{"report_id":"eb7cbf20-9517-4773-8b4c-457a7e805065","version":6,"status":"done","tags":["scam","fraud","crypto"],"date":"2026-04-13T01:23:48Z","url":{"schema":"https","addr":"airdrop-claim-royco-roycocoin.pages.dev","fqdn":"airdrop-claim-royco-roycocoin.pages.dev","domain":"airdrop-claim-royco-roycocoin.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.47.106","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"airdrop-claim-royco-roycocoin.pages.dev/","fqdn":"airdrop-claim-royco-roycocoin.pages.dev","domain":"airdrop-claim-royco-roycocoin.pages.dev","tld":"pages.dev"},"title":"Mog Coin","dom":{"size":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-17T12:43:03.491258Z","times_seen":17937165,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"airdrop-claim-royco-roycocoin.pages.dev","fqdn":"airdrop-claim-royco-roycocoin.pages.dev","domain":"airdrop-claim-royco-roycocoin.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.47.106","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null,"user":{"user_id":"akbkyowd9geqr98"}},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-05-18T01:23:48Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":1,"urlquery":2,"analyzer":1}},"detection":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-04-13T01:23:23Z","timestamp":1776043403,"ip_dst":{"addr":"172.66.44.150","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"Client IP","port":49660,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Cloudflare Page Developer Domain (pages .dev in TLS SNI)","source":"{\"timestamp\":\"2026-04-13T01:23:23.702315+0000\",\"flow_id\":1603389767783445,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.27\",\"src_port\":49660,\"dest_ip\":\"172.66.44.150\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2057746,\"rev\":1,\"signature\":\"ET INFO Observed Cloudflare Page Developer Domain (pages .dev in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_11_20\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"Description_Generated_By_Proofpoint_Nexus\"],\"updated_at\":[\"2024_11_20\"]}},\"tls\":{\"sni\":\"airdrop-claim-royco-roycocoin.pages.dev\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"eb1d94daa7e0344597e756a1fb6e7054\",\"string\":\"771,4865,51-43\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":5,\"bytes_toserver\":941,\"bytes_toclient\":3602,\"start\":\"2026-04-13T01:23:23.693269+0000\"}}"}],"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"airdrop-claim-royco-roycocoin.pages.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Scam - Fraudulent Crypto Site","verdict":"scam","severity":"medium","comment":"","tags":["scam","fraud","crypto"],"meta":null},{"sensor_name":"urlquery","alert":"Scam - Fraudulent Crypto Site","verdict":"scam","severity":"medium","comment":"","tags":["scam","fraud","crypto"],"meta":null}]},"summary":[{"fqdn":"airdrop-claim-royco-roycocoin.pages.dev","ip":{"addr":"172.66.44.150","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2020-09-02","domain_rank":0,"first_seen":"2026-03-20T11:25:52.28636Z","last_seen":"2026-03-20T11:25:52.28636Z","alert_count":60,"request_count":30,"received_data":10873560,"sent_data":14625,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"WooCommerce:8.6.1","description":"WooCommerce is an open-source ecommerce plugin for WordPress.","website":"https://woocommerce.com","common_platform_enumeration":"","icon":"WooCommerce.svg","categories":["Ecommerce","WordPress plugins"]},{"name":"Elementor:3.19.2","description":"Elementor is a website builder platform for professionals on WordPress.","website":"https://elementor.com","common_platform_enumeration":"","icon":"Elementor.svg","categories":["Page builders","WordPress plugins"]},{"name":"WordPress:6.4.3","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Scam - Fraudulent Crypto Site","verdict":"scam","severity":"medium","comment":"","tags":["scam","fraud","crypto"],"meta":null}]},"javascript":{"script":[{"url":{"schema":"https","addr":"airdrop-claim-royco-roycocoin.pages.dev/assets/w-modal.js","fqdn":"airdrop-claim-royco-roycocoin.pages.dev","domain":"airdrop-claim-royco-roycocoin.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.150","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"eed7d4b80780bb8adee3cbc67d7f98ff","sha1":"20f450d0eaf88312c005763e9036aeed80a225a0","sha256":"5e0ebe3158a15aba5a5e00e9bb2327769203ed6c28b6fd7aca2155d7e05cadc4","sha512":"66c43c8d29392d3e8435d8273fa23c2653e3cf4a36d875f97195100121e59ba73c1b8c7430c41a01a765893f4f0b97b3c153ede123d688ba3f00fcbe7fd74d96","ssdeep":"384:yuWDxb0OzbJ3vF/ll0blqHuCUCaDr/S1ziayMkrN21GecFZPtDQseaTrHyhfdsG2:KV39Nl08O/CaDbS1/k97rShZFc/","tlshash":"acf286f02bec12b4853f434376592d74bb1114fa9ebabf4575fe1a828f96e0c412a4d2","size":37639,"data":"","first_seen":"2024-05-02T20:25:27Z","last_seen":"2026-08-03T21:00:55.072731Z","times_seen":208,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"airdrop-claim-royco-roycocoin.pages.dev/assets/w-loader.js","fqdn":"airdrop-claim-royco-roycocoin.pages.dev","domain":"airdrop-claim-royco-roycocoin.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.150","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"4b64ec349c7eeb4324f4e7c20eb7fc98","sha1":"c09046d05daa28ef73e4bf3b58bd6518ce98a271","sha256":"801d62fc02f89e7c1b414392e066dcda139ea3154cb3a48da721ff9a9df49f1f","sha512":"e92c61f409b0a56e41654c1f867089473bed649bf3a8d7167fd1a179993295863f20d0a63b20c5e2c20ba6ee55dab82802c06591cd39d188489a479deefc8b23","ssdeep":"768:sCoOXPhfU4Ui8YG7uOFQgauwF4ifTSQoc8S:SOXXwYG7XQTd4irgS","tlshash":"5b13b8f957a0a8f089a787d5aa131e09fa159c77c7624315f2bc274dbfd2e0cc806e91","size":41716,"data":"","first_seen":"2023-10-17T15:07:19Z","last_seen":"2026-08-03T21:00:55.094799Z","times_seen":405,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"airdrop-claim-royco-roycocoin.pages.dev/393311bde26b99a4ad935fa55bad1dce7994388b.woff2","fqdn":"airdrop-claim-royco-roycocoin.pages.dev","domain":"airdrop-claim-royco-roycocoin.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.150","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://airdrop-claim-royco-roycocoin.pages.dev/","date":"2026-04-13T01:23:24.506Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"airdrop-claim-royco-roycocoin.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 27 Feb 2026 05:00:40 GMT","end":"Thu, 28 May 2026 05:59:23 GMT"},"fingerprint":{"sha1":"9B:86:A7:0F:01:6A:A1:EE:F7:A4:5F:32:E0:AE:74:2A:22:FC:1A:30","sha256":"A2:47:74:D0:BD:8A:AE:FB:F6:AD:E4:08:0C:6A:5C:BE:DB:D8:31:48:C5:90:6E:8F:4B:1C:74:52:77:44:85:A7"}}},"request":{"raw":"GET /393311bde26b99a4ad935fa55bad1dce7994388b.woff2 HTTP/1.1\r\nHost: airdrop-claim-royco-roycocoin.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nReferer: https://airdrop-claim-royco-roycocoin.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 13 Apr 2026 01:23:24 GMT\r\ncontent-length: 46704\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"d787ad4d26a446ff3072e96ad88f05eb\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=io4Y%2FdQtIm1BMdo8syMr08YAyF9ekOtt%2Fwc5CQQ6wJRd1GJDnWsqsrld%2BneBAlLVp8ksUMqfTP0mKMrpapxqs%2BvxTRqaGTKx5EY793ebah6%2FhYFEQWdIiOqLKTfhc845xAXA337l6I0SeDKnnZx%2FaJcHINh6z22KpLA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\ncf-ray: 9eb6aa4e1d63b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":46704,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 46704, version 1.0","md5":"30a274cd01b6eeb0b082c918b0697f1e","sha1":"393311bde26b99a4ad935fa55bad1dce7994388b","sha256":"88df0b5a7bc397dbc13a26bb8b3742cc62cd1c9b0dded57da7832416d6f52f42","sha512":"c02c5894dfb5fbf47db7e9eda5e0843c02e667b32e6c6844262dd5ded92dd95cc72830a336450781167bd21fbfad35d8e74943c2817baac1e4ca34eaad317777","ssdeep":"768:f3Ybit5PQRS0FhgC1g10ijolF5rm2GsRnENYMSGAxgvZdH3VayjX2p2iKEmcLf:fIbi7eHBmt0F5rm2GsRENqGAx0Zdlt2r","tlshash":"1223f100917181a2eea73b3e82c96adb00ed51db6dc0e564a22f16f99d1f23f4385d5b","first_seen":"2023-09-15T13:47:10Z","last_seen":"2026-08-17T09:20:04.171109Z","times_seen":20264,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"airdrop-claim-royco-roycocoin.pages.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Scam - Fraudulent Crypto Site","verdict":"scam","severity":"medium","comment":"","tags":["scam","fraud","crypto"],"meta":null}]}},{"url":{"schema":"https","addr":"airdrop-claim-royco-roycocoin.pages.dev/393311bde26b99a4ad935fa55bad1dce7994388b.woff2","fqdn":"airdrop-claim-royco-roycocoin.pages.dev","domain":"airdrop-claim-royco-roycocoin.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.150","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://airdrop-claim-royco-roycocoin.pages.dev/","date":"2026-04-13T01:23:24.513Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"airdrop-claim-royco-roycocoin.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 27 Feb 2026 05:00:40 GMT","end":"Thu, 28 May 2026 05:59:23 GMT"},"fingerprint":{"sha1":"9B:86:A7:0F:01:6A:A1:EE:F7:A4:5F:32:E0:AE:74:2A:22:FC:1A:30","sha256":"A2:47:74:D0:BD:8A:AE:FB:F6:AD:E4:08:0C:6A:5C:BE:DB:D8:31:48:C5:90:6E:8F:4B:1C:74:52:77:44:85:A7"}}},"request":{"raw":"GET /393311bde26b99a4ad935fa55bad1dce7994388b.woff2 HTTP/1.1\r\nHost: airdrop-claim-royco-roycocoin.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nReferer: https://airdrop-claim-royco-roycocoin.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 13 Apr 2026 01:23:24 GMT\r\ncontent-length: 46704\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"d787ad4d26a446ff3072e96ad88f05eb\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mEcUG15GE8j1pMsyMLcE1KbqjW%2FCmi0ocrJ86NV5JG58poxfogAxQl7AqpX60cnZfyyLnpEvECY0pkceiDaCKQCSkWoS8UNaTkdFq44ZybvSNAiLyyQG9q07fj%2F%2FNpYkxZzaBXw3q%2FKxnJwQCPvXGAk2N5qqEKasR%2B0%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\ncf-ray: 9eb6aa4e1d66b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":46704,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 46704, version 1.0","md5":"30a274cd01b6eeb0b082c918b0697f1e","sha1":"393311bde26b99a4ad935fa55bad1dce7994388b","sha256":"88df0b5a7bc397dbc13a26bb8b3742cc62cd1c9b0dded57da7832416d6f52f42","sha512":"c02c5894dfb5fbf47db7e9eda5e0843c02e667b32e6c6844262dd5ded92dd95cc72830a336450781167bd21fbfad35d8e74943c2817baac1e4ca34eaad317777","ssdeep":"768:f3Ybit5PQRS0FhgC1g10ijolF5rm2GsRnENYMSGAxgvZdH3VayjX2p2iKEmcLf:fIbi7eHBmt0F5rm2GsRENqGAx0Zdlt2r","tlshash":"1223f100917181a2eea73b3e82c96adb00ed51db6dc0e564a22f16f99d1f23f4385d5b","first_seen":"2023-09-15T13:47:10Z","last_seen":"2026-08-17T09:20:04.171109Z","times_seen":20264,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"airdrop-claim-royco-roycocoin.pages.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Scam - Fraudulent Crypto Site","verdict":"scam","severity":"medium","comment":"","tags":["scam","fraud","crypto"],"meta":null}]}},{"url":{"schema":"https","addr":"airdrop-claim-royco-roycocoin.pages.dev/012f3219c9278f70700872486c32c4b951cd710b.svg","fqdn":"airdrop-claim-royco-roycocoin.pages.dev","domain":"airdrop-claim-royco-roycocoin.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.150","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://airdrop-claim-royco-roycocoin.pages.dev/","date":"2026-04-13T01:23:24.455Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"airdrop-claim-royco-roycocoin.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 27 Feb 2026 05:00:40 GMT","end":"Thu, 28 May 2026 05:59:23 GMT"},"fingerprint":{"sha1":"9B:86:A7:0F:01:6A:A1:EE:F7:A4:5F:32:E0:AE:74:2A:22:FC:1A:30","sha256":"A2:47:74:D0:BD:8A:AE:FB:F6:AD:E4:08:0C:6A:5C:BE:DB:D8:31:48:C5:90:6E:8F:4B:1C:74:52:77:44:85:A7"}}},"request":{"raw":"GET /012f3219c9278f70700872486c32c4b951cd710b.svg HTTP/1.1\r\nHost: airdrop-claim-royco-roycocoin.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 13 Apr 2026 01:23:24 GMT\r\ncontent-type: image/svg+xml\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=4,i=?0\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XQED6fOuQmqQ35nSwXIajzq3ERtfoOcAlFs7sc%2B0gKYC9psJr8p%2FGj5F0Adt2%2BEB8yQ5Eu%2B3p%2BVI7g%2FSu%2BVLBlGWCjou9019Y63H%2Bb5PBn3STNapQpFxpj4mVD%2BeyNZTJe8dncoYSa7V77o%2BPIpzVdEBm08DnKk%2B%2B60%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"0ff08c1e2c4416b85ea4b5cb73129a9f\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9eb6aa4dcd0db28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1760068,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"bc1919db9836505cd92963a73c12cd58","sha1":"4d9accbe51e7d12b2b532723f7fb30d600b3e934","sha256":"4f4e0ed0f9beaadc75c6b51316f1dfe7b9e6ce3c2e9d84ec26037e4afc760b96","sha512":"5af6ada56a807cec23a4c19965f3625e552eb791da056076e62df79191766038cd28074980886379f9f993c8498f83be6aad19f6e525ec095abb61f27994acca","ssdeep":"24576:gdTDLYM65inE8bwSEoFX76gDjhuWSPm7SoEgj9T:0PLWLSZ6JFu91F","tlshash":"412512b3454bbcaf33118e5448262ed02da67c1bd6ecc0c4bb8d90d575fa9249a7e8f4","first_seen":"2025-08-04T04:29:57.822248Z","last_seen":"2026-08-03T21:00:55.087474Z","times_seen":37,"resource_available":false,"data":null}},"time_used":130,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":93,"receive":37,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"airdrop-claim-royco-roycocoin.pages.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Scam - Fraudulent Crypto Site","verdict":"scam","severity":"medium","comment":"","tags":["scam","fraud","crypto"],"meta":null}]}},{"url":{"schema":"https","addr":"airdrop-claim-royco-roycocoin.pages.dev/28b98decad7061d30035f52203ea47597b3a7d8a.svg","fqdn":"airdrop-claim-royco-roycocoin.pages.dev","domain":"airdrop-claim-royco-roycocoin.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.150","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://airdrop-claim-royco-roycocoin.pages.dev/","date":"2026-04-13T01:23:24.739Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"airdrop-claim-royco-roycocoin.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 27 Feb 2026 05:00:40 GMT","end":"Thu, 28 May 2026 05:59:23 GMT"},"fingerprint":{"sha1":"9B:86:A7:0F:01:6A:A1:EE:F7:A4:5F:32:E0:AE:74:2A:22:FC:1A:30","sha256":"A2:47:74:D0:BD:8A:AE:FB:F6:AD:E4:08:0C:6A:5C:BE:DB:D8:31:48:C5:90:6E:8F:4B:1C:74:52:77:44:85:A7"}}},"request":{"raw":"GET /28b98decad7061d30035f52203ea47597b3a7d8a.svg HTTP/1.1\r\nHost: airdrop-claim-royco-roycocoin.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 13 Apr 2026 01:23:24 GMT\r\ncontent-type: image/svg+xml\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=4,i=?0\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AKFh%2BmLZrnAx7aokG1uWqTaoVpRIWyr8ohoms3G6U4ZLB2m1TkpPec0ILCKX8k0N1RCAb9DJ4oNI26%2FU9WjG7kJcQMzvb4ldMHMlhddoQD4nqSPSMuPxv2dNSJkeXfN0HOB4FDtKn%2FWa%2B876HpDjk5%2FmkRCR9CqJFcQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"b56e996cd8195b40d166bc6535d8af83\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9eb6aa4f6ebeb28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1719,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"e733b90b9ec62e21fac5f80fbf751c8c","sha1":"28b98decad7061d30035f52203ea47597b3a7d8a","sha256":"b63827bb5b05bd66b9d6f9a8978ab97225a440cd7c58e9652395326a511fe155","sha512":"a8b10c54a3d66d5cdb9fdfc40588235af23d3c579dfc02bd3ecf8b2153753b95b66a42a36d1e4051bdc404d910694d998b6300efbeae6a775b048dd96fc2a4a4","ssdeep":"","tlshash":"883110e183f8d3e0b41ce3f486f4a5bd356755bb2512dd2e0acc6cd8d24b11e85a8c80","first_seen":"2025-04-08T04:08:24.777704Z","last_seen":"2026-08-03T21:00:55.071285Z","times_seen":43,"resource_available":false,"data":null}},"time_used":48,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":48,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"airdrop-claim-royco-roycocoin.pages.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Scam - Fraudulent Crypto Site","verdict":"scam","severity":"medium","comment":"","tags":["scam","fraud","crypto"],"meta":null}]}},{"url":{"schema":"https","addr":"airdrop-claim-royco-roycocoin.pages.dev/97acb13ac224a8fafdea43349e70855122dbe128.svg","fqdn":"airdrop-claim-royco-roycocoin.pages.dev","domain":"airdrop-claim-royco-roycocoin.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.150","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://airdrop-claim-royco-roycocoin.pages.dev/","date":"2026-04-13T01:23:25.316Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"airdrop-claim-royco-roycocoin.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 27 Feb 2026 05:00:40 GMT","end":"Thu, 28 May 2026 05:59:23 GMT"},"fingerprint":{"sha1":"9B:86:A7:0F:01:6A:A1:EE:F7:A4:5F:32:E0:AE:74:2A:22:FC:1A:30","sha256":"A2:47:74:D0:BD:8A:AE:FB:F6:AD:E4:08:0C:6A:5C:BE:DB:D8:31:48:C5:90:6E:8F:4B:1C:74:52:77:44:85:A7"}}},"request":{"raw":"GET /97acb13ac224a8fafdea43349e70855122dbe128.svg HTTP/1.1\r\nHost: airdrop-claim-royco-roycocoin.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 13 Apr 2026 01:23:25 GMT\r\ncontent-type: image/svg+xml\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=4,i=?0\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=P44Mz4wEEjLDo%2BRLsKzPhSAhLi9rz05fLnj%2F1l0VPaI2zr9sYixjWf6p2ykY%2BPZIanFJv6X4J1dGFSy90gYYh803LLy1N2slvFfSohqkPY4EQIZXe7QxzyOp8HUoFZ%2F0oktRWfzxCBx93sbAS%2BFpu8pf1CjhkyfTMFw%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"04f93fc5920cdff8fbf785572e9ff039\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9eb6aa533a94b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21272,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"befe94764a5f0a9673ec1a6e5ea99d3d","sha1":"97acb13ac224a8fafdea43349e70855122dbe128","sha256":"c1821c480510ef59b54bf01b73bdecd5276709dbbc08bfb70261b8f3c79e3d07","sha512":"ce579f1c445dfca31ec8a2bcf9bd0322f5cb961f3346f8b0cd672ca468e9e039b6dffb3dc6cae99ab058a1065672c05f8141e629e612d14dc44e35fedfd111bc","ssdeep":"384:xItRTnX0RoLhnlOYP96vpTvVXTvbNGrEcmB6F+YLOL:maUOYP96vVvVXTvbUocJF+bL","tlshash":"48a2f34b8360c97fc18a8b5cd110886472bd12bebad4d3a4fa79cf4f5a296064d5efc1","first_seen":"2025-01-27T10:01:48.392446Z","last_seen":"2026-08-03T21:00:55.123483Z","times_seen":31,"resource_available":false,"data":null}},"time_used":51,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":51,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"airdrop-claim-royco-roycocoin.pages.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Scam - Fraudulent Crypto Site","verdict":"scam","severity":"medium","comment":"","tags":["scam","fraud","crypto"],"meta":null}]}},{"url":{"schema":"https","addr":"airdrop-claim-royco-roycocoin.pages.dev/assets/module-b.js","fqdn":"airdrop-claim-royco-roycocoin.pages.dev","domain":"airdrop-claim-royco-roycocoin.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.150","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://airdrop-claim-royco-roycocoin.pages.dev/","date":"2026-04-13T01:23:24.448Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"airdrop-claim-royco-roycocoin.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 27 Feb 2026 05:00:40 GMT","end":"Thu, 28 May 2026 05:59:23 GMT"},"fingerprint":{"sha1":"9B:86:A7:0F:01:6A:A1:EE:F7:A4:5F:32:E0:AE:74:2A:22:FC:1A:30","sha256":"A2:47:74:D0:BD:8A:AE:FB:F6:AD:E4:08:0C:6A:5C:BE:DB:D8:31:48:C5:90:6E:8F:4B:1C:74:52:77:44:85:A7"}}},"request":{"raw":"GET /assets/module-b.js HTTP/1.1\r\nHost: airdrop-claim-royco-roycocoin.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://airdrop-claim-royco-roycocoin.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 13 Apr 2026 01:23:24 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=3,i=?0\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bGUQMo5iZj9hX498bm0utIKDbwyTryYj%2BE4%2B8sWXt2pvusEG0yrZ%2BINbyFob4KBQ6X%2BbIQib27o13sP0m0YoPFw0hXaL6KLmyiPxZVl2YjTAy%2B%2FJClk4ezzUQ3lUR1Nuq84A6sPv6ppGY4ivBDWWwTn25WVTX9VsdYw%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"de86aabb89c9b634fe49c0dae3338a06\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9eb6aa4dbcfab28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":72593,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"2b9ca76f81e99327fac32f10379100cf","sha1":"952295feb0552964b196d0b847bda8018689e5e3","sha256":"d093eded03a39b2cb27fe31ebce1c2d75132de9ba9ab80b1371b7522e17b0172","sha512":"e6df99bf45180220ae4c946b0f5e8fa47bec2b1c1610c5a114d7990b03442e3ee0f1a17d318ae9249206de4431cd63221ab085178f3e48fa25babcf4aa260ae3","ssdeep":"1536:hRc7zdtLHt3/ExHcMtDnjoNfe1hhJDvm8xanV7lj8fu83OMK4:hRc7LZacRNf8XJDvm8xadlj828+A","tlshash":"856351c177c1bc8112476776731bf2eaf53a4de87188488ef105b890f5b9a05fae5a38","first_seen":"2025-05-16T16:12:44.549356Z","last_seen":"2026-08-03T21:00:55.095284Z","times_seen":45,"resource_available":true,"data":null}},"time_used":56,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":55,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"airdrop-claim-royco-roycocoin.pages.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Scam - Fraudulent Crypto Site","verdict":"scam","severity":"medium","comment":"","tags":["scam","fraud","crypto"],"meta":null}]}},{"url":{"schema":"https","addr":"airdrop-claim-royco-roycocoin.pages.dev/assets/module-x.js","fqdn":"airdrop-claim-royco-roycocoin.pages.dev","domain":"airdrop-claim-royco-roycocoin.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.150","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://airdrop-claim-royco-roycocoin.pages.dev/","date":"2026-04-13T01:23:24.450Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"airdrop-claim-royco-roycocoin.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 27 Feb 2026 05:00:40 GMT","end":"Thu, 28 May 2026 05:59:23 GMT"},"fingerprint":{"sha1":"9B:86:A7:0F:01:6A:A1:EE:F7:A4:5F:32:E0:AE:74:2A:22:FC:1A:30","sha256":"A2:47:74:D0:BD:8A:AE:FB:F6:AD:E4:08:0C:6A:5C:BE:DB:D8:31:48:C5:90:6E:8F:4B:1C:74:52:77:44:85:A7"}}},"request":{"raw":"GET /assets/module-x.js HTTP/1.1\r\nHost: airdrop-claim-royco-roycocoin.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://airdrop-claim-royco-roycocoin.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 13 Apr 2026 01:23:24 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=3,i=?0\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MN19gnTLTlb0IZm7lHpvclmUR%2F%2FblJgC64p%2F3FlB%2Fcuutngj5bcHTfCOM%2F4VS%2FDdX6RDWZS%2BXLOVCgGgxRqAB47GRN6bkS9hZnEUMbUEgnVcCMQ0XwdXx56Hk4o2CaKjH9R3lyzOLdS26UTKVhf1Zv5nmSHoyizr050%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"f0214e5c93acae169c0fe58f24aaae97\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9eb6aa4dbcfdb28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":65791,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"fac5a8a4657b259fb0e5922ec478f7e8","sha1":"6efa4a1a01be907851b5babb95330bc289e78e76","sha256":"d55ed9fc4e049d8de59be60dc384983a46fc17f798589365d21a61aca909f961","sha512":"ac4283ce3266199acecf21ee0cb987cdad16cb1461d68d8b1e9f19eedcaa629d3db7ae70b67ba7248b9745c0c1e0437d1e1813bdea57522f213d2298648baba6","ssdeep":"1536:qplrE3cfTj/HPMcupsRoFzWsO4k7+ZwmOl/nYyeC2J6:qDrScfTjPMcu2RzsO4k7oJ6","tlshash":"9a532fc277d5bc4102876b76771ba1eae13a9cec70c9488bf014bc94f4ea912fae5570","first_seen":"2025-05-16T16:12:44.54493Z","last_seen":"2026-08-03T21:00:55.09832Z","times_seen":45,"resource_available":false,"data":null}},"time_used":53,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":52,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"airdrop-claim-royco-roycocoin.pages.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Scam - Fraudulent Crypto Site","verdict":"scam","severity":"medium","comment":"","tags":["scam","fraud","crypto"],"meta":null}]}},{"url":{"schema":"https","addr":"airdrop-claim-royco-roycocoin.pages.dev/assets/module-s.js","fqdn":"airdrop-claim-royco-roycocoin.pages.dev","domain":"airdrop-claim-royco-roycocoin.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.150","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://airdrop-claim-royco-roycocoin.pages.dev/","date":"2026-04-13T01:23:24.451Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"airdrop-claim-royco-roycocoin.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 27 Feb 2026 05:00:40 GMT","end":"Thu, 28 May 2026 05:59:23 GMT"},"fingerprint":{"sha1":"9B:86:A7:0F:01:6A:A1:EE:F7:A4:5F:32:E0:AE:74:2A:22:FC:1A:30","sha256":"A2:47:74:D0:BD:8A:AE:FB:F6:AD:E4:08:0C:6A:5C:BE:DB:D8:31:48:C5:90:6E:8F:4B:1C:74:52:77:44:85:A7"}}},"request":{"raw":"GET /assets/module-s.js HTTP/1.1\r\nHost: airdrop-claim-royco-roycocoin.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://airdrop-claim-royco-roycocoin.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 13 Apr 2026 01:23:24 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=3,i=?0\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IUeKSul2Y7pzP19QWL2W3tt4UaE%2Fi7Or8JuNeM%2BvxjssCCUYM6SUy%2FPo25NQU4aasWFyVM7OZUFSdyZxn%2FIivZzMQ12MT%2FzPuKnxJEj1otQ7KZQ6GzJw%2BIoN4QBXa9RG1pzdLuYje43IINRf1oHR1CXhOaVi3Sp%2Bkro%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"d645bfa741350024c43f53400ab2e736\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9eb6aa4dccffb28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":67571,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"f969a2b171f3d6cc890f97bb40dd6f3c","sha1":"1b77956a109d870f751c57efa157c03dae92b50d","sha256":"8b0c1a6034a4cde759fc13877e3a62b90f29bbd1a2379d3b0b0f6a1908de0a53","sha512":"81fe275abb4205dc7b8d243df5e633424199153f1a9ad7c4c18a679e584dfaa78a07cae6efe7b398525c79ca930ef659834f7713ddd3ee4b50cd180f48d6f27c","ssdeep":"1536:o6kXsv3QzRzdb/tQRhA8M/AVl3z35+vk8mgLoWzDrVj+j:3v3QzRzdjtQR68M/a3itmg/zU","tlshash":"5c632ec267c2bc4212475b76372bb5e6f93e4ce9b488448af104bc94f0bd916fae1671","first_seen":"2025-05-16T16:12:44.562779Z","last_seen":"2026-08-03T21:00:55.118816Z","times_seen":45,"resource_available":false,"data":null}},"time_used":53,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":52,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"airdrop-claim-royco-roycocoin.pages.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Scam - Fraudulent Crypto Site","verdict":"scam","severity":"medium","comment":"","tags":["scam","fraud","crypto"],"meta":null}]}},{"url":{"schema":"https","addr":"airdrop-claim-royco-roycocoin.pages.dev/adf17022464324c5a47a68f64e74a8439db5d313.svg","fqdn":"airdrop-claim-royco-roycocoin.pages.dev","domain":"airdrop-claim-royco-roycocoin.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.150","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://airdrop-claim-royco-roycocoin.pages.dev/","date":"2026-04-13T01:23:24.456Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"airdrop-claim-royco-roycocoin.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 27 Feb 2026 05:00:40 GMT","end":"Thu, 28 May 2026 05:59:23 GMT"},"fingerprint":{"sha1":"9B:86:A7:0F:01:6A:A1:EE:F7:A4:5F:32:E0:AE:74:2A:22:FC:1A:30","sha256":"A2:47:74:D0:BD:8A:AE:FB:F6:AD:E4:08:0C:6A:5C:BE:DB:D8:31:48:C5:90:6E:8F:4B:1C:74:52:77:44:85:A7"}}},"request":{"raw":"GET /adf17022464324c5a47a68f64e74a8439db5d313.svg HTTP/1.1\r\nHost: airdrop-claim-royco-roycocoin.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 13 Apr 2026 01:23:24 GMT\r\ncontent-type: image/svg+xml\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=4,i=?0\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=739Ytk%2BF%2BAzYZeIxLi7GtCAHWa8HtB7wMPwouihiAl%2B1p1dRrSiqpGIuvNKHO6bAQRJeqFBrb0ywlFB2aQ2X9Lm2bU6Bk3uviSf%2B2iVcwGxN62Tia2XtxBtWkAm7z%2BkGwLHdLu%2B%2Bas9%2Fn3OsLXBoD%2FHrAYfmvkNh%2FkE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"08a52896cc41ced02c05f3bc8c1acb4c\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9eb6aa4dcd10b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":549045,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"a42eb8123363a5c34b2a764cc0642425","sha1":"adf17022464324c5a47a68f64e74a8439db5d313","sha256":"f36df0e0f463df06e7d388f4dfaeec85d051bcb857a8613e75832206ae946580","sha512":"361f6cbcccfade37e552da49611b706b4c735eabc0b6d13f731f76b7717317d6b96cfbc42f0d00978d750113dd2371869e52aa35c2f316c9e2b076001848c2ba","ssdeep":"12288:aYoSBREzezBEsk44K//+hVOxLfbXvRpFFeQksZErJN:a9S3DtOVOxrbXvRpFFe7wI","tlshash":"ebc423b05f253f0dc258f33d7caf796a9f084eda484ce5ba81ab1b5b554f11a8b16808","first_seen":"2025-01-27T10:01:48.361857Z","last_seen":"2026-08-03T21:00:55.103904Z","times_seen":42,"resource_available":false,"data":null}},"time_used":66,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":54,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"airdrop-claim-royco-roycocoin.pages.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Scam - Fraudulent Crypto Site","verdict":"scam","severity":"medium","comment":"","tags":["scam","fraud","crypto"],"meta":null}]}},{"url":{"schema":"https","addr":"airdrop-claim-royco-roycocoin.pages.dev/cb2f6a8161d5fe7b43e4bdf9de4ae6676640e250.svg","fqdn":"airdrop-claim-royco-roycocoin.pages.dev","domain":"airdrop-claim-royco-roycocoin.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.150","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://airdrop-claim-royco-roycocoin.pages.dev/","date":"2026-04-13T01:23:24.458Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"airdrop-claim-royco-roycocoin.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 27 Feb 2026 05:00:40 GMT","end":"Thu, 28 May 2026 05:59:23 GMT"},"fingerprint":{"sha1":"9B:86:A7:0F:01:6A:A1:EE:F7:A4:5F:32:E0:AE:74:2A:22:FC:1A:30","sha256":"A2:47:74:D0:BD:8A:AE:FB:F6:AD:E4:08:0C:6A:5C:BE:DB:D8:31:48:C5:90:6E:8F:4B:1C:74:52:77:44:85:A7"}}},"request":{"raw":"GET /cb2f6a8161d5fe7b43e4bdf9de4ae6676640e250.svg HTTP/1.1\r\nHost: airdrop-claim-royco-roycocoin.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 13 Apr 2026 01:23:24 GMT\r\ncontent-type: image/svg+xml\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=4,i=?0\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=v%2FO26U523bhlBVKcvYP1r5fzwt%2BEO086CzMQckjGn4Xpi3tLGninBTh205ZlmsyYWd9zwqTRxapWSQf1XJZG7%2B6Mmh7EKtqx37gYmrThsu2j5Efeg5ht1IJ%2BvUiC4rehzvjVjGsExx%2B0aB2HSir6hUp%2BUM6KKNmBqWY%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"c80a5add3533acb77e6c324ae309ef06\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9eb6aa4dcd11b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":768,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"eef232ffec267b7ab79cabc07145d307","sha1":"cb2f6a8161d5fe7b43e4bdf9de4ae6676640e250","sha256":"4063d53d59ae3970d28204e01b55e673a3bc7a1d28263d948194be2290ec4e0b","sha512":"0fff69e13eefd39088c29513575081fd12febed3d7868ff3daa4d55ca13e0474a81b8917ef704c6c2cd576c92a6e0925204dc89627843fa4e2a86880694210e7","ssdeep":"","tlshash":"3c01f171e1bca394b91403f963f4326a31267cec534e841871e53929e82a05d2b24c56","first_seen":"2025-01-27T10:01:48.377109Z","last_seen":"2026-08-03T21:00:55.119998Z","times_seen":44,"resource_available":false,"data":null}},"time_used":41,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":41,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"airdrop-claim-royco-roycocoin.pages.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Scam - Fraudulent Crypto Site","verdict":"scam","severity":"medium","comment":"","tags":["scam","fraud","crypto"],"meta":null}]}},{"url":{"schema":"https","addr":"airdrop-claim-royco-roycocoin.pages.dev/37126c426eee2745eeb5439cdac5317fd9e94edc.png","fqdn":"airdrop-claim-royco-roycocoin.pages.dev","domain":"airdrop-claim-royco-roycocoin.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.150","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://airdrop-claim-royco-roycocoin.pages.dev/","date":"2026-04-13T01:23:24.472Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"airdrop-claim-royco-roycocoin.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 27 Feb 2026 05:00:40 GMT","end":"Thu, 28 May 2026 05:59:23 GMT"},"fingerprint":{"sha1":"9B:86:A7:0F:01:6A:A1:EE:F7:A4:5F:32:E0:AE:74:2A:22:FC:1A:30","sha256":"A2:47:74:D0:BD:8A:AE:FB:F6:AD:E4:08:0C:6A:5C:BE:DB:D8:31:48:C5:90:6E:8F:4B:1C:74:52:77:44:85:A7"}}},"request":{"raw":"GET /37126c426eee2745eeb5439cdac5317fd9e94edc.png HTTP/1.1\r\nHost: airdrop-claim-royco-roycocoin.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://airdrop-claim-royco-roycocoin.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 13 Apr 2026 01:23:24 GMT\r\ncontent-type: image/png\r\ncontent-length: 2177\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"533af01a8e7566d7adc6462ed70a662d\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oO4XzAzWmGRjY9Q%2Bp5t9ufMPUClRtDNRkduN7IHesMS94ApNYMv7zElLJhK1oDqDZznmC1S78FCE6n%2FBN%2B24pSRks7XwDunupeFwMxDAyPSeZZoqZYZKSwY1ZeOAV4qZh0v7WUpU7qAwsGTP3Jo7WDyIYR0FQLuw%2FMk%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\ncf-ray: 9eb6aa4dfd46b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2177,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 30 x 27, 8-bit/color RGBA, non-interlaced","md5":"f02e9edee3ef9cd1c6f2cbd76a674743","sha1":"37126c426eee2745eeb5439cdac5317fd9e94edc","sha256":"a276235d2408dfde158541ceff1222e05a7ea64ac99175bfb219e86d8b6784d0","sha512":"48e74a5f0b36928e2901f8e89e5f99b071321f032f87c0c90bce719efe1d5f2b34a58fd002b1abd0b26bdc13bff031c1917d718c2a45055e4723ac140bc44a67","ssdeep":"","tlshash":"1e413c37c15a664eeb54e41ab538ba2859fa03fd2049ec387320c8b469ec70100ddc58","first_seen":"2025-01-27T10:01:48.385806Z","last_seen":"2026-08-03T21:00:55.12445Z","times_seen":36,"resource_available":false,"data":null}},"time_used":38,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":37,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"airdrop-claim-royco-roycocoin.pages.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Scam - Fraudulent Crypto Site","verdict":"scam","severity":"medium","comment":"","tags":["scam","fraud","crypto"],"meta":null}]}},{"url":{"schema":"https","addr":"airdrop-claim-royco-roycocoin.pages.dev/assets/w-loader.js","fqdn":"airdrop-claim-royco-roycocoin.pages.dev","domain":"airdrop-claim-royco-roycocoin.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.150","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://airdrop-claim-royco-roycocoin.pages.dev/","date":"2026-04-13T01:23:24.439Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"airdrop-claim-royco-roycocoin.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 27 Feb 2026 05:00:40 GMT","end":"Thu, 28 May 2026 05:59:23 GMT"},"fingerprint":{"sha1":"9B:86:A7:0F:01:6A:A1:EE:F7:A4:5F:32:E0:AE:74:2A:22:FC:1A:30","sha256":"A2:47:74:D0:BD:8A:AE:FB:F6:AD:E4:08:0C:6A:5C:BE:DB:D8:31:48:C5:90:6E:8F:4B:1C:74:52:77:44:85:A7"}}},"request":{"raw":"GET /assets/w-loader.js HTTP/1.1\r\nHost: airdrop-claim-royco-roycocoin.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://airdrop-claim-royco-roycocoin.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 13 Apr 2026 01:23:24 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=3,i=?0\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ECEWvtTsA3rO1hI5DBx5b6i8crB0E%2FJBxJwDLKKY8b5zaJbomvj52GTJG2CMUCsY0veZD4VrppsVu3q0iAPh%2F%2FNjiCnNmxpQnpwJL38GCDdPjqnPa9l0Izljl6pTd5xEG6dTfQfpz%2BXSWgNh5zaZXltGJQfm8ftkD7g%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"fb7060baa8a7ee55493a0e5186e9d53c\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9eb6aa4dbceeb28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":41716,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with very long lines (2342), with CRLF line terminators","md5":"4b64ec349c7eeb4324f4e7c20eb7fc98","sha1":"c09046d05daa28ef73e4bf3b58bd6518ce98a271","sha256":"801d62fc02f89e7c1b414392e066dcda139ea3154cb3a48da721ff9a9df49f1f","sha512":"e92c61f409b0a56e41654c1f867089473bed649bf3a8d7167fd1a179993295863f20d0a63b20c5e2c20ba6ee55dab82802c06591cd39d188489a479deefc8b23","ssdeep":"768:sCoOXPhfU4Ui8YG7uOFQgauwF4ifTSQoc8S:SOXXwYG7XQTd4irgS","tlshash":"5b13b8f957a0a8f089a787d5aa131e09fa159c77c7624315f2bc274dbfd2e0cc806e91","first_seen":"2023-10-17T15:07:19Z","last_seen":"2026-08-03T21:00:55.094799Z","times_seen":405,"resource_available":true,"data":null}},"time_used":50,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":50,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"airdrop-claim-royco-roycocoin.pages.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Scam - Fraudulent Crypto Site","verdict":"scam","severity":"medium","comment":"","tags":["scam","fraud","crypto"],"meta":null}]}},{"url":{"schema":"https","addr":"airdrop-claim-royco-roycocoin.pages.dev/7d0bdc8477d35fb501311c52b928c155b3a906a9.svg","fqdn":"airdrop-claim-royco-roycocoin.pages.dev","domain":"airdrop-claim-royco-roycocoin.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.150","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://airdrop-claim-royco-roycocoin.pages.dev/","date":"2026-04-13T01:23:24.740Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"airdrop-claim-royco-roycocoin.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 27 Feb 2026 05:00:40 GMT","end":"Thu, 28 May 2026 05:59:23 GMT"},"fingerprint":{"sha1":"9B:86:A7:0F:01:6A:A1:EE:F7:A4:5F:32:E0:AE:74:2A:22:FC:1A:30","sha256":"A2:47:74:D0:BD:8A:AE:FB:F6:AD:E4:08:0C:6A:5C:BE:DB:D8:31:48:C5:90:6E:8F:4B:1C:74:52:77:44:85:A7"}}},"request":{"raw":"GET /7d0bdc8477d35fb501311c52b928c155b3a906a9.svg HTTP/1.1\r\nHost: airdrop-claim-royco-roycocoin.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 13 Apr 2026 01:23:24 GMT\r\ncontent-type: image/svg+xml\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=4,i=?0\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MB4fG7urIMJPbIIb0bzOqJMYW%2BJwsneCBL334vi6buuwft5F9dE7%2B6AscBfhaAOhke5vq%2BA10YZOkP07ZYzJhwLOTj05%2FXjKej8vUQvT4TnCvZ4UCmlCDujleIAQiEuIwxqveoJfEf3wSBUIw97LRWiO3eBIRRjT490%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"eeb38666ca3732f9d849d2ccd7baae2e\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9eb6aa4f7ec5b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":822743,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"6d12b59248dd2e6f601773fd67afcff0","sha1":"7d0bdc8477d35fb501311c52b928c155b3a906a9","sha256":"16be5ce0da9b0f6a60bd7b5b8d4c4f23c37de344703ad630752054d9799c63a6","sha512":"88e1423ff8f39477070a279f5c5c639eeac95d321e8b4cfcb60fd037014b8baab16a2df97da156906f055cf5a3fdce164a2fab176438ab18a77cd9f739c3d1b0","ssdeep":"24576:OoDlCU1Bj1CO8dGtebUKFM2wTcoV+gBMEa:x5COj1Cst+ezB4","tlshash":"d6052372e8923c8f671c4f61a07a33486df46a67db1ed181bac820d4398f7a09577cb4","first_seen":"2025-01-27T10:01:48.383871Z","last_seen":"2026-08-03T21:00:55.092431Z","times_seen":40,"resource_available":false,"data":null}},"time_used":69,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":56,"receive":13,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"airdrop-claim-royco-roycocoin.pages.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Scam - Fraudulent Crypto Site","verdict":"scam","severity":"medium","comment":"","tags":["scam","fraud","crypto"],"meta":null}]}},{"url":{"schema":"https","addr":"airdrop-claim-royco-roycocoin.pages.dev/8a0f0abf3594f8ce646150265cf3d95ca0be5522.png","fqdn":"airdrop-claim-royco-roycocoin.pages.dev","domain":"airdrop-claim-royco-roycocoin.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.150","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://airdrop-claim-royco-roycocoin.pages.dev/","date":"2026-04-13T01:23:25.974Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"airdrop-claim-royco-roycocoin.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 27 Feb 2026 05:00:40 GMT","end":"Thu, 28 May 2026 05:59:23 GMT"},"fingerprint":{"sha1":"9B:86:A7:0F:01:6A:A1:EE:F7:A4:5F:32:E0:AE:74:2A:22:FC:1A:30","sha256":"A2:47:74:D0:BD:8A:AE:FB:F6:AD:E4:08:0C:6A:5C:BE:DB:D8:31:48:C5:90:6E:8F:4B:1C:74:52:77:44:85:A7"}}},"request":{"raw":"GET /8a0f0abf3594f8ce646150265cf3d95ca0be5522.png HTTP/1.1\r\nHost: airdrop-claim-royco-roycocoin.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 13 Apr 2026 01:23:26 GMT\r\ncontent-type: image/png\r\ncontent-length: 21017\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"362b1a17404145d4893880bbb9adb244\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Zkcq8%2BtlL%2BuqW8KjK0xpabwLHzrqYN%2BI6hnf1FuM5mZHOneXNDy9RRJggGsYUoEp3JAHwnPLZf4mw02PjRPgcEcie6y76R2q3PSmAJK1cVwXL5yzIagvefmjkow7vcrTBgsCvXfXUGrNMKv7EWM9VM%2FQ3NG6ffelciA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\nserver: cloudflare\r\ncf-ray: 9eb6aa575ef0b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21017,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced","md5":"33c953ab283088572d4b79d909a9f573","sha1":"8a0f0abf3594f8ce646150265cf3d95ca0be5522","sha256":"5755e450be9044e28bbbcfe674bec7b2d8de36a21f4dd03f61dcb8e299af5148","sha512":"47f6caa4b025dfe6e6aba55713cb842a7d02f50db3a65ce0d4324c80bd1c56fdcd1a39e4ddedb01c081b629f42c10d054dca07ee77576dbc25fdd186a3c23280","ssdeep":"384:dC57QNeOW5JzQ9eG542K3RV4Q+O6wFv5BQjX9oQkudI8I/ZclXvwZy:s5sH2JFGopbvh8x16/Zcl4w","tlshash":"6b92d1e2c54cd63edea616bcfac510a8df7495ce3c9065365026f5bb21272ace03542b","first_seen":"2025-01-27T10:01:48.382887Z","last_seen":"2026-08-03T21:00:55.093061Z","times_seen":36,"resource_available":false,"data":null}},"time_used":95,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":51,"receive":44,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"airdrop-claim-royco-roycocoin.pages.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Scam - Fraudulent Crypto Site","verdict":"scam","severity":"medium","comment":"","tags":["scam","fraud","crypto"],"meta":null}]}},{"url":{"schema":"https","addr":"airdrop-claim-royco-roycocoin.pages.dev/","fqdn":"airdrop-claim-royco-roycocoin.pages.dev","domain":"airdrop-claim-royco-roycocoin.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.150","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-04-13T01:23:23.694Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"airdrop-claim-royco-roycocoin.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 27 Feb 2026 05:00:40 GMT","end":"Thu, 28 May 2026 05:59:23 GMT"},"fingerprint":{"sha1":"9B:86:A7:0F:01:6A:A1:EE:F7:A4:5F:32:E0:AE:74:2A:22:FC:1A:30","sha256":"A2:47:74:D0:BD:8A:AE:FB:F6:AD:E4:08:0C:6A:5C:BE:DB:D8:31:48:C5:90:6E:8F:4B:1C:74:52:77:44:85:A7"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: airdrop-claim-royco-roycocoin.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 13 Apr 2026 01:23:24 GMT\r\ncontent-type: text/html; charset=utf-8\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=38KImIYnC8b5ic7awTkIp2fO%2BZY1u5yC9Mqxniep2qHDwWuujHkC2TxCZ1Ymu0%2F%2BvC8RqK%2BdxyP9kDUJM2iYt%2FOcLjPqa%2FEyCVwQgT0pfMOLiiY5Nq1YTmjOLyGYahe4WoakS8oQuztTB7Z%2F0XtDEfzPMEAyN79dZwg%3D\"}]}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9eb6aa493e3456a4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"WooCommerce:8.6.1","description":"WooCommerce is an open-source ecommerce plugin for WordPress.","website":"https://woocommerce.com","common_platform_enumeration":"","icon":"WooCommerce.svg","categories":["Ecommerce","WordPress plugins"]},{"name":"Elementor:3.19.2","description":"Elementor is a website builder platform for professionals on WordPress.","website":"https://elementor.com","common_platform_enumeration":"","icon":"Elementor.svg","categories":["Page builders","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"WordPress:6.4.3","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":215049,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (488)","md5":"a162095a56979af2241092e48b645ca6","sha1":"fd14863548b322e897598ea799616c7d98034c63","sha256":"041c907b5929d3c12f20bdf627d1777fe5652f05b554eedbeb0f1adcbb34cbf1","sha512":"17942276527a70494f0ddb975e9a6bdc216520a5a944c90c0b8536be6ecc92ea0600ec9dc6e4fe7f39b981306cde4b486713f2c490907392f2b2e7704702581c","ssdeep":"1536:vAhtbVvLXgERQNIzo/KQewheq4zQZemt/0i5IrppvH:Ibote9TvH","tlshash":"732410563da32128351f606f5297124d2260dacbc61dbed4f9ec1251efb9ed07fe2288","first_seen":"2025-05-16T16:12:44.54368Z","last_seen":"2026-08-03T21:00:55.102125Z","times_seen":28,"resource_available":false,"data":null}},"time_used":363,"timings":{"blocked":22,"dns":6,"connect":1,"send":0,"wait":312,"receive":0,"ssl":19},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"airdrop-claim-royco-roycocoin.pages.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Scam - Fraudulent Crypto Site","verdict":"scam","severity":"medium","comment":"","tags":["scam","fraud","crypto"],"meta":null}]}},{"url":{"schema":"https","addr":"airdrop-claim-royco-roycocoin.pages.dev/assets/w-modal.js","fqdn":"airdrop-claim-royco-roycocoin.pages.dev","domain":"airdrop-claim-royco-roycocoin.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.150","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://airdrop-claim-royco-roycocoin.pages.dev/","date":"2026-04-13T01:23:24.436Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"airdrop-claim-royco-roycocoin.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 27 Feb 2026 05:00:40 GMT","end":"Thu, 28 May 2026 05:59:23 GMT"},"fingerprint":{"sha1":"9B:86:A7:0F:01:6A:A1:EE:F7:A4:5F:32:E0:AE:74:2A:22:FC:1A:30","sha256":"A2:47:74:D0:BD:8A:AE:FB:F6:AD:E4:08:0C:6A:5C:BE:DB:D8:31:48:C5:90:6E:8F:4B:1C:74:52:77:44:85:A7"}}},"request":{"raw":"GET /assets/w-modal.js HTTP/1.1\r\nHost: airdrop-claim-royco-roycocoin.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://airdrop-claim-royco-roycocoin.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 13 Apr 2026 01:23:24 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=3,i=?0\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=t7%2F6QRs1kuHJDCGwB44gEutO8aU8dBOPlQSQniZH3KKOq52T2PBLEzbMxGyZyREgRxYbfoFK3rWWOcGheOx6%2B2DUA7eOZISD2frI8BtgshG24MOhWyH8s1e63XfbcbqX3YPFb6GFrvNd8zQlRJw5MxS9sWn7hpUaES0%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"a24410c1d13ece1579788b1bbb3e054d\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9eb6aa4dbcedb28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":37639,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"Unicode text, UTF-8 text, with very long lines (2304), with CRLF line terminators","md5":"eed7d4b80780bb8adee3cbc67d7f98ff","sha1":"20f450d0eaf88312c005763e9036aeed80a225a0","sha256":"5e0ebe3158a15aba5a5e00e9bb2327769203ed6c28b6fd7aca2155d7e05cadc4","sha512":"66c43c8d29392d3e8435d8273fa23c2653e3cf4a36d875f97195100121e59ba73c1b8c7430c41a01a765893f4f0b97b3c153ede123d688ba3f00fcbe7fd74d96","ssdeep":"384:yuWDxb0OzbJ3vF/ll0blqHuCUCaDr/S1ziayMkrN21GecFZPtDQseaTrHyhfdsG2:KV39Nl08O/CaDbS1/k97rShZFc/","tlshash":"acf286f02bec12b4853f434376592d74bb1114fa9ebabf4575fe1a828f96e0c412a4d2","first_seen":"2024-05-02T20:25:27Z","last_seen":"2026-08-03T21:00:55.072731Z","times_seen":208,"resource_available":true,"data":null}},"time_used":58,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":58,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"airdrop-claim-royco-roycocoin.pages.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Scam - Fraudulent Crypto Site","verdict":"scam","severity":"medium","comment":"","tags":["scam","fraud","crypto"],"meta":null}]}},{"url":{"schema":"https","addr":"airdrop-claim-royco-roycocoin.pages.dev/assets/modules.js","fqdn":"airdrop-claim-royco-roycocoin.pages.dev","domain":"airdrop-claim-royco-roycocoin.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.150","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://airdrop-claim-royco-roycocoin.pages.dev/","date":"2026-04-13T01:23:24.445Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"airdrop-claim-royco-roycocoin.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 27 Feb 2026 05:00:40 GMT","end":"Thu, 28 May 2026 05:59:23 GMT"},"fingerprint":{"sha1":"9B:86:A7:0F:01:6A:A1:EE:F7:A4:5F:32:E0:AE:74:2A:22:FC:1A:30","sha256":"A2:47:74:D0:BD:8A:AE:FB:F6:AD:E4:08:0C:6A:5C:BE:DB:D8:31:48:C5:90:6E:8F:4B:1C:74:52:77:44:85:A7"}}},"request":{"raw":"GET /assets/modules.js HTTP/1.1\r\nHost: airdrop-claim-royco-roycocoin.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://airdrop-claim-royco-roycocoin.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 13 Apr 2026 01:23:24 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=3,i=?0\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mRirIOKB8S9rlmIkIeNczcN1JynispUj1Szost8wp4Ifi3OUJLSfnEiVdZ7gt7VN50jhETIA3%2Fn86M93EY3xrC%2Ft33Fr7QnPg4GHSEXiHd0Dy3kYO9cU4Te8QpoJxCaZl%2BbHyWfqmniAhFG5WGSTLRsUlSk5Bt%2FX9R0%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"0762e737762a73005849dcbc1907f860\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9eb6aa4dbcf6b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6101536,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"data","md5":"be32ba64324b823b624e8dba1076692e","sha1":"5b8ebe696791ad67b5400c5070971f91719e7003","sha256":"6d19731e39e1fd27a4eff744ad881f3e07f7832efd8e2dc23070350d2084a07c","sha512":"a97fcb3b386b955694b72d24053369dd90cdaba153be05170b3bd0646edae253d205b1ed95763f4340e5a571c6e75ef2daa0a86da8b5e94e7249eb69f2eee77e","ssdeep":"12288:BMGk0Eqoh8EYL7qjs30amse2cfju2ZAyppF:BZk0EJGEYL7v0x7PayppF","tlshash":"33254a8473a1f076439725a5443f100af239b86c384d446cf768eceb7da9989963bf39","first_seen":"2025-12-27T08:34:04.211542Z","last_seen":"2026-04-13T01:23:52.564132Z","times_seen":2,"resource_available":false,"data":null}},"time_used":301,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":239,"receive":62,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"airdrop-claim-royco-roycocoin.pages.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Scam - Fraudulent Crypto Site","verdict":"scam","severity":"medium","comment":"","tags":["scam","fraud","crypto"],"meta":null}]}},{"url":{"schema":"https","addr":"airdrop-claim-royco-roycocoin.pages.dev/logo.svg","fqdn":"airdrop-claim-royco-roycocoin.pages.dev","domain":"airdrop-claim-royco-roycocoin.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.150","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://airdrop-claim-royco-roycocoin.pages.dev/","date":"2026-04-13T01:23:24.478Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"airdrop-claim-royco-roycocoin.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 27 Feb 2026 05:00:40 GMT","end":"Thu, 28 May 2026 05:59:23 GMT"},"fingerprint":{"sha1":"9B:86:A7:0F:01:6A:A1:EE:F7:A4:5F:32:E0:AE:74:2A:22:FC:1A:30","sha256":"A2:47:74:D0:BD:8A:AE:FB:F6:AD:E4:08:0C:6A:5C:BE:DB:D8:31:48:C5:90:6E:8F:4B:1C:74:52:77:44:85:A7"}}},"request":{"raw":"GET /logo.svg HTTP/1.1\r\nHost: airdrop-claim-royco-roycocoin.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 13 Apr 2026 01:23:24 GMT\r\ncontent-type: image/svg+xml\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=4,i=?0\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ltbXmY%2BtkkdeLZjC4SsB3NKTXRyqnDHtvGEVS4JhQaItHo3SzGwRf87l3GjKd120QIRcFZpUQBaPxE4WHvnrp5ssJJTEqYHZngfblrPXuJZ8Xk%2Ffj5YJI644z5KhAOGdSfYLVHo2TB%2Bdq1urFQSJ%2FfXHFhJcXX5E5v0%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"68a439ce29d66ccd07b427ef901a6aba\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9eb6aa4dfd4db28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":549045,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"2b95e558705434d59110f6f2b12eed2d","sha1":"adaf6c75f4a520ee4d355dcf31ff78032e582118","sha256":"3aa733ae2a6ef6e8ec2de0980a041a0ab6a38bbd0abf7f18832b1776ff71a38d","sha512":"4a186149037df5d2cdc2b95b2c4b1418c0c045375f6616891ee2cf716827ebbbd48b8b6e14f9e471e879d697d0b9f28803b71a83dafa40a0a4736ea15db81db3","ssdeep":"12288:CYoSBREzezBEsk44K//+hVOxLfbXvRpFFeQksZErJY:C9S3DtOVOxrbXvRpFFe7wf","tlshash":"f5c423b05f253f0dc258f33d7caf796a9f084eda484ce5ba81eb1b5b554f11a8b16808","first_seen":"2025-01-27T10:01:48.38653Z","last_seen":"2026-08-03T21:00:55.09008Z","times_seen":33,"resource_available":false,"data":null}},"time_used":73,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":52,"receive":21,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"airdrop-claim-royco-roycocoin.pages.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Scam - Fraudulent Crypto Site","verdict":"scam","severity":"medium","comment":"","tags":["scam","fraud","crypto"],"meta":null}]}},{"url":{"schema":"https","addr":"airdrop-claim-royco-roycocoin.pages.dev/7ca9c5967f3bb8bffeab24b639b49c1e7d03fa52.woff2","fqdn":"airdrop-claim-royco-roycocoin.pages.dev","domain":"airdrop-claim-royco-roycocoin.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.150","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://airdrop-claim-royco-roycocoin.pages.dev/","date":"2026-04-13T01:23:24.581Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"airdrop-claim-royco-roycocoin.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 27 Feb 2026 05:00:40 GMT","end":"Thu, 28 May 2026 05:59:23 GMT"},"fingerprint":{"sha1":"9B:86:A7:0F:01:6A:A1:EE:F7:A4:5F:32:E0:AE:74:2A:22:FC:1A:30","sha256":"A2:47:74:D0:BD:8A:AE:FB:F6:AD:E4:08:0C:6A:5C:BE:DB:D8:31:48:C5:90:6E:8F:4B:1C:74:52:77:44:85:A7"}}},"request":{"raw":"GET /7ca9c5967f3bb8bffeab24b639b49c1e7d03fa52.woff2 HTTP/1.1\r\nHost: airdrop-claim-royco-roycocoin.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nReferer: https://airdrop-claim-royco-roycocoin.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 13 Apr 2026 01:23:24 GMT\r\ncontent-length: 15744\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"08f4387fb4e2a84a1846c49e30b7bcef\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PDqFm3BX3GO1tcZV3R7Rrms2X%2FtL%2BzA2YmvQAhGRJpSIeKgLoKk%2Fpx5%2Bn8tiiEuSXySKcAotfLoS1zS8xwzvt%2B%2BZDavW5BNyd8F2HoSjds%2Bq%2BWkapg1naMlhCT%2FW0mVricqL3a%2BhtTIawfQMLx1tO4496TEB6H8Dhp4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\ncf-ray: 9eb6aa4e8dd6b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15744,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 15744, version 1.0","md5":"15d9f621c3bd1599f0169dcf0bd5e63e","sha1":"7ca9c5967f3bb8bffeab24b639b49c1e7d03fa52","sha256":"f6734f8177112c0839b961f96d813fcb189d81b60e96c33278c1983b6f419615","sha512":"d35a47162fc160cd5f806c3bb7feb50ec96fdfc81753660ead22ef33f89be6b1bfd63d1135f6b479d35c2e9d30f2360ffc8819efca672270e230635bcb206c82","ssdeep":"384:z1TLklSElcS5V6qQTMUP07JwirW6RlLwK79/:p7EJ5E2bJwi5jLwK79/","tlshash":"8162e00158a163ade9b2327ed10b1b91c40660a27d2504e8c6e4fc95fe3d7ed5487b76","first_seen":"2023-04-05T08:15:27Z","last_seen":"2026-08-17T12:25:53.411879Z","times_seen":162459,"resource_available":true,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":39,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"airdrop-claim-royco-roycocoin.pages.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Scam - Fraudulent Crypto Site","verdict":"scam","severity":"medium","comment":"","tags":["scam","fraud","crypto"],"meta":null}]}},{"url":{"schema":"https","addr":"airdrop-claim-royco-roycocoin.pages.dev/36c0b8964807d7f309d8c4c1f67a3aaefc0bab82.svg","fqdn":"airdrop-claim-royco-roycocoin.pages.dev","domain":"airdrop-claim-royco-roycocoin.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.150","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://airdrop-claim-royco-roycocoin.pages.dev/","date":"2026-04-13T01:23:24.737Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"airdrop-claim-royco-roycocoin.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 27 Feb 2026 05:00:40 GMT","end":"Thu, 28 May 2026 05:59:23 GMT"},"fingerprint":{"sha1":"9B:86:A7:0F:01:6A:A1:EE:F7:A4:5F:32:E0:AE:74:2A:22:FC:1A:30","sha256":"A2:47:74:D0:BD:8A:AE:FB:F6:AD:E4:08:0C:6A:5C:BE:DB:D8:31:48:C5:90:6E:8F:4B:1C:74:52:77:44:85:A7"}}},"request":{"raw":"GET /36c0b8964807d7f309d8c4c1f67a3aaefc0bab82.svg HTTP/1.1\r\nHost: airdrop-claim-royco-roycocoin.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 13 Apr 2026 01:23:24 GMT\r\ncontent-type: image/svg+xml\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=4,i=?0\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2F8HVSAqUAVb1qneDhuDFsobnyn6ofwchAwDPXXmvwOzqjsxBeiOamoCvBMlPCcD%2FxQNTGbPZ81iT27mMXzokwGamnEbe3Mp%2BwhyE9WYXSoI1k%2B3MlO0cpvyFlu%2F7xGKoNyx65LWuJIQFtLYKVnVlHl99S3yi0Qi5G6Q%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"ac11a70ff32282aee50cc3f7b49db17c\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9eb6aa4f6ebdb28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":814,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"c494c7de3a47ad495c2b1cc0b7c071f6","sha1":"36c0b8964807d7f309d8c4c1f67a3aaefc0bab82","sha256":"0852e456fea8c5d6654c53037c875996dd48c0dd0083339dd95f71da992235bb","sha512":"fd71260ddce187e9e20e3663d724581c46b321c7f675b385c08c91ef60689b9a93f4ff5f021cd68d9e494e71fd87260f3039694757ca16943803b2a31e756927","ssdeep":"","tlshash":"c4011e72a3fc6385e65813d412f933393e357da96b04c42c26c43729e9660aeb614c93","first_seen":"2025-04-08T04:08:24.77591Z","last_seen":"2026-08-03T21:00:55.097042Z","times_seen":43,"resource_available":false,"data":null}},"time_used":47,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":47,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"airdrop-claim-royco-roycocoin.pages.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Scam - Fraudulent Crypto Site","verdict":"scam","severity":"medium","comment":"","tags":["scam","fraud","crypto"],"meta":null}]}},{"url":{"schema":"https","addr":"airdrop-claim-royco-roycocoin.pages.dev/49ab62c8a5466f4f326aed3c3c0c1c20da0d3b0a.svg","fqdn":"airdrop-claim-royco-roycocoin.pages.dev","domain":"airdrop-claim-royco-roycocoin.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.150","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://airdrop-claim-royco-roycocoin.pages.dev/","date":"2026-04-13T01:23:24.741Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"airdrop-claim-royco-roycocoin.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 27 Feb 2026 05:00:40 GMT","end":"Thu, 28 May 2026 05:59:23 GMT"},"fingerprint":{"sha1":"9B:86:A7:0F:01:6A:A1:EE:F7:A4:5F:32:E0:AE:74:2A:22:FC:1A:30","sha256":"A2:47:74:D0:BD:8A:AE:FB:F6:AD:E4:08:0C:6A:5C:BE:DB:D8:31:48:C5:90:6E:8F:4B:1C:74:52:77:44:85:A7"}}},"request":{"raw":"GET /49ab62c8a5466f4f326aed3c3c0c1c20da0d3b0a.svg HTTP/1.1\r\nHost: airdrop-claim-royco-roycocoin.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 13 Apr 2026 01:23:24 GMT\r\ncontent-type: image/svg+xml\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=4,i=?0\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zWWonzPqdZE3b6agioVU%2FkpwCB215XraX8y8pZ4QwtE%2FyZdj6z%2BCdhu77eyHbQKCR3N2UCnWRSicZUvJ8ob%2ByRLXAGSjul7BBRH9oGYOilzeC96zsnohSsNp8qEERb22PESuzS64t12JvUoRtLIP43bOhjHPjKGJO48%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"b22d6c9003dd369bdcca60757c1df1e3\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9eb6aa4f7ec8b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2520,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"2bfe45bac64628abdb672e56adb08ac2","sha1":"49ab62c8a5466f4f326aed3c3c0c1c20da0d3b0a","sha256":"75e324243926df8db2bf6f4bcb466287c34be8f091f4c3c5bdd92e419eaafbfa","sha512":"079778d22543edfb28527faace4ddbfb97c5cd4bf3b28a69b3a3b0d8675ff8c766bad8979c94b0651d05f8cc3ebc37c770470ad018f7c7284f445855c4f136cc","ssdeep":"","tlshash":"9d5192fba3f4f1d0e905d7f1ce1655a2b22724feaf91c50943d96f80e90906e8c08c04","first_seen":"2025-05-16T16:12:44.542615Z","last_seen":"2026-08-03T21:00:55.120994Z","times_seen":32,"resource_available":false,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"airdrop-claim-royco-roycocoin.pages.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Scam - Fraudulent Crypto Site","verdict":"scam","severity":"medium","comment":"","tags":["scam","fraud","crypto"],"meta":null}]}},{"url":{"schema":"https","addr":"airdrop-claim-royco-roycocoin.pages.dev/8a0f0abf3594f8ce646150265cf3d95ca0be5522.png","fqdn":"airdrop-claim-royco-roycocoin.pages.dev","domain":"airdrop-claim-royco-roycocoin.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.150","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://airdrop-claim-royco-roycocoin.pages.dev/","date":"2026-04-13T01:23:25.975Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"airdrop-claim-royco-roycocoin.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 27 Feb 2026 05:00:40 GMT","end":"Thu, 28 May 2026 05:59:23 GMT"},"fingerprint":{"sha1":"9B:86:A7:0F:01:6A:A1:EE:F7:A4:5F:32:E0:AE:74:2A:22:FC:1A:30","sha256":"A2:47:74:D0:BD:8A:AE:FB:F6:AD:E4:08:0C:6A:5C:BE:DB:D8:31:48:C5:90:6E:8F:4B:1C:74:52:77:44:85:A7"}}},"request":{"raw":"GET /8a0f0abf3594f8ce646150265cf3d95ca0be5522.png HTTP/1.1\r\nHost: airdrop-claim-royco-roycocoin.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 13 Apr 2026 01:23:26 GMT\r\ncontent-type: image/png\r\ncontent-length: 21017\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"362b1a17404145d4893880bbb9adb244\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2F%2FjThX7YnYgv%2FQI%2FRwexFIBaPEvPw72VRunynRMSS3j%2FtahsSLdOU76CVghHsPrUiRHT9emYZGPOfmIe6e0cKgtc%2Boea6zWEzmIXYAQcwtrxkGkjIWoWuVj5PcD1SfggTiLQ7HxDGAKM3mrz4TzFhdV0iAE0aerO%2BNY%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\nserver: cloudflare\r\ncf-ray: 9eb6aa575ef1b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21017,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced","md5":"33c953ab283088572d4b79d909a9f573","sha1":"8a0f0abf3594f8ce646150265cf3d95ca0be5522","sha256":"5755e450be9044e28bbbcfe674bec7b2d8de36a21f4dd03f61dcb8e299af5148","sha512":"47f6caa4b025dfe6e6aba55713cb842a7d02f50db3a65ce0d4324c80bd1c56fdcd1a39e4ddedb01c081b629f42c10d054dca07ee77576dbc25fdd186a3c23280","ssdeep":"384:dC57QNeOW5JzQ9eG542K3RV4Q+O6wFv5BQjX9oQkudI8I/ZclXvwZy:s5sH2JFGopbvh8x16/Zcl4w","tlshash":"6b92d1e2c54cd63edea616bcfac510a8df7495ce3c9065365026f5bb21272ace03542b","first_seen":"2025-01-27T10:01:48.382887Z","last_seen":"2026-08-03T21:00:55.093061Z","times_seen":36,"resource_available":false,"data":null}},"time_used":50,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":49,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"airdrop-claim-royco-roycocoin.pages.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Scam - Fraudulent Crypto Site","verdict":"scam","severity":"medium","comment":"","tags":["scam","fraud","crypto"],"meta":null}]}},{"url":{"schema":"https","addr":"airdrop-claim-royco-roycocoin.pages.dev/393311bde26b99a4ad935fa55bad1dce7994388b.woff2","fqdn":"airdrop-claim-royco-roycocoin.pages.dev","domain":"airdrop-claim-royco-roycocoin.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.150","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://airdrop-claim-royco-roycocoin.pages.dev/","date":"2026-04-13T01:23:24.521Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"airdrop-claim-royco-roycocoin.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 27 Feb 2026 05:00:40 GMT","end":"Thu, 28 May 2026 05:59:23 GMT"},"fingerprint":{"sha1":"9B:86:A7:0F:01:6A:A1:EE:F7:A4:5F:32:E0:AE:74:2A:22:FC:1A:30","sha256":"A2:47:74:D0:BD:8A:AE:FB:F6:AD:E4:08:0C:6A:5C:BE:DB:D8:31:48:C5:90:6E:8F:4B:1C:74:52:77:44:85:A7"}}},"request":{"raw":"GET /393311bde26b99a4ad935fa55bad1dce7994388b.woff2 HTTP/1.1\r\nHost: airdrop-claim-royco-roycocoin.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nReferer: https://airdrop-claim-royco-roycocoin.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 13 Apr 2026 01:23:24 GMT\r\ncontent-length: 46704\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"d787ad4d26a446ff3072e96ad88f05eb\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1iG6LyAu1ArX1Jrktvw0NSFTGGEvp4dvFCb%2FuQ7WQ5%2BLbFFeaYSVUdTzVPA3cPIT3OlK9NH7xrtvq3wsjDROnaMYYlgk%2FNY1ujs383eO6rbxI7Q%2B3pGiGlllWyMtmML5Tw1zAmkvJEYZsQ9Zsq52hPVx3UlS3ehlK%2BQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\ncf-ray: 9eb6aa4e3d78b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":46704,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 46704, version 1.0","md5":"30a274cd01b6eeb0b082c918b0697f1e","sha1":"393311bde26b99a4ad935fa55bad1dce7994388b","sha256":"88df0b5a7bc397dbc13a26bb8b3742cc62cd1c9b0dded57da7832416d6f52f42","sha512":"c02c5894dfb5fbf47db7e9eda5e0843c02e667b32e6c6844262dd5ded92dd95cc72830a336450781167bd21fbfad35d8e74943c2817baac1e4ca34eaad317777","ssdeep":"768:f3Ybit5PQRS0FhgC1g10ijolF5rm2GsRnENYMSGAxgvZdH3VayjX2p2iKEmcLf:fIbi7eHBmt0F5rm2GsRENqGAx0Zdlt2r","tlshash":"1223f100917181a2eea73b3e82c96adb00ed51db6dc0e564a22f16f99d1f23f4385d5b","first_seen":"2023-09-15T13:47:10Z","last_seen":"2026-08-17T09:20:04.171109Z","times_seen":20264,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"airdrop-claim-royco-roycocoin.pages.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Scam - Fraudulent Crypto Site","verdict":"scam","severity":"medium","comment":"","tags":["scam","fraud","crypto"],"meta":null}]}},{"url":{"schema":"https","addr":"airdrop-claim-royco-roycocoin.pages.dev/393311bde26b99a4ad935fa55bad1dce7994388b.woff2","fqdn":"airdrop-claim-royco-roycocoin.pages.dev","domain":"airdrop-claim-royco-roycocoin.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.150","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://airdrop-claim-royco-roycocoin.pages.dev/","date":"2026-04-13T01:23:24.623Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"airdrop-claim-royco-roycocoin.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 27 Feb 2026 05:00:40 GMT","end":"Thu, 28 May 2026 05:59:23 GMT"},"fingerprint":{"sha1":"9B:86:A7:0F:01:6A:A1:EE:F7:A4:5F:32:E0:AE:74:2A:22:FC:1A:30","sha256":"A2:47:74:D0:BD:8A:AE:FB:F6:AD:E4:08:0C:6A:5C:BE:DB:D8:31:48:C5:90:6E:8F:4B:1C:74:52:77:44:85:A7"}}},"request":{"raw":"GET /393311bde26b99a4ad935fa55bad1dce7994388b.woff2 HTTP/1.1\r\nHost: airdrop-claim-royco-roycocoin.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nReferer: https://airdrop-claim-royco-roycocoin.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 13 Apr 2026 01:23:24 GMT\r\ncontent-length: 46704\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"d787ad4d26a446ff3072e96ad88f05eb\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zTXWrJlrllC%2BMuzQiyBmkfhFYLOlZEohexQf7RhSjhNQmcudg9wtVAuoaxsekuhmcl462NOLb%2B%2FE%2BAJEUYZwgW92QfHlaEna%2BI4iMgJmeNH2waDW0t9Y5YBcVutRf6BUL%2Fvs3AQ2I169vOptpBUWnYb%2B7sKUhoafpJs%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\ncf-ray: 9eb6aa4eadfbb28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":46704,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 46704, version 1.0","md5":"30a274cd01b6eeb0b082c918b0697f1e","sha1":"393311bde26b99a4ad935fa55bad1dce7994388b","sha256":"88df0b5a7bc397dbc13a26bb8b3742cc62cd1c9b0dded57da7832416d6f52f42","sha512":"c02c5894dfb5fbf47db7e9eda5e0843c02e667b32e6c6844262dd5ded92dd95cc72830a336450781167bd21fbfad35d8e74943c2817baac1e4ca34eaad317777","ssdeep":"768:f3Ybit5PQRS0FhgC1g10ijolF5rm2GsRnENYMSGAxgvZdH3VayjX2p2iKEmcLf:fIbi7eHBmt0F5rm2GsRENqGAx0Zdlt2r","tlshash":"1223f100917181a2eea73b3e82c96adb00ed51db6dc0e564a22f16f99d1f23f4385d5b","first_seen":"2023-09-15T13:47:10Z","last_seen":"2026-08-17T09:20:04.171109Z","times_seen":20264,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"airdrop-claim-royco-roycocoin.pages.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Scam - Fraudulent Crypto Site","verdict":"scam","severity":"medium","comment":"","tags":["scam","fraud","crypto"],"meta":null}]}},{"url":{"schema":"https","addr":"airdrop-claim-royco-roycocoin.pages.dev/acdef5603c2387b0e5bffd744b679a24a8bc1968.woff2","fqdn":"airdrop-claim-royco-roycocoin.pages.dev","domain":"airdrop-claim-royco-roycocoin.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.150","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://airdrop-claim-royco-roycocoin.pages.dev/","date":"2026-04-13T01:23:24.630Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"airdrop-claim-royco-roycocoin.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 27 Feb 2026 05:00:40 GMT","end":"Thu, 28 May 2026 05:59:23 GMT"},"fingerprint":{"sha1":"9B:86:A7:0F:01:6A:A1:EE:F7:A4:5F:32:E0:AE:74:2A:22:FC:1A:30","sha256":"A2:47:74:D0:BD:8A:AE:FB:F6:AD:E4:08:0C:6A:5C:BE:DB:D8:31:48:C5:90:6E:8F:4B:1C:74:52:77:44:85:A7"}}},"request":{"raw":"GET /acdef5603c2387b0e5bffd744b679a24a8bc1968.woff2 HTTP/1.1\r\nHost: airdrop-claim-royco-roycocoin.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nReferer: https://airdrop-claim-royco-roycocoin.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 13 Apr 2026 01:23:24 GMT\r\ncontent-length: 15860\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"327f51cb3be108945dba1bcce6ce309d\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=u7%2Ft%2BEPVjABNI18NP%2FpF8I7ZBiQ%2BqG90RRHxgUGxtTBr9e2KUjyOjUP5eGL6zagMbFr1PMCXC9laj4r%2F0JIN6bllX4bdPkZdfKZAfvy6a6c8jvpngaN3J7m7jPtgeNOHl%2Bt2mRTJU1ysKmnaCHoeb9mmPbIyWUdfRdo%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\ncf-ray: 9eb6aa4ece16b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15860,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 15860, version 1.0","md5":"e9f5aaf547f165386cd313b995dddd8e","sha1":"acdef5603c2387b0e5bffd744b679a24a8bc1968","sha256":"f5aebdfea35d1e7656ef4acc5db1f243209755ae3300943ef8fc6280f363c860","sha512":"2a71edb5490f286642a874d52a1969f54282bc43cb24e8d5a297e13b320321fb7b7af5524eac609cf5f95ee08d5e4ec5803e2a3c8d13c09f6cc38713c665d0ce","ssdeep":"384:S7qmPTF4N21t//YW2FS6+1XxrsbGmjlAbvqMmtCN:S621tHY4xwbGmjloSM7N","tlshash":"1a62d0058ba5850bf5b907fb0e1ab7ee30664b523c8c42278348073970db47a6b2b1fd","first_seen":"2023-04-05T14:47:55Z","last_seen":"2026-08-17T12:25:53.451499Z","times_seen":92751,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"airdrop-claim-royco-roycocoin.pages.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Scam - Fraudulent Crypto Site","verdict":"scam","severity":"medium","comment":"","tags":["scam","fraud","crypto"],"meta":null}]}},{"url":{"schema":"https","addr":"airdrop-claim-royco-roycocoin.pages.dev/6005e5dd272114b731ad358cb569ce45159be2b2.svg","fqdn":"airdrop-claim-royco-roycocoin.pages.dev","domain":"airdrop-claim-royco-roycocoin.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.150","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://airdrop-claim-royco-roycocoin.pages.dev/","date":"2026-04-13T01:23:24.740Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"airdrop-claim-royco-roycocoin.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 27 Feb 2026 05:00:40 GMT","end":"Thu, 28 May 2026 05:59:23 GMT"},"fingerprint":{"sha1":"9B:86:A7:0F:01:6A:A1:EE:F7:A4:5F:32:E0:AE:74:2A:22:FC:1A:30","sha256":"A2:47:74:D0:BD:8A:AE:FB:F6:AD:E4:08:0C:6A:5C:BE:DB:D8:31:48:C5:90:6E:8F:4B:1C:74:52:77:44:85:A7"}}},"request":{"raw":"GET /6005e5dd272114b731ad358cb569ce45159be2b2.svg HTTP/1.1\r\nHost: airdrop-claim-royco-roycocoin.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 13 Apr 2026 01:23:24 GMT\r\ncontent-type: image/svg+xml\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=4,i=?0\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=K0EB0R79mmGac2awrYTQN%2Bf17JhWi5C71dEGygJPj%2BhSLd0A38JtJJtGz11iMVR8lTvq5Y7W1m9Bv%2Bkhhlz23Sk0a1nHJLgx7Qe1uB4KQA4xze3Ims99eNgoegaDH3H0IEVNU4Axsgz%2FT%2BmlmF%2BovMyI1XLEg4lfmMY%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"58cd87986d19c867148438d3d349b973\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9eb6aa4f6ec1b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2323,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"2da78d0a375e677028f2ab5cd32ed1d1","sha1":"6005e5dd272114b731ad358cb569ce45159be2b2","sha256":"5062be80210bb10c6a104e603777aa3704e252170379a7feaa8f5adc54e406b6","sha512":"58c6891ace9f6911a2091950c780e0cd22197a3636b4f10ea7dd0d3b9fb50eefc5d3c87bf3336abdc20a1178adeaba66065882f5da83f16fb4e74eddd9a87147","ssdeep":"","tlshash":"29419df183fd33e1e50163fc47a1b2b7786328ba75108b244ab5ed74ca2a41d9e8cd51","first_seen":"2025-04-08T04:08:24.78754Z","last_seen":"2026-08-03T21:00:55.100822Z","times_seen":43,"resource_available":false,"data":null}},"time_used":41,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":41,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"airdrop-claim-royco-roycocoin.pages.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Scam - Fraudulent Crypto Site","verdict":"scam","severity":"medium","comment":"","tags":["scam","fraud","crypto"],"meta":null}]}},{"url":{"schema":"https","addr":"airdrop-claim-royco-roycocoin.pages.dev/7ea027646eb42aac9335d1f2386097fe91db676b.svg","fqdn":"airdrop-claim-royco-roycocoin.pages.dev","domain":"airdrop-claim-royco-roycocoin.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.150","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://airdrop-claim-royco-roycocoin.pages.dev/","date":"2026-04-13T01:23:24.742Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"airdrop-claim-royco-roycocoin.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 27 Feb 2026 05:00:40 GMT","end":"Thu, 28 May 2026 05:59:23 GMT"},"fingerprint":{"sha1":"9B:86:A7:0F:01:6A:A1:EE:F7:A4:5F:32:E0:AE:74:2A:22:FC:1A:30","sha256":"A2:47:74:D0:BD:8A:AE:FB:F6:AD:E4:08:0C:6A:5C:BE:DB:D8:31:48:C5:90:6E:8F:4B:1C:74:52:77:44:85:A7"}}},"request":{"raw":"GET /7ea027646eb42aac9335d1f2386097fe91db676b.svg HTTP/1.1\r\nHost: airdrop-claim-royco-roycocoin.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 13 Apr 2026 01:23:24 GMT\r\ncontent-type: image/svg+xml\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=4,i=?0\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Ch9PC2bz14SaIFRULERhgmFWLpu8w1Jk2xPGF9GfMTNx53odFPTmBmVh%2BtkM3N5NRVnd6UYI%2FIyInKU2LsFfAQJ88tlv%2BI4VTCVkshCTa5cCPBig8WFc6wZhv53zhZ3KxfU6f69IHdGCpQWA9eBwn3fXQXejdkwkEE8%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"cee366f9865a43acb36d118ce6ba8c1a\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9eb6aa4f7ec9b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1402,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"4505baf9df3322eda7a1320cd5577682","sha1":"7ea027646eb42aac9335d1f2386097fe91db676b","sha256":"45893d6c2acd1fac7d7d20b3825bfa9331444d486b143e6d3e8f64a298406e13","sha512":"0dbf83fd9e5cb311e7de059226bdf85e4e26ceb9cefaba24aeb58fe40b78df35ad40441486d8c0f6396559c94163603c20fee1f62fa223dee8f38bb6c89975f5","ssdeep":"","tlshash":"b12174b5c3d1f290e602dbe0d304b8603223347eae77c78cc69e2a31e71200ed85d848","first_seen":"2025-05-16T16:12:44.546963Z","last_seen":"2026-08-03T21:00:55.122027Z","times_seen":32,"resource_available":false,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"airdrop-claim-royco-roycocoin.pages.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Scam - Fraudulent Crypto Site","verdict":"scam","severity":"medium","comment":"","tags":["scam","fraud","crypto"],"meta":null}]}},{"url":{"schema":"https","addr":"airdrop-claim-royco-roycocoin.pages.dev/main.js","fqdn":"airdrop-claim-royco-roycocoin.pages.dev","domain":"airdrop-claim-royco-roycocoin.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.150","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://airdrop-claim-royco-roycocoin.pages.dev/","date":"2026-04-13T01:23:24.453Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"airdrop-claim-royco-roycocoin.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 27 Feb 2026 05:00:40 GMT","end":"Thu, 28 May 2026 05:59:23 GMT"},"fingerprint":{"sha1":"9B:86:A7:0F:01:6A:A1:EE:F7:A4:5F:32:E0:AE:74:2A:22:FC:1A:30","sha256":"A2:47:74:D0:BD:8A:AE:FB:F6:AD:E4:08:0C:6A:5C:BE:DB:D8:31:48:C5:90:6E:8F:4B:1C:74:52:77:44:85:A7"}}},"request":{"raw":"GET /main.js HTTP/1.1\r\nHost: airdrop-claim-royco-roycocoin.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://airdrop-claim-royco-roycocoin.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 13 Apr 2026 01:23:24 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=3,i=?0\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SPmGaAtjfmgSx8Itstbyo8CSQQO%2FawH9m0uw5JXBp79BurrjuC7lz%2BdK5vhfAv9v4XZ6gSmuvrJDMUMpYWWTbjRf3m%2FeHd%2FNv2KnlhdJnvv%2BXOQ%2BRVmZrfiB0UkKvB56FjxFDkSTtmDVcKUwI3dxPZqcfDYhGzalVMw%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"cab876d2ca37393801f0a1d12f07faf6\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9eb6aa4dcd08b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":180082,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"5712173f624eea904f41db69a76b59ce","sha1":"134bd00dece3e1d4cda46d5bf8a78c1256ea141c","sha256":"389f03c2b147c9e02f65cb8fa49223d95d792ced9d07d211e5774ecd867de9fc","sha512":"f8dea78db34ef72556fb6fbb7f43a37cde3a709669b8bab75f51b40f47b0dfc593827c149e638bd9659f3130ed8f2d49b5db5b344c2afddb2cedebc0ed5946b5","ssdeep":"3072:0dDAlF6RNQRZcjZ61177Jazbf1u1pT9JUdhqcAuJ8p/x5eHucwbl68WR5dTYrAMy:5F6RNQRZcjZ61177JwgJuqcAuJ8p/x5k","tlshash":"140492494b779018c2491afe6a0c79b4cc417d4efd4c8afabb983c69d5d9394eeb2304","first_seen":"2025-05-16T16:12:44.567027Z","last_seen":"2026-08-03T21:00:55.099087Z","times_seen":27,"resource_available":false,"data":null}},"time_used":54,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":54,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"airdrop-claim-royco-roycocoin.pages.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Scam - Fraudulent Crypto Site","verdict":"scam","severity":"medium","comment":"","tags":["scam","fraud","crypto"],"meta":null}]}},{"url":{"schema":"https","addr":"airdrop-claim-royco-roycocoin.pages.dev/393311bde26b99a4ad935fa55bad1dce7994388b.woff2","fqdn":"airdrop-claim-royco-roycocoin.pages.dev","domain":"airdrop-claim-royco-roycocoin.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.150","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://airdrop-claim-royco-roycocoin.pages.dev/","date":"2026-04-13T01:23:24.480Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"airdrop-claim-royco-roycocoin.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 27 Feb 2026 05:00:40 GMT","end":"Thu, 28 May 2026 05:59:23 GMT"},"fingerprint":{"sha1":"9B:86:A7:0F:01:6A:A1:EE:F7:A4:5F:32:E0:AE:74:2A:22:FC:1A:30","sha256":"A2:47:74:D0:BD:8A:AE:FB:F6:AD:E4:08:0C:6A:5C:BE:DB:D8:31:48:C5:90:6E:8F:4B:1C:74:52:77:44:85:A7"}}},"request":{"raw":"GET /393311bde26b99a4ad935fa55bad1dce7994388b.woff2 HTTP/1.1\r\nHost: airdrop-claim-royco-roycocoin.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nReferer: https://airdrop-claim-royco-roycocoin.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 13 Apr 2026 01:23:24 GMT\r\ncontent-length: 46704\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"d787ad4d26a446ff3072e96ad88f05eb\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=U7LXdiSsb8LK1kWZ%2B252p6ohcYWVH%2FftKR0OuX9wIy4jfsPqtlMozXmLUWvQgNwqezR%2FhtzJQJ%2F6ay6AhF9%2BKchqh1SyoemjrHbk%2Fxwdjqlt9Yuquu6tdeTNgUhNI4%2FTY5xQkotK23tWR6FHlih%2FvsKs4dOPYD0a94c%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\ncf-ray: 9eb6aa4e0d51b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":46704,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 46704, version 1.0","md5":"30a274cd01b6eeb0b082c918b0697f1e","sha1":"393311bde26b99a4ad935fa55bad1dce7994388b","sha256":"88df0b5a7bc397dbc13a26bb8b3742cc62cd1c9b0dded57da7832416d6f52f42","sha512":"c02c5894dfb5fbf47db7e9eda5e0843c02e667b32e6c6844262dd5ded92dd95cc72830a336450781167bd21fbfad35d8e74943c2817baac1e4ca34eaad317777","ssdeep":"768:f3Ybit5PQRS0FhgC1g10ijolF5rm2GsRnENYMSGAxgvZdH3VayjX2p2iKEmcLf:fIbi7eHBmt0F5rm2GsRENqGAx0Zdlt2r","tlshash":"1223f100917181a2eea73b3e82c96adb00ed51db6dc0e564a22f16f99d1f23f4385d5b","first_seen":"2023-09-15T13:47:10Z","last_seen":"2026-08-17T09:20:04.171109Z","times_seen":20264,"resource_available":false,"data":null}},"time_used":43,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":42,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"airdrop-claim-royco-roycocoin.pages.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Scam - Fraudulent Crypto Site","verdict":"scam","severity":"medium","comment":"","tags":["scam","fraud","crypto"],"meta":null}]}},{"url":{"schema":"https","addr":"airdrop-claim-royco-roycocoin.pages.dev/393311bde26b99a4ad935fa55bad1dce7994388b.woff2","fqdn":"airdrop-claim-royco-roycocoin.pages.dev","domain":"airdrop-claim-royco-roycocoin.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.150","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://airdrop-claim-royco-roycocoin.pages.dev/","date":"2026-04-13T01:23:24.596Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"airdrop-claim-royco-roycocoin.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 27 Feb 2026 05:00:40 GMT","end":"Thu, 28 May 2026 05:59:23 GMT"},"fingerprint":{"sha1":"9B:86:A7:0F:01:6A:A1:EE:F7:A4:5F:32:E0:AE:74:2A:22:FC:1A:30","sha256":"A2:47:74:D0:BD:8A:AE:FB:F6:AD:E4:08:0C:6A:5C:BE:DB:D8:31:48:C5:90:6E:8F:4B:1C:74:52:77:44:85:A7"}}},"request":{"raw":"GET /393311bde26b99a4ad935fa55bad1dce7994388b.woff2 HTTP/1.1\r\nHost: airdrop-claim-royco-roycocoin.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nReferer: https://airdrop-claim-royco-roycocoin.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 13 Apr 2026 01:23:24 GMT\r\ncontent-length: 46704\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"d787ad4d26a446ff3072e96ad88f05eb\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wqN5OuLR5fGMqlSQi7VTCGANla%2BEy2U8wDAWFRn2v6ZKqNriiICzxsqzhrL%2FuXVVW%2BYt55y5DmC0go4DAnnJICZ%2FGwJH74YLwlUoN2xmVIA9dv6FrWE3JvVas9cmvrUNM%2BFrEEZfmxc1fnOvH%2FpU377pcwA9sStwcXo%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\ncf-ray: 9eb6aa4e8ddbb28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":46704,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 46704, version 1.0","md5":"30a274cd01b6eeb0b082c918b0697f1e","sha1":"393311bde26b99a4ad935fa55bad1dce7994388b","sha256":"88df0b5a7bc397dbc13a26bb8b3742cc62cd1c9b0dded57da7832416d6f52f42","sha512":"c02c5894dfb5fbf47db7e9eda5e0843c02e667b32e6c6844262dd5ded92dd95cc72830a336450781167bd21fbfad35d8e74943c2817baac1e4ca34eaad317777","ssdeep":"768:f3Ybit5PQRS0FhgC1g10ijolF5rm2GsRnENYMSGAxgvZdH3VayjX2p2iKEmcLf:fIbi7eHBmt0F5rm2GsRENqGAx0Zdlt2r","tlshash":"1223f100917181a2eea73b3e82c96adb00ed51db6dc0e564a22f16f99d1f23f4385d5b","first_seen":"2023-09-15T13:47:10Z","last_seen":"2026-08-17T09:20:04.171109Z","times_seen":20264,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"airdrop-claim-royco-roycocoin.pages.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Scam - Fraudulent Crypto Site","verdict":"scam","severity":"medium","comment":"","tags":["scam","fraud","crypto"],"meta":null}]}}]}