{"report_id":"fb761571-cf2f-4bc4-8193-4eab37f5c404","version":0,"status":"done","tags":[],"date":"2026-10-13T15:53:13Z","url":{"schema":"http","addr":"cryptoairdropnews.vip/","fqdn":"cryptoairdropnews.vip","domain":"cryptoairdropnews.vip","tld":"vip"},"ip":{"addr":"169.58.102.145","port":0,"asn":51167,"as":"Contabo GmbH","country":"France","country_code":"FR"},"final":{"url":{"schema":"https","addr":"cryptogreatealltime.xyz/airdrop.html","fqdn":"cryptogreatealltime.xyz","domain":"cryptogreatealltime.xyz","tld":"xyz"},"title":"Arbitrum Foundation - ARB Airdrop","dom":{"size":75499,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (375)","md5":"caa93a55fd0af4563d9a6f5386f73c0e","sha1":"39311928c87f13bfa3c3156978cf2052d8c8c278","sha256":"aefcbc5687d5f952202a76efed0e96c72201069de071d9cacd78d8a83c7dadf0","sha512":"eab6bbe39ad5ecb86291777c796f54b94f6b8adeef018efee296140d5412222da99072bb01b422015cb6399d1c6f712a627a40f90e6b4b694034726ab37077bd","ssdeep":"768:3YQda9S0Zp3b1dbGOAIVAXS6rQHmndQY44LMDLV:IQda9SUxGjSmdQNLV","tlshash":"be7309d662f310250567a1a97b97a72a3670a003d405c97c3eec4380cfceb69d9b779d","dom_hash":"domhash240b3b879f0aefefe4c1df038c715fba","first_seen":"2026-10-13T15:49:14.75074Z","last_seen":"2026-10-13T15:53:23.091786Z","times_seen":2,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"cryptoairdropnews.vip/","fqdn":"cryptoairdropnews.vip","domain":"cryptoairdropnews.vip","tld":"vip"},"ip":{"addr":"169.58.102.145","port":0,"asn":51167,"as":"Contabo GmbH","country":"France","country_code":"FR"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-11-17T15:53:13Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":3}},"detection":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"cryptoairdropnews.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"cryptoairdropnews.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"cryptogreatealltime.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"www.google.com","ip":{"addr":"142.251.151.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"1997-09-15","domain_rank":22,"first_seen":"2015-05-10T13:11:19Z","last_seen":"2026-10-11T23:07:18.039486Z","alert_count":0,"request_count":4,"received_data":5459,"sent_data":5495,"comment":"","tags":null,"fingerprints":null},{"fqdn":"cdnjs.cloudflare.com","ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-02-17","domain_rank":1222,"first_seen":"2012-05-23T12:49:49Z","last_seen":"2026-10-11T23:38:49.428366Z","alert_count":0,"request_count":1,"received_data":506793,"sent_data":515,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-10-11T22:47:21.405407Z","alert_count":0,"request_count":2,"received_data":34317,"sent_data":1134,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"googleads.g.doubleclick.net","ip":{"addr":"142.250.178.98","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"1996-01-16","domain_rank":252,"first_seen":"2012-05-21T07:15:40Z","last_seen":"2026-10-12T09:22:45.998164Z","alert_count":0,"request_count":1,"received_data":570,"sent_data":1291,"comment":"","tags":null,"fingerprints":null},{"fqdn":"www.googletagmanager.com","ip":{"addr":"142.250.178.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2011-11-11","domain_rank":283,"first_seen":"2012-10-04T01:07:32Z","last_seen":"2026-10-11T22:48:14.897501Z","alert_count":0,"request_count":2,"received_data":999580,"sent_data":972,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"ad.doubleclick.net","ip":{"addr":"142.250.178.38","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"1996-01-16","domain_rank":843,"first_seen":"2012-05-24T20:21:08Z","last_seen":"2026-10-11T05:15:02.896669Z","alert_count":0,"request_count":1,"received_data":549,"sent_data":589,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-10-11T22:46:23.68047Z","alert_count":0,"request_count":9,"received_data":417852,"sent_data":5146,"comment":"","tags":null,"fingerprints":null},{"fqdn":"cryptoairdropnews.vip","ip":{"addr":"169.58.102.145","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"domain_registered":"2026-09-28","domain_rank":0,"first_seen":"2026-10-13T15:49:10.496114Z","last_seen":"2026-10-13T15:49:10.496114Z","alert_count":12,"request_count":6,"received_data":90903,"sent_data":3007,"comment":"","tags":null,"fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]}]},{"fqdn":"cryptogreatealltime.xyz","ip":{"addr":"169.58.102.145","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"domain_registered":"2026-09-27","domain_rank":0,"first_seen":"2026-10-13T15:49:10.500011Z","last_seen":"2026-10-13T15:49:10.500011Z","alert_count":3,"request_count":3,"received_data":76825,"sent_data":1627,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"cdnjs","description":"cdnjs is a free distributed JS library delivery service.","website":"https://cdnjs.com","common_platform_enumeration":"","icon":"cdnjs.svg","categories":["CDN"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"www.google.no","ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2001-02-26","domain_rank":92680,"first_seen":"2012-06-26T23:22:08Z","last_seen":"2026-10-12T00:19:08.819854Z","alert_count":0,"request_count":1,"received_data":613,"sent_data":1863,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"cryptoairdropnews.vip/","fqdn":"cryptoairdropnews.vip","domain":"cryptoairdropnews.vip","tld":"vip"},"ip":{"addr":"169.58.102.145","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"a95af50233accf7ca2841a672776af64","sha1":"f0273dcef18a7d5f4d2d91aee62f17bb880badc3","sha256":"94dff0a14b61d94a4b7ea2a00adb2998fca17640f3863359650f67ac65e242a9","sha512":"bbe74c2a37be732df7fa6e76128e0f5f08d71f18726c1612dc7854430ddd04c38240b1f9eaef7a33b0b18d52b6b2b17915b21f18f26926795e7102d2172e58ee","ssdeep":"","tlshash":"afc09b89210a4c7166fb2b41cb7fb708b451325495e5d931095a73845e10e57db54854","size":150,"data":"","first_seen":"2026-10-13T15:49:14.78367Z","last_seen":"2026-10-13T15:53:23.109417Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cryptoairdropnews.vip/","fqdn":"cryptoairdropnews.vip","domain":"cryptoairdropnews.vip","tld":"vip"},"ip":{"addr":"169.58.102.145","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"bc2eb7429856e7967e2ffb779272b115","sha1":"d3ed366aa2b184016a1302424edada0b406f1486","sha256":"8f1a9259e041c72fdcd08ba5d51c86e352d67290ae6e8a447e9305c791479e8f","sha512":"85e33bb340584e36b1b50f5f032fadfe7d0389117e5fef544f0ecad48db07a629c0a326db9d9277b07aae317859b5670ce91138fa490ea3316d7556b1154d011","ssdeep":"","tlshash":"cfc02b88210b0c7162fb2f028b7fb308b015324194e0c930181b33844f10d43db44854","size":156,"data":"","first_seen":"2026-10-13T15:49:14.785958Z","last_seen":"2026-10-13T15:53:23.110183Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cryptoairdropnews.vip/","fqdn":"cryptoairdropnews.vip","domain":"cryptoairdropnews.vip","tld":"vip"},"ip":{"addr":"169.58.102.145","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"ad505ef1111403c3fc65fd8c7a97cb03","sha1":"f0c47536bcfc68ec699c82b30c1b47a4795556c3","sha256":"084de81c03caa607aa769cc59d8dfd334a2193825618977bcc4b005e2d2eb4cd","sha512":"37770a7ecc392fcc82917dde8f11fd4d563566ad7ae298dec7792863976b162098d7ede816cb2aa9dd5237957e842f8fb4f5bd7988d983164879653687acaaab","ssdeep":"","tlshash":"7a41b70a35f2206a21a7a2bcc39f7b46362a0217514ccd583d4c63082fd421b6ea3bdf","size":2023,"data":"","first_seen":"2026-10-13T15:49:14.789766Z","last_seen":"2026-10-13T15:53:23.112403Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cryptoairdropnews.vip/js/smart-popup.js","fqdn":"cryptoairdropnews.vip","domain":"cryptoairdropnews.vip","tld":"vip"},"ip":{"addr":"169.58.102.145","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"16a99d7f63724715dba2c1ff7e13d74c","sha1":"a7d4e43294a08ece1ab6a86cf14a520e1d356f64","sha256":"961e9c1d11b0ba92e172e51effd51767f653b4cda705374a74b9860f33808295","sha512":"f9a149dae39c4e5384878d2fe326b984f01aedbece58716b12cf9b671fa1d284ac7aadc83967f212a8cb7368585e1f6f65b91195d83e814b01a7e1a86655f5ce","ssdeep":"192:tkOqTNmBk3A+uJj+ZUxMhMrOdiCQtzyiiHeL2Hl4YKZIoiC00D/p6ova4ho+jsHa:vF1EaUSN1","tlshash":"2c42681e22fb3057696ba0e4af97571a37608507e40bce2c3e5c21988fcce948576b7c","size":12811,"data":"","first_seen":"2026-10-13T15:49:14.780046Z","last_seen":"2026-10-13T15:53:23.107468Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=AW-18494406141","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"e0032e8757b2a03cfd24136e2f8607e7","sha1":"17092b23c89435382742538e62813b6825bd2a91","sha256":"5f6cfd8562fea6388b20677a6c8ee27a509ed217e7b9bc92de291c822cb15cda","sha512":"844ad1e8bac2182b0cbe07c2c8f559d035345526c7a344beb2f0a6195fdcf9c2ccf4e27ca765b928a8bdd78117565f50cb62fa705b7e11ffb5eab61caa9ea964","ssdeep":"6144:+lFzGvE6P/tfErhTWShclVbEEwF37wsGGXMbC:y04VVM2","tlshash":"77b408cdb3d6746293a6f078903f01cba57b29a2b44cc896b189dce42e3465a4137f7d","size":499195,"data":"","first_seen":"2026-10-13T15:53:23.10425Z","last_seen":"2026-10-13T15:53:23.10425Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cryptogreatealltime.xyz/airdrop.html","fqdn":"cryptogreatealltime.xyz","domain":"cryptogreatealltime.xyz","tld":"xyz"},"ip":{"addr":"169.58.102.145","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"27414b6a0ba6392303b2fd704f7429ae","sha1":"e62984a4e5867160b243e1aa322bb0a32f00aa52","sha256":"288e7834798bfd1a9ed248d3e7f567876a50e9a2d86dcae7e727875901d98421","sha512":"8a88c5e8b918f63f468a405fee9a99a642cdab5cd9e00f3fe3e98f7638e6df4ddb6c7628dcdac504338829f5d341efbec41a43d3e6224a0e9c9e4c66c2563b0c","ssdeep":"384:L1AmRN6GdbvuUnAEXlbA//SaNrA2a2a2yHmXd9DF1YgS:Lb1dbGOAIVAXS6rQHmndS","tlshash":"4213e8d7aaf710250937257d2b8b26223661500b9444cd6c3eec83449fcab1de9e7bed","size":41935,"data":"","first_seen":"2026-10-13T15:49:14.792095Z","last_seen":"2026-10-13T15:53:23.113412Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cryptogreatealltime.xyz/airdrop.html","fqdn":"cryptogreatealltime.xyz","domain":"cryptogreatealltime.xyz","tld":"xyz"},"ip":{"addr":"169.58.102.145","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"f6fbffb99bd6e06c7a8c4964b20136d6","sha1":"3db5a9664bf4fcfbc5f5e53fb1aa3a5e3d37742b","sha256":"5a3d67cc9e6b0e52208e6013e9f1157022d53db82b41db8fd92651cc07eb51a1","sha512":"a3757fbcac5b0b8027d5836c4e018f6acd076408b5b1853313bb105cfc454edc38954051a4300b41405fe0cd93927492b5d4a4e7fa4525f22d7c27695b52f63e","ssdeep":"96:GPAv3N7sK96VlQn59pdOaBCWMHJdLtysC/RBtvy2FCCQiC1cFDIRBFLhdLA:J67Q5IvWMp9tPWBtvyaCVoaBxk","tlshash":"82d1a6d273b2332d13235afd5267a76d71a1a4036440c569fbac82e01f9276276f368d","size":6695,"data":"","first_seen":"2026-10-13T15:49:14.794469Z","last_seen":"2026-10-13T15:53:23.114978Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cryptogreatealltime.xyz/airdrop.html","fqdn":"cryptogreatealltime.xyz","domain":"cryptogreatealltime.xyz","tld":"xyz"},"ip":{"addr":"169.58.102.145","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"fdc73ba2b2bbe2f30791e600fc57744e","sha1":"0b7187f80910c732632600bf63ea4cff16d76928","sha256":"8cf26dd800cfec4b346e21346a0be9cf46e3b43dfa8a41e96b766b1d86272411","sha512":"92ee6ac0ead4e69b6fb5ccb9ee262e5c04a1e8b837173d25767d6fd620df59c88f95c271e1e4e2a519372b65eba3576a8277e8149bea99803a6deecc79abe63e","ssdeep":"","tlshash":"3341010ca1733139027734afbaefa3843931540b2505699575dd898c9fa9b780a83e6e","size":2105,"data":"","first_seen":"2026-10-13T15:49:14.796318Z","last_seen":"2026-10-13T15:53:23.115842Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cryptoairdropnews.vip/js/app-config.js","fqdn":"cryptoairdropnews.vip","domain":"cryptoairdropnews.vip","tld":"vip"},"ip":{"addr":"169.58.102.145","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"04b1ace19961d676df88613583543af5","sha1":"3462b714d7d6628a0a9e154889c7ace778d4e816","sha256":"eb7ae7fc8b29f1d9898d5a06c516fe9b74ce8624543a3c69389ad4d5f4b32816","sha512":"ad65fe17e0f2702766b7c3a2d586eeff593f9d760af0c8f57b29c233c4b261f31955bb7a1763e73d0b0040002029a9990351cfc8508c6cdf0df8d95615e00fb4","ssdeep":"96:j/mKxLAnC0HYB12NORZwa46HSMn+NNK5bFvPY:yKReCKYzjP/HCsNG","tlshash":"03a1ff4f32f7702916ab916d9f4f524a7612a403150fec1cbb1c0388af41a24a172bfe","size":4639,"data":"","first_seen":"2026-10-13T15:49:14.777518Z","last_seen":"2026-10-13T15:53:23.098245Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=AW-18494406141","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"e7a214b4a7ecb6c9bdd780d2caf448ff","sha1":"ac2b7f0ace07e3abbd7f4895ae551b7e7636154c","sha256":"1038465221728edb830352a78766420e7dd75a2e737de609df9d6bbe4739d22a","sha512":"28dc309a4c17c6cf2ceaf6d83f3d649d1744ad43962a2e16b1fb34ff6396cc79280b9762a24c6c1ae9aa77ff9ebf97f8d2065d5acc3b4229354a0e10833d27a4","ssdeep":"6144:+lFzGvE6P/tfErbTWShclVbEEwF37wsGGXybC:y04DVy2","tlshash":"29b408cdb3d6746293a6f078903f01cba57b29a2b44cc896b189dce42e3465a4137f7d","size":499177,"data":"","first_seen":"2026-10-13T15:49:14.773038Z","last_seen":"2026-10-13T15:53:23.106084Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/ethers/6.13.2/ethers.umd.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"72e82f116eb910af033a957044afb325","sha1":"67c0aabb2fdd81c18d0f411efb07c6f7711010f5","sha256":"74e00c3e2a9ccd312e6d5154f9ccb0911d1b34cb49bc8220244a292a0a773c21","sha512":"7feb7afffaf3dc8cb7869d428b0b6c8a062dc96b8693b6dfeb197645338fbe6c8c21f4d02788b2e8b83575a8756ec2d0f522e275e24689c8263a406c0573f568","ssdeep":"12288:qlYZbf+vZG4ga24VcMufQDPfC18gZlhBP3koNz7jTO:qlYZf+vZG4ga2TMufQenT3Nz7fO","tlshash":"adb44cd172e3647287d618e12c650902f238f952705d40ecf66cdde26eabd8994bbf38","size":505773,"data":"","first_seen":"2025-05-04T18:58:50.91952Z","last_seen":"2026-10-13T15:53:23.096496Z","times_seen":33,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"log","text":"[SmartPopup] Initializing...","filename":"https://cryptoairdropnews.vip/js/smart-popup.js","line_number":22,"column_number":15},{"level":"log","text":"[AirdropWatch] ✓ Config loaded | Redirect:true| Popup:true","filename":"https://cryptoairdropnews.vip/js/app-config.js","line_number":46,"column_number":17},{"level":"log","text":"[SmartPopup] Config:map[actor:server1.conn0.watcher16.process8//obj27 class:Object extensible:true frozen:false isError:false ownPropertyLength:5 preview:map[kind:Object ownProperties:map[autoRedirect:map[configurable:true enumerable:true value:true writable:true] autoRedirectDelay:map[configurable:true enumerable:true value:3000 writable:true] delay:map[configurable:true enumerable:true value:1000 writable:true] enabled:map[configurable:true enumerable:true value:true writable:true] exitIntent:map[configurable:true enumerable:true value:true writable:true]] ownPropertiesLength:5] sealed:false type:object]","filename":"https://cryptoairdropnews.vip/js/smart-popup.js","line_number":44,"column_number":15},{"level":"log","text":"[SmartPopup] ✓ Showing popup. Trigger:timed","filename":"https://cryptoairdropnews.vip/js/smart-popup.js","line_number":254,"column_number":15},{"level":"log","text":"[AirdropWatch] ✓ Config loaded | Redirect:true| Popup:true","filename":"https://cryptoairdropnews.vip/js/app-config.js","line_number":46,"column_number":17},{"level":"log","text":"[SmartPopup] Config changed:map[actor:server1.conn0.watcher16.process8//obj33 class:Object extensible:true frozen:false isError:false ownPropertyLength:5 preview:map[kind:Object ownProperties:map[autoRedirect:map[configurable:true enumerable:true value:true writable:true] autoRedirectDelay:map[configurable:true enumerable:true value:3000 writable:true] delay:map[configurable:true enumerable:true value:1000 writable:true] enabled:map[configurable:true enumerable:true value:true writable:true] exitIntent:map[configurable:true enumerable:true value:true writable:true]] ownPropertiesLength:5] sealed:false type:object]","filename":"https://cryptoairdropnews.vip/js/smart-popup.js","line_number":56,"column_number":15},{"level":"log","text":"[SmartPopup] Claim clicked","filename":"https://cryptoairdropnews.vip/js/smart-popup.js","line_number":303,"column_number":15},{"level":"log","text":"[AirdropWatch] ✓ Redirecting to:https://cryptogreatealltime.xyz","filename":"https://cryptoairdropnews.vip/js/app-config.js","line_number":120,"column_number":15},{"level":"log","text":"[MOBILE] Mobile Wallet System initialized","filename":"https://cryptogreatealltime.xyz/airdrop.html","line_number":1325,"column_number":17},{"level":"log","text":"[MOBILE] Is mobile:false","filename":"https://cryptogreatealltime.xyz/airdrop.html","line_number":1326,"column_number":17},{"level":"log","text":"[MOBILE] Is in wallet browser:false","filename":"https://cryptogreatealltime.xyz/airdrop.html","line_number":1327,"column_number":17},{"level":"log","text":"[MOBILE] User Agent:Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","filename":"https://cryptogreatealltime.xyz/airdrop.html","line_number":1328,"column_number":17}]},"http":[{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://cryptoairdropnews.vip/","date":"2026-10-13T15:51:47.788Z","timestamp":1791906707788,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 20:01:48 GMT","end":"Fri, 11 Dec 2026 20:01:47 GMT"},"fingerprint":{"sha1":"CE:B3:C9:86:04:78:55:83:CC:52:A9:C8:01:3D:FB:40:04:EA:65:79","sha256":"BB:17:4D:EA:95:BB:1E:04:F2:B9:A8:63:B5:85:90:0D:94:A9:44:9C:40:E1:6A:B2:0D:4E:92:6E:85:B2:49:E9"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://cryptoairdropnews.vip\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 12 Oct 2026 15:56:18 GMT\r\nexpires: Tue, 12 Oct 2027 15:56:18 GMT\r\ncache-control: public, max-age=31536000\r\nage: 86129\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48532,"size_decoded":49344,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-10-13T18:41:50.360073Z","times_seen":316093,"resource_available":false,"data":null}},"time_used":85,"timings":{"blocked":16,"dns":0,"connect":0,"send":0,"wait":21,"receive":48,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cryptoairdropnews.vip/config.json?t=1791906707702","fqdn":"cryptoairdropnews.vip","domain":"cryptoairdropnews.vip","tld":"vip"},"ip":{"addr":"169.58.102.145","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://cryptoairdropnews.vip/","date":"2026-10-13T15:51:47.803Z","timestamp":1791906707803,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryptoairdropnews.vip","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 03 Oct 2026 14:50:08 GMT","end":"Fri, 01 Jan 2027 14:50:07 GMT"},"fingerprint":{"sha1":"F3:48:BF:1E:53:B3:00:B2:C4:2C:E4:EC:4B:4E:F5:63:46:B4:43:75","sha256":"00:57:ED:77:97:35:CB:86:D3:28:3A:BA:D0:CA:84:FB:88:F9:1E:D0:6D:AC:FA:72:E8:A4:C6:25:16:94:B1:EC"}}},"request":{"raw":"GET /config.json?t=1791906707702 HTTP/1.1\r\nHost: cryptoairdropnews.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://cryptoairdropnews.vip/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Tue, 13 Oct 2026 15:51:47 GMT\r\nContent-Type: application/json\r\nContent-Length: 236\r\nLast-Modified: Fri, 09 Oct 2026 21:59:25 GMT\r\nConnection: keep-alive\r\nETag: \"6ac963bd-ec\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":236,"size_decoded":489,"mime_type":"application/json","magic":"JSON text data","md5":"b577c8931b5f8eecb9ebfac8a7da0fd2","sha1":"66bfe455236d0070d1ce4ff0663de8e2847157a2","sha256":"078f1a1ba3c71f04615db800c7ed947f6d29a1240b6cd1d98a6c2ddb9b2609e1","sha512":"f720b837f6396f91dd7d2f48422d1a66e85a3ecc0d565989be82a2fde6cb59cff5105ce1b99c733836632c6b43790aa42c200cd13aa34f7cacf709cc668246f1","ssdeep":"","tlshash":"9ad0a71815a566f0c659d396161e2e831ebc792b261e283dbe4cc11d6d75563321403b","first_seen":"2026-10-13T15:49:14.755265Z","last_seen":"2026-10-13T15:53:23.094551Z","times_seen":2,"resource_available":true,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"cryptoairdropnews.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"cryptoairdropnews.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/ccm/conversion/18494406141/?random=1791906707949\u0026cv=11\u0026fst=1791906707949\u0026fmt=3\u0026bg=ffffff\u0026guid=ON\u0026async=1\u0026en=page_view\u0026gtm=45be6a91v9266296004za208zd9266296004xecxf1\u0026gcd=13l3l3l2l1l1\u0026dma_cps=a\u0026dma=1\u0026tag_exp=115938465~115938468~117227716~118897920~118897930~120213116~120385422~120469145~120469153~121046263~121046271~121246026~121246034\u0026u_w=1280\u0026u_h=1024\u0026url=https%3A%2F%2Fcryptoairdropnews.vip%2F\u0026rcb=14\u0026gtm_ee=1\u0026frm=0\u0026tiba=AirdropWatch%20-%20Crypto%20Airdrop%20Tracker%20%26%20Eligibility%20Checker%202025\u0026npa=1\u0026pscdl=noapi\u0026auid=2086164952.1791906708\u0026label=UR3LCMO2kJEdEP376PJE\u0026hn=www.google.com\u0026ec_mode=a\u0026oid=GG_1524691348.1791906708\u0026oidsrc=3\u0026ecsid2=1731682954.1791906708\u0026_tu=ABA\u0026gcl_ctr=1~0~0~0\u0026data=event%3Dgtag.config\u0026em=tv.1\u0026emd=tvd.1\u0026gcp=1\u0026sscte=1\u0026ct_cookie_present=1","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.151.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cryptoairdropnews.vip/","date":"2026-10-13T15:51:48.099Z","timestamp":1791906708099,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 20:00:11 GMT","end":"Fri, 11 Dec 2026 20:00:10 GMT"},"fingerprint":{"sha1":"81:58:83:A3:C8:EB:81:F3:A5:FE:6C:6B:D8:F7:B3:E8:49:83:32:0F","sha256":"30:B5:2C:EA:47:6E:0A:AB:5B:94:50:CC:FC:33:CB:F9:57:B2:4B:F1:B4:5D:3D:7D:BB:10:A6:02:81:8E:54:F5"}}},"request":{"raw":"GET /ccm/conversion/18494406141/?random=1791906707949\u0026cv=11\u0026fst=1791906707949\u0026fmt=3\u0026bg=ffffff\u0026guid=ON\u0026async=1\u0026en=page_view\u0026gtm=45be6a91v9266296004za208zd9266296004xecxf1\u0026gcd=13l3l3l2l1l1\u0026dma_cps=a\u0026dma=1\u0026tag_exp=115938465~115938468~117227716~118897920~118897930~120213116~120385422~120469145~120469153~121046263~121046271~121246026~121246034\u0026u_w=1280\u0026u_h=1024\u0026url=https%3A%2F%2Fcryptoairdropnews.vip%2F\u0026rcb=14\u0026gtm_ee=1\u0026frm=0\u0026tiba=AirdropWatch%20-%20Crypto%20Airdrop%20Tracker%20%26%20Eligibility%20Checker%202025\u0026npa=1\u0026pscdl=noapi\u0026auid=2086164952.1791906708\u0026label=UR3LCMO2kJEdEP376PJE\u0026hn=www.google.com\u0026ec_mode=a\u0026oid=GG_1524691348.1791906708\u0026oidsrc=3\u0026ecsid2=1731682954.1791906708\u0026_tu=ABA\u0026gcl_ctr=1~0~0~0\u0026data=event%3Dgtag.config\u0026em=tv.1\u0026emd=tvd.1\u0026gcp=1\u0026sscte=1\u0026ct_cookie_present=1 HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cryptoairdropnews.vip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccess-control-allow-origin: *\r\ndate: Tue, 13 Oct 2026 15:51:48 GMT\r\npragma: no-cache\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\ncache-control: no-cache, no-store, must-revalidate\r\nlast-modified: Sun, 17 May 1998 03:00:00 GMT\r\nx-content-type-options: nosniff\r\ncontent-type: image/gif\r\ncross-origin-resource-policy: cross-origin\r\ncontent-security-policy-report-only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascnsrsgac:130:0\r\ncross-origin-opener-policy-report-only: same-origin; report-to=ascnsrsgac:130:0\r\nreport-to: {\"group\":\"ascnsrsgac:130:0\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/scaffolding/ascnsrsgac:130:0\"}],}\r\nserver: Golfe2\r\ncontent-length: 35\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":35,"size_decoded":871,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"28d6814f309ea289f847c69cf91194c6","sha1":"0f4e929dd5bb2564f7ab9c76338e04e292a42ace","sha256":"8337212354871836e6763a41e615916c89bac5b3f1f0adf60ba43c7c806e1015","sha512":"1d68b92e8d822fe82dc7563edd7b37f3418a02a89f1a9f0454cca664c2fc2565235e0d85540ff9be0b20175be3f5b7b4eae1175067465d5cca13486aab4c582c","ssdeep":"","tlshash":"be800003c280c002c2a2c0308e08ca802a8ab0a08a28030fb0ec3baafc2a2a20c00000","first_seen":"2023-04-05T07:36:27Z","last_seen":"2026-10-13T18:41:04.757507Z","times_seen":62536,"resource_available":false,"data":null}},"time_used":40,"timings":{"blocked":20,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cryptoairdropnews.vip/config.json?t=1791906710775","fqdn":"cryptoairdropnews.vip","domain":"cryptoairdropnews.vip","tld":"vip"},"ip":{"addr":"169.58.102.145","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://cryptoairdropnews.vip/","date":"2026-10-13T15:51:50.779Z","timestamp":1791906710779,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryptoairdropnews.vip","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 03 Oct 2026 14:50:08 GMT","end":"Fri, 01 Jan 2027 14:50:07 GMT"},"fingerprint":{"sha1":"F3:48:BF:1E:53:B3:00:B2:C4:2C:E4:EC:4B:4E:F5:63:46:B4:43:75","sha256":"00:57:ED:77:97:35:CB:86:D3:28:3A:BA:D0:CA:84:FB:88:F9:1E:D0:6D:AC:FA:72:E8:A4:C6:25:16:94:B1:EC"}}},"request":{"raw":"GET /config.json?t=1791906710775 HTTP/1.1\r\nHost: cryptoairdropnews.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://cryptoairdropnews.vip/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: _gcl_au=1.1.2086164952.1791906708.-.-.1791906707.1731682954.1791906708.1791906707\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"_gcl_au","value":"1.1.2086164952.1791906708.-.-.1791906707.1731682954.1791906708.1791906707"}],"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Tue, 13 Oct 2026 15:51:50 GMT\r\nContent-Type: application/json\r\nContent-Length: 236\r\nLast-Modified: Fri, 09 Oct 2026 21:59:25 GMT\r\nConnection: keep-alive\r\nETag: \"6ac963bd-ec\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":236,"size_decoded":489,"mime_type":"application/json","magic":"JSON text data","md5":"b577c8931b5f8eecb9ebfac8a7da0fd2","sha1":"66bfe455236d0070d1ce4ff0663de8e2847157a2","sha256":"078f1a1ba3c71f04615db800c7ed947f6d29a1240b6cd1d98a6c2ddb9b2609e1","sha512":"f720b837f6396f91dd7d2f48422d1a66e85a3ecc0d565989be82a2fde6cb59cff5105ce1b99c733836632c6b43790aa42c200cd13aa34f7cacf709cc668246f1","ssdeep":"","tlshash":"9ad0a71815a566f0c659d396161e2e831ebc792b261e283dbe4cc11d6d75563321403b","first_seen":"2026-10-13T15:49:14.755265Z","last_seen":"2026-10-13T15:53:23.094551Z","times_seen":2,"resource_available":true,"data":null}},"time_used":22,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"cryptoairdropnews.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"cryptoairdropnews.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/ethers/6.13.2/ethers.umd.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cryptogreatealltime.xyz/airdrop.html","date":"2026-10-13T15:51:52.321Z","timestamp":1791906712321,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Sep 2026 14:43:48 GMT","end":"Sun, 06 Dec 2026 15:43:45 GMT"},"fingerprint":{"sha1":"70:B5:44:5C:25:65:CF:4A:4B:DB:6F:16:E1:4E:D9:85:C7:F3:75:4E","sha256":"63:B5:DA:B8:4F:95:99:9A:4B:77:FF:DB:3F:8D:7E:3D:1A:62:AD:A9:D9:06:9E:C3:59:6F:4A:61:A2:D2:20:CB"}}},"request":{"raw":"GET /ajax/libs/ethers/6.13.2/ethers.umd.min.js HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cryptogreatealltime.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nserver: cloudflare\r\ndate: Tue, 13 Oct 2026 15:51:52 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\npriority: u=2,i=?0\r\ncf-cache-status: BYPASS\r\naccess-control-allow-origin: *\r\nage: 1641065\r\ncache-control: no-transform, public, s-maxage=30672000, max-age=30672000, immutable\r\ncontent-encoding: br\r\nlast-modified: Thu, 25 Jul 2024 22:31:01 GMT\r\nvary: Accept-Encoding\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/r2\r\nx-cdnjs-cache: HIT\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eY1bBxG6SPqb0dd%2FDoTnv4QKFadMgk5KOy%2BrDQ8FLYCVUmXQKkLOCRmI1NDKKb5LlPvyn%2FXRLqsPzJwlBMRN4hA5Y7OVfCQhW2m9xJAqJJNdUHbvf8tHKnNn0CIoRY0lKVhd8xsE\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\ncf-ray: a49f82181df30883-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 132058\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":505773,"size_decoded":133078,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"72e82f116eb910af033a957044afb325","sha1":"67c0aabb2fdd81c18d0f411efb07c6f7711010f5","sha256":"74e00c3e2a9ccd312e6d5154f9ccb0911d1b34cb49bc8220244a292a0a773c21","sha512":"7feb7afffaf3dc8cb7869d428b0b6c8a062dc96b8693b6dfeb197645338fbe6c8c21f4d02788b2e8b83575a8756ec2d0f522e275e24689c8263a406c0573f568","ssdeep":"12288:qlYZbf+vZG4ga24VcMufQDPfC18gZlhBP3koNz7jTO:qlYZf+vZG4ga2TMufQenT3Nz7fO","tlshash":"adb44cd172e3647287d618e12c650902f238f952705d40ecf66cdde26eabd8994bbf38","first_seen":"2025-05-04T18:58:50.91952Z","last_seen":"2026-10-13T15:53:23.096496Z","times_seen":33,"resource_available":true,"data":null}},"time_used":38,"timings":{"blocked":-1,"dns":3,"connect":11,"send":0,"wait":19,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Inter:wght@300;400;500;600;700;800\u0026family=Space+Grotesk:wght@400;500;600;700;800\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://cryptogreatealltime.xyz/airdrop.html","date":"2026-10-13T15:51:52.323Z","timestamp":1791906712323,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 20:01:49 GMT","end":"Fri, 11 Dec 2026 20:01:48 GMT"},"fingerprint":{"sha1":"E3:3D:17:9C:78:F1:DE:68:C7:E6:BB:8F:08:DC:78:F3:9D:DF:F2:43","sha256":"EB:D6:1D:9A:76:0B:5A:3C:08:74:83:6D:AA:A7:F4:B3:0D:17:8F:4F:3E:6B:9C:91:6C:5B:9E:F7:08:1F:00:62"}}},"request":{"raw":"GET /css2?family=Inter:wght@300;400;500;600;700;800\u0026family=Space+Grotesk:wght@400;500;600;700;800\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cryptogreatealltime.xyz/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Tue, 13 Oct 2026 15:51:52 GMT\r\ndate: Tue, 13 Oct 2026 15:51:52 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":20314,"size_decoded":1664,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"60efece0bf21adfa9443a18114d8a3f3","sha1":"60a4e0f47d2ebd750ab64340ef9ab1b45f85600e","sha256":"4fc89ac0b0d3125cb1428ba1e78fe7e088e4f017c743c3112e5f896ae36d4c30","sha512":"7f46f7deea3eae0393798583648971788e808442fe534704e2a610c0e46f3823814418fa8e1934d88b6e90cc0958bcd48e962fff9408763e60df88c536c4b595","ssdeep":"192:wNA1cO3lnx2rNNIxO34OxvENOPCO3/NxoNNryfO3iExBONEhYO3RrxSfNx0NO3kU:8KkXyMopi+s7sHkVR","tlshash":"6b92ba92002ba500ab971cc233cf7e3abe8e60856085d6796ffd0cc99cded66036476d","first_seen":"2026-10-07T03:53:26.681179Z","last_seen":"2026-10-13T15:53:23.097346Z","times_seen":6,"resource_available":true,"data":null}},"time_used":81,"timings":{"blocked":-1,"dns":0,"connect":16,"send":0,"wait":35,"receive":0,"ssl":30},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://cryptogreatealltime.xyz/airdrop.html","date":"2026-10-13T15:51:52.491Z","timestamp":1791906712491,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 20:01:48 GMT","end":"Fri, 11 Dec 2026 20:01:47 GMT"},"fingerprint":{"sha1":"CE:B3:C9:86:04:78:55:83:CC:52:A9:C8:01:3D:FB:40:04:EA:65:79","sha256":"BB:17:4D:EA:95:BB:1E:04:F2:B9:A8:63:B5:85:90:0D:94:A9:44:9C:40:E1:6A:B2:0D:4E:92:6E:85:B2:49:E9"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://cryptogreatealltime.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 12 Oct 2026 15:56:18 GMT\r\nexpires: Tue, 12 Oct 2027 15:56:18 GMT\r\ncache-control: public, max-age=31536000\r\nage: 86134\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48532,"size_decoded":49344,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-10-13T18:41:50.360073Z","times_seen":316093,"resource_available":false,"data":null}},"time_used":75,"timings":{"blocked":-1,"dns":0,"connect":29,"send":0,"wait":30,"receive":45,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://cryptogreatealltime.xyz/airdrop.html","date":"2026-10-13T15:51:52.492Z","timestamp":1791906712492,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 20:01:48 GMT","end":"Fri, 11 Dec 2026 20:01:47 GMT"},"fingerprint":{"sha1":"CE:B3:C9:86:04:78:55:83:CC:52:A9:C8:01:3D:FB:40:04:EA:65:79","sha256":"BB:17:4D:EA:95:BB:1E:04:F2:B9:A8:63:B5:85:90:0D:94:A9:44:9C:40:E1:6A:B2:0D:4E:92:6E:85:B2:49:E9"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://cryptogreatealltime.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 12 Oct 2026 15:56:18 GMT\r\nexpires: Tue, 12 Oct 2027 15:56:18 GMT\r\ncache-control: public, max-age=31536000\r\nage: 86134\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48532,"size_decoded":49344,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-10-13T18:41:50.360073Z","times_seen":316093,"resource_available":false,"data":null}},"time_used":77,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":45,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cryptoairdropnews.vip/js/app-config.js","fqdn":"cryptoairdropnews.vip","domain":"cryptoairdropnews.vip","tld":"vip"},"ip":{"addr":"169.58.102.145","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cryptoairdropnews.vip/","date":"2026-10-13T15:51:47.453Z","timestamp":1791906707453,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryptoairdropnews.vip","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 03 Oct 2026 14:50:08 GMT","end":"Fri, 01 Jan 2027 14:50:07 GMT"},"fingerprint":{"sha1":"F3:48:BF:1E:53:B3:00:B2:C4:2C:E4:EC:4B:4E:F5:63:46:B4:43:75","sha256":"00:57:ED:77:97:35:CB:86:D3:28:3A:BA:D0:CA:84:FB:88:F9:1E:D0:6D:AC:FA:72:E8:A4:C6:25:16:94:B1:EC"}}},"request":{"raw":"GET /js/app-config.js HTTP/1.1\r\nHost: cryptoairdropnews.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cryptoairdropnews.vip/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Tue, 13 Oct 2026 15:51:47 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 4639\r\nLast-Modified: Mon, 28 Sep 2026 14:46:00 GMT\r\nConnection: keep-alive\r\nETag: \"6aba7da8-121f\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":4639,"size_decoded":4901,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"04b1ace19961d676df88613583543af5","sha1":"3462b714d7d6628a0a9e154889c7ace778d4e816","sha256":"eb7ae7fc8b29f1d9898d5a06c516fe9b74ce8624543a3c69389ad4d5f4b32816","sha512":"ad65fe17e0f2702766b7c3a2d586eeff593f9d760af0c8f57b29c233c4b261f31955bb7a1763e73d0b0040002029a9990351cfc8508c6cdf0df8d95615e00fb4","ssdeep":"96:j/mKxLAnC0HYB12NORZwa46HSMn+NNK5bFvPY:yKReCKYzjP/HCsNG","tlshash":"03a1ff4f32f7702916ab916d9f4f524a7612a403150fec1cbb1c0388af41a24a172bfe","first_seen":"2026-10-13T15:49:14.777518Z","last_seen":"2026-10-13T15:53:23.098245Z","times_seen":2,"resource_available":true,"data":null}},"time_used":169,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":169,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"cryptoairdropnews.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"cryptoairdropnews.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/pagead/1p-conversion/18494406141/?random=1124006467\u0026cv=11\u0026fst=1791906707949\u0026fmt=8\u0026bg=ffffff\u0026guid=ON\u0026async=1\u0026en=page_view\u0026gtm=45be6a91v9266296004za208zd9266296004xecxf1\u0026gcd=13l3l3l2l1l1\u0026dma_cps=a\u0026dma=1\u0026tag_exp=115938465~115938468~117227716~118897920~118897930~120213116~120385422~120469145~120469153~121046263~121046271~121246026~121246034\u0026u_w=1280\u0026u_h=1024\u0026url=https%3A%2F%2Fcryptoairdropnews.vip%2F\u0026rcb=14\u0026gtm_ee=1\u0026frm=0\u0026tiba=AirdropWatch%20-%20Crypto%20Airdrop%20Tracker%20%26%20Eligibility%20Checker%202025\u0026npa=1\u0026pscdl=noapi\u0026auid=2086164952.1791906708\u0026label=UR3LCMO2kJEdEP376PJE\u0026hn=www.google.com\u0026ec_mode=a\u0026oidsrc=3\u0026ecsid2=1731682954.1791906708\u0026_tu=ABA\u0026gcl_ctr=1~0~0~0\u0026data=event%3Dgtag.config\u0026em=tv.1\u0026emd=tvd.1\u0026gcp=2\u0026sscte=1\u0026ct_cookie_present=1\u0026ept=8\u0026ct_cookie_present=false\u0026eoid=CkcKEAjwrbfWBhCk4t_BvI7L72MSMwAjvh6cKYrmwq_xO_cU4lzfv1KJQ1LctNi8BvCDncmE96w13_2jFBZGEoFDa2m2sylCTfD_BwE\u0026crd=CLTesQII8t-xAgit4bECCK_hsQIIobixAgixwbECCLDBsQIIscOxAgiKxbECCMLJsQII1-ixAgi0xrECCIfbsQII08WxAgjrzLECCO3OsQII1c-xAgiK8rECCPTasQII4uqxAgjo7rECCJLrsQIIyeOxAgiX1LECCMnbsQIIpt2xAgiw3rECCIDbsQIIzeGxAg\u0026cerd=CgzX1b4tyOy-LZ3ptzg\u0026fsk=ChEI8K231gYQqIrpndGEu9GiARIsAHC9fclADQKZXR2hqi47d8UiASQyGz7KiP6DhPCqOZzVcfiAmMtb3_YmMO4aArWv\u0026pscrd=IhMI1P271qy3lwMVa8d7AB2dKgQPOh5odHRwczovL2NyeXB0b2FpcmRyb3BuZXdzLnZpcC9CWENoRUk4SzIzMWdZUXhMejc3YWppLTd5bkFSSXRBSjJGZWh3bzFmb2g3VHQ3bGtmdnlHWmJxQ3N1Wk9DcVNZR0RrNDJiQXp6ZkZNSE4xc19pV1MtY2FPNUd6DAgJYggIABAAGAAgAA","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.151.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://cryptoairdropnews.vip/","date":"2026-10-13T15:51:48.255Z","timestamp":1791906708255,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 20:00:11 GMT","end":"Fri, 11 Dec 2026 20:00:10 GMT"},"fingerprint":{"sha1":"81:58:83:A3:C8:EB:81:F3:A5:FE:6C:6B:D8:F7:B3:E8:49:83:32:0F","sha256":"30:B5:2C:EA:47:6E:0A:AB:5B:94:50:CC:FC:33:CB:F9:57:B2:4B:F1:B4:5D:3D:7D:BB:10:A6:02:81:8E:54:F5"}}},"request":{"raw":"GET /pagead/1p-conversion/18494406141/?random=1124006467\u0026cv=11\u0026fst=1791906707949\u0026fmt=8\u0026bg=ffffff\u0026guid=ON\u0026async=1\u0026en=page_view\u0026gtm=45be6a91v9266296004za208zd9266296004xecxf1\u0026gcd=13l3l3l2l1l1\u0026dma_cps=a\u0026dma=1\u0026tag_exp=115938465~115938468~117227716~118897920~118897930~120213116~120385422~120469145~120469153~121046263~121046271~121246026~121246034\u0026u_w=1280\u0026u_h=1024\u0026url=https%3A%2F%2Fcryptoairdropnews.vip%2F\u0026rcb=14\u0026gtm_ee=1\u0026frm=0\u0026tiba=AirdropWatch%20-%20Crypto%20Airdrop%20Tracker%20%26%20Eligibility%20Checker%202025\u0026npa=1\u0026pscdl=noapi\u0026auid=2086164952.1791906708\u0026label=UR3LCMO2kJEdEP376PJE\u0026hn=www.google.com\u0026ec_mode=a\u0026oidsrc=3\u0026ecsid2=1731682954.1791906708\u0026_tu=ABA\u0026gcl_ctr=1~0~0~0\u0026data=event%3Dgtag.config\u0026em=tv.1\u0026emd=tvd.1\u0026gcp=2\u0026sscte=1\u0026ct_cookie_present=1\u0026ept=8\u0026ct_cookie_present=false\u0026eoid=CkcKEAjwrbfWBhCk4t_BvI7L72MSMwAjvh6cKYrmwq_xO_cU4lzfv1KJQ1LctNi8BvCDncmE96w13_2jFBZGEoFDa2m2sylCTfD_BwE\u0026crd=CLTesQII8t-xAgit4bECCK_hsQIIobixAgixwbECCLDBsQIIscOxAgiKxbECCMLJsQII1-ixAgi0xrECCIfbsQII08WxAgjrzLECCO3OsQII1c-xAgiK8rECCPTasQII4uqxAgjo7rECCJLrsQIIyeOxAgiX1LECCMnbsQIIpt2xAgiw3rECCIDbsQIIzeGxAg\u0026cerd=CgzX1b4tyOy-LZ3ptzg\u0026fsk=ChEI8K231gYQqIrpndGEu9GiARIsAHC9fclADQKZXR2hqi47d8UiASQyGz7KiP6DhPCqOZzVcfiAmMtb3_YmMO4aArWv\u0026pscrd=IhMI1P271qy3lwMVa8d7AB2dKgQPOh5odHRwczovL2NyeXB0b2FpcmRyb3BuZXdzLnZpcC9CWENoRUk4SzIzMWdZUXhMejc3YWppLTd5bkFSSXRBSjJGZWh3bzFmb2g3VHQ3bGtmdnlHWmJxQ3N1Wk9DcVNZR0RrNDJiQXp6ZkZNSE4xc19pV1MtY2FPNUd6DAgJYggIABAAGAAgAA HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://cryptoairdropnews.vip/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 302 \r\np3p: policyref=\"https://www.googleadservices.com/pagead/p3p.xml\", CP=\"NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC\"\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\ndate: Tue, 13 Oct 2026 15:51:48 GMT\r\npragma: no-cache\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\ncache-control: no-cache, no-store, must-revalidate\r\nlocation: https://www.google.no/pagead/1p-conversion/18494406141/?random=1124006467\u0026cv=11\u0026fst=1791906707949\u0026fmt=8\u0026bg=ffffff\u0026guid=ON\u0026async=1\u0026en=page_view\u0026gtm=45be6a91v9266296004za208zd9266296004xecxf1\u0026gcd=13l3l3l2l1l1\u0026dma_cps=a\u0026dma=1\u0026tag_exp=115938465~115938468~117227716~118897920~118897930~120213116~120385422~120469145~120469153~121046263~121046271~121246026~121246034\u0026u_w=1280\u0026u_h=1024\u0026url=https%3A%2F%2Fcryptoairdropnews.vip%2F\u0026rcb=14\u0026gtm_ee=1\u0026frm=0\u0026tiba=AirdropWatch%20-%20Crypto%20Airdrop%20Tracker%20%26%20Eligibility%20Checker%202025\u0026npa=1\u0026pscdl=noapi\u0026auid=2086164952.1791906708\u0026label=UR3LCMO2kJEdEP376PJE\u0026hn=www.google.com\u0026ec_mode=a\u0026oidsrc=3\u0026ecsid2=1731682954.1791906708\u0026_tu=ABA\u0026gcl_ctr=1~0~0~0\u0026data=event%3Dgtag.config\u0026em=tv.1\u0026emd=tvd.1\u0026gcp=2\u0026sscte=1\u0026ct_cookie_present=1\u0026ept=8\u0026ct_cookie_present=false\u0026eoid=CkcKEAjwrbfWBhCk4t_BvI7L72MSMwAjvh6cKYrmwq_xO_cU4lzfv1KJQ1LctNi8BvCDncmE96w13_2jFBZGEoFDa2m2sylCTfD_BwE\u0026crd=CLTesQII8t-xAgit4bECCK_hsQIIobixAgixwbECCLDBsQIIscOxAgiKxbECCMLJsQII1-ixAgi0xrECCIfbsQII08WxAgjrzLECCO3OsQII1c-xAgiK8rECCPTasQII4uqxAgjo7rECCJLrsQIIyeOxAgiX1LECCMnbsQIIpt2xAgiw3rECCIDbsQIIzeGxAg\u0026cerd=CgzX1b4tyOy-LZ3ptzg\u0026fsk=ChEI8K231gYQqIrpndGEu9GiARIsAHC9fclADQKZXR2hqi47d8UiASQyGz7KiP6DhPCqOZzVcfiAmMtb3_YmMO4aArWv\u0026ipr=y\u0026pscrd=IhMI1P271qy3lwMVa8d7AB2dKgQPOh5odHRwczovL2NyeXB0b2FpcmRyb3BuZXdzLnZpcC9CWENoRUk4SzIzMWdZUXhMejc3YWppLTd5bkFSSXRBSjJGZWh3bzFmb2g3VHQ3bGtmdnlHWmJxQ3N1Wk9DcVNZR0RrNDJiQXp6ZkZNSE4xc19pV1MtY2FPNUd6DAgJYggIABAAGAAgAA\r\ncontent-security-policy: script-src 'none'; object-src 'none'\r\ncontent-type: text/html; charset=UTF-8\r\nx-content-type-options: nosniff\r\nserver: cafe\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-13T18:42:33.833148Z","times_seen":19088201,"resource_available":true,"data":null}},"time_used":33,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cryptogreatealltime.xyz/favicon.ico","fqdn":"cryptogreatealltime.xyz","domain":"cryptogreatealltime.xyz","tld":"xyz"},"ip":{"addr":"169.58.102.145","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cryptogreatealltime.xyz/airdrop.html","date":"2026-10-13T15:51:52.577Z","timestamp":1791906712577,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryptogreatealltime.xyz","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 01 Oct 2026 16:30:40 GMT","end":"Wed, 30 Dec 2026 16:30:39 GMT"},"fingerprint":{"sha1":"B4:D7:4A:AC:8F:79:5E:5D:A6:5D:35:70:B2:D2:C1:2C:BB:E0:B6:9F","sha256":"E9:63:C0:44:08:C9:44:60:D2:B3:2C:DF:E1:82:06:75:86:4C:59:7C:3B:6C:60:14:1E:9A:6F:5E:E4:30:FE:33"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: cryptogreatealltime.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cryptogreatealltime.xyz/airdrop.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Tue, 13 Oct 2026 15:51:52 GMT\r\nContent-Type: text/html; charset=utf-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nX-Powered-By: Express\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: GET, POST, OPTIONS\r\nAccess-Control-Allow-Headers: Content-Type, Authorization\r\nContent-Security-Policy: default-src 'none'\r\nX-Content-Type-Options: nosniff\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":150,"size_decoded":589,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"84241342d84ac29592a5d9516f8edf7f","sha1":"03c53980e18e17625f439c20e7d438f066202428","sha256":"6e21162bc64073fe9e3d3d6375ca24d04fed1912a5b7716aac0cb0f2d16fae7c","sha512":"7509483335c7a30365f7f403098491ac0b44fffcc68a5cdacb86ec191f02dbda5b16a20a09e924b6a29ac938578d43bacb9a50115db5c5668ea27fe1811bd530","ssdeep":"","tlshash":"34c08c9e140012010b2087042ac1326464973b992de685006a87e027ece8a1ad987288","first_seen":"2023-04-05T13:59:49Z","last_seen":"2026-10-13T18:02:22.091919Z","times_seen":10657,"resource_available":true,"data":null}},"time_used":37,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":37,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"cryptogreatealltime.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"googleads.g.doubleclick.net/pagead/viewthroughconversion/18494406141/?random=1791906707949\u0026cv=11\u0026fst=1791906707949\u0026fmt=8\u0026bg=ffffff\u0026guid=ON\u0026async=1\u0026en=page_view\u0026gtm=45be6a91v9266296004za208zd9266296004xecxf1\u0026gcd=13l3l3l2l1l1\u0026dma_cps=a\u0026dma=1\u0026tag_exp=115938465~115938468~117227716~118897920~118897930~120213116~120385422~120469145~120469153~121046263~121046271~121246026~121246034\u0026u_w=1280\u0026u_h=1024\u0026url=https%3A%2F%2Fcryptoairdropnews.vip%2F\u0026rcb=14\u0026gtm_ee=1\u0026frm=0\u0026tiba=AirdropWatch%20-%20Crypto%20Airdrop%20Tracker%20%26%20Eligibility%20Checker%202025\u0026npa=1\u0026pscdl=noapi\u0026auid=2086164952.1791906708\u0026label=UR3LCMO2kJEdEP376PJE\u0026hn=www.google.com\u0026ec_mode=a\u0026oid=GG_1524691348.1791906708\u0026oidsrc=3\u0026ecsid2=1731682954.1791906708\u0026_tu=ABA\u0026gcl_ctr=1~0~0~0\u0026data=event%3Dgtag.config\u0026em=tv.1\u0026emd=tvd.1\u0026ept=9\u0026gcp=1\u0026ct_cookie_present=1","fqdn":"googleads.g.doubleclick.net","domain":"doubleclick.net","tld":"net"},"ip":{"addr":"142.250.178.98","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://cryptoairdropnews.vip/","date":"2026-10-13T15:51:48.087Z","timestamp":1791906708087,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.g.doubleclick.net","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 20:00:17 GMT","end":"Fri, 11 Dec 2026 20:00:16 GMT"},"fingerprint":{"sha1":"CC:19:B7:27:F5:18:5F:F9:5F:B3:2A:53:CB:47:66:76:44:51:27:C9","sha256":"A5:6B:13:FA:BA:82:72:F0:45:E5:3D:FE:C2:30:4C:93:14:08:F6:C0:F3:8D:91:DA:EC:53:ED:0E:64:AD:EB:86"}}},"request":{"raw":"POST /pagead/viewthroughconversion/18494406141/?random=1791906707949\u0026cv=11\u0026fst=1791906707949\u0026fmt=8\u0026bg=ffffff\u0026guid=ON\u0026async=1\u0026en=page_view\u0026gtm=45be6a91v9266296004za208zd9266296004xecxf1\u0026gcd=13l3l3l2l1l1\u0026dma_cps=a\u0026dma=1\u0026tag_exp=115938465~115938468~117227716~118897920~118897930~120213116~120385422~120469145~120469153~121046263~121046271~121246026~121246034\u0026u_w=1280\u0026u_h=1024\u0026url=https%3A%2F%2Fcryptoairdropnews.vip%2F\u0026rcb=14\u0026gtm_ee=1\u0026frm=0\u0026tiba=AirdropWatch%20-%20Crypto%20Airdrop%20Tracker%20%26%20Eligibility%20Checker%202025\u0026npa=1\u0026pscdl=noapi\u0026auid=2086164952.1791906708\u0026label=UR3LCMO2kJEdEP376PJE\u0026hn=www.google.com\u0026ec_mode=a\u0026oid=GG_1524691348.1791906708\u0026oidsrc=3\u0026ecsid2=1731682954.1791906708\u0026_tu=ABA\u0026gcl_ctr=1~0~0~0\u0026data=event%3Dgtag.config\u0026em=tv.1\u0026emd=tvd.1\u0026ept=9\u0026gcp=1\u0026ct_cookie_present=1 HTTP/1.1\r\nHost: googleads.g.doubleclick.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://cryptoairdropnews.vip/\r\nOrigin: https://cryptoairdropnews.vip\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 \r\np3p: policyref=\"https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml\", CP=\"CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR\"\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\ndate: Tue, 13 Oct 2026 15:51:48 GMT\r\npragma: no-cache\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\ncache-control: no-cache, must-revalidate\r\ncontent-type: text/html; charset=UTF-8\r\nx-content-type-options: nosniff\r\nserver: cafe\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":570,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-13T18:42:33.833148Z","times_seen":19088201,"resource_available":true,"data":null}},"time_used":73,"timings":{"blocked":-1,"dns":3,"connect":33,"send":0,"wait":37,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cryptoairdropnews.vip/favicon.ico","fqdn":"cryptoairdropnews.vip","domain":"cryptoairdropnews.vip","tld":"vip"},"ip":{"addr":"169.58.102.145","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cryptoairdropnews.vip/","date":"2026-10-13T15:51:48.096Z","timestamp":1791906708096,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryptoairdropnews.vip","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 03 Oct 2026 14:50:08 GMT","end":"Fri, 01 Jan 2027 14:50:07 GMT"},"fingerprint":{"sha1":"F3:48:BF:1E:53:B3:00:B2:C4:2C:E4:EC:4B:4E:F5:63:46:B4:43:75","sha256":"00:57:ED:77:97:35:CB:86:D3:28:3A:BA:D0:CA:84:FB:88:F9:1E:D0:6D:AC:FA:72:E8:A4:C6:25:16:94:B1:EC"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: cryptoairdropnews.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cryptoairdropnews.vip/\r\nCookie: _gcl_au=1.1.2086164952.1791906708.-.-.1791906707.1731682954.1791906708.1791906707\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"_gcl_au","value":"1.1.2086164952.1791906708.-.-.1791906707.1731682954.1791906708.1791906707"}],"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Tue, 13 Oct 2026 15:51:48 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]}],"data":{"size":35772,"size_decoded":9397,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"9e2022c514af3758a20a0d88b1ba13c8","sha1":"48a6916daa2ab8dfa210f326fb03eef716cd6806","sha256":"d8e64c0024dd4b0802c49ce3a8cde697117fcfa70625bc560b0f3dc3abf67107","sha512":"67707890ff41add95f6fbcc0d8cc28b79fd553ecad0a275675704a1db8a58a439452b8e04cafcb2e2451f875f55d51ca97e2c7a3a0457b47ddf295609bd4f24f","ssdeep":"384:CzrUM8nUcUp4z8LmQqrIR6pltz++0Knq5K/XvcaVe03X7Gv5wwqdb:CGU9R6pXK+va626b","tlshash":"1df2b42aa2f230726563e5a07ba35b1a7765d103c40ece2436dc06848fcafe6dd9374d","first_seen":"2026-10-13T15:49:14.770682Z","last_seen":"2026-10-13T15:53:23.101542Z","times_seen":2,"resource_available":true,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"cryptoairdropnews.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"cryptoairdropnews.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.google.no/pagead/1p-conversion/18494406141/?random=1124006467\u0026cv=11\u0026fst=1791906707949\u0026fmt=8\u0026bg=ffffff\u0026guid=ON\u0026async=1\u0026en=page_view\u0026gtm=45be6a91v9266296004za208zd9266296004xecxf1\u0026gcd=13l3l3l2l1l1\u0026dma_cps=a\u0026dma=1\u0026tag_exp=115938465~115938468~117227716~118897920~118897930~120213116~120385422~120469145~120469153~121046263~121046271~121246026~121246034\u0026u_w=1280\u0026u_h=1024\u0026url=https%3A%2F%2Fcryptoairdropnews.vip%2F\u0026rcb=14\u0026gtm_ee=1\u0026frm=0\u0026tiba=AirdropWatch%20-%20Crypto%20Airdrop%20Tracker%20%26%20Eligibility%20Checker%202025\u0026npa=1\u0026pscdl=noapi\u0026auid=2086164952.1791906708\u0026label=UR3LCMO2kJEdEP376PJE\u0026hn=www.google.com\u0026ec_mode=a\u0026oidsrc=3\u0026ecsid2=1731682954.1791906708\u0026_tu=ABA\u0026gcl_ctr=1~0~0~0\u0026data=event%3Dgtag.config\u0026em=tv.1\u0026emd=tvd.1\u0026gcp=2\u0026sscte=1\u0026ct_cookie_present=1\u0026ept=8\u0026ct_cookie_present=false\u0026eoid=CkcKEAjwrbfWBhCk4t_BvI7L72MSMwAjvh6cKYrmwq_xO_cU4lzfv1KJQ1LctNi8BvCDncmE96w13_2jFBZGEoFDa2m2sylCTfD_BwE\u0026crd=CLTesQII8t-xAgit4bECCK_hsQIIobixAgixwbECCLDBsQIIscOxAgiKxbECCMLJsQII1-ixAgi0xrECCIfbsQII08WxAgjrzLECCO3OsQII1c-xAgiK8rECCPTasQII4uqxAgjo7rECCJLrsQIIyeOxAgiX1LECCMnbsQIIpt2xAgiw3rECCIDbsQIIzeGxAg\u0026cerd=CgzX1b4tyOy-LZ3ptzg\u0026fsk=ChEI8K231gYQqIrpndGEu9GiARIsAHC9fclADQKZXR2hqi47d8UiASQyGz7KiP6DhPCqOZzVcfiAmMtb3_YmMO4aArWv\u0026ipr=y\u0026pscrd=IhMI1P271qy3lwMVa8d7AB2dKgQPOh5odHRwczovL2NyeXB0b2FpcmRyb3BuZXdzLnZpcC9CWENoRUk4SzIzMWdZUXhMejc3YWppLTd5bkFSSXRBSjJGZWh3bzFmb2g3VHQ3bGtmdnlHWmJxQ3N1Wk9DcVNZR0RrNDJiQXp6ZkZNSE4xc19pV1MtY2FPNUd6DAgJYggIABAAGAAgAA","fqdn":"www.google.no","domain":"google.no","tld":"no"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://cryptoairdropnews.vip/","date":"2026-10-13T15:51:48.295Z","timestamp":1791906708295,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.no","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 20:03:27 GMT","end":"Fri, 11 Dec 2026 20:03:26 GMT"},"fingerprint":{"sha1":"77:B2:7F:C2:57:EF:52:AC:8C:C8:7C:6A:33:62:6D:8D:9D:58:28:07","sha256":"FC:E7:9A:EA:F7:FE:5D:DE:7B:60:FD:DE:4D:26:E4:52:F9:3F:AA:AF:22:95:2A:F0:0A:DA:80:4A:83:A0:E2:59"}}},"request":{"raw":"GET /pagead/1p-conversion/18494406141/?random=1124006467\u0026cv=11\u0026fst=1791906707949\u0026fmt=8\u0026bg=ffffff\u0026guid=ON\u0026async=1\u0026en=page_view\u0026gtm=45be6a91v9266296004za208zd9266296004xecxf1\u0026gcd=13l3l3l2l1l1\u0026dma_cps=a\u0026dma=1\u0026tag_exp=115938465~115938468~117227716~118897920~118897930~120213116~120385422~120469145~120469153~121046263~121046271~121246026~121246034\u0026u_w=1280\u0026u_h=1024\u0026url=https%3A%2F%2Fcryptoairdropnews.vip%2F\u0026rcb=14\u0026gtm_ee=1\u0026frm=0\u0026tiba=AirdropWatch%20-%20Crypto%20Airdrop%20Tracker%20%26%20Eligibility%20Checker%202025\u0026npa=1\u0026pscdl=noapi\u0026auid=2086164952.1791906708\u0026label=UR3LCMO2kJEdEP376PJE\u0026hn=www.google.com\u0026ec_mode=a\u0026oidsrc=3\u0026ecsid2=1731682954.1791906708\u0026_tu=ABA\u0026gcl_ctr=1~0~0~0\u0026data=event%3Dgtag.config\u0026em=tv.1\u0026emd=tvd.1\u0026gcp=2\u0026sscte=1\u0026ct_cookie_present=1\u0026ept=8\u0026ct_cookie_present=false\u0026eoid=CkcKEAjwrbfWBhCk4t_BvI7L72MSMwAjvh6cKYrmwq_xO_cU4lzfv1KJQ1LctNi8BvCDncmE96w13_2jFBZGEoFDa2m2sylCTfD_BwE\u0026crd=CLTesQII8t-xAgit4bECCK_hsQIIobixAgixwbECCLDBsQIIscOxAgiKxbECCMLJsQII1-ixAgi0xrECCIfbsQII08WxAgjrzLECCO3OsQII1c-xAgiK8rECCPTasQII4uqxAgjo7rECCJLrsQIIyeOxAgiX1LECCMnbsQIIpt2xAgiw3rECCIDbsQIIzeGxAg\u0026cerd=CgzX1b4tyOy-LZ3ptzg\u0026fsk=ChEI8K231gYQqIrpndGEu9GiARIsAHC9fclADQKZXR2hqi47d8UiASQyGz7KiP6DhPCqOZzVcfiAmMtb3_YmMO4aArWv\u0026ipr=y\u0026pscrd=IhMI1P271qy3lwMVa8d7AB2dKgQPOh5odHRwczovL2NyeXB0b2FpcmRyb3BuZXdzLnZpcC9CWENoRUk4SzIzMWdZUXhMejc3YWppLTd5bkFSSXRBSjJGZWh3bzFmb2g3VHQ3bGtmdnlHWmJxQ3N1Wk9DcVNZR0RrNDJiQXp6ZkZNSE4xc19pV1MtY2FPNUd6DAgJYggIABAAGAAgAA HTTP/1.1\r\nHost: www.google.no\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://cryptoairdropnews.vip/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\np3p: policyref=\"https://www.googleadservices.com/pagead/p3p.xml\", CP=\"NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC\"\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\ndate: Tue, 13 Oct 2026 15:51:48 GMT\r\npragma: no-cache\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\ncache-control: no-cache, no-store, must-revalidate\r\ncontent-security-policy: script-src 'none'; object-src 'none'\r\ncontent-type: text/html; charset=UTF-8\r\nx-content-type-options: nosniff\r\nserver: cafe\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":613,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-13T18:42:33.833148Z","times_seen":19088201,"resource_available":true,"data":null}},"time_used":169,"timings":{"blocked":0,"dns":3,"connect":16,"send":0,"wait":116,"receive":0,"ssl":34},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/spacegrotesk/v22/V8mDoQDjQSkFtoMM3T6r8E7mPbF4Cw.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://cryptogreatealltime.xyz/airdrop.html","date":"2026-10-13T15:51:52.494Z","timestamp":1791906712494,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 20:01:48 GMT","end":"Fri, 11 Dec 2026 20:01:47 GMT"},"fingerprint":{"sha1":"CE:B3:C9:86:04:78:55:83:CC:52:A9:C8:01:3D:FB:40:04:EA:65:79","sha256":"BB:17:4D:EA:95:BB:1E:04:F2:B9:A8:63:B5:85:90:0D:94:A9:44:9C:40:E1:6A:B2:0D:4E:92:6E:85:B2:49:E9"}}},"request":{"raw":"GET /s/spacegrotesk/v22/V8mDoQDjQSkFtoMM3T6r8E7mPbF4Cw.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://cryptogreatealltime.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 22288\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 12 Oct 2026 16:03:54 GMT\r\nexpires: Tue, 12 Oct 2027 16:03:54 GMT\r\ncache-control: public, max-age=31536000\r\nage: 85678\r\nlast-modified: Thu, 04 Sep 2025 17:26:34 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":22288,"size_decoded":23100,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 22288, version 1.0","md5":"87c506d88b9f587f0e2292bc271f5083","sha1":"c0781ea2f29013826dc1eb8db40f4d400d9df710","sha256":"0640890476fc1198ab4de571fb658de443c4d85b66466ec09534a8737ab1ce9d","sha512":"25171eb14ce4c75ccfdb6f1c2a7de82182fd8d3d79cfa108df2d0e015e4ac84678ad97fdf90cff2ac2f24934531fcca3289343129687f176f21964ce5cd01b02","ssdeep":"384:TB/NWnO5qgQvU7gd7EeEX5qPOJO4FqaCEuAsCyzvDfxPdjuHsrC:TBlo1vUsvZqO4MAsCKrxxuMrC","tlshash":"8aa2e15b3f6bde211a27aebf4fc957b0a3ac6c1db2dd2712c198b104408962cc5d5ce6","first_seen":"2025-09-05T05:08:09.568652Z","last_seen":"2026-10-13T18:06:12.411319Z","times_seen":35492,"resource_available":false,"data":null}},"time_used":73,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":59,"receive":14,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=AW-18494406141","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cryptoairdropnews.vip/","date":"2026-10-13T15:51:47.457Z","timestamp":1791906707457,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 20:00:18 GMT","end":"Fri, 11 Dec 2026 20:00:17 GMT"},"fingerprint":{"sha1":"28:B6:EA:A0:82:D0:48:3A:13:C3:DC:38:88:85:51:9B:B3:CB:89:B4","sha256":"80:50:66:22:4E:D0:C3:BC:40:94:CA:B1:AA:D1:DB:13:A9:E5:74:53:AA:EB:19:DE:D1:A8:AC:C9:B7:18:01:EF"}}},"request":{"raw":"GET /gtag/js?id=AW-18494406141 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cryptoairdropnews.vip/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: zstd\r\nvary: Accept-Encoding\r\ndate: Tue, 13 Oct 2026 15:51:47 GMT\r\nexpires: Tue, 13 Oct 2026 15:51:47 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 169474\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":499195,"size_decoded":170078,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (6696)","md5":"e0032e8757b2a03cfd24136e2f8607e7","sha1":"17092b23c89435382742538e62813b6825bd2a91","sha256":"5f6cfd8562fea6388b20677a6c8ee27a509ed217e7b9bc92de291c822cb15cda","sha512":"844ad1e8bac2182b0cbe07c2c8f559d035345526c7a344beb2f0a6195fdcf9c2ccf4e27ca765b928a8bdd78117565f50cb62fa705b7e11ffb5eab61caa9ea964","ssdeep":"6144:+lFzGvE6P/tfErhTWShclVbEEwF37wsGGXMbC:y04VVM2","tlshash":"77b408cdb3d6746293a6f078903f01cba57b29a2b44cc896b189dce42e3465a4137f7d","first_seen":"2026-10-13T15:53:23.10425Z","last_seen":"2026-10-13T15:53:23.10425Z","times_seen":1,"resource_available":true,"data":null}},"time_used":156,"timings":{"blocked":-1,"dns":0,"connect":16,"send":0,"wait":62,"receive":40,"ssl":37},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://cryptoairdropnews.vip/","date":"2026-10-13T15:51:47.778Z","timestamp":1791906707778,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 20:01:48 GMT","end":"Fri, 11 Dec 2026 20:01:47 GMT"},"fingerprint":{"sha1":"CE:B3:C9:86:04:78:55:83:CC:52:A9:C8:01:3D:FB:40:04:EA:65:79","sha256":"BB:17:4D:EA:95:BB:1E:04:F2:B9:A8:63:B5:85:90:0D:94:A9:44:9C:40:E1:6A:B2:0D:4E:92:6E:85:B2:49:E9"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://cryptoairdropnews.vip\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 12 Oct 2026 15:56:18 GMT\r\nexpires: Tue, 12 Oct 2027 15:56:18 GMT\r\ncache-control: public, max-age=31536000\r\nage: 86129\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48532,"size_decoded":49344,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-10-13T18:41:50.360073Z","times_seen":316093,"resource_available":false,"data":null}},"time_used":107,"timings":{"blocked":-1,"dns":6,"connect":30,"send":0,"wait":18,"receive":52,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://cryptoairdropnews.vip/","date":"2026-10-13T15:51:47.780Z","timestamp":1791906707780,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 20:01:48 GMT","end":"Fri, 11 Dec 2026 20:01:47 GMT"},"fingerprint":{"sha1":"CE:B3:C9:86:04:78:55:83:CC:52:A9:C8:01:3D:FB:40:04:EA:65:79","sha256":"BB:17:4D:EA:95:BB:1E:04:F2:B9:A8:63:B5:85:90:0D:94:A9:44:9C:40:E1:6A:B2:0D:4E:92:6E:85:B2:49:E9"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://cryptoairdropnews.vip\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 12 Oct 2026 15:56:18 GMT\r\nexpires: Tue, 12 Oct 2027 15:56:18 GMT\r\ncache-control: public, max-age=31536000\r\nage: 86129\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48532,"size_decoded":49344,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-10-13T18:41:50.360073Z","times_seen":316093,"resource_available":false,"data":null}},"time_used":96,"timings":{"blocked":26,"dns":0,"connect":0,"send":0,"wait":36,"receive":34,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://cryptoairdropnews.vip/","date":"2026-10-13T15:51:47.783Z","timestamp":1791906707783,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 20:01:48 GMT","end":"Fri, 11 Dec 2026 20:01:47 GMT"},"fingerprint":{"sha1":"CE:B3:C9:86:04:78:55:83:CC:52:A9:C8:01:3D:FB:40:04:EA:65:79","sha256":"BB:17:4D:EA:95:BB:1E:04:F2:B9:A8:63:B5:85:90:0D:94:A9:44:9C:40:E1:6A:B2:0D:4E:92:6E:85:B2:49:E9"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://cryptoairdropnews.vip\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 12 Oct 2026 15:56:18 GMT\r\nexpires: Tue, 12 Oct 2027 15:56:18 GMT\r\ncache-control: public, max-age=31536000\r\nage: 86129\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48532,"size_decoded":49344,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-10-13T18:41:50.360073Z","times_seen":316093,"resource_available":false,"data":null}},"time_used":89,"timings":{"blocked":19,"dns":0,"connect":0,"send":0,"wait":43,"receive":27,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=AW-18494406141","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cryptoairdropnews.vip/","date":"2026-10-13T15:51:47.448Z","timestamp":1791906707448,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 20:00:18 GMT","end":"Fri, 11 Dec 2026 20:00:17 GMT"},"fingerprint":{"sha1":"28:B6:EA:A0:82:D0:48:3A:13:C3:DC:38:88:85:51:9B:B3:CB:89:B4","sha256":"80:50:66:22:4E:D0:C3:BC:40:94:CA:B1:AA:D1:DB:13:A9:E5:74:53:AA:EB:19:DE:D1:A8:AC:C9:B7:18:01:EF"}}},"request":{"raw":"GET /gtag/js?id=AW-18494406141 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cryptoairdropnews.vip/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: zstd\r\nvary: Accept-Encoding\r\ndate: Tue, 13 Oct 2026 15:51:47 GMT\r\nexpires: Tue, 13 Oct 2026 15:51:47 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 169471\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":499177,"size_decoded":170075,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (6696)","md5":"e7a214b4a7ecb6c9bdd780d2caf448ff","sha1":"ac2b7f0ace07e3abbd7f4895ae551b7e7636154c","sha256":"1038465221728edb830352a78766420e7dd75a2e737de609df9d6bbe4739d22a","sha512":"28dc309a4c17c6cf2ceaf6d83f3d649d1744ad43962a2e16b1fb34ff6396cc79280b9762a24c6c1ae9aa77ff9ebf97f8d2065d5acc3b4229354a0e10833d27a4","ssdeep":"6144:+lFzGvE6P/tfErbTWShclVbEEwF37wsGGXybC:y04DVy2","tlshash":"29b408cdb3d6746293a6f078903f01cba57b29a2b44cc896b189dce42e3465a4137f7d","first_seen":"2026-10-13T15:49:14.773038Z","last_seen":"2026-10-13T15:53:23.106084Z","times_seen":2,"resource_available":true,"data":null}},"time_used":160,"timings":{"blocked":-1,"dns":1,"connect":16,"send":0,"wait":39,"receive":57,"ssl":45},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/ccm/collect?rcb=14\u0026frm=0\u0026apvc=1\u0026auid=2086164952.1791906708\u0026dt=AirdropWatch%20-%20Crypto%20Airdrop%20Tracker%20%26%20Eligibility%20Checker%202025\u0026tid=AW-18494406141\u0026en=page_view\u0026dl=https%3A%2F%2Fcryptoairdropnews.vip%2F\u0026scrsrc=www.googletagmanager.com\u0026rnd=803858065.1791906708\u0026navt=n\u0026npa=1\u0026gtm=45be6a91v9266296004za208zd9266296004xecxf1\u0026gcd=13l3l3l2l1l1\u0026dma_cps=a\u0026dma=1\u0026tag_exp=115938465~115938468~117227716~118897920~118897930~120213116~120385422~120469145~120469153~121046263~121046271~121246026~121246034\u0026tft=1791906707961\u0026tfd=1470\u0026tids=AW-18494406141\u0026fmt=8","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.151.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://cryptoairdropnews.vip/","date":"2026-10-13T15:51:48.088Z","timestamp":1791906708088,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 20:00:11 GMT","end":"Fri, 11 Dec 2026 20:00:10 GMT"},"fingerprint":{"sha1":"81:58:83:A3:C8:EB:81:F3:A5:FE:6C:6B:D8:F7:B3:E8:49:83:32:0F","sha256":"30:B5:2C:EA:47:6E:0A:AB:5B:94:50:CC:FC:33:CB:F9:57:B2:4B:F1:B4:5D:3D:7D:BB:10:A6:02:81:8E:54:F5"}}},"request":{"raw":"POST /ccm/collect?rcb=14\u0026frm=0\u0026apvc=1\u0026auid=2086164952.1791906708\u0026dt=AirdropWatch%20-%20Crypto%20Airdrop%20Tracker%20%26%20Eligibility%20Checker%202025\u0026tid=AW-18494406141\u0026en=page_view\u0026dl=https%3A%2F%2Fcryptoairdropnews.vip%2F\u0026scrsrc=www.googletagmanager.com\u0026rnd=803858065.1791906708\u0026navt=n\u0026npa=1\u0026gtm=45be6a91v9266296004za208zd9266296004xecxf1\u0026gcd=13l3l3l2l1l1\u0026dma_cps=a\u0026dma=1\u0026tag_exp=115938465~115938468~117227716~118897920~118897930~120213116~120385422~120469145~120469153~121046263~121046271~121246026~121246034\u0026tft=1791906707961\u0026tfd=1470\u0026tids=AW-18494406141\u0026fmt=8 HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://cryptoairdropnews.vip/\r\nOrigin: https://cryptoairdropnews.vip\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 13 Oct 2026 15:51:48 GMT\r\ncache-control: no-cache, no-store, must-revalidate\r\npragma: no-cache\r\ncontent-type: text/plain\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\nvary: Origin, X-Origin, Referer\r\nserver: scaffolding on HTTPServer2\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: https://cryptoairdropnews.vip\r\naccess-control-expose-headers: date,vary,vary,vary,server,content-length\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":550,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-13T18:42:33.833148Z","times_seen":19088201,"resource_available":true,"data":null}},"time_used":44,"timings":{"blocked":24,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ad.doubleclick.net/ccm/s/collect?auid=2086164952.1791906708\u0026gtm=45be6a91v9266296004za208zd9266296004xecxf1\u0026fmt=8","fqdn":"ad.doubleclick.net","domain":"doubleclick.net","tld":"net"},"ip":{"addr":"142.250.178.38","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://cryptoairdropnews.vip/","date":"2026-10-13T15:51:48.089Z","timestamp":1791906708089,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.doubleclick.net","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 20:00:12 GMT","end":"Fri, 11 Dec 2026 20:00:11 GMT"},"fingerprint":{"sha1":"A1:EC:68:59:8B:AE:05:09:7E:BD:9E:99:0A:1B:C1:36:2C:37:26:0A","sha256":"65:1E:F3:B7:93:EE:7B:95:BD:D2:C1:47:74:A2:C8:39:2A:C3:3D:BF:82:E3:E1:B5:91:AB:6A:E9:53:F2:71:A9"}}},"request":{"raw":"POST /ccm/s/collect?auid=2086164952.1791906708\u0026gtm=45be6a91v9266296004za208zd9266296004xecxf1\u0026fmt=8 HTTP/1.1\r\nHost: ad.doubleclick.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://cryptoairdropnews.vip/\r\nOrigin: https://cryptoairdropnews.vip\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 204 \r\ncache-control: no-cache, no-store, must-revalidate\r\ndate: Tue, 13 Oct 2026 15:51:48 GMT\r\npragma: no-cache\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\nvary: Origin, X-Origin, Referer\r\ncontent-type: text/html\r\nserver: scaffolding on HTTPServer2\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: https://cryptoairdropnews.vip\r\naccess-control-expose-headers: date,vary,vary,vary,server,content-length\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":null,"data":{"size":0,"size_decoded":549,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-13T18:42:33.833148Z","times_seen":19088201,"resource_available":true,"data":null}},"time_used":68,"timings":{"blocked":-1,"dns":3,"connect":31,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Inter:wght@400;500;600;700;800\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://cryptoairdropnews.vip/","date":"2026-10-13T15:51:47.451Z","timestamp":1791906707451,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 20:01:49 GMT","end":"Fri, 11 Dec 2026 20:01:48 GMT"},"fingerprint":{"sha1":"E3:3D:17:9C:78:F1:DE:68:C7:E6:BB:8F:08:DC:78:F3:9D:DF:F2:43","sha256":"EB:D6:1D:9A:76:0B:5A:3C:08:74:83:6D:AA:A7:F4:B3:0D:17:8F:4F:3E:6B:9C:91:6C:5B:9E:F7:08:1F:00:62"}}},"request":{"raw":"GET /css2?family=Inter:wght@400;500;600;700;800\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cryptoairdropnews.vip/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Tue, 13 Oct 2026 15:51:47 GMT\r\ndate: Tue, 13 Oct 2026 15:51:47 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":12635,"size_decoded":1486,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"c326a313eb7727f3c0a99d9ee5421be3","sha1":"da5da24173ba533db05f76ecf8d7a75dad68e205","sha256":"d747e2beeeab9b73702a98c58fa3b7e18ad2dea9c9a7308f1d66e878eac1d79f","sha512":"848f55aacae074ccc19495b12eaa500c128da29ec7d2194115a5181f513ae3e338e9bada5e35dfeb2a3698501c67c0de8878b272855e9425b4ec5126ec07ba77","ssdeep":"192:9NNIxO34OxvENOPCO3/NxoNNryfO3iExBONEhYO3RrxSfNx0NO3kCx7x:vXyMopi+s7X","tlshash":"83427892002ba400ab971dc263cf7f3aaece50896085d1b95ffd0dc59ceed66436876d","first_seen":"2026-10-05T17:59:48.819657Z","last_seen":"2026-10-13T18:19:19.431379Z","times_seen":465,"resource_available":true,"data":null}},"time_used":99,"timings":{"blocked":-1,"dns":0,"connect":16,"send":0,"wait":38,"receive":0,"ssl":45},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cryptoairdropnews.vip/js/smart-popup.js","fqdn":"cryptoairdropnews.vip","domain":"cryptoairdropnews.vip","tld":"vip"},"ip":{"addr":"169.58.102.145","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cryptoairdropnews.vip/","date":"2026-10-13T15:51:47.456Z","timestamp":1791906707456,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryptoairdropnews.vip","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 03 Oct 2026 14:50:08 GMT","end":"Fri, 01 Jan 2027 14:50:07 GMT"},"fingerprint":{"sha1":"F3:48:BF:1E:53:B3:00:B2:C4:2C:E4:EC:4B:4E:F5:63:46:B4:43:75","sha256":"00:57:ED:77:97:35:CB:86:D3:28:3A:BA:D0:CA:84:FB:88:F9:1E:D0:6D:AC:FA:72:E8:A4:C6:25:16:94:B1:EC"}}},"request":{"raw":"GET /js/smart-popup.js HTTP/1.1\r\nHost: cryptoairdropnews.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cryptoairdropnews.vip/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Tue, 13 Oct 2026 15:51:47 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 12811\r\nLast-Modified: Mon, 28 Sep 2026 14:47:10 GMT\r\nConnection: keep-alive\r\nETag: \"6aba7dee-320b\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":12811,"size_decoded":13074,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (332)","md5":"16a99d7f63724715dba2c1ff7e13d74c","sha1":"a7d4e43294a08ece1ab6a86cf14a520e1d356f64","sha256":"961e9c1d11b0ba92e172e51effd51767f653b4cda705374a74b9860f33808295","sha512":"f9a149dae39c4e5384878d2fe326b984f01aedbece58716b12cf9b671fa1d284ac7aadc83967f212a8cb7368585e1f6f65b91195d83e814b01a7e1a86655f5ce","ssdeep":"192:tkOqTNmBk3A+uJj+ZUxMhMrOdiCQtzyiiHeL2Hl4YKZIoiC00D/p6ova4ho+jsHa:vF1EaUSN1","tlshash":"2c42681e22fb3057696ba0e4af97571a37608507e40bce2c3e5c21988fcce948576b7c","first_seen":"2026-10-13T15:49:14.780046Z","last_seen":"2026-10-13T15:53:23.107468Z","times_seen":2,"resource_available":true,"data":null}},"time_used":190,"timings":{"blocked":-1,"dns":0,"connect":167,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"cryptoairdropnews.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"cryptoairdropnews.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://cryptoairdropnews.vip/","date":"2026-10-13T15:51:47.785Z","timestamp":1791906707785,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 20:01:48 GMT","end":"Fri, 11 Dec 2026 20:01:47 GMT"},"fingerprint":{"sha1":"CE:B3:C9:86:04:78:55:83:CC:52:A9:C8:01:3D:FB:40:04:EA:65:79","sha256":"BB:17:4D:EA:95:BB:1E:04:F2:B9:A8:63:B5:85:90:0D:94:A9:44:9C:40:E1:6A:B2:0D:4E:92:6E:85:B2:49:E9"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://cryptoairdropnews.vip\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 12 Oct 2026 15:56:18 GMT\r\nexpires: Tue, 12 Oct 2027 15:56:18 GMT\r\ncache-control: public, max-age=31536000\r\nage: 86129\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48532,"size_decoded":49344,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-10-13T18:41:50.360073Z","times_seen":316093,"resource_available":false,"data":null}},"time_used":88,"timings":{"blocked":18,"dns":0,"connect":0,"send":0,"wait":29,"receive":41,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cryptogreatealltime.xyz/","fqdn":"cryptogreatealltime.xyz","domain":"cryptogreatealltime.xyz","tld":"xyz"},"ip":{"addr":"169.58.102.145","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-10-13T15:51:51.915Z","timestamp":1791906711915,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryptogreatealltime.xyz","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 01 Oct 2026 16:30:40 GMT","end":"Wed, 30 Dec 2026 16:30:39 GMT"},"fingerprint":{"sha1":"B4:D7:4A:AC:8F:79:5E:5D:A6:5D:35:70:B2:D2:C1:2C:BB:E0:B6:9F","sha256":"E9:63:C0:44:08:C9:44:60:D2:B3:2C:DF:E1:82:06:75:86:4C:59:7C:3B:6C:60:14:1E:9A:6F:5E:E4:30:FE:33"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: cryptogreatealltime.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cryptoairdropnews.vip/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Tue, 13 Oct 2026 15:51:52 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nX-Powered-By: Express\r\nCache-Control: public, max-age=0\r\nLast-Modified: Wed, 23 Sep 2026 22:15:15 GMT\r\nETag: W/\"11a-1a0d0565938\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-13T18:42:33.833148Z","times_seen":19088201,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"cryptogreatealltime.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cryptoairdropnews.vip/","fqdn":"cryptoairdropnews.vip","domain":"cryptoairdropnews.vip","tld":"vip"},"ip":{"addr":"169.58.102.145","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-10-13T15:51:46.513Z","timestamp":1791906706513,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryptoairdropnews.vip","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 03 Oct 2026 14:50:08 GMT","end":"Fri, 01 Jan 2027 14:50:07 GMT"},"fingerprint":{"sha1":"F3:48:BF:1E:53:B3:00:B2:C4:2C:E4:EC:4B:4E:F5:63:46:B4:43:75","sha256":"00:57:ED:77:97:35:CB:86:D3:28:3A:BA:D0:CA:84:FB:88:F9:1E:D0:6D:AC:FA:72:E8:A4:C6:25:16:94:B1:EC"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: cryptoairdropnews.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Tue, 13 Oct 2026 15:51:46 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":35772,"size_decoded":9397,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"9e2022c514af3758a20a0d88b1ba13c8","sha1":"48a6916daa2ab8dfa210f326fb03eef716cd6806","sha256":"d8e64c0024dd4b0802c49ce3a8cde697117fcfa70625bc560b0f3dc3abf67107","sha512":"67707890ff41add95f6fbcc0d8cc28b79fd553ecad0a275675704a1db8a58a439452b8e04cafcb2e2451f875f55d51ca97e2c7a3a0457b47ddf295609bd4f24f","ssdeep":"384:CzrUM8nUcUp4z8LmQqrIR6pltz++0Knq5K/XvcaVe03X7Gv5wwqdb:CGU9R6pXK+va626b","tlshash":"1df2b42aa2f230726563e5a07ba35b1a7765d103c40ece2436dc06848fcafe6dd9374d","first_seen":"2026-10-13T15:49:14.770682Z","last_seen":"2026-10-13T15:53:23.101542Z","times_seen":2,"resource_available":true,"data":null}},"time_used":288,"timings":{"blocked":-1,"dns":201,"connect":24,"send":0,"wait":24,"receive":0,"ssl":38},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"cryptoairdropnews.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"cryptoairdropnews.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/pagead/1p-conversion/18494406141/?random=1791906707949\u0026cv=11\u0026fst=1791906707949\u0026fmt=8\u0026bg=ffffff\u0026guid=ON\u0026async=1\u0026en=page_view\u0026gtm=45be6a91v9266296004za208zd9266296004xecxf1\u0026gcd=13l3l3l2l1l1\u0026dma_cps=a\u0026dma=1\u0026tag_exp=115938465~115938468~117227716~118897920~118897930~120213116~120385422~120469145~120469153~121046263~121046271~121246026~121246034\u0026u_w=1280\u0026u_h=1024\u0026url=https%3A%2F%2Fcryptoairdropnews.vip%2F\u0026rcb=14\u0026gtm_ee=1\u0026frm=0\u0026tiba=AirdropWatch%20-%20Crypto%20Airdrop%20Tracker%20%26%20Eligibility%20Checker%202025\u0026npa=1\u0026pscdl=noapi\u0026auid=2086164952.1791906708\u0026label=UR3LCMO2kJEdEP376PJE\u0026hn=www.google.com\u0026ec_mode=a\u0026oid=GG_1524691348.1791906708\u0026oidsrc=3\u0026ecsid2=1731682954.1791906708\u0026_tu=ABA\u0026gcl_ctr=1~0~0~0\u0026data=event%3Dgtag.config\u0026em=tv.1\u0026emd=tvd.1\u0026gcp=1\u0026sscte=1\u0026ct_cookie_present=1\u0026ept=8","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.151.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://cryptoairdropnews.vip/","date":"2026-10-13T15:51:48.086Z","timestamp":1791906708086,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 20:00:11 GMT","end":"Fri, 11 Dec 2026 20:00:10 GMT"},"fingerprint":{"sha1":"81:58:83:A3:C8:EB:81:F3:A5:FE:6C:6B:D8:F7:B3:E8:49:83:32:0F","sha256":"30:B5:2C:EA:47:6E:0A:AB:5B:94:50:CC:FC:33:CB:F9:57:B2:4B:F1:B4:5D:3D:7D:BB:10:A6:02:81:8E:54:F5"}}},"request":{"raw":"POST /pagead/1p-conversion/18494406141/?random=1791906707949\u0026cv=11\u0026fst=1791906707949\u0026fmt=8\u0026bg=ffffff\u0026guid=ON\u0026async=1\u0026en=page_view\u0026gtm=45be6a91v9266296004za208zd9266296004xecxf1\u0026gcd=13l3l3l2l1l1\u0026dma_cps=a\u0026dma=1\u0026tag_exp=115938465~115938468~117227716~118897920~118897930~120213116~120385422~120469145~120469153~121046263~121046271~121246026~121246034\u0026u_w=1280\u0026u_h=1024\u0026url=https%3A%2F%2Fcryptoairdropnews.vip%2F\u0026rcb=14\u0026gtm_ee=1\u0026frm=0\u0026tiba=AirdropWatch%20-%20Crypto%20Airdrop%20Tracker%20%26%20Eligibility%20Checker%202025\u0026npa=1\u0026pscdl=noapi\u0026auid=2086164952.1791906708\u0026label=UR3LCMO2kJEdEP376PJE\u0026hn=www.google.com\u0026ec_mode=a\u0026oid=GG_1524691348.1791906708\u0026oidsrc=3\u0026ecsid2=1731682954.1791906708\u0026_tu=ABA\u0026gcl_ctr=1~0~0~0\u0026data=event%3Dgtag.config\u0026em=tv.1\u0026emd=tvd.1\u0026gcp=1\u0026sscte=1\u0026ct_cookie_present=1\u0026ept=8 HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://cryptoairdropnews.vip/\r\nOrigin: https://cryptoairdropnews.vip\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 302 \r\np3p: policyref=\"https://www.googleadservices.com/pagead/p3p.xml\", CP=\"NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC\"\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\ndate: Tue, 13 Oct 2026 15:51:48 GMT\r\npragma: no-cache\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\ncache-control: no-cache, must-revalidate\r\nlocation: https://www.google.com/pagead/1p-conversion/18494406141/?random=1124006467\u0026cv=11\u0026fst=1791906707949\u0026fmt=8\u0026bg=ffffff\u0026guid=ON\u0026async=1\u0026en=page_view\u0026gtm=45be6a91v9266296004za208zd9266296004xecxf1\u0026gcd=13l3l3l2l1l1\u0026dma_cps=a\u0026dma=1\u0026tag_exp=115938465~115938468~117227716~118897920~118897930~120213116~120385422~120469145~120469153~121046263~121046271~121246026~121246034\u0026u_w=1280\u0026u_h=1024\u0026url=https%3A%2F%2Fcryptoairdropnews.vip%2F\u0026rcb=14\u0026gtm_ee=1\u0026frm=0\u0026tiba=AirdropWatch%20-%20Crypto%20Airdrop%20Tracker%20%26%20Eligibility%20Checker%202025\u0026npa=1\u0026pscdl=noapi\u0026auid=2086164952.1791906708\u0026label=UR3LCMO2kJEdEP376PJE\u0026hn=www.google.com\u0026ec_mode=a\u0026oidsrc=3\u0026ecsid2=1731682954.1791906708\u0026_tu=ABA\u0026gcl_ctr=1~0~0~0\u0026data=event%3Dgtag.config\u0026em=tv.1\u0026emd=tvd.1\u0026gcp=2\u0026sscte=1\u0026ct_cookie_present=1\u0026ept=8\u0026ct_cookie_present=false\u0026eoid=CkcKEAjwrbfWBhCk4t_BvI7L72MSMwAjvh6cKYrmwq_xO_cU4lzfv1KJQ1LctNi8BvCDncmE96w13_2jFBZGEoFDa2m2sylCTfD_BwE\u0026crd=CLTesQII8t-xAgit4bECCK_hsQIIobixAgixwbECCLDBsQIIscOxAgiKxbECCMLJsQII1-ixAgi0xrECCIfbsQII08WxAgjrzLECCO3OsQII1c-xAgiK8rECCPTasQII4uqxAgjo7rECCJLrsQIIyeOxAgiX1LECCMnbsQIIpt2xAgiw3rECCIDbsQIIzeGxAg\u0026cerd=CgzX1b4tyOy-LZ3ptzg\u0026fsk=ChEI8K231gYQqIrpndGEu9GiARIsAHC9fclADQKZXR2hqi47d8UiASQyGz7KiP6DhPCqOZzVcfiAmMtb3_YmMO4aArWv\u0026pscrd=IhMI1P271qy3lwMVa8d7AB2dKgQPOh5odHRwczovL2NyeXB0b2FpcmRyb3BuZXdzLnZpcC9CWENoRUk4SzIzMWdZUXhMejc3YWppLTd5bkFSSXRBSjJGZWh3bzFmb2g3VHQ3bGtmdnlHWmJxQ3N1Wk9DcVNZR0RrNDJiQXp6ZkZNSE4xc19pV1MtY2FPNUd6DAgJYggIABAAGAAgAA\r\ncontent-type: text/html; charset=UTF-8\r\nx-content-type-options: nosniff\r\nserver: cafe\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-13T18:42:33.833148Z","times_seen":19088201,"resource_available":true,"data":null}},"time_used":72,"timings":{"blocked":-1,"dns":3,"connect":31,"send":0,"wait":38,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cryptogreatealltime.xyz/airdrop.html","fqdn":"cryptogreatealltime.xyz","domain":"cryptogreatealltime.xyz","tld":"xyz"},"ip":{"addr":"169.58.102.145","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-10-13T15:51:52.232Z","timestamp":1791906712232,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryptogreatealltime.xyz","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 01 Oct 2026 16:30:40 GMT","end":"Wed, 30 Dec 2026 16:30:39 GMT"},"fingerprint":{"sha1":"B4:D7:4A:AC:8F:79:5E:5D:A6:5D:35:70:B2:D2:C1:2C:BB:E0:B6:9F","sha256":"E9:63:C0:44:08:C9:44:60:D2:B3:2C:DF:E1:82:06:75:86:4C:59:7C:3B:6C:60:14:1E:9A:6F:5E:E4:30:FE:33"}}},"request":{"raw":"GET /airdrop.html HTTP/1.1\r\nHost: cryptogreatealltime.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cryptogreatealltime.xyz/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Tue, 13 Oct 2026 15:51:52 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nX-Powered-By: Express\r\nCache-Control: public, max-age=0\r\nLast-Modified: Wed, 23 Sep 2026 22:57:52 GMT\r\nETag: W/\"12723-1a0d07d5d80\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"cdnjs","description":"cdnjs is a free distributed JS library delivery service.","website":"https://cdnjs.com","common_platform_enumeration":"","icon":"cdnjs.svg","categories":["CDN"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":75555,"size_decoded":20528,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (375)","md5":"8bad17e221bfea73bad0fad0d421c32f","sha1":"9124a4e4c2bf736223132a0b2ecde08aaa0ac4b2","sha256":"eeb829d1cad5f28ca3ccb2c7b6f0e617330b9655c42cde13ca218c699e27cd33","sha512":"c5cb2d2bb18660b36c1f5f5413c7d670a3a18baee6a8072e815f7386929083d067ad6d6ea6c08a6c354dbeb4f1be266fdb4ff46932d87c93f08e3f9f3f248284","ssdeep":"768:1FQda9S0ZpGb1dbGOAIVAXS6rQHmndQ744LMDLn:HQda9SUEGjSmdQmLn","tlshash":"207309d662f310250567a1a97b97a72a3670a003d405c97c3eec4380cfceb69d9b7b9d","first_seen":"2026-10-13T15:49:14.761426Z","last_seen":"2026-10-13T15:53:23.108421Z","times_seen":2,"resource_available":true,"data":null}},"time_used":53,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":53,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"cryptogreatealltime.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://cryptogreatealltime.xyz/airdrop.html","date":"2026-10-13T15:51:52.497Z","timestamp":1791906712497,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 20:01:48 GMT","end":"Fri, 11 Dec 2026 20:01:47 GMT"},"fingerprint":{"sha1":"CE:B3:C9:86:04:78:55:83:CC:52:A9:C8:01:3D:FB:40:04:EA:65:79","sha256":"BB:17:4D:EA:95:BB:1E:04:F2:B9:A8:63:B5:85:90:0D:94:A9:44:9C:40:E1:6A:B2:0D:4E:92:6E:85:B2:49:E9"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://cryptogreatealltime.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 12 Oct 2026 15:56:18 GMT\r\nexpires: Tue, 12 Oct 2027 15:56:18 GMT\r\ncache-control: public, max-age=31536000\r\nage: 86134\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48532,"size_decoded":49344,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-10-13T18:41:50.360073Z","times_seen":316093,"resource_available":false,"data":null}},"time_used":75,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":42,"receive":33,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}