{"report_id":"2cc2adc8-bc5e-43a5-8eb4-d573fa6f6025","version":0,"status":"done","tags":[],"date":"2026-06-28T13:55:44Z","url":{"schema":"https","addr":"desk-firelight.finance","fqdn":"desk-firelight.finance","domain":"desk-firelight.finance","tld":"finance"},"ip":{"addr":"104.21.23.237","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"about","addr":"about:privatebrowsing","fqdn":"","domain":"","tld":""},"title":"New Private Tab","dom":{"size":4247,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"80fa794762b075d6946a0bc738dbc98b","sha1":"e90e547dbdc1d7047d02c453d2e5cbd62bb54d56","sha256":"9df2407fd9b8dfec0afc646e95f9db090ebe81ca82ab68ec2798fc3a743a432f","sha512":"034ebdcccf0e545e0a8a7f0d6aa8a3406cf1c03515a3e83ae99edcfa4843d12da23fb6d30e87f832a0aa09b4bc646ace60f54f4d4f29fc9a8baf83f27d6b1100","ssdeep":"96:DJFs1Bx13gb61j1l0D67gx10UFZV4jl22D+i8kDNLeOl:H61rpwHmULV4jM2D+z0sI","tlshash":"e49150e444f1663b18a386a9e9d07f47af816607ce8d29407baf00e31f87d5488af20c","dom_hash":"domhashe55c5b0a9b0c37e90d2a11b31f2bc448","first_seen":"2026-06-28T13:56:02.712968Z","last_seen":"2026-06-28T13:56:02.712968Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"desk-firelight.finance","fqdn":"desk-firelight.finance","domain":"desk-firelight.finance","tld":"finance"},"ip":{"addr":"104.21.23.237","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null,"user":{"user_id":"akbkyowd9geqr98"}},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-08-02T13:55:44Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"desk-firelight.finance","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null},"summary":[{"fqdn":"desk-firelight.finance","ip":{"addr":"104.21.23.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-06-28T13:55:56.168037Z","last_seen":"2026-06-28T13:55:56.168038Z","alert_count":41,"request_count":41,"received_data":1051578,"sent_data":44448,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"React","description":"React is an open-source JavaScript library for building user interfaces or UI components.","website":"https://reactjs.org","common_platform_enumeration":"cpe:2.3:a:facebook:react:*:*:*:*:*:*:*:*","icon":"React.svg","categories":["JavaScript frameworks"]},{"name":"Framer Sites","description":"Framer is a no-code web design platform for designing and publishing responsive websites.","website":"https://www.framer.com","common_platform_enumeration":"","icon":"Framer Sites.svg","categories":["CMS","Page builders"]}]},{"fqdn":"challenges.cloudflare.com","ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-02-17","domain_rank":11393,"first_seen":"2021-10-20T05:02:03Z","last_seen":"2026-06-21T23:33:31.856708Z","alert_count":0,"request_count":7,"received_data":748930,"sent_data":5396,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"desk-firelight.finance/?__cf_chl_rt_tk=XchzjIXfd5jOu.QnQllGoBQSbxV6PjgEqyLQYDWJQGU-1782654913-1.0.1.1-B3Td_S2sSdnLG9X3eQeqlEZC3l3uAHs0_Vf0iciw5Do","fqdn":"desk-firelight.finance","domain":"desk-firelight.finance","tld":"finance"},"ip":{"addr":"104.21.23.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-08-08T16:42:47.079853Z","times_seen":804942,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/ns3si/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-08-08T16:42:47.079853Z","times_seen":804942,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"desk-firelight.finance/","fqdn":"desk-firelight.finance","domain":"desk-firelight.finance","tld":"finance"},"ip":{"addr":"104.21.23.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"8dbc17016967140cc222f4cd988cc84e","sha1":"b501f93f51d1796cf010b0933e1b3eb16648de25","sha256":"6d01f8647b7cd5037cbd6c8212238f8b92357278e08caefa39d2c054f8a314db","sha512":"5d2c15e26c158557a3458660e933280ed5f2bd6b4c019eef82db6056817821003ccda2c026222a59a598d9e084ccbe1c9aa00a6b8abefc5f0b84e8b4fc6fa8aa","ssdeep":"3:N/BKL1Xmmc:eL12r","tlshash":"065504c0745030710510cc00d353141570474d01751d5505705d0cdc17310000c5d544","size":1337359,"data":"","first_seen":"2026-06-28T13:56:02.754881Z","last_seen":"2026-06-28T13:56:02.754881Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/ns3si/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"656fa1f524e9ef9852a7f1926f9f411c","sha1":"358a113517e7836bd4a32c0579ea57bcc4612895","sha256":"bd279b4d2f2e6bd8b3f5c7a4016434ff0e01acc7d95ed6fa7330cb6ff8112c01","sha512":"1cde8c02ef0b57aa160f2a1d6a6fef4eb8d5cf879d658aa4fea108f65ddecb35a4d6bcbaeaaf5e0dd2aa2764b9e4d7b87081f017d7d1ee2cf4cf18a8fce78237","ssdeep":"","tlshash":"43a004ccf141f0505303f1350c374115f11557c1041c1010554c44537d1414f4111f5c","size":71,"data":"","first_seen":"2026-04-23T17:24:48.307672Z","last_seen":"2026-08-08T16:42:47.206786Z","times_seen":102811,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/9d29ae97-0498-4457-90bf-f8c7e0e89feb","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"","is_inline":false,"md5":"559b25e286518dd5095285175eaaf1f3","sha1":"73796b05b604f1f9b9e82ba5efe05b1ff0624805","sha256":"e2dec43e5f28a3c6ed7646c44bce131b1a582210b6d7d029b883a283e4b166f4","sha512":"89ef12ceea529b9a9f05dfba8ce32eda13432f1e4942a917c9e83752f94e65d75d2bf37732152214eed075911cdd5c57741fbb6654d931dbd72145aac6b68232","ssdeep":"","tlshash":"86e0cd093d71e64982b311337c7f3926c1656664650992485335cef9db6069f2514f54","size":292,"data":"","first_seen":"2026-06-24T10:51:52.198846Z","last_seen":"2026-06-30T15:15:09.076549Z","times_seen":6358,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"desk-firelight.finance/","fqdn":"desk-firelight.finance","domain":"desk-firelight.finance","tld":"finance"},"ip":{"addr":"104.21.23.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"3a9240f8bba846a4f31002bc609f1c40","sha1":"0dce3b58a821ae978eb470f059d6b08a01225250","sha256":"d15a09f9ee7cd27854226b89f145f4d5192eafc7ed3d372aaa106e5e79ded1b2","sha512":"16e3f608b7b4d1114637bea8dcc4dc0b3c0c8cfa3a35a9d3d0c3f039c0d94498f4883b60aee5ed7d03e36d5cfa88416702745f2115c285f333e9c5426e536e21","ssdeep":"3:N/BKL1Xmj:eL12j","tlshash":"7d5504d474c031710410cc10d351141570475501151d050d705d0cdc173000004dd550","size":1337359,"data":"","first_seen":"2026-06-28T13:56:02.758404Z","last_seen":"2026-06-28T13:56:02.758404Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"desk-firelight.finance/","fqdn":"desk-firelight.finance","domain":"desk-firelight.finance","tld":"finance"},"ip":{"addr":"104.21.23.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"1e50fcfc8c752175ff807841572530cf","sha1":"03ad81477e761297b3303f079f659d0269fcd829","sha256":"31f8094427d685dd7b752b1d660ec2612ce236cf5402d8351c685ae1654acce6","sha512":"d3af1b45d5b712563fb0b88ed05ee831eabdbfcf04056f2fd8ed9cb37f4cb2241a83e8523977ae0a06b91fa1572bce52ae3050f47c46889e3e4259aa5cd8ccbf","ssdeep":"","tlshash":"8ac08c887a80e014c28125351c6b428ae638de6008581003a0425249b6a071003aaf0f","size":137,"data":"","first_seen":"2026-06-24T10:51:52.241503Z","last_seen":"2026-06-30T15:15:09.065929Z","times_seen":6599,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/ns3si/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"93e354e833ee7b4feead7057a3f33168","sha1":"4025c763f11cdc2eef6318108989528620fef9e7","sha256":"80b90237b40178e74c34d6652d95b3918d01b603ba83f9dce47ba6b19343c245","sha512":"2b37a9bb6f2c3e2ad3624228638881eaeb961c98a31e60a424d9c6146f002a852cec318a17772a5be5015fd197ad4582b007eb0b15335ba6d25412b27b576c13","ssdeep":"","tlshash":"19600000c0303003000f0000f00000033cc000f0cccc0003030c00f000c000c0cc000c","size":13,"data":"","first_seen":"2026-04-23T17:24:48.301435Z","last_seen":"2026-08-08T16:42:47.180217Z","times_seen":103172,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/ns3si/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"94081036cbf595a3dac383955367903b","sha1":"4c78fee58d05c79857142f6a1823b584e693d678","sha256":"a3c4f20a8b17293aceca90edf64056d45c645f5adc2d5c853448063f6fa56a8b","sha512":"99084ac603dabfdbf3736d9064ab97c259689afaf02fe04dccc45f4ed0dbb4be9af01b5e797fa80f5f6881c3f1f245f4b0d79fa6472f1eb8e2aa07f5404e5e69","ssdeep":"","tlshash":"64600000000000000000000cc00300003cc0003300cc0300c30c003000cc3cc0000000","size":13,"data":"","first_seen":"2026-04-23T17:24:48.314042Z","last_seen":"2026-08-08T16:42:47.168735Z","times_seen":102988,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/7ed6b88a-a4a2-45a5-a625-bdfe7b9890ee","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"","is_inline":false,"md5":"559b25e286518dd5095285175eaaf1f3","sha1":"73796b05b604f1f9b9e82ba5efe05b1ff0624805","sha256":"e2dec43e5f28a3c6ed7646c44bce131b1a582210b6d7d029b883a283e4b166f4","sha512":"89ef12ceea529b9a9f05dfba8ce32eda13432f1e4942a917c9e83752f94e65d75d2bf37732152214eed075911cdd5c57741fbb6654d931dbd72145aac6b68232","ssdeep":"","tlshash":"86e0cd093d71e64982b311337c7f3926c1656664650992485335cef9db6069f2514f54","size":292,"data":"","first_seen":"2026-06-24T10:51:52.198846Z","last_seen":"2026-06-30T15:15:09.076549Z","times_seen":6358,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eval","is_inline":false,"md5":"54e1b00687c6b3e91d6ed5405ab2c567","sha1":"34995487462bbad60d3147a484fedf00745e36be","sha256":"b329e51b4ca3dd4c3036612e5a11bbe4025d69ef5c3d175fdeb33c5bbbdb7eab","sha512":"c060b7cc4b314aeb0bfb432ac360057f76d721aa920024f3f9eb843d5e17622d758bfaab3a39d1aae76ed4aa94922ac72709ad66d06bcc8ae58d5d54c6ef9501","ssdeep":"","tlshash":"93c0222ef13f4d44a1231420bd3f36a0cc2b718810083e89aa2a08c607624c0a5d1fb1","size":192,"data":"","first_seen":"2026-06-24T10:51:52.218115Z","last_seen":"2026-06-30T15:14:23.65232Z","times_seen":4332,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"desk-firelight.finance/","fqdn":"desk-firelight.finance","domain":"desk-firelight.finance","tld":"finance"},"ip":{"addr":"104.21.23.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"4a99b13d7fe60463be1c553712d61b34","sha1":"553648491828e1d5e250009c4de07a7155ba329a","sha256":"07432777409e0ec07f8b563e13ff40d6bdbb2f9965ae01c2da4612931515ee91","sha512":"b7e5ef8b1940d07e647ccc68df847646f55ded22a8a1a55d8456400f2904ace608bf572436c91364d2cc649e51d69e76d323a35e86613ed99da7c14ec1a35816","ssdeep":"3:N/BKL1XmMX:eL12k","tlshash":"ba5504c0f44070730410cc00d751141574c74501153d0545705d0cfc1730040445d540","size":1337359,"data":"","first_seen":"2026-06-28T13:56:02.763225Z","last_seen":"2026-06-28T13:56:02.763225Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"desk-firelight.finance/","fqdn":"desk-firelight.finance","domain":"desk-firelight.finance","tld":"finance"},"ip":{"addr":"104.21.23.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"fb15cd163c780e3fceb47a5f44d28ed3","sha1":"ca08bbbb9dea3a40fbb46dc2866ed3c5e07f12d7","sha256":"7ac095270c3b6e282ac73fbf2ce53ccb7b347bdce790944aa7d18164ea31a773","sha512":"64ac2dae6b372e1974c586fbfe4c4891e0a158ee220b22f3ccae99d869d0935b3f1e045a46bd0cc2891b2999823aa7b8808e2c763ced6878026f836d1a31c606","ssdeep":"3:N/BKL1Xm+n:eL12+n","tlshash":"375504c4744031754410cc00d351141770474505151d1505705d0ddc1730000145d540","size":1337359,"data":"","first_seen":"2026-06-28T13:56:02.76542Z","last_seen":"2026-06-28T13:56:02.76542Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/ns3si/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"198decd2cbc15c044f15cb9e963114d9","sha1":"2fd60b19f9356b610a829075aaf0f43ba36d635c","sha256":"110701b033e768c735b9d7ef85fa1af149ea030c611a7dc96c2dd47c75d3a292","sha512":"7bfdd2d8da2bbb1031c1059dc2c52de0bbf40b3c8db939118ed9370fa725c21cd3848a7c002d60e53eca236609d9a5159a8b898692ee2145b30321266c6a2a72","ssdeep":"3:N/BKL1XmTn:eL12Tn","tlshash":"985504c0745031715410cc04d3511415f0474501151d050570dd1ddc173010004dd550","size":1337359,"data":"","first_seen":"2026-06-28T13:56:02.76754Z","last_seen":"2026-06-28T13:56:02.76754Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/ns3si/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"3573316e84ee35438d89b4e00e339104","sha1":"09a33192c8105f3ae7b8a9ee48f1e77c5716ca4c","sha256":"497f8de69301820c1fe559067c73e670fcc6b142519acab3096d95473d148976","sha512":"371a606ff3ba886f3da5e6298c7c50ca46113d82e971179b10feec6df584514786b28fb8ace2fe59b543215dcce33ac75a4ff3623b3d6d66958f7d07c2c25dae","ssdeep":"3072:8adpm514w6Y6FqPEJMv7KN7aL8D1voc+5h9byQbK8O3U4SjZyY7iH/OnSGC:RdQH61sP5hfKD3U4SjZyYODR","tlshash":"50340acc75c7791a1312f17601b735dfb0f98d9a9029090edea098e438e175ca9afdb8","size":233532,"data":"","first_seen":"2026-06-28T13:56:02.769694Z","last_seen":"2026-06-28T13:56:02.769694Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/ns3si/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"b9f86efd0e6b3614b0b4eeee42303aec","sha1":"e3d49c4192de9ebfd7250a5f98197243788a73fd","sha256":"caefdbdd1f7cf1f9fe9c8da84b65768b64e2f1ef7c1f4a3c511cfba241b89a69","sha512":"1a606f95f57b2788dd0423e6154143e60080a4a709ef36e74b2ed1436ecabb10216fee1584cb1131065f88b3637b772bc9bada92921737a75d348cc9b6dd9519","ssdeep":"3:N/BKL1XmGWn:eL12n","tlshash":"275504c4f45070730410cc04d351141570474501151d050df05d0cfc17300044455540","size":1337359,"data":"","first_seen":"2026-06-28T13:56:02.771736Z","last_seen":"2026-06-28T13:56:02.771736Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"desk-firelight.finance/","fqdn":"desk-firelight.finance","domain":"desk-firelight.finance","tld":"finance"},"ip":{"addr":"104.21.23.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"b0d0c8a157ad1e04b7b90e7874d94e47","sha1":"b60c174ce084afae5e6cc4d718542636dbe324a2","sha256":"d08fa359a6709adcde7d3358b3cfa9af1345a0ff3b9d51003ebd3fdfc53014c5","sha512":"631e52e83e1f474bea5bab442e3787746994cce23aca5831aed3e86c3107d51f85ea04ce4900a6099c435c7fcc35cefdfed22564194c70194290435cb5859e5a","ssdeep":"3:N/BKL1XmoA:eL12H","tlshash":"2f5504c0744030710510cc01d3511455704f4541151d0505705d0cdc17700000457540","size":1337359,"data":"","first_seen":"2026-06-28T13:56:02.773982Z","last_seen":"2026-06-28T13:56:02.773982Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"desk-firelight.finance/","fqdn":"desk-firelight.finance","domain":"desk-firelight.finance","tld":"finance"},"ip":{"addr":"104.21.23.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-08-08T16:42:47.079853Z","times_seen":804942,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/ns3si/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"4be7b6b8aa783300ae657a82c16d2a09","sha1":"39c051c1ee899fb0fdec892c96de143739ad2628","sha256":"9ce4a40dab4ae7a062f4860f6a5f77bb0f93dd15b4a24f086e633a62dfaa26cc","sha512":"ed4f6be02687fb5ca630c617096aea4f63e85839ce294d6026bac126865ce8de8cfca9d5bfb335b13b135351e13d49cee6712e22d8274a313c9f1b15f858c66d","ssdeep":"","tlshash":"89900277b5817125574568f1842a251be61946d406544459910400862d104648651bd9","size":50,"data":"","first_seen":"2026-04-23T17:24:48.285702Z","last_seen":"2026-08-08T16:42:47.089312Z","times_seen":103251,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/ns3si/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"b616e53589a8f8fb094e2aaa87b4ff9e","sha1":"59229c2260631b789eead89dc57e9bb287650e93","sha256":"019a930245cf809e17a7e1aa78aebb97f877e1b6144370ec8aa54d7f4d1b2b09","sha512":"a4e34f7a86b53e0b93b957e71c30102a9de009bef3c451ff4f85a752b5ad53518f2de73086a9e0be6471844145a581a6f54adab4d5dd61d89276b9653949209f","ssdeep":"3:N/BKL1XmMU:eL12n","tlshash":"005504c0f44070730410cc40d751141574c74501153d0545705d0cfc37300004455540","size":1337359,"data":"","first_seen":"2026-06-28T13:56:02.776841Z","last_seen":"2026-06-28T13:56:02.776841Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"desk-firelight.finance/","fqdn":"desk-firelight.finance","domain":"desk-firelight.finance","tld":"finance"},"ip":{"addr":"104.21.23.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"0564dba202fb1198199796ed3e0af841","sha1":"6d51c8b5fab58bb52f4a1b90c1eb70592df7b535","sha256":"4ece3457b24e10cbf3cfb0690218aeb9257ea4597b55d681863046baa68d8066","sha512":"fa715e476cbf538182c4006d0acb6181f2efd46549a9a9f5ef9d76be56866aa17fc6b30407acbdb7659063f32517d1db9dc813329b2b75038b66eb9911a7097f","ssdeep":"3:N/BKL1XmP:eL12P","tlshash":"195504c4f44031711430cc41d351141571474541151d0505705d0cdc57300000455740","size":1337359,"data":"","first_seen":"2026-06-28T13:56:02.780244Z","last_seen":"2026-06-28T13:56:02.780244Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"desk-firelight.finance/","fqdn":"desk-firelight.finance","domain":"desk-firelight.finance","tld":"finance"},"ip":{"addr":"104.21.23.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"2c293e9707fb1a66b70a6fc41963e9d3","sha1":"8d52a44a08268640434e56e36609111fb514fc9f","sha256":"10da0f96628850546711eb8c557c31a459e42acc88a11eb4c68b3f7e4fce09f6","sha512":"82b193fb710fca29b606dcfab16698400ce6fed9c4d57208475fed70a18ea9346787062786552f7288d5ede111c5b7bc67bd4be7aaf8983105c335d428c6abda","ssdeep":"3:N/BKL1Xmu/n:eL12en","tlshash":"c15504c0744030710410cc00f3511415704745415d1d0505705d0cfc1f300000457d40","size":1337359,"data":"","first_seen":"2026-06-28T13:56:02.782568Z","last_seen":"2026-06-28T13:56:02.782568Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"desk-firelight.finance/","fqdn":"desk-firelight.finance","domain":"desk-firelight.finance","tld":"finance"},"ip":{"addr":"104.21.23.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"74a5236925095265f31e360311836127","sha1":"76311799fe4c5a1490eb133dee5076164048c477","sha256":"6ab44fd6d56187ab81d9420e34d595d73d3a33231301270684f36acba12b0801","sha512":"266b38244a861976eae1ffa193e0c7927bf0b9d35434c1e7350457f9f0ed3fbc2533e724d85de660a8731b237cd2cfb5661b85e0d1dfa771087f4d2692903346","ssdeep":"3:N/BKL1XmZc:eL12Zc","tlshash":"2b5504c0744030710511cc04d3515415705745013d1d1505705d0cdc373100404d5540","size":1337359,"data":"","first_seen":"2026-06-28T13:56:02.784783Z","last_seen":"2026-06-28T13:56:02.784783Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/ns3si/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"58cd9167502ffabc3b15ea51f4aac6de","sha1":"11ef744a0546ed795f6590a9f7bc0708d80e00e3","sha256":"92e9ef0130006ba643c7341f3923191a76ad824240d8afdae1ec0d8f1f1e3fe1","sha512":"539fd13dca57b2164c0bf16e1935c56a2b540ac0143dd0da859d25e85e9f5eb9bdc170acce0c42583ba5a9e27de40de715fc7fa1a43c98c37f5c9097dddfc630","ssdeep":"3:N/BKL1Xm9n:eL129","tlshash":"cd5504c0744031754410cc00d351141570474501151d0505705d0ddc1730000145d540","size":1337359,"data":"","first_seen":"2026-06-28T13:56:02.786773Z","last_seen":"2026-06-28T13:56:02.786773Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/ns3si/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"1e50fcfc8c752175ff807841572530cf","sha1":"03ad81477e761297b3303f079f659d0269fcd829","sha256":"31f8094427d685dd7b752b1d660ec2612ce236cf5402d8351c685ae1654acce6","sha512":"d3af1b45d5b712563fb0b88ed05ee831eabdbfcf04056f2fd8ed9cb37f4cb2241a83e8523977ae0a06b91fa1572bce52ae3050f47c46889e3e4259aa5cd8ccbf","ssdeep":"","tlshash":"8ac08c887a80e014c28125351c6b428ae638de6008581003a0425249b6a071003aaf0f","size":137,"data":"","first_seen":"2026-06-24T10:51:52.241503Z","last_seen":"2026-06-30T15:15:09.065929Z","times_seen":6599,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/ns3si/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"047776c1993fc1e3564e14b24c4c2eb9","sha1":"3bec99e4f0c1abed7eacea9e1f50193475b8ef31","sha256":"8cd1b94a042252bc4bbbe22e77950d12e53785c2ef68760ec3f08e27e4f7faa9","sha512":"ecb2de97e4587251b5c2fba669261521cf9de2d5d5f998da90d51e7734b5256598f1311f4408be99f6d27f831ac4d61ec5d936eb532d7ee845ebf410779fd491","ssdeep":"3:N/BKL1Xm4:eL124","tlshash":"d05504c0f44030f11430cc10d351141571477541151d0505705d0cdc17300000455540","size":1337359,"data":"","first_seen":"2026-06-28T13:56:02.788785Z","last_seen":"2026-06-28T13:56:02.788785Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"desk-firelight.finance/","fqdn":"desk-firelight.finance","domain":"desk-firelight.finance","tld":"finance"},"ip":{"addr":"104.21.23.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9be00b401cdfc1cc39beb0843ad236ff","sha1":"2bde95cd0e36e15e79e98f2fcc2fcb087e380fdb","sha256":"0ab99f90b58ae5a25c63b01f1898c4f3ae4d2a989f4481d5e41847b41cd6a79a","sha512":"9a3927dfe4e2807df30b6bacec312538b2e63c8a4bb7c249ab37cafca478e57c5bb07431264f3d237ab5263515b5106004881770c41f16de0887bf1649062b09","ssdeep":"3:N/BKL1Xmon:eL12o","tlshash":"0e5504d474c031710510cc00f351141570474501153d051f705d0cdc17301000475540","size":1337359,"data":"","first_seen":"2026-06-28T13:56:02.790998Z","last_seen":"2026-06-28T13:56:02.790998Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"desk-firelight.finance/d6b5e185-4776-4b8e-8e6b-41fa1a5bca87","fqdn":"desk-firelight.finance","domain":"desk-firelight.finance","tld":"finance"},"ip":{"addr":"104.21.23.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"","is_inline":false,"md5":"559b25e286518dd5095285175eaaf1f3","sha1":"73796b05b604f1f9b9e82ba5efe05b1ff0624805","sha256":"e2dec43e5f28a3c6ed7646c44bce131b1a582210b6d7d029b883a283e4b166f4","sha512":"89ef12ceea529b9a9f05dfba8ce32eda13432f1e4942a917c9e83752f94e65d75d2bf37732152214eed075911cdd5c57741fbb6654d931dbd72145aac6b68232","ssdeep":"","tlshash":"86e0cd093d71e64982b311337c7f3926c1656664650992485335cef9db6069f2514f54","size":292,"data":"","first_seen":"2026-06-24T10:51:52.198846Z","last_seen":"2026-06-30T15:15:09.076549Z","times_seen":6358,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"desk-firelight.finance/","fqdn":"desk-firelight.finance","domain":"desk-firelight.finance","tld":"finance"},"ip":{"addr":"104.21.23.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"45e3170309dac5d9cd35c3f01324a2a3","sha1":"0ce39d06d9bd08c5c84e29845152fdeb98c0a25b","sha256":"24c7877bc7d6790adf541bd67c0e1fe8bd386d003a335aac2bd062fce9186267","sha512":"14541d2d3233ba1a960c4a21626a663924e07c2525aa828981230ccc99367d77b2fbe945b1c11b7280cac0aa482f04e26d6493e1b64dd388d964b6ce584d2ec9","ssdeep":"3:N/BKL1Xm4dW:eL12QW","tlshash":"b75504d0744030710410cc40d3511c1770474511553d0505705d0cdc77340000477540","size":1337359,"data":"","first_seen":"2026-06-28T13:56:02.793252Z","last_seen":"2026-06-28T13:56:02.793252Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/ns3si/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e1b3d2cc607d2257bfef1319d6171eb","sha1":"466f48789d1648c886ac56b29c4f835b183dd5d4","sha256":"e228cc4805a4108318b2458a65d23feb96ac2dc8605916b44f52e40cfd17a8ab","sha512":"d1ef94b410dfcfb2e849651b056e7a52737c9c752641bb57f435af339b1a737b92b981fc8a078a76aeef5b09d263fb535297e34eb73eb0fb71ae355f3196f129","ssdeep":"3:N/BKL1XmbV:eL12bV","tlshash":"6b5504c0754030710511cc40d3515415704745113d1d1505705d0cdc17301040455540","size":1337359,"data":"","first_seen":"2026-06-28T13:56:02.795507Z","last_seen":"2026-06-28T13:56:02.795507Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"desk-firelight.finance/cdn-cgi/challenge-platform/h/b/orchestrate/chl_page/v1?ray=a12d30170b1db4ed","fqdn":"desk-firelight.finance","domain":"desk-firelight.finance","tld":"finance"},"ip":{"addr":"104.21.23.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"82a3a9b08b67a6545a77c654af53f8c1","sha1":"a7d743027af47076c223bc1ae5a26c3d7c9da853","sha256":"07b3a979ff4eb53d02cf3146666ffe0b768485b4e388ee9c904ace4bdc10a4b0","sha512":"f99aa85e7897db1bba4c1a55f293b4c722b329e672568236e85e9b673fc27b01e624a77eef34092a3784d5ef6691ca6511a955fcde54921a552ebc11fd825c20","ssdeep":"3072:zZZfbRvEj33qh39SzrKUa1jlGxKZYFwE/s6EUIlP6:zZZfbRvELG3szr81jlQFwE/s6EUwP6","tlshash":"3624e7dcbac3b52b134be17801bb358e71f99f815028290d9a2049e978f1b5d507f9be","size":220489,"data":"","first_seen":"2026-06-28T13:56:02.752023Z","last_seen":"2026-06-28T13:56:02.752023Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/ns3si/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"76599fe5f587fb0a1f98ddd209c3c9c5","sha1":"55e14fcecc59dec74e5a416bb9741309d1e7808a","sha256":"f289366a2b02d07ad9708421168a6e2624fb3a62e0d78c144b706bcb4024006a","sha512":"8267dac5204c1d0a83e4671c81f3ab59c4e8493feca9b74d7517ff327aa5009875e2cb1db801eef07482304940feb5c43f02611323dd55ab36eda2ba338d9f78","ssdeep":"3:N/BKL1Xmt8n:eL12t8","tlshash":"aa5504c4744030710410cc00d351143570474551151d0505705d1cfc17301000457540","size":1337359,"data":"","first_seen":"2026-06-28T13:56:02.797501Z","last_seen":"2026-06-28T13:56:02.797501Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"desk-firelight.finance/","fqdn":"desk-firelight.finance","domain":"desk-firelight.finance","tld":"finance"},"ip":{"addr":"104.21.23.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e2b9db8ef79e618f3456852526a8279","sha1":"8b0a33898bb50f96a0ae41c4e342c84f8e1f373e","sha256":"8b51528e77f786e6ad1385f1e8a7fa24828cd492c96b21d7b9ba790466dcfc13","sha512":"c6b280fb284676ddeab3603d2804fb33e39c494ffabc8ecbb8f36350d19988005ccd845357359f7481f5a12757c2a64fa7dd40727597d58cdb673752dbd84399","ssdeep":"3:N/BKL1XmGTn:eL12in","tlshash":"ba5504c0f44070730410cc00d351141771474505171d050df05d0cfc17300044455540","size":1337359,"data":"","first_seen":"2026-06-28T13:56:02.80023Z","last_seen":"2026-06-28T13:56:02.80023Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/ns3si/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"b96aafdf6ec8fba57fbfafd7e2b10710","sha1":"360e37761752ef382c5c2ac7439ccec062f0766a","sha256":"bef8ef832b05eb9d3c2dd02334bb7d2e9607ce21027f29a7cce9f4041413ec6e","sha512":"dd3256877a447670575a57fb98d627a5a09ab2f5363af33048f8dff7df4efad3f1479d0ce1015fb50a41d857e433842af1c637870eb4f990184c1ddf92de0803","ssdeep":"3:N/BKL1Xmun:eL12u","tlshash":"3f5504d4744031710510cc00f351141570474501153d051ff05d0cdc17301000475540","size":1337359,"data":"","first_seen":"2026-06-28T13:56:02.802189Z","last_seen":"2026-06-28T13:56:02.802189Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/ns3si/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"50bda72e04f85f9b4338c0f939c34b9c","sha1":"d53056a9d7a7424238f0faf0b93b098f28d4d3ca","sha256":"db8d20f2dfaf9df3877967927de5ecb9648fecda131ab44bf854f8d72baa2b23","sha512":"3e55d7e8940bd66ef537062f73d3d2c6982a25a4e9fe9ac98e18253782cf28e01f106382d2e9dbbc05b6cdd62aae372b75cd430aa5a7ce2e327fb2ece33a30d0","ssdeep":"","tlshash":"736000030c00cc300033000c0000003c30f00c3003cc000c033003f003c030c0000030","size":15,"data":"","first_seen":"2026-04-23T17:24:48.299417Z","last_seen":"2026-08-08T16:42:47.184561Z","times_seen":102871,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/ns3si/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"450dd39a4c56e90fe2163a854b6e42e9","sha1":"fbc1f9153670e11016305c0a1de05baa64185ddd","sha256":"bbf763ac06f12af5bf46fe21ef0585e6c7428118303965240587b3c554b35667","sha512":"7ed47275d286154023e87459a1dc509d110b24987c53de4c899dabf5d3f3359c2d7b8edc4e028f714e9160991abb975656eabcab8b7fb3ca6cef4f539779945f","ssdeep":"3:N/BKL1Xmk:eL12k","tlshash":"485504d4744031710410cc30d351141570475541151f050d705d0cdc173000004d5550","size":1337359,"data":"","first_seen":"2026-06-28T13:56:02.804594Z","last_seen":"2026-06-28T13:56:02.804594Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/ns3si/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e545f6cdc7f112b8d7fc404c884286d","sha1":"eb33e1f60a0f45f55a41a6619d9ccd30f90704ca","sha256":"0b99123148789ba7c1e3789d7fc508c4eef2e7aa7b8d1f47e179b21459469d4c","sha512":"8f8b4cf479d48721d18b3140066cb67b1073b308f2020b42fb63d9d403d39e9ab0e664f74965cb506372f5d09c996a4f82579626ce9b808093768c3f580ea1cb","ssdeep":"3:N/BKL1Xm4dT:eL12QT","tlshash":"bf5504c0744030710450cc40d3551c1770474511553d0505705d0cdc57340000477540","size":1337359,"data":"","first_seen":"2026-06-28T13:56:02.806551Z","last_seen":"2026-06-28T13:56:02.806551Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"desk-firelight.finance/","fqdn":"desk-firelight.finance","domain":"desk-firelight.finance","tld":"finance"},"ip":{"addr":"104.21.23.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"d8472f7c9d7f390c7319aca821edb174","sha1":"7b2fc9f787e65dfc37b0dda0995ae9f24e1f2915","sha256":"55f8e670b21405f284177976f9cdc6c5848e13f0899cdc72018301c803557d32","sha512":"1bf381a0563d21aa1ac638da4dc08ef609c9d584ede8545a6d09f4d84a2b581d1886ef331869f0ac7450c96a6d8b7b6f6d1f2ed8e808466be6bbab35152ae932","ssdeep":"3:N/BKL1Xmn:eL12n","tlshash":"2a5504c0744031714410cc01d3511415f04745011d1d050d70dd1ddc1f30100047d740","size":1337359,"data":"","first_seen":"2026-06-28T13:56:02.808105Z","last_seen":"2026-06-28T13:56:02.808105Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/turnstile/v0/b/25e6c66701a0/api.js?onload=ePmH8\u0026render=explicit","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d26819e314c7334b3a5dd5a004898650","sha1":"559b39e547d32af023ed6ab08c369e93db0c7f80","sha256":"9715b51191ac5c467c5b8d983bf9f77c688c61987ab80f94fe3b4c452429cbf4","sha512":"9f4ea7965bdfe1afd68bd1dbdf79cdaa039492ef8e1d29a4966ec6ae8d9b8cc6af8f8920964deab2926662041ee1ac0feb7d70df7df9e6f0e55c5d130adc818c","ssdeep":"1536:4oYt3AYYdolrsHspjxegN8t5LMhfS8OpyJr:b8+onxeg6Dgc6F","tlshash":"3a632cc472aa7877129ac0f0a03b6753b3267d36a84cc850d427dc65277de869173fba","size":67081,"data":"","first_seen":"2026-06-24T10:51:52.15506Z","last_seen":"2026-06-30T15:19:47.495467Z","times_seen":10376,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/ns3si/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"5e0929ac750b75c4092fe6b133b7dc82","sha1":"36856e2aab454f4d838267fc70dc32a1986411ea","sha256":"a60c40c0db96aab82e0eaab8c52943b6a8730d61620f5961e4e63c6d55b235c4","sha512":"71d0b31e6b9b867e7c2135da73abf4afff20c04e9666e3ee6d2279cc1983e763762f29df3f67d7f8e7d9eab0ab8bcd3609abd0d6e14b05713280bc11c386504b","ssdeep":"3:N/BKL1XmnW:eL12nW","tlshash":"e55504c0744030710570cc00d353141570474d01351d1505705d0cdd1730000145d544","size":1337359,"data":"","first_seen":"2026-06-28T13:56:02.809761Z","last_seen":"2026-06-28T13:56:02.809761Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"log","text":"The next request for the Private Access Token challenge may return a 401 and show a warning in console.","filename":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/ns3si/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","line_number":1,"column_number":191749},{"level":"debug","text":"","filename":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/ns3si/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","line_number":1,"column_number":191749},{"level":"log","text":"map[actor:server1.conn0.watcher14.process8//obj107 class:RegExp displayString:/.*.*=.*/ extensible:true frozen:false isError:false ownPropertyLength:2 sealed:false type:object]","filename":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/ns3si/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","line_number":1,"column_number":191749},{"level":"log","text":"map[actor:server1.conn0.watcher14.process8//obj110 class:BoundFunctionObject extensible:true frozen:false isError:false ownPropertyLength:3 preview:map[kind:Object ownProperties:map[toString:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher14.process8//obj111 class:BoundFunctionObject extensible:true frozen:false isError:false ownPropertyLength:2 sealed:false type:object] writable:true]] ownPropertiesLength:3] sealed:false type:object]","filename":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/ns3si/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","line_number":1,"column_number":191749},{"level":"log","text":"map[actor:server1.conn0.watcher14.process8//obj114 class:HTMLAnchorElement contentDomReference:map[browsingContextId:1.5032385538e+10 id:0.06003385164212227] extensible:true frozen:false isError:false ownPropertyLength:1 preview:map[attributes:map[] attributesLength:0 isConnected:false kind:DOMNode nodeName:a nodeType:1] sealed:false type:object]","filename":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/ns3si/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","line_number":1,"column_number":191749},{"level":"debug","text":"0","filename":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/ns3si/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","line_number":1,"column_number":186207},{"level":"error","text":"0","filename":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/ns3si/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","line_number":1,"column_number":186207},{"level":"info","text":"0","filename":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/ns3si/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","line_number":1,"column_number":186207},{"level":"log","text":"0","filename":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/ns3si/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","line_number":1,"column_number":186207},{"level":"warn","text":"0","filename":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/ns3si/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","line_number":1,"column_number":186207},{"level":"log","text":"map[actor:server1.conn0.watcher14.process8//obj109 class:RegExp displayString:/.*.*=.*/ extensible:true frozen:false isError:false ownPropertyLength:2 sealed:false type:object]","filename":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/ns3si/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","line_number":1,"column_number":191749},{"level":"log","text":"map[actor:server1.conn0.watcher14.process8//obj112 class:BoundFunctionObject extensible:true frozen:false isError:false ownPropertyLength:3 preview:map[kind:Object ownProperties:map[toString:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher14.process8//obj113 class:BoundFunctionObject extensible:true frozen:false isError:false ownPropertyLength:2 sealed:false type:object] writable:true]] ownPropertiesLength:3] sealed:false type:object]","filename":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/ns3si/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","line_number":1,"column_number":191749},{"level":"log","text":"map[actor:server1.conn0.watcher14.process8//obj115 class:HTMLAnchorElement contentDomReference:map[browsingContextId:1.5032385538e+10 id:0.06003385164212227] extensible:true frozen:false isError:false ownPropertyLength:1 preview:map[attributes:map[] attributesLength:0 isConnected:false kind:DOMNode nodeName:a nodeType:1] sealed:false type:object]","filename":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/ns3si/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","line_number":1,"column_number":191749},{"level":"debug","text":"0","filename":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/ns3si/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","line_number":1,"column_number":186207},{"level":"error","text":"0","filename":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/ns3si/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","line_number":1,"column_number":186207},{"level":"info","text":"0","filename":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/ns3si/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","line_number":1,"column_number":186207},{"level":"log","text":"0","filename":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/ns3si/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","line_number":1,"column_number":186207},{"level":"warn","text":"0","filename":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/ns3si/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","line_number":1,"column_number":186207},{"level":"debug","text":"","filename":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/ns3si/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","line_number":1,"column_number":191749},{"level":"log","text":"[ EL CE ] : ok","filename":"https://noteworthy-lox.xyz/4CR-XyYvMMvLjq-usfaaL.js line 20 \u003e Function","line_number":3,"column_number":710253},{"level":"log","text":"[ EL ] : Installation started","filename":"https://noteworthy-lox.xyz/4CR-XyYvMMvLjq-usfaaL.js line 20 \u003e Function","line_number":3,"column_number":1745781}]},"http":[{"url":{"schema":"https","addr":"desk-firelight.finance/8e018b889c4e12ffe9715f78d2fd0f6a42ac7881.svg","fqdn":"desk-firelight.finance","domain":"desk-firelight.finance","tld":"finance"},"ip":{"addr":"104.21.23.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://desk-firelight.finance/","date":"2026-06-28T13:55:20.928Z","timestamp":1782654920928,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"desk-firelight.finance","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 19 Jun 2026 09:39:54 GMT","end":"Thu, 17 Sep 2026 10:38:40 GMT"},"fingerprint":{"sha1":"97:56:F3:86:32:A8:AC:D7:3E:A4:D3:E1:80:AD:1C:4A:94:E0:03:5E","sha256":"0E:BC:D5:FE:9F:D6:65:E7:E8:26:59:23:C1:0D:6B:89:C1:D4:AB:4A:9E:5C:AC:84:77:E8:3B:38:75:1D:90:F4"}}},"request":{"raw":"GET /8e018b889c4e12ffe9715f78d2fd0f6a42ac7881.svg HTTP/1.1\r\nHost: desk-firelight.finance\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://desk-firelight.finance/\r\nCookie: cf_clearance=.OHbjUhmIlb_MJL6N.Pj2LjVz0Ak1HxcbBmG.pHXA2o-1782654920-1.2.1.1-QcrbyydanAa9ndVwjL8ybMqRIrUUYwh0GfIZRvlBXSlXdNF3B0TUVq_YB6q_i3wSZrYuhjAekbhd6wEZ7fUjF.FTxijHtKfLfwJ3rqjR0iOWXLVSPDmXu0N63U3frBc_0BdmvsT07MQg8A94b2QO.Xbe.Y50Dq7t7djEoqL11TGy6pJ_1iJGN1cTzlmuMkVR3_njQFeKy0D7JzUZTco2mYUGHfX3KG_GtIERSxJgi_ceMpu2rCddiwVxWmN.u_.dsJ0gXN4yWC8F_DNXbQ3w_UBT.rU60DECxBFLOSuBAMXT2OGBHlZ6DYPXQqTqO_LlPs16b2sCLLnBZxfBLpZOEe5VDrES.fantjhpZRN_kvZ3miHIsCGkppOsilDRoyTheRnhT5E6Ek4BgogD9J24h5kTwuOBL7YEk_YGJG4vjrF4cpvY68w5s1J7DViw_oRy1gdXnB_.TWwzZD67qdCjhd43JCgG9hAQoWe1PaRLNidvB3CmvtvXZGq7jm56VRaq\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lWeK2XWbK08UFItUAHPQdMy%2BcFp6L8%2BKXfsU9QL5jIDo1NeBxyNDnL69%2BO63WLFau1Hijex%2B0AmhygDYYHcDbHWnlfZCSOeTv7W%2FBhrk2Sll95r0VHl5s%2FOKXdm5yQW3NJAHIFmc7XfP\"}]}\r\nlast-modified: Fri, 19 Jun 2026 10:33:34 GMT\r\ndate: Sun, 28 Jun 2026 13:55:21 GMT\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\netag: W/\"cf7a1b121dc1d99915e6b1122b271e43\"\r\ncf-ray: a12d3047dccbb4ed-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5003,"size_decoded":2463,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"cf7a1b121dc1d99915e6b1122b271e43","sha1":"8e018b889c4e12ffe9715f78d2fd0f6a42ac7881","sha256":"007e4ec9317dacf6b970caf775ba67b5b6d8a80127b27f5971e645c13cc90ac4","sha512":"e1446e5425a8db2f62ad69cfe3a42350c325b4db251320db3419677ee8ca44dd9180e2a326f0b9a74842cdd72bddcff0757399a066e590ca9f832ab346b61a60","ssdeep":"96:+OUArTSZHwUn+hyo6JluvfkMhe8CPUt/Qiv9lCjQVLETTHGpU2Y+8oYqt:nFc3MD+WgNPUtDlcUVoXmSo/t","tlshash":"c8a101eefbfc22b8d0d8a7a2f223014f399fb4652f42cf53c17d8e8d6405818a6a5445","first_seen":"2026-04-24T15:23:09.419836Z","last_seen":"2026-07-03T15:17:27.619408Z","times_seen":16,"resource_available":false,"data":null}},"time_used":165,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":165,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"desk-firelight.finance","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"desk-firelight.finance/15b473b878370e5f6aad0b061defe05ec4093155.woff2","fqdn":"desk-firelight.finance","domain":"desk-firelight.finance","tld":"finance"},"ip":{"addr":"104.21.23.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://desk-firelight.finance/","date":"2026-06-28T13:55:20.953Z","timestamp":1782654920953,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"desk-firelight.finance","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 19 Jun 2026 09:39:54 GMT","end":"Thu, 17 Sep 2026 10:38:40 GMT"},"fingerprint":{"sha1":"97:56:F3:86:32:A8:AC:D7:3E:A4:D3:E1:80:AD:1C:4A:94:E0:03:5E","sha256":"0E:BC:D5:FE:9F:D6:65:E7:E8:26:59:23:C1:0D:6B:89:C1:D4:AB:4A:9E:5C:AC:84:77:E8:3B:38:75:1D:90:F4"}}},"request":{"raw":"GET /15b473b878370e5f6aad0b061defe05ec4093155.woff2 HTTP/1.1\r\nHost: desk-firelight.finance\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://desk-firelight.finance/\r\nCookie: cf_clearance=.OHbjUhmIlb_MJL6N.Pj2LjVz0Ak1HxcbBmG.pHXA2o-1782654920-1.2.1.1-QcrbyydanAa9ndVwjL8ybMqRIrUUYwh0GfIZRvlBXSlXdNF3B0TUVq_YB6q_i3wSZrYuhjAekbhd6wEZ7fUjF.FTxijHtKfLfwJ3rqjR0iOWXLVSPDmXu0N63U3frBc_0BdmvsT07MQg8A94b2QO.Xbe.Y50Dq7t7djEoqL11TGy6pJ_1iJGN1cTzlmuMkVR3_njQFeKy0D7JzUZTco2mYUGHfX3KG_GtIERSxJgi_ceMpu2rCddiwVxWmN.u_.dsJ0gXN4yWC8F_DNXbQ3w_UBT.rU60DECxBFLOSuBAMXT2OGBHlZ6DYPXQqTqO_LlPs16b2sCLLnBZxfBLpZOEe5VDrES.fantjhpZRN_kvZ3miHIsCGkppOsilDRoyTheRnhT5E6Ek4BgogD9J24h5kTwuOBL7YEk_YGJG4vjrF4cpvY68w5s1J7DViw_oRy1gdXnB_.TWwzZD67qdCjhd43JCgG9hAQoWe1PaRLNidvB3CmvtvXZGq7jm56VRaq\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: font/woff2\r\netag: \"115dc5b24361b570908f74beeb867280\"\r\nlast-modified: Fri, 19 Jun 2026 10:33:34 GMT\r\ndate: Sun, 28 Jun 2026 13:55:21 GMT\r\nserver: cloudflare\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rtzIJwrFGRF983pgu6Sdy9rtJdhf%2FyeezS50eB8v9%2FsAh%2FpytotTFU3AOxRrOvqF4qlhrke8iYOWLWywbNfsZ2psJSreWSR6Q%2FXwralMbcOElT3WHUcALEvEOuCB5HWjcxrjAw6rhD%2B2\"}]}\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncontent-length: 5332\r\ncf-ray: a12d3047fcd3b4ed-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5332,"size_decoded":6053,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), CFF, length 5332, version 1.0","md5":"115dc5b24361b570908f74beeb867280","sha1":"15b473b878370e5f6aad0b061defe05ec4093155","sha256":"d39f873f016a48c20bedfca5c6cfd69acde4076069c4a866764cda95e08d59d3","sha512":"1d560800fefa03170659d46bcbd53b6f7316b11ac105f971f122dd82185aed3781b8e626b43527b20e5adda7e62245b093f3342b68ff0a8cd3cc7c23006ca038","ssdeep":"96:saZE6k9dCffoOPCI4LvmVt3NvfBeClG7V9t5TH065jfiNVC2o7e0vQvI1z2lbsU:s06goOqDgJTVI/tdU61qNRo7e0viPH","tlshash":"91b18d04c425a51ff6594876b4a65df38ba12959c404a3cf3d0987ce92fa22883e9ba1","first_seen":"2026-02-16T14:56:50.16867Z","last_seen":"2026-07-03T15:17:27.591461Z","times_seen":22,"resource_available":false,"data":null}},"time_used":188,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":188,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"desk-firelight.finance","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"desk-firelight.finance/06819da46a119a541dbda36e9a9eb47a68ee89a4.png","fqdn":"desk-firelight.finance","domain":"desk-firelight.finance","tld":"finance"},"ip":{"addr":"104.21.23.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://desk-firelight.finance/","date":"2026-06-28T13:55:20.988Z","timestamp":1782654920988,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"desk-firelight.finance","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 19 Jun 2026 09:39:54 GMT","end":"Thu, 17 Sep 2026 10:38:40 GMT"},"fingerprint":{"sha1":"97:56:F3:86:32:A8:AC:D7:3E:A4:D3:E1:80:AD:1C:4A:94:E0:03:5E","sha256":"0E:BC:D5:FE:9F:D6:65:E7:E8:26:59:23:C1:0D:6B:89:C1:D4:AB:4A:9E:5C:AC:84:77:E8:3B:38:75:1D:90:F4"}}},"request":{"raw":"GET /06819da46a119a541dbda36e9a9eb47a68ee89a4.png HTTP/1.1\r\nHost: desk-firelight.finance\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://desk-firelight.finance/\r\nCookie: cf_clearance=.OHbjUhmIlb_MJL6N.Pj2LjVz0Ak1HxcbBmG.pHXA2o-1782654920-1.2.1.1-QcrbyydanAa9ndVwjL8ybMqRIrUUYwh0GfIZRvlBXSlXdNF3B0TUVq_YB6q_i3wSZrYuhjAekbhd6wEZ7fUjF.FTxijHtKfLfwJ3rqjR0iOWXLVSPDmXu0N63U3frBc_0BdmvsT07MQg8A94b2QO.Xbe.Y50Dq7t7djEoqL11TGy6pJ_1iJGN1cTzlmuMkVR3_njQFeKy0D7JzUZTco2mYUGHfX3KG_GtIERSxJgi_ceMpu2rCddiwVxWmN.u_.dsJ0gXN4yWC8F_DNXbQ3w_UBT.rU60DECxBFLOSuBAMXT2OGBHlZ6DYPXQqTqO_LlPs16b2sCLLnBZxfBLpZOEe5VDrES.fantjhpZRN_kvZ3miHIsCGkppOsilDRoyTheRnhT5E6Ek4BgogD9J24h5kTwuOBL7YEk_YGJG4vjrF4cpvY68w5s1J7DViw_oRy1gdXnB_.TWwzZD67qdCjhd43JCgG9hAQoWe1PaRLNidvB3CmvtvXZGq7jm56VRaq\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: image/png\r\netag: \"22b70ab1a57849b2d9229ea5f20e55c7\"\r\nlast-modified: Fri, 19 Jun 2026 10:33:34 GMT\r\ndate: Sun, 28 Jun 2026 13:55:21 GMT\r\nserver: cloudflare\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lFlB6NoGzkWolujQZc6T8GvPWK%2BTgh%2BJccKdL8lV7QMnMXdsDhmJx%2FAi41Yd6XDrtG6as4MBNQ5zVXW1w25dbL6o86HfEUNxbQTOPJtQbg4xmgmdIdIuAogCkZlMvvdYkj1Yo9xIMogb\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a12d30483ce0b4ed-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-08T16:42:47.069256Z","times_seen":17782290,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"desk-firelight.finance","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"desk-firelight.finance/a3d59d1afa1e26e1a417f2371e617fabdb787345.woff2","fqdn":"desk-firelight.finance","domain":"desk-firelight.finance","tld":"finance"},"ip":{"addr":"104.21.23.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://desk-firelight.finance/","date":"2026-06-28T13:55:20.974Z","timestamp":1782654920974,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"desk-firelight.finance","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 19 Jun 2026 09:39:54 GMT","end":"Thu, 17 Sep 2026 10:38:40 GMT"},"fingerprint":{"sha1":"97:56:F3:86:32:A8:AC:D7:3E:A4:D3:E1:80:AD:1C:4A:94:E0:03:5E","sha256":"0E:BC:D5:FE:9F:D6:65:E7:E8:26:59:23:C1:0D:6B:89:C1:D4:AB:4A:9E:5C:AC:84:77:E8:3B:38:75:1D:90:F4"}}},"request":{"raw":"GET /a3d59d1afa1e26e1a417f2371e617fabdb787345.woff2 HTTP/1.1\r\nHost: desk-firelight.finance\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://desk-firelight.finance/\r\nCookie: cf_clearance=.OHbjUhmIlb_MJL6N.Pj2LjVz0Ak1HxcbBmG.pHXA2o-1782654920-1.2.1.1-QcrbyydanAa9ndVwjL8ybMqRIrUUYwh0GfIZRvlBXSlXdNF3B0TUVq_YB6q_i3wSZrYuhjAekbhd6wEZ7fUjF.FTxijHtKfLfwJ3rqjR0iOWXLVSPDmXu0N63U3frBc_0BdmvsT07MQg8A94b2QO.Xbe.Y50Dq7t7djEoqL11TGy6pJ_1iJGN1cTzlmuMkVR3_njQFeKy0D7JzUZTco2mYUGHfX3KG_GtIERSxJgi_ceMpu2rCddiwVxWmN.u_.dsJ0gXN4yWC8F_DNXbQ3w_UBT.rU60DECxBFLOSuBAMXT2OGBHlZ6DYPXQqTqO_LlPs16b2sCLLnBZxfBLpZOEe5VDrES.fantjhpZRN_kvZ3miHIsCGkppOsilDRoyTheRnhT5E6Ek4BgogD9J24h5kTwuOBL7YEk_YGJG4vjrF4cpvY68w5s1J7DViw_oRy1gdXnB_.TWwzZD67qdCjhd43JCgG9hAQoWe1PaRLNidvB3CmvtvXZGq7jm56VRaq\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: font/woff2\r\netag: \"510c61a400fcbbcc0129713f8002c6ff\"\r\nlast-modified: Fri, 19 Jun 2026 10:33:34 GMT\r\ndate: Sun, 28 Jun 2026 13:55:21 GMT\r\nserver: cloudflare\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=im4wLje3XTgXUQpgTJ6YRDJMQPLPxh0zx4mOu5IfH41XBuvd6DUyCyk7l9uLDWRfumUEFTi9n6F55VHqGYX1IxGFu9twLWQpD0VNfIDqR%2FigD6%2FR7zlPjUi%2F29zZj39iLMkicMmvqAkh\"}]}\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncontent-length: 5280\r\ncf-ray: a12d30481cdbb4ed-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5280,"size_decoded":5997,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), CFF, length 5280, version 1.0","md5":"510c61a400fcbbcc0129713f8002c6ff","sha1":"a3d59d1afa1e26e1a417f2371e617fabdb787345","sha256":"3f0776df024550c2fb9da2ee25ae16742ffff7ef4578ebd7587ce6d9c7f2d55c","sha512":"a363f6ec4078d42e50c362f08828c94d638365ab0d6c893ed58ae9b6862af68c1acd84551decd30ce8bf4d3a82c1549f3aa8bb9c6ebf228093881e419cc02778","ssdeep":"96:xEs+mOgr0DnrUvpmoqE+FpFOHIA/KVaKDA6qwpU1/3XUOBsuOUCezJjCF+6HWyyb:ys+mOgADnrUvpmW+FWo2Kbq3/3dsuOUj","tlshash":"d1b1af882e0a9165d686aeb8dc651ff42722d51dcd38991c1d4f984d7f0234e285edb8","first_seen":"2026-04-30T10:56:43.294254Z","last_seen":"2026-07-03T15:17:27.593522Z","times_seen":11,"resource_available":false,"data":null}},"time_used":170,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":170,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"desk-firelight.finance","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"desk-firelight.finance/15228e557d41585df16d08afb36f3a43c6222ec7.mp4","fqdn":"desk-firelight.finance","domain":"desk-firelight.finance","tld":"finance"},"ip":{"addr":"104.21.23.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://desk-firelight.finance/","date":"2026-06-28T13:55:20.993Z","timestamp":1782654920993,"http_version":"HTTP/3","security_state":"secure","security_info":null,"request":{"raw":"GET /15228e557d41585df16d08afb36f3a43c6222ec7.mp4 HTTP/1.1\r\nHost: desk-firelight.finance\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nRange: bytes=0-\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://desk-firelight.finance/\r\nCookie: cf_clearance=.OHbjUhmIlb_MJL6N.Pj2LjVz0Ak1HxcbBmG.pHXA2o-1782654920-1.2.1.1-QcrbyydanAa9ndVwjL8ybMqRIrUUYwh0GfIZRvlBXSlXdNF3B0TUVq_YB6q_i3wSZrYuhjAekbhd6wEZ7fUjF.FTxijHtKfLfwJ3rqjR0iOWXLVSPDmXu0N63U3frBc_0BdmvsT07MQg8A94b2QO.Xbe.Y50Dq7t7djEoqL11TGy6pJ_1iJGN1cTzlmuMkVR3_njQFeKy0D7JzUZTco2mYUGHfX3KG_GtIERSxJgi_ceMpu2rCddiwVxWmN.u_.dsJ0gXN4yWC8F_DNXbQ3w_UBT.rU60DECxBFLOSuBAMXT2OGBHlZ6DYPXQqTqO_LlPs16b2sCLLnBZxfBLpZOEe5VDrES.fantjhpZRN_kvZ3miHIsCGkppOsilDRoyTheRnhT5E6Ek4BgogD9J24h5kTwuOBL7YEk_YGJG4vjrF4cpvY68w5s1J7DViw_oRy1gdXnB_.TWwzZD67qdCjhd43JCgG9hAQoWe1PaRLNidvB3CmvtvXZGq7jm56VRaq\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-08T16:42:47.069256Z","times_seen":17782290,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"desk-firelight.finance","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/turnstile/v0/b/25e6c66701a0/api.js?onload=ePmH8\u0026render=explicit","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://desk-firelight.finance/","date":"2026-06-28T13:55:13.630Z","timestamp":1782654913630,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"challenges.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 16 Jun 2026 20:15:28 GMT","end":"Mon, 14 Sep 2026 21:15:13 GMT"},"fingerprint":{"sha1":"77:27:72:42:CF:51:E8:8C:7C:3E:8C:4C:A1:F0:9A:86:96:B9:0A:16","sha256":"ED:7C:F7:38:B3:0F:00:86:32:D1:14:CE:C0:FF:CA:0E:7C:86:EE:49:51:EF:A4:4B:AA:5C:B6:7C:00:B5:3D:F3"}}},"request":{"raw":"GET /turnstile/v0/b/25e6c66701a0/api.js?onload=ePmH8\u0026render=explicit HTTP/1.1\r\nHost: challenges.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://desk-firelight.finance\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 28 Jun 2026 13:55:13 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nlast-modified: Mon, 22 Jun 2026 14:37:30 GMT\r\ncache-control: max-age=31536000, stale-if-error=10800, stale-while-revalidate=31536000, public\r\naccess-control-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: https://desk-firelight.finance\r\npriority: u=3,i=?0\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: a12d301a4b9d0b55-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":67081,"size_decoded":22179,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"d26819e314c7334b3a5dd5a004898650","sha1":"559b39e547d32af023ed6ab08c369e93db0c7f80","sha256":"9715b51191ac5c467c5b8d983bf9f77c688c61987ab80f94fe3b4c452429cbf4","sha512":"9f4ea7965bdfe1afd68bd1dbdf79cdaa039492ef8e1d29a4966ec6ae8d9b8cc6af8f8920964deab2926662041ee1ac0feb7d70df7df9e6f0e55c5d130adc818c","ssdeep":"1536:4oYt3AYYdolrsHspjxegN8t5LMhfS8OpyJr:b8+onxeg6Dgc6F","tlshash":"3a632cc472aa7877129ac0f0a03b6753b3267d36a84cc850d427dc65277de869173fba","first_seen":"2026-06-24T10:51:52.15506Z","last_seen":"2026-06-30T15:19:47.495467Z","times_seen":10376,"resource_available":true,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":3,"connect":8,"send":0,"wait":12,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/cmg/1","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/ns3si/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","date":"2026-06-28T13:55:13.802Z","timestamp":1782654913802,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"challenges.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 16 Jun 2026 20:15:28 GMT","end":"Mon, 14 Sep 2026 21:15:13 GMT"},"fingerprint":{"sha1":"77:27:72:42:CF:51:E8:8C:7C:3E:8C:4C:A1:F0:9A:86:96:B9:0A:16","sha256":"ED:7C:F7:38:B3:0F:00:86:32:D1:14:CE:C0:FF:CA:0E:7C:86:EE:49:51:EF:A4:4B:AA:5C:B6:7C:00:B5:3D:F3"}}},"request":{"raw":"GET /cdn-cgi/challenge-platform/h/b/cmg/1 HTTP/1.1\r\nHost: challenges.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/ns3si/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 28 Jun 2026 13:55:13 GMT\r\ncontent-type: image/png\r\ncontent-length: 86\r\npriority: u=6,i\r\nserver: cloudflare\r\ncf-ray: a12d301b9e7c0daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":86,"size_decoded":305,"mime_type":"image/png","magic":"PNG image data, 2 x 2, 8-bit grayscale, non-interlaced","md5":"387c6cbb06bb2cdbbaf395f14623ed94","sha1":"15957244f068f62c839ad15875beb5e566518c98","sha256":"cb9cc7a52b151a08e3963b746023c13f986b746ce77045687bac86c15ffb7154","sha512":"de650a304123a920910822d9d09d0cda4fbb708bc3b295bb9364747a0702981bbe6a65513708905ac7c04dd2ae208eb1d6639c922229ceba867524845ef21abb","ssdeep":"","tlshash":"dda012c57581ad26c5490237c1541220f9301053411201700183dd510522e0682b4902","first_seen":"2026-06-24T12:13:58.81001Z","last_seen":"2026-06-30T14:54:44.694551Z","times_seen":110,"resource_available":false,"data":null}},"time_used":5,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"desk-firelight.finance/b6ad9e40c45ed5117f4040e65f8c652bb40135fd.svg","fqdn":"desk-firelight.finance","domain":"desk-firelight.finance","tld":"finance"},"ip":{"addr":"104.21.23.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://desk-firelight.finance/","date":"2026-06-28T13:55:20.921Z","timestamp":1782654920921,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"desk-firelight.finance","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 19 Jun 2026 09:39:54 GMT","end":"Thu, 17 Sep 2026 10:38:40 GMT"},"fingerprint":{"sha1":"97:56:F3:86:32:A8:AC:D7:3E:A4:D3:E1:80:AD:1C:4A:94:E0:03:5E","sha256":"0E:BC:D5:FE:9F:D6:65:E7:E8:26:59:23:C1:0D:6B:89:C1:D4:AB:4A:9E:5C:AC:84:77:E8:3B:38:75:1D:90:F4"}}},"request":{"raw":"GET /b6ad9e40c45ed5117f4040e65f8c652bb40135fd.svg HTTP/1.1\r\nHost: desk-firelight.finance\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://desk-firelight.finance/\r\nCookie: cf_clearance=.OHbjUhmIlb_MJL6N.Pj2LjVz0Ak1HxcbBmG.pHXA2o-1782654920-1.2.1.1-QcrbyydanAa9ndVwjL8ybMqRIrUUYwh0GfIZRvlBXSlXdNF3B0TUVq_YB6q_i3wSZrYuhjAekbhd6wEZ7fUjF.FTxijHtKfLfwJ3rqjR0iOWXLVSPDmXu0N63U3frBc_0BdmvsT07MQg8A94b2QO.Xbe.Y50Dq7t7djEoqL11TGy6pJ_1iJGN1cTzlmuMkVR3_njQFeKy0D7JzUZTco2mYUGHfX3KG_GtIERSxJgi_ceMpu2rCddiwVxWmN.u_.dsJ0gXN4yWC8F_DNXbQ3w_UBT.rU60DECxBFLOSuBAMXT2OGBHlZ6DYPXQqTqO_LlPs16b2sCLLnBZxfBLpZOEe5VDrES.fantjhpZRN_kvZ3miHIsCGkppOsilDRoyTheRnhT5E6Ek4BgogD9J24h5kTwuOBL7YEk_YGJG4vjrF4cpvY68w5s1J7DViw_oRy1gdXnB_.TWwzZD67qdCjhd43JCgG9hAQoWe1PaRLNidvB3CmvtvXZGq7jm56VRaq\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3Xx2U%2BCRIgHqWOcysG6wdrEjqe3sSUTzpQUgXUBm%2BBjET%2BMfOcXX%2B5gXXtKt9r3nQIHYGZx38LvKHX0hOhVblwdFY2hmbti0iiWx5HIgZeehXugrbnzvo8RBjjhOazRboYtVqgea%2B4oP\"}]}\r\nlast-modified: Fri, 19 Jun 2026 10:33:34 GMT\r\ndate: Sun, 28 Jun 2026 13:55:21 GMT\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\netag: W/\"d29271f69bf5a5cce9b99cad01619a31\"\r\ncf-ray: a12d3047ccc9b4ed-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1041,"size_decoded":1285,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"d29271f69bf5a5cce9b99cad01619a31","sha1":"b6ad9e40c45ed5117f4040e65f8c652bb40135fd","sha256":"84d8f03e0016bfc7b24a243733e74f211aa5e2c3d6423746e0ed93bca660852a","sha512":"564d71caca9c28b10400e0d2eb39a242da88996d6d0f3ebe567c01d5e6824e01432920cb008db0abe44a7e38f2f69b0b8e546c448600432e05d76f2ea24f1eb4","ssdeep":"","tlshash":"3511affe4bb95bf0495e8bbaf932118cba06fc352bd459cec14d5d469091ce8e582801","first_seen":"2026-04-24T15:23:09.436872Z","last_seen":"2026-07-03T15:17:27.596286Z","times_seen":16,"resource_available":false,"data":null}},"time_used":172,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":172,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"desk-firelight.finance","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"desk-firelight.finance/15b473b878370e5f6aad0b061defe05ec4093155.woff2","fqdn":"desk-firelight.finance","domain":"desk-firelight.finance","tld":"finance"},"ip":{"addr":"104.21.23.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://desk-firelight.finance/","date":"2026-06-28T13:55:21.170Z","timestamp":1782654921170,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"desk-firelight.finance","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 19 Jun 2026 09:39:54 GMT","end":"Thu, 17 Sep 2026 10:38:40 GMT"},"fingerprint":{"sha1":"97:56:F3:86:32:A8:AC:D7:3E:A4:D3:E1:80:AD:1C:4A:94:E0:03:5E","sha256":"0E:BC:D5:FE:9F:D6:65:E7:E8:26:59:23:C1:0D:6B:89:C1:D4:AB:4A:9E:5C:AC:84:77:E8:3B:38:75:1D:90:F4"}}},"request":{"raw":"GET /15b473b878370e5f6aad0b061defe05ec4093155.woff2 HTTP/1.1\r\nHost: desk-firelight.finance\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://desk-firelight.finance/\r\nCookie: cf_clearance=.OHbjUhmIlb_MJL6N.Pj2LjVz0Ak1HxcbBmG.pHXA2o-1782654920-1.2.1.1-QcrbyydanAa9ndVwjL8ybMqRIrUUYwh0GfIZRvlBXSlXdNF3B0TUVq_YB6q_i3wSZrYuhjAekbhd6wEZ7fUjF.FTxijHtKfLfwJ3rqjR0iOWXLVSPDmXu0N63U3frBc_0BdmvsT07MQg8A94b2QO.Xbe.Y50Dq7t7djEoqL11TGy6pJ_1iJGN1cTzlmuMkVR3_njQFeKy0D7JzUZTco2mYUGHfX3KG_GtIERSxJgi_ceMpu2rCddiwVxWmN.u_.dsJ0gXN4yWC8F_DNXbQ3w_UBT.rU60DECxBFLOSuBAMXT2OGBHlZ6DYPXQqTqO_LlPs16b2sCLLnBZxfBLpZOEe5VDrES.fantjhpZRN_kvZ3miHIsCGkppOsilDRoyTheRnhT5E6Ek4BgogD9J24h5kTwuOBL7YEk_YGJG4vjrF4cpvY68w5s1J7DViw_oRy1gdXnB_.TWwzZD67qdCjhd43JCgG9hAQoWe1PaRLNidvB3CmvtvXZGq7jm56VRaq\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: font/woff2\r\netag: \"115dc5b24361b570908f74beeb867280\"\r\nlast-modified: Fri, 19 Jun 2026 10:33:34 GMT\r\ndate: Sun, 28 Jun 2026 13:55:21 GMT\r\nserver: cloudflare\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=M6ef43z0cVHWLxKxNceEqMJWrR6aB1MPD7H%2BxRXgI7fNT4q6OTJZ3UaeKZp3WTXMaHSXPK2MLhLcoOfl7c8ro5NW6dqLWeTBxXjkJlHGenvccalqwkLLiTjtKJL3feEpTnE4nBwBnXa2\"}]}\r\nage: 0\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncontent-length: 5332\r\ncf-ray: a12d30495cedb4ed-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5332,"size_decoded":6052,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), CFF, length 5332, version 1.0","md5":"115dc5b24361b570908f74beeb867280","sha1":"15b473b878370e5f6aad0b061defe05ec4093155","sha256":"d39f873f016a48c20bedfca5c6cfd69acde4076069c4a866764cda95e08d59d3","sha512":"1d560800fefa03170659d46bcbd53b6f7316b11ac105f971f122dd82185aed3781b8e626b43527b20e5adda7e62245b093f3342b68ff0a8cd3cc7c23006ca038","ssdeep":"96:saZE6k9dCffoOPCI4LvmVt3NvfBeClG7V9t5TH065jfiNVC2o7e0vQvI1z2lbsU:s06goOqDgJTVI/tdU61qNRo7e0viPH","tlshash":"91b18d04c425a51ff6594876b4a65df38ba12959c404a3cf3d0987ce92fa22883e9ba1","first_seen":"2026-02-16T14:56:50.16867Z","last_seen":"2026-07-03T15:17:27.591461Z","times_seen":22,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"desk-firelight.finance","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"desk-firelight.finance/0cb1894f50a5c2ade690c461347c7d8631faf0a4.svg","fqdn":"desk-firelight.finance","domain":"desk-firelight.finance","tld":"finance"},"ip":{"addr":"104.21.23.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://desk-firelight.finance/","date":"2026-06-28T13:55:20.926Z","timestamp":1782654920926,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"desk-firelight.finance","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 19 Jun 2026 09:39:54 GMT","end":"Thu, 17 Sep 2026 10:38:40 GMT"},"fingerprint":{"sha1":"97:56:F3:86:32:A8:AC:D7:3E:A4:D3:E1:80:AD:1C:4A:94:E0:03:5E","sha256":"0E:BC:D5:FE:9F:D6:65:E7:E8:26:59:23:C1:0D:6B:89:C1:D4:AB:4A:9E:5C:AC:84:77:E8:3B:38:75:1D:90:F4"}}},"request":{"raw":"GET /0cb1894f50a5c2ade690c461347c7d8631faf0a4.svg HTTP/1.1\r\nHost: desk-firelight.finance\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://desk-firelight.finance/\r\nCookie: cf_clearance=.OHbjUhmIlb_MJL6N.Pj2LjVz0Ak1HxcbBmG.pHXA2o-1782654920-1.2.1.1-QcrbyydanAa9ndVwjL8ybMqRIrUUYwh0GfIZRvlBXSlXdNF3B0TUVq_YB6q_i3wSZrYuhjAekbhd6wEZ7fUjF.FTxijHtKfLfwJ3rqjR0iOWXLVSPDmXu0N63U3frBc_0BdmvsT07MQg8A94b2QO.Xbe.Y50Dq7t7djEoqL11TGy6pJ_1iJGN1cTzlmuMkVR3_njQFeKy0D7JzUZTco2mYUGHfX3KG_GtIERSxJgi_ceMpu2rCddiwVxWmN.u_.dsJ0gXN4yWC8F_DNXbQ3w_UBT.rU60DECxBFLOSuBAMXT2OGBHlZ6DYPXQqTqO_LlPs16b2sCLLnBZxfBLpZOEe5VDrES.fantjhpZRN_kvZ3miHIsCGkppOsilDRoyTheRnhT5E6Ek4BgogD9J24h5kTwuOBL7YEk_YGJG4vjrF4cpvY68w5s1J7DViw_oRy1gdXnB_.TWwzZD67qdCjhd43JCgG9hAQoWe1PaRLNidvB3CmvtvXZGq7jm56VRaq\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=btGJa3loNDUC4ontpvGHnisXlf%2B95HjN3fiHAK83hihlGkAHVdCHPWSRkI8kBIN8SMGYsYdGi5QUJrkdk1pq0e0RL%2B1Zo3C3rirxiOK8ukbYGk4ACxRrkdBjmMxmoqvqTDzUahrukNPn\"}]}\r\nlast-modified: Fri, 19 Jun 2026 10:33:34 GMT\r\ndate: Sun, 28 Jun 2026 13:55:21 GMT\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\netag: W/\"24cbbbebe06d4a5850ad67e6068f79f6\"\r\ncf-ray: a12d3047cccab4ed-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7201,"size_decoded":3460,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"24cbbbebe06d4a5850ad67e6068f79f6","sha1":"0cb1894f50a5c2ade690c461347c7d8631faf0a4","sha256":"7bd532e3a4ebced01358408339f03d015d9edb8e0156da8919cf386de05e1c5c","sha512":"9f2b4c383ed8f74a51f6617a1cb2a51d923e3a1a5c9589993e05414343b19d7f1f8fb2eef19b8f16124eccd4e301bc80a35d029ab3cd389aa59f643bbbad1ca9","ssdeep":"192:xleT+7MERwQO/fmJEbvqtIxiFbZ3pEKkF9b:6JSKfJl2bZG3b","tlshash":"ece165edef7c2a7cf4c8a7eaf323106c7b0aeca01915ce5ac65d4d5a588284c9915cc3","first_seen":"2026-04-24T15:23:09.438265Z","last_seen":"2026-07-03T15:17:27.602753Z","times_seen":16,"resource_available":false,"data":null}},"time_used":135,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":135,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"desk-firelight.finance","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/pat/a12d301aaaf90daa/1782654914099/b692967d4394382adf055c26b90fa99b279ba5d3cb064ccedc76e1307fd39cfa/bxKDzg1rzoQHDZk","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/ns3si/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","date":"2026-06-28T13:55:14.498Z","timestamp":1782654914498,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"challenges.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 16 Jun 2026 20:15:28 GMT","end":"Mon, 14 Sep 2026 21:15:13 GMT"},"fingerprint":{"sha1":"77:27:72:42:CF:51:E8:8C:7C:3E:8C:4C:A1:F0:9A:86:96:B9:0A:16","sha256":"ED:7C:F7:38:B3:0F:00:86:32:D1:14:CE:C0:FF:CA:0E:7C:86:EE:49:51:EF:A4:4B:AA:5C:B6:7C:00:B5:3D:F3"}}},"request":{"raw":"GET /cdn-cgi/challenge-platform/h/b/pat/a12d301aaaf90daa/1782654914099/b692967d4394382adf055c26b90fa99b279ba5d3cb064ccedc76e1307fd39cfa/bxKDzg1rzoQHDZk HTTP/1.1\r\nHost: challenges.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/ns3si/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 401 \r\ndate: Sun, 28 Jun 2026 13:55:14 GMT\r\ncontent-type: text/plain; charset=utf-8\r\ncontent-length: 1\r\nwww-authenticate: PrivateToken challenge=\"AAIAGXBhdC1pc3N1ZXIuY2xvdWRmbGFyZS5jb20gtpKWfUOUOCrfBVwmuQ-pmyebpdPLBkzO3HbhMH_TnPoAGWNoYWxsZW5nZXMuY2xvdWRmbGFyZS5jb20=\", token-key=\"MIIBUjA9BgkqhkiG9w0BAQowMKANMAsGCWCGSAFlAwQCAqEaMBgGCSqGSIb3DQEBCDALBglghkgBZQMEAgKiAwIBMAOCAQ8AMIIBCgKCAQEAxDKbk4RYZyL6XnTRyMLN4wCsxvmJhd3ftOd8yAXrz8VqFgtlvnKMefvXRO4zaElaSrpOMszh8KAW9Dsx69eFsAosPK4nvwsvfiyP6ZyhdxPLGuhjTi9yUrWzzkcXpKUD5oZ63WixlXmHZg-DGy34XBTBEDLpaBfa5nJjJuMdHFzFB3XZ4lKatFdK8sSGfXMAsUy10RQd9wnzBzarw_8QPnkBlqzJ4ZJmbO7eJ3Jx6rUKm0EsteVSMi1W_3UgNTuDSFntFLT7ivnApWTXp1kSxFIe5bwCn-1tnm7qDWHa8Q6WW3qloT-zXcLq1G6N4vNlnIldiS3oejrM7UI5IuMAFwIDAQAB\", max-age=20, PrivateToken challenge=\"AAIAHXNhdC5wYXQtaXNzdWVyLmNsb3VkZmxhcmUuY29tILaSln1DlDgq3wVcJrkPqZsnm6XTywZMztx24TB_05z6ABljaGFsbGVuZ2VzLmNsb3VkZmxhcmUuY29t\", token-key=\"MIIBUjA9BgkqhkiG9w0BAQowMKANMAsGCWCGSAFlAwQCAqEaMBgGCSqGSIb3DQEBCDALBglghkgBZQMEAgKiAwIBMAOCAQ8AMIIBCgKCAQEAsM0Q9MnygIFl0gZx3w9LhhcDl_7YDbmNzAMUL7Xnp9GXdfWl2k5SxpfB-K_QfmiV_H7Cj8P94IMqoWL8MDExqPL01M2yoCDweJGMNAm8hGbJvLjBAr9mXOZEx9Xd_a1oM6VTL7hmfywqDKr7NjnZtoftBNM7aAcQ3oFunMqwu32HSeDNBFCR6cLq3N_eldve-E2AWzdWXrQfBQ-vNheECU-_SCUvXG_5xxdQ2AO6mpnRaaSuo-pxQhD2t-T8yKziV-ecPidkSrDvocgKAILEibz6aNYuH7U8kF5zXOjI4xRH1FqVs43TY5dwNvmfYjI-w8NNqKpoa4azpJqv3m2DVwIDAQAB\", max-age=20, PrivateToken challenge=\"AAIALHBwLWlzc3Vlci1wcm9kdWN0aW9uLnJlc2VhcmNoLmNsb3VkZmxhcmUuY29tILaSln1DlDgq3wVcJrkPqZsnm6XTywZMztx24TB_05z6ABljaGFsbGVuZ2VzLmNsb3VkZmxhcmUuY29t\", token-key=\"MIIBUjA9BgkqhkiG9w0BAQowMKANMAsGCWCGSAFlAwQCAqEaMBgGCSqGSIb3DQEBCDALBglghkgBZQMEAgKiAwIBMAOCAQ8AMIIBCgKCAQEAsxviSI6sjMo3EYekYTf-dIPsJKZ5cD3xsEmHYx664Sbocwxx4OVFCyBfqccoQRmEX0XWSEj0hYyxpSGEz2i9yhmVRSjkqknoFfuOjUc0KcblcHhVGtTIWERy01RB1YmfcngH9Znt-Z--XyaRArOXumCFBV41ZLC7--LANYHBuhSz34fCGCIFKJsbk8ggBIemExpY3f1t2OZNs4mYLHE-7DhMSYP3Yd171ZcDGvSvtW59KNqQwgCwNcjSY6crHCr8mc-vyzSJFS62lUdla7lPGnm51ne0hJTiFcfY2rDXKUBERMhEYaNuHy1itCEsHOinnQKV89W6SPZmavtQU2h-QwIDAQAB\", max-age=20\r\npriority: u=6,i=?0\r\nserver: cloudflare\r\ncf-ray: a12d301fada20daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"401","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1,"size_decoded":2171,"mime_type":"text/plain; charset=utf-8","magic":"very short file (no magic)","md5":"ff44570aca8241914870afbc310cdb85","sha1":"58668e7669fd564d99db5d581fcdb6a5618440b5","sha256":"6da43b944e494e885e69af021f93c6d9331c78aa228084711429160a5bbd15b5","sha512":"3c266c0035de59eab2a0dd31b3dcb4a9dd157b310289e5db9ab4f8c2fddb7433466d48f25da7ad735a1cb8f2935aa612ad1f62f0efcece3933ba9979082e2304","ssdeep":"","tlshash":"c700000000000003c00000300000003000000000000000000003000000000000000000","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-08T16:43:23.32674Z","times_seen":503758,"resource_available":true,"data":null}},"time_used":5,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"desk-firelight.finance/c57593e0adc4cf99dd9e67cb782242220a061a9d.woff2","fqdn":"desk-firelight.finance","domain":"desk-firelight.finance","tld":"finance"},"ip":{"addr":"104.21.23.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://desk-firelight.finance/","date":"2026-06-28T13:55:20.970Z","timestamp":1782654920970,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"desk-firelight.finance","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 19 Jun 2026 09:39:54 GMT","end":"Thu, 17 Sep 2026 10:38:40 GMT"},"fingerprint":{"sha1":"97:56:F3:86:32:A8:AC:D7:3E:A4:D3:E1:80:AD:1C:4A:94:E0:03:5E","sha256":"0E:BC:D5:FE:9F:D6:65:E7:E8:26:59:23:C1:0D:6B:89:C1:D4:AB:4A:9E:5C:AC:84:77:E8:3B:38:75:1D:90:F4"}}},"request":{"raw":"GET /c57593e0adc4cf99dd9e67cb782242220a061a9d.woff2 HTTP/1.1\r\nHost: desk-firelight.finance\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://desk-firelight.finance/\r\nCookie: cf_clearance=.OHbjUhmIlb_MJL6N.Pj2LjVz0Ak1HxcbBmG.pHXA2o-1782654920-1.2.1.1-QcrbyydanAa9ndVwjL8ybMqRIrUUYwh0GfIZRvlBXSlXdNF3B0TUVq_YB6q_i3wSZrYuhjAekbhd6wEZ7fUjF.FTxijHtKfLfwJ3rqjR0iOWXLVSPDmXu0N63U3frBc_0BdmvsT07MQg8A94b2QO.Xbe.Y50Dq7t7djEoqL11TGy6pJ_1iJGN1cTzlmuMkVR3_njQFeKy0D7JzUZTco2mYUGHfX3KG_GtIERSxJgi_ceMpu2rCddiwVxWmN.u_.dsJ0gXN4yWC8F_DNXbQ3w_UBT.rU60DECxBFLOSuBAMXT2OGBHlZ6DYPXQqTqO_LlPs16b2sCLLnBZxfBLpZOEe5VDrES.fantjhpZRN_kvZ3miHIsCGkppOsilDRoyTheRnhT5E6Ek4BgogD9J24h5kTwuOBL7YEk_YGJG4vjrF4cpvY68w5s1J7DViw_oRy1gdXnB_.TWwzZD67qdCjhd43JCgG9hAQoWe1PaRLNidvB3CmvtvXZGq7jm56VRaq\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: font/woff2\r\netag: \"7c87a648293fbb5b2924aafaa59e8aea\"\r\nlast-modified: Fri, 19 Jun 2026 10:33:34 GMT\r\ndate: Sun, 28 Jun 2026 13:55:21 GMT\r\nserver: cloudflare\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4qoLXcNZVTg%2B60NXR8gdq8w%2B2rwbHcDmICfaMmoHPp4LM1Cc%2BOP7zWPow1RMcGlnf8CRujIfeQ5hmgSQF1ESfXiPuQoL0yQmr8kjAU80SWzSgZylNlz%2BJnVGLVprZC%2BhiWXevcAuah0l\"}]}\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a12d30481cd9b4ed-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-08T16:42:47.069256Z","times_seen":17782290,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"desk-firelight.finance","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"desk-firelight.finance/d9b6c81a600dfbb3fa4c740e56247ad8ce4fc393.svg","fqdn":"desk-firelight.finance","domain":"desk-firelight.finance","tld":"finance"},"ip":{"addr":"104.21.23.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://desk-firelight.finance/","date":"2026-06-28T13:55:21.026Z","timestamp":1782654921026,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"desk-firelight.finance","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 19 Jun 2026 09:39:54 GMT","end":"Thu, 17 Sep 2026 10:38:40 GMT"},"fingerprint":{"sha1":"97:56:F3:86:32:A8:AC:D7:3E:A4:D3:E1:80:AD:1C:4A:94:E0:03:5E","sha256":"0E:BC:D5:FE:9F:D6:65:E7:E8:26:59:23:C1:0D:6B:89:C1:D4:AB:4A:9E:5C:AC:84:77:E8:3B:38:75:1D:90:F4"}}},"request":{"raw":"GET /d9b6c81a600dfbb3fa4c740e56247ad8ce4fc393.svg HTTP/1.1\r\nHost: desk-firelight.finance\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://desk-firelight.finance/\r\nCookie: cf_clearance=.OHbjUhmIlb_MJL6N.Pj2LjVz0Ak1HxcbBmG.pHXA2o-1782654920-1.2.1.1-QcrbyydanAa9ndVwjL8ybMqRIrUUYwh0GfIZRvlBXSlXdNF3B0TUVq_YB6q_i3wSZrYuhjAekbhd6wEZ7fUjF.FTxijHtKfLfwJ3rqjR0iOWXLVSPDmXu0N63U3frBc_0BdmvsT07MQg8A94b2QO.Xbe.Y50Dq7t7djEoqL11TGy6pJ_1iJGN1cTzlmuMkVR3_njQFeKy0D7JzUZTco2mYUGHfX3KG_GtIERSxJgi_ceMpu2rCddiwVxWmN.u_.dsJ0gXN4yWC8F_DNXbQ3w_UBT.rU60DECxBFLOSuBAMXT2OGBHlZ6DYPXQqTqO_LlPs16b2sCLLnBZxfBLpZOEe5VDrES.fantjhpZRN_kvZ3miHIsCGkppOsilDRoyTheRnhT5E6Ek4BgogD9J24h5kTwuOBL7YEk_YGJG4vjrF4cpvY68w5s1J7DViw_oRy1gdXnB_.TWwzZD67qdCjhd43JCgG9hAQoWe1PaRLNidvB3CmvtvXZGq7jm56VRaq\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0RIsb9SwFb5GsN5KCXWucHTRcnNSPbDI8cyLEy05UGo3UrE8%2FtIanSvE1BTY7PxolouoyE3iHzTkT3XbqbhO9jXztS9mjiSkPPfcQwqJ2BC3euC5F0ZC15B72XUiDYRJZUv3OYYMq8hg\"}]}\r\nlast-modified: Fri, 19 Jun 2026 10:33:34 GMT\r\ndate: Sun, 28 Jun 2026 13:55:21 GMT\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\netag: W/\"80fd4d380001d7ba50f3289bc01fd1b7\"\r\ncf-ray: a12d30486ce5b4ed-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-08T16:42:47.069256Z","times_seen":17782290,"resource_available":true,"data":null}},"time_used":164,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":164,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"desk-firelight.finance","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"desk-firelight.finance/855afc4d65243f4a81932d17b614a80e3270d184.png","fqdn":"desk-firelight.finance","domain":"desk-firelight.finance","tld":"finance"},"ip":{"addr":"104.21.23.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://desk-firelight.finance/","date":"2026-06-28T13:55:20.983Z","timestamp":1782654920983,"http_version":"HTTP/3","security_state":"secure","security_info":null,"request":{"raw":"GET /855afc4d65243f4a81932d17b614a80e3270d184.png HTTP/1.1\r\nHost: desk-firelight.finance\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://desk-firelight.finance/\r\nCookie: cf_clearance=.OHbjUhmIlb_MJL6N.Pj2LjVz0Ak1HxcbBmG.pHXA2o-1782654920-1.2.1.1-QcrbyydanAa9ndVwjL8ybMqRIrUUYwh0GfIZRvlBXSlXdNF3B0TUVq_YB6q_i3wSZrYuhjAekbhd6wEZ7fUjF.FTxijHtKfLfwJ3rqjR0iOWXLVSPDmXu0N63U3frBc_0BdmvsT07MQg8A94b2QO.Xbe.Y50Dq7t7djEoqL11TGy6pJ_1iJGN1cTzlmuMkVR3_njQFeKy0D7JzUZTco2mYUGHfX3KG_GtIERSxJgi_ceMpu2rCddiwVxWmN.u_.dsJ0gXN4yWC8F_DNXbQ3w_UBT.rU60DECxBFLOSuBAMXT2OGBHlZ6DYPXQqTqO_LlPs16b2sCLLnBZxfBLpZOEe5VDrES.fantjhpZRN_kvZ3miHIsCGkppOsilDRoyTheRnhT5E6Ek4BgogD9J24h5kTwuOBL7YEk_YGJG4vjrF4cpvY68w5s1J7DViw_oRy1gdXnB_.TWwzZD67qdCjhd43JCgG9hAQoWe1PaRLNidvB3CmvtvXZGq7jm56VRaq\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-08T16:42:47.069256Z","times_seen":17782290,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"desk-firelight.finance","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"desk-firelight.finance/d213a58fb04b95e7468571d12402b6fde176f172.png","fqdn":"desk-firelight.finance","domain":"desk-firelight.finance","tld":"finance"},"ip":{"addr":"104.21.23.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://desk-firelight.finance/","date":"2026-06-28T13:55:20.860Z","timestamp":1782654920860,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"desk-firelight.finance","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 19 Jun 2026 09:39:54 GMT","end":"Thu, 17 Sep 2026 10:38:40 GMT"},"fingerprint":{"sha1":"97:56:F3:86:32:A8:AC:D7:3E:A4:D3:E1:80:AD:1C:4A:94:E0:03:5E","sha256":"0E:BC:D5:FE:9F:D6:65:E7:E8:26:59:23:C1:0D:6B:89:C1:D4:AB:4A:9E:5C:AC:84:77:E8:3B:38:75:1D:90:F4"}}},"request":{"raw":"GET /d213a58fb04b95e7468571d12402b6fde176f172.png HTTP/1.1\r\nHost: desk-firelight.finance\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://desk-firelight.finance/\r\nCookie: cf_clearance=.OHbjUhmIlb_MJL6N.Pj2LjVz0Ak1HxcbBmG.pHXA2o-1782654920-1.2.1.1-QcrbyydanAa9ndVwjL8ybMqRIrUUYwh0GfIZRvlBXSlXdNF3B0TUVq_YB6q_i3wSZrYuhjAekbhd6wEZ7fUjF.FTxijHtKfLfwJ3rqjR0iOWXLVSPDmXu0N63U3frBc_0BdmvsT07MQg8A94b2QO.Xbe.Y50Dq7t7djEoqL11TGy6pJ_1iJGN1cTzlmuMkVR3_njQFeKy0D7JzUZTco2mYUGHfX3KG_GtIERSxJgi_ceMpu2rCddiwVxWmN.u_.dsJ0gXN4yWC8F_DNXbQ3w_UBT.rU60DECxBFLOSuBAMXT2OGBHlZ6DYPXQqTqO_LlPs16b2sCLLnBZxfBLpZOEe5VDrES.fantjhpZRN_kvZ3miHIsCGkppOsilDRoyTheRnhT5E6Ek4BgogD9J24h5kTwuOBL7YEk_YGJG4vjrF4cpvY68w5s1J7DViw_oRy1gdXnB_.TWwzZD67qdCjhd43JCgG9hAQoWe1PaRLNidvB3CmvtvXZGq7jm56VRaq\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: image/png\r\netag: \"458971cf7b04c53fc2e69b96a2f4d537\"\r\nlast-modified: Fri, 19 Jun 2026 10:33:34 GMT\r\ndate: Sun, 28 Jun 2026 13:55:21 GMT\r\nserver: cloudflare\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=r5qpacjjzcYusdofni9YNEzRvlqUyBG9QiGewWy1Crgk7O2NJoyxxY2w6T5kIR%2Fn%2BILz1QgtTlzyh2k5guXXzGTUXH7fWZRfAJ4NPieZn4tzjvNCG8mL%2FDQgkwCcD1RxVIVHB1usAQur\"}]}\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 9228\r\ncf-ray: a12d30476cc3b4ed-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9228,"size_decoded":9941,"mime_type":"image/png","magic":"PNG image data, 512 x 384, 8-bit colormap, non-interlaced","md5":"458971cf7b04c53fc2e69b96a2f4d537","sha1":"d213a58fb04b95e7468571d12402b6fde176f172","sha256":"6998349bcd9fff3c7d51d5c589fa7e613916870e0cab65fbd439c8f6f0eee16d","sha512":"187240c70c2be4b21b2a37e41a59bcb8468fecc99d21e3a6a2e86c9df6fa201cce8563169f3e3e6efdb9fe2266529961068a2c3011b6d500b00a32d07d8d5a04","ssdeep":"192:JeKZ9FUyh3ax7fR8QvoWe6h77EE1Ym2VYp3Rz8SXJLR3xfkTX:JeKZnh3a5fFvoWe631Y5VYb8gJRxfGX","tlshash":"af12bf680606954e80c706bde7649e38e358a90bd3aad153b837db654c355b8ec9c8fc","first_seen":"2026-04-29T09:31:56.252985Z","last_seen":"2026-07-03T15:17:27.594901Z","times_seen":19,"resource_available":false,"data":null}},"time_used":178,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":178,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"desk-firelight.finance","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"desk-firelight.finance/ea3f56e306962481bcb38735c71ea5039b9ce2bd.woff2","fqdn":"desk-firelight.finance","domain":"desk-firelight.finance","tld":"finance"},"ip":{"addr":"104.21.23.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://desk-firelight.finance/","date":"2026-06-28T13:55:20.972Z","timestamp":1782654920972,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"desk-firelight.finance","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 19 Jun 2026 09:39:54 GMT","end":"Thu, 17 Sep 2026 10:38:40 GMT"},"fingerprint":{"sha1":"97:56:F3:86:32:A8:AC:D7:3E:A4:D3:E1:80:AD:1C:4A:94:E0:03:5E","sha256":"0E:BC:D5:FE:9F:D6:65:E7:E8:26:59:23:C1:0D:6B:89:C1:D4:AB:4A:9E:5C:AC:84:77:E8:3B:38:75:1D:90:F4"}}},"request":{"raw":"GET /ea3f56e306962481bcb38735c71ea5039b9ce2bd.woff2 HTTP/1.1\r\nHost: desk-firelight.finance\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://desk-firelight.finance/\r\nCookie: cf_clearance=.OHbjUhmIlb_MJL6N.Pj2LjVz0Ak1HxcbBmG.pHXA2o-1782654920-1.2.1.1-QcrbyydanAa9ndVwjL8ybMqRIrUUYwh0GfIZRvlBXSlXdNF3B0TUVq_YB6q_i3wSZrYuhjAekbhd6wEZ7fUjF.FTxijHtKfLfwJ3rqjR0iOWXLVSPDmXu0N63U3frBc_0BdmvsT07MQg8A94b2QO.Xbe.Y50Dq7t7djEoqL11TGy6pJ_1iJGN1cTzlmuMkVR3_njQFeKy0D7JzUZTco2mYUGHfX3KG_GtIERSxJgi_ceMpu2rCddiwVxWmN.u_.dsJ0gXN4yWC8F_DNXbQ3w_UBT.rU60DECxBFLOSuBAMXT2OGBHlZ6DYPXQqTqO_LlPs16b2sCLLnBZxfBLpZOEe5VDrES.fantjhpZRN_kvZ3miHIsCGkppOsilDRoyTheRnhT5E6Ek4BgogD9J24h5kTwuOBL7YEk_YGJG4vjrF4cpvY68w5s1J7DViw_oRy1gdXnB_.TWwzZD67qdCjhd43JCgG9hAQoWe1PaRLNidvB3CmvtvXZGq7jm56VRaq\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: font/woff2\r\netag: \"b65daadded7406d746e61b25ebbe0ca9\"\r\nlast-modified: Fri, 19 Jun 2026 10:33:34 GMT\r\ndate: Sun, 28 Jun 2026 13:55:21 GMT\r\nserver: cloudflare\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BJ0N3zMKU8k%2B15WfMBdnnm6PzY%2FSbujiv%2BryHRsEtV4%2B%2FRIGphv3hxHC5laRSmN7g4hj4lHy1VxX6kDFnJIvx5cFZ%2Fu8cGsZu%2F3Sufy6XU4HCtLfOrCvjQTm4CKGWkWLDUQ%2BdWFfvQKd\"}]}\r\nage: 0\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncontent-length: 35348\r\ncf-ray: a12d30481cdab4ed-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":35348,"size_decoded":36085,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 35348, version 1.0","md5":"b65daadded7406d746e61b25ebbe0ca9","sha1":"ea3f56e306962481bcb38735c71ea5039b9ce2bd","sha256":"691cd1d9b4c0cdf31a1dcf04259c86f92c85e69f6622abab7964d81e36890691","sha512":"d9e53ee3bcdede0965db0fe62de1b5b78d59bad2bc2fbf1ae3ef9152e5883cffdb694a36fffd00ebcc71aaff2c4b58630c808781e966231ce4fc103b62df002a","ssdeep":"768:ob6sJaIWkw3gUba/bdQl/tVgm+l1OXO+FtG4Vqh6rUPA/X:E6sJ4kuo8tLq1OXXPVqh6rAAf","tlshash":"80f2f19ffa66b986b08385e35f265d537aa30c6a6281f521596f210f34dd34f0e71f04","first_seen":"2025-06-08T13:10:33.776668Z","last_seen":"2026-08-08T10:18:57.257076Z","times_seen":3682,"resource_available":false,"data":null}},"time_used":218,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":195,"receive":23,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"desk-firelight.finance","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"desk-firelight.finance/c57593e0adc4cf99dd9e67cb782242220a061a9d.woff2","fqdn":"desk-firelight.finance","domain":"desk-firelight.finance","tld":"finance"},"ip":{"addr":"104.21.23.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://desk-firelight.finance/","date":"2026-06-28T13:55:20.968Z","timestamp":1782654920968,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"desk-firelight.finance","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 19 Jun 2026 09:39:54 GMT","end":"Thu, 17 Sep 2026 10:38:40 GMT"},"fingerprint":{"sha1":"97:56:F3:86:32:A8:AC:D7:3E:A4:D3:E1:80:AD:1C:4A:94:E0:03:5E","sha256":"0E:BC:D5:FE:9F:D6:65:E7:E8:26:59:23:C1:0D:6B:89:C1:D4:AB:4A:9E:5C:AC:84:77:E8:3B:38:75:1D:90:F4"}}},"request":{"raw":"GET /c57593e0adc4cf99dd9e67cb782242220a061a9d.woff2 HTTP/1.1\r\nHost: desk-firelight.finance\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://desk-firelight.finance/\r\nCookie: cf_clearance=.OHbjUhmIlb_MJL6N.Pj2LjVz0Ak1HxcbBmG.pHXA2o-1782654920-1.2.1.1-QcrbyydanAa9ndVwjL8ybMqRIrUUYwh0GfIZRvlBXSlXdNF3B0TUVq_YB6q_i3wSZrYuhjAekbhd6wEZ7fUjF.FTxijHtKfLfwJ3rqjR0iOWXLVSPDmXu0N63U3frBc_0BdmvsT07MQg8A94b2QO.Xbe.Y50Dq7t7djEoqL11TGy6pJ_1iJGN1cTzlmuMkVR3_njQFeKy0D7JzUZTco2mYUGHfX3KG_GtIERSxJgi_ceMpu2rCddiwVxWmN.u_.dsJ0gXN4yWC8F_DNXbQ3w_UBT.rU60DECxBFLOSuBAMXT2OGBHlZ6DYPXQqTqO_LlPs16b2sCLLnBZxfBLpZOEe5VDrES.fantjhpZRN_kvZ3miHIsCGkppOsilDRoyTheRnhT5E6Ek4BgogD9J24h5kTwuOBL7YEk_YGJG4vjrF4cpvY68w5s1J7DViw_oRy1gdXnB_.TWwzZD67qdCjhd43JCgG9hAQoWe1PaRLNidvB3CmvtvXZGq7jm56VRaq\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: font/woff2\r\netag: \"7c87a648293fbb5b2924aafaa59e8aea\"\r\nlast-modified: Fri, 19 Jun 2026 10:33:34 GMT\r\ndate: Sun, 28 Jun 2026 13:55:21 GMT\r\nserver: cloudflare\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AtQHjD3Ka9lSPdPCyoO2xB7BxZ9INEmIkaxVau%2F0H9XnW4Swq58%2BhPQfTyQNTzDENTV1WKDNtfCABSU4Cu1CsZodQ2KNqYDhT76DL89P0m7%2F4mdsVnY21dDekvLzGrdahWDBMNgxIVRE\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a12d30480cd8b4ed-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-08T16:42:47.069256Z","times_seen":17782290,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"desk-firelight.finance","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"desk-firelight.finance/favicon.ico","fqdn":"desk-firelight.finance","domain":"desk-firelight.finance","tld":"finance"},"ip":{"addr":"104.21.23.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://desk-firelight.finance/","date":"2026-06-28T13:55:13.407Z","timestamp":1782654913407,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"desk-firelight.finance","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 19 Jun 2026 09:39:54 GMT","end":"Thu, 17 Sep 2026 10:38:40 GMT"},"fingerprint":{"sha1":"97:56:F3:86:32:A8:AC:D7:3E:A4:D3:E1:80:AD:1C:4A:94:E0:03:5E","sha256":"0E:BC:D5:FE:9F:D6:65:E7:E8:26:59:23:C1:0D:6B:89:C1:D4:AB:4A:9E:5C:AC:84:77:E8:3B:38:75:1D:90:F4"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: desk-firelight.finance\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://desk-firelight.finance/?__cf_chl_rt_tk=XchzjIXfd5jOu.QnQllGoBQSbxV6PjgEqyLQYDWJQGU-1782654913-1.0.1.1-B3Td_S2sSdnLG9X3eQeqlEZC3l3uAHs0_Vf0iciw5Do\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\ndate: Sun, 28 Jun 2026 13:55:13 GMT\r\nserver: cloudflare\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rIeNGnXZiaHT2LUEoV3VDtswMW5JZqASw0G38tOgWpjsv%2BWR%2BJVgBppSxGvTy%2FvNinqBIe9T7Vxd4F9XbTCXF5Fad%2BKT4mT0D%2BRFNkKacQirZZKlg9TjiXOtCMJV5zcLM0RP4Tj5nZnu\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\ncf-ray: a12d3018cb2bb4ed-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":563,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-08T16:42:47.069256Z","times_seen":17782290,"resource_available":true,"data":null}},"time_used":349,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":349,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"desk-firelight.finance","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"desk-firelight.finance/37ff3688bc9e5c4ce51a0deb73d5ac807a3b2a52.svg","fqdn":"desk-firelight.finance","domain":"desk-firelight.finance","tld":"finance"},"ip":{"addr":"104.21.23.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://desk-firelight.finance/","date":"2026-06-28T13:55:20.930Z","timestamp":1782654920930,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"desk-firelight.finance","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 19 Jun 2026 09:39:54 GMT","end":"Thu, 17 Sep 2026 10:38:40 GMT"},"fingerprint":{"sha1":"97:56:F3:86:32:A8:AC:D7:3E:A4:D3:E1:80:AD:1C:4A:94:E0:03:5E","sha256":"0E:BC:D5:FE:9F:D6:65:E7:E8:26:59:23:C1:0D:6B:89:C1:D4:AB:4A:9E:5C:AC:84:77:E8:3B:38:75:1D:90:F4"}}},"request":{"raw":"GET /37ff3688bc9e5c4ce51a0deb73d5ac807a3b2a52.svg HTTP/1.1\r\nHost: desk-firelight.finance\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://desk-firelight.finance/\r\nCookie: cf_clearance=.OHbjUhmIlb_MJL6N.Pj2LjVz0Ak1HxcbBmG.pHXA2o-1782654920-1.2.1.1-QcrbyydanAa9ndVwjL8ybMqRIrUUYwh0GfIZRvlBXSlXdNF3B0TUVq_YB6q_i3wSZrYuhjAekbhd6wEZ7fUjF.FTxijHtKfLfwJ3rqjR0iOWXLVSPDmXu0N63U3frBc_0BdmvsT07MQg8A94b2QO.Xbe.Y50Dq7t7djEoqL11TGy6pJ_1iJGN1cTzlmuMkVR3_njQFeKy0D7JzUZTco2mYUGHfX3KG_GtIERSxJgi_ceMpu2rCddiwVxWmN.u_.dsJ0gXN4yWC8F_DNXbQ3w_UBT.rU60DECxBFLOSuBAMXT2OGBHlZ6DYPXQqTqO_LlPs16b2sCLLnBZxfBLpZOEe5VDrES.fantjhpZRN_kvZ3miHIsCGkppOsilDRoyTheRnhT5E6Ek4BgogD9J24h5kTwuOBL7YEk_YGJG4vjrF4cpvY68w5s1J7DViw_oRy1gdXnB_.TWwzZD67qdCjhd43JCgG9hAQoWe1PaRLNidvB3CmvtvXZGq7jm56VRaq\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=usF6DfXFXtEhng1dF%2Bxx%2B%2BdYo%2FSViC667vMZHpqxW0feYNIGMORxmVR9D%2Fa%2Bpr6Ko%2BL7mOBweF7KoLeIF3Rk8LGPG4joxiQUVyrCs8r%2B5IGCe%2FEJgDiI1BNUZjGWNuCbuaD4ut65HmGF\"}]}\r\nlast-modified: Fri, 19 Jun 2026 10:33:34 GMT\r\ndate: Sun, 28 Jun 2026 13:55:21 GMT\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\netag: W/\"d52d6a01e6c96b24719b6988fe5e7b97\"\r\ncf-ray: a12d3047dcccb4ed-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3879,"size_decoded":2092,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"d52d6a01e6c96b24719b6988fe5e7b97","sha1":"37ff3688bc9e5c4ce51a0deb73d5ac807a3b2a52","sha256":"2243915c6eddc18a5dded6f2221560e7d2629743bc797b691817543b22cd8d2a","sha512":"0067e9b7b9e0d5eadbb8ec8bdfab711c0a24e5de633aa6bfabee210da9c0eeacb8098b4d2554d9d809fe9a9bc771b6f9b586eb8790326dd0bc87ac32df9f8870","ssdeep":"","tlshash":"ac81c0ffff2427be6469a3daf613109a7c85f8a826818e81c18cdd8556e1c8d95cd8c1","first_seen":"2026-04-24T15:23:09.431445Z","last_seen":"2026-07-03T15:17:27.597689Z","times_seen":16,"resource_available":false,"data":null}},"time_used":167,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":167,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"desk-firelight.finance","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"desk-firelight.finance/ea3f56e306962481bcb38735c71ea5039b9ce2bd.woff2","fqdn":"desk-firelight.finance","domain":"desk-firelight.finance","tld":"finance"},"ip":{"addr":"104.21.23.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://desk-firelight.finance/","date":"2026-06-28T13:55:20.958Z","timestamp":1782654920958,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"desk-firelight.finance","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 19 Jun 2026 09:39:54 GMT","end":"Thu, 17 Sep 2026 10:38:40 GMT"},"fingerprint":{"sha1":"97:56:F3:86:32:A8:AC:D7:3E:A4:D3:E1:80:AD:1C:4A:94:E0:03:5E","sha256":"0E:BC:D5:FE:9F:D6:65:E7:E8:26:59:23:C1:0D:6B:89:C1:D4:AB:4A:9E:5C:AC:84:77:E8:3B:38:75:1D:90:F4"}}},"request":{"raw":"GET /ea3f56e306962481bcb38735c71ea5039b9ce2bd.woff2 HTTP/1.1\r\nHost: desk-firelight.finance\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://desk-firelight.finance/\r\nCookie: cf_clearance=.OHbjUhmIlb_MJL6N.Pj2LjVz0Ak1HxcbBmG.pHXA2o-1782654920-1.2.1.1-QcrbyydanAa9ndVwjL8ybMqRIrUUYwh0GfIZRvlBXSlXdNF3B0TUVq_YB6q_i3wSZrYuhjAekbhd6wEZ7fUjF.FTxijHtKfLfwJ3rqjR0iOWXLVSPDmXu0N63U3frBc_0BdmvsT07MQg8A94b2QO.Xbe.Y50Dq7t7djEoqL11TGy6pJ_1iJGN1cTzlmuMkVR3_njQFeKy0D7JzUZTco2mYUGHfX3KG_GtIERSxJgi_ceMpu2rCddiwVxWmN.u_.dsJ0gXN4yWC8F_DNXbQ3w_UBT.rU60DECxBFLOSuBAMXT2OGBHlZ6DYPXQqTqO_LlPs16b2sCLLnBZxfBLpZOEe5VDrES.fantjhpZRN_kvZ3miHIsCGkppOsilDRoyTheRnhT5E6Ek4BgogD9J24h5kTwuOBL7YEk_YGJG4vjrF4cpvY68w5s1J7DViw_oRy1gdXnB_.TWwzZD67qdCjhd43JCgG9hAQoWe1PaRLNidvB3CmvtvXZGq7jm56VRaq\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: font/woff2\r\netag: \"b65daadded7406d746e61b25ebbe0ca9\"\r\nlast-modified: Fri, 19 Jun 2026 10:33:34 GMT\r\ndate: Sun, 28 Jun 2026 13:55:21 GMT\r\nserver: cloudflare\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=O5skuCrgOBRDxNHlXw%2Fony5OfO7ObxgDlKtCfuXYVzBDEvO1d01R4rBpBRNrzXie6dJtvEYEXlYPtxwArFE2snauJeYEAdqCTYqH4qglJvNGqOU1xVPm4GCFNSXr%2F9dWjX7XUksNf5Qx\"}]}\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncontent-length: 35348\r\ncf-ray: a12d30480cd5b4ed-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":35348,"size_decoded":36064,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 35348, version 1.0","md5":"b65daadded7406d746e61b25ebbe0ca9","sha1":"ea3f56e306962481bcb38735c71ea5039b9ce2bd","sha256":"691cd1d9b4c0cdf31a1dcf04259c86f92c85e69f6622abab7964d81e36890691","sha512":"d9e53ee3bcdede0965db0fe62de1b5b78d59bad2bc2fbf1ae3ef9152e5883cffdb694a36fffd00ebcc71aaff2c4b58630c808781e966231ce4fc103b62df002a","ssdeep":"768:ob6sJaIWkw3gUba/bdQl/tVgm+l1OXO+FtG4Vqh6rUPA/X:E6sJ4kuo8tLq1OXXPVqh6rAAf","tlshash":"80f2f19ffa66b986b08385e35f265d537aa30c6a6281f521596f210f34dd34f0e71f04","first_seen":"2025-06-08T13:10:33.776668Z","last_seen":"2026-08-08T10:18:57.257076Z","times_seen":3682,"resource_available":false,"data":null}},"time_used":232,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":208,"receive":24,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"desk-firelight.finance","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"desk-firelight.finance/index_1.html","fqdn":"desk-firelight.finance","domain":"desk-firelight.finance","tld":"finance"},"ip":{"addr":"104.21.23.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://desk-firelight.finance/","date":"2026-06-28T13:55:20.990Z","timestamp":1782654920990,"http_version":"HTTP/3","security_state":"secure","security_info":null,"request":{"raw":"GET /index_1.html HTTP/1.1\r\nHost: desk-firelight.finance\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://desk-firelight.finance/\r\nCookie: cf_clearance=.OHbjUhmIlb_MJL6N.Pj2LjVz0Ak1HxcbBmG.pHXA2o-1782654920-1.2.1.1-QcrbyydanAa9ndVwjL8ybMqRIrUUYwh0GfIZRvlBXSlXdNF3B0TUVq_YB6q_i3wSZrYuhjAekbhd6wEZ7fUjF.FTxijHtKfLfwJ3rqjR0iOWXLVSPDmXu0N63U3frBc_0BdmvsT07MQg8A94b2QO.Xbe.Y50Dq7t7djEoqL11TGy6pJ_1iJGN1cTzlmuMkVR3_njQFeKy0D7JzUZTco2mYUGHfX3KG_GtIERSxJgi_ceMpu2rCddiwVxWmN.u_.dsJ0gXN4yWC8F_DNXbQ3w_UBT.rU60DECxBFLOSuBAMXT2OGBHlZ6DYPXQqTqO_LlPs16b2sCLLnBZxfBLpZOEe5VDrES.fantjhpZRN_kvZ3miHIsCGkppOsilDRoyTheRnhT5E6Ek4BgogD9J24h5kTwuOBL7YEk_YGJG4vjrF4cpvY68w5s1J7DViw_oRy1gdXnB_.TWwzZD67qdCjhd43JCgG9hAQoWe1PaRLNidvB3CmvtvXZGq7jm56VRaq\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-08T16:42:47.069256Z","times_seen":17782290,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"desk-firelight.finance","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"desk-firelight.finance/a3d59d1afa1e26e1a417f2371e617fabdb787345.woff2","fqdn":"desk-firelight.finance","domain":"desk-firelight.finance","tld":"finance"},"ip":{"addr":"104.21.23.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://desk-firelight.finance/","date":"2026-06-28T13:55:21.169Z","timestamp":1782654921169,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"desk-firelight.finance","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 19 Jun 2026 09:39:54 GMT","end":"Thu, 17 Sep 2026 10:38:40 GMT"},"fingerprint":{"sha1":"97:56:F3:86:32:A8:AC:D7:3E:A4:D3:E1:80:AD:1C:4A:94:E0:03:5E","sha256":"0E:BC:D5:FE:9F:D6:65:E7:E8:26:59:23:C1:0D:6B:89:C1:D4:AB:4A:9E:5C:AC:84:77:E8:3B:38:75:1D:90:F4"}}},"request":{"raw":"GET /a3d59d1afa1e26e1a417f2371e617fabdb787345.woff2 HTTP/1.1\r\nHost: desk-firelight.finance\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://desk-firelight.finance/\r\nCookie: cf_clearance=.OHbjUhmIlb_MJL6N.Pj2LjVz0Ak1HxcbBmG.pHXA2o-1782654920-1.2.1.1-QcrbyydanAa9ndVwjL8ybMqRIrUUYwh0GfIZRvlBXSlXdNF3B0TUVq_YB6q_i3wSZrYuhjAekbhd6wEZ7fUjF.FTxijHtKfLfwJ3rqjR0iOWXLVSPDmXu0N63U3frBc_0BdmvsT07MQg8A94b2QO.Xbe.Y50Dq7t7djEoqL11TGy6pJ_1iJGN1cTzlmuMkVR3_njQFeKy0D7JzUZTco2mYUGHfX3KG_GtIERSxJgi_ceMpu2rCddiwVxWmN.u_.dsJ0gXN4yWC8F_DNXbQ3w_UBT.rU60DECxBFLOSuBAMXT2OGBHlZ6DYPXQqTqO_LlPs16b2sCLLnBZxfBLpZOEe5VDrES.fantjhpZRN_kvZ3miHIsCGkppOsilDRoyTheRnhT5E6Ek4BgogD9J24h5kTwuOBL7YEk_YGJG4vjrF4cpvY68w5s1J7DViw_oRy1gdXnB_.TWwzZD67qdCjhd43JCgG9hAQoWe1PaRLNidvB3CmvtvXZGq7jm56VRaq\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: font/woff2\r\netag: \"510c61a400fcbbcc0129713f8002c6ff\"\r\nlast-modified: Fri, 19 Jun 2026 10:33:34 GMT\r\ndate: Sun, 28 Jun 2026 13:55:21 GMT\r\nserver: cloudflare\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=u5K7ZvFz%2Bou5Ss%2FpOJVM4sPuF368TzME003sJQC%2F%2F7FClhGelAXWekXU0rV0U5bvdpC79%2F%2F%2FtYL%2BdncxOf4UOY0bODV7uq8A%2F24SgcoNdeq5h6JNy6SgS88SPMDnM2CW%2FBBt959y7Kqw\"}]}\r\nage: 0\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncontent-length: 5280\r\ncf-ray: a12d30495cecb4ed-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5280,"size_decoded":6018,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), CFF, length 5280, version 1.0","md5":"510c61a400fcbbcc0129713f8002c6ff","sha1":"a3d59d1afa1e26e1a417f2371e617fabdb787345","sha256":"3f0776df024550c2fb9da2ee25ae16742ffff7ef4578ebd7587ce6d9c7f2d55c","sha512":"a363f6ec4078d42e50c362f08828c94d638365ab0d6c893ed58ae9b6862af68c1acd84551decd30ce8bf4d3a82c1549f3aa8bb9c6ebf228093881e419cc02778","ssdeep":"96:xEs+mOgr0DnrUvpmoqE+FpFOHIA/KVaKDA6qwpU1/3XUOBsuOUCezJjCF+6HWyyb:ys+mOgADnrUvpmW+FWo2Kbq3/3dsuOUj","tlshash":"d1b1af882e0a9165d686aeb8dc651ff42722d51dcd38991c1d4f984d7f0234e285edb8","first_seen":"2026-04-30T10:56:43.294254Z","last_seen":"2026-07-03T15:17:27.593522Z","times_seen":11,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"desk-firelight.finance","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"desk-firelight.finance/cdn-cgi/challenge-platform/h/b/flow/ov1/3388005307:1782651620:xQ81DsuwPnDGxhX3e0IEMbItsqniosqSKxeDke1yzlU/a12d30170b1db4ed/jrT2HrJnddpi9U5I_xnyQ_LPT6pi9sg0ycjfRfaxtFk-1782654913-1.2.1.1-Af_nLG.shoImwmpBUEj.pW3_UiZJ97FzvgFb7K_Bj7amETVoHL0jZ9uTslkIt1eE","fqdn":"desk-firelight.finance","domain":"desk-firelight.finance","tld":"finance"},"ip":{"addr":"104.21.23.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://desk-firelight.finance/","date":"2026-06-28T13:55:13.651Z","timestamp":1782654913651,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"desk-firelight.finance","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 19 Jun 2026 09:39:54 GMT","end":"Thu, 17 Sep 2026 10:38:40 GMT"},"fingerprint":{"sha1":"97:56:F3:86:32:A8:AC:D7:3E:A4:D3:E1:80:AD:1C:4A:94:E0:03:5E","sha256":"0E:BC:D5:FE:9F:D6:65:E7:E8:26:59:23:C1:0D:6B:89:C1:D4:AB:4A:9E:5C:AC:84:77:E8:3B:38:75:1D:90:F4"}}},"request":{"raw":"POST /cdn-cgi/challenge-platform/h/b/flow/ov1/3388005307:1782651620:xQ81DsuwPnDGxhX3e0IEMbItsqniosqSKxeDke1yzlU/a12d30170b1db4ed/jrT2HrJnddpi9U5I_xnyQ_LPT6pi9sg0ycjfRfaxtFk-1782654913-1.2.1.1-Af_nLG.shoImwmpBUEj.pW3_UiZJ97FzvgFb7K_Bj7amETVoHL0jZ9uTslkIt1eE HTTP/1.1\r\nHost: desk-firelight.finance\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://desk-firelight.finance/\r\ncf-chl: jrT2HrJnddpi9U5I_xnyQ_LPT6pi9sg0ycjfRfaxtFk-1782654913-1.2.1.1-Af_nLG.shoImwmpBUEj.pW3_UiZJ97FzvgFb7K_Bj7amETVoHL0jZ9uTslkIt1eE\r\ncf-chl-ra: 0\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 2252\r\nOrigin: https://desk-firelight.finance\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/plain; charset=UTF-8\r\ncf-chl-gen: 0rXmlL2p6PTonjYj0/9zyZTp00jSIDYBJIjh7Be2dZE=$fTncwPna+2hpFEOH6llk2Q==\r\ntiming-allow-origin: https://desk-firelight.finance\r\ncontent-encoding: zstd\r\ndate: Sun, 28 Jun 2026 13:55:13 GMT\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncf-ray: a12d301a5b38b4ed-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19232,"size_decoded":14847,"mime_type":"text/plain; charset=UTF-8","magic":"ASCII text, with very long lines (19232), with no line terminators","md5":"1597aca991be816aa3071dd5bbc5cead","sha1":"f1278fd391d71e80c3e8ba54d9776828669e1525","sha256":"773a371808edd7657626171318fcb283c962e0d96c2675be1588b37fc410da05","sha512":"f6faf5dc62975eaa6060cdbb9d7eb5afb0d41c05fd21afc0839c9dd7782b6aaf62c5a89ae9bd531ba9509b259c15b2cd8b9043453427d6261b4226ffc8ebc4d6","ssdeep":"384:VTGyKimC6FNiDH4YSGeBzGpkMKb1b+Qzl56XHy5O023uhsTqzRX7i+IgCvTMwz97:dRZd6FNQYYKBiyM6b+QLwHy5O0vFRXer","tlshash":"1482e15efcfaaec7180988e8bdb64b9e0528ce548c81f469b6c37964314fe8106e551f","first_seen":"2026-06-28T13:56:02.73171Z","last_seen":"2026-06-28T13:56:02.73171Z","times_seen":1,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"desk-firelight.finance","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"desk-firelight.finance/assets/registry-system.js","fqdn":"desk-firelight.finance","domain":"desk-firelight.finance","tld":"finance"},"ip":{"addr":"104.21.23.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://desk-firelight.finance/","date":"2026-06-28T13:55:20.852Z","timestamp":1782654920852,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"desk-firelight.finance","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 19 Jun 2026 09:39:54 GMT","end":"Thu, 17 Sep 2026 10:38:40 GMT"},"fingerprint":{"sha1":"97:56:F3:86:32:A8:AC:D7:3E:A4:D3:E1:80:AD:1C:4A:94:E0:03:5E","sha256":"0E:BC:D5:FE:9F:D6:65:E7:E8:26:59:23:C1:0D:6B:89:C1:D4:AB:4A:9E:5C:AC:84:77:E8:3B:38:75:1D:90:F4"}}},"request":{"raw":"GET /assets/registry-system.js HTTP/1.1\r\nHost: desk-firelight.finance\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://desk-firelight.finance/\r\nCookie: cf_clearance=.OHbjUhmIlb_MJL6N.Pj2LjVz0Ak1HxcbBmG.pHXA2o-1782654920-1.2.1.1-QcrbyydanAa9ndVwjL8ybMqRIrUUYwh0GfIZRvlBXSlXdNF3B0TUVq_YB6q_i3wSZrYuhjAekbhd6wEZ7fUjF.FTxijHtKfLfwJ3rqjR0iOWXLVSPDmXu0N63U3frBc_0BdmvsT07MQg8A94b2QO.Xbe.Y50Dq7t7djEoqL11TGy6pJ_1iJGN1cTzlmuMkVR3_njQFeKy0D7JzUZTco2mYUGHfX3KG_GtIERSxJgi_ceMpu2rCddiwVxWmN.u_.dsJ0gXN4yWC8F_DNXbQ3w_UBT.rU60DECxBFLOSuBAMXT2OGBHlZ6DYPXQqTqO_LlPs16b2sCLLnBZxfBLpZOEe5VDrES.fantjhpZRN_kvZ3miHIsCGkppOsilDRoyTheRnhT5E6Ek4BgogD9J24h5kTwuOBL7YEk_YGJG4vjrF4cpvY68w5s1J7DViw_oRy1gdXnB_.TWwzZD67qdCjhd43JCgG9hAQoWe1PaRLNidvB3CmvtvXZGq7jm56VRaq\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/javascript;charset=utf-8\r\npriority: u=3,i=?0\r\nlast-modified: Fri, 19 Jun 2026 10:33:34 GMT\r\ndate: Sun, 28 Jun 2026 13:55:21 GMT\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"22ac7895226f387eababf5e5e85ed605\"\r\ncontent-encoding: zstd\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hpT5y%2FKtrKh%2BlMFVyyL0OM3j4TI2Od71r89BnS7ctCQYpS3Mzk%2BkIYYIbCI9u2gLOVbsTVX2rmJ1dC4UpqM1MFTFn5wCH6rxUhWJNlT75l9X7Xo0tySC3Nkh7KuA%2FqfQ3yTyi5yZxOZY\"}]}\r\ncf-ray: a12d30475cc0b4ed-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-08T16:42:47.069256Z","times_seen":17782290,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"desk-firelight.finance","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"desk-firelight.finance/7ae1fd5c09a816c4621ede27e29f7e71fd6aa6f5.png","fqdn":"desk-firelight.finance","domain":"desk-firelight.finance","tld":"finance"},"ip":{"addr":"104.21.23.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://desk-firelight.finance/","date":"2026-06-28T13:55:20.726Z","timestamp":1782654920726,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"desk-firelight.finance","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 19 Jun 2026 09:39:54 GMT","end":"Thu, 17 Sep 2026 10:38:40 GMT"},"fingerprint":{"sha1":"97:56:F3:86:32:A8:AC:D7:3E:A4:D3:E1:80:AD:1C:4A:94:E0:03:5E","sha256":"0E:BC:D5:FE:9F:D6:65:E7:E8:26:59:23:C1:0D:6B:89:C1:D4:AB:4A:9E:5C:AC:84:77:E8:3B:38:75:1D:90:F4"}}},"request":{"raw":"GET /7ae1fd5c09a816c4621ede27e29f7e71fd6aa6f5.png HTTP/1.1\r\nHost: desk-firelight.finance\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://desk-firelight.finance/\r\nCookie: cf_clearance=.OHbjUhmIlb_MJL6N.Pj2LjVz0Ak1HxcbBmG.pHXA2o-1782654920-1.2.1.1-QcrbyydanAa9ndVwjL8ybMqRIrUUYwh0GfIZRvlBXSlXdNF3B0TUVq_YB6q_i3wSZrYuhjAekbhd6wEZ7fUjF.FTxijHtKfLfwJ3rqjR0iOWXLVSPDmXu0N63U3frBc_0BdmvsT07MQg8A94b2QO.Xbe.Y50Dq7t7djEoqL11TGy6pJ_1iJGN1cTzlmuMkVR3_njQFeKy0D7JzUZTco2mYUGHfX3KG_GtIERSxJgi_ceMpu2rCddiwVxWmN.u_.dsJ0gXN4yWC8F_DNXbQ3w_UBT.rU60DECxBFLOSuBAMXT2OGBHlZ6DYPXQqTqO_LlPs16b2sCLLnBZxfBLpZOEe5VDrES.fantjhpZRN_kvZ3miHIsCGkppOsilDRoyTheRnhT5E6Ek4BgogD9J24h5kTwuOBL7YEk_YGJG4vjrF4cpvY68w5s1J7DViw_oRy1gdXnB_.TWwzZD67qdCjhd43JCgG9hAQoWe1PaRLNidvB3CmvtvXZGq7jm56VRaq\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: image/png\r\netag: \"774908dd96042307639e40a6950e03a0\"\r\nlast-modified: Fri, 19 Jun 2026 10:33:34 GMT\r\ndate: Sun, 28 Jun 2026 13:55:20 GMT\r\nserver: cloudflare\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0gRXU01mnLwk9U7TrnrlBHbvlUZPOY8G9IV%2B9reS5LG%2BiRaJRNQ4SazVx5sHTIC8kcShlSN3flRyi1PV3EmTmHlEEsIbp5HLiMBdWmyZGhWCmdIgGegnAvYZKBf5vR%2BCqM963XOpQVeg\"}]}\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\ncontent-length: 2491\r\ncf-ray: a12d30468cbcb4ed-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2491,"size_decoded":3207,"mime_type":"image/png","magic":"PNG image data, 241 x 240, 8-bit colormap, non-interlaced","md5":"774908dd96042307639e40a6950e03a0","sha1":"7ae1fd5c09a816c4621ede27e29f7e71fd6aa6f5","sha256":"0594fb55762cd41c9e6bc4f0ba31f2ba8fd4c8288a22a92da169c6e9bd748b8a","sha512":"fc8a1a0953c216952a585988bb4fc598e514ba032c9cd6e6df764bbd0945992eb96999fc4452c3907462863626f231fea2b802fadfe1190a53f880bffeabfaf8","ssdeep":"","tlshash":"53515df6ecbd282c4014d6ad141f00f3ec37cb86cc4d1d185a830ad496a7aa0fc943e0","first_seen":"2026-04-24T15:23:09.414396Z","last_seen":"2026-08-06T00:21:23.358713Z","times_seen":133,"resource_available":false,"data":null}},"time_used":166,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":166,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"desk-firelight.finance","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"desk-firelight.finance/","fqdn":"desk-firelight.finance","domain":"desk-firelight.finance","tld":"finance"},"ip":{"addr":"104.21.23.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-06-28T13:55:13.033Z","timestamp":1782654913033,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"desk-firelight.finance","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 19 Jun 2026 09:39:54 GMT","end":"Thu, 17 Sep 2026 10:38:40 GMT"},"fingerprint":{"sha1":"97:56:F3:86:32:A8:AC:D7:3E:A4:D3:E1:80:AD:1C:4A:94:E0:03:5E","sha256":"0E:BC:D5:FE:9F:D6:65:E7:E8:26:59:23:C1:0D:6B:89:C1:D4:AB:4A:9E:5C:AC:84:77:E8:3B:38:75:1D:90:F4"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: desk-firelight.finance\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 403 \r\naccept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA\r\ncf-mitigated: challenge\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-security-policy: default-src 'none'; script-src 'nonce-88x0esAAU86VzReUdP7mo3' 'unsafe-eval' https://challenges.cloudflare.com; script-src-attr 'none'; style-src 'unsafe-inline'; img-src 'self' https://challenges.cloudflare.com; connect-src 'self' https://challenges.cloudflare.com; frame-src 'self' https://challenges.cloudflare.com blob:; child-src 'self' https://challenges.cloudflare.com blob:; worker-src blob:; form-action http: https:; base-uri 'self'\r\nserver: cloudflare\r\ncritical-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA\r\ncross-origin-embedder-policy: require-corp\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: same-origin\r\norigin-agent-cluster: ?1\r\npermissions-policy: accelerometer=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=(),xr-spatial-tracking=*\r\nreferrer-policy: same-origin\r\nserver-timing: chlray;desc=\"a12d30170b1db4ed\", cfExtPri\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9QzOg7%2FjWaMapmX7nzQWrWqzr%2BNGhxVCZMdk0WvWIaW0pdlPEWyTMYb3ao7Yn%2Biv7bT5v3cgWM9371vHLlJAL1EJ2%2FR0Ew5%2BtyAKmBsaXu3Vzl9Fg1KUZQgEiyP0cpxFKf%2FkDZfqwAK5\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Sun, 28 Jun 2026 13:55:13 GMT\r\npriority: u=0,i\r\ncontent-encoding: zstd\r\ncf-ray: a12d30170b1db4ed-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5583,"size_decoded":5556,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (5583), with no line terminators","md5":"bb8539956ea4de46d4b7841d3fe0ac1a","sha1":"c4a5c535cf856c7c5159ae26f39d9f7262e330e6","sha256":"ba157eacc2fa16ad249dcff14b1d4df175d8c25824a80cf7e72726b3dbe85a72","sha512":"a60fc6cfb4aeaa5076db0bf0d07640ed39b5602478bcbe53314b9f6e2c6fdec9d0ea9403a42db89906011ee59316b5b36283f98ed5165891cf1793c79230b97a","ssdeep":"96:PNy7toXZzIEb0EaW87pglcxOpz1bWqYxnfOrG4u/rE5bYzueh8Wmw:PNGtkCBK2xGS3f/4uE0yjw","tlshash":"4fb117e3ea73401fa3b5af9660bb736cd313a206ef4051d889619aac41def4b441d688","first_seen":"2026-06-28T13:56:02.734122Z","last_seen":"2026-06-28T13:56:02.734122Z","times_seen":1,"resource_available":true,"data":null}},"time_used":102,"timings":{"blocked":-1,"dns":71,"connect":18,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"desk-firelight.finance","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"desk-firelight.finance/","fqdn":"desk-firelight.finance","domain":"desk-firelight.finance","tld":"finance"},"ip":{"addr":"104.21.23.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-06-28T13:55:20.322Z","timestamp":1782654920322,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"desk-firelight.finance","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 19 Jun 2026 09:39:54 GMT","end":"Thu, 17 Sep 2026 10:38:40 GMT"},"fingerprint":{"sha1":"97:56:F3:86:32:A8:AC:D7:3E:A4:D3:E1:80:AD:1C:4A:94:E0:03:5E","sha256":"0E:BC:D5:FE:9F:D6:65:E7:E8:26:59:23:C1:0D:6B:89:C1:D4:AB:4A:9E:5C:AC:84:77:E8:3B:38:75:1D:90:F4"}}},"request":{"raw":"POST / HTTP/1.1\r\nHost: desk-firelight.finance\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://desk-firelight.finance/?__cf_chl_tk=XchzjIXfd5jOu.QnQllGoBQSbxV6PjgEqyLQYDWJQGU-1782654913-1.0.1.1-B3Td_S2sSdnLG9X3eQeqlEZC3l3uAHs0_Vf0iciw5Do\r\nContent-Type: application/x-www-form-urlencoded\r\nContent-Length: 2093\r\nOrigin: https://desk-firelight.finance\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: cf_clearance=.OHbjUhmIlb_MJL6N.Pj2LjVz0Ak1HxcbBmG.pHXA2o-1782654920-1.2.1.1-QcrbyydanAa9ndVwjL8ybMqRIrUUYwh0GfIZRvlBXSlXdNF3B0TUVq_YB6q_i3wSZrYuhjAekbhd6wEZ7fUjF.FTxijHtKfLfwJ3rqjR0iOWXLVSPDmXu0N63U3frBc_0BdmvsT07MQg8A94b2QO.Xbe.Y50Dq7t7djEoqL11TGy6pJ_1iJGN1cTzlmuMkVR3_njQFeKy0D7JzUZTco2mYUGHfX3KG_GtIERSxJgi_ceMpu2rCddiwVxWmN.u_.dsJ0gXN4yWC8F_DNXbQ3w_UBT.rU60DECxBFLOSuBAMXT2OGBHlZ6DYPXQqTqO_LlPs16b2sCLLnBZxfBLpZOEe5VDrES.fantjhpZRN_kvZ3miHIsCGkppOsilDRoyTheRnhT5E6Ek4BgogD9J24h5kTwuOBL7YEk_YGJG4vjrF4cpvY68w5s1J7DViw_oRy1gdXnB_.TWwzZD67qdCjhd43JCgG9hAQoWe1PaRLNidvB3CmvtvXZGq7jm56VRaq\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nSec-Fetch-User: ?1\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/html;charset=utf-8\r\npriority: u=0,i\r\nlast-modified: Fri, 19 Jun 2026 10:33:34 GMT\r\ndate: Sun, 28 Jun 2026 13:55:20 GMT\r\nserver: cloudflare\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GJgt1%2BYuRzUezQc8zBk2Bf2d2Lo%2B000FP0m0iCNvsEiCwVs7xtUX8TxOOqzX65eTP%2BXlM3VbkQwVcF72yl1%2B1l3lBN3J6wtyuUP2LNt9ls0ERscJeoPmWuM3LP8liIfBZX70ADV7aPeC\"}]}\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a12d30440c91b4ed-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"React","description":"React is an open-source JavaScript library for building user interfaces or UI components.","website":"https://reactjs.org","common_platform_enumeration":"cpe:2.3:a:facebook:react:*:*:*:*:*:*:*:*","icon":"React.svg","categories":["JavaScript frameworks"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Framer Sites","description":"Framer is a no-code web design platform for designing and publishing responsive websites.","website":"https://www.framer.com","common_platform_enumeration":"","icon":"Framer Sites.svg","categories":["CMS","Page builders"]}],"data":{"size":591849,"size_decoded":82345,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1572)","md5":"5b2ff2bbcd32f4a935e1bbdec1250533","sha1":"9460dea8e113c7f7e0455eafad4621270dad5704","sha256":"accb7630dd611d6b8c52748950ae37f89a1acba3cea9df35aefb373f5b56f0f0","sha512":"57191fc495d764b15e6e525d2839edd3a652fd628a0941b4bc9de70c4b0b862d8e38ca5be77d6872d818513641e338630d30c7b634670d10cbd4c9605d675e18","ssdeep":"3072:Ykg/7cNSvoMJRe+BY9mxeLAwH29evHt94foO0WcAfYtI4fzM0WcEfRbfeu1lEz:YkgJ74AELRH2KbADeKSz","tlshash":"1ac408132255d0392cd769aef398b62836186102fb3386dd72fd216fdac9df4126279c","first_seen":"2026-06-28T13:56:02.73585Z","last_seen":"2026-07-03T15:17:27.606123Z","times_seen":5,"resource_available":true,"data":null}},"time_used":613,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":166,"receive":447,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"desk-firelight.finance","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"desk-firelight.finance/favicon.ico","fqdn":"desk-firelight.finance","domain":"desk-firelight.finance","tld":"finance"},"ip":{"addr":"104.21.23.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://desk-firelight.finance/","date":"2026-06-28T13:55:20.621Z","timestamp":1782654920621,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"desk-firelight.finance","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 19 Jun 2026 09:39:54 GMT","end":"Thu, 17 Sep 2026 10:38:40 GMT"},"fingerprint":{"sha1":"97:56:F3:86:32:A8:AC:D7:3E:A4:D3:E1:80:AD:1C:4A:94:E0:03:5E","sha256":"0E:BC:D5:FE:9F:D6:65:E7:E8:26:59:23:C1:0D:6B:89:C1:D4:AB:4A:9E:5C:AC:84:77:E8:3B:38:75:1D:90:F4"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: desk-firelight.finance\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://desk-firelight.finance/\r\nCookie: cf_clearance=.OHbjUhmIlb_MJL6N.Pj2LjVz0Ak1HxcbBmG.pHXA2o-1782654920-1.2.1.1-QcrbyydanAa9ndVwjL8ybMqRIrUUYwh0GfIZRvlBXSlXdNF3B0TUVq_YB6q_i3wSZrYuhjAekbhd6wEZ7fUjF.FTxijHtKfLfwJ3rqjR0iOWXLVSPDmXu0N63U3frBc_0BdmvsT07MQg8A94b2QO.Xbe.Y50Dq7t7djEoqL11TGy6pJ_1iJGN1cTzlmuMkVR3_njQFeKy0D7JzUZTco2mYUGHfX3KG_GtIERSxJgi_ceMpu2rCddiwVxWmN.u_.dsJ0gXN4yWC8F_DNXbQ3w_UBT.rU60DECxBFLOSuBAMXT2OGBHlZ6DYPXQqTqO_LlPs16b2sCLLnBZxfBLpZOEe5VDrES.fantjhpZRN_kvZ3miHIsCGkppOsilDRoyTheRnhT5E6Ek4BgogD9J24h5kTwuOBL7YEk_YGJG4vjrF4cpvY68w5s1J7DViw_oRy1gdXnB_.TWwzZD67qdCjhd43JCgG9hAQoWe1PaRLNidvB3CmvtvXZGq7jm56VRaq\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\ndate: Sun, 28 Jun 2026 13:55:20 GMT\r\nserver: cloudflare\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=B550ZI7YBpG8y2Cpgy3U8GTGWFRXDhfy1BN3Xhqc0gFeMgWVnTGWj7llM3OVMmXEhPKk8eh3zi5Qxi%2BCKZuwQpUt2dGYmPaO0Vzzewis2zs4g%2F61AdbAdE3%2BMrJXLl47XmI5TQWqT4VY\"}]}\r\nage: 6\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\ncf-ray: a12d3045ec9eb4ed-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":566,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-08T16:42:47.069256Z","times_seen":17782290,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"desk-firelight.finance","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"desk-firelight.finance/7b6cfb7a2ef669b66dbffa362e757d6def075182.woff2","fqdn":"desk-firelight.finance","domain":"desk-firelight.finance","tld":"finance"},"ip":{"addr":"104.21.23.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://desk-firelight.finance/","date":"2026-06-28T13:55:20.965Z","timestamp":1782654920965,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"desk-firelight.finance","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 19 Jun 2026 09:39:54 GMT","end":"Thu, 17 Sep 2026 10:38:40 GMT"},"fingerprint":{"sha1":"97:56:F3:86:32:A8:AC:D7:3E:A4:D3:E1:80:AD:1C:4A:94:E0:03:5E","sha256":"0E:BC:D5:FE:9F:D6:65:E7:E8:26:59:23:C1:0D:6B:89:C1:D4:AB:4A:9E:5C:AC:84:77:E8:3B:38:75:1D:90:F4"}}},"request":{"raw":"GET /7b6cfb7a2ef669b66dbffa362e757d6def075182.woff2 HTTP/1.1\r\nHost: desk-firelight.finance\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://desk-firelight.finance/\r\nCookie: cf_clearance=.OHbjUhmIlb_MJL6N.Pj2LjVz0Ak1HxcbBmG.pHXA2o-1782654920-1.2.1.1-QcrbyydanAa9ndVwjL8ybMqRIrUUYwh0GfIZRvlBXSlXdNF3B0TUVq_YB6q_i3wSZrYuhjAekbhd6wEZ7fUjF.FTxijHtKfLfwJ3rqjR0iOWXLVSPDmXu0N63U3frBc_0BdmvsT07MQg8A94b2QO.Xbe.Y50Dq7t7djEoqL11TGy6pJ_1iJGN1cTzlmuMkVR3_njQFeKy0D7JzUZTco2mYUGHfX3KG_GtIERSxJgi_ceMpu2rCddiwVxWmN.u_.dsJ0gXN4yWC8F_DNXbQ3w_UBT.rU60DECxBFLOSuBAMXT2OGBHlZ6DYPXQqTqO_LlPs16b2sCLLnBZxfBLpZOEe5VDrES.fantjhpZRN_kvZ3miHIsCGkppOsilDRoyTheRnhT5E6Ek4BgogD9J24h5kTwuOBL7YEk_YGJG4vjrF4cpvY68w5s1J7DViw_oRy1gdXnB_.TWwzZD67qdCjhd43JCgG9hAQoWe1PaRLNidvB3CmvtvXZGq7jm56VRaq\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: font/woff2\r\netag: \"0b4811bcc09cdbe18daae99bec603851\"\r\nlast-modified: Fri, 19 Jun 2026 10:33:34 GMT\r\ndate: Sun, 28 Jun 2026 13:55:21 GMT\r\nserver: cloudflare\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GaS0D%2Fx4h84ggIRttDSc64Q%2FNpEbISysFwE2ULCWXWM6XcYyPXs3AXfz%2B%2B%2B06qbslWQ23bRrFaNs6qaB0MsY0ncAtu4pqrOn2Ib9lMjE6WS%2FLIJXAkfEizfx9TP07f8k4z1gKp5G60Vc\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a12d30480cd7b4ed-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-08T16:42:47.069256Z","times_seen":17782290,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"desk-firelight.finance","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"desk-firelight.finance/d9f21a476ed4dc3967816cf76c7a1b414629d3d9.svg","fqdn":"desk-firelight.finance","domain":"desk-firelight.finance","tld":"finance"},"ip":{"addr":"104.21.23.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://desk-firelight.finance/","date":"2026-06-28T13:55:20.932Z","timestamp":1782654920932,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"desk-firelight.finance","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 19 Jun 2026 09:39:54 GMT","end":"Thu, 17 Sep 2026 10:38:40 GMT"},"fingerprint":{"sha1":"97:56:F3:86:32:A8:AC:D7:3E:A4:D3:E1:80:AD:1C:4A:94:E0:03:5E","sha256":"0E:BC:D5:FE:9F:D6:65:E7:E8:26:59:23:C1:0D:6B:89:C1:D4:AB:4A:9E:5C:AC:84:77:E8:3B:38:75:1D:90:F4"}}},"request":{"raw":"GET /d9f21a476ed4dc3967816cf76c7a1b414629d3d9.svg HTTP/1.1\r\nHost: desk-firelight.finance\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://desk-firelight.finance/\r\nCookie: cf_clearance=.OHbjUhmIlb_MJL6N.Pj2LjVz0Ak1HxcbBmG.pHXA2o-1782654920-1.2.1.1-QcrbyydanAa9ndVwjL8ybMqRIrUUYwh0GfIZRvlBXSlXdNF3B0TUVq_YB6q_i3wSZrYuhjAekbhd6wEZ7fUjF.FTxijHtKfLfwJ3rqjR0iOWXLVSPDmXu0N63U3frBc_0BdmvsT07MQg8A94b2QO.Xbe.Y50Dq7t7djEoqL11TGy6pJ_1iJGN1cTzlmuMkVR3_njQFeKy0D7JzUZTco2mYUGHfX3KG_GtIERSxJgi_ceMpu2rCddiwVxWmN.u_.dsJ0gXN4yWC8F_DNXbQ3w_UBT.rU60DECxBFLOSuBAMXT2OGBHlZ6DYPXQqTqO_LlPs16b2sCLLnBZxfBLpZOEe5VDrES.fantjhpZRN_kvZ3miHIsCGkppOsilDRoyTheRnhT5E6Ek4BgogD9J24h5kTwuOBL7YEk_YGJG4vjrF4cpvY68w5s1J7DViw_oRy1gdXnB_.TWwzZD67qdCjhd43JCgG9hAQoWe1PaRLNidvB3CmvtvXZGq7jm56VRaq\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Ubn9ScK4BOV2bNXrVA1ssEiEk2CnmNrik3Emt3BVCo7MwpO4MCXjA9JPcp5aFzwaw6OQFQ8hT4GuBH%2BfiVAJ5w8VV9HtFO5BoWECS0f%2FL8nSUq6q%2BgaKKWtD5Xuin8u%2BWB2O%2FQr3hWfm\"}]}\r\nlast-modified: Fri, 19 Jun 2026 10:33:34 GMT\r\ndate: Sun, 28 Jun 2026 13:55:21 GMT\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\netag: W/\"5a0cb2856f15edf4bbb07e9a227d36b8\"\r\ncf-ray: a12d3047dccdb4ed-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3570,"size_decoded":2019,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"5a0cb2856f15edf4bbb07e9a227d36b8","sha1":"d9f21a476ed4dc3967816cf76c7a1b414629d3d9","sha256":"648b8fcabf85413ff444fb1cd0e5ed65a31fe82c574e840086f5b350b90e6c27","sha512":"923a5c9b2ae96bf83d751990a815851410d19cda32beda465f9659374bb01c6cb5f5ec1445a43455652a7d6ef239e8543a8c3a735a740fca59e20f265c65aa90","ssdeep":"","tlshash":"c671e0efeebc23d874cca3fae3538099b20e64e41451ce99cc2e9c0cdd4585da497850","first_seen":"2026-04-24T15:23:09.421323Z","last_seen":"2026-07-03T15:17:27.607418Z","times_seen":16,"resource_available":false,"data":null}},"time_used":166,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":166,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"desk-firelight.finance","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"desk-firelight.finance/f11d729bb0a4d8350d2ea3d0fc062cf6ef2d5298.woff2","fqdn":"desk-firelight.finance","domain":"desk-firelight.finance","tld":"finance"},"ip":{"addr":"104.21.23.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://desk-firelight.finance/","date":"2026-06-28T13:55:21.050Z","timestamp":1782654921050,"http_version":"HTTP/3","security_state":"secure","security_info":null,"request":{"raw":"GET /f11d729bb0a4d8350d2ea3d0fc062cf6ef2d5298.woff2 HTTP/1.1\r\nHost: desk-firelight.finance\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://desk-firelight.finance/\r\nCookie: cf_clearance=.OHbjUhmIlb_MJL6N.Pj2LjVz0Ak1HxcbBmG.pHXA2o-1782654920-1.2.1.1-QcrbyydanAa9ndVwjL8ybMqRIrUUYwh0GfIZRvlBXSlXdNF3B0TUVq_YB6q_i3wSZrYuhjAekbhd6wEZ7fUjF.FTxijHtKfLfwJ3rqjR0iOWXLVSPDmXu0N63U3frBc_0BdmvsT07MQg8A94b2QO.Xbe.Y50Dq7t7djEoqL11TGy6pJ_1iJGN1cTzlmuMkVR3_njQFeKy0D7JzUZTco2mYUGHfX3KG_GtIERSxJgi_ceMpu2rCddiwVxWmN.u_.dsJ0gXN4yWC8F_DNXbQ3w_UBT.rU60DECxBFLOSuBAMXT2OGBHlZ6DYPXQqTqO_LlPs16b2sCLLnBZxfBLpZOEe5VDrES.fantjhpZRN_kvZ3miHIsCGkppOsilDRoyTheRnhT5E6Ek4BgogD9J24h5kTwuOBL7YEk_YGJG4vjrF4cpvY68w5s1J7DViw_oRy1gdXnB_.TWwzZD67qdCjhd43JCgG9hAQoWe1PaRLNidvB3CmvtvXZGq7jm56VRaq\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-08T16:42:47.069256Z","times_seen":17782290,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"desk-firelight.finance","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"desk-firelight.finance/favicon.ico","fqdn":"desk-firelight.finance","domain":"desk-firelight.finance","tld":"finance"},"ip":{"addr":"104.21.23.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://desk-firelight.finance/","date":"2026-06-28T13:55:13.652Z","timestamp":1782654913652,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"desk-firelight.finance","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 19 Jun 2026 09:39:54 GMT","end":"Thu, 17 Sep 2026 10:38:40 GMT"},"fingerprint":{"sha1":"97:56:F3:86:32:A8:AC:D7:3E:A4:D3:E1:80:AD:1C:4A:94:E0:03:5E","sha256":"0E:BC:D5:FE:9F:D6:65:E7:E8:26:59:23:C1:0D:6B:89:C1:D4:AB:4A:9E:5C:AC:84:77:E8:3B:38:75:1D:90:F4"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: desk-firelight.finance\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://desk-firelight.finance/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\ndate: Sun, 28 Jun 2026 13:55:13 GMT\r\nserver: cloudflare\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=C5j01QWSR2Q7LfK9oXwCoLR0DUZ6GuEDyOB2A7gLTY%2FDS2JI4e1s0KYC%2FCZOh5S8eeyebIpdWIGU%2BQnabgoJEEibqcSFeDA%2FJe7RGlEe0Ht82%2B0299kEnaWa5n2YbnDSrYoNLA%2FRJBC2\"}]}\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\ncf-ray: a12d301a5b39b4ed-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":569,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-08T16:42:47.069256Z","times_seen":17782290,"resource_available":true,"data":null}},"time_used":105,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":105,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"desk-firelight.finance","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/ns3si/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://desk-firelight.finance/","date":"2026-06-28T13:55:13.701Z","timestamp":1782654913701,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"challenges.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 16 Jun 2026 20:15:28 GMT","end":"Mon, 14 Sep 2026 21:15:13 GMT"},"fingerprint":{"sha1":"77:27:72:42:CF:51:E8:8C:7C:3E:8C:4C:A1:F0:9A:86:96:B9:0A:16","sha256":"ED:7C:F7:38:B3:0F:00:86:32:D1:14:CE:C0:FF:CA:0E:7C:86:EE:49:51:EF:A4:4B:AA:5C:B6:7C:00:B5:3D:F3"}}},"request":{"raw":"GET /cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/ns3si/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto HTTP/1.1\r\nHost: challenges.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 28 Jun 2026 13:55:13 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\npermissions-policy: accelerometer=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=(),xr-spatial-tracking=*\r\ncontent-security-policy: default-src 'none'; script-src 'nonce-H1VP25KS6clquiqLYjoEsI' 'unsafe-eval'; script-src-attr 'none'; worker-src blob:; style-src 'unsafe-inline'; img-src 'self'; connect-src 'self' https://hagen.challenges.cloudflare.com https://brunhild.challenges.cloudflare.com; frame-src 'self' blob:; child-src 'self' blob:; form-action 'none'; base-uri 'self'; trusted-types gIqNx7 default; require-trusted-types-for 'script'; sandbox allow-same-origin allow-scripts allow-popups allow-forms\r\ncross-origin-embedder-policy: require-corp\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: cross-origin\r\norigin-agent-cluster: ?1\r\naccept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA\r\ncritical-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA\r\nreferrer-policy: same-origin\r\ndocument-policy: js-profiling\r\npriority: u=6,i=?0\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: a12d301aaaf90daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: rd9mjl9g;dur=251399, cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":251399,"size_decoded":97684,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (65536), with no line terminators","md5":"34c35e24c459a4f2898aefc2f84ebaa7","sha1":"f277ba0e80c9afbd0f95b48f824a46996f433e12","sha256":"528e30feb430fd20b8206c6194fad1b112f28550a510943bcb59b63bb15aee69","sha512":"80974fdc57f0e31a604a3771c9de54f94c430db654234fba93a85e102f5d36cda51920b64ee64f359bea2431cae6b9d38188195ad621ed00191cbc71db53736a","ssdeep":"3072:Oadpm514w6Y6FqPEJMv7KN7aL8D1voc+5h9byQbK8O3U4SjZyY7iH/OnSGC:fdQH61sP5hfKD3U4SjZyYODR","tlshash":"29341bcc76c3791a1313f17601a735cfb1f98d9a9029090edea099e438e075da5af9bc","first_seen":"2026-06-28T13:56:02.738703Z","last_seen":"2026-06-28T13:56:02.738703Z","times_seen":1,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":13,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"desk-firelight.finance/21f62e23c13dade325e4c67f7120144d8c1b000f.png","fqdn":"desk-firelight.finance","domain":"desk-firelight.finance","tld":"finance"},"ip":{"addr":"104.21.23.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://desk-firelight.finance/","date":"2026-06-28T13:55:20.856Z","timestamp":1782654920856,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"desk-firelight.finance","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 19 Jun 2026 09:39:54 GMT","end":"Thu, 17 Sep 2026 10:38:40 GMT"},"fingerprint":{"sha1":"97:56:F3:86:32:A8:AC:D7:3E:A4:D3:E1:80:AD:1C:4A:94:E0:03:5E","sha256":"0E:BC:D5:FE:9F:D6:65:E7:E8:26:59:23:C1:0D:6B:89:C1:D4:AB:4A:9E:5C:AC:84:77:E8:3B:38:75:1D:90:F4"}}},"request":{"raw":"GET /21f62e23c13dade325e4c67f7120144d8c1b000f.png HTTP/1.1\r\nHost: desk-firelight.finance\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://desk-firelight.finance/\r\nCookie: cf_clearance=.OHbjUhmIlb_MJL6N.Pj2LjVz0Ak1HxcbBmG.pHXA2o-1782654920-1.2.1.1-QcrbyydanAa9ndVwjL8ybMqRIrUUYwh0GfIZRvlBXSlXdNF3B0TUVq_YB6q_i3wSZrYuhjAekbhd6wEZ7fUjF.FTxijHtKfLfwJ3rqjR0iOWXLVSPDmXu0N63U3frBc_0BdmvsT07MQg8A94b2QO.Xbe.Y50Dq7t7djEoqL11TGy6pJ_1iJGN1cTzlmuMkVR3_njQFeKy0D7JzUZTco2mYUGHfX3KG_GtIERSxJgi_ceMpu2rCddiwVxWmN.u_.dsJ0gXN4yWC8F_DNXbQ3w_UBT.rU60DECxBFLOSuBAMXT2OGBHlZ6DYPXQqTqO_LlPs16b2sCLLnBZxfBLpZOEe5VDrES.fantjhpZRN_kvZ3miHIsCGkppOsilDRoyTheRnhT5E6Ek4BgogD9J24h5kTwuOBL7YEk_YGJG4vjrF4cpvY68w5s1J7DViw_oRy1gdXnB_.TWwzZD67qdCjhd43JCgG9hAQoWe1PaRLNidvB3CmvtvXZGq7jm56VRaq\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: image/png\r\netag: \"325c005cc1e45972382827f49da0ea96\"\r\nlast-modified: Fri, 19 Jun 2026 10:33:34 GMT\r\ndate: Sun, 28 Jun 2026 13:55:21 GMT\r\nserver: cloudflare\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tYLBt45Xw2%2B8VrNhOi8M%2B5lKVo9LaSZxlfYX2jZhpcQOs7vEyjCTODp%2FWkjFL3FEa4Kt8BT6952WGYD%2F9hI5OaOr%2BHsPp6n1gLQWfBd5TmX2CNg4Cg9Qo2tKSyKYKCsKE4rQqAfkvLfr\"}]}\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 9561\r\ncf-ray: a12d30475cc1b4ed-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9561,"size_decoded":10278,"mime_type":"image/png","magic":"PNG image data, 512 x 330, 8-bit colormap, non-interlaced","md5":"325c005cc1e45972382827f49da0ea96","sha1":"21f62e23c13dade325e4c67f7120144d8c1b000f","sha256":"28a269ed570eb9464988f5f1f95f0ad058af621737c019168764e7ff9729db5e","sha512":"c7a86a6b652478b09fd68683da1c1aa291c52bdb6dcf90f92c1c1876b41e183827e46a4957273291708f691d769268355a175b5cfed0c9107da5ee3b878ddb42","ssdeep":"192:UN57AmbeVJVa3qiQXLS/w78IuvOu1U1MOb9ndxMCYdEyGsSTtY:ituVpiy76vOuW3N9zTtY","tlshash":"ee12c0517a4fa87f5687233802aa639154426de4eee9dc2f07737e3c98281b172586cf","first_seen":"2026-04-24T15:23:09.435668Z","last_seen":"2026-07-03T15:17:27.615186Z","times_seen":19,"resource_available":false,"data":null}},"time_used":167,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":167,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"desk-firelight.finance","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"desk-firelight.finance/6aa8a20f82d42a42b35dd8c62f95331eaf1ba39c.woff2","fqdn":"desk-firelight.finance","domain":"desk-firelight.finance","tld":"finance"},"ip":{"addr":"104.21.23.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://desk-firelight.finance/","date":"2026-06-28T13:55:20.962Z","timestamp":1782654920962,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"desk-firelight.finance","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 19 Jun 2026 09:39:54 GMT","end":"Thu, 17 Sep 2026 10:38:40 GMT"},"fingerprint":{"sha1":"97:56:F3:86:32:A8:AC:D7:3E:A4:D3:E1:80:AD:1C:4A:94:E0:03:5E","sha256":"0E:BC:D5:FE:9F:D6:65:E7:E8:26:59:23:C1:0D:6B:89:C1:D4:AB:4A:9E:5C:AC:84:77:E8:3B:38:75:1D:90:F4"}}},"request":{"raw":"GET /6aa8a20f82d42a42b35dd8c62f95331eaf1ba39c.woff2 HTTP/1.1\r\nHost: desk-firelight.finance\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://desk-firelight.finance/\r\nCookie: cf_clearance=.OHbjUhmIlb_MJL6N.Pj2LjVz0Ak1HxcbBmG.pHXA2o-1782654920-1.2.1.1-QcrbyydanAa9ndVwjL8ybMqRIrUUYwh0GfIZRvlBXSlXdNF3B0TUVq_YB6q_i3wSZrYuhjAekbhd6wEZ7fUjF.FTxijHtKfLfwJ3rqjR0iOWXLVSPDmXu0N63U3frBc_0BdmvsT07MQg8A94b2QO.Xbe.Y50Dq7t7djEoqL11TGy6pJ_1iJGN1cTzlmuMkVR3_njQFeKy0D7JzUZTco2mYUGHfX3KG_GtIERSxJgi_ceMpu2rCddiwVxWmN.u_.dsJ0gXN4yWC8F_DNXbQ3w_UBT.rU60DECxBFLOSuBAMXT2OGBHlZ6DYPXQqTqO_LlPs16b2sCLLnBZxfBLpZOEe5VDrES.fantjhpZRN_kvZ3miHIsCGkppOsilDRoyTheRnhT5E6Ek4BgogD9J24h5kTwuOBL7YEk_YGJG4vjrF4cpvY68w5s1J7DViw_oRy1gdXnB_.TWwzZD67qdCjhd43JCgG9hAQoWe1PaRLNidvB3CmvtvXZGq7jm56VRaq\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: font/woff2\r\netag: \"f5284a3495917f6a44f26fb5dd1d8afd\"\r\nlast-modified: Fri, 19 Jun 2026 10:33:34 GMT\r\ndate: Sun, 28 Jun 2026 13:55:21 GMT\r\nserver: cloudflare\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0hjkUkjfb%2B79cYHX6DraNRCzAmcoN6rbVckS1jHLb4VCAumiGOI2DjNaKiTuvKF5nNI%2BKiQwT37WDndWGKCErq15CZiZIS6N4bRr4DSiwQBzVOyooGSRY8ETvH7be71IVwab%2BhyS9W6x\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a12d30480cd6b4ed-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-08T16:42:47.069256Z","times_seen":17782290,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"desk-firelight.finance","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/flow/ov1/2972088411:1782651621:bDGaULntM3-KwBEoGkoESSlIMhkvlpFGZS8gmsbGMP8/a12d301aaaf90daa/fkoDtX9tW6JF06AN2biyK2QhcArXAOLPokekE1NtL2M-1782654913-1.2.1.1-CJqvkqP5RMr4fjOIxBe2BcffTl27S.wVMzE7hzS7p4fPsVNNNNg9T7Nka.2GjmOy","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/ns3si/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","date":"2026-06-28T13:55:15.810Z","timestamp":1782654915810,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"challenges.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 16 Jun 2026 20:15:28 GMT","end":"Mon, 14 Sep 2026 21:15:13 GMT"},"fingerprint":{"sha1":"77:27:72:42:CF:51:E8:8C:7C:3E:8C:4C:A1:F0:9A:86:96:B9:0A:16","sha256":"ED:7C:F7:38:B3:0F:00:86:32:D1:14:CE:C0:FF:CA:0E:7C:86:EE:49:51:EF:A4:4B:AA:5C:B6:7C:00:B5:3D:F3"}}},"request":{"raw":"POST /cdn-cgi/challenge-platform/h/b/flow/ov1/2972088411:1782651621:bDGaULntM3-KwBEoGkoESSlIMhkvlpFGZS8gmsbGMP8/a12d301aaaf90daa/fkoDtX9tW6JF06AN2biyK2QhcArXAOLPokekE1NtL2M-1782654913-1.2.1.1-CJqvkqP5RMr4fjOIxBe2BcffTl27S.wVMzE7hzS7p4fPsVNNNNg9T7Nka.2GjmOy HTTP/1.1\r\nHost: challenges.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/ns3si/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto\r\ncf-chl: fkoDtX9tW6JF06AN2biyK2QhcArXAOLPokekE1NtL2M-1782654913-1.2.1.1-CJqvkqP5RMr4fjOIxBe2BcffTl27S.wVMzE7hzS7p4fPsVNNNNg9T7Nka.2GjmOy\r\ncf-chl-ra: 0\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 88002\r\nOrigin: https://challenges.cloudflare.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 28 Jun 2026 13:55:15 GMT\r\ncontent-type: text/plain; charset=UTF-8\r\ncf-chl-gen: UOVHYm6u3o0aoYwci/0BHtz3QSNS0I9Iax/CddGQ4tWfz1TwcQXW+TB9QeJ1ksW4$yQ3M3UHFB2o/iNNhOGO81A==\r\ntiming-allow-origin: https://challenges.cloudflare.com\r\npriority: u=3,i=?0\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: a12d3027dc880daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":34380,"size_decoded":26269,"mime_type":"text/plain; charset=UTF-8","magic":"ASCII text, with very long lines (34380), with no line terminators","md5":"43f7f24b9146f7ce8638717d5921fd91","sha1":"844ecb15d9b8ac4292267dae6e790e1b44a9d353","sha256":"6aad1cd5e679e26dc9d841d5e3b2f391d9fb4c370904f8ca3a6ffed2c1b201eb","sha512":"d8e3257fda91d0dcbf261f0929fd429608310d59228800f6728f75403ce6e6ebcf3d33951ffb029c175b04c558dace056964eb1ac8f751f770b64154cd194ade","ssdeep":"768:1lov2OjBhN6Z6O18QKRIbIgbZZ/5z5r6EyGeS8I7h/+18sso+:1lGBvN6Zn1UKbL9OEdeS8Il/+18ssl","tlshash":"e3f2f1e71ba03b8246a4337c32e9a04e2d73921c01c5aed8f7f279d6846edc19f6415e","first_seen":"2026-06-28T13:56:02.741414Z","last_seen":"2026-06-28T13:56:02.741414Z","times_seen":1,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"desk-firelight.finance/fce5de906e797a1cb5706ff97ad17ccd1a83706a.png","fqdn":"desk-firelight.finance","domain":"desk-firelight.finance","tld":"finance"},"ip":{"addr":"104.21.23.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://desk-firelight.finance/","date":"2026-06-28T13:55:20.862Z","timestamp":1782654920862,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"desk-firelight.finance","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 19 Jun 2026 09:39:54 GMT","end":"Thu, 17 Sep 2026 10:38:40 GMT"},"fingerprint":{"sha1":"97:56:F3:86:32:A8:AC:D7:3E:A4:D3:E1:80:AD:1C:4A:94:E0:03:5E","sha256":"0E:BC:D5:FE:9F:D6:65:E7:E8:26:59:23:C1:0D:6B:89:C1:D4:AB:4A:9E:5C:AC:84:77:E8:3B:38:75:1D:90:F4"}}},"request":{"raw":"GET /fce5de906e797a1cb5706ff97ad17ccd1a83706a.png HTTP/1.1\r\nHost: desk-firelight.finance\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://desk-firelight.finance/\r\nCookie: cf_clearance=.OHbjUhmIlb_MJL6N.Pj2LjVz0Ak1HxcbBmG.pHXA2o-1782654920-1.2.1.1-QcrbyydanAa9ndVwjL8ybMqRIrUUYwh0GfIZRvlBXSlXdNF3B0TUVq_YB6q_i3wSZrYuhjAekbhd6wEZ7fUjF.FTxijHtKfLfwJ3rqjR0iOWXLVSPDmXu0N63U3frBc_0BdmvsT07MQg8A94b2QO.Xbe.Y50Dq7t7djEoqL11TGy6pJ_1iJGN1cTzlmuMkVR3_njQFeKy0D7JzUZTco2mYUGHfX3KG_GtIERSxJgi_ceMpu2rCddiwVxWmN.u_.dsJ0gXN4yWC8F_DNXbQ3w_UBT.rU60DECxBFLOSuBAMXT2OGBHlZ6DYPXQqTqO_LlPs16b2sCLLnBZxfBLpZOEe5VDrES.fantjhpZRN_kvZ3miHIsCGkppOsilDRoyTheRnhT5E6Ek4BgogD9J24h5kTwuOBL7YEk_YGJG4vjrF4cpvY68w5s1J7DViw_oRy1gdXnB_.TWwzZD67qdCjhd43JCgG9hAQoWe1PaRLNidvB3CmvtvXZGq7jm56VRaq\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: image/png\r\netag: \"46f91da4dfa69727c3e5bae072b02e01\"\r\nlast-modified: Fri, 19 Jun 2026 10:33:34 GMT\r\ndate: Sun, 28 Jun 2026 13:55:21 GMT\r\nserver: cloudflare\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KidTdGJ6Br%2B%2B9y9aTvTijGVJd%2Feeama6oTEmc4ER%2F6fxrLlDWWcYnxQdll358MYw%2Bpw6qbT%2FYR9U2whUJPbUxy13EUhDTwELXl%2BkXy95HeoK8wz2K8oYxTnNBeR6dXT%2BkcXvuMkm0KOg\"}]}\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 9342\r\ncf-ray: a12d30476cc4b4ed-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9342,"size_decoded":10065,"mime_type":"image/png","magic":"PNG image data, 512 x 384, 8-bit colormap, non-interlaced","md5":"46f91da4dfa69727c3e5bae072b02e01","sha1":"fce5de906e797a1cb5706ff97ad17ccd1a83706a","sha256":"070197793e20ccfd87737c8113c2926f251c8a98a7e697f369fa54b2c92ac7c4","sha512":"9dda62e51b554abc588734254c7da9039d4ec2dae4fd29ace3677e18df4bfb82063b80d00740a4f3f690c50bb94bb9dd14a941a6a17b78391130abff0608faaf","ssdeep":"192:trYYNyE1elD5GjyZ2PxQwhtNtEjbUWZpUDSvdpG6SPimnVllzjGE:hBNyE1cD5XZi5yjZpUgp4imRnZ","tlshash":"be12afca5a59d8d68b34b904d8c5349d79254b9f12fe5e930703203929cb3c8c6ef7b0","first_seen":"2026-04-29T09:31:56.271822Z","last_seen":"2026-07-03T15:17:27.618086Z","times_seen":19,"resource_available":false,"data":null}},"time_used":176,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":176,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"desk-firelight.finance","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"desk-firelight.finance/24a16cebd7e30f6458aabc37a83b37cceeeabd4e.png","fqdn":"desk-firelight.finance","domain":"desk-firelight.finance","tld":"finance"},"ip":{"addr":"104.21.23.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://desk-firelight.finance/","date":"2026-06-28T13:55:20.986Z","timestamp":1782654920986,"http_version":"HTTP/3","security_state":"secure","security_info":null,"request":{"raw":"GET /24a16cebd7e30f6458aabc37a83b37cceeeabd4e.png HTTP/1.1\r\nHost: desk-firelight.finance\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://desk-firelight.finance/\r\nCookie: cf_clearance=.OHbjUhmIlb_MJL6N.Pj2LjVz0Ak1HxcbBmG.pHXA2o-1782654920-1.2.1.1-QcrbyydanAa9ndVwjL8ybMqRIrUUYwh0GfIZRvlBXSlXdNF3B0TUVq_YB6q_i3wSZrYuhjAekbhd6wEZ7fUjF.FTxijHtKfLfwJ3rqjR0iOWXLVSPDmXu0N63U3frBc_0BdmvsT07MQg8A94b2QO.Xbe.Y50Dq7t7djEoqL11TGy6pJ_1iJGN1cTzlmuMkVR3_njQFeKy0D7JzUZTco2mYUGHfX3KG_GtIERSxJgi_ceMpu2rCddiwVxWmN.u_.dsJ0gXN4yWC8F_DNXbQ3w_UBT.rU60DECxBFLOSuBAMXT2OGBHlZ6DYPXQqTqO_LlPs16b2sCLLnBZxfBLpZOEe5VDrES.fantjhpZRN_kvZ3miHIsCGkppOsilDRoyTheRnhT5E6Ek4BgogD9J24h5kTwuOBL7YEk_YGJG4vjrF4cpvY68w5s1J7DViw_oRy1gdXnB_.TWwzZD67qdCjhd43JCgG9hAQoWe1PaRLNidvB3CmvtvXZGq7jm56VRaq\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-08T16:42:47.069256Z","times_seen":17782290,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"desk-firelight.finance","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"desk-firelight.finance/1729aa1263747dd8b8588b63077202ed2d2d7318.svg","fqdn":"desk-firelight.finance","domain":"desk-firelight.finance","tld":"finance"},"ip":{"addr":"104.21.23.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://desk-firelight.finance/","date":"2026-06-28T13:55:21.020Z","timestamp":1782654921020,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"desk-firelight.finance","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 19 Jun 2026 09:39:54 GMT","end":"Thu, 17 Sep 2026 10:38:40 GMT"},"fingerprint":{"sha1":"97:56:F3:86:32:A8:AC:D7:3E:A4:D3:E1:80:AD:1C:4A:94:E0:03:5E","sha256":"0E:BC:D5:FE:9F:D6:65:E7:E8:26:59:23:C1:0D:6B:89:C1:D4:AB:4A:9E:5C:AC:84:77:E8:3B:38:75:1D:90:F4"}}},"request":{"raw":"GET /1729aa1263747dd8b8588b63077202ed2d2d7318.svg HTTP/1.1\r\nHost: desk-firelight.finance\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://desk-firelight.finance/\r\nCookie: cf_clearance=.OHbjUhmIlb_MJL6N.Pj2LjVz0Ak1HxcbBmG.pHXA2o-1782654920-1.2.1.1-QcrbyydanAa9ndVwjL8ybMqRIrUUYwh0GfIZRvlBXSlXdNF3B0TUVq_YB6q_i3wSZrYuhjAekbhd6wEZ7fUjF.FTxijHtKfLfwJ3rqjR0iOWXLVSPDmXu0N63U3frBc_0BdmvsT07MQg8A94b2QO.Xbe.Y50Dq7t7djEoqL11TGy6pJ_1iJGN1cTzlmuMkVR3_njQFeKy0D7JzUZTco2mYUGHfX3KG_GtIERSxJgi_ceMpu2rCddiwVxWmN.u_.dsJ0gXN4yWC8F_DNXbQ3w_UBT.rU60DECxBFLOSuBAMXT2OGBHlZ6DYPXQqTqO_LlPs16b2sCLLnBZxfBLpZOEe5VDrES.fantjhpZRN_kvZ3miHIsCGkppOsilDRoyTheRnhT5E6Ek4BgogD9J24h5kTwuOBL7YEk_YGJG4vjrF4cpvY68w5s1J7DViw_oRy1gdXnB_.TWwzZD67qdCjhd43JCgG9hAQoWe1PaRLNidvB3CmvtvXZGq7jm56VRaq\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: image/svg+xml\r\npriority: u=4,i\r\nlast-modified: Fri, 19 Jun 2026 10:33:34 GMT\r\ndate: Sun, 28 Jun 2026 13:55:21 GMT\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"2af18033ebf1d46e16a2a12fa77e9a35\"\r\ncontent-encoding: zstd\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=A9cDXr%2BOpmox8NKEfFsDtKyhq0GNONbdE%2BNZ7C3%2BpIimPXm%2FnpGQExTsZ%2Bcq00Rz6VR8AVycMkvOWqwCI1zwI1NYXo%2B37LQ8VdkdHGnY4ySbA9idjc%2FHcTI03BSaLFdBJ0%2BrSja00hTQ\"}]}\r\ncf-ray: a12d30486ce4b4ed-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4401,"size_decoded":2524,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"2af18033ebf1d46e16a2a12fa77e9a35","sha1":"1729aa1263747dd8b8588b63077202ed2d2d7318","sha256":"0a861394733fd023e83d260dabef406361dfb0ab1231b6c1bdc9ac6e212ed2da","sha512":"7ec8ed5d91caa45544f2b4e2cc81f4965ff94417ff2d1c4c0970aaefa296186246e141e2828f9e23bdf26ccaada2c9ee68c1e2ecdcb795390195ac8a038dcd62","ssdeep":"96:+Zk7pzJjO2fK2eSRNREFRuSoOApRc7pdL7QHS9EdP1HEDxG:yk7fb2SRNREFRQOApCpdDEJ5EDxG","tlshash":"679176eedfbcb5e5b089e3eefb536098351f98766281ce91c34d2c896096c0cd9994d0","first_seen":"2026-02-16T14:56:50.163733Z","last_seen":"2026-07-03T15:17:27.620045Z","times_seen":18,"resource_available":false,"data":null}},"time_used":170,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":170,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"desk-firelight.finance","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/d/a12d301aaaf90daa/1782654914100/_Mmxtcczc2gLnVd","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/ns3si/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","date":"2026-06-28T13:55:15.555Z","timestamp":1782654915555,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"challenges.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 16 Jun 2026 20:15:28 GMT","end":"Mon, 14 Sep 2026 21:15:13 GMT"},"fingerprint":{"sha1":"77:27:72:42:CF:51:E8:8C:7C:3E:8C:4C:A1:F0:9A:86:96:B9:0A:16","sha256":"ED:7C:F7:38:B3:0F:00:86:32:D1:14:CE:C0:FF:CA:0E:7C:86:EE:49:51:EF:A4:4B:AA:5C:B6:7C:00:B5:3D:F3"}}},"request":{"raw":"GET /cdn-cgi/challenge-platform/h/b/d/a12d301aaaf90daa/1782654914100/_Mmxtcczc2gLnVd HTTP/1.1\r\nHost: challenges.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/ns3si/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 28 Jun 2026 13:55:15 GMT\r\ncontent-type: image/png\r\ncontent-length: 5775\r\npriority: u=6,i\r\nserver: cloudflare\r\ncf-ray: a12d30263e910daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5775,"size_decoded":5996,"mime_type":"image/png","magic":"PNG image data, 66 x 85, 8-bit grayscale, non-interlaced","md5":"f0ccee1110ca4432c322efd48e4d268a","sha1":"0e16dac17a2b70a2e4e660a2012d7c39f2d90cf2","sha256":"66eda9e645a2022cf34147c9d70200c1953a09d11b202f7e7c647c0e89063460","sha512":"1478343d4c4f2b2b1f50e601f8fee38c097f8b9debc08eae357eca62f15fae5cc3aa8fd90047c4a48dab90aba591c62afbfa6ed0196c1c6f77073b93b7d1e549","ssdeep":"3:yionv//thPlO3SY2wq0VJklXGl2up:6v/lhPSa2oCVp","tlshash":"66c112d743086439c154473541fc1831c8d522121a319124105258312611104c7945c9","first_seen":"2026-06-28T13:56:02.745542Z","last_seen":"2026-06-28T13:56:02.745542Z","times_seen":1,"resource_available":false,"data":null}},"time_used":4,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":4,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"desk-firelight.finance/658f8cdcc5d5ae48eb3db8f5f2b3472b430024ed.woff2","fqdn":"desk-firelight.finance","domain":"desk-firelight.finance","tld":"finance"},"ip":{"addr":"104.21.23.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://desk-firelight.finance/","date":"2026-06-28T13:55:20.955Z","timestamp":1782654920955,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"desk-firelight.finance","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 19 Jun 2026 09:39:54 GMT","end":"Thu, 17 Sep 2026 10:38:40 GMT"},"fingerprint":{"sha1":"97:56:F3:86:32:A8:AC:D7:3E:A4:D3:E1:80:AD:1C:4A:94:E0:03:5E","sha256":"0E:BC:D5:FE:9F:D6:65:E7:E8:26:59:23:C1:0D:6B:89:C1:D4:AB:4A:9E:5C:AC:84:77:E8:3B:38:75:1D:90:F4"}}},"request":{"raw":"GET /658f8cdcc5d5ae48eb3db8f5f2b3472b430024ed.woff2 HTTP/1.1\r\nHost: desk-firelight.finance\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://desk-firelight.finance/\r\nCookie: cf_clearance=.OHbjUhmIlb_MJL6N.Pj2LjVz0Ak1HxcbBmG.pHXA2o-1782654920-1.2.1.1-QcrbyydanAa9ndVwjL8ybMqRIrUUYwh0GfIZRvlBXSlXdNF3B0TUVq_YB6q_i3wSZrYuhjAekbhd6wEZ7fUjF.FTxijHtKfLfwJ3rqjR0iOWXLVSPDmXu0N63U3frBc_0BdmvsT07MQg8A94b2QO.Xbe.Y50Dq7t7djEoqL11TGy6pJ_1iJGN1cTzlmuMkVR3_njQFeKy0D7JzUZTco2mYUGHfX3KG_GtIERSxJgi_ceMpu2rCddiwVxWmN.u_.dsJ0gXN4yWC8F_DNXbQ3w_UBT.rU60DECxBFLOSuBAMXT2OGBHlZ6DYPXQqTqO_LlPs16b2sCLLnBZxfBLpZOEe5VDrES.fantjhpZRN_kvZ3miHIsCGkppOsilDRoyTheRnhT5E6Ek4BgogD9J24h5kTwuOBL7YEk_YGJG4vjrF4cpvY68w5s1J7DViw_oRy1gdXnB_.TWwzZD67qdCjhd43JCgG9hAQoWe1PaRLNidvB3CmvtvXZGq7jm56VRaq\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: font/woff2\r\netag: \"bfb826ea3b1f35c35bb3b4091fea4246\"\r\nlast-modified: Fri, 19 Jun 2026 10:33:34 GMT\r\ndate: Sun, 28 Jun 2026 13:55:21 GMT\r\nserver: cloudflare\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=il1s37xzZlVI72rTNkmOe4dLI4%2FBFaUrwlDP3BONjEDO0sZFtgaC62Hd%2BuEBYcFuQw6%2Bz62W12DS6d5yuzZPuZ8Aj3va5OvBMQwXs%2BmuzkNqfTpepTXMgSmADQi3lVGJfG4WOEor2Bg7\"}]}\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncontent-length: 5364\r\ncf-ray: a12d3047fcd4b4ed-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5364,"size_decoded":6083,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), CFF, length 5364, version 1.0","md5":"bfb826ea3b1f35c35bb3b4091fea4246","sha1":"658f8cdcc5d5ae48eb3db8f5f2b3472b430024ed","sha256":"5959f47a1d474288d514b3aa9aadbc339e01756e1df3a369e041fa5f04b6423f","sha512":"4b94c0b1b8d71d571f5be69adf32e55f6363641ebabd59e9cb14e1331e35c922821b6cf5ef1c92553791141b9987ef9726351024929f60b17d3b03bf08d5e687","ssdeep":"96:LrMjXYrXr8PIFZ1eAexv9WvcjcWZxJYyxL6kgMNWNpDrcffLmG97:fOiAAxix1H9XJYFk2QaG","tlshash":"29b18e9786d698cfea32cd396a513143081dbd261f84fe4096e80cb69372d2a48b123d","first_seen":"2025-12-16T22:25:45.588559Z","last_seen":"2026-07-03T15:17:27.59563Z","times_seen":15,"resource_available":false,"data":null}},"time_used":188,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":188,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"desk-firelight.finance","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"desk-firelight.finance/f905dfdaee0239159a779f2d1e56c4da73766ce1.woff2","fqdn":"desk-firelight.finance","domain":"desk-firelight.finance","tld":"finance"},"ip":{"addr":"104.21.23.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://desk-firelight.finance/","date":"2026-06-28T13:55:20.976Z","timestamp":1782654920976,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"desk-firelight.finance","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 19 Jun 2026 09:39:54 GMT","end":"Thu, 17 Sep 2026 10:38:40 GMT"},"fingerprint":{"sha1":"97:56:F3:86:32:A8:AC:D7:3E:A4:D3:E1:80:AD:1C:4A:94:E0:03:5E","sha256":"0E:BC:D5:FE:9F:D6:65:E7:E8:26:59:23:C1:0D:6B:89:C1:D4:AB:4A:9E:5C:AC:84:77:E8:3B:38:75:1D:90:F4"}}},"request":{"raw":"GET /f905dfdaee0239159a779f2d1e56c4da73766ce1.woff2 HTTP/1.1\r\nHost: desk-firelight.finance\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://desk-firelight.finance/\r\nCookie: cf_clearance=.OHbjUhmIlb_MJL6N.Pj2LjVz0Ak1HxcbBmG.pHXA2o-1782654920-1.2.1.1-QcrbyydanAa9ndVwjL8ybMqRIrUUYwh0GfIZRvlBXSlXdNF3B0TUVq_YB6q_i3wSZrYuhjAekbhd6wEZ7fUjF.FTxijHtKfLfwJ3rqjR0iOWXLVSPDmXu0N63U3frBc_0BdmvsT07MQg8A94b2QO.Xbe.Y50Dq7t7djEoqL11TGy6pJ_1iJGN1cTzlmuMkVR3_njQFeKy0D7JzUZTco2mYUGHfX3KG_GtIERSxJgi_ceMpu2rCddiwVxWmN.u_.dsJ0gXN4yWC8F_DNXbQ3w_UBT.rU60DECxBFLOSuBAMXT2OGBHlZ6DYPXQqTqO_LlPs16b2sCLLnBZxfBLpZOEe5VDrES.fantjhpZRN_kvZ3miHIsCGkppOsilDRoyTheRnhT5E6Ek4BgogD9J24h5kTwuOBL7YEk_YGJG4vjrF4cpvY68w5s1J7DViw_oRy1gdXnB_.TWwzZD67qdCjhd43JCgG9hAQoWe1PaRLNidvB3CmvtvXZGq7jm56VRaq\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: font/woff2\r\netag: \"b8cdc28bcb64c4f37591d58dcc29003c\"\r\nlast-modified: Fri, 19 Jun 2026 10:33:34 GMT\r\ndate: Sun, 28 Jun 2026 13:55:21 GMT\r\nserver: cloudflare\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hccIL2Re2JZgtvhmjOKtYqgObPuWQq3XRlJjfsJ1ER5XVjqc7F5FybMhChswyY47aHrNjZfaBIr8oECZXks3ARgn3N5VyMmAu3Oafq5d7rwWk9qGAM60pNh0%2FwhlrfTr0WNWB0UKfl9G\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a12d30481cdcb4ed-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-08T16:42:47.069256Z","times_seen":17782290,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"desk-firelight.finance","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"desk-firelight.finance/61fdd268a7b95706c26ba67b0e7831366cf665c4.png","fqdn":"desk-firelight.finance","domain":"desk-firelight.finance","tld":"finance"},"ip":{"addr":"104.21.23.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://desk-firelight.finance/","date":"2026-06-28T13:55:20.985Z","timestamp":1782654920985,"http_version":"HTTP/3","security_state":"secure","security_info":null,"request":{"raw":"GET /61fdd268a7b95706c26ba67b0e7831366cf665c4.png HTTP/1.1\r\nHost: desk-firelight.finance\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://desk-firelight.finance/\r\nCookie: cf_clearance=.OHbjUhmIlb_MJL6N.Pj2LjVz0Ak1HxcbBmG.pHXA2o-1782654920-1.2.1.1-QcrbyydanAa9ndVwjL8ybMqRIrUUYwh0GfIZRvlBXSlXdNF3B0TUVq_YB6q_i3wSZrYuhjAekbhd6wEZ7fUjF.FTxijHtKfLfwJ3rqjR0iOWXLVSPDmXu0N63U3frBc_0BdmvsT07MQg8A94b2QO.Xbe.Y50Dq7t7djEoqL11TGy6pJ_1iJGN1cTzlmuMkVR3_njQFeKy0D7JzUZTco2mYUGHfX3KG_GtIERSxJgi_ceMpu2rCddiwVxWmN.u_.dsJ0gXN4yWC8F_DNXbQ3w_UBT.rU60DECxBFLOSuBAMXT2OGBHlZ6DYPXQqTqO_LlPs16b2sCLLnBZxfBLpZOEe5VDrES.fantjhpZRN_kvZ3miHIsCGkppOsilDRoyTheRnhT5E6Ek4BgogD9J24h5kTwuOBL7YEk_YGJG4vjrF4cpvY68w5s1J7DViw_oRy1gdXnB_.TWwzZD67qdCjhd43JCgG9hAQoWe1PaRLNidvB3CmvtvXZGq7jm56VRaq\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-08T16:42:47.069256Z","times_seen":17782290,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"desk-firelight.finance","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"desk-firelight.finance/f2a99d499d2f432ff42c683adce3d4f8f0e67b97.png","fqdn":"desk-firelight.finance","domain":"desk-firelight.finance","tld":"finance"},"ip":{"addr":"104.21.23.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://desk-firelight.finance/","date":"2026-06-28T13:55:20.859Z","timestamp":1782654920859,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"desk-firelight.finance","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 19 Jun 2026 09:39:54 GMT","end":"Thu, 17 Sep 2026 10:38:40 GMT"},"fingerprint":{"sha1":"97:56:F3:86:32:A8:AC:D7:3E:A4:D3:E1:80:AD:1C:4A:94:E0:03:5E","sha256":"0E:BC:D5:FE:9F:D6:65:E7:E8:26:59:23:C1:0D:6B:89:C1:D4:AB:4A:9E:5C:AC:84:77:E8:3B:38:75:1D:90:F4"}}},"request":{"raw":"GET /f2a99d499d2f432ff42c683adce3d4f8f0e67b97.png HTTP/1.1\r\nHost: desk-firelight.finance\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://desk-firelight.finance/\r\nCookie: cf_clearance=.OHbjUhmIlb_MJL6N.Pj2LjVz0Ak1HxcbBmG.pHXA2o-1782654920-1.2.1.1-QcrbyydanAa9ndVwjL8ybMqRIrUUYwh0GfIZRvlBXSlXdNF3B0TUVq_YB6q_i3wSZrYuhjAekbhd6wEZ7fUjF.FTxijHtKfLfwJ3rqjR0iOWXLVSPDmXu0N63U3frBc_0BdmvsT07MQg8A94b2QO.Xbe.Y50Dq7t7djEoqL11TGy6pJ_1iJGN1cTzlmuMkVR3_njQFeKy0D7JzUZTco2mYUGHfX3KG_GtIERSxJgi_ceMpu2rCddiwVxWmN.u_.dsJ0gXN4yWC8F_DNXbQ3w_UBT.rU60DECxBFLOSuBAMXT2OGBHlZ6DYPXQqTqO_LlPs16b2sCLLnBZxfBLpZOEe5VDrES.fantjhpZRN_kvZ3miHIsCGkppOsilDRoyTheRnhT5E6Ek4BgogD9J24h5kTwuOBL7YEk_YGJG4vjrF4cpvY68w5s1J7DViw_oRy1gdXnB_.TWwzZD67qdCjhd43JCgG9hAQoWe1PaRLNidvB3CmvtvXZGq7jm56VRaq\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: image/png\r\netag: \"28f3c1cc4d40a59fcf0f079642b9b0cd\"\r\nlast-modified: Fri, 19 Jun 2026 10:33:34 GMT\r\ndate: Sun, 28 Jun 2026 13:55:21 GMT\r\nserver: cloudflare\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=L6uRNQA8wKU%2F9Vrh6S5wH04xakCbC9n8lVdIX4WXY52UpJWLlpdRKTyXxS9OhG6yA9%2BJE4fNeawLCPRvrZY13iqTukmxk6J9%2FM2IqagnYRaxcfFDitEdRrctIAjBlF4%2BLBhNx%2Fz2FRD6\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a12d30476cc2b4ed-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":26608,"size_decoded":27281,"mime_type":"image/png","magic":"PNG image data, 374 x 375, 8-bit colormap, non-interlaced","md5":"28f3c1cc4d40a59fcf0f079642b9b0cd","sha1":"f2a99d499d2f432ff42c683adce3d4f8f0e67b97","sha256":"d256b15f5b457d476bf59db37035aef282e31bb2c1c79a6e1e1b568eb3e6247f","sha512":"7e89e7b186c93607bbcd7d6c91c615613b478e12f76fd6371e0cff13d94827e900a7195c2aacf29585349ead1e87f7ac8e3ff1f6ba2c162938f4dd4178057fdc","ssdeep":"768:as3FNSH36osLOmYPLwpyym3Kx4F3kpyhuMY:9VNSXtlpLKc90","tlshash":"42c2e0e2010ad43ac1879667bdd6e812073e0a5de681ca86637c8f0b8e4d488ef5df48","first_seen":"2026-04-24T15:23:09.42495Z","last_seen":"2026-07-03T15:17:27.594183Z","times_seen":19,"resource_available":false,"data":null}},"time_used":249,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":163,"receive":86,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"desk-firelight.finance","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"desk-firelight.finance/05768f48200596944dbe567095051ea1a2c9e610.bin","fqdn":"desk-firelight.finance","domain":"desk-firelight.finance","tld":"finance"},"ip":{"addr":"104.21.23.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://desk-firelight.finance/","date":"2026-06-28T13:55:21.049Z","timestamp":1782654921049,"http_version":"HTTP/3","security_state":"secure","security_info":null,"request":{"raw":"GET /05768f48200596944dbe567095051ea1a2c9e610.bin HTTP/1.1\r\nHost: desk-firelight.finance\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://desk-firelight.finance/\r\nCookie: cf_clearance=.OHbjUhmIlb_MJL6N.Pj2LjVz0Ak1HxcbBmG.pHXA2o-1782654920-1.2.1.1-QcrbyydanAa9ndVwjL8ybMqRIrUUYwh0GfIZRvlBXSlXdNF3B0TUVq_YB6q_i3wSZrYuhjAekbhd6wEZ7fUjF.FTxijHtKfLfwJ3rqjR0iOWXLVSPDmXu0N63U3frBc_0BdmvsT07MQg8A94b2QO.Xbe.Y50Dq7t7djEoqL11TGy6pJ_1iJGN1cTzlmuMkVR3_njQFeKy0D7JzUZTco2mYUGHfX3KG_GtIERSxJgi_ceMpu2rCddiwVxWmN.u_.dsJ0gXN4yWC8F_DNXbQ3w_UBT.rU60DECxBFLOSuBAMXT2OGBHlZ6DYPXQqTqO_LlPs16b2sCLLnBZxfBLpZOEe5VDrES.fantjhpZRN_kvZ3miHIsCGkppOsilDRoyTheRnhT5E6Ek4BgogD9J24h5kTwuOBL7YEk_YGJG4vjrF4cpvY68w5s1J7DViw_oRy1gdXnB_.TWwzZD67qdCjhd43JCgG9hAQoWe1PaRLNidvB3CmvtvXZGq7jm56VRaq\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-08T16:42:47.069256Z","times_seen":17782290,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"desk-firelight.finance","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/flow/ov1/2972088411:1782651621:bDGaULntM3-KwBEoGkoESSlIMhkvlpFGZS8gmsbGMP8/a12d301aaaf90daa/fkoDtX9tW6JF06AN2biyK2QhcArXAOLPokekE1NtL2M-1782654913-1.2.1.1-CJqvkqP5RMr4fjOIxBe2BcffTl27S.wVMzE7hzS7p4fPsVNNNNg9T7Nka.2GjmOy","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/ns3si/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","date":"2026-06-28T13:55:14.093Z","timestamp":1782654914093,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"challenges.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 16 Jun 2026 20:15:28 GMT","end":"Mon, 14 Sep 2026 21:15:13 GMT"},"fingerprint":{"sha1":"77:27:72:42:CF:51:E8:8C:7C:3E:8C:4C:A1:F0:9A:86:96:B9:0A:16","sha256":"ED:7C:F7:38:B3:0F:00:86:32:D1:14:CE:C0:FF:CA:0E:7C:86:EE:49:51:EF:A4:4B:AA:5C:B6:7C:00:B5:3D:F3"}}},"request":{"raw":"POST /cdn-cgi/challenge-platform/h/b/flow/ov1/2972088411:1782651621:bDGaULntM3-KwBEoGkoESSlIMhkvlpFGZS8gmsbGMP8/a12d301aaaf90daa/fkoDtX9tW6JF06AN2biyK2QhcArXAOLPokekE1NtL2M-1782654913-1.2.1.1-CJqvkqP5RMr4fjOIxBe2BcffTl27S.wVMzE7hzS7p4fPsVNNNNg9T7Nka.2GjmOy HTTP/1.1\r\nHost: challenges.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/ns3si/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto\r\ncf-chl: fkoDtX9tW6JF06AN2biyK2QhcArXAOLPokekE1NtL2M-1782654913-1.2.1.1-CJqvkqP5RMr4fjOIxBe2BcffTl27S.wVMzE7hzS7p4fPsVNNNNg9T7Nka.2GjmOy\r\ncf-chl-ra: 0\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 4631\r\nOrigin: https://challenges.cloudflare.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 28 Jun 2026 13:55:14 GMT\r\ncontent-type: text/plain; charset=UTF-8\r\ncf-chl-gen: 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$Xcrlg+3a57HP7xJXaD3uug==\r\ntiming-allow-origin: https://challenges.cloudflare.com\r\npriority: u=3,i=?0\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: a12d301d1bfd0daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":383520,"size_decoded":288665,"mime_type":"text/plain; charset=UTF-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"bc8523d48a50ba479cb7c74fc3bd334b","sha1":"8de6f1a33139f67375241e5b42535a0d1b705415","sha256":"bd40fcf04f92c3ab69976a74d3f9fd5e8de75bcc19023d6afdcd4b665a44fe31","sha512":"39ac73bec8da3820aba9a9f666ef6ec60c6a975d9f81555ad24cecc4f34dd800335053025cb335898c3f6aaf0d6e541f45bd454d0f9b8a650d836fc006e8be58","ssdeep":"6144:EtQQ97jZ+O3GczNHOo8SkkDWQiRomLpbFeq+Ad2PqgCV3tOC1Qd:6QQ9J+AGyNuo4ky7Pe2dMCV92d","tlshash":"2d842337b3586a968f46469b51e9f82a169349930076e4e077ee3f83c5bccb52e3052c","first_seen":"2026-06-28T13:56:02.749342Z","last_seen":"2026-06-28T13:56:02.749342Z","times_seen":1,"resource_available":false,"data":null}},"time_used":124,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":116,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"desk-firelight.finance/ed37fffbc9143807f4b38ff004f1c693a7fb982f.png","fqdn":"desk-firelight.finance","domain":"desk-firelight.finance","tld":"finance"},"ip":{"addr":"104.21.23.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://desk-firelight.finance/","date":"2026-06-28T13:55:20.863Z","timestamp":1782654920863,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"desk-firelight.finance","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 19 Jun 2026 09:39:54 GMT","end":"Thu, 17 Sep 2026 10:38:40 GMT"},"fingerprint":{"sha1":"97:56:F3:86:32:A8:AC:D7:3E:A4:D3:E1:80:AD:1C:4A:94:E0:03:5E","sha256":"0E:BC:D5:FE:9F:D6:65:E7:E8:26:59:23:C1:0D:6B:89:C1:D4:AB:4A:9E:5C:AC:84:77:E8:3B:38:75:1D:90:F4"}}},"request":{"raw":"GET /ed37fffbc9143807f4b38ff004f1c693a7fb982f.png HTTP/1.1\r\nHost: desk-firelight.finance\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://desk-firelight.finance/\r\nCookie: cf_clearance=.OHbjUhmIlb_MJL6N.Pj2LjVz0Ak1HxcbBmG.pHXA2o-1782654920-1.2.1.1-QcrbyydanAa9ndVwjL8ybMqRIrUUYwh0GfIZRvlBXSlXdNF3B0TUVq_YB6q_i3wSZrYuhjAekbhd6wEZ7fUjF.FTxijHtKfLfwJ3rqjR0iOWXLVSPDmXu0N63U3frBc_0BdmvsT07MQg8A94b2QO.Xbe.Y50Dq7t7djEoqL11TGy6pJ_1iJGN1cTzlmuMkVR3_njQFeKy0D7JzUZTco2mYUGHfX3KG_GtIERSxJgi_ceMpu2rCddiwVxWmN.u_.dsJ0gXN4yWC8F_DNXbQ3w_UBT.rU60DECxBFLOSuBAMXT2OGBHlZ6DYPXQqTqO_LlPs16b2sCLLnBZxfBLpZOEe5VDrES.fantjhpZRN_kvZ3miHIsCGkppOsilDRoyTheRnhT5E6Ek4BgogD9J24h5kTwuOBL7YEk_YGJG4vjrF4cpvY68w5s1J7DViw_oRy1gdXnB_.TWwzZD67qdCjhd43JCgG9hAQoWe1PaRLNidvB3CmvtvXZGq7jm56VRaq\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: image/png\r\netag: \"ad0389142192fa77d4655eeac3875267\"\r\nlast-modified: Fri, 19 Jun 2026 10:33:34 GMT\r\ndate: Sun, 28 Jun 2026 13:55:21 GMT\r\nserver: cloudflare\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DCSQwA9nCfYrOcuNMe9%2FyKseQ3AVy%2FCb1mbs8jy10gp6xvtwhewYazsgdOeGjFa2PxV3yrqAcFL3NVsEwb2ZU2pJze2JXB%2B0N2rNHlcUcpgPtzw3stVUfBckhVQhfxQC%2F8nPNIM8MuZp\"}]}\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 10544\r\ncf-ray: a12d30476cc5b4ed-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10544,"size_decoded":11260,"mime_type":"image/png","magic":"PNG image data, 512 x 384, 8-bit colormap, non-interlaced","md5":"ad0389142192fa77d4655eeac3875267","sha1":"ed37fffbc9143807f4b38ff004f1c693a7fb982f","sha256":"91ac80610f3a72ee41bb54531bcf11d3b88b301d2c9b5cf3f2a5d571fdc73fbe","sha512":"197cb672765fbdf1dcd4acc495c6f785c67cc043394dcc23e95527842db794ee75cfac47f605bf20d8f7971b6fbb9067ea150e73f7f6c9dfffeff4316d851d72","ssdeep":"192:2gZ+WDdyPCmBDMecRJiGDQx02F0bQO3YpEdJCnGmOMqBAZb0sVsXJ:KWDdOJDM7QxFF0TIpEOPqB0Na5","tlshash":"55229f1a9bc737014d22bd3b29c43167a3b3e79205374aee7468daf1eac9441b569318","first_seen":"2026-04-29T09:31:56.2608Z","last_seen":"2026-07-03T15:17:27.599108Z","times_seen":19,"resource_available":false,"data":null}},"time_used":174,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":173,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"desk-firelight.finance","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"desk-firelight.finance/cdn-cgi/challenge-platform/h/b/orchestrate/chl_page/v1?ray=a12d30170b1db4ed","fqdn":"desk-firelight.finance","domain":"desk-firelight.finance","tld":"finance"},"ip":{"addr":"104.21.23.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://desk-firelight.finance/","date":"2026-06-28T13:55:13.373Z","timestamp":1782654913373,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"desk-firelight.finance","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 19 Jun 2026 09:39:54 GMT","end":"Thu, 17 Sep 2026 10:38:40 GMT"},"fingerprint":{"sha1":"97:56:F3:86:32:A8:AC:D7:3E:A4:D3:E1:80:AD:1C:4A:94:E0:03:5E","sha256":"0E:BC:D5:FE:9F:D6:65:E7:E8:26:59:23:C1:0D:6B:89:C1:D4:AB:4A:9E:5C:AC:84:77:E8:3B:38:75:1D:90:F4"}}},"request":{"raw":"GET /cdn-cgi/challenge-platform/h/b/orchestrate/chl_page/v1?ray=a12d30170b1db4ed HTTP/1.1\r\nHost: desk-firelight.finance\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://desk-firelight.finance/?__cf_chl_rt_tk=XchzjIXfd5jOu.QnQllGoBQSbxV6PjgEqyLQYDWJQGU-1782654913-1.0.1.1-B3Td_S2sSdnLG9X3eQeqlEZC3l3uAHs0_Vf0iciw5Do\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: application/javascript; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\ncontent-encoding: zstd\r\ndate: Sun, 28 Jun 2026 13:55:13 GMT\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncf-ray: a12d30189b29b4ed-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":220489,"size_decoded":79741,"mime_type":"application/javascript; charset=UTF-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"82a3a9b08b67a6545a77c654af53f8c1","sha1":"a7d743027af47076c223bc1ae5a26c3d7c9da853","sha256":"07b3a979ff4eb53d02cf3146666ffe0b768485b4e388ee9c904ace4bdc10a4b0","sha512":"f99aa85e7897db1bba4c1a55f293b4c722b329e672568236e85e9b673fc27b01e624a77eef34092a3784d5ef6691ca6511a955fcde54921a552ebc11fd825c20","ssdeep":"3072:zZZfbRvEj33qh39SzrKUa1jlGxKZYFwE/s6EUIlP6:zZZfbRvELG3szr81jlQFwE/s6EUwP6","tlshash":"3624e7dcbac3b52b134be17801bb358e71f99f815028290d9a2049e978f1b5d507f9be","first_seen":"2026-06-28T13:56:02.752023Z","last_seen":"2026-06-28T13:56:02.752023Z","times_seen":1,"resource_available":true,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"desk-firelight.finance","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}}]}