{"report_id":"57e1d95e-77a4-4bb0-90dd-ecd90b0dda3e","version":0,"status":"done","tags":[],"date":"2026-09-25T06:08:08Z","url":{"schema":"http","addr":"xrpdesk.app/","fqdn":"xrpdesk.app","domain":"xrpdesk.app","tld":"app"},"ip":{"addr":"216.24.57.1","port":0,"asn":397273,"as":"Render","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"xrpdesk.app/","fqdn":"xrpdesk.app","domain":"xrpdesk.app","tld":"app"},"title":"XRP Desk","dom":{"size":80550,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (8819)","md5":"d51d74bce462c32a32126974894a5e85","sha1":"c565f55aa2b1bfcfeff153589104fd6418474d27","sha256":"2587dd16a728378e0d557042f83fd9a16a1fd93c1afdd8fd8f82b090e64a69e4","sha512":"ffe5ae5bf667486b3052fa9c196148f308d7878b5fa44aa65b96b18bdbd714dce2ffde5b7ff26171e7e2444a77b57f1ab435f6255000a502fca30a50bff63b39","ssdeep":"768:OoCoPNJx3GrGKx4Q+JNfDKnM8GakaCzAtsObJhFdQDJi1KtXfK64w6W2U62Hm7BD:OopPNJx3GnSQ+LDKXGXP14w6nN17v","tlshash":"1a73e895a0fa6033116350e7d127ab5ab5e48c13f3a7d1047eac89c38f96d7cd0ab98d","dom_hash":"domhashd6e38baa198bf480d8988e94491aac62","first_seen":"2026-09-25T06:08:23.182245Z","last_seen":"2026-09-25T06:08:23.182245Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"xrpdesk.app/","fqdn":"xrpdesk.app","domain":"xrpdesk.app","tld":"app"},"ip":{"addr":"216.24.57.1","port":0,"asn":397273,"as":"Render","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-30T06:08:08Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"31pu2ilhjrkmwpf"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"xrpdesk.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"xrpdesk.app","ip":{"addr":"216.24.57.1","port":443,"asn":397273,"as":"RENDER","country":"United States","country_code":"US"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-09-25T06:08:17.543505Z","last_seen":"2026-09-25T06:08:17.543505Z","alert_count":17,"request_count":17,"received_data":209082,"sent_data":8871,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]},{"name":"Chart.js:4.4.3","description":"Chart.js is an open-source JavaScript library that allows you to draw different types of charts by using the HTML5 canvas element.","website":"https://www.chartjs.org","common_platform_enumeration":"","icon":"Chart.js.svg","categories":["JavaScript graphics"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]}]},{"fqdn":"www.googletagmanager.com","ip":{"addr":"142.250.178.72","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2011-11-11","domain_rank":283,"first_seen":"2012-10-04T01:07:32Z","last_seen":"2026-09-20T22:44:48.5379Z","alert_count":0,"request_count":2,"received_data":1057832,"sent_data":948,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-09-20T22:43:37.149177Z","alert_count":0,"request_count":6,"received_data":186378,"sent_data":3455,"comment":"","tags":null,"fingerprints":null},{"fqdn":"cdn.jsdelivr.net","ip":{"addr":"151.101.65.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2012-05-16","domain_rank":1678,"first_seen":"2012-09-30T00:15:09Z","last_seen":"2026-09-20T23:17:00.144243Z","alert_count":0,"request_count":1,"received_data":206427,"sent_data":498,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.74","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-09-20T22:43:34.841753Z","alert_count":0,"request_count":1,"received_data":14273,"sent_data":569,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"xrpdesk.app/","fqdn":"xrpdesk.app","domain":"xrpdesk.app","tld":"app"},"ip":{"addr":"216.24.57.1","port":443,"asn":397273,"as":"RENDER","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"8becc2f7a759640f43ba4a2223ee1425","sha1":"c79f3603acb5bc43c330e87ee21fa9b418d7928f","sha256":"eea5ca8e0ac8025f6b35cf67f39d4722bbd11d5c382f0865ebd0e126af158b1b","sha512":"fbebbb5d0dd2ebdab3149bcf9ca494e5ebfa4f5a1f9483517620e4fca317b4812c0c66476d5683383f6da53f5c2d3b3bddd7b72380331b96d44d345dccb45526","ssdeep":"","tlshash":"5ac09b8c220e5cb155f76b448b3fba04b441321499d5ae31091963455d30e57d764c64","size":148,"data":"","first_seen":"2026-09-25T06:08:23.211827Z","last_seen":"2026-09-25T06:11:00.468076Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xrpdesk.app/","fqdn":"xrpdesk.app","domain":"xrpdesk.app","tld":"app"},"ip":{"addr":"216.24.57.1","port":443,"asn":397273,"as":"RENDER","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"369db4b9c45192b782363ef63ee936d7","sha1":"96b8db377dfc42e2cbd613842cd9e4e804cf8247","sha256":"7108544fa3a6a7740cdce515447c2683a241c2d8bec367e8bd832fb14c0bc92f","sha512":"a70a141287534d152b049088ade944b8ea3acd11ec6529385c9cd7c039dded28d3f337ba3a15ecb575a867269de26841d089bc979a646d432ad5b1f6571e5a0e","ssdeep":"","tlshash":"6cc02b8c220a0c7041eb27408b3ffb00b0013204a8d0b932080923445d20e43db44810","size":148,"data":"","first_seen":"2026-09-25T06:08:23.213072Z","last_seen":"2026-09-25T06:11:00.470821Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xrpdesk.app/","fqdn":"xrpdesk.app","domain":"xrpdesk.app","tld":"app"},"ip":{"addr":"216.24.57.1","port":443,"asn":397273,"as":"RENDER","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"c567fb5d9eaee35a8e1d0c95c65aed8a","sha1":"f3c441bbb81d7e5bc27b5f5688c5ccb2b3dac5b2","sha256":"b322b98d9164ceaca8348c92586464ce699f79628fb93b6c224167cb9c1c42bb","sha512":"9470031f07bbb3cf3b1170956a7e1b1ca557a6f7c62a996263adc5461da349f739016bc14c23577b0f5910eb3a387e2862ae9e1c1e75b6268a8aff88f469dfbe","ssdeep":"768:EGrGKx4Q+JNfDKnM8GakaCzAtsObJhFdQDJi1KtXfK64w6W2U62Hm7BfivF/Forb:EGnSQ+LDKXGXP14w6nN11","tlshash":"a933e69a70fa6432022350f7426b425679a48d03b69ad040bb5cdad11fe6d68d1ffece","size":52530,"data":"","first_seen":"2026-09-25T06:08:23.214288Z","last_seen":"2026-09-25T06:11:00.473593Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xrpdesk.app/desk-help.js?v=1","fqdn":"xrpdesk.app","domain":"xrpdesk.app","tld":"app"},"ip":{"addr":"216.24.57.1","port":443,"asn":397273,"as":"RENDER","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"ccb7daa5d2d0bbfbe629e4c90c24bf48","sha1":"9768f9a4d7f07d61ce36a6357edda19df58058f4","sha256":"28b1fde6329486d1a2a2eb29040c04da5d6d5c47ff84e78fb9f8d6954b05ddf9","sha512":"d43eba4bcc3e2826c1627940d787278a4a83c74c99c27235b536c5c294c050ba2f0ac6c633a1d136056ebf0609599320782e39e2cdf2e67012db7907b8c7ab8c","ssdeep":"","tlshash":"5e715369f9a332f2507761385baf934c712d4603604bc615bf6d96812fc4832b6b9fe8","size":3759,"data":"","first_seen":"2026-09-25T06:08:23.185923Z","last_seen":"2026-09-25T06:11:00.461806Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xrpdesk.app/desk-fetch.js?v=1","fqdn":"xrpdesk.app","domain":"xrpdesk.app","tld":"app"},"ip":{"addr":"216.24.57.1","port":443,"asn":397273,"as":"RENDER","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"fc6943847a4e999c5c2bb0b410650789","sha1":"5b8ad57fc1793c9b746e2eee90d5bde4f35c08fd","sha256":"4c2db76db9a614ef97a887e373c98a0385daa181825e8064144acf8660b74a27","sha512":"daf714a3763e7a80a5d2a243d55def3dd41d9cfa28820ab7b230b0ea5dbff8dd56808bc37b814c21f2fee161f5a635a2ea3e3b44543f04e844c4bbe513b08347","ssdeep":"","tlshash":"3c61f38c78d670161f2630745a6fd09afe71ed03015fc900ba4c86a27f90476dbbaf95","size":3258,"data":"","first_seen":"2026-09-25T06:08:23.206424Z","last_seen":"2026-09-25T06:11:00.454458Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xrpdesk.app/desk-share.js?v=5","fqdn":"xrpdesk.app","domain":"xrpdesk.app","tld":"app"},"ip":{"addr":"216.24.57.1","port":443,"asn":397273,"as":"RENDER","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"4f36f6e064404d340cb8fc2264239f39","sha1":"f02989e0574b03c8ff95ac3041d35c3b4a2df7ce","sha256":"035b6516e4cb8e11b7b03bea0be30e032207972e4ba617352422c695cf6cff0f","sha512":"9f2bfea3a4c7edce702751a379061f8c6c2f30e38fa449801791ead0b19a5f6cb094d389472f3307ecdec9c3210c07e2c1c0a77e25922abbfe17061a718e6938","ssdeep":"384:yI5fOmQ+EVvghTs25Yff2O4poukE1xJOZ6p5U:H5fP+Vgm25Yff2O4prkE1xJOZ6p5U","tlshash":"6b52508c747b307b69276139cbef818479a64d47164ec800b85cd5d87fa013a52feee8","size":14090,"data":"","first_seen":"2026-09-25T06:08:23.195001Z","last_seen":"2026-09-25T06:11:00.4394Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-C2MR128SP9","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.72","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"61c37d0d9589cf9d45b78a936d7472dd","sha1":"31796727bd40098765934066d8b3ec78fd64e28f","sha256":"c4e1dda99e7d810132915ac7dd074a8cf417a56c51e43ef8778ae3bc5ecd2c76","sha512":"c695929a517dd23a76a34aff441fcea87f06fd2efadd140e02b4f60760c74d90243f2b3ec62109af98d56cf90743dab0eb538cc582f2f2119b774545ab189bd6","ssdeep":"6144:h5wcM4RorG7+/t5M5Z+5cKnIu9FcjvgbsED/3C9HJDLavOo9jxHR4Qsg:bZp7+//0hBP9LRo11","tlshash":"1cb4f7ce73c674229396f178903f01cba57b29a2b45cc89ab289dce42d3465a5173f7c","size":526001,"data":"","first_seen":"2026-09-25T06:08:23.201666Z","last_seen":"2026-09-25T06:11:00.432575Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xrpdesk.app/amendment-status.js?v=1","fqdn":"xrpdesk.app","domain":"xrpdesk.app","tld":"app"},"ip":{"addr":"216.24.57.1","port":443,"asn":397273,"as":"RENDER","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"f37d927209cd4838a97086ac2a217405","sha1":"29469e47f94c7e790cc85461933fca671070b2e8","sha256":"43490b8f40c4f1a3d3555fbd96bbd05f4e1e4f1f4c8e07b6cd86060a2880c517","sha512":"4465fc90ef80a81618fd2d5ba2bf7abf2481ac3653d2ceea6c93fe0f320fcd779852cc4d92bf16406f7abb70a33709b68d44bdbf05a56929659a479ac567923d","ssdeep":"","tlshash":"ba51238864b370356d13b06463df851e71ba4a43434e8e00b4ad9a647f95815eb77ffc","size":2661,"data":"","first_seen":"2026-09-25T06:08:23.210231Z","last_seen":"2026-09-25T06:11:00.436955Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/chart.js@4.4.3/dist/chart.umd.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.65.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"c9c7a14398a513bdb97934c8468143b9","sha1":"54bb48969d0f4da243151840c5b60c1fb4be9ec1","sha256":"d46d97a1fd022c5fb29fa2f45ebcbc32202d73aeebf076ce5f7248f5498fc7d7","sha512":"36a4614d4d0340d1cd50ed294f1eb33cb275d5884eaa3e0c45cbefd3e6a6c4993eaded3bca41a116e84c9ab4297d3440531f2743811c32e5ff9bc733d8af2f21","ssdeep":"6144:Ey28mDzs0QHt7zhSGmeab2OvKKDTleUR5JTJm9d09zlAar+XjAcK:LKs0QHNzhSGmeab2OvJ1eUR5JTJmX05v","tlshash":"7214f5d57342b12282d256d2583a050ae3366648354789acf2bc5ddf3c6a98b71fff38","size":205637,"data":"","first_seen":"2024-05-24T16:02:09Z","last_seen":"2026-09-25T08:19:26.717222Z","times_seen":115,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xrpdesk.app/visits.js","fqdn":"xrpdesk.app","domain":"xrpdesk.app","tld":"app"},"ip":{"addr":"216.24.57.1","port":443,"asn":397273,"as":"RENDER","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"ae7866f6ad08b615012a7238b6069a3c","sha1":"0a2962726d3ea878e8bbd6a2c581a7f23c892585","sha256":"e500d7a75b5457951cf06723a86cbc7bc4373055feefa6b9c0bfa19f0751c65f","sha512":"73b7f1852e41e95b470dd92e33fa0569b6155e5f284a4f872b9d454bfd19a8372a8f54ac13f404a969e83105df0a14125de2c67d52ed9352cbcda1f58298dcc2","ssdeep":"","tlshash":"ca716577e9e32c21b467e09816ae5201b839b003dc89ed40774cba4d6f9d71e61796dc","size":3585,"data":"","first_seen":"2026-09-25T06:08:23.187297Z","last_seen":"2026-09-25T06:11:00.43842Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-JFYKZKVTMZ","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.72","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"b9f193e6bb25fc2c5cd41ab586842f54","sha1":"497d0f621c7d5be3d62fcfd7b67bdc7cbe14c3df","sha256":"ed9a8a04d551a207a5eea00b6a5d812d409c6b619f37313dd053bc97892d2454","sha512":"3ffe1adae81e800e0298b3da03c34cf7b56c01ebcd7efa22fcfa60fdc0de6d66048a6a5ccb31aa2b4cefd7b8f9c668ad751800c578dfcd1faa2ffdb5cb451b40","ssdeep":"6144:/8wp4YH7Bzn5ceZqhLRIHECIcW3sVbEbzE8U3SLoJfjXSyoGnxs5Mo/9:bH7Bz5iCHA3sVNJ7PBxK","tlshash":"33b4f7cd73c6742293a6f178903f01cba57b29a2b45cc89af289dce42d3459a5163f7c","size":530623,"data":"","first_seen":"2026-09-25T06:08:23.184789Z","last_seen":"2026-09-25T06:08:23.184789Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"xrpdesk.app/api/hit","fqdn":"xrpdesk.app","domain":"xrpdesk.app","tld":"app"},"ip":{"addr":"216.24.57.1","port":443,"asn":397273,"as":"RENDER","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://xrpdesk.app/","date":"2026-09-25T06:07:32.412Z","timestamp":1790316452412,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xrpdesk.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 22 Sep 2026 23:41:29 GMT","end":"Tue, 22 Dec 2026 00:41:26 GMT"},"fingerprint":{"sha1":"7D:DA:7A:46:B0:3A:89:48:E0:E5:1E:01:76:93:EE:9C:68:A1:C8:57","sha256":"59:FC:F2:A9:91:89:A5:96:F4:74:49:63:85:E7:71:C7:AA:CE:46:00:F1:C0:C7:76:14:AE:11:DA:59:BD:3B:37"}}},"request":{"raw":"POST /api/hit HTTP/1.1\r\nHost: xrpdesk.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\ncontent-type: application/json\r\nReferer: https://xrpdesk.app/\r\nContent-Length: 57\r\nOrigin: https://xrpdesk.app\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":57,"data":"{\"page\":\"/\",\"vid\":\"8704ce58-3106-47e9-9ed2-c7e209742d7e\"}"}},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 25 Sep 2026 06:07:32 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 100\r\ncache-control: no-store\r\ncontent-encoding: br\r\nrndr-id: 3947e927-93d0-42d8\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nx-render-origin-server: SimpleHTTP/0.6 Python/3.11.9\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\ncf-ray: a407d963991f1525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":130,"size_decoded":524,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"d59b5687d2f2367c5ccca19a3a3dd82f","sha1":"3eacf2b2c1070f1262332f1e988df687bdec61ec","sha256":"2ea0400f4f990759d287c8ecf6cf837ade628137fd75f8837224f8a1e0f579e2","sha512":"b5c354c826988834c6f1fa9c0c8714016dc3ff75725920d1b3b96202f1e480701796d9efe4f6fd0c3cc618ae2b853139119f68b0f4a1b964b103fdc9bd85718d","ssdeep":"","tlshash":"ffc0922f51f74b23afd9b275e288034763b4339811e4ae0c23dc420c9a2d8542a43b53","first_seen":"2026-09-25T06:08:23.183766Z","last_seen":"2026-09-25T06:08:23.183766Z","times_seen":1,"resource_available":true,"data":null}},"time_used":200,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":200,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"xrpdesk.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-JFYKZKVTMZ","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.72","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xrpdesk.app/","date":"2026-09-25T06:07:31.572Z","timestamp":1790316451572,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Sep 2026 19:22:00 GMT","end":"Thu, 03 Dec 2026 19:21:59 GMT"},"fingerprint":{"sha1":"B5:A9:73:B1:2A:AF:94:D5:A0:C0:EA:89:DD:CE:A1:FA:42:73:60:6A","sha256":"E1:A3:36:34:1F:D9:00:D3:1E:44:B3:36:C7:25:67:04:1A:16:2E:AA:54:82:D9:66:4C:D3:1A:BA:FD:0F:9A:C2"}}},"request":{"raw":"GET /gtag/js?id=G-JFYKZKVTMZ HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xrpdesk.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: zstd\r\nvary: Accept-Encoding\r\ndate: Fri, 25 Sep 2026 06:07:31 GMT\r\nexpires: Fri, 25 Sep 2026 06:07:31 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 176769\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":530623,"size_decoded":177373,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (6698)","md5":"b9f193e6bb25fc2c5cd41ab586842f54","sha1":"497d0f621c7d5be3d62fcfd7b67bdc7cbe14c3df","sha256":"ed9a8a04d551a207a5eea00b6a5d812d409c6b619f37313dd053bc97892d2454","sha512":"3ffe1adae81e800e0298b3da03c34cf7b56c01ebcd7efa22fcfa60fdc0de6d66048a6a5ccb31aa2b4cefd7b8f9c668ad751800c578dfcd1faa2ffdb5cb451b40","ssdeep":"6144:/8wp4YH7Bzn5ceZqhLRIHECIcW3sVbEbzE8U3SLoJfjXSyoGnxs5Mo/9:bH7Bz5iCHA3sVNJ7PBxK","tlshash":"33b4f7cd73c6742293a6f178903f01cba57b29a2b45cc89af289dce42d3459a5163f7c","first_seen":"2026-09-25T06:08:23.184789Z","last_seen":"2026-09-25T06:08:23.184789Z","times_seen":1,"resource_available":true,"data":null}},"time_used":167,"timings":{"blocked":-1,"dns":1,"connect":16,"send":0,"wait":53,"receive":62,"ssl":35},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xrpdesk.app/desk-help.js?v=1","fqdn":"xrpdesk.app","domain":"xrpdesk.app","tld":"app"},"ip":{"addr":"216.24.57.1","port":443,"asn":397273,"as":"RENDER","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xrpdesk.app/","date":"2026-09-25T06:07:31.579Z","timestamp":1790316451579,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xrpdesk.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 22 Sep 2026 23:41:29 GMT","end":"Tue, 22 Dec 2026 00:41:26 GMT"},"fingerprint":{"sha1":"7D:DA:7A:46:B0:3A:89:48:E0:E5:1E:01:76:93:EE:9C:68:A1:C8:57","sha256":"59:FC:F2:A9:91:89:A5:96:F4:74:49:63:85:E7:71:C7:AA:CE:46:00:F1:C0:C7:76:14:AE:11:DA:59:BD:3B:37"}}},"request":{"raw":"GET /desk-help.js?v=1 HTTP/1.1\r\nHost: xrpdesk.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xrpdesk.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 25 Sep 2026 06:07:32 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 1371\r\ncontent-encoding: br\r\nlast-modified: Fri, 25 Sep 2026 05:43:44 GMT\r\nrndr-id: 696cb1ca-ac5d-4d96\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nx-render-origin-server: SimpleHTTP/0.6 Python/3.11.9\r\ncf-cache-status: DYNAMIC\r\npriority: u=2,i=?0\r\ncf-ray: a407d95e6b981525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3759,"size_decoded":1801,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"ccb7daa5d2d0bbfbe629e4c90c24bf48","sha1":"9768f9a4d7f07d61ce36a6357edda19df58058f4","sha256":"28b1fde6329486d1a2a2eb29040c04da5d6d5c47ff84e78fb9f8d6954b05ddf9","sha512":"d43eba4bcc3e2826c1627940d787278a4a83c74c99c27235b536c5c294c050ba2f0ac6c633a1d136056ebf0609599320782e39e2cdf2e67012db7907b8c7ab8c","ssdeep":"","tlshash":"5e715369f9a332f2507761385baf934c712d4603604bc615bf6d96812fc4832b6b9fe8","first_seen":"2026-09-25T06:08:23.185923Z","last_seen":"2026-09-25T06:11:00.461806Z","times_seen":2,"resource_available":true,"data":null}},"time_used":628,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":628,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"xrpdesk.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xrpdesk.app/visits.js","fqdn":"xrpdesk.app","domain":"xrpdesk.app","tld":"app"},"ip":{"addr":"216.24.57.1","port":443,"asn":397273,"as":"RENDER","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xrpdesk.app/","date":"2026-09-25T06:07:31.587Z","timestamp":1790316451587,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xrpdesk.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 22 Sep 2026 23:41:29 GMT","end":"Tue, 22 Dec 2026 00:41:26 GMT"},"fingerprint":{"sha1":"7D:DA:7A:46:B0:3A:89:48:E0:E5:1E:01:76:93:EE:9C:68:A1:C8:57","sha256":"59:FC:F2:A9:91:89:A5:96:F4:74:49:63:85:E7:71:C7:AA:CE:46:00:F1:C0:C7:76:14:AE:11:DA:59:BD:3B:37"}}},"request":{"raw":"GET /visits.js HTTP/1.1\r\nHost: xrpdesk.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xrpdesk.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 25 Sep 2026 06:07:32 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 1490\r\ncontent-encoding: br\r\nlast-modified: Fri, 25 Sep 2026 05:43:44 GMT\r\nrndr-id: a03e994f-96db-4d12\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nx-render-origin-server: SimpleHTTP/0.6 Python/3.11.9\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\ncf-ray: a407d95e6bb91525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3585,"size_decoded":1920,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"ae7866f6ad08b615012a7238b6069a3c","sha1":"0a2962726d3ea878e8bbd6a2c581a7f23c892585","sha256":"e500d7a75b5457951cf06723a86cbc7bc4373055feefa6b9c0bfa19f0751c65f","sha512":"73b7f1852e41e95b470dd92e33fa0569b6155e5f284a4f872b9d454bfd19a8372a8f54ac13f404a969e83105df0a14125de2c67d52ed9352cbcda1f58298dcc2","ssdeep":"","tlshash":"ca716577e9e32c21b467e09816ae5201b839b003dc89ed40774cba4d6f9d71e61796dc","first_seen":"2026-09-25T06:08:23.187297Z","last_seen":"2026-09-25T06:11:00.43842Z","times_seen":2,"resource_available":true,"data":null}},"time_used":619,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":619,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"xrpdesk.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xrpdesk.app/desk.css?v=41","fqdn":"xrpdesk.app","domain":"xrpdesk.app","tld":"app"},"ip":{"addr":"216.24.57.1","port":443,"asn":397273,"as":"RENDER","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://xrpdesk.app/","date":"2026-09-25T06:07:31.576Z","timestamp":1790316451576,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xrpdesk.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 22 Sep 2026 23:41:29 GMT","end":"Tue, 22 Dec 2026 00:41:26 GMT"},"fingerprint":{"sha1":"7D:DA:7A:46:B0:3A:89:48:E0:E5:1E:01:76:93:EE:9C:68:A1:C8:57","sha256":"59:FC:F2:A9:91:89:A5:96:F4:74:49:63:85:E7:71:C7:AA:CE:46:00:F1:C0:C7:76:14:AE:11:DA:59:BD:3B:37"}}},"request":{"raw":"GET /desk.css?v=41 HTTP/1.1\r\nHost: xrpdesk.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xrpdesk.app/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 25 Sep 2026 06:07:32 GMT\r\ncontent-type: text/css\r\ncontent-encoding: br\r\nlast-modified: Fri, 25 Sep 2026 05:43:44 GMT\r\nrndr-id: aee713a8-aef2-4887\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nx-render-origin-server: SimpleHTTP/0.6 Python/3.11.9\r\ncf-cache-status: DYNAMIC\r\npriority: u=2,i=?0\r\ncf-ray: a407d95e5b8f1525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":41546,"size_decoded":9260,"mime_type":"text/css","magic":"Unicode text, UTF-8 text","md5":"bc5cdc61d08fa7d1d12755b6ca39e53d","sha1":"83de7c176038891418addb42042b369aaf64300c","sha256":"1d81595ce76ab348659f813b6ea50edee48f42f20d497d7b50c2a865780f7432","sha512":"50cdb97f4ef036f253e6ce217f070fc5de8492388f6130c249d029322e1e5c2b45d1efab99cc881431722c9144023eec5743b6b5ce62ab746976656de5823e6f","ssdeep":"768:WUVnJOo3FKzVnF6tv9CMAXDUypK7Gayk7ru3KFFF/MoK/+YePtGb2pau0jzhup+5:WUVn8o3cxnwtvMMAXDUypmPyuru3KFjM","tlshash":"4313859367305265ba27ad68b79b5b9e73489103450adbbc6ee4100ccecd2fde26274c","first_seen":"2026-09-25T06:08:23.188432Z","last_seen":"2026-09-25T06:11:00.436117Z","times_seen":2,"resource_available":true,"data":null}},"time_used":795,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":795,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"xrpdesk.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xrpdesk.app/api/config","fqdn":"xrpdesk.app","domain":"xrpdesk.app","tld":"app"},"ip":{"addr":"216.24.57.1","port":443,"asn":397273,"as":"RENDER","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://xrpdesk.app/","date":"2026-09-25T06:07:32.467Z","timestamp":1790316452467,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xrpdesk.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 22 Sep 2026 23:41:29 GMT","end":"Tue, 22 Dec 2026 00:41:26 GMT"},"fingerprint":{"sha1":"7D:DA:7A:46:B0:3A:89:48:E0:E5:1E:01:76:93:EE:9C:68:A1:C8:57","sha256":"59:FC:F2:A9:91:89:A5:96:F4:74:49:63:85:E7:71:C7:AA:CE:46:00:F1:C0:C7:76:14:AE:11:DA:59:BD:3B:37"}}},"request":{"raw":"GET /api/config HTTP/1.1\r\nHost: xrpdesk.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://xrpdesk.app/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 25 Sep 2026 06:07:32 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 183\r\ncache-control: no-store\r\ncontent-encoding: br\r\nrndr-id: 7222588a-a7b6-4942\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nx-render-origin-server: SimpleHTTP/0.6 Python/3.11.9\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\ncf-ray: a407d963e9e31525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":295,"size_decoded":607,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"bb54f69f64c0432b6b93b540d80d1f25","sha1":"f993e8743c0519f804f07326bf9d9f18f77268bc","sha256":"c38ddecf0efc0ecbd0d7b45fd3ff1bac90f5755c2a02ec66f50bffa13cd865f3","sha512":"0caa987d4b52d1ec7a3b82d3f4bd88800f09378eb6b89c4b775f6e30a1b1fcd187c2fe318838bdad35bed57006c87902744faa9a88ecd1fe56cb5a05d56924e1","ssdeep":"","tlshash":"b3e02b0be40b1423236a8a0f50a81f5a928440b6b7505966f768ca45bfdd56f3b8b3ed","first_seen":"2026-09-25T06:08:23.1898Z","last_seen":"2026-09-25T06:11:00.463769Z","times_seen":2,"resource_available":true,"data":null}},"time_used":332,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":332,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"xrpdesk.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xrpdesk.app/api/trades","fqdn":"xrpdesk.app","domain":"xrpdesk.app","tld":"app"},"ip":{"addr":"216.24.57.1","port":443,"asn":397273,"as":"RENDER","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://xrpdesk.app/","date":"2026-09-25T06:07:47.562Z","timestamp":1790316467562,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xrpdesk.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 22 Sep 2026 23:41:29 GMT","end":"Tue, 22 Dec 2026 00:41:26 GMT"},"fingerprint":{"sha1":"7D:DA:7A:46:B0:3A:89:48:E0:E5:1E:01:76:93:EE:9C:68:A1:C8:57","sha256":"59:FC:F2:A9:91:89:A5:96:F4:74:49:63:85:E7:71:C7:AA:CE:46:00:F1:C0:C7:76:14:AE:11:DA:59:BD:3B:37"}}},"request":{"raw":"GET /api/trades HTTP/1.1\r\nHost: xrpdesk.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://xrpdesk.app/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: _ga_C2MR128SP9=GS2.1.s1790316452$o1$g0$t1790316452$j60$l0$h0; _ga=GA1.1.768969255.1790316453; _ga_MTLZMFLXGT=GS2.1.s1790316452$o1$g0$t1790316452$j60$l0$h0; _ga_JFYKZKVTMZ=GS2.1.s1790316452$o1$g0$t1790316452$j60$l0$h0\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 25 Sep 2026 06:07:47 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 1441\r\ncache-control: no-store\r\ncontent-encoding: br\r\nrndr-id: 03eaacc7-1a0b-4dee\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nx-render-origin-server: SimpleHTTP/0.6 Python/3.11.9\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\ncf-ray: a407d9c24f6d1525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14887,"size_decoded":1866,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"2f78f934679c6f002c4af4691f7d682b","sha1":"9160aea109906343096eca8b426111a93246ddf5","sha256":"b1c252648e47dd0354dcea2a968e03d27e25ad3402183174658632b546fb25cd","sha512":"40d272de5ecef60b25ddf2269519f5b0c9cc0aaaede801965d9be4c8b21d57bd59989110da076032f2f780e8f39ac4310d865a533870006dc27eb5e183a387c1","ssdeep":"192:9thiZyObHWsYFvjAuPDyk8RIgknZ8kqJlt88t8+c0b77rVrS:A0s5Gholtpi10b77rVrS","tlshash":"9862a140d1263477d2c25375b310b2cb4e98f30192a97f6e3b7487596cafc395baae21","first_seen":"2026-09-25T06:08:23.190738Z","last_seen":"2026-09-25T06:08:23.190738Z","times_seen":1,"resource_available":true,"data":null}},"time_used":212,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":211,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"xrpdesk.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xrpdesk.app/favicon.ico","fqdn":"xrpdesk.app","domain":"xrpdesk.app","tld":"app"},"ip":{"addr":"216.24.57.1","port":443,"asn":397273,"as":"RENDER","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xrpdesk.app/","date":"2026-09-25T06:07:32.902Z","timestamp":1790316452902,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xrpdesk.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 22 Sep 2026 23:41:29 GMT","end":"Tue, 22 Dec 2026 00:41:26 GMT"},"fingerprint":{"sha1":"7D:DA:7A:46:B0:3A:89:48:E0:E5:1E:01:76:93:EE:9C:68:A1:C8:57","sha256":"59:FC:F2:A9:91:89:A5:96:F4:74:49:63:85:E7:71:C7:AA:CE:46:00:F1:C0:C7:76:14:AE:11:DA:59:BD:3B:37"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: xrpdesk.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xrpdesk.app/\r\nCookie: _ga_C2MR128SP9=GS2.1.s1790316452$o1$g0$t1790316452$j60$l0$h0; _ga=GA1.1.768969255.1790316453; _ga_MTLZMFLXGT=GS2.1.s1790316452$o1$g0$t1790316452$j60$l0$h0; _ga_JFYKZKVTMZ=GS2.1.s1790316452$o1$g0$t1790316452$j60$l0$h0\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\ndate: Fri, 25 Sep 2026 06:07:33 GMT\r\ncontent-type: text/html;charset=utf-8\r\ncontent-length: 189\r\ncontent-encoding: br\r\nrndr-id: ca4017db-6e7e-4107\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nx-render-origin-server: SimpleHTTP/0.6 Python/3.11.9\r\ncf-cache-status: DYNAMIC\r\npriority: u=6,i=?0\r\ncf-ray: a407d966a8b41525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":335,"size_decoded":580,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"a2ae3eaedf7f44998f3639756a1725cc","sha1":"2616e0e695487e0f4fc5ddc18c57dcf95ce5851a","sha256":"860b53ed6ea6a0cf602fae632cfcd28dbcf637f85a8bee28d2ee9c6cc9081669","sha512":"e950a920950fde6d4786cf81516355080821cca1d59253cb46b829f99f1aed7ff2e1618c93664801f441258923199b275d8b853baa3b657861cc238f31da9391","ssdeep":"","tlshash":"2fe0728b82f20a530291002007e0b7801c0a270f0acaa22ab68d732a5fc0181c8872d8","first_seen":"2023-05-19T23:07:51Z","last_seen":"2026-09-25T06:11:00.461172Z","times_seen":517,"resource_available":true,"data":null}},"time_used":196,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":196,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"xrpdesk.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xrpdesk.app/api/trades","fqdn":"xrpdesk.app","domain":"xrpdesk.app","tld":"app"},"ip":{"addr":"216.24.57.1","port":443,"asn":397273,"as":"RENDER","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://xrpdesk.app/","date":"2026-09-25T06:07:37.490Z","timestamp":1790316457490,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xrpdesk.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 22 Sep 2026 23:41:29 GMT","end":"Tue, 22 Dec 2026 00:41:26 GMT"},"fingerprint":{"sha1":"7D:DA:7A:46:B0:3A:89:48:E0:E5:1E:01:76:93:EE:9C:68:A1:C8:57","sha256":"59:FC:F2:A9:91:89:A5:96:F4:74:49:63:85:E7:71:C7:AA:CE:46:00:F1:C0:C7:76:14:AE:11:DA:59:BD:3B:37"}}},"request":{"raw":"GET /api/trades HTTP/1.1\r\nHost: xrpdesk.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://xrpdesk.app/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: _ga_C2MR128SP9=GS2.1.s1790316452$o1$g0$t1790316452$j60$l0$h0; _ga=GA1.1.768969255.1790316453; _ga_MTLZMFLXGT=GS2.1.s1790316452$o1$g0$t1790316452$j60$l0$h0; _ga_JFYKZKVTMZ=GS2.1.s1790316452$o1$g0$t1790316452$j60$l0$h0\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 25 Sep 2026 06:07:37 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 1437\r\ncache-control: no-store\r\ncontent-encoding: br\r\nrndr-id: e7d213ee-e196-4559\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nx-render-origin-server: SimpleHTTP/0.6 Python/3.11.9\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\ncf-ray: a407d98359351525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14870,"size_decoded":1862,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"df19196f8f3f8e37b4d52cb16fd6a7d5","sha1":"e5bc7d1e62bae130a01cefe89d1fcb3d6caf02f5","sha256":"6e2000eb53894b40016143a07b43f15f70ac158e8a27db1c073a7a1a8e1a5038","sha512":"a7860caeada4455d5588e3d1b62b66c4763ba1b31f82eb724ccf13e0b97f8937e076140fbdb6028fdaf68cd99cbb550de893a2fe055657b46cc7e9fdddac50dd","ssdeep":"192:cvFvNWVgvLsYFvjAuPDyk8RIgknZ8kqJlt88t8+c0b77rVr0Dn:qYTGholtpi10b77rVr0Dn","tlshash":"9662a140c1263477d2c25375b310b6cb4e98f30192a97f6e3b7887596cafc395baad21","first_seen":"2026-09-25T06:08:23.192377Z","last_seen":"2026-09-25T06:08:23.192377Z","times_seen":1,"resource_available":true,"data":null}},"time_used":219,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":219,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"xrpdesk.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xrpdesk.app/api/trades","fqdn":"xrpdesk.app","domain":"xrpdesk.app","tld":"app"},"ip":{"addr":"216.24.57.1","port":443,"asn":397273,"as":"RENDER","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://xrpdesk.app/","date":"2026-09-25T06:07:42.532Z","timestamp":1790316462532,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xrpdesk.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 22 Sep 2026 23:41:29 GMT","end":"Tue, 22 Dec 2026 00:41:26 GMT"},"fingerprint":{"sha1":"7D:DA:7A:46:B0:3A:89:48:E0:E5:1E:01:76:93:EE:9C:68:A1:C8:57","sha256":"59:FC:F2:A9:91:89:A5:96:F4:74:49:63:85:E7:71:C7:AA:CE:46:00:F1:C0:C7:76:14:AE:11:DA:59:BD:3B:37"}}},"request":{"raw":"GET /api/trades HTTP/1.1\r\nHost: xrpdesk.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://xrpdesk.app/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: _ga_C2MR128SP9=GS2.1.s1790316452$o1$g0$t1790316452$j60$l0$h0; _ga=GA1.1.768969255.1790316453; _ga_MTLZMFLXGT=GS2.1.s1790316452$o1$g0$t1790316452$j60$l0$h0; _ga_JFYKZKVTMZ=GS2.1.s1790316452$o1$g0$t1790316452$j60$l0$h0\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 25 Sep 2026 06:07:42 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 1436\r\ncache-control: no-store\r\ncontent-encoding: br\r\nrndr-id: 29c5341d-59fc-4161\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nx-render-origin-server: SimpleHTTP/0.6 Python/3.11.9\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\ncf-ray: a407d9a2de871525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14879,"size_decoded":1861,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"52e64468b82ac768d989ae1a1c1dda2e","sha1":"0d27fc556a9be1318bad4f8fc01c1b8b361df701","sha256":"ba08b53834c43c809630eadda65f43ecface363f4ac04f1dcd9843198e773936","sha512":"7542900d98c9441ecf6f6e2251348097c213a516f78526c3f58c3f8f149bc4a53644923b1d8635d9f1e93175288d05254759d73f0e55903880d07cfd4b216126","ssdeep":"192:4mDLc7izVOuWsYFvjAuPDyk8RIgknZ8kqJlt88t8+c0b77rVr0v:5s2zH5Gholtpi10b77rVr0v","tlshash":"cc62b240d1263473d2c25375b310b6cb4e98f30192a97f6e3b7487596cafc395baae21","first_seen":"2026-09-25T06:08:23.193401Z","last_seen":"2026-09-25T06:08:23.193401Z","times_seen":1,"resource_available":true,"data":null}},"time_used":276,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":276,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"xrpdesk.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xrpdesk.app/desk-share.js?v=5","fqdn":"xrpdesk.app","domain":"xrpdesk.app","tld":"app"},"ip":{"addr":"216.24.57.1","port":443,"asn":397273,"as":"RENDER","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xrpdesk.app/","date":"2026-09-25T06:07:31.585Z","timestamp":1790316451585,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xrpdesk.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 22 Sep 2026 23:41:29 GMT","end":"Tue, 22 Dec 2026 00:41:26 GMT"},"fingerprint":{"sha1":"7D:DA:7A:46:B0:3A:89:48:E0:E5:1E:01:76:93:EE:9C:68:A1:C8:57","sha256":"59:FC:F2:A9:91:89:A5:96:F4:74:49:63:85:E7:71:C7:AA:CE:46:00:F1:C0:C7:76:14:AE:11:DA:59:BD:3B:37"}}},"request":{"raw":"GET /desk-share.js?v=5 HTTP/1.1\r\nHost: xrpdesk.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xrpdesk.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 25 Sep 2026 06:07:32 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 3873\r\ncontent-encoding: br\r\nlast-modified: Fri, 25 Sep 2026 05:43:44 GMT\r\nrndr-id: 9bd9caa6-7f2b-4cd2\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nx-render-origin-server: SimpleHTTP/0.6 Python/3.11.9\r\ncf-cache-status: DYNAMIC\r\npriority: u=2,i=?0\r\ncf-ray: a407d95e6bae1525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14090,"size_decoded":4303,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"4f36f6e064404d340cb8fc2264239f39","sha1":"f02989e0574b03c8ff95ac3041d35c3b4a2df7ce","sha256":"035b6516e4cb8e11b7b03bea0be30e032207972e4ba617352422c695cf6cff0f","sha512":"9f2bfea3a4c7edce702751a379061f8c6c2f30e38fa449801791ead0b19a5f6cb094d389472f3307ecdec9c3210c07e2c1c0a77e25922abbfe17061a718e6938","ssdeep":"384:yI5fOmQ+EVvghTs25Yff2O4poukE1xJOZ6p5U:H5fP+Vgm25Yff2O4prkE1xJOZ6p5U","tlshash":"6b52508c747b307b69276139cbef818479a64d47164ec800b85cd5d87fa013a52feee8","first_seen":"2026-09-25T06:08:23.195001Z","last_seen":"2026-09-25T06:11:00.4394Z","times_seen":2,"resource_available":true,"data":null}},"time_used":630,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":630,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"xrpdesk.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/ibmplexmono/v20/-F6qfjptAgt5VM-kVkqdyU8n3vAOwlBFgg.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://xrpdesk.app/","date":"2026-09-25T06:07:32.456Z","timestamp":1790316452456,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Sep 2026 19:23:28 GMT","end":"Thu, 03 Dec 2026 19:23:27 GMT"},"fingerprint":{"sha1":"99:42:CC:AA:D1:36:35:7D:FF:39:32:44:00:41:07:B9:D3:00:EE:31","sha256":"48:CD:EE:73:11:77:6B:F0:EE:10:C6:1D:DF:58:7C:4B:88:0D:95:F3:9C:64:15:44:E2:93:5B:17:4F:6A:8E:6E"}}},"request":{"raw":"GET /s/ibmplexmono/v20/-F6qfjptAgt5VM-kVkqdyU8n3vAOwlBFgg.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://xrpdesk.app\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 15620\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 21 Sep 2026 15:53:22 GMT\r\nexpires: Tue, 21 Sep 2027 15:53:22 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 15 Sep 2025 17:09:44 GMT\r\ncontent-type: font/woff2\r\nage: 310450\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":15620,"size_decoded":16433,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 15620, version 1.0","md5":"5a2ce7798732476dec03a9561de231fe","sha1":"ce9a5ca3a874da9201c2630c5cb7bfaa9688c052","sha256":"0d1f0b8d0722224e32e9f28261bdc86c79115be73444ae5eceb73976a1bcdf83","sha512":"5c4ebd97feaabdb478b615990f286b114ee3b76ce43dfe4122b4e6ec998ae3d4110a4a893b65f6ba81c25da0d3ad7e5a5221fb8c8efb58e5d06e9b3c890f9832","ssdeep":"384:AcHslrQJgsgNQhzVr/oaqSeH04dAM4PmV:7slrULvz9/NqSZLZOV","tlshash":"4162d010270e7176dc461378dd56c9e30476ffbec8120f6b7e91a9a258c5fd4722127a","first_seen":"2025-09-19T17:22:27.512197Z","last_seen":"2026-09-25T11:06:58.36858Z","times_seen":2637,"resource_available":false,"data":null}},"time_used":102,"timings":{"blocked":42,"dns":1,"connect":0,"send":0,"wait":50,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xrpdesk.app/api/trades","fqdn":"xrpdesk.app","domain":"xrpdesk.app","tld":"app"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://xrpdesk.app/","date":"2026-09-25T06:07:57.593Z","timestamp":1790316477593,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /api/trades HTTP/1.1\r\nHost: xrpdesk.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://xrpdesk.app/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: _ga_C2MR128SP9=GS2.1.s1790316452$o1$g0$t1790316452$j60$l0$h0; _ga=GA1.1.768969255.1790316453; _ga_MTLZMFLXGT=GS2.1.s1790316452$o1$g0$t1790316452$j60$l0$h0; _ga_JFYKZKVTMZ=GS2.1.s1790316452$o1$g0$t1790316452$j60$l0$h0\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-25T11:27:27.687133Z","times_seen":18650541,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"xrpdesk.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xrpdesk.app/api/home","fqdn":"xrpdesk.app","domain":"xrpdesk.app","tld":"app"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://xrpdesk.app/","date":"2026-09-25T06:07:32.409Z","timestamp":1790316452409,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /api/home HTTP/1.1\r\nHost: xrpdesk.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://xrpdesk.app/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-25T11:27:27.687133Z","times_seen":18650541,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"xrpdesk.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/chart.js@4.4.3/dist/chart.umd.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.65.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xrpdesk.app/","date":"2026-09-25T06:07:31.581Z","timestamp":1790316451581,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2026 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 20 May 2026 15:48:47 GMT","end":"Sat, 05 Dec 2026 14:48:47 GMT"},"fingerprint":{"sha1":"D4:05:C2:EC:C7:EE:2B:D0:08:68:0D:3D:33:77:48:78:43:E7:D1:E1","sha256":"ED:84:90:EE:71:BC:6B:5E:B3:D2:50:B0:23:3A:06:0D:E0:50:C6:B6:A9:09:36:E6:CE:FE:E8:66:89:EB:4E:C5"}}},"request":{"raw":"GET /npm/chart.js@4.4.3/dist/chart.umd.min.js HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xrpdesk.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: application/javascript; charset=utf-8\r\nx-jsd-version: 4.4.3\r\nx-jsd-version-type: version\r\netag: W/\"32345-VLtIlp0PTaJDFRhAxbYMH7S+nsE\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\nage: 1192594\r\ndate: Fri, 25 Sep 2026 06:07:31 GMT\r\nx-served-by: cache-fra-eddf8230178-FRA, cache-hel1410034-HEL\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 70896\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":205637,"size_decoded":71686,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (57104)","md5":"c9c7a14398a513bdb97934c8468143b9","sha1":"54bb48969d0f4da243151840c5b60c1fb4be9ec1","sha256":"d46d97a1fd022c5fb29fa2f45ebcbc32202d73aeebf076ce5f7248f5498fc7d7","sha512":"36a4614d4d0340d1cd50ed294f1eb33cb275d5884eaa3e0c45cbefd3e6a6c4993eaded3bca41a116e84c9ab4297d3440531f2743811c32e5ff9bc733d8af2f21","ssdeep":"6144:Ey28mDzs0QHt7zhSGmeab2OvKKDTleUR5JTJm9d09zlAar+XjAcK:LKs0QHNzhSGmeab2OvJ1eUR5JTJmX05v","tlshash":"7214f5d57342b12282d256d2583a050ae3366648354789acf2bc5ddf3c6a98b71fff38","first_seen":"2024-05-24T16:02:09Z","last_seen":"2026-09-25T08:19:26.717222Z","times_seen":115,"resource_available":true,"data":null}},"time_used":75,"timings":{"blocked":-1,"dns":2,"connect":14,"send":0,"wait":15,"receive":18,"ssl":25},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xrpdesk.app/","fqdn":"xrpdesk.app","domain":"xrpdesk.app","tld":"app"},"ip":{"addr":"216.24.57.1","port":443,"asn":397273,"as":"RENDER","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-25T06:07:30.079Z","timestamp":1790316450079,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xrpdesk.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 22 Sep 2026 23:41:29 GMT","end":"Tue, 22 Dec 2026 00:41:26 GMT"},"fingerprint":{"sha1":"7D:DA:7A:46:B0:3A:89:48:E0:E5:1E:01:76:93:EE:9C:68:A1:C8:57","sha256":"59:FC:F2:A9:91:89:A5:96:F4:74:49:63:85:E7:71:C7:AA:CE:46:00:F1:C0:C7:76:14:AE:11:DA:59:BD:3B:37"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: xrpdesk.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 25 Sep 2026 06:07:31 GMT\r\ncontent-type: text/html; charset=utf-8\r\ncontent-encoding: br\r\nrndr-id: 9f1e83e8-d1cf-4210\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nx-render-origin-server: SimpleHTTP/0.6 Python/3.11.9\r\ncf-cache-status: DYNAMIC\r\ncf-ray: a407d956dff10b41-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]},{"name":"Chart.js:4.4.3","description":"Chart.js is an open-source JavaScript library that allows you to draw different types of charts by using the HTML5 canvas element.","website":"https://www.chartjs.org","common_platform_enumeration":"","icon":"Chart.js.svg","categories":["JavaScript graphics"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]}],"data":{"size":70859,"size_decoded":20174,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (577)","md5":"42109820db0bcb616d5632451b6dc372","sha1":"0925b477e65dcb7985aca3662b11d9abe9726d1d","sha256":"e9c24c24373cfad3eebfa2360568b7fb5cfda53497e64878c99b91fb230d3f0a","sha512":"bc04ba3350bb7aa8e8dea5f08d2c0b347bedfa5cf38f52a077e18309a8a1e65bbd43044815d79f1a12feab53d6c5e058781a7bd57164285ca4116adb3d18ad0c","ssdeep":"768:jeyWzOGrGKx4Q+JNfDKnM8GakaCzAtsObJhFdQDJi1KtXfK64w6W2U62Hm7Bfivf:jeDzOGnSQ+LDKXGXP14w6nN17k","tlshash":"7063e7a9a0f52433522390f6526b571a79a4cd03f697d000bbac8ad10fd6d68d1ffd8e","first_seen":"2026-09-25T06:08:23.200112Z","last_seen":"2026-09-25T06:11:00.431784Z","times_seen":2,"resource_available":true,"data":null}},"time_used":1118,"timings":{"blocked":0,"dns":282,"connect":1,"send":0,"wait":823,"receive":0,"ssl":12},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"xrpdesk.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-C2MR128SP9","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.72","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xrpdesk.app/","date":"2026-09-25T06:07:31.570Z","timestamp":1790316451570,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Sep 2026 19:22:00 GMT","end":"Thu, 03 Dec 2026 19:21:59 GMT"},"fingerprint":{"sha1":"B5:A9:73:B1:2A:AF:94:D5:A0:C0:EA:89:DD:CE:A1:FA:42:73:60:6A","sha256":"E1:A3:36:34:1F:D9:00:D3:1E:44:B3:36:C7:25:67:04:1A:16:2E:AA:54:82:D9:66:4C:D3:1A:BA:FD:0F:9A:C2"}}},"request":{"raw":"GET /gtag/js?id=G-C2MR128SP9 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xrpdesk.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: zstd\r\nvary: Accept-Encoding\r\ndate: Fri, 25 Sep 2026 06:07:31 GMT\r\nexpires: Fri, 25 Sep 2026 06:07:31 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 176295\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":526001,"size_decoded":176899,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (6698)","md5":"61c37d0d9589cf9d45b78a936d7472dd","sha1":"31796727bd40098765934066d8b3ec78fd64e28f","sha256":"c4e1dda99e7d810132915ac7dd074a8cf417a56c51e43ef8778ae3bc5ecd2c76","sha512":"c695929a517dd23a76a34aff441fcea87f06fd2efadd140e02b4f60760c74d90243f2b3ec62109af98d56cf90743dab0eb538cc582f2f2119b774545ab189bd6","ssdeep":"6144:h5wcM4RorG7+/t5M5Z+5cKnIu9FcjvgbsED/3C9HJDLavOo9jxHR4Qsg:bZp7+//0hBP9LRo11","tlshash":"1cb4f7ce73c674229396f178903f01cba57b29a2b45cc89ab289dce42d3465a5173f7c","first_seen":"2026-09-25T06:08:23.201666Z","last_seen":"2026-09-25T06:11:00.432575Z","times_seen":2,"resource_available":true,"data":null}},"time_used":235,"timings":{"blocked":-1,"dns":2,"connect":29,"send":0,"wait":102,"receive":59,"ssl":43},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=IBM+Plex+Mono:wght@400;500;600\u0026family=IBM+Plex+Sans:wght@400;500;600\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.74","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://xrpdesk.app/","date":"2026-09-25T06:07:31.574Z","timestamp":1790316451574,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Sep 2026 19:23:29 GMT","end":"Thu, 03 Dec 2026 19:23:28 GMT"},"fingerprint":{"sha1":"6C:5B:26:B8:8E:09:56:23:73:54:AC:B4:B3:91:75:07:31:24:4F:2D","sha256":"83:FB:4A:3F:88:06:C6:06:CC:A5:92:12:C8:C2:89:BD:56:6A:F9:0D:8F:49:3D:A0:83:3B:7E:53:A1:2C:69:05"}}},"request":{"raw":"GET /css2?family=IBM+Plex+Mono:wght@400;500;600\u0026family=IBM+Plex+Sans:wght@400;500;600\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xrpdesk.app/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Fri, 25 Sep 2026 06:07:31 GMT\r\ndate: Fri, 25 Sep 2026 06:07:31 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-security-policy-report-only: require-trusted-types-for 'script';report-uri https://csp.withgoogle.com/csp/bcfae741e379a885f2ab2cf83ebe6d32/mr\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":13438,"size_decoded":1751,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"5835d771a007dbd86dd75b7e58d7cb3f","sha1":"a0905931635e61fed2b0d6d4c2d876e81871c77d","sha256":"abbdb13454caa84ef769361dd6cc361a6d17d257cde7b999210f6595f3505373","sha512":"07f95145ae666c9a57cb6d0cac72cfa0f26b6d82fb0536f8c34979676cdc43f2bee0aa697d55b51f71f8973cdfcc80340f87fa75cf27e437dcaae0f83c265fad","ssdeep":"192:ZYpZQxFPE26Bs3U3IFvXesa4Gh8HZdl3gkLTHHi2l3fTLkWHTnl3uiLZQ:a3Qustus3lHH1BS","tlshash":"d652db94806ba440ab031cc233cf7e369d8e65907445c67d9ffe2da49cabd322365b1d","first_seen":"2026-02-04T05:43:31.390246Z","last_seen":"2026-09-25T06:11:00.451374Z","times_seen":41,"resource_available":true,"data":null}},"time_used":86,"timings":{"blocked":-1,"dns":0,"connect":16,"send":0,"wait":36,"receive":0,"ssl":34},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/ibmplexmono/v20/-F63fjptAgt5VM-kVkqdyU8n1i8q1w.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://xrpdesk.app/","date":"2026-09-25T06:07:32.461Z","timestamp":1790316452461,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Sep 2026 19:23:28 GMT","end":"Thu, 03 Dec 2026 19:23:27 GMT"},"fingerprint":{"sha1":"99:42:CC:AA:D1:36:35:7D:FF:39:32:44:00:41:07:B9:D3:00:EE:31","sha256":"48:CD:EE:73:11:77:6B:F0:EE:10:C6:1D:DF:58:7C:4B:88:0D:95:F3:9C:64:15:44:E2:93:5B:17:4F:6A:8E:6E"}}},"request":{"raw":"GET /s/ibmplexmono/v20/-F63fjptAgt5VM-kVkqdyU8n1i8q1w.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://xrpdesk.app\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 14708\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 21 Sep 2026 15:53:22 GMT\r\nexpires: Tue, 21 Sep 2027 15:53:22 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 15 Sep 2025 17:09:21 GMT\r\ncontent-type: font/woff2\r\nage: 310450\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":14708,"size_decoded":15521,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 14708, version 1.0","md5":"79936b18df9f734fb6b0a256b20d36b4","sha1":"bb87500e3204a3a7c65d6633c79c5c840c3be8d3","sha256":"08949f728dc52d528e69b1667d15c89a5686a4ee9a296ff90983985f99c380f7","sha512":"d5b9ed102916ebc2e1ddfe322a5dee1302329de23c0c7895639106766a52906b8ec2b9bf3ac7884dbdce6166e27d315808128d35d9609e45841e3c8c2818031a","ssdeep":"384:i54PnCNUhrlC/trZov44r9cmuyWPCZpMbyKdlm+:i2P0mrlC/cv46VuyVZSFdl","tlshash":"c962b073691e2539e1c2afb0c6c81f6c50f8d70b5ba5c6109378a063b7615ae361e9b1","first_seen":"2025-09-19T06:27:38.321624Z","last_seen":"2026-09-25T11:06:58.369082Z","times_seen":4849,"resource_available":false,"data":null}},"time_used":75,"timings":{"blocked":36,"dns":0,"connect":0,"send":0,"wait":31,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xrpdesk.app/api/trades","fqdn":"xrpdesk.app","domain":"xrpdesk.app","tld":"app"},"ip":{"addr":"216.24.57.1","port":443,"asn":397273,"as":"RENDER","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://xrpdesk.app/","date":"2026-09-25T06:07:52.561Z","timestamp":1790316472561,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xrpdesk.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 22 Sep 2026 23:41:29 GMT","end":"Tue, 22 Dec 2026 00:41:26 GMT"},"fingerprint":{"sha1":"7D:DA:7A:46:B0:3A:89:48:E0:E5:1E:01:76:93:EE:9C:68:A1:C8:57","sha256":"59:FC:F2:A9:91:89:A5:96:F4:74:49:63:85:E7:71:C7:AA:CE:46:00:F1:C0:C7:76:14:AE:11:DA:59:BD:3B:37"}}},"request":{"raw":"GET /api/trades HTTP/1.1\r\nHost: xrpdesk.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://xrpdesk.app/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: _ga_C2MR128SP9=GS2.1.s1790316452$o1$g0$t1790316452$j60$l0$h0; _ga=GA1.1.768969255.1790316453; _ga_MTLZMFLXGT=GS2.1.s1790316452$o1$g0$t1790316452$j60$l0$h0; _ga_JFYKZKVTMZ=GS2.1.s1790316452$o1$g0$t1790316452$j60$l0$h0\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 25 Sep 2026 06:07:55 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 1440\r\ncache-control: no-store\r\ncontent-encoding: br\r\nrndr-id: 4189eb0f-6d89-4763\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nx-render-origin-server: SimpleHTTP/0.6 Python/3.11.9\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\ncf-ray: a407d9e18d2c1525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14879,"size_decoded":1865,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"983b4d3a0d032e819c4ea412851e7b3d","sha1":"edf2a7bf35635678f88c93fcc6439601e682ef32","sha256":"79f4e522ad6bed568244063b469c778a9dffc9b0d21c2c377946378399b97269","sha512":"5a5794978572aa6c66da7da5457f89f7e956970e3bde3a8d29742ca7f196a89ba44f102c6c29a2f6b64ddcf3ac993b1d53375da146722245957f0ebda9a6b794","ssdeep":"192:pzMfeCwHHWsYFvjAuPDyk8RIgknZ8kqJlt88t8+c0b77rVrS:mfm5Gholtpi10b77rVrS","tlshash":"c662a140d1263473d2c25375b300b6cb4e98f30192a97f6e3b7887596cafc395baad21","first_seen":"2026-09-25T06:08:23.205132Z","last_seen":"2026-09-25T06:08:23.205132Z","times_seen":1,"resource_available":true,"data":null}},"time_used":2650,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":2650,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"xrpdesk.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xrpdesk.app/desk-fetch.js?v=1","fqdn":"xrpdesk.app","domain":"xrpdesk.app","tld":"app"},"ip":{"addr":"216.24.57.1","port":443,"asn":397273,"as":"RENDER","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xrpdesk.app/","date":"2026-09-25T06:07:31.583Z","timestamp":1790316451583,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xrpdesk.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 22 Sep 2026 23:41:29 GMT","end":"Tue, 22 Dec 2026 00:41:26 GMT"},"fingerprint":{"sha1":"7D:DA:7A:46:B0:3A:89:48:E0:E5:1E:01:76:93:EE:9C:68:A1:C8:57","sha256":"59:FC:F2:A9:91:89:A5:96:F4:74:49:63:85:E7:71:C7:AA:CE:46:00:F1:C0:C7:76:14:AE:11:DA:59:BD:3B:37"}}},"request":{"raw":"GET /desk-fetch.js?v=1 HTTP/1.1\r\nHost: xrpdesk.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xrpdesk.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 25 Sep 2026 06:07:32 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 1177\r\ncontent-encoding: br\r\nlast-modified: Fri, 25 Sep 2026 05:43:44 GMT\r\nrndr-id: 3601f238-f7b3-4152\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nx-render-origin-server: SimpleHTTP/0.6 Python/3.11.9\r\ncf-cache-status: DYNAMIC\r\npriority: u=2,i=?0\r\ncf-ray: a407d95e6ba81525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3258,"size_decoded":1607,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"fc6943847a4e999c5c2bb0b410650789","sha1":"5b8ad57fc1793c9b746e2eee90d5bde4f35c08fd","sha256":"4c2db76db9a614ef97a887e373c98a0385daa181825e8064144acf8660b74a27","sha512":"daf714a3763e7a80a5d2a243d55def3dd41d9cfa28820ab7b230b0ea5dbff8dd56808bc37b814c21f2fee161f5a635a2ea3e3b44543f04e844c4bbe513b08347","ssdeep":"","tlshash":"3c61f38c78d670161f2630745a6fd09afe71ed03015fc900ba4c86a27f90476dbbaf95","first_seen":"2026-09-25T06:08:23.206424Z","last_seen":"2026-09-25T06:11:00.454458Z","times_seen":2,"resource_available":true,"data":null}},"time_used":568,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":568,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"xrpdesk.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/ibmplexsans/v23/zYXzKVElMYYaJe8bpLHnCwDKr932-G7dytD-Dmu1syxeKYbSAYZgVNU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://xrpdesk.app/","date":"2026-09-25T06:07:32.455Z","timestamp":1790316452455,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Sep 2026 19:23:28 GMT","end":"Thu, 03 Dec 2026 19:23:27 GMT"},"fingerprint":{"sha1":"99:42:CC:AA:D1:36:35:7D:FF:39:32:44:00:41:07:B9:D3:00:EE:31","sha256":"48:CD:EE:73:11:77:6B:F0:EE:10:C6:1D:DF:58:7C:4B:88:0D:95:F3:9C:64:15:44:E2:93:5B:17:4F:6A:8E:6E"}}},"request":{"raw":"GET /s/ibmplexsans/v23/zYXzKVElMYYaJe8bpLHnCwDKr932-G7dytD-Dmu1syxeKYbSAYZgVNU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://xrpdesk.app\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 45428\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 21 Sep 2026 15:53:32 GMT\r\nexpires: Tue, 21 Sep 2027 15:53:32 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 08 Sep 2025 18:10:51 GMT\r\ncontent-type: font/woff2\r\nage: 310440\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":45428,"size_decoded":46241,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 45428, version 1.0","md5":"6b4b2adf4d0ee4301d394be6ecadeee3","sha1":"5facbf6ce85bb54b7478aed0ff40d7b67dfd60a4","sha256":"c5f70ddee640c270adabe47bdf8a589e237a5b5a10a5038fbc032f9f52225aae","sha512":"73f78a8a4448092fd0f477d8c4b849a7fd7babb512738874c352e8829f546443cbd7a3d431db865190a97911221fea74213822371adfca00dd2273d21a48dd58","ssdeep":"768:fympPv9IwdVTCobEyKKY1qlbGgjQhnX5sB4Gx4OVKKEoOMVN7/J2xh:fym9CXWY1qlqmOnJO4Gx4DKEo5VN1+","tlshash":"bb1301bf0376b9188250fa62aa6c3a9b765fbfb0b27608134a5b734d4c5047fde54318","first_seen":"2025-02-05T08:08:56.385262Z","last_seen":"2026-09-25T10:24:33.116979Z","times_seen":11427,"resource_available":false,"data":null}},"time_used":153,"timings":{"blocked":-1,"dns":2,"connect":42,"send":0,"wait":39,"receive":69,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/ibmplexsans/v23/zYXzKVElMYYaJe8bpLHnCwDKr932-G7dytD-Dmu1syxeKYbSAYZgVNU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://xrpdesk.app/","date":"2026-09-25T06:07:32.459Z","timestamp":1790316452459,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Sep 2026 19:23:28 GMT","end":"Thu, 03 Dec 2026 19:23:27 GMT"},"fingerprint":{"sha1":"99:42:CC:AA:D1:36:35:7D:FF:39:32:44:00:41:07:B9:D3:00:EE:31","sha256":"48:CD:EE:73:11:77:6B:F0:EE:10:C6:1D:DF:58:7C:4B:88:0D:95:F3:9C:64:15:44:E2:93:5B:17:4F:6A:8E:6E"}}},"request":{"raw":"GET /s/ibmplexsans/v23/zYXzKVElMYYaJe8bpLHnCwDKr932-G7dytD-Dmu1syxeKYbSAYZgVNU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://xrpdesk.app\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 45428\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 21 Sep 2026 15:53:32 GMT\r\nexpires: Tue, 21 Sep 2027 15:53:32 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 08 Sep 2025 18:10:51 GMT\r\ncontent-type: font/woff2\r\nage: 310440\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":45428,"size_decoded":46241,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 45428, version 1.0","md5":"6b4b2adf4d0ee4301d394be6ecadeee3","sha1":"5facbf6ce85bb54b7478aed0ff40d7b67dfd60a4","sha256":"c5f70ddee640c270adabe47bdf8a589e237a5b5a10a5038fbc032f9f52225aae","sha512":"73f78a8a4448092fd0f477d8c4b849a7fd7babb512738874c352e8829f546443cbd7a3d431db865190a97911221fea74213822371adfca00dd2273d21a48dd58","ssdeep":"768:fympPv9IwdVTCobEyKKY1qlbGgjQhnX5sB4Gx4OVKKEoOMVN7/J2xh:fym9CXWY1qlqmOnJO4Gx4DKEo5VN1+","tlshash":"bb1301bf0376b9188250fa62aa6c3a9b765fbfb0b27608134a5b734d4c5047fde54318","first_seen":"2025-02-05T08:08:56.385262Z","last_seen":"2026-09-25T10:24:33.116979Z","times_seen":11427,"resource_available":false,"data":null}},"time_used":148,"timings":{"blocked":37,"dns":0,"connect":0,"send":0,"wait":82,"receive":29,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/ibmplexmono/v20/-F6qfjptAgt5VM-kVkqdyU8n3twJwlBFgg.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://xrpdesk.app/","date":"2026-09-25T06:07:32.462Z","timestamp":1790316452462,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Sep 2026 19:23:28 GMT","end":"Thu, 03 Dec 2026 19:23:27 GMT"},"fingerprint":{"sha1":"99:42:CC:AA:D1:36:35:7D:FF:39:32:44:00:41:07:B9:D3:00:EE:31","sha256":"48:CD:EE:73:11:77:6B:F0:EE:10:C6:1D:DF:58:7C:4B:88:0D:95:F3:9C:64:15:44:E2:93:5B:17:4F:6A:8E:6E"}}},"request":{"raw":"GET /s/ibmplexmono/v20/-F6qfjptAgt5VM-kVkqdyU8n3twJwlBFgg.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://xrpdesk.app\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 14888\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 21 Sep 2026 15:53:22 GMT\r\nexpires: Tue, 21 Sep 2027 15:53:22 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 15 Sep 2025 17:07:53 GMT\r\ncontent-type: font/woff2\r\nage: 310450\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":14888,"size_decoded":15701,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 14888, version 1.0","md5":"b1c8a895f5fd3fe6cbf5b4cf95c58d87","sha1":"d32f0e0701ac62043840131a800ce717a86e4ee2","sha256":"01d285447409c8a588692162439a038b8cbd7871309ee20267b0d2d91c6e8e22","sha512":"8e5f116c757f033e001d1622798ef0e689d860b6e4102c6d760398ebe653c6ec257bdcee0d8ec1ca7cf5663269ae36b79f8d44b5a0a81298c816ac5ed9a020ed","ssdeep":"192:0oK9+lgWZm57bYBeze/iw+Lp3HIpY4uY8rHcT1DHC4cIIK/Cgb2n5ZXwMEBHr5F3:9K+nro0uYQ6cECVnTXwRtQnyYS5qb/f2","tlshash":"f962be3785690217eb1df96f6133e205ccdede83877bc23262b2955b01cfbea5019255","first_seen":"2025-09-19T17:22:27.509445Z","last_seen":"2026-09-25T11:06:58.363481Z","times_seen":2814,"resource_available":false,"data":null}},"time_used":106,"timings":{"blocked":36,"dns":0,"connect":0,"send":0,"wait":59,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/ibmplexsans/v23/zYXzKVElMYYaJe8bpLHnCwDKr932-G7dytD-Dmu1syxeKYbSAYZgVNU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://xrpdesk.app/","date":"2026-09-25T06:07:32.464Z","timestamp":1790316452464,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Sep 2026 19:23:28 GMT","end":"Thu, 03 Dec 2026 19:23:27 GMT"},"fingerprint":{"sha1":"99:42:CC:AA:D1:36:35:7D:FF:39:32:44:00:41:07:B9:D3:00:EE:31","sha256":"48:CD:EE:73:11:77:6B:F0:EE:10:C6:1D:DF:58:7C:4B:88:0D:95:F3:9C:64:15:44:E2:93:5B:17:4F:6A:8E:6E"}}},"request":{"raw":"GET /s/ibmplexsans/v23/zYXzKVElMYYaJe8bpLHnCwDKr932-G7dytD-Dmu1syxeKYbSAYZgVNU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://xrpdesk.app\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 45428\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 21 Sep 2026 15:53:32 GMT\r\nexpires: Tue, 21 Sep 2027 15:53:32 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 08 Sep 2025 18:10:51 GMT\r\ncontent-type: font/woff2\r\nage: 310440\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":45428,"size_decoded":46241,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 45428, version 1.0","md5":"6b4b2adf4d0ee4301d394be6ecadeee3","sha1":"5facbf6ce85bb54b7478aed0ff40d7b67dfd60a4","sha256":"c5f70ddee640c270adabe47bdf8a589e237a5b5a10a5038fbc032f9f52225aae","sha512":"73f78a8a4448092fd0f477d8c4b849a7fd7babb512738874c352e8829f546443cbd7a3d431db865190a97911221fea74213822371adfca00dd2273d21a48dd58","ssdeep":"768:fympPv9IwdVTCobEyKKY1qlbGgjQhnX5sB4Gx4OVKKEoOMVN7/J2xh:fym9CXWY1qlqmOnJO4Gx4DKEo5VN1+","tlshash":"bb1301bf0376b9188250fa62aa6c3a9b765fbfb0b27608134a5b734d4c5047fde54318","first_seen":"2025-02-05T08:08:56.385262Z","last_seen":"2026-09-25T10:24:33.116979Z","times_seen":11427,"resource_available":false,"data":null}},"time_used":146,"timings":{"blocked":36,"dns":0,"connect":0,"send":0,"wait":70,"receive":40,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xrpdesk.app/desk-help.css?v=1","fqdn":"xrpdesk.app","domain":"xrpdesk.app","tld":"app"},"ip":{"addr":"216.24.57.1","port":443,"asn":397273,"as":"RENDER","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://xrpdesk.app/","date":"2026-09-25T06:07:31.577Z","timestamp":1790316451577,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xrpdesk.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 22 Sep 2026 23:41:29 GMT","end":"Tue, 22 Dec 2026 00:41:26 GMT"},"fingerprint":{"sha1":"7D:DA:7A:46:B0:3A:89:48:E0:E5:1E:01:76:93:EE:9C:68:A1:C8:57","sha256":"59:FC:F2:A9:91:89:A5:96:F4:74:49:63:85:E7:71:C7:AA:CE:46:00:F1:C0:C7:76:14:AE:11:DA:59:BD:3B:37"}}},"request":{"raw":"GET /desk-help.css?v=1 HTTP/1.1\r\nHost: xrpdesk.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xrpdesk.app/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 25 Sep 2026 06:07:32 GMT\r\ncontent-type: text/css\r\ncontent-length: 996\r\ncontent-encoding: br\r\nlast-modified: Fri, 25 Sep 2026 05:43:44 GMT\r\nrndr-id: ee846739-bf89-4a24\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nx-render-origin-server: SimpleHTTP/0.6 Python/3.11.9\r\ncf-cache-status: DYNAMIC\r\npriority: u=2,i=?0\r\ncf-ray: a407d95e5b911525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2791,"size_decoded":1418,"mime_type":"text/css","magic":"ASCII text","md5":"7f88922aa48f6b9ffc2855310f32111e","sha1":"9161a5a58fb8681bbe61524438bd387e097ccc8f","sha256":"0dc3441f863a082091991978409e4961bbc57690a0145f8de23fee653a72ddd8","sha512":"a875066cd7010851186dcbc1450015cb195d49dd0f4d6ff717148483d6ddd1b71509101715a44bd1dc7c1b07cebba25eca93e8bc0314b3c12b0631af20740202","ssdeep":"","tlshash":"3a510272e7256260bc366da5739b5f9a3758aa0a9502cf7c4be1200cddc11efe39174c","first_seen":"2026-09-25T06:08:23.20892Z","last_seen":"2026-09-25T06:11:00.452263Z","times_seen":2,"resource_available":true,"data":null}},"time_used":578,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":578,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"xrpdesk.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xrpdesk.app/amendment-status.js?v=1","fqdn":"xrpdesk.app","domain":"xrpdesk.app","tld":"app"},"ip":{"addr":"216.24.57.1","port":443,"asn":397273,"as":"RENDER","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xrpdesk.app/","date":"2026-09-25T06:07:31.580Z","timestamp":1790316451580,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xrpdesk.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 22 Sep 2026 23:41:29 GMT","end":"Tue, 22 Dec 2026 00:41:26 GMT"},"fingerprint":{"sha1":"7D:DA:7A:46:B0:3A:89:48:E0:E5:1E:01:76:93:EE:9C:68:A1:C8:57","sha256":"59:FC:F2:A9:91:89:A5:96:F4:74:49:63:85:E7:71:C7:AA:CE:46:00:F1:C0:C7:76:14:AE:11:DA:59:BD:3B:37"}}},"request":{"raw":"GET /amendment-status.js?v=1 HTTP/1.1\r\nHost: xrpdesk.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xrpdesk.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 25 Sep 2026 06:07:32 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 1067\r\ncontent-encoding: br\r\nlast-modified: Fri, 25 Sep 2026 05:43:44 GMT\r\nrndr-id: ddfc25a6-d7d6-4393\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nx-render-origin-server: SimpleHTTP/0.6 Python/3.11.9\r\ncf-cache-status: DYNAMIC\r\npriority: u=2,i=?0\r\ncf-ray: a407d95e6b9c1525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2661,"size_decoded":1497,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (318)","md5":"f37d927209cd4838a97086ac2a217405","sha1":"29469e47f94c7e790cc85461933fca671070b2e8","sha256":"43490b8f40c4f1a3d3555fbd96bbd05f4e1e4f1f4c8e07b6cd86060a2880c517","sha512":"4465fc90ef80a81618fd2d5ba2bf7abf2481ac3653d2ceea6c93fe0f320fcd779852cc4d92bf16406f7abb70a33709b68d44bdbf05a56929659a479ac567923d","ssdeep":"","tlshash":"ba51238864b370356d13b06463df851e71ba4a43434e8e00b4ad9a647f95815eb77ffc","first_seen":"2026-09-25T06:08:23.210231Z","last_seen":"2026-09-25T06:11:00.436955Z","times_seen":2,"resource_available":true,"data":null}},"time_used":619,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":619,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"xrpdesk.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}