen":"2026-06-30T19:14:35.085291Z","last_seen":"2026-07-13T01:10:20.775729Z","times_seen":12,"resource_available":false,"data":null}},"time_used":94,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":94,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-04","alert":"Sinkholed","trigger":"solairdrop.redlify.lol","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-04","alert":"Sinkholed","trigger":"solairdrop.redlify.lol","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"static-297.pages.dev/api/v1/cloaker-log","fqdn":"static-297.pages.dev","domain":"static-297.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.254","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://solairdrop.redlify.lol/","date":"2026-07-04T11:04:30.044Z","timestamp":1783163070044,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"static-297.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 04 Jul 2026 00:16:32 GMT","end":"Fri, 02 Oct 2026 01:13:52 GMT"},"fingerprint":{"sha1":"56:D3:A9:23:35:9A:77:D7:CA:1E:61:90:31:7D:71:95:37:7F:AF:6B","sha256":"ED:5D:DE:55:F0:CE:81:DE:BB:E1:38:2B:A9:78:7B:04:37:11:14:C7:18:07:5A:6D:00:C5:DD:73:E4:EE:88:19"}}},"request":{"raw":"OPTIONS /api/v1/cloaker-log HTTP/1.1\r\nHost: static-297.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,x-config-id\r\nReferer: https://solairdrop.redlify.lol/\r\nOrigin: https://solairdrop.redlify.lol\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 204 \r\ndate: Sat, 04 Jul 2026 11:04:30 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IkAHr%2BazHmhgnaw0Nn%2Bg9gVLjhbiJXR7umGG4EWdpRP4l4%2FcFL7kHB0sTrQGtsjxIUqvBlVCkUH4zQHHUunw1KZUN7hbXDhZ45cSNBll6%2BxIWOHH9Vn3Ad8jSxvOtkqE2C1vLV4JIg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\ncf-ray: a15da643cd900afe-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":640,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-13T01:55:25.425867Z","times_seen":17201568,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static-297.pages.dev/api/v1/cloaker-log","fqdn":"static-297.pages.dev","domain":"static-297.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.254","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://solairdrop.redlify.lol/","date":"2026-07-04T11:04:31.551Z","timestamp":1783163071551,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"static-297.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 04 Jul 2026 00:16:32 GMT","end":"Fri, 02 Oct 2026 01:13:52 GMT"},"fingerprint":{"sha1":"56:D3:A9:23:35:9A:77:D7:CA:1E:61:90:31:7D:71:95:37:7F:AF:6B","sha256":"ED:5D:DE:55:F0:CE:81:DE:BB:E1:38:2B:A9:78:7B:04:37:11:14:C7:18:07:5A:6D:00:C5:DD:73:E4:EE:88:19"}}},"request":{"raw":"OPTIONS /api/v1/cloaker-log HTTP/1.1\r\nHost: static-297.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,x-config-id\r\nReferer: https://solairdrop.redlify.lol/\r\nOrigin: https://solairdrop.redlify.lol\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 204 \r\ndate: Sat, 04 Jul 2026 11:04:31 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sYN2Mh1TXFPq9c%2B7UMNTKkS3P1ASv5RseFtAIQeRgNT0U6iW1dO%2FgHOAYShv6uCYXVABqKQ8GQhNUE14eVVWrmqbqSHHFJNhB8%2BiHXd3Xu1YpiVWCT1EOb%2F2HNleIQuAoD27TaxcIw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\ncf-ray: a15da64d3af30afe-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":640,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-13T01:55:25.425867Z","times_seen":17201568,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"solairdrop.redlify.lol/solana/airdrop/fonts/RoobertMonoTRIAL-Bold-BF67243fd2cfa56.otf","fqdn":"solairdrop.redlify.lol","domain":"redlify.lol","tld":"lol"},"ip":{"addr":"172.67.155.19","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://solairdrop.redlify.lol/","date":"2026-07-04T11:04:28.975Z","timestamp":1783163068975,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"redlify.lol","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 20 Jun 2026 03:35:05 GMT","end":"Fri, 18 Sep 2026 04:33:34 GMT"},"fingerprint":{"sha1":"88:05:2D:B0:8E:E1:22:52:77:2B:85:1A:B3:AA:99:2A:97:E8:49:48","sha256":"D1:73:25:1B:AA:37:22:F0:61:5E:D3:A2:56:BB:5F:F9:9D:3A:79:20:E3:CF:59:E8:5D:BD:01:4D:D0:12:FE:EC"}}},"request":{"raw":"GET /solana/airdrop/fonts/RoobertMonoTRIAL-Bold-BF67243fd2cfa56.otf HTTP/1.1\r\nHost: solairdrop.redlify.lol\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://solairdrop.redlify.lol/solana/airdrop/css/main.css\r\nCookie: ch=1783163067; id=g46tbqzd; chid=\"\"; chsol=9d08ecc1434f56165212517df369fb0f\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 04 Jul 2026 11:04:29 GMT\r\ncontent-type: application/octet-stream\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 13 May 2026 16:29:02 GMT\r\npriority: u=3,i=?0\r\netag: \"6a04a6ce-16c48\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MY7mLFfAZYqgcOzIRAZefDDJ9x1Y7kv2lejlevrVMcLmypipXFUFUP3N14WgPSP89o4HpgZPBQubsrhCWT1aRY%2BPv93oy%2BBns4LkRfSdD1oR7g0rkI4eDYHFBbTu4OHOMLi961XzAWwM\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a15da63d1b9056c6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 93256\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":93256,"size_decoded":93968,"mime_type":"application/octet-stream","magic":"OpenType font data","md5":"7e376a03ed5daa80f015513ded63fe05","sha1":"c8f82e5d2a12b9769cd7b3839fbdf07d1b56d581","sha256":"c4f73301511d46076e9215ade52a0b1b16279776f41e5acb60e5f01e085f6872","sha512":"0da5891c96be3af1cc2498d789f778f95f3d0a6d683702a6c72dafd854fc2b3d54dd1585421a323ebaed43400bb855115964ef0f5c9db6678d832996a251dd42","ssdeep":"1536:m8dFD4B2hvFdIcLYhf/NsSDtXSC+tMlZ3GUNSwhXRCNMIpLDyA4jbWmRlwmu:DdAMdIcLYhf/+SDt+tMvZXMBXyVjymf+","tlshash":"9f93ae4fb70b9b48f9c70f343b360765a3399c64962edb8bd694a0509ddd0590ab82ce","first_seen":"2026-03-29T12:41:57.777802Z","last_seen":"2026-07-04T11:04:55.32856Z","times_seen":4,"resource_available":false,"data":null}},"time_used":152,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":80,"receive":72,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-04","alert":"Sinkholed","trigger":"solairdrop.redlify.lol","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-04","alert":"Sinkholed","trigger":"solairdrop.redlify.lol","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"static-297.pages.dev/api/v1/cloaker-log","fqdn":"static-297.pages.dev","domain":"static-297.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.254","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://solairdrop.redlify.lol/","date":"2026-07-04T11:04:31.548Z","timestamp":1783163071548,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"static-297.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 04 Jul 2026 00:16:32 GMT","end":"Fri, 02 Oct 2026 01:13:52 GMT"},"fingerprint":{"sha1":"56:D3:A9:23:35:9A:77:D7:CA:1E:61:90:31:7D:71:95:37:7F:AF:6B","sha256":"ED:5D:DE:55:F0:CE:81:DE:BB:E1:38:2B:A9:78:7B:04:37:11:14:C7:18:07:5A:6D:00:C5:DD:73:E4:EE:88:19"}}},"request":{"raw":"POST /api/v1/cloaker-log HTTP/1.1\r\nHost: static-297.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nX-Config-Id: 6a2950f0bd76cd45c74f7be7\r\nReferer: https://solairdrop.redlify.lol/\r\nContent-Length: 419\r\nOrigin: https://solairdrop.redlify.lol\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 403 \r\ndate: Sat, 04 Jul 2026 11:04:31 GMT\r\ncontent-type: application/json\r\ncontent-length: 12\r\ncf-ray: a15da64d4afd0afe-OSL\r\ncf-cache-status: DYNAMIC\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS\r\naccess-control-expose-headers: X-Noir-Visitor-Token,X-Noir-Session-Token,X-Noir-Client-Blocked,X-Noir-Block-Reason,X-Noir-Block-Stage,X-Request-ID\r\naccess-control-max-age: 600\r\ncontent-security-policy: default-src 'none'; connect-src 'self'; frame-ancestors 'none'\r\nreferrer-policy: no-referrer\r\nx-content-type-options: nosniff\r\nx-download-options: noopen\r\nx-frame-options: DENY\r\nx-permitted-cross-domain-policies: none\r\nx-ratelimit-limit: 120\r\nx-ratelimit-remaining: 118\r\nx-ratelimit-reset: 59\r\nx-request-id: ae7ca7fe831525a6c6eeb734a7028f4f\r\nx-robots-tag: noindex, nofollow\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rd1KSZdpmMaVi5iPCUYL44RXob0BG7EezlETj97W7d%2FspFFTEUdyu7VHWHNK4QYhSFV6VOLvtDK%2FYmwxgkdCLhZtL2I43PIav4khgnS%2BTmvwYALbPFSGqiOcbgEg%2BZteBzhuqtfF7w%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12,"size_decoded":1380,"mime_type":"application/json","magic":"JSON text data","md5":"f2a52097d7f03606103253314c4ca024","sha1":"36cc882ab0dfe9f43bfbad3d4250951a80b7a2f9","sha256":"38667e60226bf99701916900a2a265233dcc014e1206c173ade921d608824b53","sha512":"cf6526aca8465b7bcc7c419960796aa7dc5c742c0d43ec7f77a7b9e1450f675f98cba4d47807f2754208faf58be4463e54812618f31afc2553244135a43bb3ab","ssdeep":"","tlshash":"43600000000c0c0c00c000000300f300000300003c0c3000c000300033c300c0000c00","first_seen":"2023-04-10T00:36:02Z","last_seen":"2026-07-13T00:35:02.140052Z","times_seen":470,"resource_available":true,"data":null}},"time_used":173,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":173,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"solairdrop.redlify.lol/","fqdn":"solairdrop.redlify.lol","domain":"redlify.lol","tld":"lol"},"ip":{"addr":"172.67.155.19","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-07-04T11:04:27.574Z","timestamp":1783163067574,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"redlify.lol","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 20 Jun 2026 03:35:05 GMT","end":"Fri, 18 Sep 2026 04:33:34 GMT"},"fingerprint":{"sha1":"88:05:2D:B0:8E:E1:22:52:77:2B:85:1A:B3:AA:99:2A:97:E8:49:48","sha256":"D1:73:25:1B:AA:37:22:F0:61:5E:D3:A2:56:BB:5F:F9:9D:3A:79:20:E3:CF:59:E8:5D:BD:01:4D:D0:12:FE:EC"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: solairdrop.redlify.lol\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 04 Jul 2026 11:04:27 GMT\r\ncontent-type: text/html; charset=utf-8\r\nvary: accept-encoding\r\npriority: u=0,i\r\naccess-control-allow-origin: *\r\ncache-control: no-store\r\nset-cookie: ch=1783163067; Max-Age=86400; Path=/\nid=g46tbqzd; Max-Age=86400; Path=/\nchid=g46tbqzd; Max-Age=86400; Path=/\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xloCI6%2BvGIjzU1n4INYxE8wYrhtSIkq24rEvHrn%2BMUFhwaz2U0s6e5VN8RLoihaPKu8Am%2FHAk6OrlLE%2B2GJnijP3hSLwKneLckAXkJwfgC0ffmaFLNTsD1y6DBF765r%2BcixbtiKa9YoX\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: zstd\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a15da6350b4656c6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":321,"size_decoded":1072,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"762eeda7ff3180c0a5035e8ba1b56fb2","sha1":"f0c0cf9993b5a36810f353c1e5917557a9d9a76b","sha256":"d8eea45974fa67566678e98da5c91c2fa53d2e57c8134f52025b234346a55d75","sha512":"d811057484b9bdd4eb2488cceaedd2df02249a3582ec169dabaf46fba83b0019945797165430f529c118680d33c29fa271f2b7936163998cce4d823e98ee6730","ssdeep":"","tlshash":"c4e07da538004c245974b6341ff1f2b499a201a5b971ab6656992c131185b3aff82e85","first_seen":"2026-07-04T11:04:55.330248Z","last_seen":"2026-07-04T11:04:55.330248Z","times_seen":1,"resource_available":true,"data":null}},"time_used":235,"timings":{"blocked":-1,"dns":83,"connect":20,"send":0,"wait":132,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-04","alert":"Sinkholed","trigger":"solairdrop.redlify.lol","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-04","alert":"Sinkholed","trigger":"solairdrop.redlify.lol","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"solairdrop.redlify.lol/stat?op=1\u0026host=solairdrop.redlify.lol\u0026id=g46tbqzd","fqdn":"solairdrop.redlify.lol","domain":"redlify.lol","tld":"lol"},"ip":{"addr":"172.67.155.19","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://solairdrop.redlify.lol/","date":"2026-07-04T11:04:28.735Z","timestamp":1783163068735,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"redlify.lol","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 20 Jun 2026 03:35:05 GMT","end":"Fri, 18 Sep 2026 04:33:34 GMT"},"fingerprint":{"sha1":"88:05:2D:B0:8E:E1:22:52:77:2B:85:1A:B3:AA:99:2A:97:E8:49:48","sha256":"D1:73:25:1B:AA:37:22:F0:61:5E:D3:A2:56:BB:5F:F9:9D:3A:79:20:E3:CF:59:E8:5D:BD:01:4D:D0:12:FE:EC"}}},"request":{"raw":"GET /stat?op=1\u0026host=solairdrop.redlify.lol\u0026id=g46tbqzd HTTP/1.1\r\nHost: solairdrop.redlify.lol\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://solairdrop.redlify.lol/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: ch=1783163067; id=g46tbqzd; chid=\"\"; chsol=9d08ecc1434f56165212517df369fb0f\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 04 Jul 2026 11:04:28 GMT\r\ncontent-type: text/html; charset=utf-8\r\nserver-timing: cfExtPri\r\npriority: u=4,i=?0\r\naccess-control-allow-origin: *\r\ncache-control: no-store\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=urPvTDEqvpW5vFn9wVjhELpM9pLS5xSisJiJO3elF65fP6wbFXJrAczCzrK3IWLsftWlZfh%2B7DvTeMAeKKfA8m31uKufi5m3o6fuVzniUxq7N9f90VuQ7cySjBKge825Aq9uFW08JO%2F1\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a15da63b9b7c56c6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 4\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4,"size_decoded":650,"mime_type":"text/html; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"ce7129b555fd0208c1751956ecab4952","sha1":"e4ca2609b3c50b5c18b969f5cff1373b22dd0bb3","sha256":"23491e95922f078abf97fcd95fb579fbefd3b13421f83ee48f349ec8a1d88ef6","sha512":"e12016a9381320c985b13cd5acdb45b3365771b5e9751514c2861b99bcbd68240229648699984deaf129e5ca16d9a95622bd66fc86e6b1354654875153de528e","ssdeep":"","tlshash":"ef30000000000000000000000000000000000000000003000000000000000000000000","first_seen":"2026-06-30T19:14:35.085291Z","last_seen":"2026-07-13T01:10:20.775729Z","times_seen":12,"resource_available":false,"data":null}},"time_used":84,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":84,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-04","alert":"Sinkholed","trigger":"solairdrop.redlify.lol","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-04","alert":"Sinkholed","trigger":"solairdrop.redlify.lol","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"solairdrop.redlify.lol/stat?ping=20.0\u0026id=g46tbqzd","fqdn":"solairdrop.redlify.lol","domain":"redlify.lol","tld":"lol"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://solairdrop.redlify.lol/","date":"2026-07-04T11:04:48.738Z","timestamp":1783163088738,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /stat?ping=20.0\u0026id=g46tbqzd HTTP/1.1\r\nHost: solairdrop.redlify.lol\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://solairdrop.redlify.lol/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: ch=1783163067; id=g46tbqzd; chid=\"\"; chsol=9d08ecc1434f56165212517df369fb0f\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-13T01:55:25.425867Z","times_seen":17201568,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-04","alert":"Sinkholed","trigger":"solairdrop.redlify.lol","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-04","alert":"Sinkholed","trigger":"solairdrop.redlify.lol","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"solairdrop.redlify.lol/assets/k304yfb9s3o.js?d=19","fqdn":"solairdrop.redlify.lol","domain":"redlify.lol","tld":"lol"},"ip":{"addr":"172.67.155.19","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://solairdrop.redlify.lol/","date":"2026-07-04T11:04:28.725Z","timestamp":1783163068725,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"redlify.lol","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 20 Jun 2026 03:35:05 GMT","end":"Fri, 18 Sep 2026 04:33:34 GMT"},"fingerprint":{"sha1":"88:05:2D:B0:8E:E1:22:52:77:2B:85:1A:B3:AA:99:2A:97:E8:49:48","sha256":"D1:73:25:1B:AA:37:22:F0:61:5E:D3:A2:56:BB:5F:F9:9D:3A:79:20:E3:CF:59:E8:5D:BD:01:4D:D0:12:FE:EC"}}},"request":{"raw":"GET /assets/k304yfb9s3o.js?d=19 HTTP/1.1\r\nHost: solairdrop.redlify.lol\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://solairdrop.redlify.lol/\r\nCookie: ch=1783163067; id=g46tbqzd; chid=\"\"; chsol=9d08ecc1434f56165212517df369fb0f\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 04 Jul 2026 11:04:28 GMT\r\ncontent-type: application/javascript\r\netag: W/\"6a357fda-45bfe\"\r\nlast-modified: Fri, 19 Jun 2026 17:43:54 GMT\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fvTqYsqcq%2B%2FLqFvCKZc4xub46IW7SFlvw5W4vYZsooK9t5NQxPuzRyOp7VhCRNQ8Qg%2FXilcbm95FQoBPqUefi6J1VEXrDGVwKsh1WE4UuhFwSiMOUWsuyHVz84EPNm0dSGvsO4%2Fas1h2\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\ncf-ray: a15da63b8b7956c6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":285694,"size_decoded":48510,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"9446553814373bf78294d6b39907b8f4","sha1":"e4b2f0cca7e469f1e4ac8677bce9f14aab63c417","sha256":"9a74115d16e9c3603cb848cabbe86aa2583ce7f119db385e497ea2082d49ab98","sha512":"258b40ace0d445aadd1b3c625e95544552dfb5cbd259a36e9b3388fc076dd8d9ffd45b8b3d7fe25cf37ca983e8f87116c4242f9485eb4bf49577d3ef6ae7ca5a","ssdeep":"1536:H0bg3Gy6ahXl09jhs+HZbvo2zt6hfiwQfJ:Q","tlshash":"6d548ed2e3842badb0488cd673dbb23361a1e05f3535266aeee5d753a43dd247930a34","first_seen":"2026-07-04T11:04:55.331554Z","last_seen":"2026-07-04T11:04:55.331554Z","times_seen":1,"resource_available":true,"data":null}},"time_used":200,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":80,"receive":120,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-04","alert":"Sinkholed","trigger":"solairdrop.redlify.lol","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-04","alert":"Sinkholed","trigger":"solairdrop.redlify.lol","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"solairdrop.redlify.lol/solana/airdrop/js/app.js","fqdn":"solairdrop.redlify.lol","domain":"redlify.lol","tld":"lol"},"ip":{"addr":"172.67.155.19","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://solairdrop.redlify.lol/","date":"2026-07-04T11:04:28.728Z","timestamp":1783163068728,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"redlify.lol","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 20 Jun 2026 03:35:05 GMT","end":"Fri, 18 Sep 2026 04:33:34 GMT"},"fingerprint":{"sha1":"88:05:2D:B0:8E:E1:22:52:77:2B:85:1A:B3:AA:99:2A:97:E8:49:48","sha256":"D1:73:25:1B:AA:37:22:F0:61:5E:D3:A2:56:BB:5F:F9:9D:3A:79:20:E3:CF:59:E8:5D:BD:01:4D:D0:12:FE:EC"}}},"request":{"raw":"GET /solana/airdrop/js/app.js HTTP/1.1\r\nHost: solairdrop.redlify.lol\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://solairdrop.redlify.lol/\r\nCookie: ch=1783163067; id=g46tbqzd; chid=\"\"; chsol=9d08ecc1434f56165212517df369fb0f\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 04 Jul 2026 11:04:28 GMT\r\ncontent-type: application/javascript\r\netag: W/\"6a371fd7-95bc\"\r\nlast-modified: Sat, 20 Jun 2026 23:18:47 GMT\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=g2Pn9h9r9m5the1XZvod14mhzzceSEV%2FiLh7ezVn180p%2FTLb5OKYSrePT85TgpZ1iGP3CpM8lPWfvIu4LRQSKwPMYogIu%2FzwLkeKBqAZtLfSdnVwJk0KuKW4Bsn%2FiZApfxO%2BO3OPov1Y\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\ncf-ray: a15da63b9b7b56c6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":38332,"size_decoded":11096,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (613)","md5":"ec2d2798c356e794a6cb100aa51e10a9","sha1":"59c2bad7acfda33457e39f85f1c0c5c709c839aa","sha256":"fdda4bf0349682af2787e3641cd5e53431a7eedea3eb37d354fcc0918f2d5b55","sha512":"5ba4fa41cc4f0c0c0bbe4e9bb6acadd64b4ac85e72e8a9d6131ff06367c494cb55540fd8499f1a78d828e240f50181a63cfad12535e02876b05246400c1201c1","ssdeep":"768:hXYaasliIC6J4gbO03LZi7yql9PVKbKLz:hXvu6PbOgtrq1n","tlshash":"d703b81d79e31126a633357a8b9fa2a83d346403140dd9253eecd7802fe09255ebbbdc","first_seen":"2026-07-04T11:04:55.332861Z","last_seen":"2026-07-04T11:04:55.332861Z","times_seen":1,"resource_available":true,"data":null}},"time_used":110,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":79,"receive":31,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-04","alert":"Sinkholed","trigger":"solairdrop.redlify.lol","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-04","alert":"Sinkholed","trigger":"solairdrop.redlify.lol","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"static-297.pages.dev/api/v1/config/mode?id=6a2950f0bd76cd45c74f7be7","fqdn":"static-297.pages.dev","domain":"static-297.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.254","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://solairdrop.redlify.lol/","date":"2026-07-04T11:04:29.487Z","timestamp":1783163069487,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"static-297.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 04 Jul 2026 00:16:32 GMT","end":"Fri, 02 Oct 2026 01:13:52 GMT"},"fingerprint":{"sha1":"56:D3:A9:23:35:9A:77:D7:CA:1E:61:90:31:7D:71:95:37:7F:AF:6B","sha256":"ED:5D:DE:55:F0:CE:81:DE:BB:E1:38:2B:A9:78:7B:04:37:11:14:C7:18:07:5A:6D:00:C5:DD:73:E4:EE:88:19"}}},"request":{"raw":"GET /api/v1/config/mode?id=6a2950f0bd76cd45c74f7be7 HTTP/1.1\r\nHost: static-297.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://solairdrop.redlify.lol/\r\nOrigin: https://solairdrop.redlify.lol\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 04 Jul 2026 11:04:30 GMT\r\ncontent-type: application/json\r\ncf-ray: a15da6406ba00afe-OSL\r\ncf-cache-status: DYNAMIC\r\naccess-control-allow-origin: *\r\nretry-after: 4\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS\r\nreferrer-policy: no-referrer\r\nx-content-type-options: nosniff\r\nx-download-options: noopen\r\nx-frame-options: DENY\r\nx-permitted-cross-domain-policies: none\r\nx-request-id: 5091a8bbf07166a70022144200307418\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1JYNXg1LAoRajvDxR3j%2F16ElGp3B2WE4MgWq2bleUnNZxTLoJlMxlI3sSHdi64n0O6Srln3Wq%2B5JDCVbW429Fwt15vgHRdXKC%2FiyL4JaU%2FPUPzztrRBRegCLjtcouHcuM7DNs2DpJg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncontent-encoding: br\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":62,"size_decoded":1088,"mime_type":"application/json","magic":"JSON text data","md5":"dae343d2233dbc7c8ec07a747d72c2b5","sha1":"36d3dc8e6ccbc20da212af61fc767d6f709a2343","sha256":"92efe29067873ae547c4fe3f202a1a74a352e912386a363f177fed8fdc2541dc","sha512":"98da402c2e6216fabf64d74a70ceed215c65d23f6a514a65929060821e00a061343e609ffeb93e10f3856ef67089e076d9d90526137eaa5a60a10eea58b51338","ssdeep":"","tlshash":"caa002bd01252eb907a20582720550317eb356a794956541b50dc51c7689bc5e15d3a2","first_seen":"2026-06-19T11:03:36.97902Z","last_seen":"2026-07-08T14:14:09.087023Z","times_seen":10,"resource_available":false,"data":null}},"time_used":534,"timings":{"blocked":0,"dns":9,"connect":12,"send":0,"wait":513,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static-297.pages.dev/api/v1/cloaker-log","fqdn":"static-297.pages.dev","domain":"static-297.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.254","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://solairdrop.redlify.lol/","date":"2026-07-04T11:04:30.042Z","timestamp":1783163070042,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"static-297.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 04 Jul 2026 00:16:32 GMT","end":"Fri, 02 Oct 2026 01:13:52 GMT"},"fingerprint":{"sha1":"56:D3:A9:23:35:9A:77:D7:CA:1E:61:90:31:7D:71:95:37:7F:AF:6B","sha256":"ED:5D:DE:55:F0:CE:81:DE:BB:E1:38:2B:A9:78:7B:04:37:11:14:C7:18:07:5A:6D:00:C5:DD:73:E4:EE:88:19"}}},"request":{"raw":"POST /api/v1/cloaker-log HTTP/1.1\r\nHost: static-297.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nX-Config-Id: 6a2950f0bd76cd45c74f7be7\r\nReferer: https://solairdrop.redlify.lol/\r\nContent-Length: 385\r\nOrigin: https://solairdrop.redlify.lol\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 403 \r\ndate: Sat, 04 Jul 2026 11:04:30 GMT\r\ncontent-type: application/json\r\ncontent-length: 12\r\ncf-ray: a15da643dd980afe-OSL\r\ncf-cache-status: DYNAMIC\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS\r\naccess-control-expose-headers: X-Noir-Visitor-Token,X-Noir-Session-Token,X-Noir-Client-Blocked,X-Noir-Block-Reason,X-Noir-Block-Stage,X-Request-ID\r\naccess-control-max-age: 600\r\ncontent-security-policy: default-src 'none'; connect-src 'self'; frame-ancestors 'none'\r\nreferrer-policy: no-referrer\r\nx-content-type-options: nosniff\r\nx-download-options: noopen\r\nx-frame-options: DENY\r\nx-permitted-cross-domain-policies: none\r\nx-ratelimit-limit: 120\r\nx-ratelimit-remaining: 119\r\nx-ratelimit-reset: 60\r\nx-request-id: 7784bdce57db211f3ec6692dfd3498f5\r\nx-robots-tag: noindex, nofollow\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fxGC4wFfT%2BMlCZ5NPa6yoRu3a0Ow43ieqmc04mpGRjpaht6RSVXVTu70d7K9JUreiodGzhAL2bqJLFoWkxCxprpWgyukbkiPaY6bU39okFElDhHQ7TOe5%2BhOG5LoXDr1YHnqWVUN6w%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12,"size_decoded":1376,"mime_type":"application/json","magic":"JSON text data","md5":"f2a52097d7f03606103253314c4ca024","sha1":"36cc882ab0dfe9f43bfbad3d4250951a80b7a2f9","sha256":"38667e60226bf99701916900a2a265233dcc014e1206c173ade921d608824b53","sha512":"cf6526aca8465b7bcc7c419960796aa7dc5c742c0d43ec7f77a7b9e1450f675f98cba4d47807f2754208faf58be4463e54812618f31afc2553244135a43bb3ab","ssdeep":"","tlshash":"43600000000c0c0c00c000000300f300000300003c0c3000c000300033c300c0000c00","first_seen":"2023-04-10T00:36:02Z","last_seen":"2026-07-13T00:35:02.140052Z","times_seen":470,"resource_available":true,"data":null}},"time_used":485,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":485,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"solairdrop.redlify.lol/stat?ping=10.0\u0026id=g46tbqzd","fqdn":"solairdrop.redlify.lol","domain":"redlify.lol","tld":"lol"},"ip":{"addr":"172.67.155.19","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://solairdrop.redlify.lol/","date":"2026-07-04T11:04:38.728Z","timestamp":1783163078728,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"redlify.lol","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 20 Jun 2026 03:35:05 GMT","end":"Fri, 18 Sep 2026 04:33:34 GMT"},"fingerprint":{"sha1":"88:05:2D:B0:8E:E1:22:52:77:2B:85:1A:B3:AA:99:2A:97:E8:49:48","sha256":"D1:73:25:1B:AA:37:22:F0:61:5E:D3:A2:56:BB:5F:F9:9D:3A:79:20:E3:CF:59:E8:5D:BD:01:4D:D0:12:FE:EC"}}},"request":{"raw":"GET /stat?ping=10.0\u0026id=g46tbqzd HTTP/1.1\r\nHost: solairdrop.redlify.lol\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://solairdrop.redlify.lol/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: ch=1783163067; id=g46tbqzd; chid=\"\"; chsol=9d08ecc1434f56165212517df369fb0f\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 04 Jul 2026 11:04:38 GMT\r\ncontent-type: text/html; charset=utf-8\r\nserver-timing: cfExtPri\r\npriority: u=4,i=?0\r\naccess-control-allow-origin: *\r\ncache-control: no-store\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gvJ4cBTDxQI2ce664zfd15xWYD2ug04th25K0GibFKe5gafGit9MwsONXB%2BtTw2gPuEFKhPQHuhCU1fP6HcW3ONxJXelhkeJ6OYcyBxCzJcWe9cSAuLtCq4oxU0uiyLWXhS7M%2FjarY0K\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a15da67a1f1456c6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 4\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4,"size_decoded":650,"mime_type":"text/html; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"ce7129b555fd0208c1751956ecab4952","sha1":"e4ca2609b3c50b5c18b969f5cff1373b22dd0bb3","sha256":"23491e95922f078abf97fcd95fb579fbefd3b13421f83ee48f349ec8a1d88ef6","sha512":"e12016a9381320c985b13cd5acdb45b3365771b5e9751514c2861b99bcbd68240229648699984deaf129e5ca16d9a95622bd66fc86e6b1354654875153de528e","ssdeep":"","tlshash":"ef30000000000000000000000000000000000000000003000000000000000000000000","first_seen":"2026-06-30T19:14:35.085291Z","last_seen":"2026-07-13T01:10:20.775729Z","times_seen":12,"resource_available":false,"data":null}},"time_used":81,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":81,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-04","alert":"Sinkholed","trigger":"solairdrop.redlify.lol","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-04","alert":"Sinkholed","trigger":"solairdrop.redlify.lol","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"solairdrop.redlify.lol/favicon.ico","fqdn":"solairdrop.redlify.lol","domain":"redlify.lol","tld":"lol"},"ip":{"addr":"172.67.155.19","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://solairdrop.redlify.lol/","date":"2026-07-04T11:04:29.594Z","timestamp":1783163069594,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"redlify.lol","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 20 Jun 2026 03:35:05 GMT","end":"Fri, 18 Sep 2026 04:33:34 GMT"},"fingerprint":{"sha1":"88:05:2D:B0:8E:E1:22:52:77:2B:85:1A:B3:AA:99:2A:97:E8:49:48","sha256":"D1:73:25:1B:AA:37:22:F0:61:5E:D3:A2:56:BB:5F:F9:9D:3A:79:20:E3:CF:59:E8:5D:BD:01:4D:D0:12:FE:EC"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: solairdrop.redlify.lol\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://solairdrop.redlify.lol/\r\nCookie: ch=1783163067; id=g46tbqzd; chid=\"\"; chsol=9d08ecc1434f56165212517df369fb0f\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\nserver: cloudflare\r\ndate: Sat, 04 Jul 2026 11:04:29 GMT\r\ncontent-type: text/html\r\nvary: accept-encoding\r\npriority: u=6,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=raxD6t%2Bw7Ks9kBLUsO0p8xIWtMV2kuh18H1NXAf8a2DgkWdi32swWmIm%2BBLD1jwzfLq%2B5AOnlGT5iQhVJ0xu8k2r3AVbXYMYMLeDAj00k1tM22%2FwOZ93tBe3c1zWcgXVElsLgLE%2FemDu\"}]}\r\nage: 1\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a15da640fbc256c6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":153,"size_decoded":753,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"998368d7c95ea4293237f2320546e440","sha1":"30dfd2d3bb8a7e3241bd7792e90a98ebb70be3a4","sha256":"533a1ca5d6595793725bca7641d9461a0f00dd1732dded3e4281196f5dd21736","sha512":"648c4720a85dbf834be1ba00f0e1b4167cc670fe15896efb00a77fb6e0c225a13aae3da10d85fa6e7f726420d9bb3c20c43466e02296d44153c127b7160e0b97","ssdeep":"","tlshash":"4fc02b2d7513bc4cc563317832c37080c0c6833769bb4112c440800331cf2998bc3397","first_seen":"2023-04-06T02:01:38Z","last_seen":"2026-07-13T02:13:28.798804Z","times_seen":5351,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-04","alert":"Sinkholed","trigger":"solairdrop.redlify.lol","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-04","alert":"Sinkholed","trigger":"solairdrop.redlify.lol","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"solairdrop.redlify.lol/","fqdn":"solairdrop.redlify.lol","domain":"redlify.lol","tld":"lol"},"ip":{"addr":"172.67.155.19","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-07-04T11:04:28.307Z","timestamp":1783163068307,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"redlify.lol","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 20 Jun 2026 03:35:05 GMT","end":"Fri, 18 Sep 2026 04:33:34 GMT"},"fingerprint":{"sha1":"88:05:2D:B0:8E:E1:22:52:77:2B:85:1A:B3:AA:99:2A:97:E8:49:48","sha256":"D1:73:25:1B:AA:37:22:F0:61:5E:D3:A2:56:BB:5F:F9:9D:3A:79:20:E3:CF:59:E8:5D:BD:01:4D:D0:12:FE:EC"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: solairdrop.redlify.lol\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: ch=1783163067; id=g46tbqzd; chid=g46tbqzd; chsol=9d08ecc1434f56165212517df369fb0f\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 04 Jul 2026 11:04:28 GMT\r\ncontent-type: text/html; charset=utf-8\r\nvary: accept-encoding\r\npriority: u=0,i\r\naccess-control-allow-origin: *\r\ncache-control: no-store\r\nset-cookie: id=g46tbqzd; Max-Age=86400; Path=/\nchid=\"\"; Max-Age=86400; Path=/\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=l0E2QsIFGQDcNm9HL%2FTGaApiz5jdkkNgEaW4kAz1uAkZB%2Fz5lMsLOWUSjVifibT7LcQVoyhkDTqxr9s4tqKZtMPmRi5nS7e1zflc2IQjCuByJLtnC5siy9UOdM5Rk7JpFPW%2BPV1eyUDO\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: zstd\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a15da638eb6f56c6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":112153,"size_decoded":12639,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (11911)","md5":"f91d6cce1563c0d37a2038b6e936658e","sha1":"1fc011847a5a39e9333781784cddc61ca053277b","sha256":"f509a89a3a926cb4027b3ed30c8e725ceb39096b2fa003e3385f878b6211a0c6","sha512":"a720789faae10ef97013a1ce8551c049d0f9503050685e8b9ae816ebf400a2821807830dd33a7be2846792da27b68433edcef3cc4058ca2c329493178344b8c4","ssdeep":"768:uov9Lw5DtQLQpOPbxPvlsKyJnAikcgyA4O+uQbGGlbxzxgV+y0S873T1Kh:xGJ+4O+7lCP7","tlshash":"73b327e0bdf4241f9600174e860864e5ab57e08b6b7e4004b9dc233a5f97d4beda367e","first_seen":"2026-07-04T11:04:55.33619Z","last_seen":"2026-07-04T11:04:55.33619Z","times_seen":1,"resource_available":true,"data":null}},"time_used":396,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":394,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-04","alert":"Sinkholed","trigger":"solairdrop.redlify.lol","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-04","alert":"Sinkholed","trigger":"solairdrop.redlify.lol","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"solairdrop.redlify.lol/solana/airdrop/css/main.css","fqdn":"solairdrop.redlify.lol","domain":"redlify.lol","tld":"lol"},"ip":{"addr":"172.67.155.19","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://solairdrop.redlify.lol/","date":"2026-07-04T11:04:28.727Z","timestamp":1783163068727,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"redlify.lol","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 20 Jun 2026 03:35:05 GMT","end":"Fri, 18 Sep 2026 04:33:34 GMT"},"fingerprint":{"sha1":"88:05:2D:B0:8E:E1:22:52:77:2B:85:1A:B3:AA:99:2A:97:E8:49:48","sha256":"D1:73:25:1B:AA:37:22:F0:61:5E:D3:A2:56:BB:5F:F9:9D:3A:79:20:E3:CF:59:E8:5D:BD:01:4D:D0:12:FE:EC"}}},"request":{"raw":"GET /solana/airdrop/css/main.css HTTP/1.1\r\nHost: solairdrop.redlify.lol\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://solairdrop.redlify.lol/\r\nCookie: ch=1783163067; id=g46tbqzd; chid=\"\"; chsol=9d08ecc1434f56165212517df369fb0f\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 04 Jul 2026 11:04:28 GMT\r\ncontent-type: text/css\r\netag: W/\"6a074639-1b295\"\r\nlast-modified: Fri, 15 May 2026 16:13:45 GMT\r\npriority: u=2,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7niZIRFQXzlFyHZMnxs8G7ypwopDdq%2B2UGapRj9DeGllzpijeWN0McqX2nD%2B%2BMeugcdKkLHpYTMAzPk8Gz5edokZjHewHSbjRST%2BlZOcKl4dfEPWV%2F2uoNAELWnH7LtsAaMaKMjCbSJv\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\ncf-ray: a15da63b8b7a56c6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":111253,"size_decoded":21835,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (28007)","md5":"2a9d9080c75fc581be78df3c7ff653fa","sha1":"98b1b8d9236f40864173496b951293059775c7a0","sha256":"f22a5517e3298ea80aac515630e7a8bd0b1977d54ef8da2aa18668abd1532c2b","sha512":"0234a2e552031704b591b6a66ab2273a38b0185b6d814343fbf7572dc45c8014a0fae827bbbe884a28258669a55eec48541ec24b1f53f1c5200500148f760a9b","ssdeep":"768:KpSUJCAgzyAcoKPFEwFH69ODS2aBFUxrTp7Gtk2lYf+dR70EIJ9P+Gf/e/uBkCHg:nAgzyAuH+ODS2QFiHlr8Oja","tlshash":"deb3e934be0d3a3e7523e76945c0859d6207b34bde3b03aaeea113784dca39b2975714","first_seen":"2026-07-04T11:04:55.337644Z","last_seen":"2026-07-04T11:04:55.337644Z","times_seen":1,"resource_available":false,"data":null}},"time_used":171,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":83,"receive":88,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-04","alert":"Sinkholed","trigger":"solairdrop.redlify.lol","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-04","alert":"Sinkholed","trigger":"solairdrop.redlify.lol","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"solairdrop.redlify.lol/solana/airdrop/fonts/Inter-VariableFont_opsz,wght.ttf","fqdn":"solairdrop.redlify.lol","domain":"redlify.lol","tld":"lol"},"ip":{"addr":"172.67.155.19","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://solairdrop.redlify.lol/","date":"2026-07-04T11:04:28.973Z","timestamp":1783163068973,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"redlify.lol","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 20 Jun 2026 03:35:05 GMT","end":"Fri, 18 Sep 2026 04:33:34 GMT"},"fingerprint":{"sha1":"88:05:2D:B0:8E:E1:22:52:77:2B:85:1A:B3:AA:99:2A:97:E8:49:48","sha256":"D1:73:25:1B:AA:37:22:F0:61:5E:D3:A2:56:BB:5F:F9:9D:3A:79:20:E3:CF:59:E8:5D:BD:01:4D:D0:12:FE:EC"}}},"request":{"raw":"GET /solana/airdrop/fonts/Inter-VariableFont_opsz,wght.ttf HTTP/1.1\r\nHost: solairdrop.redlify.lol\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://solairdrop.redlify.lol/solana/airdrop/css/main.css\r\nCookie: ch=1783163067; id=g46tbqzd; chid=\"\"; chsol=9d08ecc1434f56165212517df369fb0f\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 04 Jul 2026 11:04:29 GMT\r\ncontent-type: application/octet-stream\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 13 May 2026 16:42:30 GMT\r\npriority: u=3,i=?0\r\netag: \"6a04a9f6-d58d4\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=X9M5GwFrPafBQTV4LGkyL6Z%2Bm0XLTOuJM%2F96CTYb2coVDzYOvHeXJbZkP9VaOvZYqwneRFk54oTXni0N1bdvveGpkr%2Fo4xoCHu7qHFxB%2B%2FwURwkcn1b7mdphG%2F1c6WiBLNA5XFDLKtid\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a15da63d1b8f56c6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 874708\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":874708,"size_decoded":875429,"mime_type":"application/octet-stream","magic":"TrueType Font data, 21 tables, 1st \"GDEF\", 58 names, Microsoft, language 0x409","md5":"0a77e23a8fdbe6caefd53cb04c26fabc","sha1":"ee5c2e22ffeddefc433c9aa4c76779bb73a5c682","sha256":"0be2399ea925f1f83ff974764761da9860ec50742ed29a5d4c1ffd0c5c7ac3a8","sha512":"6012de93c8523799869b8976f620936651efc0395c66f1a6a56d417288c1b05675662c5c740800ea935eaae1968f2befe279d0264eb0805f6b98e5ab042a9316","ssdeep":"24576:Wap5PFuuuuPz2iKeRpJ6iruEOwRy+4FFNea:WapTL2iKeRpJ6iar9F7","tlshash":"f7158e53f282cf5ec2592b358a734b9462396870ff17130f696573b4aea33e0694d6e0","first_seen":"2024-12-10T16:54:08.570183Z","last_seen":"2026-07-13T01:24:51.825535Z","times_seen":3184,"resource_available":false,"data":null}},"time_used":236,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":81,"receive":155,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-04","alert":"Sinkholed","trigger":"solairdrop.redlify.lol","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-04","alert":"Sinkholed","trigger":"solairdrop.redlify.lol","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}}]}