{"report_id":"0cc8ef96-ee8e-4630-82cb-c3b4613ecca3","version":0,"status":"done","tags":[],"date":"2026-08-15T18:48:01Z","url":{"schema":"http","addr":"stxrp-firelight.com/","fqdn":"stxrp-firelight.com","domain":"stxrp-firelight.com","tld":"com"},"ip":{"addr":"172.67.176.72","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"stxrp-firelight.com/","fqdn":"stxrp-firelight.com","domain":"stxrp-firelight.com","tld":"com"},"title":"Firelight — Early Contributor Rewards","dom":{"size":14004,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (5917)","md5":"f564209e363b33c8a9a1294217e19470","sha1":"896d45e54ef433e947a984e624cf73a9760f2930","sha256":"17c6d20aaf951ba9f8dc95efcd00154dd7cfe4a6e0c5d6612d96d9120cafe537","sha512":"f0a92024024bdd56a3c45a8cfa0f518dc49ff2ae779177f4e2b3f48f5a1f59b530e36054f0a5628d24c109159268414020038e569b7e77c3ba0a82eccb4cb893","ssdeep":"192:YlFxF2yVQaWOLWDIKf27yVCjNsjufopR5/7iwcJ9+ZNoauu2aS+IQDhaolV1+Os:6FLLQdTf8SrI81Zs","tlshash":"e852eae5d635610a65234e07338f6bd72188a70368138a5cfacd72a4cfc554af9f0f69","dom_hash":"domhash82004b857ce97ad8ac2a7d186db1163d","first_seen":"2026-07-26T12:40:10.946156Z","last_seen":"2026-08-15T18:48:05.100511Z","times_seen":3,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"stxrp-firelight.com/","fqdn":"stxrp-firelight.com","domain":"stxrp-firelight.com","tld":"com"},"ip":{"addr":"172.67.176.72","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-09-19T18:48:01Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-15","alert":"Sinkholed","trigger":"stxrp-firelight.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"stxrp-firelight.com","ip":{"addr":"172.67.176.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":5,"request_count":5,"received_data":131397,"sent_data":2505,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"app.firelight.finance","ip":{"addr":"52.84.50.63","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2025-03-05","domain_rank":0,"first_seen":"2026-07-26T12:40:06.581971Z","last_seen":"2026-07-26T12:40:06.581971Z","alert_count":0,"request_count":1,"received_data":2935,"sent_data":561,"comment":"","tags":null,"fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":null,"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"stxrp-firelight.com/css2.css","fqdn":"stxrp-firelight.com","domain":"stxrp-firelight.com","tld":"com"},"ip":{"addr":"172.67.176.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://stxrp-firelight.com/","date":"2026-08-15T18:47:33.940Z","timestamp":1786819653940,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"stxrp-firelight.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 13 Aug 2026 10:08:39 GMT","end":"Wed, 11 Nov 2026 11:07:12 GMT"},"fingerprint":{"sha1":"6D:37:44:22:B2:F3:E2:D4:D1:7F:BA:63:3F:ED:AD:F4:3C:51:66:E3","sha256":"11:12:01:78:BE:11:87:F2:DE:87:F9:D9:15:EF:01:F3:33:D5:B7:7F:F4:B7:1E:4F:7F:73:D8:28:3D:DF:4E:DA"}}},"request":{"raw":"GET /css2.css HTTP/1.1\r\nHost: stxrp-firelight.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://stxrp-firelight.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/css;charset=utf-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Thu, 13 Aug 2026 16:04:24 GMT\r\ndate: Sat, 15 Aug 2026 18:47:34 GMT\r\nserver: cloudflare\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=T4eyqCRch0u%2B8JcPQY1ekGzM%2FN%2ByBWfPu0SDL4zs%2FowqcNIooAloggKem2KaYQaZJTq3oLGMzZFjaGmYstvYX6tLAVrmEU9OOrS%2F5grNjm50%2Fw0IcyYdjgGfdGNc9sAvwxQN6Ph%2F\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\netag: W/\"fec215f34a5adcbd4da9c8cd3917db02\"\r\ncf-ray: a2ba5e551f6335a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3188,"size_decoded":1125,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"fec215f34a5adcbd4da9c8cd3917db02","sha1":"c2c076a63d951733d7a4b7128d0f06c418e9ed99","sha256":"12c4f1418f6c9f536596d2cd2e920e9e6ede5e0730feeb307145d087a9bf7982","sha512":"16d4999a00cc6d90a49b00afee52d73e7c235ea162940314ef0627e77bfe50d128ff52a5049ef02e9999e8a12b13b1a0aa255a81ac9feea4044050da89580989","ssdeep":"","tlshash":"ad618740086a6510e7a75cc46acd7f22ea1eb19064569d34bffe044cbcabc7d5372b8d","first_seen":"2026-07-26T12:40:10.953634Z","last_seen":"2026-08-15T18:48:05.101886Z","times_seen":3,"resource_available":false,"data":null}},"time_used":243,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":243,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-15","alert":"Sinkholed","trigger":"stxrp-firelight.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"app.firelight.finance/assets/images/logo.svg","fqdn":"app.firelight.finance","domain":"firelight.finance","tld":"finance"},"ip":{"addr":"52.84.50.63","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://stxrp-firelight.com/","date":"2026-08-15T18:47:33.952Z","timestamp":1786819653952,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"app.firelight.finance","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Sat, 29 Nov 2025 00:00:00 GMT","end":"Mon, 28 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"3D:2D:EF:4B:E5:67:B3:AA:C9:C8:82:4E:C4:C1:0F:75:A6:23:B6:1A","sha256":"E3:05:F7:19:A2:10:B5:51:E8:2C:DF:D9:79:03:E7:72:8F:6D:8C:96:48:BB:A4:6E:31:FF:7C:4C:46:3B:2A:8F"}}},"request":{"raw":"GET /assets/images/logo.svg HTTP/1.1\r\nHost: app.firelight.finance\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://stxrp-firelight.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: image/svg+xml\r\nlast-modified: Wed, 10 Jun 2026 19:25:19 GMT\r\nserver: AmazonS3\r\nx-amz-server-side-encryption: AES256\r\ncontent-encoding: br\r\ndate: Sat, 15 Aug 2026 18:35:28 GMT\r\netag: W/\"11a6a1a89600a9422e8683a15b34fdda\"\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 d85ed2d2deba50aaf4938eae2cbcf3ac.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: J62_3HjAVR7F1aT1jsyMe_25BpqOUaogEjHkQ_bdohfs6VWwmzpZbA==\r\nage: 727\r\ncontent-security-policy: frame-ancestors 'none'; form-action 'none'; default-src 'self'; font-src 'self' https://fonts.googleapis.com https://fonts.gstatic.com https://fonts.gstatic.com/s/inter/v18/*; img-src 'self' blob: data:; script-src 'self' https://plausible.io/js/pa-Pm6xw8sGekzhsPno_ITC5.js 'sha256-s3GjtVo80AO5y21xNb09L193qY2mDVWzcLbCiBHrn4s='; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://fonts.gstatic.com https://fonts.gstatic.com/s/inter/v18/*; connect-src 'self' https://api.firelight.finance https://5qy9ezt4rk.execute-api.us-east-1.amazonaws.com https://api.firelight.finance https://flare-api.flare.network https://plausible.io https://*.walletconnect.org https://*.walletconnect.com wss://relay.walletconnect.com wss://relay.walletconnect.org https://api.web3modal.org wss://www.walletlink.org https://*.quiknode.pro; frame-src 'self' https://verify.walletconnect.com/ https://verify.walletconnect.org/;\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":1489,"size_decoded":2252,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"11a6a1a89600a9422e8683a15b34fdda","sha1":"335bc26bc3953c717f5bde840e9910875616daf4","sha256":"07c028e362713d47151f9648fb88f82202602f5fca7d9792970c45f9288ee5b6","sha512":"c89a74fb56a8ba39b98e5cd63b47386603508003a296b728b750a697caa3777e124cdab815c9c0c8d3d040d51e83e9ce916cd581d81f4d9664b0b6fbd6f7323b","ssdeep":"","tlshash":"423117f99c8c65d5f446d3e4ce06547067ae10b33991cb054765a58ab22817d1cccf69","first_seen":"2026-07-26T12:40:10.955841Z","last_seen":"2026-08-15T18:48:05.102682Z","times_seen":3,"resource_available":false,"data":null}},"time_used":319,"timings":{"blocked":-1,"dns":233,"connect":1,"send":0,"wait":64,"receive":0,"ssl":20},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"stxrp-firelight.com/rP2Yp2ywxg089UriI5-g4vlH9VoD8Cmcqbu0-K4.woff2","fqdn":"stxrp-firelight.com","domain":"stxrp-firelight.com","tld":"com"},"ip":{"addr":"172.67.176.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://stxrp-firelight.com/","date":"2026-08-15T18:47:34.202Z","timestamp":1786819654202,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"stxrp-firelight.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 13 Aug 2026 10:08:39 GMT","end":"Wed, 11 Nov 2026 11:07:12 GMT"},"fingerprint":{"sha1":"6D:37:44:22:B2:F3:E2:D4:D1:7F:BA:63:3F:ED:AD:F4:3C:51:66:E3","sha256":"11:12:01:78:BE:11:87:F2:DE:87:F9:D9:15:EF:01:F3:33:D5:B7:7F:F4:B7:1E:4F:7F:73:D8:28:3D:DF:4E:DA"}}},"request":{"raw":"GET /rP2Yp2ywxg089UriI5-g4vlH9VoD8Cmcqbu0-K4.woff2 HTTP/1.1\r\nHost: stxrp-firelight.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://stxrp-firelight.com/css2.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: font/woff2\r\netag: \"7c87a648293fbb5b2924aafaa59e8aea\"\r\nlast-modified: Thu, 13 Aug 2026 16:04:24 GMT\r\ndate: Sat, 15 Aug 2026 18:47:34 GMT\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Spha9BWI1PJXDxZIK3%2FMQVIvN%2BaVnECz2YRWrzxsdXXVI%2BwhPVZmFguljmQVkqZGXhbWH7ozgtvJ7jUmaq5svyqRrTDIxaLyTOwX%2B9S1%2F0Fr7YQj7XIDh64X%2Bc3s4u5LUe8f%2FIW%2B\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2ba5e56bf9b35a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":36932,"size_decoded":37611,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 36932, version 1.0","md5":"7c87a648293fbb5b2924aafaa59e8aea","sha1":"c57593e0adc4cf99dd9e67cb782242220a061a9d","sha256":"9fea608a947e67020c33cad9a6fe3d60c54119dfb8cff87768a8117a15ed7543","sha512":"764ced325a768dca84e1fb0cc458818239ce379dbcbdb324ee8849bbe15f54e3f0254ae6e52ee5a92741840637b4f9885d246a0978af23176b3acfe5b9cec23f","ssdeep":"768:mMQPOAQQKW6GccoXQ+OGpHNzXgtDM0SVu7P3nqtPl9Bf2csDpHUjbYE8j2:mMQz4W5og+tpH6tDJku73EPlPOcs5U/l","tlshash":"c0f2f23e7ea5691487c2b0be506b00935344c9bd37c18121bbb953f44ea67addc5d63c","first_seen":"2025-09-11T17:08:25.889763Z","last_seen":"2026-08-15T20:22:37.31503Z","times_seen":33743,"resource_available":false,"data":null}},"time_used":324,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":196,"receive":128,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-15","alert":"Sinkholed","trigger":"stxrp-firelight.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"stxrp-firelight.com/rP2Yp2ywxg089UriI5-g4vlH9VoD8Cmcqbu0-K4.woff2","fqdn":"stxrp-firelight.com","domain":"stxrp-firelight.com","tld":"com"},"ip":{"addr":"172.67.176.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://stxrp-firelight.com/","date":"2026-08-15T18:47:34.204Z","timestamp":1786819654204,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"stxrp-firelight.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 13 Aug 2026 10:08:39 GMT","end":"Wed, 11 Nov 2026 11:07:12 GMT"},"fingerprint":{"sha1":"6D:37:44:22:B2:F3:E2:D4:D1:7F:BA:63:3F:ED:AD:F4:3C:51:66:E3","sha256":"11:12:01:78:BE:11:87:F2:DE:87:F9:D9:15:EF:01:F3:33:D5:B7:7F:F4:B7:1E:4F:7F:73:D8:28:3D:DF:4E:DA"}}},"request":{"raw":"GET /rP2Yp2ywxg089UriI5-g4vlH9VoD8Cmcqbu0-K4.woff2 HTTP/1.1\r\nHost: stxrp-firelight.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://stxrp-firelight.com/css2.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: font/woff2\r\netag: \"7c87a648293fbb5b2924aafaa59e8aea\"\r\nlast-modified: Thu, 13 Aug 2026 16:04:24 GMT\r\ndate: Sat, 15 Aug 2026 18:47:34 GMT\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7C2A91G5P98htChrahU9rUhCMYdADOUye3zvA36%2FR%2BqOiKzo1%2BZiln9rCpGiAm1bGTnZh1hlFH%2BvGVQEDCFFIoHYFQnXgSvAiAaSa5iJTZWzqqdOtk3Ja5Yn2esF7oCbGEq8MfGr\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2ba5e56cf9c35a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":36932,"size_decoded":37610,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 36932, version 1.0","md5":"7c87a648293fbb5b2924aafaa59e8aea","sha1":"c57593e0adc4cf99dd9e67cb782242220a061a9d","sha256":"9fea608a947e67020c33cad9a6fe3d60c54119dfb8cff87768a8117a15ed7543","sha512":"764ced325a768dca84e1fb0cc458818239ce379dbcbdb324ee8849bbe15f54e3f0254ae6e52ee5a92741840637b4f9885d246a0978af23176b3acfe5b9cec23f","ssdeep":"768:mMQPOAQQKW6GccoXQ+OGpHNzXgtDM0SVu7P3nqtPl9Bf2csDpHUjbYE8j2:mMQz4W5og+tpH6tDJku73EPlPOcs5U/l","tlshash":"c0f2f23e7ea5691487c2b0be506b00935344c9bd37c18121bbb953f44ea67addc5d63c","first_seen":"2025-09-11T17:08:25.889763Z","last_seen":"2026-08-15T20:22:37.31503Z","times_seen":33743,"resource_available":false,"data":null}},"time_used":364,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":196,"receive":168,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-15","alert":"Sinkholed","trigger":"stxrp-firelight.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"stxrp-firelight.com/rP2Yp2ywxg089UriI5-g4vlH9VoD8Cmcqbu0-K4.woff2","fqdn":"stxrp-firelight.com","domain":"stxrp-firelight.com","tld":"com"},"ip":{"addr":"172.67.176.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://stxrp-firelight.com/","date":"2026-08-15T18:47:34.207Z","timestamp":1786819654207,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"stxrp-firelight.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 13 Aug 2026 10:08:39 GMT","end":"Wed, 11 Nov 2026 11:07:12 GMT"},"fingerprint":{"sha1":"6D:37:44:22:B2:F3:E2:D4:D1:7F:BA:63:3F:ED:AD:F4:3C:51:66:E3","sha256":"11:12:01:78:BE:11:87:F2:DE:87:F9:D9:15:EF:01:F3:33:D5:B7:7F:F4:B7:1E:4F:7F:73:D8:28:3D:DF:4E:DA"}}},"request":{"raw":"GET /rP2Yp2ywxg089UriI5-g4vlH9VoD8Cmcqbu0-K4.woff2 HTTP/1.1\r\nHost: stxrp-firelight.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://stxrp-firelight.com/css2.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: font/woff2\r\netag: \"7c87a648293fbb5b2924aafaa59e8aea\"\r\nlast-modified: Thu, 13 Aug 2026 16:04:24 GMT\r\ndate: Sat, 15 Aug 2026 18:47:34 GMT\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=om3uZ2u5BmQShSlnoAQTT9G%2B7HOiphwWHQlLmd%2FV1FwsWUJIc3p6yrrdYxgKvAOuS8sN%2F2aVKS7EocMn5hIwV%2Fl65TSZ1V%2BUW1XUBHQsO9Pu4vcmNKji4WTtv1JJ9FOsgnervpun\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2ba5e56cf9d35a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":36932,"size_decoded":37612,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 36932, version 1.0","md5":"7c87a648293fbb5b2924aafaa59e8aea","sha1":"c57593e0adc4cf99dd9e67cb782242220a061a9d","sha256":"9fea608a947e67020c33cad9a6fe3d60c54119dfb8cff87768a8117a15ed7543","sha512":"764ced325a768dca84e1fb0cc458818239ce379dbcbdb324ee8849bbe15f54e3f0254ae6e52ee5a92741840637b4f9885d246a0978af23176b3acfe5b9cec23f","ssdeep":"768:mMQPOAQQKW6GccoXQ+OGpHNzXgtDM0SVu7P3nqtPl9Bf2csDpHUjbYE8j2:mMQz4W5og+tpH6tDJku73EPlPOcs5U/l","tlshash":"c0f2f23e7ea5691487c2b0be506b00935344c9bd37c18121bbb953f44ea67addc5d63c","first_seen":"2025-09-11T17:08:25.889763Z","last_seen":"2026-08-15T20:22:37.31503Z","times_seen":33743,"resource_available":false,"data":null}},"time_used":320,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":193,"receive":127,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-15","alert":"Sinkholed","trigger":"stxrp-firelight.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"stxrp-firelight.com/","fqdn":"stxrp-firelight.com","domain":"stxrp-firelight.com","tld":"com"},"ip":{"addr":"172.67.176.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-15T18:47:33.231Z","timestamp":1786819653231,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"stxrp-firelight.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 13 Aug 2026 10:08:39 GMT","end":"Wed, 11 Nov 2026 11:07:12 GMT"},"fingerprint":{"sha1":"6D:37:44:22:B2:F3:E2:D4:D1:7F:BA:63:3F:ED:AD:F4:3C:51:66:E3","sha256":"11:12:01:78:BE:11:87:F2:DE:87:F9:D9:15:EF:01:F3:33:D5:B7:7F:F4:B7:1E:4F:7F:73:D8:28:3D:DF:4E:DA"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: stxrp-firelight.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/html;charset=utf-8\r\npriority: u=0,i\r\nlast-modified: Thu, 13 Aug 2026 16:04:24 GMT\r\ndate: Sat, 15 Aug 2026 18:47:33 GMT\r\nserver: cloudflare\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nSDKJJGutMhbT6t%2B2myuGmUujPYROrX4oa1NLl015ItyaWyp1Wsc997WlHWpnb%2B%2Fx6k2atINuioCetBJM4vwSkP4%2BiJrWqmj3lxpWOzHhhQM%2Ba4WE0D8auImpINAQn3mOc4Y4t1w\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: zstd\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2ba5e50dea235a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14023,"size_decoded":6277,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (5924)","md5":"c2a8d51a9efa5bedd772ec8297e27cc1","sha1":"851f43db5e12892d12c9b3e90df05cb728144881","sha256":"74bae1db0912451a53e0ed1bc02551d483717f0cfa384fe88884e3429644ff4b","sha512":"052a1ed6cd76de36cccb3e6e699eb664e74fcd57e6bcb757c3d687137678e34ef3dee4a9777e6ee71ea3813b5a963ee2058c8f7f58466bf15a9b644eccab300c","ssdeep":"192:ZFxF2JVQaWOLWDIKf27yVCjNsjufopR5/7iwcJ9+ZNoauu2aS+IQDhaol21+Os:ZFL4QdTf8SrIl1Zs","tlshash":"e552e9e5d635610a64234e07338f6bd72188a70368138a5cfacd72a48fc554af9f0f69","first_seen":"2026-07-26T12:40:10.950584Z","last_seen":"2026-08-15T18:48:05.104189Z","times_seen":3,"resource_available":true,"data":null}},"time_used":369,"timings":{"blocked":-1,"dns":10,"connect":15,"send":0,"wait":249,"receive":95,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-15","alert":"Sinkholed","trigger":"stxrp-firelight.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}