{"report_id":"75f0e4f8-b95b-460f-b773-e054a2a7aecd","version":0,"status":"done","tags":[],"date":"2026-06-18T16:05:53Z","url":{"schema":"https","addr":"phase2-xrpfi.com/","fqdn":"phase2-xrpfi.com","domain":"phase2-xrpfi.com","tld":"com"},"ip":{"addr":"172.67.197.157","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"phase2-xrpfi.com/","fqdn":"phase2-xrpfi.com","domain":"phase2-xrpfi.com","tld":"com"},"title":"Flare: The blockchain for data","dom":{"size":288418,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (5915)","md5":"beb623d0e3f1a1bcf61342fbd9dd26b7","sha1":"ae8ca13fc67ce3a31a6b3a858b52159426b9a56f","sha256":"61070609911275dbb9903dc1344cc0fe384e4d1d5d1ee84884412eae75754072","sha512":"950fcc20f354389af16fbb6125853c8f4d87ad18bf4b912784718785b0979e172f51c5448fe6452386056f75eb37cc5f634d740b12183a975d3e9563f662d537","ssdeep":"1536:FKEnhvo5sauKuW63oo9DiG3nCF1EZV663+DiG6CaxCIPvEqvjhgxJn2RGa4bL5jt:Fhvo5sfoyvNjaT2ZbI","tlshash":"4a54c9b2f2f112a7000a93d9f7765516efd060ebd5468ec8729c0be89f46c9d68d324e","dom_hash":"domhashb9bc7121eb2924810271c67be3bbc0f2","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"phase2-xrpfi.com/","fqdn":"phase2-xrpfi.com","domain":"phase2-xrpfi.com","tld":"com"},"ip":{"addr":"172.67.197.157","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-07-23T16:05:53Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"phase2-xrpfi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"phase2-xrpfi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"phase2-xrpfi.com","ip":{"addr":"172.67.197.157","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-06-08","domain_rank":0,"first_seen":"2026-06-18T16:06:10.644038Z","last_seen":"2026-06-18T16:06:10.644039Z","alert_count":86,"request_count":43,"received_data":4857529,"sent_data":45103,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"challenges.cloudflare.com","ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-02-17","domain_rank":11393,"first_seen":"2021-10-20T05:02:03Z","last_seen":"2026-06-14T23:32:43.59512Z","alert_count":0,"request_count":8,"received_data":795074,"sent_data":6443,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"dns.google","ip":{"addr":"8.8.4.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2018-04-16","domain_rank":158,"first_seen":"2018-10-26T18:11:46Z","last_seen":"2026-06-13T01:55:12.131589Z","alert_count":0,"request_count":1,"received_data":821,"sent_data":494,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"flare.network","ip":{"addr":"104.18.2.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2017-09-08","domain_rank":94851,"first_seen":"2025-06-17T09:05:49.543788Z","last_seen":"2026-06-18T15:55:51.423897Z","alert_count":0,"request_count":1,"received_data":2515,"sent_data":608,"comment":"","tags":null,"fingerprints":[{"name":"Next.js","description":"Next.js is a React framework for developing single page Javascript applications.","website":"https://nextjs.org","common_platform_enumeration":"cpe:2.3:a:zeit:next.js:*:*:*:*:*:*:*:*","icon":"Next.js.svg","categories":["JavaScript frameworks","Web frameworks"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"React","description":"React is an open-source JavaScript library for building user interfaces or UI components.","website":"https://reactjs.org","common_platform_enumeration":"cpe:2.3:a:facebook:react:*:*:*:*:*:*:*:*","icon":"React.svg","categories":["JavaScript frameworks"]},{"name":"Webpack","description":"Webpack is an open-source JavaScript module bundler.","website":"https://webpack.js.org/","common_platform_enumeration":"","icon":"Webpack.svg","categories":["Miscellaneous"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/nbstv/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-06-18T19:22:45.769933Z","times_seen":746471,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/281d7243-c30e-4ade-ae49-8a465eeb6b06","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"","is_inline":false,"md5":"b23314d76d6ef77dad0b00eda85ed7e1","sha1":"8a4a99487f2cd3299d181141a0aeb4b47d814a59","sha256":"db2031f6a8cef1def057c7dd9e4545328ff5009cb6670f944dd40322078c09aa","sha512":"8c0d663288d4959ce3c329d8732c1dcde3e3616f935c6aec0db06a31ca4ef2cbbc12e5bb24523e186f1f5849f4eca694765181e9b01fe81173489fd2ad064e14","ssdeep":"","tlshash":"ccd0cd093d71d60886e211337c7f7521d1a16264650d53445735def9cb5069f2514f54","size":291,"data":"","first_seen":"2026-06-16T09:40:41.569162Z","last_seen":"2026-06-18T19:24:11.184349Z","times_seen":2353,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"phase2-xrpfi.com/","fqdn":"phase2-xrpfi.com","domain":"phase2-xrpfi.com","tld":"com"},"ip":{"addr":"172.67.197.157","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"ac136117abc6d2c9cd75d4b908614cb1","sha1":"6749becf96904c73951a6ffd368fcd49e69f45ee","sha256":"0d7ea7b94276d16d336d6161d9538e601b1242bd43aacd911ff5776fc25ea6c6","sha512":"347ea2447c6db21e6f8effbc8f5878190db62d80017dbe1534c70495860e6c21eedb03e569a03e0d3e6f06a800250df2be37142b78e39814cb424e85a3faea03","ssdeep":"3:N/BKL1X/RJn:eL1PRJn","tlshash":"845504c0545034745510d410d1d01415d005050110d50411f05d04fd173104104d45c0","size":1337359,"data":"","first_seen":"2026-06-18T16:06:18.859122Z","last_seen":"2026-06-18T16:06:18.859122Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/nbstv/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"80f30aaef8833cd36940146ddf77d203","sha1":"993b4457aa75a2d4de6e47d24187a4e3846b63f4","sha256":"da8f696db6a0a43c52539e79c978ca6149f1bdfbd6fe130a01e1d0d87b632a24","sha512":"a660430065d60dd54748a15a3307402e59f42ab6e427ec3a1621ca1035a3f9721966f0615f8eace75eab88a2753d15d50a9aa77790b9edc23fa5a340fdaf703e","ssdeep":"3:N/BKL1X/R8:eL1PR8","tlshash":"595504c154c034741514d411d1503c157005170110150415f05d04d4373004000dd5c0","size":1337359,"data":"","first_seen":"2026-06-18T16:06:18.860193Z","last_seen":"2026-06-18T16:06:18.860193Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"phase2-xrpfi.com/cdn-cgi/challenge-platform/h/b/orchestrate/chl_page/v1?ray=a0db87371d33569b","fqdn":"phase2-xrpfi.com","domain":"phase2-xrpfi.com","tld":"com"},"ip":{"addr":"172.67.197.157","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"0182fdbed7d3e2b515649b076a2e35ef","sha1":"17a8530a2b9bcda05e868372af55334bf31bad05","sha256":"4c0c03be81a5272e66f50c2450f13b28aadc53b68054dd3b623d7dfc869c4d22","sha512":"180102833c426908f440da5303ecae1164bd5468f59011374ace7e08c6931f7f1a1a7b6432ef137be74b992d9e0c297452f34e370780fa5629c95a6bf809375e","ssdeep":"3072:f+vZvx3X7Gv8pFf5DfBMK8H3ivut1e/D34YiNscOcJS/:f+vZvx3X7Gv8D5Dd8XAD36OaS/","tlshash":"6904e78d3bc570474282ab7501b77fdab13b4c8002376829e881a4d4fdb6b99b96f5cd","size":189311,"data":"","first_seen":"2026-06-18T16:06:18.845367Z","last_seen":"2026-06-18T16:06:18.845367Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/nbstv/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"4da34c5fa7e74a3297206d8a2748832d","sha1":"95b1c5d8f39ce8445e153a0bdd1eb6e033a0a375","sha256":"0083dc28f384fecd6115ab9821defc779aadef6ef281ff4a52f8af2eca6aa038","sha512":"baaf70da140ac579a13f7a253800e625b58729456a3f26eea71d59bb1a45af0aac48a65327609583c7376ddcc7081b3990e10eeba168de9759f6b4941765d81c","ssdeep":"3072:sQj0qwXBUd4ZJkDeWc9AzAsum4cEzLK1uTvjEZNXH6EBl:dj0qwRUdA9Wsvfm4cEzEcEZNXFl","tlshash":"f924faca3ace745743916b7400b7b9dbb2364ca410591c1cd68096e0fcfe7e97297ae8","size":217956,"data":"","first_seen":"2026-06-18T16:06:18.861162Z","last_seen":"2026-06-18T16:06:18.861162Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/nbstv/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"d70b7a1f2f7571e0d4e53eb03eab45b1","sha1":"6432800546c454796ecc12c9eb619d950423ccbc","sha256":"0df24be9040ddb45dbb67e9d5ecd2dc63126ff6050bb1c40e5bcf1b711e3c777","sha512":"5a249033c7ca1ae84cfc830f3648030f90fd20e12e1fcd54d1945b86caa14c5ca3968216c4633d89ab2f2a9a47ee45110bc4ec9b1cc2b34acafa7e18ff1fc438","ssdeep":"3:N/BKL1X/RjG:eL1PRC","tlshash":"845504c0544034741510d510d55054155007054310550411f05f04dc173404000d45c0","size":1337359,"data":"","first_seen":"2026-06-18T16:06:18.862168Z","last_seen":"2026-06-18T16:06:18.862168Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/nbstv/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-06-18T19:22:45.769933Z","times_seen":746471,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/nbstv/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"693f77cec260ca187de770971f530331","sha1":"d2fe90428ef2d56b45f4781d37d07dfbf66874d0","sha256":"c5fea0950d06191837c378a45be1b37d63d6bf6ae1258258178ddfe8b30c5ac4","sha512":"0285d85c12ca0df10a295b68dcb3946488c0f1fb877ddb31146b51a37a857a31bc171c7164e8dfdbe8d796c6bf324e395eb64042498af2e56f97e35510dfdb22","ssdeep":"3:N/BKL1X/RmdQ:eL1PRmS","tlshash":"185504c0574034751511d410d17034155005050310170411f05d04d4173114000d45c0","size":1337359,"data":"","first_seen":"2026-06-18T16:06:18.863127Z","last_seen":"2026-06-18T16:06:18.863127Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/nbstv/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-06-18T19:22:45.769933Z","times_seen":746471,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/nbstv/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"2198165ce5588a4d3350c4be7a873735","sha1":"b3715fb04c677eeed53af753f062a9eb2bb5373f","sha256":"e68c2954b4ece24b29a03e756d0ae16c73b3209046684052e0fc25aaa50d061b","sha512":"7aa71bd75b2f79fd9b2c58b94d91dfb871911b8887b7c0946d42feed953c1fe38118537707526ecc8064dc107e7d4b21e537401c73bc870e7f33ea21d217d36a","ssdeep":"3:N/BKL1X/Run:eL1PRu","tlshash":"605504c0544034751510d410d15054155405051111150411f05d04f5173004000d45c0","size":1337359,"data":"","first_seen":"2026-06-18T16:06:18.864097Z","last_seen":"2026-06-18T16:06:18.864097Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/nbstv/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"ea200046c4d1b13cdb0d74f2309c3d5c","sha1":"1fa32892dbd463043de7401b0763f52a97304213","sha256":"5ef56072ba5579f90e8056e8b1ecefe5a7a0eb3d594a0ca5c0c2bb3acb31fc13","sha512":"032662d05316fd7ca0ca6e175ce4b3b58e3b39d687ceaefe7047a730a02b8fc53700f50f92b32d1d9fcedb8f543b880efcd4c457ff8de2b0babef0be5cd872ed","ssdeep":"3:N/BKL1X/RBVR:eL1PRjR","tlshash":"045504c05c5034741514d410d35014155005051510150411f05d04f5173004001d4dc0","size":1337359,"data":"","first_seen":"2026-06-18T16:06:18.865103Z","last_seen":"2026-06-18T16:06:18.865103Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"phase2-xrpfi.com/","fqdn":"phase2-xrpfi.com","domain":"phase2-xrpfi.com","tld":"com"},"ip":{"addr":"172.67.197.157","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"877d4c4d99209741596e151bac24dd2e","sha1":"7137ba30af5d533e36e999fd737884511a57a8c7","sha256":"3198152a8a26a9a3369d7a4ee1ea8825391fec485273c0efd14d8e1bf21538ad","sha512":"97f51f04803bf016171d0d5b0d88794bcdc5e6dda1ca0a433ea6c3d83d7e0cf26f2476eafd2948b6d19b839680c68f8fce3c9528e0897882041c1078e79bb8fc","ssdeep":"3:N/BKL1X/R6WT:eL1PRzT","tlshash":"b35504c05c40347c1510d435d1511455d005053110154441f05f04d4373004040d05c0","size":1337359,"data":"","first_seen":"2026-06-18T16:06:18.866225Z","last_seen":"2026-06-18T16:06:18.866225Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/nbstv/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"0c096b25c99b70fb77e2242c1bfd996d","sha1":"7f33dcc130bddb19063152fe7f256f3afa0da5b8","sha256":"a7e6ba33ddadddb8fbaf3222666542da11ceef6554a7f696396520a38bb95a59","sha512":"8e25e135b0f001f36e279a0aae8f74dedf31a29bb6c59357775efda36078a17d428d4e8e2e81b926be64c4135130369fe4f7a9bdb5ef8cd98242c095e8667338","ssdeep":"","tlshash":"2dc02b883bc4e024c64131351c6f42c6f638df600c582013e042414db6b0b50039ff4f","size":137,"data":"","first_seen":"2026-06-16T09:40:41.561727Z","last_seen":"2026-06-18T19:24:11.15912Z","times_seen":2434,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/nbstv/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-06-18T19:22:45.769933Z","times_seen":746471,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/nbstv/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-06-18T19:22:45.769933Z","times_seen":746471,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/nbstv/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-06-18T19:22:45.769933Z","times_seen":746471,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/nbstv/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-06-18T19:22:45.769933Z","times_seen":746471,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/nbstv/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"94081036cbf595a3dac383955367903b","sha1":"4c78fee58d05c79857142f6a1823b584e693d678","sha256":"a3c4f20a8b17293aceca90edf64056d45c645f5adc2d5c853448063f6fa56a8b","sha512":"99084ac603dabfdbf3736d9064ab97c259689afaf02fe04dccc45f4ed0dbb4be9af01b5e797fa80f5f6881c3f1f245f4b0d79fa6472f1eb8e2aa07f5404e5e69","ssdeep":"","tlshash":"64600000000000000000000cc00300003cc0003300cc0300c30c003000cc3cc0000000","size":13,"data":"","first_seen":"2026-04-23T17:24:48.314042Z","last_seen":"2026-06-18T19:24:11.19181Z","times_seen":48965,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/nbstv/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-06-18T19:22:45.769933Z","times_seen":746471,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/nbstv/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-06-18T19:22:45.769933Z","times_seen":746471,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/nbstv/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-06-18T19:22:45.769933Z","times_seen":746471,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/nbstv/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-06-18T19:22:45.769933Z","times_seen":746471,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"phase2-xrpfi.com/","fqdn":"phase2-xrpfi.com","domain":"phase2-xrpfi.com","tld":"com"},"ip":{"addr":"172.67.197.157","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"6bbeab1329892680a1e6c7ebec3c6b5f","sha1":"26aec887450439d36416eb51b68c0a62b383107c","sha256":"2ea1f3e7f50333b1973e60d256f5c1dbe5264abe22eb93efae799bf945df58b4","sha512":"368e2f680c32e095d0a2c74d1be851f6ff446c3919420309b81b0fe53b47278598fdde10b6854ece807dbb92d7d2167a397b6947598a1790d91567e3b19d49cb","ssdeep":"3:N/BKL1X/RIf:eL1PRIf","tlshash":"3d5504d0544034745530d470d35014175005051510150411f05d04dc173104000d45c0","size":1337359,"data":"","first_seen":"2026-06-18T16:06:18.869145Z","last_seen":"2026-06-18T16:06:18.869145Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"phase2-xrpfi.com/","fqdn":"phase2-xrpfi.com","domain":"phase2-xrpfi.com","tld":"com"},"ip":{"addr":"172.67.197.157","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"a29f8fdac6d995f6ac271aca8f6bb163","sha1":"ea3e8fbde273d59c3008416f517a71b2f2275766","sha256":"c801b388cc556aafa2dc1a0a3c4959904d6a07388b06f06bc3ada97c5606bbbb","sha512":"7830bda2068521c1a5a9ba9cdc8cb8b0e0a9f43bff1852fbed171cba651e89060c928c4b681e676ae61599169c41db001b873f6de61c76a01ef23b28fd267330","ssdeep":"3:N/BKL1X/Rtdn:eL1PRvn","tlshash":"a15504c154c034741510d410d15114175005050110550515f05f04d4173004400d45c0","size":1337359,"data":"","first_seen":"2026-06-18T16:06:18.870199Z","last_seen":"2026-06-18T16:06:18.870199Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/nbstv/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-06-18T19:22:45.769933Z","times_seen":746471,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/nbstv/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-06-18T19:22:45.769933Z","times_seen":746471,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/nbstv/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-06-18T19:22:45.769933Z","times_seen":746471,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/nbstv/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-06-18T19:22:45.769933Z","times_seen":746471,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/nbstv/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-06-18T19:22:45.769933Z","times_seen":746471,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"phase2-xrpfi.com/assets/framebundle-grid.js","fqdn":"phase2-xrpfi.com","domain":"phase2-xrpfi.com","tld":"com"},"ip":{"addr":"172.67.197.157","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"b98d29e2dc4b3406e48e10322fbe880b","sha1":"8a21df07399f415b241625f36388c094c6bafb4d","sha256":"e44df1c892d383a509e30acbde628c4d7a2cfc44ef407d6714ac601b1087a564","sha512":"f4d98e6509fb04ca069c0667833c55a2c78ce59911ef40cf1ace5d80a3a841ade4922af9adfaebcffece62e3fc601c1039fa8b1ba584c36c21495a4e7723cd9d","ssdeep":"6144:KnojRHkzQRByRCSsmDquooQm4uVfgxlK7ioXGhCVjdEhp+xwnWWhDOksozZ:KnsRHXRMYw1JlAU/EbtsozZ","tlshash":"32b4f97d8c207956592de011b502be0f2478796caa61f9b7373063b792bf8c79be4c81","size":520506,"data":"","first_seen":"2026-06-08T14:46:54.916871Z","last_seen":"2026-06-18T16:06:25.800532Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/nbstv/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-06-18T19:22:45.769933Z","times_seen":746471,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/nbstv/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-06-18T19:22:45.769933Z","times_seen":746471,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/nbstv/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-06-18T19:22:45.769933Z","times_seen":746471,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/nbstv/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"7f78ec3e626873a601356331c1360e54","sha1":"d38e7b320d1e4ea4e886e0c79ea26803872ffb70","sha256":"0647b3d6203f8b34be2b80f0c9b8b7c3f54b0e13047a5f37cb679a0153f793f8","sha512":"0624a5cb0b895fd5712ed7488d0cc908d71cd38d22f4c322c0c05b8632d4af5c7e0ec48955923c5bbfe1647c68698961a976aeffbb38ea12e75936c4fe3acfc0","ssdeep":"3:N/BKL1X/RGQ:eL1PRGQ","tlshash":"bb5504c0544034741530d410d15014355017074511550411f07d04f5173004000d45c0","size":1337359,"data":"","first_seen":"2026-06-18T16:06:18.87133Z","last_seen":"2026-06-18T16:06:18.87133Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"phase2-xrpfi.com/","fqdn":"phase2-xrpfi.com","domain":"phase2-xrpfi.com","tld":"com"},"ip":{"addr":"172.67.197.157","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"8709c5139ce7301f48268f8a10c2329f","sha1":"1ed2130f594b38ac2c25235d5a4f8e557f50e1cc","sha256":"62e9124aecf0fa25c23cbc145136089c656da3dd0c845d565ca85aeea1babeae","sha512":"ac682227602e997fb8a51f7ec91aa3a218bb2b192d7b371dd8cbdb07890e8dd34105da0ed7bde2246847154c656f71b26b0de09a72b409570be37b8d6d701ea2","ssdeep":"3:N/BKL1X/Rsd:eL1PRsd","tlshash":"595504c154d034741510d410d15114175005050110150415f05d04dc173404000d45c0","size":1337359,"data":"","first_seen":"2026-06-18T16:06:18.872671Z","last_seen":"2026-06-18T16:06:18.872671Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/nbstv/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"f3c6ff6d6f79ae6facd921caef290033","sha1":"8de560587d43923479667204c7395e2855f8f62a","sha256":"7c3a00da148e57e5358e5c5da86c5606292650f6bdddaa21d130138334edf271","sha512":"4d4ac7d45ba55129fc19d418ffce5ce3e93c260a1a12ff476af26c116ed88c095be73381feec05c02154c55f48b478707dadb66905ae7db4e21e28da4290508a","ssdeep":"3:N/BKL1X/RrE:eL1PR4","tlshash":"e75500c0a88038b82a20e820e2ac282ba00b0a03202a0822f0ae08e82b3008000e8ac0","size":1337359,"data":"","first_seen":"2026-06-18T16:06:18.87376Z","last_seen":"2026-06-18T16:06:18.87376Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/nbstv/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-06-18T19:22:45.769933Z","times_seen":746471,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eval","is_inline":false,"md5":"e1ccc1e0df03a87e00d3cad57c089516","sha1":"4de705d5b323b22e70cb0784b2f05c8264db3dd1","sha256":"9d84ac6daf060c423fe5975e8373e49e31edd12fa777f283b8521397c7e38980","sha512":"3057624b408189cc702a871cd22a8708cf2fee9e971d8a38a8089000291698c6663d02cd6ef1bc8217511565f4edc7c7a7a45dbe76a469d217bce7cec6188da9","ssdeep":"","tlshash":"e3c02bc7e31801032e18180f3c9c00331c10923aca84c8e7833e345308cc1c001b9208","size":142,"data":"","first_seen":"2026-06-16T09:49:37.970908Z","last_seen":"2026-06-18T19:29:22.210467Z","times_seen":320,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/nbstv/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-06-18T19:22:45.769933Z","times_seen":746471,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/nbstv/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-06-18T19:22:45.769933Z","times_seen":746471,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/nbstv/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-06-18T19:22:45.769933Z","times_seen":746471,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/nbstv/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-06-18T19:22:45.769933Z","times_seen":746471,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"phase2-xrpfi.com/","fqdn":"phase2-xrpfi.com","domain":"phase2-xrpfi.com","tld":"com"},"ip":{"addr":"172.67.197.157","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"5a8c090d2258617df65564ffb24819eb","sha1":"3be91136102c828fe498f6960ffed0dd91156f0a","sha256":"a519c569548551a5ca99da5584265390faf29bb6b97e68c6d02a212e3e4239fc","sha512":"44e9d6f9fc89095dbdf3b2853fccc3075b72e508775a80405be288b317b3f1fc5028bea239b321a2487ee9e5823c89b261ecb9d49efd7176c08179eacaadc467","ssdeep":"3:N/BKL1X/Rl:eL1PRl","tlshash":"665504c4544034751510d410d15054155005050111150411f05d04f5173004104d45c0","size":1337359,"data":"","first_seen":"2026-06-18T16:06:18.875992Z","last_seen":"2026-06-18T16:06:18.875992Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/nbstv/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-06-18T19:22:45.769933Z","times_seen":746471,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"phase2-xrpfi.com/","fqdn":"phase2-xrpfi.com","domain":"phase2-xrpfi.com","tld":"com"},"ip":{"addr":"172.67.197.157","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"1b57feb9ada076f7cbf524af8afb51bc","sha1":"e23a0cf3b8a9d034bb54541aaad6a165feda42c4","sha256":"c3b2f4598eb1ce67597d837579aac0cb06aff8c55303f02674356fea0aaef248","sha512":"67cfe54af8fdc7272cc3973f91c33a2c817e92a11f0ac83266d0ad686a1f14e01ac57b841980c958c74323df2ced5538fa3a81c191780d555bf7a26b72803a6b","ssdeep":"3:N/BKL1X/ROL:eL1PROL","tlshash":"e15504f1d44074741510d410d37014155005051d14150415f07d0cd4173004000d45c4","size":1337359,"data":"","first_seen":"2026-06-18T16:06:18.876928Z","last_seen":"2026-06-18T16:06:18.876928Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"phase2-xrpfi.com/","fqdn":"phase2-xrpfi.com","domain":"phase2-xrpfi.com","tld":"com"},"ip":{"addr":"172.67.197.157","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"5c4465bf17dcc11d935a77884e15f380","sha1":"7760fb989098c3a42dac1c69b652c115de97b301","sha256":"3e6da1a7bcf5e99eeb2ac919f08c9a079683ae7e9bb02fab272dfb42cd0039ca","sha512":"e4b5246ba25d7dbc9b17684fc50bcb5b503ca7a622974b0eb8cd3badd09c359ef562856738e3970887d48f63e6ff81e8bef3af8fd9dcf2e749917b7e8465b6bc","ssdeep":"6144:S/47hDMHeTU5JVDJUQ4W0cDRqL74VQOlqRC7JW5l6fmPUe530+wovZ:S/6hDbot7JnMmWtlwovZ","tlshash":"e0b4e97d8d207956492de011b502bf0f2478796caa61f99b773023b792bf8c79be4c81","size":515167,"data":"","first_seen":"2026-06-08T14:46:54.937214Z","last_seen":"2026-06-18T16:06:25.830069Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/nbstv/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-06-18T19:22:45.769933Z","times_seen":746471,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/nbstv/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-06-18T19:22:45.769933Z","times_seen":746471,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"phase2-xrpfi.com/?__cf_chl_rt_tk=2nkry3hEtDpCu8iXtKwpLBKRoYTJl6CrokWi9rITwyY-1781798649-1.0.1.1-uvzDiaQqAf247HeqSNyKb35G1EbdJrax.RSUI07Vxyo","fqdn":"phase2-xrpfi.com","domain":"phase2-xrpfi.com","tld":"com"},"ip":{"addr":"172.67.197.157","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-06-18T19:22:45.769933Z","times_seen":746471,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/nbstv/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-06-18T19:22:45.769933Z","times_seen":746471,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/nbstv/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-06-18T19:22:45.769933Z","times_seen":746471,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/nbstv/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-06-18T19:22:45.769933Z","times_seen":746471,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"phase2-xrpfi.com/","fqdn":"phase2-xrpfi.com","domain":"phase2-xrpfi.com","tld":"com"},"ip":{"addr":"172.67.197.157","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"0c096b25c99b70fb77e2242c1bfd996d","sha1":"7f33dcc130bddb19063152fe7f256f3afa0da5b8","sha256":"a7e6ba33ddadddb8fbaf3222666542da11ceef6554a7f696396520a38bb95a59","sha512":"8e25e135b0f001f36e279a0aae8f74dedf31a29bb6c59357775efda36078a17d428d4e8e2e81b926be64c4135130369fe4f7a9bdb5ef8cd98242c095e8667338","ssdeep":"","tlshash":"2dc02b883bc4e024c64131351c6f42c6f638df600c582013e042414db6b0b50039ff4f","size":137,"data":"","first_seen":"2026-06-16T09:40:41.561727Z","last_seen":"2026-06-18T19:24:11.15912Z","times_seen":2434,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"phase2-xrpfi.com/","fqdn":"phase2-xrpfi.com","domain":"phase2-xrpfi.com","tld":"com"},"ip":{"addr":"172.67.197.157","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"dada8ac52554d50ebd6ec8bb187592ef","sha1":"6b2377d0e2e1ad66d57f9d8cfdb54e665cc9ae44","sha256":"1d8e3b465b06ebfdc6cb57ec76a116a8c1f5b9863d8365a6f7a18d44911070dd","sha512":"f5288aba9f91b8a9642055501ddb88751cf700faf537bae975f5c4337e786714faab32c21fc191af20789a5e8e66393569d8a9acf65b45b1031610eb93b340db","ssdeep":"3:N/BKL1X/Rb:eL1PRb","tlshash":"585504c0544035741510d411d15014155005051150150413f05d0cd4173104400d45c1","size":1337359,"data":"","first_seen":"2026-06-18T16:06:18.879894Z","last_seen":"2026-06-18T16:06:18.879894Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/nbstv/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"7b956510238e6348507064f96fb72bd6","sha1":"1de347a1da4c0a55f6e1917146a9806243ff27b9","sha256":"50408ff55f4769c767a494702bef26a326419d4417a9220c1944583d03c7dcc3","sha512":"39412c9cacba1a64292d13a2c5fe42d9fafd0c689752eefa216cd83c586da9af4388273917466e40b8a745f0cba1030059efea4de64690d3145990d4d190aa5f","ssdeep":"3:N/BKL1X/RLWT:eL1PRw","tlshash":"995504c0544434741510d410d3d114155045051510550c11f05d04d4173004000d45c0","size":1337359,"data":"","first_seen":"2026-06-18T16:06:18.881049Z","last_seen":"2026-06-18T16:06:18.881049Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/nbstv/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"d50da67d4fa1256e8e6c75f127623013","sha1":"c5cb042f5d9fa2a0ad2ce8b4d04428c36147d262","sha256":"6204667737241ea7768d8ecb3f30c4cb693525c9aa84356b8c8a814ba5ed6f00","sha512":"3af2aecd681d80759785f471ce8d60d6b6d27cd9f18df52ebfac789c78836d2b348f889161e2910a1898ada382c67c6314ae8a617ffbf68b58e65bfa344c7280","ssdeep":"3:N/BKL1X/R5n:eL1PR5","tlshash":"665504c154c034745510d410d15114157005050110150415f05d45d4173004000d55c0","size":1337359,"data":"","first_seen":"2026-06-18T16:06:18.882194Z","last_seen":"2026-06-18T16:06:18.882194Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/nbstv/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"50bda72e04f85f9b4338c0f939c34b9c","sha1":"d53056a9d7a7424238f0faf0b93b098f28d4d3ca","sha256":"db8d20f2dfaf9df3877967927de5ecb9648fecda131ab44bf854f8d72baa2b23","sha512":"3e55d7e8940bd66ef537062f73d3d2c6982a25a4e9fe9ac98e18253782cf28e01f106382d2e9dbbc05b6cdd62aae372b75cd430aa5a7ce2e327fb2ece33a30d0","ssdeep":"","tlshash":"736000030c00cc300033000c0000003c30f00c3003cc000c033003f003c030c0000030","size":15,"data":"","first_seen":"2026-04-23T17:24:48.299417Z","last_seen":"2026-06-18T19:24:11.175647Z","times_seen":48865,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/nbstv/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"65b34ecc9f3972ddf89dff1a1ac439fd","sha1":"f72658e5080780c30d479fbe41b310996caf5f33","sha256":"26632aa0b5c0bf83093ea0d5524f835562b2b7d6c974fb4a4babc583616c28b4","sha512":"ea3de55552bbc942e47bb9d1e3590395d1213fe88f745f7782c0d4336ecb283ca1b601084e911d7d546d5c1be20f88aadf0af44a517abb8d04c5c46caaaa6d8b","ssdeep":"3:N/BKL1X/R0n:eL1PR0","tlshash":"165504d0555035741510d450d55114155005051110150411f05d0cdc173004c00d45c1","size":1337359,"data":"","first_seen":"2026-06-18T16:06:18.883994Z","last_seen":"2026-06-18T16:06:18.883994Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"phase2-xrpfi.com/","fqdn":"phase2-xrpfi.com","domain":"phase2-xrpfi.com","tld":"com"},"ip":{"addr":"172.67.197.157","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"4e1208f3a0562e8d5a32d6bfc8f89f84","sha1":"a0a8d1e503547b0afbed3bf3b2336fc791c9e9f7","sha256":"600c4c4cf408031659d2cba683b51255b0c1ddefd582eb5e9a778bc45507f687","sha512":"f7333b773330fc25d78fef1565562248e407003e35ccf3dc65af374cc41828166063ab34b8316c5f43ea7e592ccb5b57909f5b4dde7fcc945bbb58821e8fe432","ssdeep":"3:N/BKL1X/RI:eL1PRI","tlshash":"d05504c0f44074745510d410d15014155045051110150511f05d0cd41f3004400d45c1","size":1337359,"data":"","first_seen":"2026-06-18T16:06:18.88526Z","last_seen":"2026-06-18T16:06:18.88526Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/nbstv/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-06-18T19:22:45.769933Z","times_seen":746471,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/nbstv/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-06-18T19:22:45.769933Z","times_seen":746471,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/nbstv/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"93e354e833ee7b4feead7057a3f33168","sha1":"4025c763f11cdc2eef6318108989528620fef9e7","sha256":"80b90237b40178e74c34d6652d95b3918d01b603ba83f9dce47ba6b19343c245","sha512":"2b37a9bb6f2c3e2ad3624228638881eaeb961c98a31e60a424d9c6146f002a852cec318a17772a5be5015fd197ad4582b007eb0b15335ba6d25412b27b576c13","ssdeep":"","tlshash":"19600000c0303003000f0000f00000033cc000f0cccc0003030c00f000c000c0cc000c","size":13,"data":"","first_seen":"2026-04-23T17:24:48.301435Z","last_seen":"2026-06-18T19:24:11.167548Z","times_seen":49118,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/nbstv/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"656fa1f524e9ef9852a7f1926f9f411c","sha1":"358a113517e7836bd4a32c0579ea57bcc4612895","sha256":"bd279b4d2f2e6bd8b3f5c7a4016434ff0e01acc7d95ed6fa7330cb6ff8112c01","sha512":"1cde8c02ef0b57aa160f2a1d6a6fef4eb8d5cf879d658aa4fea108f65ddecb35a4d6bcbaeaaf5e0dd2aa2764b9e4d7b87081f017d7d1ee2cf4cf18a8fce78237","ssdeep":"","tlshash":"43a004ccf141f0505303f1350c374115f11557c1041c1010554c44537d1414f4111f5c","size":71,"data":"","first_seen":"2026-04-23T17:24:48.307672Z","last_seen":"2026-06-18T19:24:11.16814Z","times_seen":48815,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/nbstv/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-06-18T19:22:45.769933Z","times_seen":746471,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"phase2-xrpfi.com/","fqdn":"phase2-xrpfi.com","domain":"phase2-xrpfi.com","tld":"com"},"ip":{"addr":"172.67.197.157","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"10069627b41cbf9aa4217f086b6d386c","sha1":"8e3f5e0f32eef5fa2cacb834dc49ee76b6feef9f","sha256":"e9eff9e2c68198397788ac635ae8f488c3150c00937187e0a914754776b9d310","sha512":"345e40ae9fd96e4a6c0473380e883d35f7424327a2869134f724b7b9ee3afd88bb7cbb0022dc219712d739ba52913859a1f043a85210495e0a22adce5b40b0dd","ssdeep":"3:N/BKL1X/RsQn:eL1PRsQ","tlshash":"c55504c1544134741510d410d15c14175005050110150411f05d44d4173004000dc5c0","size":1337359,"data":"","first_seen":"2026-06-18T16:06:18.887548Z","last_seen":"2026-06-18T16:06:18.887548Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/nbstv/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"4be7b6b8aa783300ae657a82c16d2a09","sha1":"39c051c1ee899fb0fdec892c96de143739ad2628","sha256":"9ce4a40dab4ae7a062f4860f6a5f77bb0f93dd15b4a24f086e633a62dfaa26cc","sha512":"ed4f6be02687fb5ca630c617096aea4f63e85839ce294d6026bac126865ce8de8cfca9d5bfb335b13b135351e13d49cee6712e22d8274a313c9f1b15f858c66d","ssdeep":"","tlshash":"89900277b5817125574568f1842a251be61946d406544459910400862d104648651bd9","size":50,"data":"","first_seen":"2026-04-23T17:24:48.285702Z","last_seen":"2026-06-18T19:24:11.195715Z","times_seen":49173,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"phase2-xrpfi.com/","fqdn":"phase2-xrpfi.com","domain":"phase2-xrpfi.com","tld":"com"},"ip":{"addr":"172.67.197.157","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-06-18T19:22:45.769933Z","times_seen":746471,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eval","is_inline":false,"md5":"f53bcc6d455944abb38d8f3745e12f7e","sha1":"66eabdd7dd5f90f662ca9eb9db09b1fcaf18599a","sha256":"3bfb2bb7022d2cacdae8f609b6637471c6fb13d8c92f78367f623494ebe117e0","sha512":"78060e64c28543ff5cc2c7c675bbff9baa619d32cab5fd5927959e08fb7ad8a233766c0626fb23e720eaf5f92a0b062fba1b13d9f37f9fc2702fefa41d5100ff","ssdeep":"","tlshash":"f9d0222bf0be1e68d18100793cbb3428cd3f3a5c2804ba826b2b18ca0b820c5d0c1f76","size":195,"data":"","first_seen":"2026-06-16T09:40:41.466738Z","last_seen":"2026-06-18T19:24:06.336461Z","times_seen":1550,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/nbstv/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-06-18T19:22:45.769933Z","times_seen":746471,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/nbstv/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-06-18T19:22:45.769933Z","times_seen":746471,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"phase2-xrpfi.com/?__cf_chl_tk=2nkry3hEtDpCu8iXtKwpLBKRoYTJl6CrokWi9rITwyY-1781798649-1.0.1.1-uvzDiaQqAf247HeqSNyKb35G1EbdJrax.RSUI07Vxyo","fqdn":"phase2-xrpfi.com","domain":"phase2-xrpfi.com","tld":"com"},"ip":{"addr":"172.67.197.157","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"f0721b9023f1642f39028f09197d6494","sha1":"c87eba76df524a4eec2fba727c791b7c0f2cbd7f","sha256":"6a10c393e2e78ecddc3dc12850acb080694ab5ded0949c9f6891215954820bc7","sha512":"d1ce18be186b32a0d83fee1f87a4d398d292cbf40f85250c800feadf2c041ce4848a6c1877edb2eeb898d980bd7a72cb54b2459ace3f760a5eaf4f56ec74a8b4","ssdeep":"3:N/BKL1X/RmFn:eL1PRmFn","tlshash":"fb5504c0544074745510d410d55c14175005050310150411f05d14d417700c100d45c0","size":1337359,"data":"","first_seen":"2026-06-18T16:06:18.890043Z","last_seen":"2026-06-18T16:06:18.890043Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/turnstile/v0/b/7c8a194018aa/api.js?onload=VnAqC4\u0026render=explicit","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"37b007a08b4c6fddc9310bb5a711cfac","sha1":"5cccd9c1619c77aff109562386761342ebb169b8","sha256":"761743e95d8ebe80041c9679afd18599df86a9afb053d6dbba3452d27dbd79f4","sha512":"d46e0c44e8799bd3b283a3d92cf2d06988e998c6f9332ecb9ccac074370fce2e71719bc42f3d8380073e4dbfadf5ca8f0b45e90d40b223f3e00c0536631df595","ssdeep":"1536:A+RDl35kVfhRMGKHD+LxgnmeBDHYOo8LDgS9:rbSVfYEGmeBD7n9","tlshash":"a7532c987196787313d980f0a17b6743732a7d3aa94cc850d827d865367ce8a9233f7e","size":65582,"data":"","first_seen":"2026-06-16T09:36:41.625096Z","last_seen":"2026-06-18T19:24:11.042429Z","times_seen":3644,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/nbstv/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-06-18T19:22:45.769933Z","times_seen":746471,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/f6687eb4-1726-4df6-91d8-d49873932e38","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"","is_inline":false,"md5":"b23314d76d6ef77dad0b00eda85ed7e1","sha1":"8a4a99487f2cd3299d181141a0aeb4b47d814a59","sha256":"db2031f6a8cef1def057c7dd9e4545328ff5009cb6670f944dd40322078c09aa","sha512":"8c0d663288d4959ce3c329d8732c1dcde3e3616f935c6aec0db06a31ca4ef2cbbc12e5bb24523e186f1f5849f4eca694765181e9b01fe81173489fd2ad064e14","ssdeep":"","tlshash":"ccd0cd093d71d60886e211337c7f7521d1a16264650d53445735def9cb5069f2514f54","size":291,"data":"","first_seen":"2026-06-16T09:40:41.569162Z","last_seen":"2026-06-18T19:24:11.184349Z","times_seen":2353,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"phase2-xrpfi.com/","fqdn":"phase2-xrpfi.com","domain":"phase2-xrpfi.com","tld":"com"},"ip":{"addr":"172.67.197.157","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"ed8ec28844cf2a81458e8fa31962b4e5","sha1":"f7356c34702a52333536638201bf4b172d16b230","sha256":"8d9fd61d35e534e8e3359cc537076bc2975ac9fa3923b12e28496c6153ee7f62","sha512":"6b7b1c50412f2f6ad6a7ffafad44744e7fe5684da71ca52ed19388d6e854d60552b968eea5499fcc6090d56c9d0a58721604ce9833f0b4d752cea3cbc02da515","ssdeep":"3:N/BKL1X/RmUQn:eL1PRmUQn","tlshash":"9f5504c05d4034741513dc10d15034155005051310150411f05d04d4173134000d45c0","size":1337359,"data":"","first_seen":"2026-06-18T16:06:18.891776Z","last_seen":"2026-06-18T16:06:18.891776Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/nbstv/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-06-18T19:22:45.769933Z","times_seen":746471,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"phase2-xrpfi.com/ce4088f6-3960-4cd4-9ac5-ce7859e4d00d","fqdn":"phase2-xrpfi.com","domain":"phase2-xrpfi.com","tld":"com"},"ip":{"addr":"172.67.197.157","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"","is_inline":false,"md5":"b23314d76d6ef77dad0b00eda85ed7e1","sha1":"8a4a99487f2cd3299d181141a0aeb4b47d814a59","sha256":"db2031f6a8cef1def057c7dd9e4545328ff5009cb6670f944dd40322078c09aa","sha512":"8c0d663288d4959ce3c329d8732c1dcde3e3616f935c6aec0db06a31ca4ef2cbbc12e5bb24523e186f1f5849f4eca694765181e9b01fe81173489fd2ad064e14","ssdeep":"","tlshash":"ccd0cd093d71d60886e211337c7f7521d1a16264650d53445735def9cb5069f2514f54","size":291,"data":"","first_seen":"2026-06-16T09:40:41.569162Z","last_seen":"2026-06-18T19:24:11.184349Z","times_seen":2353,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/nbstv/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-06-18T19:22:45.769933Z","times_seen":746471,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"log","text":"The next request for the Private Access Token challenge may return a 401 and show a warning in console.","filename":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/nbstv/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","line_number":0,"column_number":0},{"level":"debug","text":"","filename":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/nbstv/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","line_number":0,"column_number":0},{"level":"log","text":"map[actor:server1.conn0.watcher17.process8//obj115 class:RegExp displayString:/.*.*=.*/ extensible:true frozen:false isError:false ownPropertyLength:2 sealed:false type:object]","filename":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/nbstv/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","line_number":0,"column_number":0},{"level":"log","text":"map[actor:server1.conn0.watcher17.process8//obj117 class:RegExp displayString:/.*.*=.*/ extensible:true frozen:false isError:false ownPropertyLength:2 sealed:false type:object]","filename":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/nbstv/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","line_number":0,"column_number":0},{"level":"log","text":"map[actor:server1.conn0.watcher17.process8//obj120 class:BoundFunctionObject extensible:true frozen:false isError:false ownPropertyLength:3 preview:map[kind:Object ownProperties:map[toString:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher17.process8//obj121 class:BoundFunctionObject extensible:true frozen:false isError:false ownPropertyLength:2 sealed:false type:object] writable:true]] ownPropertiesLength:3] sealed:false type:object]","filename":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/nbstv/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","line_number":0,"column_number":0},{"level":"log","text":"map[actor:server1.conn0.watcher17.process8//obj123 class:HTMLAnchorElement contentDomReference:map[browsingContextId:1.5032385538e+10 id:0.11992676719668804] extensible:true frozen:false isError:false ownPropertyLength:1 preview:map[attributes:map[] attributesLength:0 isConnected:false kind:DOMNode nodeName:a nodeType:1] sealed:false type:object]","filename":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/nbstv/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","line_number":0,"column_number":0},{"level":"debug","text":"0","filename":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/nbstv/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","line_number":0,"column_number":0},{"level":"error","text":"0","filename":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/nbstv/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","line_number":0,"column_number":0},{"level":"info","text":"0","filename":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/nbstv/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","line_number":0,"column_number":0},{"level":"log","text":"0","filename":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/nbstv/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","line_number":0,"column_number":0},{"level":"warn","text":"0","filename":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/nbstv/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","line_number":0,"column_number":0},{"level":"log","text":"map[actor:server1.conn0.watcher17.process8//obj118 class:BoundFunctionObject extensible:true frozen:false isError:false ownPropertyLength:3 preview:map[kind:Object ownProperties:map[toString:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher17.process8//obj119 class:BoundFunctionObject extensible:true frozen:false isError:false ownPropertyLength:2 sealed:false type:object] writable:true]] ownPropertiesLength:3] sealed:false type:object]","filename":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/nbstv/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","line_number":0,"column_number":0},{"level":"log","text":"map[actor:server1.conn0.watcher17.process8//obj122 class:HTMLAnchorElement contentDomReference:map[browsingContextId:1.5032385538e+10 id:0.11992676719668804] extensible:true frozen:false isError:false ownPropertyLength:1 preview:map[attributes:map[] attributesLength:0 isConnected:false kind:DOMNode nodeName:a nodeType:1] sealed:false type:object]","filename":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/nbstv/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","line_number":0,"column_number":0},{"level":"debug","text":"0","filename":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/nbstv/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","line_number":0,"column_number":0},{"level":"error","text":"0","filename":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/nbstv/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","line_number":0,"column_number":0},{"level":"info","text":"0","filename":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/nbstv/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","line_number":0,"column_number":0},{"level":"log","text":"0","filename":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/nbstv/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","line_number":0,"column_number":0},{"level":"warn","text":"0","filename":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/nbstv/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","line_number":0,"column_number":0},{"level":"debug","text":"","filename":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/nbstv/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","line_number":0,"column_number":0}]},"http":[{"url":{"schema":"https","addr":"phase2-xrpfi.com/quicknode%2520logo.webp","fqdn":"phase2-xrpfi.com","domain":"phase2-xrpfi.com","tld":"com"},"ip":{"addr":"172.67.197.157","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://phase2-xrpfi.com/","date":"2026-06-18T16:04:17.019Z","timestamp":1781798657019,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"phase2-xrpfi.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Jun 2026 09:59:40 GMT","end":"Sun, 06 Sep 2026 10:57:00 GMT"},"fingerprint":{"sha1":"09:46:15:EE:E5:36:A7:4E:0B:DE:64:A1:0E:7A:47:98:BE:3A:FD:ED","sha256":"51:A8:A6:DC:2F:00:48:0C:46:4D:A9:F7:15:02:FF:D6:42:A8:3D:2C:C5:A5:9C:AC:93:BC:77:16:5D:57:78:D2"}}},"request":{"raw":"GET /quicknode%2520logo.webp HTTP/1.1\r\nHost: phase2-xrpfi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://phase2-xrpfi.com/\r\nCookie: cf_clearance=3dDDftPuP8Orcsu8EPJqRGA8SI7fXKOo9EyyENnMTko-1781798655-1.2.1.1-_.es7GeTtSCtToaztdb37PtL0Q1MMryDzKOb_HFjONKSI9SWJ9zmjHh9IzaNOCe_a49K45T2J9DDBD4cXu7AQbSKreno2FLMtJbW1pUwuCXj2GIAqDxX04QQM1Gdh0Coue1Jg4k1qEi7V2kg8jsZ_fFURgMEwRDOIW0bsW6aEtUPFrCAzfcKMM_OJSCc5QzEKNFM5VLoB6gCoW_dtlP7S9MwCDybt1LdlsSMlWrV966zQDu3.fSkgjPX7YH_BdCJ6xwpGuD1vdVBjXePcw4w4KmvHWZKNg1Z5atG_sqUEENZ3iLOTGCThDT23MgQWDjvSlwOjOfHtYL8Xg2_RKAusWFoV24lUhXqWZboI4DQQ_WrrAq4Y9HxV_0ij9Nxdl25xC594wFDj4xdba5WMvkP8OhM3ycqKmUuo9MC9VwQIHuaD5UccAdwS_PLO3wAXcL8MOKlt_zRwnUEUXAHQEznZYKp8xmkJjHzdLlqmOXou2jeRJC7MWL8F6xmw2v5fTwZ\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\ndate: Thu, 18 Jun 2026 16:04:17 GMT\r\nserver: cloudflare\r\npriority: u=5,i\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PaYsjXca1%2BMmL06PE4%2BGLYrGv7CSGsns%2B5tgNv9NLMt3fQcrLcgrAZgc29uCDT%2FGqQtBY%2F6UgpsGxdB17jPr6mtT208ETP3%2BE9DFWSU4%2Fn2NS80Ci6tz2n8UG%2B24MEc2w6p2\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a0db87666fa2569b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":558,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-18T19:23:29.08979Z","times_seen":16522781,"resource_available":true,"data":null}},"time_used":313,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":313,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"phase2-xrpfi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"phase2-xrpfi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/turnstile/v0/b/7c8a194018aa/api.js?onload=VnAqC4\u0026render=explicit","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://phase2-xrpfi.com/","date":"2026-06-18T16:04:09.937Z","timestamp":1781798649937,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"challenges.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 16 Jun 2026 20:15:28 GMT","end":"Mon, 14 Sep 2026 21:15:13 GMT"},"fingerprint":{"sha1":"77:27:72:42:CF:51:E8:8C:7C:3E:8C:4C:A1:F0:9A:86:96:B9:0A:16","sha256":"ED:7C:F7:38:B3:0F:00:86:32:D1:14:CE:C0:FF:CA:0E:7C:86:EE:49:51:EF:A4:4B:AA:5C:B6:7C:00:B5:3D:F3"}}},"request":{"raw":"GET /turnstile/v0/b/7c8a194018aa/api.js?onload=VnAqC4\u0026render=explicit HTTP/1.1\r\nHost: challenges.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://phase2-xrpfi.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 18 Jun 2026 16:04:09 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nlast-modified: Mon, 15 Jun 2026 14:57:09 GMT\r\ncache-control: max-age=31536000, stale-if-error=10800, stale-while-revalidate=31536000, public\r\naccess-control-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: https://phase2-xrpfi.com\r\npriority: u=3,i=?0\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: a0db873a3a675fac-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":65582,"size_decoded":21862,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"37b007a08b4c6fddc9310bb5a711cfac","sha1":"5cccd9c1619c77aff109562386761342ebb169b8","sha256":"761743e95d8ebe80041c9679afd18599df86a9afb053d6dbba3452d27dbd79f4","sha512":"d46e0c44e8799bd3b283a3d92cf2d06988e998c6f9332ecb9ccac074370fce2e71719bc42f3d8380073e4dbfadf5ca8f0b45e90d40b223f3e00c0536631df595","ssdeep":"1536:A+RDl35kVfhRMGKHD+LxgnmeBDHYOo8LDgS9:rbSVfYEGmeBD7n9","tlshash":"a7532c987196787313d980f0a17b6743732a7d3aa94cc850d827d865367ce8a9233f7e","first_seen":"2026-06-16T09:36:41.625096Z","last_seen":"2026-06-18T19:24:11.042429Z","times_seen":3644,"resource_available":true,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":5,"connect":13,"send":0,"wait":13,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"phase2-xrpfi.com/cdn-cgi/challenge-platform/h/b/flow/ov1/3410790414:1781795227:ChO0fcuzUFOZzQEiojKphWQ8yM5nVezOVMpGYDd_bv0/a0db87371d33569b/4wt5qX3IXHSfwNNyjPXEgO7f_hmxWdoAEemLAFd8fs0-1781798649-1.2.1.1-H71ZQid7DOXM7WFfw14bdxa3XC3TOcKR1a3vY3ekAOh1iGjNzJWNUBIc9rxNXprr","fqdn":"phase2-xrpfi.com","domain":"phase2-xrpfi.com","tld":"com"},"ip":{"addr":"172.67.197.157","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://phase2-xrpfi.com/","date":"2026-06-18T16:04:09.961Z","timestamp":1781798649961,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"phase2-xrpfi.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Jun 2026 09:59:40 GMT","end":"Sun, 06 Sep 2026 10:57:00 GMT"},"fingerprint":{"sha1":"09:46:15:EE:E5:36:A7:4E:0B:DE:64:A1:0E:7A:47:98:BE:3A:FD:ED","sha256":"51:A8:A6:DC:2F:00:48:0C:46:4D:A9:F7:15:02:FF:D6:42:A8:3D:2C:C5:A5:9C:AC:93:BC:77:16:5D:57:78:D2"}}},"request":{"raw":"POST /cdn-cgi/challenge-platform/h/b/flow/ov1/3410790414:1781795227:ChO0fcuzUFOZzQEiojKphWQ8yM5nVezOVMpGYDd_bv0/a0db87371d33569b/4wt5qX3IXHSfwNNyjPXEgO7f_hmxWdoAEemLAFd8fs0-1781798649-1.2.1.1-H71ZQid7DOXM7WFfw14bdxa3XC3TOcKR1a3vY3ekAOh1iGjNzJWNUBIc9rxNXprr HTTP/1.1\r\nHost: phase2-xrpfi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://phase2-xrpfi.com/\r\ncf-chl: 4wt5qX3IXHSfwNNyjPXEgO7f_hmxWdoAEemLAFd8fs0-1781798649-1.2.1.1-H71ZQid7DOXM7WFfw14bdxa3XC3TOcKR1a3vY3ekAOh1iGjNzJWNUBIc9rxNXprr\r\ncf-chl-ra: 0\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 2263\r\nOrigin: https://phase2-xrpfi.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/plain; charset=UTF-8\r\ncf-chl-gen: yjd0QK7zXmwiTe/tiUyiK7G8Gy06Kqz85jMEF6Rg5tY=$A2QnsAhp+IUnHhL2etNReg==\r\ntiming-allow-origin: https://phase2-xrpfi.com\r\ncontent-encoding: zstd\r\ndate: Thu, 18 Jun 2026 16:04:09 GMT\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncf-ray: a0db873a4d50569b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":22072,"size_decoded":17007,"mime_type":"text/plain; charset=UTF-8","magic":"ASCII text, with very long lines (22072), with no line terminators","md5":"f0ef58593ea4f00654ddef4f35263831","sha1":"be9e9d8f9994ce6e538add40839697c2c534fdff","sha256":"6ff8e3fcba7e286df3595e093856a6b6ddcf065ee4b481b7c81beaf51f592c0d","sha512":"feb4c3c0f2104abc1875ce6abc0403ce368cf717ced742a3cc376849e1a514c976ae2f657d785d3a16a300341941f95f48804c961c923455f74bd784f8b45ae7","ssdeep":"384:ik0pzO9joBNsl22gRlyHhFbgA8abyO3rKF5l84VFW+DfwcKqbQNyk:ik0pzsjsp2gRlQhxfIkrKF5lrxDfNG","tlshash":"4ba2e1b91fac6f07464a024a8c3c49ba492d7f4506a171b0aff6b2462147f1fafd42f5","first_seen":"2026-06-18T16:06:18.83048Z","last_seen":"2026-06-18T16:06:18.83048Z","times_seen":1,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"phase2-xrpfi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"phase2-xrpfi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"phase2-xrpfi.com/mute-subtitle.vtt","fqdn":"phase2-xrpfi.com","domain":"phase2-xrpfi.com","tld":"com"},"ip":{"addr":"172.67.197.157","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://phase2-xrpfi.com/","date":"2026-06-18T16:04:16.721Z","timestamp":1781798656721,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"phase2-xrpfi.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Jun 2026 09:59:40 GMT","end":"Sun, 06 Sep 2026 10:57:00 GMT"},"fingerprint":{"sha1":"09:46:15:EE:E5:36:A7:4E:0B:DE:64:A1:0E:7A:47:98:BE:3A:FD:ED","sha256":"51:A8:A6:DC:2F:00:48:0C:46:4D:A9:F7:15:02:FF:D6:42:A8:3D:2C:C5:A5:9C:AC:93:BC:77:16:5D:57:78:D2"}}},"request":{"raw":"GET /mute-subtitle.vtt HTTP/1.1\r\nHost: phase2-xrpfi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: cf_clearance=3dDDftPuP8Orcsu8EPJqRGA8SI7fXKOo9EyyENnMTko-1781798655-1.2.1.1-_.es7GeTtSCtToaztdb37PtL0Q1MMryDzKOb_HFjONKSI9SWJ9zmjHh9IzaNOCe_a49K45T2J9DDBD4cXu7AQbSKreno2FLMtJbW1pUwuCXj2GIAqDxX04QQM1Gdh0Coue1Jg4k1qEi7V2kg8jsZ_fFURgMEwRDOIW0bsW6aEtUPFrCAzfcKMM_OJSCc5QzEKNFM5VLoB6gCoW_dtlP7S9MwCDybt1LdlsSMlWrV966zQDu3.fSkgjPX7YH_BdCJ6xwpGuD1vdVBjXePcw4w4KmvHWZKNg1Z5atG_sqUEENZ3iLOTGCThDT23MgQWDjvSlwOjOfHtYL8Xg2_RKAusWFoV24lUhXqWZboI4DQQ_WrrAq4Y9HxV_0ij9Nxdl25xC594wFDj4xdba5WMvkP8OhM3ycqKmUuo9MC9VwQIHuaD5UccAdwS_PLO3wAXcL8MOKlt_zRwnUEUXAHQEznZYKp8xmkJjHzdLlqmOXou2jeRJC7MWL8F6xmw2v5fTwZ\r\nSec-Fetch-Dest: track\r\nSec-Fetch-Mode: same-origin\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/vtt\r\netag: \"53142af388215162f1a72eaad5603c77\"\r\nlast-modified: Mon, 08 Jun 2026 10:56:26 GMT\r\ndate: Thu, 18 Jun 2026 16:04:16 GMT\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZLpUy71cY7lY9Sc2dRhHkEbkO3sKgME5cx4mdUL4e7nk1XzSt148vRHGUOhIN7MXtxwm%2ByjBr4UMFSq9YK%2Fk18Z5uFrXvo5SrXdcDUs%2B4Xbq7qMc%2BRswaE%2B4Y1mc94Cb%2FYLE\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-length: 86\r\ncf-ray: a0db87648f7c569b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":86,"size_decoded":748,"mime_type":"text/vtt","magic":"WebVTT subtitles, ASCII text","md5":"53142af388215162f1a72eaad5603c77","sha1":"ca6e246c84ef9ce3519c5aee9f7d3a4f6064b4fe","sha256":"f946cef18bf33db28bc29c3320c2cbd0ea84e0c3831bf5ed3cdc7f19f4eb98ce","sha512":"7c2da6b49086ff51b75a8e6571a4667e4958026beb592f940fca100118796776204024a0951e51c0eb415a46db40e286a1f8b608e8e1c317c9e2b8edde273b5c","ssdeep":"","tlshash":"22a012804b744840d110920c2162bb03a188dc4e11c00c5e226830cdfc4e004c048042","first_seen":"2026-04-24T15:23:41.467209Z","last_seen":"2026-06-18T19:31:13.711079Z","times_seen":15,"resource_available":false,"data":null}},"time_used":220,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":220,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"phase2-xrpfi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"phase2-xrpfi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"phase2-xrpfi.com/Arkham-1.webp","fqdn":"phase2-xrpfi.com","domain":"phase2-xrpfi.com","tld":"com"},"ip":{"addr":"172.67.197.157","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://phase2-xrpfi.com/","date":"2026-06-18T16:04:17.017Z","timestamp":1781798657017,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"phase2-xrpfi.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Jun 2026 09:59:40 GMT","end":"Sun, 06 Sep 2026 10:57:00 GMT"},"fingerprint":{"sha1":"09:46:15:EE:E5:36:A7:4E:0B:DE:64:A1:0E:7A:47:98:BE:3A:FD:ED","sha256":"51:A8:A6:DC:2F:00:48:0C:46:4D:A9:F7:15:02:FF:D6:42:A8:3D:2C:C5:A5:9C:AC:93:BC:77:16:5D:57:78:D2"}}},"request":{"raw":"GET /Arkham-1.webp HTTP/1.1\r\nHost: phase2-xrpfi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://phase2-xrpfi.com/\r\nCookie: cf_clearance=3dDDftPuP8Orcsu8EPJqRGA8SI7fXKOo9EyyENnMTko-1781798655-1.2.1.1-_.es7GeTtSCtToaztdb37PtL0Q1MMryDzKOb_HFjONKSI9SWJ9zmjHh9IzaNOCe_a49K45T2J9DDBD4cXu7AQbSKreno2FLMtJbW1pUwuCXj2GIAqDxX04QQM1Gdh0Coue1Jg4k1qEi7V2kg8jsZ_fFURgMEwRDOIW0bsW6aEtUPFrCAzfcKMM_OJSCc5QzEKNFM5VLoB6gCoW_dtlP7S9MwCDybt1LdlsSMlWrV966zQDu3.fSkgjPX7YH_BdCJ6xwpGuD1vdVBjXePcw4w4KmvHWZKNg1Z5atG_sqUEENZ3iLOTGCThDT23MgQWDjvSlwOjOfHtYL8Xg2_RKAusWFoV24lUhXqWZboI4DQQ_WrrAq4Y9HxV_0ij9Nxdl25xC594wFDj4xdba5WMvkP8OhM3ycqKmUuo9MC9VwQIHuaD5UccAdwS_PLO3wAXcL8MOKlt_zRwnUEUXAHQEznZYKp8xmkJjHzdLlqmOXou2jeRJC7MWL8F6xmw2v5fTwZ\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: image/webp\r\netag: \"5f931f5036e2902f0ea2ed199ceb772e\"\r\nlast-modified: Mon, 08 Jun 2026 10:56:26 GMT\r\ndate: Thu, 18 Jun 2026 16:04:17 GMT\r\nserver: cloudflare\r\npriority: u=5,i\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DbBXoIoVitlWeJYdDuxV%2BRv%2BuHF%2B6L%2BtsBSrIcdGNixkZd%2BZ0P3JqVli7qUZljJ9cF3lWS0IXUYWtWYIvBKrWUx%2BUGMDHDinJU%2BinHqvTezlD9MrLCmPIrD%2FZKiSa5szuz2P\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-length: 1652\r\ncf-ray: a0db87666fa3569b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1652,"size_decoded":2368,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"5f931f5036e2902f0ea2ed199ceb772e","sha1":"40a5df06dc1fbf155dbbd95f3193dbefb3c70ed2","sha256":"2b99ad22545742a421f1ab0bf14700111ec6c3e0d75898d9fa13827aaa415613","sha512":"4d7f2ab2d84effea446962fb5e101d3c3e49dc8f19ebb3b81b616e84111b620b3454448cc083229427f324bed6929b2a2887f7bf6d203ba4d7cd14c58798ecfe","ssdeep":"","tlshash":"0731180a4532aaab916b910a8938118980caf1792b212a5b2d372298c90eeea57d3058","first_seen":"2025-08-11T21:39:04.762048Z","last_seen":"2026-06-18T19:31:13.720747Z","times_seen":34,"resource_available":false,"data":null}},"time_used":297,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":297,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"phase2-xrpfi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"phase2-xrpfi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"phase2-xrpfi.com/HexTrust-1.webp","fqdn":"phase2-xrpfi.com","domain":"phase2-xrpfi.com","tld":"com"},"ip":{"addr":"172.67.197.157","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://phase2-xrpfi.com/","date":"2026-06-18T16:04:17.018Z","timestamp":1781798657018,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"phase2-xrpfi.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Jun 2026 09:59:40 GMT","end":"Sun, 06 Sep 2026 10:57:00 GMT"},"fingerprint":{"sha1":"09:46:15:EE:E5:36:A7:4E:0B:DE:64:A1:0E:7A:47:98:BE:3A:FD:ED","sha256":"51:A8:A6:DC:2F:00:48:0C:46:4D:A9:F7:15:02:FF:D6:42:A8:3D:2C:C5:A5:9C:AC:93:BC:77:16:5D:57:78:D2"}}},"request":{"raw":"GET /HexTrust-1.webp HTTP/1.1\r\nHost: phase2-xrpfi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://phase2-xrpfi.com/\r\nCookie: cf_clearance=3dDDftPuP8Orcsu8EPJqRGA8SI7fXKOo9EyyENnMTko-1781798655-1.2.1.1-_.es7GeTtSCtToaztdb37PtL0Q1MMryDzKOb_HFjONKSI9SWJ9zmjHh9IzaNOCe_a49K45T2J9DDBD4cXu7AQbSKreno2FLMtJbW1pUwuCXj2GIAqDxX04QQM1Gdh0Coue1Jg4k1qEi7V2kg8jsZ_fFURgMEwRDOIW0bsW6aEtUPFrCAzfcKMM_OJSCc5QzEKNFM5VLoB6gCoW_dtlP7S9MwCDybt1LdlsSMlWrV966zQDu3.fSkgjPX7YH_BdCJ6xwpGuD1vdVBjXePcw4w4KmvHWZKNg1Z5atG_sqUEENZ3iLOTGCThDT23MgQWDjvSlwOjOfHtYL8Xg2_RKAusWFoV24lUhXqWZboI4DQQ_WrrAq4Y9HxV_0ij9Nxdl25xC594wFDj4xdba5WMvkP8OhM3ycqKmUuo9MC9VwQIHuaD5UccAdwS_PLO3wAXcL8MOKlt_zRwnUEUXAHQEznZYKp8xmkJjHzdLlqmOXou2jeRJC7MWL8F6xmw2v5fTwZ\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: image/webp\r\netag: \"3978f7542bed8e61360ecae12e999a7c\"\r\nlast-modified: Mon, 08 Jun 2026 10:56:26 GMT\r\ndate: Thu, 18 Jun 2026 16:04:17 GMT\r\nserver: cloudflare\r\npriority: u=5,i\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=utXGygwO2%2Fpz9xVT50uBgIwi8RN4ciXLab3trZWhxynppwC7PMN8v3C779IRmyuQUdihLCWorruOoHYtaa0ZgjIaqq7rEizz78Qv1GPpIMwumveld39pf6D%2B%2FPakXKix7Osm\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-length: 1832\r\ncf-ray: a0db87666fa4569b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1832,"size_decoded":2538,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 210x64, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"3978f7542bed8e61360ecae12e999a7c","sha1":"69e859543324898cd73c6246d558293b93497248","sha256":"6afbe97b7becfb2b0008dfcc0f04267755bb64fcc00c16b7e875287f19c5ca79","sha512":"ab2c7958e052736ddff1931a1b744db235463d89f31bbe957c984954f31b26a506ceec47c5825926d0012da93bdab526b1565b7cd0f4bf5bdb951a2d5aa3ae0b","ssdeep":"","tlshash":"5a31eb01d636ff5d3fffd0a20a1796c7d4da71822e15170420702d2696cd0ac98ee57a","first_seen":"2025-08-11T21:39:04.746858Z","last_seen":"2026-06-18T19:31:13.721396Z","times_seen":32,"resource_available":false,"data":null}},"time_used":174,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":174,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"phase2-xrpfi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"phase2-xrpfi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dns.google/resolve?name=wan-milkshake.mom\u0026type=TXT","fqdn":"dns.google","domain":"dns.google","tld":"google"},"ip":{"addr":"8.8.4.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://phase2-xrpfi.com/","date":"2026-06-18T16:04:20.351Z","timestamp":1781798660351,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dns.google","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 25 May 2026 08:39:14 GMT","end":"Mon, 17 Aug 2026 08:39:13 GMT"},"fingerprint":{"sha1":"E1:CA:BB:2F:D6:9F:4B:85:2D:14:17:00:1A:CA:4C:9A:09:22:39:FC","sha256":"FD:35:DC:45:92:97:58:93:2B:85:8E:B8:AD:F6:CE:7C:1D:7F:BC:F5:37:31:DE:B7:6E:5B:9C:AC:FB:B2:DB:87"}}},"request":{"raw":"GET /resolve?name=wan-milkshake.mom\u0026type=TXT HTTP/1.1\r\nHost: dns.google\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://phase2-xrpfi.com/\r\nOrigin: https://phase2-xrpfi.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\naccess-control-allow-origin: *\r\ndate: Thu, 18 Jun 2026 16:04:20 GMT\r\nexpires: Thu, 18 Jun 2026 16:04:20 GMT\r\ncache-control: private, max-age=900\r\ncontent-type: application/json; charset=UTF-8\r\ncontent-encoding: gzip\r\nserver: HTTP server (unknown)\r\ncontent-length: 225\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":304,"size_decoded":742,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"12e70d95ec0ec6c267a35f3179303251","sha1":"067cd778a9e8a9d0c28622a4b8e8cbac202d9e58","sha256":"4697a0fafc1bdfc673ecea3e72b2806dd989745a5472308ad9c76f9e2d63763d","sha512":"8103b79b8da69b1ecfc6b4d18df8788ed741c78322a8d03c1206d36c908888fdb87a302f40dddba114374c551eed673de28de48c2eaf709d9cdea00b10c26a56","ssdeep":"","tlshash":"27e07d15c430c1f4aa1020dd0547195fed941612f04c0cda858d5d90f1271d17093807","first_seen":"2026-06-18T16:06:18.83364Z","last_seen":"2026-06-18T16:06:18.83364Z","times_seen":1,"resource_available":false,"data":null}},"time_used":113,"timings":{"blocked":0,"dns":6,"connect":8,"send":0,"wait":73,"receive":0,"ssl":26},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/flow/ov1/888930064:1781795229:ULXbcCJinkVtfIv0XYZz-roMXsa3oLUICDmOblEQ1Qs/a0db873aa9960daa/9OfSuXNJKMr3ROUHE0FLUF0ETX7cadHuyiPiQcFKUyQ-1781798650-1.2.1.1-Q2v29dUm8tx5Z5ujKo9kGKrXEWcMQhINNBbM3KRQw8fMktPoUcBj9yPvCTbkhptR","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/nbstv/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","date":"2026-06-18T16:04:15.723Z","timestamp":1781798655723,"http_version":"HTTP/3","security_state":"secure","security_info":null,"request":{"raw":"POST /cdn-cgi/challenge-platform/h/b/flow/ov1/888930064:1781795229:ULXbcCJinkVtfIv0XYZz-roMXsa3oLUICDmOblEQ1Qs/a0db873aa9960daa/9OfSuXNJKMr3ROUHE0FLUF0ETX7cadHuyiPiQcFKUyQ-1781798650-1.2.1.1-Q2v29dUm8tx5Z5ujKo9kGKrXEWcMQhINNBbM3KRQw8fMktPoUcBj9yPvCTbkhptR HTTP/1.1\r\nHost: challenges.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/nbstv/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto\r\ncf-chl: 9OfSuXNJKMr3ROUHE0FLUF0ETX7cadHuyiPiQcFKUyQ-1781798650-1.2.1.1-Q2v29dUm8tx5Z5ujKo9kGKrXEWcMQhINNBbM3KRQw8fMktPoUcBj9yPvCTbkhptR\r\ncf-chl-ra: 0\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 92823\r\nOrigin: https://challenges.cloudflare.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-18T19:23:29.08979Z","times_seen":16522781,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"phase2-xrpfi.com/Elliptic-1.webp","fqdn":"phase2-xrpfi.com","domain":"phase2-xrpfi.com","tld":"com"},"ip":{"addr":"172.67.197.157","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://phase2-xrpfi.com/","date":"2026-06-18T16:04:17.012Z","timestamp":1781798657012,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"phase2-xrpfi.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Jun 2026 09:59:40 GMT","end":"Sun, 06 Sep 2026 10:57:00 GMT"},"fingerprint":{"sha1":"09:46:15:EE:E5:36:A7:4E:0B:DE:64:A1:0E:7A:47:98:BE:3A:FD:ED","sha256":"51:A8:A6:DC:2F:00:48:0C:46:4D:A9:F7:15:02:FF:D6:42:A8:3D:2C:C5:A5:9C:AC:93:BC:77:16:5D:57:78:D2"}}},"request":{"raw":"GET /Elliptic-1.webp HTTP/1.1\r\nHost: phase2-xrpfi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://phase2-xrpfi.com/\r\nCookie: cf_clearance=3dDDftPuP8Orcsu8EPJqRGA8SI7fXKOo9EyyENnMTko-1781798655-1.2.1.1-_.es7GeTtSCtToaztdb37PtL0Q1MMryDzKOb_HFjONKSI9SWJ9zmjHh9IzaNOCe_a49K45T2J9DDBD4cXu7AQbSKreno2FLMtJbW1pUwuCXj2GIAqDxX04QQM1Gdh0Coue1Jg4k1qEi7V2kg8jsZ_fFURgMEwRDOIW0bsW6aEtUPFrCAzfcKMM_OJSCc5QzEKNFM5VLoB6gCoW_dtlP7S9MwCDybt1LdlsSMlWrV966zQDu3.fSkgjPX7YH_BdCJ6xwpGuD1vdVBjXePcw4w4KmvHWZKNg1Z5atG_sqUEENZ3iLOTGCThDT23MgQWDjvSlwOjOfHtYL8Xg2_RKAusWFoV24lUhXqWZboI4DQQ_WrrAq4Y9HxV_0ij9Nxdl25xC594wFDj4xdba5WMvkP8OhM3ycqKmUuo9MC9VwQIHuaD5UccAdwS_PLO3wAXcL8MOKlt_zRwnUEUXAHQEznZYKp8xmkJjHzdLlqmOXou2jeRJC7MWL8F6xmw2v5fTwZ\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: image/webp\r\netag: \"418e8ca779ee89f651aaa9add5c78c90\"\r\nlast-modified: Mon, 08 Jun 2026 10:56:26 GMT\r\ndate: Thu, 18 Jun 2026 16:04:17 GMT\r\nserver: cloudflare\r\npriority: u=5,i\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Bc92z0tirmrP0GseR%2FEN53Cteig0sDtCIYxOFJtDEJ%2BYUeb7NLPItQDunEpHo1H%2BRfGemd%2FGzOXTJAC%2BfkUpJJhzbrWS4bFsqVUwY1kh3wntXoy166SjggJcT9LCOAczQ3wY\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-length: 526\r\ncf-ray: a0db87665f9f569b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":526,"size_decoded":1235,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"418e8ca779ee89f651aaa9add5c78c90","sha1":"e0af31da3df7bd0c0957796905616e771db98715","sha256":"85fc06aee2ce609ce0b14ec5ff91fc24d44246613ebf59017da1435e2e61983f","sha512":"90b49903acdd17f9b0882732ceaef0207c6d6147c8673ad2e9404432ac4ee4837ecad27ff17bd656d76b33afdd6e4e8142195ad3c669ae299c54897aeb0f34bb","ssdeep":"","tlshash":"83f07544b23004ebdaacfa3201ec2e891955c10ebf301921124ee9d21785babf433ed0","first_seen":"2025-08-11T21:39:04.774047Z","last_seen":"2026-06-18T19:31:13.712988Z","times_seen":33,"resource_available":false,"data":null}},"time_used":235,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":235,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"phase2-xrpfi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"phase2-xrpfi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"phase2-xrpfi.com/FDC-1.svg","fqdn":"phase2-xrpfi.com","domain":"phase2-xrpfi.com","tld":"com"},"ip":{"addr":"172.67.197.157","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://phase2-xrpfi.com/","date":"2026-06-18T16:04:17.082Z","timestamp":1781798657082,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"phase2-xrpfi.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Jun 2026 09:59:40 GMT","end":"Sun, 06 Sep 2026 10:57:00 GMT"},"fingerprint":{"sha1":"09:46:15:EE:E5:36:A7:4E:0B:DE:64:A1:0E:7A:47:98:BE:3A:FD:ED","sha256":"51:A8:A6:DC:2F:00:48:0C:46:4D:A9:F7:15:02:FF:D6:42:A8:3D:2C:C5:A5:9C:AC:93:BC:77:16:5D:57:78:D2"}}},"request":{"raw":"GET /FDC-1.svg HTTP/1.1\r\nHost: phase2-xrpfi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://phase2-xrpfi.com/\r\nCookie: cf_clearance=3dDDftPuP8Orcsu8EPJqRGA8SI7fXKOo9EyyENnMTko-1781798655-1.2.1.1-_.es7GeTtSCtToaztdb37PtL0Q1MMryDzKOb_HFjONKSI9SWJ9zmjHh9IzaNOCe_a49K45T2J9DDBD4cXu7AQbSKreno2FLMtJbW1pUwuCXj2GIAqDxX04QQM1Gdh0Coue1Jg4k1qEi7V2kg8jsZ_fFURgMEwRDOIW0bsW6aEtUPFrCAzfcKMM_OJSCc5QzEKNFM5VLoB6gCoW_dtlP7S9MwCDybt1LdlsSMlWrV966zQDu3.fSkgjPX7YH_BdCJ6xwpGuD1vdVBjXePcw4w4KmvHWZKNg1Z5atG_sqUEENZ3iLOTGCThDT23MgQWDjvSlwOjOfHtYL8Xg2_RKAusWFoV24lUhXqWZboI4DQQ_WrrAq4Y9HxV_0ij9Nxdl25xC594wFDj4xdba5WMvkP8OhM3ycqKmUuo9MC9VwQIHuaD5UccAdwS_PLO3wAXcL8MOKlt_zRwnUEUXAHQEznZYKp8xmkJjHzdLlqmOXou2jeRJC7MWL8F6xmw2v5fTwZ\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: image/svg+xml\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Mon, 08 Jun 2026 10:56:26 GMT\r\ndate: Thu, 18 Jun 2026 16:04:17 GMT\r\nserver: cloudflare\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pPV85L8dm4P%2BCaF%2FMTcrk3oXSDQZQa%2BToP6smKxuoEL9vofYfxiLpzyy9AYtR9HkPDF3b6PLvW56yUw%2Bq5Poq5gu%2FmB5fsuAQdJrf1P4QgEBbIRLLRIAfwohLxzDptPXkZHR\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\netag: W/\"ef5cce942cb6a6ce5cc385d777e743db\"\r\ncf-ray: a0db8766cfad569b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6621,"size_decoded":3380,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"ef5cce942cb6a6ce5cc385d777e743db","sha1":"26dea5d3314a5cde9c4a7d0ac7418578d8536d89","sha256":"1f9f4bc9071c159a6a3e58fcafee08caf55861f295b1a8af0a76941be15b3970","sha512":"2babf9cd06ce7005f8cb66da1875b492532e6030394eca5ec9db70a95eca761179f766cfb05ed80596219ad7e5eaa04a87f1628e1b218e4b0a92d631640b4a3e","ssdeep":"96:RaQb8scbzGrg4hnNG2E9z3pCfuVPK8NltmFVy14mta9YEy9e3C38/mlOaTIb1Vdg:Rpws4GrgANOnVPK8FC0haJygCWQWi","tlshash":"90d177c0736cc3f8b484e378079e603a682b54e8b65554d0cad22f4567856ef2ce9fe2","first_seen":"2025-08-11T21:39:04.755564Z","last_seen":"2026-06-18T19:31:13.704784Z","times_seen":26,"resource_available":false,"data":null}},"time_used":232,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":232,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"phase2-xrpfi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"phase2-xrpfi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"phase2-xrpfi.com/Flare.svg","fqdn":"phase2-xrpfi.com","domain":"phase2-xrpfi.com","tld":"com"},"ip":{"addr":"172.67.197.157","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://phase2-xrpfi.com/","date":"2026-06-18T16:04:16.595Z","timestamp":1781798656595,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"phase2-xrpfi.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Jun 2026 09:59:40 GMT","end":"Sun, 06 Sep 2026 10:57:00 GMT"},"fingerprint":{"sha1":"09:46:15:EE:E5:36:A7:4E:0B:DE:64:A1:0E:7A:47:98:BE:3A:FD:ED","sha256":"51:A8:A6:DC:2F:00:48:0C:46:4D:A9:F7:15:02:FF:D6:42:A8:3D:2C:C5:A5:9C:AC:93:BC:77:16:5D:57:78:D2"}}},"request":{"raw":"GET /Flare.svg HTTP/1.1\r\nHost: phase2-xrpfi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://phase2-xrpfi.com/\r\nCookie: cf_clearance=3dDDftPuP8Orcsu8EPJqRGA8SI7fXKOo9EyyENnMTko-1781798655-1.2.1.1-_.es7GeTtSCtToaztdb37PtL0Q1MMryDzKOb_HFjONKSI9SWJ9zmjHh9IzaNOCe_a49K45T2J9DDBD4cXu7AQbSKreno2FLMtJbW1pUwuCXj2GIAqDxX04QQM1Gdh0Coue1Jg4k1qEi7V2kg8jsZ_fFURgMEwRDOIW0bsW6aEtUPFrCAzfcKMM_OJSCc5QzEKNFM5VLoB6gCoW_dtlP7S9MwCDybt1LdlsSMlWrV966zQDu3.fSkgjPX7YH_BdCJ6xwpGuD1vdVBjXePcw4w4KmvHWZKNg1Z5atG_sqUEENZ3iLOTGCThDT23MgQWDjvSlwOjOfHtYL8Xg2_RKAusWFoV24lUhXqWZboI4DQQ_WrrAq4Y9HxV_0ij9Nxdl25xC594wFDj4xdba5WMvkP8OhM3ycqKmUuo9MC9VwQIHuaD5UccAdwS_PLO3wAXcL8MOKlt_zRwnUEUXAHQEznZYKp8xmkJjHzdLlqmOXou2jeRJC7MWL8F6xmw2v5fTwZ\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: image/svg+xml\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Mon, 08 Jun 2026 10:56:26 GMT\r\ndate: Thu, 18 Jun 2026 16:04:16 GMT\r\nserver: cloudflare\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JNZ03croU08Z3bmvqvPmMObFBD47EgEkIozd2hK1xqUzpwVzPAB%2BJDAL6HqdXvTKBWtfU4iD9F397RG4HtppElrYHe0GVOS0Cs4nG4A86tAH6JXu6iQeRIDX3G1LsV4q6syG\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\netag: W/\"595f973187a90d91245e6adbd03e6f78\"\r\ncf-ray: a0db8763bf68569b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":892,"size_decoded":1150,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"595f973187a90d91245e6adbd03e6f78","sha1":"84cf19963d52368852d083a4377e2359d57f5db7","sha256":"b32962a5e4467193bb585ce81d604de083405dba639e7a32154dc39958b50cf1","sha512":"1507e4cc3a19a71943ae16bb68b5cd34a8522f1e2712c770b9f3ddd7a52ae6c42788f9450cfad59fa9b741cbccf15592e5f248f56df154614600dc7e0219c57f","ssdeep":"","tlshash":"bb1100e423ad82c4f906d3300aab787321873dfb49534b98e0812d14d60b46edc35f48","first_seen":"2025-08-11T21:39:04.753608Z","last_seen":"2026-06-18T19:31:13.746793Z","times_seen":34,"resource_available":false,"data":null}},"time_used":236,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":236,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"phase2-xrpfi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"phase2-xrpfi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"phase2-xrpfi.com/home_providers_desktop.mov","fqdn":"phase2-xrpfi.com","domain":"phase2-xrpfi.com","tld":"com"},"ip":{"addr":"172.67.197.157","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://phase2-xrpfi.com/","date":"2026-06-18T16:04:16.715Z","timestamp":1781798656715,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"phase2-xrpfi.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Jun 2026 09:59:40 GMT","end":"Sun, 06 Sep 2026 10:57:00 GMT"},"fingerprint":{"sha1":"09:46:15:EE:E5:36:A7:4E:0B:DE:64:A1:0E:7A:47:98:BE:3A:FD:ED","sha256":"51:A8:A6:DC:2F:00:48:0C:46:4D:A9:F7:15:02:FF:D6:42:A8:3D:2C:C5:A5:9C:AC:93:BC:77:16:5D:57:78:D2"}}},"request":{"raw":"GET /home_providers_desktop.mov HTTP/1.1\r\nHost: phase2-xrpfi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nRange: bytes=0-\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://phase2-xrpfi.com/\r\nCookie: cf_clearance=3dDDftPuP8Orcsu8EPJqRGA8SI7fXKOo9EyyENnMTko-1781798655-1.2.1.1-_.es7GeTtSCtToaztdb37PtL0Q1MMryDzKOb_HFjONKSI9SWJ9zmjHh9IzaNOCe_a49K45T2J9DDBD4cXu7AQbSKreno2FLMtJbW1pUwuCXj2GIAqDxX04QQM1Gdh0Coue1Jg4k1qEi7V2kg8jsZ_fFURgMEwRDOIW0bsW6aEtUPFrCAzfcKMM_OJSCc5QzEKNFM5VLoB6gCoW_dtlP7S9MwCDybt1LdlsSMlWrV966zQDu3.fSkgjPX7YH_BdCJ6xwpGuD1vdVBjXePcw4w4KmvHWZKNg1Z5atG_sqUEENZ3iLOTGCThDT23MgQWDjvSlwOjOfHtYL8Xg2_RKAusWFoV24lUhXqWZboI4DQQ_WrrAq4Y9HxV_0ij9Nxdl25xC594wFDj4xdba5WMvkP8OhM3ycqKmUuo9MC9VwQIHuaD5UccAdwS_PLO3wAXcL8MOKlt_zRwnUEUXAHQEznZYKp8xmkJjHzdLlqmOXou2jeRJC7MWL8F6xmw2v5fTwZ\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\ndate: Thu, 18 Jun 2026 16:04:16 GMT\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oa%2B0FUmkZVqYnphWjQ6oYAF51X65mdyc36DFo7NrnHVhcTpHXdx9K4DKQYVQqwfDEgGkB3WTrFpx4xwC9FnkwuqHSoM5y8oYZCiq2WyNYg6TVTI6pAlq1e9K%2Fy60fjjAvGJv\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a0db87647f78569b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":522,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-18T19:23:29.08979Z","times_seen":16522781,"resource_available":true,"data":null}},"time_used":222,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":222,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"phase2-xrpfi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"phase2-xrpfi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"phase2-xrpfi.com/mute-subtitle.vtt","fqdn":"phase2-xrpfi.com","domain":"phase2-xrpfi.com","tld":"com"},"ip":{"addr":"172.67.197.157","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://phase2-xrpfi.com/","date":"2026-06-18T16:04:16.720Z","timestamp":1781798656720,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"phase2-xrpfi.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Jun 2026 09:59:40 GMT","end":"Sun, 06 Sep 2026 10:57:00 GMT"},"fingerprint":{"sha1":"09:46:15:EE:E5:36:A7:4E:0B:DE:64:A1:0E:7A:47:98:BE:3A:FD:ED","sha256":"51:A8:A6:DC:2F:00:48:0C:46:4D:A9:F7:15:02:FF:D6:42:A8:3D:2C:C5:A5:9C:AC:93:BC:77:16:5D:57:78:D2"}}},"request":{"raw":"GET /mute-subtitle.vtt HTTP/1.1\r\nHost: phase2-xrpfi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: cf_clearance=3dDDftPuP8Orcsu8EPJqRGA8SI7fXKOo9EyyENnMTko-1781798655-1.2.1.1-_.es7GeTtSCtToaztdb37PtL0Q1MMryDzKOb_HFjONKSI9SWJ9zmjHh9IzaNOCe_a49K45T2J9DDBD4cXu7AQbSKreno2FLMtJbW1pUwuCXj2GIAqDxX04QQM1Gdh0Coue1Jg4k1qEi7V2kg8jsZ_fFURgMEwRDOIW0bsW6aEtUPFrCAzfcKMM_OJSCc5QzEKNFM5VLoB6gCoW_dtlP7S9MwCDybt1LdlsSMlWrV966zQDu3.fSkgjPX7YH_BdCJ6xwpGuD1vdVBjXePcw4w4KmvHWZKNg1Z5atG_sqUEENZ3iLOTGCThDT23MgQWDjvSlwOjOfHtYL8Xg2_RKAusWFoV24lUhXqWZboI4DQQ_WrrAq4Y9HxV_0ij9Nxdl25xC594wFDj4xdba5WMvkP8OhM3ycqKmUuo9MC9VwQIHuaD5UccAdwS_PLO3wAXcL8MOKlt_zRwnUEUXAHQEznZYKp8xmkJjHzdLlqmOXou2jeRJC7MWL8F6xmw2v5fTwZ\r\nSec-Fetch-Dest: track\r\nSec-Fetch-Mode: same-origin\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/vtt\r\netag: \"53142af388215162f1a72eaad5603c77\"\r\nlast-modified: Mon, 08 Jun 2026 10:56:26 GMT\r\ndate: Thu, 18 Jun 2026 16:04:16 GMT\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jRPnhkF4%2BnzLmlHrXxk%2FKgvieYQpo75lCBf8u%2B23VKovycxyueZMEMFjQcqO32FG3zse2qAyYjpFgalqHXfRR%2F%2Fnq8jf7fi9ZxKehnaEGJIL3QA2fMMetW8Vcy4YU%2BMoV7c3\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-length: 86\r\ncf-ray: a0db87648f7b569b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":86,"size_decoded":748,"mime_type":"text/vtt","magic":"WebVTT subtitles, ASCII text","md5":"53142af388215162f1a72eaad5603c77","sha1":"ca6e246c84ef9ce3519c5aee9f7d3a4f6064b4fe","sha256":"f946cef18bf33db28bc29c3320c2cbd0ea84e0c3831bf5ed3cdc7f19f4eb98ce","sha512":"7c2da6b49086ff51b75a8e6571a4667e4958026beb592f940fca100118796776204024a0951e51c0eb415a46db40e286a1f8b608e8e1c317c9e2b8edde273b5c","ssdeep":"","tlshash":"22a012804b744840d110920c2162bb03a188dc4e11c00c5e226830cdfc4e004c048042","first_seen":"2026-04-24T15:23:41.467209Z","last_seen":"2026-06-18T19:31:13.711079Z","times_seen":15,"resource_available":false,"data":null}},"time_used":221,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":221,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"phase2-xrpfi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"phase2-xrpfi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"phase2-xrpfi.com/ibm_plex_mono_v20_latin_regular-s.p.e1d6b3bf.woff2","fqdn":"phase2-xrpfi.com","domain":"phase2-xrpfi.com","tld":"com"},"ip":{"addr":"172.67.197.157","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://phase2-xrpfi.com/","date":"2026-06-18T16:04:17.079Z","timestamp":1781798657079,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"phase2-xrpfi.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Jun 2026 09:59:40 GMT","end":"Sun, 06 Sep 2026 10:57:00 GMT"},"fingerprint":{"sha1":"09:46:15:EE:E5:36:A7:4E:0B:DE:64:A1:0E:7A:47:98:BE:3A:FD:ED","sha256":"51:A8:A6:DC:2F:00:48:0C:46:4D:A9:F7:15:02:FF:D6:42:A8:3D:2C:C5:A5:9C:AC:93:BC:77:16:5D:57:78:D2"}}},"request":{"raw":"GET /ibm_plex_mono_v20_latin_regular-s.p.e1d6b3bf.woff2 HTTP/1.1\r\nHost: phase2-xrpfi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://phase2-xrpfi.com/6cdcfbcc140e7bef.css\r\nCookie: cf_clearance=3dDDftPuP8Orcsu8EPJqRGA8SI7fXKOo9EyyENnMTko-1781798655-1.2.1.1-_.es7GeTtSCtToaztdb37PtL0Q1MMryDzKOb_HFjONKSI9SWJ9zmjHh9IzaNOCe_a49K45T2J9DDBD4cXu7AQbSKreno2FLMtJbW1pUwuCXj2GIAqDxX04QQM1Gdh0Coue1Jg4k1qEi7V2kg8jsZ_fFURgMEwRDOIW0bsW6aEtUPFrCAzfcKMM_OJSCc5QzEKNFM5VLoB6gCoW_dtlP7S9MwCDybt1LdlsSMlWrV966zQDu3.fSkgjPX7YH_BdCJ6xwpGuD1vdVBjXePcw4w4KmvHWZKNg1Z5atG_sqUEENZ3iLOTGCThDT23MgQWDjvSlwOjOfHtYL8Xg2_RKAusWFoV24lUhXqWZboI4DQQ_WrrAq4Y9HxV_0ij9Nxdl25xC594wFDj4xdba5WMvkP8OhM3ycqKmUuo9MC9VwQIHuaD5UccAdwS_PLO3wAXcL8MOKlt_zRwnUEUXAHQEznZYKp8xmkJjHzdLlqmOXou2jeRJC7MWL8F6xmw2v5fTwZ\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: font/woff2\r\netag: \"79936b18df9f734fb6b0a256b20d36b4\"\r\nlast-modified: Mon, 08 Jun 2026 10:56:26 GMT\r\ndate: Thu, 18 Jun 2026 16:04:17 GMT\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3aKxojDML8TdLlUu3msvZJOozVEvnPuEaICYNh86louLcQZOCa%2BHjcGFiZVEgKhjXpClLOgYHokQL0%2FY9bgQ7ktex1KQyQtyR7PsmSPKAJdpMBjgFmX6ZEUuepjogRdQgFZ7\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a0db8766cfab569b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14708,"size_decoded":15371,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 14708, version 1.0","md5":"79936b18df9f734fb6b0a256b20d36b4","sha1":"bb87500e3204a3a7c65d6633c79c5c840c3be8d3","sha256":"08949f728dc52d528e69b1667d15c89a5686a4ee9a296ff90983985f99c380f7","sha512":"d5b9ed102916ebc2e1ddfe322a5dee1302329de23c0c7895639106766a52906b8ec2b9bf3ac7884dbdce6166e27d315808128d35d9609e45841e3c8c2818031a","ssdeep":"384:i54PnCNUhrlC/trZov44r9cmuyWPCZpMbyKdlm+:i2P0mrlC/cv46VuyVZSFdl","tlshash":"c962b073691e2539e1c2afb0c6c81f6c50f8d70b5ba5c6109378a063b7615ae361e9b1","first_seen":"2025-09-19T06:27:38.321624Z","last_seen":"2026-06-18T19:31:13.726585Z","times_seen":2231,"resource_available":false,"data":null}},"time_used":303,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":237,"receive":66,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"phase2-xrpfi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"phase2-xrpfi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"phase2-xrpfi.com/favicon.ico","fqdn":"phase2-xrpfi.com","domain":"phase2-xrpfi.com","tld":"com"},"ip":{"addr":"172.67.197.157","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://phase2-xrpfi.com/","date":"2026-06-18T16:04:09.958Z","timestamp":1781798649958,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"phase2-xrpfi.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Jun 2026 09:59:40 GMT","end":"Sun, 06 Sep 2026 10:57:00 GMT"},"fingerprint":{"sha1":"09:46:15:EE:E5:36:A7:4E:0B:DE:64:A1:0E:7A:47:98:BE:3A:FD:ED","sha256":"51:A8:A6:DC:2F:00:48:0C:46:4D:A9:F7:15:02:FF:D6:42:A8:3D:2C:C5:A5:9C:AC:93:BC:77:16:5D:57:78:D2"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: phase2-xrpfi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://phase2-xrpfi.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: image/x-icon\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6j6J8KtGghPukyM1BettvIiZAC1ObAbxz1G1WX699HaKY%2F0rlM4bY8wwQbcWclf4QHk79%2BS16kGEgnnB%2BdEqP%2BU7B0CjAs%2FA1UhQtzfQ1zNCf6UtqK%2BCAE92tsTlZMMvY0a2\"}]}\r\nlast-modified: Mon, 08 Jun 2026 10:56:26 GMT\r\ndate: Thu, 18 Jun 2026 16:04:10 GMT\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\netag: W/\"dc270172d1648eb90a7ac9e496aaa7ec\"\r\npriority: u=4,i\r\ncf-ray: a0db873a4d4f569b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15406,"size_decoded":3590,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 3 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel","md5":"dc270172d1648eb90a7ac9e496aaa7ec","sha1":"4c6c6b1d4815a5022e215fe4667fe55ff908b13f","sha256":"d4e950e20f2728c5addc06853e7802699855c3ff9166375bea74da43e214d99b","sha512":"829338b30e6435447174ad43e0ff80659a93bd50aa00f135ac739203efb8e6b471864222250f2180af429b8396201611fdfbf75a6a2c252ef45a93a4f692640f","ssdeep":"192:l8WBBBBBB3vjlZXBbxEB+///////////7AFMCpQ:jbrXXEcd","tlshash":"bc62795166299107f9ab803ab34adb6af27ffec5e91b15261b407129103e09270fdf17","first_seen":"2026-01-21T22:11:30.922214Z","last_seen":"2026-06-18T19:31:13.70531Z","times_seen":71,"resource_available":false,"data":null}},"time_used":286,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":183,"receive":103,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"phase2-xrpfi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"phase2-xrpfi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/cmg/1","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/nbstv/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","date":"2026-06-18T16:04:10.118Z","timestamp":1781798650118,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"challenges.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 16 Jun 2026 20:15:28 GMT","end":"Mon, 14 Sep 2026 21:15:13 GMT"},"fingerprint":{"sha1":"77:27:72:42:CF:51:E8:8C:7C:3E:8C:4C:A1:F0:9A:86:96:B9:0A:16","sha256":"ED:7C:F7:38:B3:0F:00:86:32:D1:14:CE:C0:FF:CA:0E:7C:86:EE:49:51:EF:A4:4B:AA:5C:B6:7C:00:B5:3D:F3"}}},"request":{"raw":"GET /cdn-cgi/challenge-platform/h/b/cmg/1 HTTP/1.1\r\nHost: challenges.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/nbstv/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 18 Jun 2026 16:04:10 GMT\r\ncontent-type: image/png\r\ncontent-length: 86\r\npriority: u=6,i\r\nserver: cloudflare\r\ncf-ray: a0db873b8d0a0daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":86,"size_decoded":305,"mime_type":"image/png","magic":"PNG image data, 2 x 2, 8-bit grayscale, non-interlaced","md5":"5df4a65d21c513d5f2ae1e8c8a6c2186","sha1":"9e6e5195050d2100964a18fdfbc035fee4876615","sha256":"8c411fffb820781b07f71f060874138f2253329d586002df238b72315a040b7c","sha512":"cbe9957e799cfe77773585cc8c872b5248b29bad456d681988ab9f52e4488b82b42618a99714e6af074d0a63a996374145defa71e9324b8f02b40273bdef2a57","ssdeep":"","tlshash":"4ca012d66180ed27c1890232c1501120f83010465103053400c3d9264411e44a297902","first_seen":"2026-06-16T11:37:27.200582Z","last_seen":"2026-06-18T19:02:15.424665Z","times_seen":50,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/flow/ov1/888930064:1781795229:ULXbcCJinkVtfIv0XYZz-roMXsa3oLUICDmOblEQ1Qs/a0db873aa9960daa/9OfSuXNJKMr3ROUHE0FLUF0ETX7cadHuyiPiQcFKUyQ-1781798650-1.2.1.1-Q2v29dUm8tx5Z5ujKo9kGKrXEWcMQhINNBbM3KRQw8fMktPoUcBj9yPvCTbkhptR","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/nbstv/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","date":"2026-06-18T16:04:11.944Z","timestamp":1781798651944,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"challenges.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 16 Jun 2026 20:15:28 GMT","end":"Mon, 14 Sep 2026 21:15:13 GMT"},"fingerprint":{"sha1":"77:27:72:42:CF:51:E8:8C:7C:3E:8C:4C:A1:F0:9A:86:96:B9:0A:16","sha256":"ED:7C:F7:38:B3:0F:00:86:32:D1:14:CE:C0:FF:CA:0E:7C:86:EE:49:51:EF:A4:4B:AA:5C:B6:7C:00:B5:3D:F3"}}},"request":{"raw":"POST /cdn-cgi/challenge-platform/h/b/flow/ov1/888930064:1781795229:ULXbcCJinkVtfIv0XYZz-roMXsa3oLUICDmOblEQ1Qs/a0db873aa9960daa/9OfSuXNJKMr3ROUHE0FLUF0ETX7cadHuyiPiQcFKUyQ-1781798650-1.2.1.1-Q2v29dUm8tx5Z5ujKo9kGKrXEWcMQhINNBbM3KRQw8fMktPoUcBj9yPvCTbkhptR HTTP/1.1\r\nHost: challenges.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/nbstv/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto\r\ncf-chl: 9OfSuXNJKMr3ROUHE0FLUF0ETX7cadHuyiPiQcFKUyQ-1781798650-1.2.1.1-Q2v29dUm8tx5Z5ujKo9kGKrXEWcMQhINNBbM3KRQw8fMktPoUcBj9yPvCTbkhptR\r\ncf-chl-ra: 0\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 87842\r\nOrigin: https://challenges.cloudflare.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 18 Jun 2026 16:04:11 GMT\r\ncontent-type: text/plain; charset=UTF-8\r\ncf-chl-gen: YSjjwdLdFFvTic+knfg/tTUFwk6qiWEpYRKadHvegGCZfWtOznwZSrzgqq/Fgs90$tfGuWB9qdUzXOcaQRRbzmw==\r\ntiming-allow-origin: https://challenges.cloudflare.com\r\npriority: u=3,i=?0\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: a0db8746aa7b0daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":38728,"size_decoded":29535,"mime_type":"text/plain; charset=UTF-8","magic":"ASCII text, with very long lines (38728), with no line terminators","md5":"faccbf92174c9a3608698fd3e524f4f0","sha1":"ab1cd0a1becbe0a998909e0356dcbda6144f8e9f","sha256":"0b89096ef7276ce09b54c68374d8192d7a898db62635db73cd7f9bfd9f735f78","sha512":"e566104ed117738d21fd006b6df3a699be69a5bd897ffa4a5827b599389c32bc4b3a932a8159a79b2075b46a1b744856a4b049536cf8f41d63af907922e54db5","ssdeep":"768:bI2iEJ6h61f9ECPtjTAui3Yc57v6/neJM1iLf2VZ+Nal49O8INHpu3MRr9LbQ:MeEh611EUri3Yc5Qe+wTj9vGu8Rrx8","tlshash":"e003f1ea9b7dd82ec991016b475c3cadb2e484a42701f9e2f3265fdf5e590806f18d23","first_seen":"2026-06-18T16:06:18.837585Z","last_seen":"2026-06-18T16:06:18.837585Z","times_seen":1,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"phase2-xrpfi.com/29d75789b264c294.css","fqdn":"phase2-xrpfi.com","domain":"phase2-xrpfi.com","tld":"com"},"ip":{"addr":"172.67.197.157","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://phase2-xrpfi.com/","date":"2026-06-18T16:04:16.431Z","timestamp":1781798656431,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"phase2-xrpfi.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Jun 2026 09:59:40 GMT","end":"Sun, 06 Sep 2026 10:57:00 GMT"},"fingerprint":{"sha1":"09:46:15:EE:E5:36:A7:4E:0B:DE:64:A1:0E:7A:47:98:BE:3A:FD:ED","sha256":"51:A8:A6:DC:2F:00:48:0C:46:4D:A9:F7:15:02:FF:D6:42:A8:3D:2C:C5:A5:9C:AC:93:BC:77:16:5D:57:78:D2"}}},"request":{"raw":"GET /29d75789b264c294.css HTTP/1.1\r\nHost: phase2-xrpfi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://phase2-xrpfi.com/\r\nCookie: cf_clearance=3dDDftPuP8Orcsu8EPJqRGA8SI7fXKOo9EyyENnMTko-1781798655-1.2.1.1-_.es7GeTtSCtToaztdb37PtL0Q1MMryDzKOb_HFjONKSI9SWJ9zmjHh9IzaNOCe_a49K45T2J9DDBD4cXu7AQbSKreno2FLMtJbW1pUwuCXj2GIAqDxX04QQM1Gdh0Coue1Jg4k1qEi7V2kg8jsZ_fFURgMEwRDOIW0bsW6aEtUPFrCAzfcKMM_OJSCc5QzEKNFM5VLoB6gCoW_dtlP7S9MwCDybt1LdlsSMlWrV966zQDu3.fSkgjPX7YH_BdCJ6xwpGuD1vdVBjXePcw4w4KmvHWZKNg1Z5atG_sqUEENZ3iLOTGCThDT23MgQWDjvSlwOjOfHtYL8Xg2_RKAusWFoV24lUhXqWZboI4DQQ_WrrAq4Y9HxV_0ij9Nxdl25xC594wFDj4xdba5WMvkP8OhM3ycqKmUuo9MC9VwQIHuaD5UccAdwS_PLO3wAXcL8MOKlt_zRwnUEUXAHQEznZYKp8xmkJjHzdLlqmOXou2jeRJC7MWL8F6xmw2v5fTwZ\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/css;charset=utf-8\r\npriority: u=2,i=?0\r\nlast-modified: Mon, 08 Jun 2026 10:56:26 GMT\r\ndate: Thu, 18 Jun 2026 16:04:16 GMT\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"1d3620097efe3fa54b3134ec2dfd8bb9\"\r\ncontent-encoding: zstd\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sU5XlSgr90LYw5Qrrtrt6A8g7OW1%2FH76obvh2p%2BYhc7yQPSs502cqTJmkBXbX1mB%2Fig2UIYBI5Pg6SdJCcoddJSFdAFrkYGHT6kzIhMsg9wUqQ5P6vSVhn87mtHR%2B8bmUKnL\"}]}\r\ncf-ray: a0db8762bf4d569b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":111154,"size_decoded":14192,"mime_type":"text/css; charset=utf-8","magic":"Unicode text, UTF-8 text, with very long lines (16853)","md5":"1d3620097efe3fa54b3134ec2dfd8bb9","sha1":"889505bb1e1035b9eb4f939b3a447507fc6f5d3a","sha256":"70fe002679e725bb0c0a3b935f68ac7a20378ab2a67c72860caf951dfe04d5d8","sha512":"ca395ebfdbb9425e8bb03cc442667fe8319f04490ce3c98e38ffcd2c34ee9214eac8441071c8110811b65032f405ef97e7e78d3c2ef0df2e0482afe3e6af459a","ssdeep":"768:KWeCQlBkIapPd6GvZbpyFV7vYyafVcVVyN1HQtlmsbmHDmxHC8hjg+8eItV25uXn:KbliIapPd6GvrtfVccids","tlshash":"56b30e13b6f5137fa05d244af6915804efd074ebf2ca9fe0940edce588899a226f174b","first_seen":"2026-06-18T15:59:02.815377Z","last_seen":"2026-06-18T19:31:13.728598Z","times_seen":12,"resource_available":false,"data":null}},"time_used":573,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":315,"receive":258,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"phase2-xrpfi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"phase2-xrpfi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"phase2-xrpfi.com/d5170cc3037aa5ea.css","fqdn":"phase2-xrpfi.com","domain":"phase2-xrpfi.com","tld":"com"},"ip":{"addr":"172.67.197.157","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://phase2-xrpfi.com/","date":"2026-06-18T16:04:16.434Z","timestamp":1781798656434,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"phase2-xrpfi.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Jun 2026 09:59:40 GMT","end":"Sun, 06 Sep 2026 10:57:00 GMT"},"fingerprint":{"sha1":"09:46:15:EE:E5:36:A7:4E:0B:DE:64:A1:0E:7A:47:98:BE:3A:FD:ED","sha256":"51:A8:A6:DC:2F:00:48:0C:46:4D:A9:F7:15:02:FF:D6:42:A8:3D:2C:C5:A5:9C:AC:93:BC:77:16:5D:57:78:D2"}}},"request":{"raw":"GET /d5170cc3037aa5ea.css HTTP/1.1\r\nHost: phase2-xrpfi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://phase2-xrpfi.com/\r\nCookie: cf_clearance=3dDDftPuP8Orcsu8EPJqRGA8SI7fXKOo9EyyENnMTko-1781798655-1.2.1.1-_.es7GeTtSCtToaztdb37PtL0Q1MMryDzKOb_HFjONKSI9SWJ9zmjHh9IzaNOCe_a49K45T2J9DDBD4cXu7AQbSKreno2FLMtJbW1pUwuCXj2GIAqDxX04QQM1Gdh0Coue1Jg4k1qEi7V2kg8jsZ_fFURgMEwRDOIW0bsW6aEtUPFrCAzfcKMM_OJSCc5QzEKNFM5VLoB6gCoW_dtlP7S9MwCDybt1LdlsSMlWrV966zQDu3.fSkgjPX7YH_BdCJ6xwpGuD1vdVBjXePcw4w4KmvHWZKNg1Z5atG_sqUEENZ3iLOTGCThDT23MgQWDjvSlwOjOfHtYL8Xg2_RKAusWFoV24lUhXqWZboI4DQQ_WrrAq4Y9HxV_0ij9Nxdl25xC594wFDj4xdba5WMvkP8OhM3ycqKmUuo9MC9VwQIHuaD5UccAdwS_PLO3wAXcL8MOKlt_zRwnUEUXAHQEznZYKp8xmkJjHzdLlqmOXou2jeRJC7MWL8F6xmw2v5fTwZ\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/css;charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=g%2FUFSf%2FczTmBNxNDvNrcOj1vqS6yC7EyOzfOyHdHqNzjDqRweBrCFHZmxG8TZ%2FtY9ZLkLMF%2FsT53pOi6TihF%2BEDQMHt%2FKEHK8KL1rptDlMOhl4S0sQe2D4UYJGpWtHWNQPJi\"}]}\r\nlast-modified: Mon, 08 Jun 2026 10:56:26 GMT\r\ndate: Thu, 18 Jun 2026 16:04:16 GMT\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\netag: W/\"476e8950a1e70e093e13ef6cc4d9b5cb\"\r\npriority: u=2,i=?0\r\ncf-ray: a0db8762bf50569b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3737,"size_decoded":1731,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (3736)","md5":"476e8950a1e70e093e13ef6cc4d9b5cb","sha1":"1032f7332b6bbd9ab2f40a9b6b6c9f25c95948e0","sha256":"544a2d4c3c7dd9d002fbc661ad37e3bea8e4e2a8726a3157eb6041a3660bd0df","sha512":"38690ab286c3973e363a3ad99f94b05656251fe92ef482cf614ca233f23695b9587bc0c3d76ed0474f920ffdff97db2cedab032fae5e4d1a2f05f12b6b325452","ssdeep":"","tlshash":"ab71bf73ea35e028f2268d573782755e17089876649787b5ee33ed0dc8e37b31212b08","first_seen":"2026-04-24T15:23:41.471553Z","last_seen":"2026-06-18T19:31:13.735705Z","times_seen":19,"resource_available":false,"data":null}},"time_used":304,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":304,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"phase2-xrpfi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"phase2-xrpfi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"phase2-xrpfi.com/579c7f5cb4a415ce.css","fqdn":"phase2-xrpfi.com","domain":"phase2-xrpfi.com","tld":"com"},"ip":{"addr":"172.67.197.157","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://phase2-xrpfi.com/","date":"2026-06-18T16:04:16.435Z","timestamp":1781798656435,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"phase2-xrpfi.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Jun 2026 09:59:40 GMT","end":"Sun, 06 Sep 2026 10:57:00 GMT"},"fingerprint":{"sha1":"09:46:15:EE:E5:36:A7:4E:0B:DE:64:A1:0E:7A:47:98:BE:3A:FD:ED","sha256":"51:A8:A6:DC:2F:00:48:0C:46:4D:A9:F7:15:02:FF:D6:42:A8:3D:2C:C5:A5:9C:AC:93:BC:77:16:5D:57:78:D2"}}},"request":{"raw":"GET /579c7f5cb4a415ce.css HTTP/1.1\r\nHost: phase2-xrpfi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://phase2-xrpfi.com/\r\nCookie: cf_clearance=3dDDftPuP8Orcsu8EPJqRGA8SI7fXKOo9EyyENnMTko-1781798655-1.2.1.1-_.es7GeTtSCtToaztdb37PtL0Q1MMryDzKOb_HFjONKSI9SWJ9zmjHh9IzaNOCe_a49K45T2J9DDBD4cXu7AQbSKreno2FLMtJbW1pUwuCXj2GIAqDxX04QQM1Gdh0Coue1Jg4k1qEi7V2kg8jsZ_fFURgMEwRDOIW0bsW6aEtUPFrCAzfcKMM_OJSCc5QzEKNFM5VLoB6gCoW_dtlP7S9MwCDybt1LdlsSMlWrV966zQDu3.fSkgjPX7YH_BdCJ6xwpGuD1vdVBjXePcw4w4KmvHWZKNg1Z5atG_sqUEENZ3iLOTGCThDT23MgQWDjvSlwOjOfHtYL8Xg2_RKAusWFoV24lUhXqWZboI4DQQ_WrrAq4Y9HxV_0ij9Nxdl25xC594wFDj4xdba5WMvkP8OhM3ycqKmUuo9MC9VwQIHuaD5UccAdwS_PLO3wAXcL8MOKlt_zRwnUEUXAHQEznZYKp8xmkJjHzdLlqmOXou2jeRJC7MWL8F6xmw2v5fTwZ\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/css;charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oimpQQzIrETume8GCRE8emtEaV4KV%2FwFlcpJTm905MtV7wdjQmt5XVZP%2Bw7ak9E4lM3m1UeXR23pjTX2LIqnjUdFWx5MsVN84L1Qo9r1We%2FN2jDGOTkKHUk4fEUqvsDHcT7P\"}]}\r\nlast-modified: Mon, 08 Jun 2026 10:56:26 GMT\r\ndate: Thu, 18 Jun 2026 16:04:16 GMT\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\netag: W/\"c986ad8c9796cbae33d49deb8538ba5b\"\r\npriority: u=2,i=?0\r\ncf-ray: a0db8762bf51569b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":30481,"size_decoded":4560,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (10182)","md5":"c986ad8c9796cbae33d49deb8538ba5b","sha1":"357407f751a8b8e02ff98621312e6d58f84c3baf","sha256":"e35b0fea230c68bbdfeaccd85bec05ae7f46dc53114cccce2a7533826c6ce385","sha512":"d078e7a477b22f951c3e29fff59bc5af1e34ac2b137ff8b2501d8104d62e06eb08fa9ca6b177cbf40a8c46766e53c71e31dad4698eac7633d459ee60c912dae3","ssdeep":"384:G9PqbwLV0qxkaEHS+0f1x9gMcHe+MFBohb+GsWNrChqkALVb8xMqlhiqKyj0xntA:2acx6CKN2T","tlshash":"ddd2ad43e2f4173f605e1186f9828948dfc464faa1968fd0290ecce594da7b27af1b47","first_seen":"2026-04-24T15:23:41.461599Z","last_seen":"2026-06-18T19:31:13.740981Z","times_seen":19,"resource_available":false,"data":null}},"time_used":409,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":311,"receive":98,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"phase2-xrpfi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"phase2-xrpfi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"phase2-xrpfi.com/home_providers_desktop.webm","fqdn":"phase2-xrpfi.com","domain":"phase2-xrpfi.com","tld":"com"},"ip":{"addr":"172.67.197.157","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://phase2-xrpfi.com/","date":"2026-06-18T16:04:16.948Z","timestamp":1781798656948,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"phase2-xrpfi.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Jun 2026 09:59:40 GMT","end":"Sun, 06 Sep 2026 10:57:00 GMT"},"fingerprint":{"sha1":"09:46:15:EE:E5:36:A7:4E:0B:DE:64:A1:0E:7A:47:98:BE:3A:FD:ED","sha256":"51:A8:A6:DC:2F:00:48:0C:46:4D:A9:F7:15:02:FF:D6:42:A8:3D:2C:C5:A5:9C:AC:93:BC:77:16:5D:57:78:D2"}}},"request":{"raw":"GET /home_providers_desktop.webm HTTP/1.1\r\nHost: phase2-xrpfi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nRange: bytes=0-\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://phase2-xrpfi.com/\r\nCookie: cf_clearance=3dDDftPuP8Orcsu8EPJqRGA8SI7fXKOo9EyyENnMTko-1781798655-1.2.1.1-_.es7GeTtSCtToaztdb37PtL0Q1MMryDzKOb_HFjONKSI9SWJ9zmjHh9IzaNOCe_a49K45T2J9DDBD4cXu7AQbSKreno2FLMtJbW1pUwuCXj2GIAqDxX04QQM1Gdh0Coue1Jg4k1qEi7V2kg8jsZ_fFURgMEwRDOIW0bsW6aEtUPFrCAzfcKMM_OJSCc5QzEKNFM5VLoB6gCoW_dtlP7S9MwCDybt1LdlsSMlWrV966zQDu3.fSkgjPX7YH_BdCJ6xwpGuD1vdVBjXePcw4w4KmvHWZKNg1Z5atG_sqUEENZ3iLOTGCThDT23MgQWDjvSlwOjOfHtYL8Xg2_RKAusWFoV24lUhXqWZboI4DQQ_WrrAq4Y9HxV_0ij9Nxdl25xC594wFDj4xdba5WMvkP8OhM3ycqKmUuo9MC9VwQIHuaD5UccAdwS_PLO3wAXcL8MOKlt_zRwnUEUXAHQEznZYKp8xmkJjHzdLlqmOXou2jeRJC7MWL8F6xmw2v5fTwZ\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: video/webm\r\netag: \"df30dbcd8600113637cff696c21b2b82\"\r\nlast-modified: Mon, 08 Jun 2026 10:56:26 GMT\r\ndate: Thu, 18 Jun 2026 16:04:17 GMT\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EpN%2FOn2kuobETzktiPrCbWx0muPftfQiWCApX5Cg0orX9MHjiElO16X81%2FkAH5G7r7MgP%2FfyWOszCbeDKh%2BYy68x7EHzNQgP5%2FWp%2BRTTUg2YFtT5psLN%2FcUAcLBKR%2BqkCtul\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a0db8765ff97569b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1267259,"size_decoded":1267934,"mime_type":"video/webm","magic":"WebM","md5":"ee2f09b30522d734be219fea9eb6b652","sha1":"6b2d4a6f78be14a1c1ea569c5c160396ad19fcd1","sha256":"802018a8d524b7c30540a7897c55ae1efa17f6ccd142e02d799c8480721e8449","sha512":"14b541f6615eea0028ecae7f55241185ce41b94a11f484602ae5b1934da1d3b8bb3960caf46ed1b8a65c9053444b70c00d7c1c5c6c1e59dd468ee60ea950b6ca","ssdeep":"24576:5JJ1VbEOGs0BDMeeobFxHYENSOAMma9tj9/e5gbIjpjMqZ:5JJkLs0CkbveOHNjogu","tlshash":"6925339d4ccaad43f09d84f9ad2442cb0a510b9193c684bad5bd334fc5b32eeb6751b2","first_seen":"2025-08-11T21:39:04.769941Z","last_seen":"2026-06-18T19:31:13.728005Z","times_seen":32,"resource_available":false,"data":null}},"time_used":2008,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":243,"receive":1765,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"phase2-xrpfi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"phase2-xrpfi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"phase2-xrpfi.com/FAssets%20(1).svg","fqdn":"phase2-xrpfi.com","domain":"phase2-xrpfi.com","tld":"com"},"ip":{"addr":"172.67.197.157","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://phase2-xrpfi.com/","date":"2026-06-18T16:04:17.081Z","timestamp":1781798657081,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"phase2-xrpfi.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Jun 2026 09:59:40 GMT","end":"Sun, 06 Sep 2026 10:57:00 GMT"},"fingerprint":{"sha1":"09:46:15:EE:E5:36:A7:4E:0B:DE:64:A1:0E:7A:47:98:BE:3A:FD:ED","sha256":"51:A8:A6:DC:2F:00:48:0C:46:4D:A9:F7:15:02:FF:D6:42:A8:3D:2C:C5:A5:9C:AC:93:BC:77:16:5D:57:78:D2"}}},"request":{"raw":"GET /FAssets%20(1).svg HTTP/1.1\r\nHost: phase2-xrpfi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://phase2-xrpfi.com/\r\nCookie: cf_clearance=3dDDftPuP8Orcsu8EPJqRGA8SI7fXKOo9EyyENnMTko-1781798655-1.2.1.1-_.es7GeTtSCtToaztdb37PtL0Q1MMryDzKOb_HFjONKSI9SWJ9zmjHh9IzaNOCe_a49K45T2J9DDBD4cXu7AQbSKreno2FLMtJbW1pUwuCXj2GIAqDxX04QQM1Gdh0Coue1Jg4k1qEi7V2kg8jsZ_fFURgMEwRDOIW0bsW6aEtUPFrCAzfcKMM_OJSCc5QzEKNFM5VLoB6gCoW_dtlP7S9MwCDybt1LdlsSMlWrV966zQDu3.fSkgjPX7YH_BdCJ6xwpGuD1vdVBjXePcw4w4KmvHWZKNg1Z5atG_sqUEENZ3iLOTGCThDT23MgQWDjvSlwOjOfHtYL8Xg2_RKAusWFoV24lUhXqWZboI4DQQ_WrrAq4Y9HxV_0ij9Nxdl25xC594wFDj4xdba5WMvkP8OhM3ycqKmUuo9MC9VwQIHuaD5UccAdwS_PLO3wAXcL8MOKlt_zRwnUEUXAHQEznZYKp8xmkJjHzdLlqmOXou2jeRJC7MWL8F6xmw2v5fTwZ\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: image/svg+xml\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Mon, 08 Jun 2026 10:56:26 GMT\r\ndate: Thu, 18 Jun 2026 16:04:17 GMT\r\nserver: cloudflare\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UjDfe2JdmFFatnly9mL3u%2Fesz0pFNjiFMK7026xZuUctmh%2FaCuNiBWgYkwXPmLZCKx69pMF0be%2BhuRFJPfThM1j%2BZm2qNskhwM8ceyMHQijIISV4bfIzEi%2F1JvdN1S%2B%2F33ma\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\netag: W/\"791afcd30e640797223cddb9e71c4b02\"\r\ncf-ray: a0db8766cfac569b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5973,"size_decoded":2974,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"791afcd30e640797223cddb9e71c4b02","sha1":"311cfb7ed5c7befab02b7d82af94d4e1459e790c","sha256":"b6d60256961e6c438cf6722481961f3936cfaa0cdba7345c83d7dc1e91d9b935","sha512":"752352c2bf83d59d448219e4e91b6964688f8a843a233ca385707280e9c6b496c9cb140ad287d8116d25508816cd7e2288a3ed34929d86feca03c32dc61cbdaf","ssdeep":"96:P9KSr0KTT9M+P3qpna3TU/Awbq1N5HmCcfZ+HbJm4q+REFy8C1fhY63k:VUKTTOeaFlovNLcfQHw4zmCNhYQk","tlshash":"70c16380337c93b5b841e3761b4ea039787764e4ba044880d6e63f05b689a9f5dacbd3","first_seen":"2025-08-11T21:39:04.7375Z","last_seen":"2026-06-18T19:31:13.725137Z","times_seen":31,"resource_available":false,"data":null}},"time_used":235,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":235,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"phase2-xrpfi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"phase2-xrpfi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/nbstv/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://phase2-xrpfi.com/","date":"2026-06-18T16:04:10.021Z","timestamp":1781798650021,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"challenges.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 16 Jun 2026 20:15:28 GMT","end":"Mon, 14 Sep 2026 21:15:13 GMT"},"fingerprint":{"sha1":"77:27:72:42:CF:51:E8:8C:7C:3E:8C:4C:A1:F0:9A:86:96:B9:0A:16","sha256":"ED:7C:F7:38:B3:0F:00:86:32:D1:14:CE:C0:FF:CA:0E:7C:86:EE:49:51:EF:A4:4B:AA:5C:B6:7C:00:B5:3D:F3"}}},"request":{"raw":"GET /cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/nbstv/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto HTTP/1.1\r\nHost: challenges.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 18 Jun 2026 16:04:10 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\npermissions-policy: accelerometer=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=(),xr-spatial-tracking=*\r\ncontent-security-policy: default-src 'none'; script-src 'nonce-FzCsjyggx70rlTpR3mxoz6' 'unsafe-eval'; script-src-attr 'none'; worker-src blob:; style-src 'unsafe-inline'; img-src 'self'; connect-src 'self'; frame-src 'self' blob:; child-src 'self' blob:; form-action 'none'; base-uri 'self'; trusted-types JkfH9 default; require-trusted-types-for 'script'; sandbox allow-same-origin allow-scripts allow-popups allow-forms\r\ncross-origin-embedder-policy: require-corp\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: cross-origin\r\norigin-agent-cluster: ?1\r\naccept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA\r\ncritical-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA\r\nreferrer-policy: same-origin\r\ndocument-policy: js-profiling\r\npriority: u=6,i=?0\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: a0db873aa9960daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: j8h5wfub;dur=235771, cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":235771,"size_decoded":93943,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (65536), with no line terminators","md5":"ccaafdf027a00bc13e8d07b291c48abe","sha1":"80fd1fbeb971f4a118b5ccb2ef758d8268390791","sha256":"f936fbdb93f4605b07b6985f16e43eb1f1678c8f83a67f8314ac74abdc0e3e8c","sha512":"0f19188d5bc7c629679410ee4c44e0ed5ffde36ce48aa7e19c6d3e3aeaf7534dcf72c837670614206a7b57023f9d3acb080cc7b40393cf04188aa1517b3b1f91","ssdeep":"3072:EDyQj0qwXBUd4ZJkDeWc9AzAsum4cEzLK1uTvjEZNXH6EBV:EDzj0qwRUdA9Wsvfm4cEzEcEZNXFV","tlshash":"37340b8a3ace741b4391677400b7b9cbb2364ca41059191cd69096e0fcfe7e97297aec","first_seen":"2026-06-18T16:06:18.841367Z","last_seen":"2026-06-18T16:06:18.841367Z","times_seen":1,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":17,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/pat/a0db873aa9960daa/1781798650380/3f33234f69de194a1e7f27d3ab8280585d4dcee302db28fa5164c1b7273fbba7/NzHlIW0TcIWGI2y","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/nbstv/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","date":"2026-06-18T16:04:11.522Z","timestamp":1781798651522,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"challenges.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 16 Jun 2026 20:15:28 GMT","end":"Mon, 14 Sep 2026 21:15:13 GMT"},"fingerprint":{"sha1":"77:27:72:42:CF:51:E8:8C:7C:3E:8C:4C:A1:F0:9A:86:96:B9:0A:16","sha256":"ED:7C:F7:38:B3:0F:00:86:32:D1:14:CE:C0:FF:CA:0E:7C:86:EE:49:51:EF:A4:4B:AA:5C:B6:7C:00:B5:3D:F3"}}},"request":{"raw":"GET /cdn-cgi/challenge-platform/h/b/pat/a0db873aa9960daa/1781798650380/3f33234f69de194a1e7f27d3ab8280585d4dcee302db28fa5164c1b7273fbba7/NzHlIW0TcIWGI2y HTTP/1.1\r\nHost: challenges.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/nbstv/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 401 \r\ndate: Thu, 18 Jun 2026 16:04:11 GMT\r\ncontent-type: text/plain; charset=utf-8\r\ncontent-length: 1\r\nwww-authenticate: PrivateToken challenge=\"AAIAGXBhdC1pc3N1ZXIuY2xvdWRmbGFyZS5jb20gPzMjT2neGUoefyfTq4KAWF1NzuMC2yj6UWTBtyc_u6cAGWNoYWxsZW5nZXMuY2xvdWRmbGFyZS5jb20=\", token-key=\"MIIBUjA9BgkqhkiG9w0BAQowMKANMAsGCWCGSAFlAwQCAqEaMBgGCSqGSIb3DQEBCDALBglghkgBZQMEAgKiAwIBMAOCAQ8AMIIBCgKCAQEAyBHLF-lucvyi9hjdYkuqs8rq9jDD7W73LexEOXNJLcqHRltJlI0qi-wEaKJox3O8FpL8L2tGOsB8-7D8OhU-VC8suumBQK2IwNs8jRYCQD1KSFgwv7BBStOxYCxbAKpN9Ypo3e5aG-pzMZzRNUMMLYs6C8zon0bqWg7Zlg-4kZiTPXKGTcwAVrMkY-MltNfg2tgCls55BhqL7JRgwKLowvZx4xWBzqXuqt1g3nr7gR5-WK7ODigltYPagj_HAMrUAsomf0WIdz4pFfM98Icbiw_-HQiLuHKbA0dJ9M2KKrZzGuE0NrNabvwJgGXq39wNnSg6JpV8plrO5z9UMboztwIDAQAB\", max-age=20, PrivateToken challenge=\"AAIAHXNhdC5wYXQtaXNzdWVyLmNsb3VkZmxhcmUuY29tID8zI09p3hlKHn8n06uCgFhdTc7jAtso-lFkwbcnP7unABljaGFsbGVuZ2VzLmNsb3VkZmxhcmUuY29t\", token-key=\"MIIBUjA9BgkqhkiG9w0BAQowMKANMAsGCWCGSAFlAwQCAqEaMBgGCSqGSIb3DQEBCDALBglghkgBZQMEAgKiAwIBMAOCAQ8AMIIBCgKCAQEAn5A3z69BM2tpdtMiEi2FJN8rdQPZY_W0518bUO3Z-m5RQN3lwSoA_FaQ-G_LK49f6fkTjz3VsQyKxJd--2ZTy34zma1svuR9y0N60ZfXaK-WajSDpNN_VFiY3Q6hZ46lswsS3krxEWjOB7AItiy1pnUdNLka7Xan1f6oHjTR1HlWzUOMa4uYZHQ7D3zu3XjaM3Z7_jxcZeDnUC5boysrhtLG38U0x_g0pBtgnulTV4xhqrG9hQS4ebALfEtbh_9_wIUAv4BbxEsZKRuXEgdv1gjoJOqesnfi5AzG5dEFxTGZUCPIO1_Iagu_2yPzPSJIrjS2wjyOzIP_7Eu2I3-gXQIDAQAB\", max-age=20, PrivateToken challenge=\"AAIALHBwLWlzc3Vlci1wcm9kdWN0aW9uLnJlc2VhcmNoLmNsb3VkZmxhcmUuY29tID8zI09p3hlKHn8n06uCgFhdTc7jAtso-lFkwbcnP7unABljaGFsbGVuZ2VzLmNsb3VkZmxhcmUuY29t\", token-key=\"MIIBUjA9BgkqhkiG9w0BAQowMKANMAsGCWCGSAFlAwQCAqEaMBgGCSqGSIb3DQEBCDALBglghkgBZQMEAgKiAwIBMAOCAQ8AMIIBCgKCAQEAsxviSI6sjMo3EYekYTf-dIPsJKZ5cD3xsEmHYx664Sbocwxx4OVFCyBfqccoQRmEX0XWSEj0hYyxpSGEz2i9yhmVRSjkqknoFfuOjUc0KcblcHhVGtTIWERy01RB1YmfcngH9Znt-Z--XyaRArOXumCFBV41ZLC7--LANYHBuhSz34fCGCIFKJsbk8ggBIemExpY3f1t2OZNs4mYLHE-7DhMSYP3Yd171ZcDGvSvtW59KNqQwgCwNcjSY6crHCr8mc-vyzSJFS62lUdla7lPGnm51ne0hJTiFcfY2rDXKUBERMhEYaNuHy1itCEsHOinnQKV89W6SPZmavtQU2h-QwIDAQAB\", max-age=20\r\npriority: u=6,i=?0\r\nserver: cloudflare\r\ncf-ray: a0db8744090a0daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"401","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1,"size_decoded":2171,"mime_type":"text/plain; charset=utf-8","magic":"very short file (no magic)","md5":"ff44570aca8241914870afbc310cdb85","sha1":"58668e7669fd564d99db5d581fcdb6a5618440b5","sha256":"6da43b944e494e885e69af021f93c6d9331c78aa228084711429160a5bbd15b5","sha512":"3c266c0035de59eab2a0dd31b3dcb4a9dd157b310289e5db9ab4f8c2fddb7433466d48f25da7ad735a1cb8f2935aa612ad1f62f0efcece3933ba9979082e2304","ssdeep":"","tlshash":"c700000000000003c00000300000003000000000000000000003000000000000000000","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-18T19:22:45.753745Z","times_seen":462331,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"phase2-xrpfi.com/","fqdn":"phase2-xrpfi.com","domain":"phase2-xrpfi.com","tld":"com"},"ip":{"addr":"172.67.197.157","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-06-18T16:04:15.898Z","timestamp":1781798655898,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"phase2-xrpfi.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Jun 2026 09:59:40 GMT","end":"Sun, 06 Sep 2026 10:57:00 GMT"},"fingerprint":{"sha1":"09:46:15:EE:E5:36:A7:4E:0B:DE:64:A1:0E:7A:47:98:BE:3A:FD:ED","sha256":"51:A8:A6:DC:2F:00:48:0C:46:4D:A9:F7:15:02:FF:D6:42:A8:3D:2C:C5:A5:9C:AC:93:BC:77:16:5D:57:78:D2"}}},"request":{"raw":"POST / HTTP/1.1\r\nHost: phase2-xrpfi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://phase2-xrpfi.com/?__cf_chl_tk=2nkry3hEtDpCu8iXtKwpLBKRoYTJl6CrokWi9rITwyY-1781798649-1.0.1.1-uvzDiaQqAf247HeqSNyKb35G1EbdJrax.RSUI07Vxyo\r\nContent-Type: application/x-www-form-urlencoded\r\nContent-Length: 2093\r\nOrigin: https://phase2-xrpfi.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: cf_clearance=3dDDftPuP8Orcsu8EPJqRGA8SI7fXKOo9EyyENnMTko-1781798655-1.2.1.1-_.es7GeTtSCtToaztdb37PtL0Q1MMryDzKOb_HFjONKSI9SWJ9zmjHh9IzaNOCe_a49K45T2J9DDBD4cXu7AQbSKreno2FLMtJbW1pUwuCXj2GIAqDxX04QQM1Gdh0Coue1Jg4k1qEi7V2kg8jsZ_fFURgMEwRDOIW0bsW6aEtUPFrCAzfcKMM_OJSCc5QzEKNFM5VLoB6gCoW_dtlP7S9MwCDybt1LdlsSMlWrV966zQDu3.fSkgjPX7YH_BdCJ6xwpGuD1vdVBjXePcw4w4KmvHWZKNg1Z5atG_sqUEENZ3iLOTGCThDT23MgQWDjvSlwOjOfHtYL8Xg2_RKAusWFoV24lUhXqWZboI4DQQ_WrrAq4Y9HxV_0ij9Nxdl25xC594wFDj4xdba5WMvkP8OhM3ycqKmUuo9MC9VwQIHuaD5UccAdwS_PLO3wAXcL8MOKlt_zRwnUEUXAHQEznZYKp8xmkJjHzdLlqmOXou2jeRJC7MWL8F6xmw2v5fTwZ\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nSec-Fetch-User: ?1\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/html;charset=utf-8\r\npriority: u=0,i\r\nlast-modified: Mon, 08 Jun 2026 10:56:26 GMT\r\ndate: Thu, 18 Jun 2026 16:04:16 GMT\r\nserver: cloudflare\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tq08O1Ys2We%2BXSmdCKjE63vRU9tckyo7Jub5at87IOsD%2FUKhsJVyj%2BF%2F4Y5N%2FNbNbcbfbF9SJ%2Fsx%2F%2BXLJDwrk%2BHsRGULouJFGbaSlm2vaJy43h2ZryugukNEW%2BQr5Pt8y1oz\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: zstd\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a0db875f6f04569b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":377491,"size_decoded":54017,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (5915)","md5":"03be786a2e9dfc0ee8fe7368aa2fddbb","sha1":"d51caddd549e7df8969197599906bc5250f613c1","sha256":"6ff9c76bbabac6d06163c357bd2b147f073cad911f4b7528619ec16a07c88abb","sha512":"9795a6c0758a9f7b22de49a4ca7b38864e3ae1c62d5cf0722d1d777394fb35004f9159c16bdbf603ec3e21c7b27fd6f9a1bbe91adbc1cf447f12a48ddf19b55e","ssdeep":"1536:1XEnhvo5s9TwECJG41icdCRej8CJy1icGC5Y2LSHgxJn2RGa4bLPjoMyQHkeSFe3:18vo5sgGebKS454nxG","tlshash":"e184d9a2f3f112e7401e43e8e9765506efd060f7d1468e8c729c6af85f46c9c68d268e","first_seen":"2026-06-18T16:06:18.842792Z","last_seen":"2026-06-18T16:06:25.820295Z","times_seen":2,"resource_available":true,"data":null}},"time_used":776,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":420,"receive":356,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"phase2-xrpfi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"phase2-xrpfi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"phase2-xrpfi.com/thatthatnewpixelfamilytest_square-s.p.5c25c1e8.woff2","fqdn":"phase2-xrpfi.com","domain":"phase2-xrpfi.com","tld":"com"},"ip":{"addr":"172.67.197.157","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://phase2-xrpfi.com/","date":"2026-06-18T16:04:16.930Z","timestamp":1781798656930,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"phase2-xrpfi.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Jun 2026 09:59:40 GMT","end":"Sun, 06 Sep 2026 10:57:00 GMT"},"fingerprint":{"sha1":"09:46:15:EE:E5:36:A7:4E:0B:DE:64:A1:0E:7A:47:98:BE:3A:FD:ED","sha256":"51:A8:A6:DC:2F:00:48:0C:46:4D:A9:F7:15:02:FF:D6:42:A8:3D:2C:C5:A5:9C:AC:93:BC:77:16:5D:57:78:D2"}}},"request":{"raw":"GET /thatthatnewpixelfamilytest_square-s.p.5c25c1e8.woff2 HTTP/1.1\r\nHost: phase2-xrpfi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://phase2-xrpfi.com/6cdcfbcc140e7bef.css\r\nCookie: cf_clearance=3dDDftPuP8Orcsu8EPJqRGA8SI7fXKOo9EyyENnMTko-1781798655-1.2.1.1-_.es7GeTtSCtToaztdb37PtL0Q1MMryDzKOb_HFjONKSI9SWJ9zmjHh9IzaNOCe_a49K45T2J9DDBD4cXu7AQbSKreno2FLMtJbW1pUwuCXj2GIAqDxX04QQM1Gdh0Coue1Jg4k1qEi7V2kg8jsZ_fFURgMEwRDOIW0bsW6aEtUPFrCAzfcKMM_OJSCc5QzEKNFM5VLoB6gCoW_dtlP7S9MwCDybt1LdlsSMlWrV966zQDu3.fSkgjPX7YH_BdCJ6xwpGuD1vdVBjXePcw4w4KmvHWZKNg1Z5atG_sqUEENZ3iLOTGCThDT23MgQWDjvSlwOjOfHtYL8Xg2_RKAusWFoV24lUhXqWZboI4DQQ_WrrAq4Y9HxV_0ij9Nxdl25xC594wFDj4xdba5WMvkP8OhM3ycqKmUuo9MC9VwQIHuaD5UccAdwS_PLO3wAXcL8MOKlt_zRwnUEUXAHQEznZYKp8xmkJjHzdLlqmOXou2jeRJC7MWL8F6xmw2v5fTwZ\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: font/woff2\r\netag: \"7526fa8e83a73a9f694eba8223795de5\"\r\nlast-modified: Mon, 08 Jun 2026 10:56:26 GMT\r\ndate: Thu, 18 Jun 2026 16:04:17 GMT\r\nserver: cloudflare\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=p2LCY3hITOB9nnmqw8VY8Tfm2RmjBbrzqMrJ96AI%2FTo%2FU8f05q9qolxzFkttiTSoiGle%2Bs7COjeZYQed%2BCi5Aeq36JqEXccTUFobwvw5xPNNtgWV5y1IgYpMgCrPaEbB0uIE\"}]}\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncontent-length: 5516\r\ncf-ray: a0db8765df96569b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5516,"size_decoded":6227,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 5516, version 1.0","md5":"7526fa8e83a73a9f694eba8223795de5","sha1":"6f7b482dc8ce577c3ca11df24997c7bd54959de9","sha256":"4f889410a75a15c856b6b317d13204a6cac75be1035dc10658933cec9f7684e4","sha512":"66eaa1cf4bcdc0597604b08a4cf334a93af88f877f8a4b06ed73bc8e332b3b5d3ae5d756e13b031c007346722091d51638bfe27650e46aa779a2f76970e70cb5","ssdeep":"96:C+mKG30pLRQgPNbGMrYRXoj/oL17R7z/JUyOoJcpeqOVSOXsXV3DWgupbVnlG35X:CPEpLRfNBrYVA/oL1pO3oJcYNgO+Wtpe","tlshash":"0cb1b08dfd826fd6f64600b5ced78491478cd70b91f93c5c66ab932e1e8e4086049474","first_seen":"2026-04-24T15:23:41.456915Z","last_seen":"2026-06-18T19:31:13.721946Z","times_seen":17,"resource_available":false,"data":null}},"time_used":259,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":259,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"phase2-xrpfi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"phase2-xrpfi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"phase2-xrpfi.com/home_secure_desktop.webm","fqdn":"phase2-xrpfi.com","domain":"phase2-xrpfi.com","tld":"com"},"ip":{"addr":"172.67.197.157","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://phase2-xrpfi.com/","date":"2026-06-18T16:04:16.950Z","timestamp":1781798656950,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"phase2-xrpfi.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Jun 2026 09:59:40 GMT","end":"Sun, 06 Sep 2026 10:57:00 GMT"},"fingerprint":{"sha1":"09:46:15:EE:E5:36:A7:4E:0B:DE:64:A1:0E:7A:47:98:BE:3A:FD:ED","sha256":"51:A8:A6:DC:2F:00:48:0C:46:4D:A9:F7:15:02:FF:D6:42:A8:3D:2C:C5:A5:9C:AC:93:BC:77:16:5D:57:78:D2"}}},"request":{"raw":"GET /home_secure_desktop.webm HTTP/1.1\r\nHost: phase2-xrpfi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nRange: bytes=0-\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://phase2-xrpfi.com/\r\nCookie: cf_clearance=3dDDftPuP8Orcsu8EPJqRGA8SI7fXKOo9EyyENnMTko-1781798655-1.2.1.1-_.es7GeTtSCtToaztdb37PtL0Q1MMryDzKOb_HFjONKSI9SWJ9zmjHh9IzaNOCe_a49K45T2J9DDBD4cXu7AQbSKreno2FLMtJbW1pUwuCXj2GIAqDxX04QQM1Gdh0Coue1Jg4k1qEi7V2kg8jsZ_fFURgMEwRDOIW0bsW6aEtUPFrCAzfcKMM_OJSCc5QzEKNFM5VLoB6gCoW_dtlP7S9MwCDybt1LdlsSMlWrV966zQDu3.fSkgjPX7YH_BdCJ6xwpGuD1vdVBjXePcw4w4KmvHWZKNg1Z5atG_sqUEENZ3iLOTGCThDT23MgQWDjvSlwOjOfHtYL8Xg2_RKAusWFoV24lUhXqWZboI4DQQ_WrrAq4Y9HxV_0ij9Nxdl25xC594wFDj4xdba5WMvkP8OhM3ycqKmUuo9MC9VwQIHuaD5UccAdwS_PLO3wAXcL8MOKlt_zRwnUEUXAHQEznZYKp8xmkJjHzdLlqmOXou2jeRJC7MWL8F6xmw2v5fTwZ\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\ndate: Thu, 18 Jun 2026 16:04:17 GMT\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gxlgC3uX23ZhSy8qoa3%2BdU%2BmMAVExxv1LkamHj1BzxCjOaNpPp7CiJcAr2F3m66c8B5zLWiZfqUhICZnNhzzMKa0HuT5J8X7PkSuSBGpXrN6VWnXNaKRteUt5%2Bm1T2O7DEuW\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a0db8765ff98569b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":551,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-18T19:23:29.08979Z","times_seen":16522781,"resource_available":true,"data":null}},"time_used":241,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":241,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"phase2-xrpfi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"phase2-xrpfi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"phase2-xrpfi.com/XRPtoken-1.webp","fqdn":"phase2-xrpfi.com","domain":"phase2-xrpfi.com","tld":"com"},"ip":{"addr":"172.67.197.157","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://phase2-xrpfi.com/","date":"2026-06-18T16:04:17.010Z","timestamp":1781798657010,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"phase2-xrpfi.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Jun 2026 09:59:40 GMT","end":"Sun, 06 Sep 2026 10:57:00 GMT"},"fingerprint":{"sha1":"09:46:15:EE:E5:36:A7:4E:0B:DE:64:A1:0E:7A:47:98:BE:3A:FD:ED","sha256":"51:A8:A6:DC:2F:00:48:0C:46:4D:A9:F7:15:02:FF:D6:42:A8:3D:2C:C5:A5:9C:AC:93:BC:77:16:5D:57:78:D2"}}},"request":{"raw":"GET /XRPtoken-1.webp HTTP/1.1\r\nHost: phase2-xrpfi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://phase2-xrpfi.com/\r\nCookie: cf_clearance=3dDDftPuP8Orcsu8EPJqRGA8SI7fXKOo9EyyENnMTko-1781798655-1.2.1.1-_.es7GeTtSCtToaztdb37PtL0Q1MMryDzKOb_HFjONKSI9SWJ9zmjHh9IzaNOCe_a49K45T2J9DDBD4cXu7AQbSKreno2FLMtJbW1pUwuCXj2GIAqDxX04QQM1Gdh0Coue1Jg4k1qEi7V2kg8jsZ_fFURgMEwRDOIW0bsW6aEtUPFrCAzfcKMM_OJSCc5QzEKNFM5VLoB6gCoW_dtlP7S9MwCDybt1LdlsSMlWrV966zQDu3.fSkgjPX7YH_BdCJ6xwpGuD1vdVBjXePcw4w4KmvHWZKNg1Z5atG_sqUEENZ3iLOTGCThDT23MgQWDjvSlwOjOfHtYL8Xg2_RKAusWFoV24lUhXqWZboI4DQQ_WrrAq4Y9HxV_0ij9Nxdl25xC594wFDj4xdba5WMvkP8OhM3ycqKmUuo9MC9VwQIHuaD5UccAdwS_PLO3wAXcL8MOKlt_zRwnUEUXAHQEznZYKp8xmkJjHzdLlqmOXou2jeRJC7MWL8F6xmw2v5fTwZ\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: image/webp\r\netag: \"92d6dc10eacb6ed595bde9d339411440\"\r\nlast-modified: Mon, 08 Jun 2026 10:56:26 GMT\r\ndate: Thu, 18 Jun 2026 16:04:17 GMT\r\nserver: cloudflare\r\npriority: u=5,i\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=a1Vsgi7a5rAlQIMfjpsWLx%2FGUxr5eN1gGhHSF7tWd90taj29LVhPQ94PDNxqSEgqirXNzD615Xt%2F%2BOu16CXUdZ8yuiCSJK4Z7bb%2F2WUmSbDZpG9ooWTDL57d8dbSqDbKdz3i\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-length: 770\r\ncf-ray: a0db87665f9d569b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":770,"size_decoded":1477,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"92d6dc10eacb6ed595bde9d339411440","sha1":"b48cf9e7539432a267da5f2114c40d664a01a057","sha256":"f83d42e9b60e17ae4196b83256f08c986190602da2f3bc1744a6f5fbc5462f08","sha512":"a93bca4f8c6b5ad30d568a5c644e2fbba8aadebb169044943da32b65506c99984a6d6f4e9921f92b4dac1c27242c000906e72a6a086751efaf8afa69312fe690","ssdeep":"","tlshash":"f901b5668114991f4e481e1cb334b6a6f3474ac94a2178b8cda92a48a42d24c6067fa6","first_seen":"2026-04-24T15:23:41.472889Z","last_seen":"2026-06-18T19:31:13.723524Z","times_seen":17,"resource_available":false,"data":null}},"time_used":236,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":236,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"phase2-xrpfi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"phase2-xrpfi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"flare.network/_next/image?url=%2Fapi%2Fmedia%2Ffile%2FLayerZero_Logo_Full%25201.png\u0026w=256\u0026q=75","fqdn":"flare.network","domain":"flare.network","tld":"network"},"ip":{"addr":"104.18.2.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://phase2-xrpfi.com/","date":"2026-06-18T16:04:17.013Z","timestamp":1781798657013,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flare.network","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 30 May 2026 18:03:39 GMT","end":"Fri, 28 Aug 2026 19:03:19 GMT"},"fingerprint":{"sha1":"47:88:73:1C:C5:8C:7F:72:48:F5:86:52:5D:5A:F4:70:B0:E8:E7:E2","sha256":"5B:48:88:E3:A7:53:7C:1D:13:74:99:9E:60:33:D3:CC:4F:2C:01:E6:E6:72:E1:B9:AD:AE:1E:BF:FD:2B:82:93"}}},"request":{"raw":"GET /_next/image?url=%2Fapi%2Fmedia%2Ffile%2FLayerZero_Logo_Full%25201.png\u0026w=256\u0026q=75 HTTP/1.1\r\nHost: flare.network\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://phase2-xrpfi.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Thu, 18 Jun 2026 16:04:17 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1208\r\ncache-control: public, max-age=604800\r\nstrict-transport-security: max-age=15552000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: no-referrer-when-downgrade\r\npermissions-policy: geolocation=(), microphone=(), camera=()\r\naccept-ch: Sec-CH-Prefers-Color-Scheme\r\nvary: Accept\r\ncritical-ch: Sec-CH-Prefers-Color-Scheme\r\nx-powered-by: Next.js, Payload\r\netag: WX3Dz4sij4FgxSfCx2XaEGgkDvWSo0dyJ1GA6oh9bTs\r\ncontent-disposition: attachment; filename=\"LayerZero_Logo_Full%201.webp\"; filename*=UTF-8''LayerZero_Logo_Full%25201.webp\r\ncontent-security-policy: script-src 'none'; frame-src 'none'; sandbox;\r\nx-nextjs-cache: HIT\r\nvia: 1.1 google\r\naccept-ranges: bytes\r\nset-cookie: __cf_bm=doKbI9XLFg6o_C8OdicC1sCUHjpWqR5lO7srJlGmYrE-1781798657.0501664-1.0.1.1-IfNUcWw63PqeiQJOrFqQnkTSdYHNcmSr3Sbx7ly6SoLUguf.h02_O9fOy55DRYsL6o1JMvDktCKDC.EY2u5tp5OAI9ET1qK5UNLaaZIB5zAoJU5b.cfr2IVKFR5S4Twa; HttpOnly; SameSite=None; Secure; Path=/; Domain=flare.network; Expires=Thu, 18 Jun 2026 16:34:17 GMT\r\nage: 112534\r\nexpires: Thu, 25 Jun 2026 16:04:17 GMT\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\ncf-ray: a0db87668f5e723c-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Next.js","description":"Next.js is a React framework for developing single page Javascript applications.","website":"https://nextjs.org","common_platform_enumeration":"cpe:2.3:a:zeit:next.js:*:*:*:*:*:*:*:*","icon":"Next.js.svg","categories":["JavaScript frameworks","Web frameworks"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"React","description":"React is an open-source JavaScript library for building user interfaces or UI components.","website":"https://reactjs.org","common_platform_enumeration":"cpe:2.3:a:facebook:react:*:*:*:*:*:*:*:*","icon":"React.svg","categories":["JavaScript frameworks"]},{"name":"Webpack","description":"Webpack is an open-source JavaScript module bundler.","website":"https://webpack.js.org/","common_platform_enumeration":"","icon":"Webpack.svg","categories":["Miscellaneous"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1208,"size_decoded":2515,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"57a6e0ccc397ea7b740a6e0405bba3b5","sha1":"3cbac7d5fa1419b3c61f66c311b3eee7b9eff85f","sha256":"597dc3cf8b228f8160c527c2c765da1068240ef592a34772275180ea887d6d3b","sha512":"61719d11d2ddf9c20278344f009366debeeba583705f33c9fb1b95c9b627ee62c33a662c261180173bfdae490d645c623029c801b9f96db288612a43d9326ae3","ssdeep":"","tlshash":"5021b45503021db0c8dcffe059c2685fa17be5f91300ac195740b0a82ad41bee4ff82e","first_seen":"2025-08-11T21:39:04.775323Z","last_seen":"2026-06-18T19:31:13.708874Z","times_seen":29,"resource_available":false,"data":null}},"time_used":50,"timings":{"blocked":-1,"dns":14,"connect":4,"send":0,"wait":19,"receive":0,"ssl":13},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"phase2-xrpfi.com/favicon.ico","fqdn":"phase2-xrpfi.com","domain":"phase2-xrpfi.com","tld":"com"},"ip":{"addr":"172.67.197.157","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://phase2-xrpfi.com/","date":"2026-06-18T16:04:19.563Z","timestamp":1781798659563,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"phase2-xrpfi.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Jun 2026 09:59:40 GMT","end":"Sun, 06 Sep 2026 10:57:00 GMT"},"fingerprint":{"sha1":"09:46:15:EE:E5:36:A7:4E:0B:DE:64:A1:0E:7A:47:98:BE:3A:FD:ED","sha256":"51:A8:A6:DC:2F:00:48:0C:46:4D:A9:F7:15:02:FF:D6:42:A8:3D:2C:C5:A5:9C:AC:93:BC:77:16:5D:57:78:D2"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: phase2-xrpfi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://phase2-xrpfi.com/\r\nCookie: cf_clearance=3dDDftPuP8Orcsu8EPJqRGA8SI7fXKOo9EyyENnMTko-1781798655-1.2.1.1-_.es7GeTtSCtToaztdb37PtL0Q1MMryDzKOb_HFjONKSI9SWJ9zmjHh9IzaNOCe_a49K45T2J9DDBD4cXu7AQbSKreno2FLMtJbW1pUwuCXj2GIAqDxX04QQM1Gdh0Coue1Jg4k1qEi7V2kg8jsZ_fFURgMEwRDOIW0bsW6aEtUPFrCAzfcKMM_OJSCc5QzEKNFM5VLoB6gCoW_dtlP7S9MwCDybt1LdlsSMlWrV966zQDu3.fSkgjPX7YH_BdCJ6xwpGuD1vdVBjXePcw4w4KmvHWZKNg1Z5atG_sqUEENZ3iLOTGCThDT23MgQWDjvSlwOjOfHtYL8Xg2_RKAusWFoV24lUhXqWZboI4DQQ_WrrAq4Y9HxV_0ij9Nxdl25xC594wFDj4xdba5WMvkP8OhM3ycqKmUuo9MC9VwQIHuaD5UccAdwS_PLO3wAXcL8MOKlt_zRwnUEUXAHQEznZYKp8xmkJjHzdLlqmOXou2jeRJC7MWL8F6xmw2v5fTwZ\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: image/x-icon\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wkI0rxy2k%2BxrDcyoIt9fNrglcgg8V61mBF0c5jxMNKT%2FtKVVF9Cp1sVk1qFuvDrqCk9wee4R%2FfV8ga2RFrzqN92Q0lpzAo%2BtZSSkMvZpAwr1K7C%2FPjyzF4H%2BaRcgo3erNLAh\"}]}\r\nlast-modified: Mon, 08 Jun 2026 10:56:26 GMT\r\ndate: Thu, 18 Jun 2026 16:04:19 GMT\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 9\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\netag: W/\"dc270172d1648eb90a7ac9e496aaa7ec\"\r\npriority: u=6,i=?0\r\ncf-ray: a0db87764969569b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15406,"size_decoded":3486,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 3 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel","md5":"dc270172d1648eb90a7ac9e496aaa7ec","sha1":"4c6c6b1d4815a5022e215fe4667fe55ff908b13f","sha256":"d4e950e20f2728c5addc06853e7802699855c3ff9166375bea74da43e214d99b","sha512":"829338b30e6435447174ad43e0ff80659a93bd50aa00f135ac739203efb8e6b471864222250f2180af429b8396201611fdfbf75a6a2c252ef45a93a4f692640f","ssdeep":"192:l8WBBBBBB3vjlZXBbxEB+///////////7AFMCpQ:jbrXXEcd","tlshash":"bc62795166299107f9ab803ab34adb6af27ffec5e91b15261b407129103e09270fdf17","first_seen":"2026-01-21T22:11:30.922214Z","last_seen":"2026-06-18T19:31:13.70531Z","times_seen":71,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"phase2-xrpfi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"phase2-xrpfi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"phase2-xrpfi.com/cdn-cgi/challenge-platform/h/b/orchestrate/chl_page/v1?ray=a0db87371d33569b","fqdn":"phase2-xrpfi.com","domain":"phase2-xrpfi.com","tld":"com"},"ip":{"addr":"172.67.197.157","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://phase2-xrpfi.com/","date":"2026-06-18T16:04:09.698Z","timestamp":1781798649698,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"phase2-xrpfi.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Jun 2026 09:59:40 GMT","end":"Sun, 06 Sep 2026 10:57:00 GMT"},"fingerprint":{"sha1":"09:46:15:EE:E5:36:A7:4E:0B:DE:64:A1:0E:7A:47:98:BE:3A:FD:ED","sha256":"51:A8:A6:DC:2F:00:48:0C:46:4D:A9:F7:15:02:FF:D6:42:A8:3D:2C:C5:A5:9C:AC:93:BC:77:16:5D:57:78:D2"}}},"request":{"raw":"GET /cdn-cgi/challenge-platform/h/b/orchestrate/chl_page/v1?ray=a0db87371d33569b HTTP/1.1\r\nHost: phase2-xrpfi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://phase2-xrpfi.com/?__cf_chl_rt_tk=2nkry3hEtDpCu8iXtKwpLBKRoYTJl6CrokWi9rITwyY-1781798649-1.0.1.1-uvzDiaQqAf247HeqSNyKb35G1EbdJrax.RSUI07Vxyo\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: application/javascript; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\ncontent-encoding: zstd\r\ndate: Thu, 18 Jun 2026 16:04:09 GMT\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncf-ray: a0db8738ad3d569b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":189311,"size_decoded":71594,"mime_type":"application/javascript; charset=UTF-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"0182fdbed7d3e2b515649b076a2e35ef","sha1":"17a8530a2b9bcda05e868372af55334bf31bad05","sha256":"4c0c03be81a5272e66f50c2450f13b28aadc53b68054dd3b623d7dfc869c4d22","sha512":"180102833c426908f440da5303ecae1164bd5468f59011374ace7e08c6931f7f1a1a7b6432ef137be74b992d9e0c297452f34e370780fa5629c95a6bf809375e","ssdeep":"3072:f+vZvx3X7Gv8pFf5DfBMK8H3ivut1e/D34YiNscOcJS/:f+vZvx3X7Gv8D5Dd8XAD36OaS/","tlshash":"6904e78d3bc570474282ab7501b77fdab13b4c8002376829e881a4d4fdb6b99b96f5cd","first_seen":"2026-06-18T16:06:18.845367Z","last_seen":"2026-06-18T16:06:18.845367Z","times_seen":1,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"phase2-xrpfi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"phase2-xrpfi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"phase2-xrpfi.com/favicon.ico","fqdn":"phase2-xrpfi.com","domain":"phase2-xrpfi.com","tld":"com"},"ip":{"addr":"172.67.197.157","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://phase2-xrpfi.com/","date":"2026-06-18T16:04:09.727Z","timestamp":1781798649727,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"phase2-xrpfi.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Jun 2026 09:59:40 GMT","end":"Sun, 06 Sep 2026 10:57:00 GMT"},"fingerprint":{"sha1":"09:46:15:EE:E5:36:A7:4E:0B:DE:64:A1:0E:7A:47:98:BE:3A:FD:ED","sha256":"51:A8:A6:DC:2F:00:48:0C:46:4D:A9:F7:15:02:FF:D6:42:A8:3D:2C:C5:A5:9C:AC:93:BC:77:16:5D:57:78:D2"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: phase2-xrpfi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://phase2-xrpfi.com/?__cf_chl_rt_tk=2nkry3hEtDpCu8iXtKwpLBKRoYTJl6CrokWi9rITwyY-1781798649-1.0.1.1-uvzDiaQqAf247HeqSNyKb35G1EbdJrax.RSUI07Vxyo\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: image/x-icon\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TuK1%2By4WY4OAvhROAnXb3QZwRvbpmru7WZtG1mgV1qwDgwFOCbVLx%2FFZiIYhZA0pgmV8Qee5q8r8L433kRNzokyze0MGKZ%2B5idNRgbGe3ME1wHbG2jRI6l4xJ2bos0pRHWS3\"}]}\r\nlast-modified: Mon, 08 Jun 2026 10:56:26 GMT\r\ndate: Thu, 18 Jun 2026 16:04:10 GMT\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\netag: W/\"dc270172d1648eb90a7ac9e496aaa7ec\"\r\npriority: u=6,i=?0\r\ncf-ray: a0db8738cd3e569b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15406,"size_decoded":3507,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 3 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel","md5":"dc270172d1648eb90a7ac9e496aaa7ec","sha1":"4c6c6b1d4815a5022e215fe4667fe55ff908b13f","sha256":"d4e950e20f2728c5addc06853e7802699855c3ff9166375bea74da43e214d99b","sha512":"829338b30e6435447174ad43e0ff80659a93bd50aa00f135ac739203efb8e6b471864222250f2180af429b8396201611fdfbf75a6a2c252ef45a93a4f692640f","ssdeep":"192:l8WBBBBBB3vjlZXBbxEB+///////////7AFMCpQ:jbrXXEcd","tlshash":"bc62795166299107f9ab803ab34adb6af27ffec5e91b15261b407129103e09270fdf17","first_seen":"2026-01-21T22:11:30.922214Z","last_seen":"2026-06-18T19:31:13.70531Z","times_seen":71,"resource_available":false,"data":null}},"time_used":518,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":416,"receive":102,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"phase2-xrpfi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"phase2-xrpfi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/flow/ov1/888930064:1781795229:ULXbcCJinkVtfIv0XYZz-roMXsa3oLUICDmOblEQ1Qs/a0db873aa9960daa/9OfSuXNJKMr3ROUHE0FLUF0ETX7cadHuyiPiQcFKUyQ-1781798650-1.2.1.1-Q2v29dUm8tx5Z5ujKo9kGKrXEWcMQhINNBbM3KRQw8fMktPoUcBj9yPvCTbkhptR","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/nbstv/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","date":"2026-06-18T16:04:10.372Z","timestamp":1781798650372,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"challenges.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 16 Jun 2026 20:15:28 GMT","end":"Mon, 14 Sep 2026 21:15:13 GMT"},"fingerprint":{"sha1":"77:27:72:42:CF:51:E8:8C:7C:3E:8C:4C:A1:F0:9A:86:96:B9:0A:16","sha256":"ED:7C:F7:38:B3:0F:00:86:32:D1:14:CE:C0:FF:CA:0E:7C:86:EE:49:51:EF:A4:4B:AA:5C:B6:7C:00:B5:3D:F3"}}},"request":{"raw":"POST /cdn-cgi/challenge-platform/h/b/flow/ov1/888930064:1781795229:ULXbcCJinkVtfIv0XYZz-roMXsa3oLUICDmOblEQ1Qs/a0db873aa9960daa/9OfSuXNJKMr3ROUHE0FLUF0ETX7cadHuyiPiQcFKUyQ-1781798650-1.2.1.1-Q2v29dUm8tx5Z5ujKo9kGKrXEWcMQhINNBbM3KRQw8fMktPoUcBj9yPvCTbkhptR HTTP/1.1\r\nHost: challenges.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/nbstv/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto\r\ncf-chl: 9OfSuXNJKMr3ROUHE0FLUF0ETX7cadHuyiPiQcFKUyQ-1781798650-1.2.1.1-Q2v29dUm8tx5Z5ujKo9kGKrXEWcMQhINNBbM3KRQw8fMktPoUcBj9yPvCTbkhptR\r\ncf-chl-ra: 0\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 4684\r\nOrigin: https://challenges.cloudflare.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 18 Jun 2026 16:04:10 GMT\r\ncontent-type: text/plain; charset=UTF-8\r\ncf-chl-gen: 2HQ3Hj6JJzL4j6Ep0eJrhHZWD3AUJ0Jl1Ik6JgrgPtotJ4us9/vA1KFVjTlRO4+HY2Jf4y0CjKvAhFiDEapq208xgdc4k2ei3sMqAV7MaWgVl9oBlwtVfbevrxLPf7RujxLBNw5D4crnsIiMY2+FP9UgVYKiX9fmiI4ck0z6IMyAGFrbYO3bBik8XwEmHXee0uyoCTkbY9bSq/v6HQHURyUjOtoQIz2UpHk7UgeEUmPgECSbDuhAYHH1wnAwsLwgjiibrNDMicap8ctHrikzW7PxFGxY7gocRBLYa6T50V0qOZ6p43M9R4T1yE6qooUeR/1Gbhae8HBTg3YU5w6NKX38w3hZSaQG/mn3Rm9UglVjxyvmSmUldoU2e8GArZRj/8DyvV2pQjqSwS+rMZI7ujZlhcDOVM2lfsJgQ9E4CGVbZZ8Yx4ZgJIul4wWhkFPQE759Epw+kMESfXuWqMvQvTs3Yrh96yRdzL9tBRpmwPMl0BFgn1vgT8zxdn2igRCPMY9BwfnVcQNS73BJE4fwdNRC77s7Y+QlqcvFL+q0F76zl0MWRaqTeAy1wTN4FtcZcn8X7z/xgwy4By7iZ+A7SDCp6hwGA86aVWQM48qyszwvwwUCbvYWWeGQIYlkzrEDCw1U2APU5t56nqqs20IMdrwNoirqDeFdBs0zNNHzcr+XhUmNJ7fOcfSGqWAb+uoTymN1tpEpnz1k7ev8b/uCYRkf0yRbPaqo82sTeLOIt8vWj/hi70Nc/hzUbgqw5/cC9oS8v/qvcDIf5HR5ncqzMRWg0ICOOlhTvyLGfTu1LDePaXTe8VXw8PR1G2NzV9EIB+CI8YpnXBGQ2ejP/HWdaZ0QhuYkK+lfAmEkKxReT38fHeOB3Ce3XLDhgkKzrXB0$tyVb5mz9mGqDmw5HjTa4RA==\r\ntiming-allow-origin: https://challenges.cloudflare.com\r\npriority: u=3,i=?0\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: a0db873cda040daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":446572,"size_decoded":336811,"mime_type":"text/plain; charset=UTF-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"b50ff4a4530e43341fda7d7efef74c55","sha1":"82da6fb65b339fe535431bb36a94f6599a24a347","sha256":"d2fa4764a51707a8fb2cde255609a5d7b50993e36218e295cf51c4403be48541","sha512":"337db05ca86a63b9a7611c0bb0c6abf2f4ebab4d73926379439666031654f1fb2ad19f873dfbc28bc2793263f0a9de33c0110d4ecc969a06dd3d1e0bbf121739","ssdeep":"12288:y8Rs/X8U+bHNGShkDpisbgK/Ph6PVs7Z47pbw:yYJHudisbgo4s947a","tlshash":"d49423bc12771f4f0e67981ed6690a161e54cec8683089d55dfd3e8b888fe1c4e7852e","first_seen":"2026-06-18T16:06:18.84642Z","last_seen":"2026-06-18T16:06:18.84642Z","times_seen":1,"resource_available":false,"data":null}},"time_used":87,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":80,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/d/a0db873aa9960daa/1781798650381/cy_f13IV-Ep7CVi","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/nbstv/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","date":"2026-06-18T16:04:11.797Z","timestamp":1781798651797,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"challenges.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 16 Jun 2026 20:15:28 GMT","end":"Mon, 14 Sep 2026 21:15:13 GMT"},"fingerprint":{"sha1":"77:27:72:42:CF:51:E8:8C:7C:3E:8C:4C:A1:F0:9A:86:96:B9:0A:16","sha256":"ED:7C:F7:38:B3:0F:00:86:32:D1:14:CE:C0:FF:CA:0E:7C:86:EE:49:51:EF:A4:4B:AA:5C:B6:7C:00:B5:3D:F3"}}},"request":{"raw":"GET /cdn-cgi/challenge-platform/h/b/d/a0db873aa9960daa/1781798650381/cy_f13IV-Ep7CVi HTTP/1.1\r\nHost: challenges.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/nbstv/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 18 Jun 2026 16:04:11 GMT\r\ncontent-type: image/png\r\ncontent-length: 1736\r\npriority: u=6,i\r\nserver: cloudflare\r\ncf-ray: a0db8745cf810daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1736,"size_decoded":1957,"mime_type":"image/png","magic":"PNG image data, 91 x 18, 8-bit grayscale, non-interlaced","md5":"a5f7f38c8bedfe356b08004ea6fe2a99","sha1":"4d631ec69265e2c679d718badb6e1359a4ca103c","sha256":"c377337b36d9309b5a594ae0272c63a8ade142146dbee3f57fa83f1abd2e3dd0","sha512":"8a95e5bac227d627d743fb526088c626a37e74df9833fde059b0119de9b14098138cb8e1f179c8dcbae21310f15505dcc2668736bb276e113a5a20307f071a2d","ssdeep":"","tlshash":"453112fb9a90c825ea51043285302010c83460110022011401034d17012160c124c30a","first_seen":"2026-06-18T16:06:18.847442Z","last_seen":"2026-06-18T16:06:18.847442Z","times_seen":1,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"phase2-xrpfi.com/b85a5d1553cdf244.css","fqdn":"phase2-xrpfi.com","domain":"phase2-xrpfi.com","tld":"com"},"ip":{"addr":"172.67.197.157","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://phase2-xrpfi.com/","date":"2026-06-18T16:04:16.433Z","timestamp":1781798656433,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"phase2-xrpfi.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Jun 2026 09:59:40 GMT","end":"Sun, 06 Sep 2026 10:57:00 GMT"},"fingerprint":{"sha1":"09:46:15:EE:E5:36:A7:4E:0B:DE:64:A1:0E:7A:47:98:BE:3A:FD:ED","sha256":"51:A8:A6:DC:2F:00:48:0C:46:4D:A9:F7:15:02:FF:D6:42:A8:3D:2C:C5:A5:9C:AC:93:BC:77:16:5D:57:78:D2"}}},"request":{"raw":"GET /b85a5d1553cdf244.css HTTP/1.1\r\nHost: phase2-xrpfi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://phase2-xrpfi.com/\r\nCookie: cf_clearance=3dDDftPuP8Orcsu8EPJqRGA8SI7fXKOo9EyyENnMTko-1781798655-1.2.1.1-_.es7GeTtSCtToaztdb37PtL0Q1MMryDzKOb_HFjONKSI9SWJ9zmjHh9IzaNOCe_a49K45T2J9DDBD4cXu7AQbSKreno2FLMtJbW1pUwuCXj2GIAqDxX04QQM1Gdh0Coue1Jg4k1qEi7V2kg8jsZ_fFURgMEwRDOIW0bsW6aEtUPFrCAzfcKMM_OJSCc5QzEKNFM5VLoB6gCoW_dtlP7S9MwCDybt1LdlsSMlWrV966zQDu3.fSkgjPX7YH_BdCJ6xwpGuD1vdVBjXePcw4w4KmvHWZKNg1Z5atG_sqUEENZ3iLOTGCThDT23MgQWDjvSlwOjOfHtYL8Xg2_RKAusWFoV24lUhXqWZboI4DQQ_WrrAq4Y9HxV_0ij9Nxdl25xC594wFDj4xdba5WMvkP8OhM3ycqKmUuo9MC9VwQIHuaD5UccAdwS_PLO3wAXcL8MOKlt_zRwnUEUXAHQEznZYKp8xmkJjHzdLlqmOXou2jeRJC7MWL8F6xmw2v5fTwZ\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/css;charset=utf-8\r\npriority: u=2,i=?0\r\nlast-modified: Mon, 08 Jun 2026 10:56:26 GMT\r\ndate: Thu, 18 Jun 2026 16:04:16 GMT\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"0544206cae8203dbe2bddff0ed234f11\"\r\ncontent-encoding: zstd\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AWyqQr8oyN7Ut%2BsVEDbwiACevJYZs5RrLOJZJnkhvZ03TNwbfi3Q8sZKA%2FHP7nfEk0djKtSCzawb8W5KtzK1sm1PHMw10mLOk0kzr3pqjV41NeW3XbCUYgOPpFa3rPeReWZ9\"}]}\r\ncf-ray: a0db8762bf4f569b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":78271,"size_decoded":10761,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (11983)","md5":"0544206cae8203dbe2bddff0ed234f11","sha1":"eada2197163e4de60dbb7f5900849c8540544d62","sha256":"7a79c352410f825d5b1cd1b60d0611257038a32dd280fc5b13869edaaf097e05","sha512":"fe89823d5122a5be72cd040028d0f9d3217d3ff4a6649eb067d4ae9fab81dd0410155d0d67866e3422edff832985bb3e27c8462e995e01384d45f568b2531228","ssdeep":"384:XeUw08ZHQlDjjNQDdUgLpOy5vIdSJaCaJCrm74FW9BDkKcKphgyoUhDcJH+GldYg:QZwlDjjODJ5gcrq4+p/CGMUxG","tlshash":"0a73fe57b5f1132fd02e2052f1c25c48dfc4b0dbf1899fd0650e9dea429aab266f1b86","first_seen":"2026-06-18T15:59:02.817561Z","last_seen":"2026-06-18T19:31:13.747334Z","times_seen":12,"resource_available":false,"data":null}},"time_used":459,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":242,"receive":217,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"phase2-xrpfi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"phase2-xrpfi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"phase2-xrpfi.com/64cb809db4dcd785.css","fqdn":"phase2-xrpfi.com","domain":"phase2-xrpfi.com","tld":"com"},"ip":{"addr":"172.67.197.157","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://phase2-xrpfi.com/","date":"2026-06-18T16:04:16.436Z","timestamp":1781798656436,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"phase2-xrpfi.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Jun 2026 09:59:40 GMT","end":"Sun, 06 Sep 2026 10:57:00 GMT"},"fingerprint":{"sha1":"09:46:15:EE:E5:36:A7:4E:0B:DE:64:A1:0E:7A:47:98:BE:3A:FD:ED","sha256":"51:A8:A6:DC:2F:00:48:0C:46:4D:A9:F7:15:02:FF:D6:42:A8:3D:2C:C5:A5:9C:AC:93:BC:77:16:5D:57:78:D2"}}},"request":{"raw":"GET /64cb809db4dcd785.css HTTP/1.1\r\nHost: phase2-xrpfi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://phase2-xrpfi.com/\r\nCookie: cf_clearance=3dDDftPuP8Orcsu8EPJqRGA8SI7fXKOo9EyyENnMTko-1781798655-1.2.1.1-_.es7GeTtSCtToaztdb37PtL0Q1MMryDzKOb_HFjONKSI9SWJ9zmjHh9IzaNOCe_a49K45T2J9DDBD4cXu7AQbSKreno2FLMtJbW1pUwuCXj2GIAqDxX04QQM1Gdh0Coue1Jg4k1qEi7V2kg8jsZ_fFURgMEwRDOIW0bsW6aEtUPFrCAzfcKMM_OJSCc5QzEKNFM5VLoB6gCoW_dtlP7S9MwCDybt1LdlsSMlWrV966zQDu3.fSkgjPX7YH_BdCJ6xwpGuD1vdVBjXePcw4w4KmvHWZKNg1Z5atG_sqUEENZ3iLOTGCThDT23MgQWDjvSlwOjOfHtYL8Xg2_RKAusWFoV24lUhXqWZboI4DQQ_WrrAq4Y9HxV_0ij9Nxdl25xC594wFDj4xdba5WMvkP8OhM3ycqKmUuo9MC9VwQIHuaD5UccAdwS_PLO3wAXcL8MOKlt_zRwnUEUXAHQEznZYKp8xmkJjHzdLlqmOXou2jeRJC7MWL8F6xmw2v5fTwZ\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/css;charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=e765NgIWy19o5OfADTbd1xgwEY6LRn%2B%2Bb%2FSC%2BXXqeHRxg5O0zZX%2Bm6coRZStPWzG6ajKtPifeRKPMVfjTkh24BUMXan5V%2FnhVq9V%2BRHMRczO4TbJ9BpinwGF%2BpYdX8gk3Emg\"}]}\r\nlast-modified: Mon, 08 Jun 2026 10:56:26 GMT\r\ndate: Thu, 18 Jun 2026 16:04:16 GMT\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\netag: W/\"f12ef104c3b25c730865f7ed5789c322\"\r\npriority: u=2,i=?0\r\ncf-ray: a0db8762bf53569b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16973,"size_decoded":4084,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (4867)","md5":"f12ef104c3b25c730865f7ed5789c322","sha1":"ba19c7054add04f0bf0e992a881527141eec062e","sha256":"0571062658eaf4268d877c454446432d81fb44585bc7efe0ebf01d4c8369601f","sha512":"6218a6e159f9a86b93a4512c4c4081e8f47d83ea4d5f96eae247ee578b0174a04ab1a4eb15fa30d8a84f7088ca2f9e4437a1ee6dc83304e5c5ae265a99ea6232","ssdeep":"384:SY6Rh6yXjZQmtVAYJQK1h/+SG5JZnWwrf7AZnp:OftpJVTDSJZWwrzAZnp","tlshash":"ed7235856360192793170e3297a18bb4eaa458c14bc3dff990c1edd4c2f6db913af296","first_seen":"2026-04-24T15:23:41.465528Z","last_seen":"2026-06-18T19:31:13.744995Z","times_seen":19,"resource_available":false,"data":null}},"time_used":392,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":304,"receive":88,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"phase2-xrpfi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"phase2-xrpfi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"phase2-xrpfi.com/city_ori.webm","fqdn":"phase2-xrpfi.com","domain":"phase2-xrpfi.com","tld":"com"},"ip":{"addr":"172.67.197.157","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://phase2-xrpfi.com/","date":"2026-06-18T16:04:16.653Z","timestamp":1781798656653,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"phase2-xrpfi.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Jun 2026 09:59:40 GMT","end":"Sun, 06 Sep 2026 10:57:00 GMT"},"fingerprint":{"sha1":"09:46:15:EE:E5:36:A7:4E:0B:DE:64:A1:0E:7A:47:98:BE:3A:FD:ED","sha256":"51:A8:A6:DC:2F:00:48:0C:46:4D:A9:F7:15:02:FF:D6:42:A8:3D:2C:C5:A5:9C:AC:93:BC:77:16:5D:57:78:D2"}}},"request":{"raw":"GET /city_ori.webm HTTP/1.1\r\nHost: phase2-xrpfi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nRange: bytes=0-\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://phase2-xrpfi.com/\r\nCookie: cf_clearance=3dDDftPuP8Orcsu8EPJqRGA8SI7fXKOo9EyyENnMTko-1781798655-1.2.1.1-_.es7GeTtSCtToaztdb37PtL0Q1MMryDzKOb_HFjONKSI9SWJ9zmjHh9IzaNOCe_a49K45T2J9DDBD4cXu7AQbSKreno2FLMtJbW1pUwuCXj2GIAqDxX04QQM1Gdh0Coue1Jg4k1qEi7V2kg8jsZ_fFURgMEwRDOIW0bsW6aEtUPFrCAzfcKMM_OJSCc5QzEKNFM5VLoB6gCoW_dtlP7S9MwCDybt1LdlsSMlWrV966zQDu3.fSkgjPX7YH_BdCJ6xwpGuD1vdVBjXePcw4w4KmvHWZKNg1Z5atG_sqUEENZ3iLOTGCThDT23MgQWDjvSlwOjOfHtYL8Xg2_RKAusWFoV24lUhXqWZboI4DQQ_WrrAq4Y9HxV_0ij9Nxdl25xC594wFDj4xdba5WMvkP8OhM3ycqKmUuo9MC9VwQIHuaD5UccAdwS_PLO3wAXcL8MOKlt_zRwnUEUXAHQEznZYKp8xmkJjHzdLlqmOXou2jeRJC7MWL8F6xmw2v5fTwZ\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: video/webm\r\netag: \"a51f5d83c91adbd04ed54a6b5479ea81\"\r\nlast-modified: Mon, 08 Jun 2026 10:56:26 GMT\r\ndate: Thu, 18 Jun 2026 16:04:16 GMT\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EkB2GN8kixdapRL8XAsyGDFAdXYacV%2BggimPyGh90HwqKa71Wx4%2FebgEm%2BHWQFPuP%2FspycRLaiPFWX%2B%2FprcWR0UY%2BjAPVVSa2yVOrr%2FUdYS83%2FQSuwgqbZGm%2BNANrSsrK%2F4d\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a0db87641f70569b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":262032,"size_decoded":262713,"mime_type":"video/webm","magic":"WebM","md5":"a51f5d83c91adbd04ed54a6b5479ea81","sha1":"bbc60e6eaa15ec3083c4e7dfddddfc52927d6be2","sha256":"63210defbb886035555e53410789cdc204909047a1aa139ccd2abfb78d20b0ba","sha512":"bba08f3a88d355eeaa622bb29f864057f71b6b16034f84d3acb4efde3b8fefc7491eb6f20777f8bc651709ac494f0423820f2dcf4210dbab68a7522d7d83e35d","ssdeep":"6144:rd9H6MksUSF1qtWswBcgN4+F/McVr7yZVArUdBMLbi4Acq:r3aMsSOQswjN/RMWHBrEBEbbHq","tlshash":"ce441211ccd6fa67d84c92f1b23e065e8494805fa523d3452db7f01ee67ab8de90a4b3","first_seen":"2025-10-21T19:21:03.381512Z","last_seen":"2026-06-18T19:31:13.709587Z","times_seen":25,"resource_available":false,"data":null}},"time_used":731,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":341,"receive":390,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"phase2-xrpfi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"phase2-xrpfi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"phase2-xrpfi.com/home_secure_desktop.mov","fqdn":"phase2-xrpfi.com","domain":"phase2-xrpfi.com","tld":"com"},"ip":{"addr":"172.67.197.157","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://phase2-xrpfi.com/","date":"2026-06-18T16:04:16.717Z","timestamp":1781798656717,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"phase2-xrpfi.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Jun 2026 09:59:40 GMT","end":"Sun, 06 Sep 2026 10:57:00 GMT"},"fingerprint":{"sha1":"09:46:15:EE:E5:36:A7:4E:0B:DE:64:A1:0E:7A:47:98:BE:3A:FD:ED","sha256":"51:A8:A6:DC:2F:00:48:0C:46:4D:A9:F7:15:02:FF:D6:42:A8:3D:2C:C5:A5:9C:AC:93:BC:77:16:5D:57:78:D2"}}},"request":{"raw":"GET /home_secure_desktop.mov HTTP/1.1\r\nHost: phase2-xrpfi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nRange: bytes=0-\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://phase2-xrpfi.com/\r\nCookie: cf_clearance=3dDDftPuP8Orcsu8EPJqRGA8SI7fXKOo9EyyENnMTko-1781798655-1.2.1.1-_.es7GeTtSCtToaztdb37PtL0Q1MMryDzKOb_HFjONKSI9SWJ9zmjHh9IzaNOCe_a49K45T2J9DDBD4cXu7AQbSKreno2FLMtJbW1pUwuCXj2GIAqDxX04QQM1Gdh0Coue1Jg4k1qEi7V2kg8jsZ_fFURgMEwRDOIW0bsW6aEtUPFrCAzfcKMM_OJSCc5QzEKNFM5VLoB6gCoW_dtlP7S9MwCDybt1LdlsSMlWrV966zQDu3.fSkgjPX7YH_BdCJ6xwpGuD1vdVBjXePcw4w4KmvHWZKNg1Z5atG_sqUEENZ3iLOTGCThDT23MgQWDjvSlwOjOfHtYL8Xg2_RKAusWFoV24lUhXqWZboI4DQQ_WrrAq4Y9HxV_0ij9Nxdl25xC594wFDj4xdba5WMvkP8OhM3ycqKmUuo9MC9VwQIHuaD5UccAdwS_PLO3wAXcL8MOKlt_zRwnUEUXAHQEznZYKp8xmkJjHzdLlqmOXou2jeRJC7MWL8F6xmw2v5fTwZ\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\ndate: Thu, 18 Jun 2026 16:04:16 GMT\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RC8Vshrq5szN0o92MRgOm8i9juSTiOnu8geUv7Vs5vccgFJDCeNENVKGEWcLP9gT9L7njFFk%2FiQ8ShIqkfmH46WIdUkfT179zEmtOlyM62Yoa%2Fwm9SN%2B7JFsWz0lElgBghOP\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a0db87647f79569b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":524,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-18T19:23:29.08979Z","times_seen":16522781,"resource_available":true,"data":null}},"time_used":221,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":221,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"phase2-xrpfi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"phase2-xrpfi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"phase2-xrpfi.com/","fqdn":"phase2-xrpfi.com","domain":"phase2-xrpfi.com","tld":"com"},"ip":{"addr":"172.67.197.157","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-06-18T16:04:09.399Z","timestamp":1781798649399,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"phase2-xrpfi.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Jun 2026 09:59:40 GMT","end":"Sun, 06 Sep 2026 10:57:00 GMT"},"fingerprint":{"sha1":"09:46:15:EE:E5:36:A7:4E:0B:DE:64:A1:0E:7A:47:98:BE:3A:FD:ED","sha256":"51:A8:A6:DC:2F:00:48:0C:46:4D:A9:F7:15:02:FF:D6:42:A8:3D:2C:C5:A5:9C:AC:93:BC:77:16:5D:57:78:D2"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: phase2-xrpfi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 403 \r\naccept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA\r\ncf-mitigated: challenge\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-security-policy: default-src 'none'; script-src 'nonce-PcowITHjHxp4s8Dkt5yhLo' 'unsafe-eval' https://challenges.cloudflare.com; script-src-attr 'none'; style-src 'unsafe-inline'; img-src 'self' https://challenges.cloudflare.com; connect-src 'self' https://challenges.cloudflare.com; frame-src 'self' https://challenges.cloudflare.com blob:; child-src 'self' https://challenges.cloudflare.com blob:; worker-src blob:; form-action http: https:; base-uri 'self'\r\nserver: cloudflare\r\ncritical-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA\r\ncross-origin-embedder-policy: require-corp\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: same-origin\r\norigin-agent-cluster: ?1\r\npermissions-policy: accelerometer=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=(),xr-spatial-tracking=*\r\nreferrer-policy: same-origin\r\nserver-timing: chlray;desc=\"a0db87371d33569b\", cfExtPri\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oe2ZnVeOZ03nHU1jCaucsCYI5QMFMfGC4zhmiNXj04b2dqA80YrAMnTyAgzJVMAvo7YHdB2%2BdOirxWs29IJgVRRjHgVelvLJW1a1uyJWj9YcIzfiCFj3LWrwOj7ArXfdi0bE\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Thu, 18 Jun 2026 16:04:09 GMT\r\npriority: u=0,i\r\ncontent-encoding: zstd\r\ncf-ray: a0db87371d33569b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5577,"size_decoded":5533,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (5577), with no line terminators","md5":"9f233fd8eed2d8b76f9370579a412e89","sha1":"f23bb4bdd1f35f8a28a3abbc44c094bb636012b3","sha256":"c4258818a53bf13988d11a314f0710f8211d325a6af306725c666c8317a34590","sha512":"7486cfcbf2b574ca85045a488c908834f1a7044d14fa3850c9e1d2a74cacef4b962abbaf15b66d70238203043ef59ddac9a6f31e12f64a38eeed86bd90365ba0","ssdeep":"96:PNyVtoXZzIEb0EaW87LLI/tUYBAwnVYCuq1bzYzueh8sQmw:PNwtkCBfI/tUYBAwnbuqZsyiXw","tlshash":"ffb13ae3ec30801f97b31ba394b3b35c9216f986eb0a9181c5c1c69dd2ddfaf8151598","first_seen":"2026-06-18T16:06:18.850611Z","last_seen":"2026-06-18T16:06:18.850611Z","times_seen":1,"resource_available":true,"data":null}},"time_used":78,"timings":{"blocked":-1,"dns":29,"connect":20,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"phase2-xrpfi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"phase2-xrpfi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"phase2-xrpfi.com/6cdcfbcc140e7bef.css","fqdn":"phase2-xrpfi.com","domain":"phase2-xrpfi.com","tld":"com"},"ip":{"addr":"172.67.197.157","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://phase2-xrpfi.com/","date":"2026-06-18T16:04:16.429Z","timestamp":1781798656429,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"phase2-xrpfi.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Jun 2026 09:59:40 GMT","end":"Sun, 06 Sep 2026 10:57:00 GMT"},"fingerprint":{"sha1":"09:46:15:EE:E5:36:A7:4E:0B:DE:64:A1:0E:7A:47:98:BE:3A:FD:ED","sha256":"51:A8:A6:DC:2F:00:48:0C:46:4D:A9:F7:15:02:FF:D6:42:A8:3D:2C:C5:A5:9C:AC:93:BC:77:16:5D:57:78:D2"}}},"request":{"raw":"GET /6cdcfbcc140e7bef.css HTTP/1.1\r\nHost: phase2-xrpfi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://phase2-xrpfi.com/\r\nCookie: cf_clearance=3dDDftPuP8Orcsu8EPJqRGA8SI7fXKOo9EyyENnMTko-1781798655-1.2.1.1-_.es7GeTtSCtToaztdb37PtL0Q1MMryDzKOb_HFjONKSI9SWJ9zmjHh9IzaNOCe_a49K45T2J9DDBD4cXu7AQbSKreno2FLMtJbW1pUwuCXj2GIAqDxX04QQM1Gdh0Coue1Jg4k1qEi7V2kg8jsZ_fFURgMEwRDOIW0bsW6aEtUPFrCAzfcKMM_OJSCc5QzEKNFM5VLoB6gCoW_dtlP7S9MwCDybt1LdlsSMlWrV966zQDu3.fSkgjPX7YH_BdCJ6xwpGuD1vdVBjXePcw4w4KmvHWZKNg1Z5atG_sqUEENZ3iLOTGCThDT23MgQWDjvSlwOjOfHtYL8Xg2_RKAusWFoV24lUhXqWZboI4DQQ_WrrAq4Y9HxV_0ij9Nxdl25xC594wFDj4xdba5WMvkP8OhM3ycqKmUuo9MC9VwQIHuaD5UccAdwS_PLO3wAXcL8MOKlt_zRwnUEUXAHQEznZYKp8xmkJjHzdLlqmOXou2jeRJC7MWL8F6xmw2v5fTwZ\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/css;charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GQP5Rb6TgPgi0u2TdFMPYOZSaINSYZA%2F%2B6%2BmVr%2Bntz%2BbvcSz1iS3IOsltwhZJ6T%2FODWay5YCiTufBLObARgMKi6F4sZIRD2AbipZQxEPtmU295HQ5uunm2KZc2P7xJZ7xj8v\"}]}\r\nlast-modified: Mon, 08 Jun 2026 10:56:26 GMT\r\ndate: Thu, 18 Jun 2026 16:04:16 GMT\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\netag: W/\"9e03833ab9c10d491a04b6dae234ef09\"\r\npriority: u=2,i=?0\r\ncf-ray: a0db8762bf4e569b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":120415,"size_decoded":15470,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (11939)","md5":"9e03833ab9c10d491a04b6dae234ef09","sha1":"69fb24e452ef965718a0d642cb5b82cdbb00d1e6","sha256":"9ce5d79c8b23756bbfb0929f53cd795e5328d3b92f13b78f0cb0873c3e6015aa","sha512":"43d0131d1c76623eabfbe78b300fde4a1e9db2c841220dd06fd7cf4dead24941a0d11fd42958c94cd481f2e6e12bbfa8f4dc86e56211c4421919db74cdd0b47a","ssdeep":"384:S1nJibNBbTA8orrhvUHQ1SS7GK40MAEQgzROuxTf3C5d2PgiKPVID8JXF44pivra:aZovqqlGoBB1c58rmsWNf","tlshash":"ecc31f43e9f4133fa05d2106f9d16808efc0a4ebf59b4fe0580edde54489aa66af2747","first_seen":"2026-04-24T15:23:41.464721Z","last_seen":"2026-06-18T19:31:13.751042Z","times_seen":18,"resource_available":false,"data":null}},"time_used":447,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":245,"receive":202,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"phase2-xrpfi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"phase2-xrpfi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"phase2-xrpfi.com/assets/framebundle-grid.js","fqdn":"phase2-xrpfi.com","domain":"phase2-xrpfi.com","tld":"com"},"ip":{"addr":"172.67.197.157","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://phase2-xrpfi.com/","date":"2026-06-18T16:04:16.492Z","timestamp":1781798656492,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"phase2-xrpfi.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Jun 2026 09:59:40 GMT","end":"Sun, 06 Sep 2026 10:57:00 GMT"},"fingerprint":{"sha1":"09:46:15:EE:E5:36:A7:4E:0B:DE:64:A1:0E:7A:47:98:BE:3A:FD:ED","sha256":"51:A8:A6:DC:2F:00:48:0C:46:4D:A9:F7:15:02:FF:D6:42:A8:3D:2C:C5:A5:9C:AC:93:BC:77:16:5D:57:78:D2"}}},"request":{"raw":"GET /assets/framebundle-grid.js HTTP/1.1\r\nHost: phase2-xrpfi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://phase2-xrpfi.com/\r\nCookie: cf_clearance=3dDDftPuP8Orcsu8EPJqRGA8SI7fXKOo9EyyENnMTko-1781798655-1.2.1.1-_.es7GeTtSCtToaztdb37PtL0Q1MMryDzKOb_HFjONKSI9SWJ9zmjHh9IzaNOCe_a49K45T2J9DDBD4cXu7AQbSKreno2FLMtJbW1pUwuCXj2GIAqDxX04QQM1Gdh0Coue1Jg4k1qEi7V2kg8jsZ_fFURgMEwRDOIW0bsW6aEtUPFrCAzfcKMM_OJSCc5QzEKNFM5VLoB6gCoW_dtlP7S9MwCDybt1LdlsSMlWrV966zQDu3.fSkgjPX7YH_BdCJ6xwpGuD1vdVBjXePcw4w4KmvHWZKNg1Z5atG_sqUEENZ3iLOTGCThDT23MgQWDjvSlwOjOfHtYL8Xg2_RKAusWFoV24lUhXqWZboI4DQQ_WrrAq4Y9HxV_0ij9Nxdl25xC594wFDj4xdba5WMvkP8OhM3ycqKmUuo9MC9VwQIHuaD5UccAdwS_PLO3wAXcL8MOKlt_zRwnUEUXAHQEznZYKp8xmkJjHzdLlqmOXou2jeRJC7MWL8F6xmw2v5fTwZ\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/javascript;charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=L5cASj%2FRZIVtftWW13r29N%2Fg4XKgnOKRHqwR7M%2Fg3y3JQDejsNOF2426qtWU2AaNS9x8YDXuNZTryr%2BDtjFkofCkXigm%2BQWuk07vfYLJpOETlAjCQaJJd2V4kyDTLrK4PPQR\"}]}\r\nlast-modified: Mon, 08 Jun 2026 10:56:26 GMT\r\ndate: Thu, 18 Jun 2026 16:04:16 GMT\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\netag: W/\"5e161a58584c75d64fced9975435c680\"\r\npriority: u=3,i=?0\r\ncf-ray: a0db87631f58569b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":521230,"size_decoded":185359,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (39994), with no line terminators","md5":"b98d29e2dc4b3406e48e10322fbe880b","sha1":"8a21df07399f415b241625f36388c094c6bafb4d","sha256":"e44df1c892d383a509e30acbde628c4d7a2cfc44ef407d6714ac601b1087a564","sha512":"f4d98e6509fb04ca069c0667833c55a2c78ce59911ef40cf1ace5d80a3a841ade4922af9adfaebcffece62e3fc601c1039fa8b1ba584c36c21495a4e7723cd9d","ssdeep":"6144:KnojRHkzQRByRCSsmDquooQm4uVfgxlK7ioXGhCVjdEhp+xwnWWhDOksozZ:KnsRHXRMYw1JlAU/EbtsozZ","tlshash":"32b4f97d8c207956592de011b502be0f2478796caa61f9b7373063b792bf8c79be4c81","first_seen":"2026-06-08T14:46:54.916871Z","last_seen":"2026-06-18T16:06:25.800532Z","times_seen":3,"resource_available":true,"data":null}},"time_used":823,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":354,"receive":469,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"phase2-xrpfi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"phase2-xrpfi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"phase2-xrpfi.com/close.svg","fqdn":"phase2-xrpfi.com","domain":"phase2-xrpfi.com","tld":"com"},"ip":{"addr":"172.67.197.157","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://phase2-xrpfi.com/","date":"2026-06-18T16:04:16.495Z","timestamp":1781798656495,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"phase2-xrpfi.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Jun 2026 09:59:40 GMT","end":"Sun, 06 Sep 2026 10:57:00 GMT"},"fingerprint":{"sha1":"09:46:15:EE:E5:36:A7:4E:0B:DE:64:A1:0E:7A:47:98:BE:3A:FD:ED","sha256":"51:A8:A6:DC:2F:00:48:0C:46:4D:A9:F7:15:02:FF:D6:42:A8:3D:2C:C5:A5:9C:AC:93:BC:77:16:5D:57:78:D2"}}},"request":{"raw":"GET /close.svg HTTP/1.1\r\nHost: phase2-xrpfi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://phase2-xrpfi.com/\r\nCookie: cf_clearance=3dDDftPuP8Orcsu8EPJqRGA8SI7fXKOo9EyyENnMTko-1781798655-1.2.1.1-_.es7GeTtSCtToaztdb37PtL0Q1MMryDzKOb_HFjONKSI9SWJ9zmjHh9IzaNOCe_a49K45T2J9DDBD4cXu7AQbSKreno2FLMtJbW1pUwuCXj2GIAqDxX04QQM1Gdh0Coue1Jg4k1qEi7V2kg8jsZ_fFURgMEwRDOIW0bsW6aEtUPFrCAzfcKMM_OJSCc5QzEKNFM5VLoB6gCoW_dtlP7S9MwCDybt1LdlsSMlWrV966zQDu3.fSkgjPX7YH_BdCJ6xwpGuD1vdVBjXePcw4w4KmvHWZKNg1Z5atG_sqUEENZ3iLOTGCThDT23MgQWDjvSlwOjOfHtYL8Xg2_RKAusWFoV24lUhXqWZboI4DQQ_WrrAq4Y9HxV_0ij9Nxdl25xC594wFDj4xdba5WMvkP8OhM3ycqKmUuo9MC9VwQIHuaD5UccAdwS_PLO3wAXcL8MOKlt_zRwnUEUXAHQEznZYKp8xmkJjHzdLlqmOXou2jeRJC7MWL8F6xmw2v5fTwZ\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: image/svg+xml\r\npriority: u=5,i\r\nlast-modified: Mon, 08 Jun 2026 10:56:26 GMT\r\ndate: Thu, 18 Jun 2026 16:04:18 GMT\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"463a29230026f25d47804e96c507f787\"\r\ncontent-encoding: zstd\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Fory%2BfX3444lV9eMEGCNPRCT0wpAV2mPZe%2FRXNtj0BXr31iAanngDBWwTxuCelZE6PynULgFDkc7mQxbwD2ixzsF%2FfMqEvrFQsHkuD8u8w%2Fqxkzh%2BY6tdRVhM3IoiAh0GK5p\"}]}\r\ncf-ray: a0db87631f59569b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1345,"size_decoded":1378,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"463a29230026f25d47804e96c507f787","sha1":"f50e0eac87bb8f5cff8f7d8ccb5d72aedda7e78d","sha256":"a049e1abe441835a2bcf35258936072189a0a52d0000c4ed2094e59d2afd189b","sha512":"83f065b7b10e906ef8bf40dd907da4f0eb0f4c28ee2d8b44e418b15f1c06884a579957b2bc27418fac5759825d394819ff0ac48d784b9f05564b8edab25d9426","ssdeep":"","tlshash":"2c21e5fc520853f49d587e98a8623077954514bbbf9db8c8928c847788c53dd4ec8d58","first_seen":"2023-04-17T01:45:40Z","last_seen":"2026-06-18T19:18:23.994501Z","times_seen":60436,"resource_available":false,"data":null}},"time_used":1738,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":1738,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"phase2-xrpfi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"phase2-xrpfi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"phase2-xrpfi.com/poweredbtcky.svg","fqdn":"phase2-xrpfi.com","domain":"phase2-xrpfi.com","tld":"com"},"ip":{"addr":"172.67.197.157","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://phase2-xrpfi.com/","date":"2026-06-18T16:04:16.496Z","timestamp":1781798656496,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"phase2-xrpfi.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Jun 2026 09:59:40 GMT","end":"Sun, 06 Sep 2026 10:57:00 GMT"},"fingerprint":{"sha1":"09:46:15:EE:E5:36:A7:4E:0B:DE:64:A1:0E:7A:47:98:BE:3A:FD:ED","sha256":"51:A8:A6:DC:2F:00:48:0C:46:4D:A9:F7:15:02:FF:D6:42:A8:3D:2C:C5:A5:9C:AC:93:BC:77:16:5D:57:78:D2"}}},"request":{"raw":"GET /poweredbtcky.svg HTTP/1.1\r\nHost: phase2-xrpfi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://phase2-xrpfi.com/\r\nCookie: cf_clearance=3dDDftPuP8Orcsu8EPJqRGA8SI7fXKOo9EyyENnMTko-1781798655-1.2.1.1-_.es7GeTtSCtToaztdb37PtL0Q1MMryDzKOb_HFjONKSI9SWJ9zmjHh9IzaNOCe_a49K45T2J9DDBD4cXu7AQbSKreno2FLMtJbW1pUwuCXj2GIAqDxX04QQM1Gdh0Coue1Jg4k1qEi7V2kg8jsZ_fFURgMEwRDOIW0bsW6aEtUPFrCAzfcKMM_OJSCc5QzEKNFM5VLoB6gCoW_dtlP7S9MwCDybt1LdlsSMlWrV966zQDu3.fSkgjPX7YH_BdCJ6xwpGuD1vdVBjXePcw4w4KmvHWZKNg1Z5atG_sqUEENZ3iLOTGCThDT23MgQWDjvSlwOjOfHtYL8Xg2_RKAusWFoV24lUhXqWZboI4DQQ_WrrAq4Y9HxV_0ij9Nxdl25xC594wFDj4xdba5WMvkP8OhM3ycqKmUuo9MC9VwQIHuaD5UccAdwS_PLO3wAXcL8MOKlt_zRwnUEUXAHQEznZYKp8xmkJjHzdLlqmOXou2jeRJC7MWL8F6xmw2v5fTwZ\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: image/svg+xml\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Mon, 08 Jun 2026 10:56:26 GMT\r\ndate: Thu, 18 Jun 2026 16:04:16 GMT\r\nserver: cloudflare\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7pos8W2s2GAhsknszzar9JtdekoYp7qZBbi5uYMFVsrBJp2msEYaXF350yHar81%2FJIa5s%2BWMKzlfMXciNR9hXClq9c5unmoqApksCFITEAeFzFj5YhI1qk%2Bp1WxSttfxDcpe\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\netag: W/\"2e4df113ede6d5ce8de2dc1338a3890e\"\r\ncf-ray: a0db87631f5a569b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3762,"size_decoded":2045,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"2e4df113ede6d5ce8de2dc1338a3890e","sha1":"3af1721ca29f4ada0cd422206c253cf8ee52781a","sha256":"911f58b8d14bd6f73a83fd774e44bec97e896317c7093dc83e96921e64f1fbd5","sha512":"12c975049692f337fced697963359f535b7d08b4b230447cba37b6e5c8c1fd31e8f26329a315454c83e51ca41787737428e3932979156e205cf0feaadde8fb97","ssdeep":"","tlshash":"967195cb36ec61e0f9006f78db2b20654dae34f666d1d3d59540fd9564a2e9f464ccc0","first_seen":"2023-04-17T01:45:40Z","last_seen":"2026-06-18T19:31:13.750009Z","times_seen":30321,"resource_available":false,"data":null}},"time_used":318,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":318,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"phase2-xrpfi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"phase2-xrpfi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"phase2-xrpfi.com/newsletter_nav_widget.webp","fqdn":"phase2-xrpfi.com","domain":"phase2-xrpfi.com","tld":"com"},"ip":{"addr":"172.67.197.157","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://phase2-xrpfi.com/","date":"2026-06-18T16:04:16.655Z","timestamp":1781798656655,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"phase2-xrpfi.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Jun 2026 09:59:40 GMT","end":"Sun, 06 Sep 2026 10:57:00 GMT"},"fingerprint":{"sha1":"09:46:15:EE:E5:36:A7:4E:0B:DE:64:A1:0E:7A:47:98:BE:3A:FD:ED","sha256":"51:A8:A6:DC:2F:00:48:0C:46:4D:A9:F7:15:02:FF:D6:42:A8:3D:2C:C5:A5:9C:AC:93:BC:77:16:5D:57:78:D2"}}},"request":{"raw":"GET /newsletter_nav_widget.webp HTTP/1.1\r\nHost: phase2-xrpfi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://phase2-xrpfi.com/\r\nCookie: cf_clearance=3dDDftPuP8Orcsu8EPJqRGA8SI7fXKOo9EyyENnMTko-1781798655-1.2.1.1-_.es7GeTtSCtToaztdb37PtL0Q1MMryDzKOb_HFjONKSI9SWJ9zmjHh9IzaNOCe_a49K45T2J9DDBD4cXu7AQbSKreno2FLMtJbW1pUwuCXj2GIAqDxX04QQM1Gdh0Coue1Jg4k1qEi7V2kg8jsZ_fFURgMEwRDOIW0bsW6aEtUPFrCAzfcKMM_OJSCc5QzEKNFM5VLoB6gCoW_dtlP7S9MwCDybt1LdlsSMlWrV966zQDu3.fSkgjPX7YH_BdCJ6xwpGuD1vdVBjXePcw4w4KmvHWZKNg1Z5atG_sqUEENZ3iLOTGCThDT23MgQWDjvSlwOjOfHtYL8Xg2_RKAusWFoV24lUhXqWZboI4DQQ_WrrAq4Y9HxV_0ij9Nxdl25xC594wFDj4xdba5WMvkP8OhM3ycqKmUuo9MC9VwQIHuaD5UccAdwS_PLO3wAXcL8MOKlt_zRwnUEUXAHQEznZYKp8xmkJjHzdLlqmOXou2jeRJC7MWL8F6xmw2v5fTwZ\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: image/webp\r\netag: \"7fcfa9b2d46f276f007908d1eb643223\"\r\nlast-modified: Mon, 08 Jun 2026 10:56:26 GMT\r\ndate: Thu, 18 Jun 2026 16:04:17 GMT\r\nserver: cloudflare\r\npriority: u=5,i\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BBII2xxf9I%2BgAmSZAydal1tfZHl9Pjb7UILIzAVFsnafTXnGB27RWxHdAUBkg9RozVv%2F5a%2BJnGlqndC%2BVGNCL%2Fw6oYbBhkTA7bnG%2F%2FQ4Pu2dhTT7pn2NqG7BLMjAiglGXPBc\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a0db87641f71569b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":39390,"size_decoded":40062,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"7fcfa9b2d46f276f007908d1eb643223","sha1":"0060950df385fee6dd2b9cc45cba3dbbb780cb84","sha256":"a9ec7624b82cc2f299e25d60e73e76eb0e3ff8de981fead18779d080193e8190","sha512":"201085eb88672b3c7fe0f8237c343dcdd07785510fd8e00a4d8021dfb8c128cfe60b8691e605fa84a0c435e21ec315a940467c1cc5a9120bb2966bf57ab6611e","ssdeep":"768:XMOzRFTm6vBXbH0iVvc8z/hI+jOFlz//Z/2JAokDCgHv3XQUJ20omLLvT:XTnm6vBXAgc8rhvSl7hQAokD9vA9m7","tlshash":"4903f2131987814a7ccd309953548a09a9715dd8c4532d7128cabff386e6c8a1debffc","first_seen":"2026-04-24T15:23:41.45609Z","last_seen":"2026-06-18T19:31:13.736266Z","times_seen":29,"resource_available":false,"data":null}},"time_used":532,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":384,"receive":148,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"phase2-xrpfi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"phase2-xrpfi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"phase2-xrpfi.com/mute-subtitle.vtt","fqdn":"phase2-xrpfi.com","domain":"phase2-xrpfi.com","tld":"com"},"ip":{"addr":"172.67.197.157","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://phase2-xrpfi.com/","date":"2026-06-18T16:04:16.719Z","timestamp":1781798656719,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"phase2-xrpfi.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Jun 2026 09:59:40 GMT","end":"Sun, 06 Sep 2026 10:57:00 GMT"},"fingerprint":{"sha1":"09:46:15:EE:E5:36:A7:4E:0B:DE:64:A1:0E:7A:47:98:BE:3A:FD:ED","sha256":"51:A8:A6:DC:2F:00:48:0C:46:4D:A9:F7:15:02:FF:D6:42:A8:3D:2C:C5:A5:9C:AC:93:BC:77:16:5D:57:78:D2"}}},"request":{"raw":"GET /mute-subtitle.vtt HTTP/1.1\r\nHost: phase2-xrpfi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: cf_clearance=3dDDftPuP8Orcsu8EPJqRGA8SI7fXKOo9EyyENnMTko-1781798655-1.2.1.1-_.es7GeTtSCtToaztdb37PtL0Q1MMryDzKOb_HFjONKSI9SWJ9zmjHh9IzaNOCe_a49K45T2J9DDBD4cXu7AQbSKreno2FLMtJbW1pUwuCXj2GIAqDxX04QQM1Gdh0Coue1Jg4k1qEi7V2kg8jsZ_fFURgMEwRDOIW0bsW6aEtUPFrCAzfcKMM_OJSCc5QzEKNFM5VLoB6gCoW_dtlP7S9MwCDybt1LdlsSMlWrV966zQDu3.fSkgjPX7YH_BdCJ6xwpGuD1vdVBjXePcw4w4KmvHWZKNg1Z5atG_sqUEENZ3iLOTGCThDT23MgQWDjvSlwOjOfHtYL8Xg2_RKAusWFoV24lUhXqWZboI4DQQ_WrrAq4Y9HxV_0ij9Nxdl25xC594wFDj4xdba5WMvkP8OhM3ycqKmUuo9MC9VwQIHuaD5UccAdwS_PLO3wAXcL8MOKlt_zRwnUEUXAHQEznZYKp8xmkJjHzdLlqmOXou2jeRJC7MWL8F6xmw2v5fTwZ\r\nSec-Fetch-Dest: track\r\nSec-Fetch-Mode: same-origin\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/vtt\r\netag: \"53142af388215162f1a72eaad5603c77\"\r\nlast-modified: Mon, 08 Jun 2026 10:56:26 GMT\r\ndate: Thu, 18 Jun 2026 16:04:16 GMT\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2JrxeCFvi%2BZIdYm6PuHrVwv5GT5abYAxA3XCO4nBtbDLXA3nzY8T6%2BPntMQ%2BIhKGrQIylqCfUe9AD%2F4TAQf1ZfGHGe8m3ugfaxiGYnd5bOwy%2FFnGpnKzDL7rYiH9wjuS8Eig\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-length: 86\r\ncf-ray: a0db87648f7a569b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":86,"size_decoded":746,"mime_type":"text/vtt","magic":"WebVTT subtitles, ASCII text","md5":"53142af388215162f1a72eaad5603c77","sha1":"ca6e246c84ef9ce3519c5aee9f7d3a4f6064b4fe","sha256":"f946cef18bf33db28bc29c3320c2cbd0ea84e0c3831bf5ed3cdc7f19f4eb98ce","sha512":"7c2da6b49086ff51b75a8e6571a4667e4958026beb592f940fca100118796776204024a0951e51c0eb415a46db40e286a1f8b608e8e1c317c9e2b8edde273b5c","ssdeep":"","tlshash":"22a012804b744840d110920c2162bb03a188dc4e11c00c5e226830cdfc4e004c048042","first_seen":"2026-04-24T15:23:41.467209Z","last_seen":"2026-06-18T19:31:13.711079Z","times_seen":15,"resource_available":false,"data":null}},"time_used":221,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":221,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"phase2-xrpfi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"phase2-xrpfi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"phase2-xrpfi.com/Satoshi_Variable-s.p.fc536e90.woff2","fqdn":"phase2-xrpfi.com","domain":"phase2-xrpfi.com","tld":"com"},"ip":{"addr":"172.67.197.157","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://phase2-xrpfi.com/","date":"2026-06-18T16:04:16.929Z","timestamp":1781798656929,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"phase2-xrpfi.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Jun 2026 09:59:40 GMT","end":"Sun, 06 Sep 2026 10:57:00 GMT"},"fingerprint":{"sha1":"09:46:15:EE:E5:36:A7:4E:0B:DE:64:A1:0E:7A:47:98:BE:3A:FD:ED","sha256":"51:A8:A6:DC:2F:00:48:0C:46:4D:A9:F7:15:02:FF:D6:42:A8:3D:2C:C5:A5:9C:AC:93:BC:77:16:5D:57:78:D2"}}},"request":{"raw":"GET /Satoshi_Variable-s.p.fc536e90.woff2 HTTP/1.1\r\nHost: phase2-xrpfi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://phase2-xrpfi.com/6cdcfbcc140e7bef.css\r\nCookie: cf_clearance=3dDDftPuP8Orcsu8EPJqRGA8SI7fXKOo9EyyENnMTko-1781798655-1.2.1.1-_.es7GeTtSCtToaztdb37PtL0Q1MMryDzKOb_HFjONKSI9SWJ9zmjHh9IzaNOCe_a49K45T2J9DDBD4cXu7AQbSKreno2FLMtJbW1pUwuCXj2GIAqDxX04QQM1Gdh0Coue1Jg4k1qEi7V2kg8jsZ_fFURgMEwRDOIW0bsW6aEtUPFrCAzfcKMM_OJSCc5QzEKNFM5VLoB6gCoW_dtlP7S9MwCDybt1LdlsSMlWrV966zQDu3.fSkgjPX7YH_BdCJ6xwpGuD1vdVBjXePcw4w4KmvHWZKNg1Z5atG_sqUEENZ3iLOTGCThDT23MgQWDjvSlwOjOfHtYL8Xg2_RKAusWFoV24lUhXqWZboI4DQQ_WrrAq4Y9HxV_0ij9Nxdl25xC594wFDj4xdba5WMvkP8OhM3ycqKmUuo9MC9VwQIHuaD5UccAdwS_PLO3wAXcL8MOKlt_zRwnUEUXAHQEznZYKp8xmkJjHzdLlqmOXou2jeRJC7MWL8F6xmw2v5fTwZ\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: font/woff2\r\netag: \"70880e42f07b0386e261974cd14820a1\"\r\nlast-modified: Mon, 08 Jun 2026 10:56:26 GMT\r\ndate: Thu, 18 Jun 2026 16:04:17 GMT\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hFOcRo5%2Bdwl%2B1tWO%2BX5oyPpzCIXrTM3jVnEx1qih7CAwYopvyyR%2FpP8ltgDCbB7ZLpdGuqXhrde9Hg5va8XoKnUedd1MyTPH9crl9IjvEDu4D49nUb79ydX4U6xRL1WxZdiy\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-length: 42588\r\ncf-ray: a0db8765df95569b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":42588,"size_decoded":43300,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 42588, version 1.0","md5":"70880e42f07b0386e261974cd14820a1","sha1":"2d34d398b398a7fd88d21fae7642cdca908bf3ee","sha256":"e739aff9b4d02c264341d6d4872edcda28e79373aeda936f659566a1cd3eb47f","sha512":"6a5cb0cbee5f49a4b96df82bc37f3f2aa7abbc8fdb304962a3f492c7f63772b81e753a86e01da2a7a74785cf3196795408065e0bf30695166311e324d813d83c","ssdeep":"768:LRuvvUK4d5TnqQ8Wd3PDjhbDERazTlYv2zypgb0Sj0a7OpBUroBTy1gvK2jbx:9ukK4rzn3PPeRElO6ZVj0a7O/3g1IZx","tlshash":"d313013c8972d7b2bddb203b7cc0b6652494576962b0b2bec096093c80a467db18f733","first_seen":"2023-06-27T05:49:32Z","last_seen":"2026-06-18T19:31:13.707234Z","times_seen":2209,"resource_available":false,"data":null}},"time_used":355,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":309,"receive":46,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"phase2-xrpfi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"phase2-xrpfi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"phase2-xrpfi.com/mute-subtitle.vtt","fqdn":"phase2-xrpfi.com","domain":"phase2-xrpfi.com","tld":"com"},"ip":{"addr":"172.67.197.157","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://phase2-xrpfi.com/","date":"2026-06-18T16:04:16.656Z","timestamp":1781798656656,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"phase2-xrpfi.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Jun 2026 09:59:40 GMT","end":"Sun, 06 Sep 2026 10:57:00 GMT"},"fingerprint":{"sha1":"09:46:15:EE:E5:36:A7:4E:0B:DE:64:A1:0E:7A:47:98:BE:3A:FD:ED","sha256":"51:A8:A6:DC:2F:00:48:0C:46:4D:A9:F7:15:02:FF:D6:42:A8:3D:2C:C5:A5:9C:AC:93:BC:77:16:5D:57:78:D2"}}},"request":{"raw":"GET /mute-subtitle.vtt HTTP/1.1\r\nHost: phase2-xrpfi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: cf_clearance=3dDDftPuP8Orcsu8EPJqRGA8SI7fXKOo9EyyENnMTko-1781798655-1.2.1.1-_.es7GeTtSCtToaztdb37PtL0Q1MMryDzKOb_HFjONKSI9SWJ9zmjHh9IzaNOCe_a49K45T2J9DDBD4cXu7AQbSKreno2FLMtJbW1pUwuCXj2GIAqDxX04QQM1Gdh0Coue1Jg4k1qEi7V2kg8jsZ_fFURgMEwRDOIW0bsW6aEtUPFrCAzfcKMM_OJSCc5QzEKNFM5VLoB6gCoW_dtlP7S9MwCDybt1LdlsSMlWrV966zQDu3.fSkgjPX7YH_BdCJ6xwpGuD1vdVBjXePcw4w4KmvHWZKNg1Z5atG_sqUEENZ3iLOTGCThDT23MgQWDjvSlwOjOfHtYL8Xg2_RKAusWFoV24lUhXqWZboI4DQQ_WrrAq4Y9HxV_0ij9Nxdl25xC594wFDj4xdba5WMvkP8OhM3ycqKmUuo9MC9VwQIHuaD5UccAdwS_PLO3wAXcL8MOKlt_zRwnUEUXAHQEznZYKp8xmkJjHzdLlqmOXou2jeRJC7MWL8F6xmw2v5fTwZ\r\nSec-Fetch-Dest: track\r\nSec-Fetch-Mode: same-origin\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/vtt\r\netag: \"53142af388215162f1a72eaad5603c77\"\r\nlast-modified: Mon, 08 Jun 2026 10:56:26 GMT\r\ndate: Thu, 18 Jun 2026 16:04:16 GMT\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UO1q8Ab2xLhg3utYY03tL4oHeGVcU08y4BkNvqN2nO0ezoFLw%2BdNAcVgpYqBiNeCLvOIQkx9%2F3vRBP31CPdG6W2i6orJCSyrUX%2BCT9zk2wxr5kN6uP%2BuAEKZWV7Ao3tocx4S\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-length: 86\r\ncf-ray: a0db87641f72569b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":86,"size_decoded":744,"mime_type":"text/vtt","magic":"WebVTT subtitles, ASCII text","md5":"53142af388215162f1a72eaad5603c77","sha1":"ca6e246c84ef9ce3519c5aee9f7d3a4f6064b4fe","sha256":"f946cef18bf33db28bc29c3320c2cbd0ea84e0c3831bf5ed3cdc7f19f4eb98ce","sha512":"7c2da6b49086ff51b75a8e6571a4667e4958026beb592f940fca100118796776204024a0951e51c0eb415a46db40e286a1f8b608e8e1c317c9e2b8edde273b5c","ssdeep":"","tlshash":"22a012804b744840d110920c2162bb03a188dc4e11c00c5e226830cdfc4e004c048042","first_seen":"2026-04-24T15:23:41.467209Z","last_seen":"2026-06-18T19:31:13.711079Z","times_seen":15,"resource_available":false,"data":null}},"time_used":317,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":317,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"phase2-xrpfi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"phase2-xrpfi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"phase2-xrpfi.com/home_fast_desktop.mov","fqdn":"phase2-xrpfi.com","domain":"phase2-xrpfi.com","tld":"com"},"ip":{"addr":"172.67.197.157","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://phase2-xrpfi.com/","date":"2026-06-18T16:04:16.713Z","timestamp":1781798656713,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"phase2-xrpfi.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Jun 2026 09:59:40 GMT","end":"Sun, 06 Sep 2026 10:57:00 GMT"},"fingerprint":{"sha1":"09:46:15:EE:E5:36:A7:4E:0B:DE:64:A1:0E:7A:47:98:BE:3A:FD:ED","sha256":"51:A8:A6:DC:2F:00:48:0C:46:4D:A9:F7:15:02:FF:D6:42:A8:3D:2C:C5:A5:9C:AC:93:BC:77:16:5D:57:78:D2"}}},"request":{"raw":"GET /home_fast_desktop.mov HTTP/1.1\r\nHost: phase2-xrpfi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nRange: bytes=0-\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://phase2-xrpfi.com/\r\nCookie: cf_clearance=3dDDftPuP8Orcsu8EPJqRGA8SI7fXKOo9EyyENnMTko-1781798655-1.2.1.1-_.es7GeTtSCtToaztdb37PtL0Q1MMryDzKOb_HFjONKSI9SWJ9zmjHh9IzaNOCe_a49K45T2J9DDBD4cXu7AQbSKreno2FLMtJbW1pUwuCXj2GIAqDxX04QQM1Gdh0Coue1Jg4k1qEi7V2kg8jsZ_fFURgMEwRDOIW0bsW6aEtUPFrCAzfcKMM_OJSCc5QzEKNFM5VLoB6gCoW_dtlP7S9MwCDybt1LdlsSMlWrV966zQDu3.fSkgjPX7YH_BdCJ6xwpGuD1vdVBjXePcw4w4KmvHWZKNg1Z5atG_sqUEENZ3iLOTGCThDT23MgQWDjvSlwOjOfHtYL8Xg2_RKAusWFoV24lUhXqWZboI4DQQ_WrrAq4Y9HxV_0ij9Nxdl25xC594wFDj4xdba5WMvkP8OhM3ycqKmUuo9MC9VwQIHuaD5UccAdwS_PLO3wAXcL8MOKlt_zRwnUEUXAHQEznZYKp8xmkJjHzdLlqmOXou2jeRJC7MWL8F6xmw2v5fTwZ\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\ndate: Thu, 18 Jun 2026 16:04:16 GMT\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=79H6oUkztRMnU%2FVED%2F1AjbVJDCt%2F6gSm%2BksrDvCU0ujzjhOfAIZdpHd0GPpeNHDaUHF6673GQmbOGTUTWrqJ%2FRzRk0DbMxgaseL1GkVR9nfVEK61etBMnUfJBzrYqqbvE%2BJG\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a0db87647f76569b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":530,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-18T19:23:29.08979Z","times_seen":16522781,"resource_available":true,"data":null}},"time_used":162,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":162,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"phase2-xrpfi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"phase2-xrpfi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"phase2-xrpfi.com/home_fast_desktop.webm","fqdn":"phase2-xrpfi.com","domain":"phase2-xrpfi.com","tld":"com"},"ip":{"addr":"172.67.197.157","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://phase2-xrpfi.com/","date":"2026-06-18T16:04:16.882Z","timestamp":1781798656882,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"phase2-xrpfi.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Jun 2026 09:59:40 GMT","end":"Sun, 06 Sep 2026 10:57:00 GMT"},"fingerprint":{"sha1":"09:46:15:EE:E5:36:A7:4E:0B:DE:64:A1:0E:7A:47:98:BE:3A:FD:ED","sha256":"51:A8:A6:DC:2F:00:48:0C:46:4D:A9:F7:15:02:FF:D6:42:A8:3D:2C:C5:A5:9C:AC:93:BC:77:16:5D:57:78:D2"}}},"request":{"raw":"GET /home_fast_desktop.webm HTTP/1.1\r\nHost: phase2-xrpfi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nRange: bytes=0-\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://phase2-xrpfi.com/\r\nCookie: cf_clearance=3dDDftPuP8Orcsu8EPJqRGA8SI7fXKOo9EyyENnMTko-1781798655-1.2.1.1-_.es7GeTtSCtToaztdb37PtL0Q1MMryDzKOb_HFjONKSI9SWJ9zmjHh9IzaNOCe_a49K45T2J9DDBD4cXu7AQbSKreno2FLMtJbW1pUwuCXj2GIAqDxX04QQM1Gdh0Coue1Jg4k1qEi7V2kg8jsZ_fFURgMEwRDOIW0bsW6aEtUPFrCAzfcKMM_OJSCc5QzEKNFM5VLoB6gCoW_dtlP7S9MwCDybt1LdlsSMlWrV966zQDu3.fSkgjPX7YH_BdCJ6xwpGuD1vdVBjXePcw4w4KmvHWZKNg1Z5atG_sqUEENZ3iLOTGCThDT23MgQWDjvSlwOjOfHtYL8Xg2_RKAusWFoV24lUhXqWZboI4DQQ_WrrAq4Y9HxV_0ij9Nxdl25xC594wFDj4xdba5WMvkP8OhM3ycqKmUuo9MC9VwQIHuaD5UccAdwS_PLO3wAXcL8MOKlt_zRwnUEUXAHQEznZYKp8xmkJjHzdLlqmOXou2jeRJC7MWL8F6xmw2v5fTwZ\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: video/webm\r\netag: \"93f55c45880ded591da9582c8da247b2\"\r\nlast-modified: Mon, 08 Jun 2026 10:56:26 GMT\r\ndate: Thu, 18 Jun 2026 16:04:17 GMT\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=23REHJOHBC0rAtWXSkLBzGEG3sfLRMc3hRI1XfowkWdr%2BItH92skZw5nELOVpvA7ZQdWenlR9OoP3ZrZgYeldvyhu9ncmvlr7XOiyuGjIoYiwXt%2BwsVFMe10D%2BjO64LS0%2FDf\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a0db87658f92569b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1378641,"size_decoded":1379308,"mime_type":"video/webm","magic":"WebM","md5":"9a5fba883369cf25fcd3de86facd08b1","sha1":"0aa0f6141f01d5a4bf827532aab3e029a30f2ed9","sha256":"c10dcb1ac941eb67789e362664821756ad38f30107d147897daa06deee62c45d","sha512":"5c514cb7b02b4f4aae4939f44af686286fb7e1470e4339c60da0a269857ff3f9fe143e8f6cf4763bd8710ac22ec30d776337a4c718c5b428ae6e39c6efe6002e","ssdeep":"24576:3p/jOrSWT9ihDPOxGvbRNI/86ocsvDBIylxy2+6LL+:3pbOmj5uGvbRPcsvzxy1V","tlshash":"f925332e2abc2c906fa5d17ef1b95c257d7be221687de42a3c1931c791094fac1143ab","first_seen":"2025-08-11T21:39:04.776649Z","last_seen":"2026-06-18T19:31:13.748289Z","times_seen":27,"resource_available":false,"data":null}},"time_used":795,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":242,"receive":553,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"phase2-xrpfi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"phase2-xrpfi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"phase2-xrpfi.com/banner_main-5.webp","fqdn":"phase2-xrpfi.com","domain":"phase2-xrpfi.com","tld":"com"},"ip":{"addr":"172.67.197.157","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://phase2-xrpfi.com/","date":"2026-06-18T16:04:17.009Z","timestamp":1781798657009,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"phase2-xrpfi.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Jun 2026 09:59:40 GMT","end":"Sun, 06 Sep 2026 10:57:00 GMT"},"fingerprint":{"sha1":"09:46:15:EE:E5:36:A7:4E:0B:DE:64:A1:0E:7A:47:98:BE:3A:FD:ED","sha256":"51:A8:A6:DC:2F:00:48:0C:46:4D:A9:F7:15:02:FF:D6:42:A8:3D:2C:C5:A5:9C:AC:93:BC:77:16:5D:57:78:D2"}}},"request":{"raw":"GET /banner_main-5.webp HTTP/1.1\r\nHost: phase2-xrpfi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://phase2-xrpfi.com/\r\nCookie: cf_clearance=3dDDftPuP8Orcsu8EPJqRGA8SI7fXKOo9EyyENnMTko-1781798655-1.2.1.1-_.es7GeTtSCtToaztdb37PtL0Q1MMryDzKOb_HFjONKSI9SWJ9zmjHh9IzaNOCe_a49K45T2J9DDBD4cXu7AQbSKreno2FLMtJbW1pUwuCXj2GIAqDxX04QQM1Gdh0Coue1Jg4k1qEi7V2kg8jsZ_fFURgMEwRDOIW0bsW6aEtUPFrCAzfcKMM_OJSCc5QzEKNFM5VLoB6gCoW_dtlP7S9MwCDybt1LdlsSMlWrV966zQDu3.fSkgjPX7YH_BdCJ6xwpGuD1vdVBjXePcw4w4KmvHWZKNg1Z5atG_sqUEENZ3iLOTGCThDT23MgQWDjvSlwOjOfHtYL8Xg2_RKAusWFoV24lUhXqWZboI4DQQ_WrrAq4Y9HxV_0ij9Nxdl25xC594wFDj4xdba5WMvkP8OhM3ycqKmUuo9MC9VwQIHuaD5UccAdwS_PLO3wAXcL8MOKlt_zRwnUEUXAHQEznZYKp8xmkJjHzdLlqmOXou2jeRJC7MWL8F6xmw2v5fTwZ\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: image/webp\r\netag: \"ff4cef6f77c80d86a3f7c2d73ad39f2f\"\r\nlast-modified: Mon, 08 Jun 2026 10:56:26 GMT\r\ndate: Thu, 18 Jun 2026 16:04:17 GMT\r\nserver: cloudflare\r\npriority: u=5,i\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OKsv78AXPQNu9TuvGW1kqsNwkGEot3eKp0yi2d8m6JWE1FBmZ3yqh8aEZ72b7bRHcpjHNcgRmG7coNIu4V2rOXE0RuUI%2BlVMpf7GQv2Ek37AYExVSi3DEAGna61Zv9MwnL41\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-length: 20492\r\ncf-ray: a0db87665f9c569b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":20492,"size_decoded":21195,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1920x173, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"ff4cef6f77c80d86a3f7c2d73ad39f2f","sha1":"cff4989c30b3b46480f0e10cab01bb47e6ff8377","sha256":"fde9fd86ecbec2f137dfaa12270dfc5f63f35109669616629ca452bca6576f05","sha512":"63b338afe19096a78c5d49c4f0596cd67e5c77a66cfd4967e44f859ea32f1c59f61db0f1eaecd22036d4904a9db51e8612f7accfe548943b6673ecc3945fca70","ssdeep":"384:hOJiUHQHGe1qLqH1kBxC1LuaHiDcyd0aDPKxb+FXrqzFV2AvqsMX:hgiUHR2VsCxuMiDTLKxb+Bqb0ss","tlshash":"5c92d04f440ad2f6f101aed547bcd9165feab8ecba770250708d747801b60a52d937bd","first_seen":"2026-05-16T18:13:37.170366Z","last_seen":"2026-06-18T19:31:13.730816Z","times_seen":25,"resource_available":false,"data":null}},"time_used":308,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":308,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"phase2-xrpfi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"phase2-xrpfi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"phase2-xrpfi.com/home-page-landing-big-5.webp","fqdn":"phase2-xrpfi.com","domain":"phase2-xrpfi.com","tld":"com"},"ip":{"addr":"172.67.197.157","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://phase2-xrpfi.com/","date":"2026-06-18T16:04:17.011Z","timestamp":1781798657011,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"phase2-xrpfi.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Jun 2026 09:59:40 GMT","end":"Sun, 06 Sep 2026 10:57:00 GMT"},"fingerprint":{"sha1":"09:46:15:EE:E5:36:A7:4E:0B:DE:64:A1:0E:7A:47:98:BE:3A:FD:ED","sha256":"51:A8:A6:DC:2F:00:48:0C:46:4D:A9:F7:15:02:FF:D6:42:A8:3D:2C:C5:A5:9C:AC:93:BC:77:16:5D:57:78:D2"}}},"request":{"raw":"GET /home-page-landing-big-5.webp HTTP/1.1\r\nHost: phase2-xrpfi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://phase2-xrpfi.com/\r\nCookie: cf_clearance=3dDDftPuP8Orcsu8EPJqRGA8SI7fXKOo9EyyENnMTko-1781798655-1.2.1.1-_.es7GeTtSCtToaztdb37PtL0Q1MMryDzKOb_HFjONKSI9SWJ9zmjHh9IzaNOCe_a49K45T2J9DDBD4cXu7AQbSKreno2FLMtJbW1pUwuCXj2GIAqDxX04QQM1Gdh0Coue1Jg4k1qEi7V2kg8jsZ_fFURgMEwRDOIW0bsW6aEtUPFrCAzfcKMM_OJSCc5QzEKNFM5VLoB6gCoW_dtlP7S9MwCDybt1LdlsSMlWrV966zQDu3.fSkgjPX7YH_BdCJ6xwpGuD1vdVBjXePcw4w4KmvHWZKNg1Z5atG_sqUEENZ3iLOTGCThDT23MgQWDjvSlwOjOfHtYL8Xg2_RKAusWFoV24lUhXqWZboI4DQQ_WrrAq4Y9HxV_0ij9Nxdl25xC594wFDj4xdba5WMvkP8OhM3ycqKmUuo9MC9VwQIHuaD5UccAdwS_PLO3wAXcL8MOKlt_zRwnUEUXAHQEznZYKp8xmkJjHzdLlqmOXou2jeRJC7MWL8F6xmw2v5fTwZ\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: image/webp\r\netag: \"381eb073afaa8b27620d005c6765f4c0\"\r\nlast-modified: Mon, 08 Jun 2026 10:56:26 GMT\r\ndate: Thu, 18 Jun 2026 16:04:17 GMT\r\nserver: cloudflare\r\npriority: u=5,i\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=o5wq1ERaII8dkt2o3RF%2Fo6WhTLLelb3xJr1fUEWsBoIgRs6qpWPHCt4ojaVAf8NCtvgbIS8RFJ0zeSoZVfF3XW5lurRlmk41gOKJlQZkCk3H8SZrOqAPNxrYgF6sdurEQeST\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a0db87665f9e569b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":247196,"size_decoded":247854,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"381eb073afaa8b27620d005c6765f4c0","sha1":"1e43306454ffff3774fb6cc01e5daac43061746d","sha256":"bda8027aa589340dc634d185006f96ba5fdf8bf5c9b9bd5f176a4b6f0242f8ae","sha512":"f36780edf69b8e4065f80585f3c1eca76a96347ce21c1586d4a2ead2fb5aeaacff6cc6880891663d2dbdcbb07b3f4ae1c61a79bf399f2c3a6c99c580fbfff2fe","ssdeep":"6144:Q35zd75lysY/PjTcB1ToAnF2q1/pXuFiT6WQ:C95lypfUpoAnF2q7uFiT6WQ","tlshash":"be341349fbeda594567f7e313fe3e0576d8da54302c369746339813b00a85a6fe0a2c8","first_seen":"2026-04-24T15:23:41.476188Z","last_seen":"2026-06-18T19:31:13.729646Z","times_seen":37,"resource_available":false,"data":null}},"time_used":419,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":179,"receive":240,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"phase2-xrpfi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"phase2-xrpfi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"phase2-xrpfi.com/hypernative-1.webp","fqdn":"phase2-xrpfi.com","domain":"phase2-xrpfi.com","tld":"com"},"ip":{"addr":"172.67.197.157","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://phase2-xrpfi.com/","date":"2026-06-18T16:04:17.015Z","timestamp":1781798657015,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"phase2-xrpfi.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Jun 2026 09:59:40 GMT","end":"Sun, 06 Sep 2026 10:57:00 GMT"},"fingerprint":{"sha1":"09:46:15:EE:E5:36:A7:4E:0B:DE:64:A1:0E:7A:47:98:BE:3A:FD:ED","sha256":"51:A8:A6:DC:2F:00:48:0C:46:4D:A9:F7:15:02:FF:D6:42:A8:3D:2C:C5:A5:9C:AC:93:BC:77:16:5D:57:78:D2"}}},"request":{"raw":"GET /hypernative-1.webp HTTP/1.1\r\nHost: phase2-xrpfi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://phase2-xrpfi.com/\r\nCookie: cf_clearance=3dDDftPuP8Orcsu8EPJqRGA8SI7fXKOo9EyyENnMTko-1781798655-1.2.1.1-_.es7GeTtSCtToaztdb37PtL0Q1MMryDzKOb_HFjONKSI9SWJ9zmjHh9IzaNOCe_a49K45T2J9DDBD4cXu7AQbSKreno2FLMtJbW1pUwuCXj2GIAqDxX04QQM1Gdh0Coue1Jg4k1qEi7V2kg8jsZ_fFURgMEwRDOIW0bsW6aEtUPFrCAzfcKMM_OJSCc5QzEKNFM5VLoB6gCoW_dtlP7S9MwCDybt1LdlsSMlWrV966zQDu3.fSkgjPX7YH_BdCJ6xwpGuD1vdVBjXePcw4w4KmvHWZKNg1Z5atG_sqUEENZ3iLOTGCThDT23MgQWDjvSlwOjOfHtYL8Xg2_RKAusWFoV24lUhXqWZboI4DQQ_WrrAq4Y9HxV_0ij9Nxdl25xC594wFDj4xdba5WMvkP8OhM3ycqKmUuo9MC9VwQIHuaD5UccAdwS_PLO3wAXcL8MOKlt_zRwnUEUXAHQEznZYKp8xmkJjHzdLlqmOXou2jeRJC7MWL8F6xmw2v5fTwZ\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: image/webp\r\netag: \"bd032d84e7dd874f19808839ca4b8a7c\"\r\nlast-modified: Mon, 08 Jun 2026 10:56:26 GMT\r\ndate: Thu, 18 Jun 2026 16:04:17 GMT\r\nserver: cloudflare\r\npriority: u=5,i\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xJafuuAZM0jlbeLqFVBhZUtapgH1xAHuxXxgZep2W0%2BMxdkw74fJBTxikcXa79xa%2B2gLPgfrBtPRprj%2Bgt8M2NpfmfvucypcsahtPu9rGsbl4j2OlSMPzPUzaygevckcs%2BnM\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-length: 1766\r\ncf-ray: a0db87665fa0569b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1766,"size_decoded":2474,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"bd032d84e7dd874f19808839ca4b8a7c","sha1":"422e8c55fb35beb88b1da5b147a0f21e61fe6dee","sha256":"945cceaf66a6e82c7cf3bf882d876efa306a4c3d2ea0d7bf01702f46c0531be2","sha512":"3eddf98f194370872df01fcad21a1b337402c158d44ff1e6a950b905112db3336faa4db5370e4473362e62eaaab583f692f3d7f30ce81199d9d97741f416538d","ssdeep":"","tlshash":"43314dd284704388ae184625d37bdd48701c9e57747f8b3167e110444718f67b29f33b","first_seen":"2025-08-11T21:39:04.764994Z","last_seen":"2026-06-18T19:31:13.745565Z","times_seen":33,"resource_available":false,"data":null}},"time_used":233,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":233,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"phase2-xrpfi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"phase2-xrpfi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"phase2-xrpfi.com/ankr-1-1.webp","fqdn":"phase2-xrpfi.com","domain":"phase2-xrpfi.com","tld":"com"},"ip":{"addr":"172.67.197.157","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://phase2-xrpfi.com/","date":"2026-06-18T16:04:17.016Z","timestamp":1781798657016,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"phase2-xrpfi.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Jun 2026 09:59:40 GMT","end":"Sun, 06 Sep 2026 10:57:00 GMT"},"fingerprint":{"sha1":"09:46:15:EE:E5:36:A7:4E:0B:DE:64:A1:0E:7A:47:98:BE:3A:FD:ED","sha256":"51:A8:A6:DC:2F:00:48:0C:46:4D:A9:F7:15:02:FF:D6:42:A8:3D:2C:C5:A5:9C:AC:93:BC:77:16:5D:57:78:D2"}}},"request":{"raw":"GET /ankr-1-1.webp HTTP/1.1\r\nHost: phase2-xrpfi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://phase2-xrpfi.com/\r\nCookie: cf_clearance=3dDDftPuP8Orcsu8EPJqRGA8SI7fXKOo9EyyENnMTko-1781798655-1.2.1.1-_.es7GeTtSCtToaztdb37PtL0Q1MMryDzKOb_HFjONKSI9SWJ9zmjHh9IzaNOCe_a49K45T2J9DDBD4cXu7AQbSKreno2FLMtJbW1pUwuCXj2GIAqDxX04QQM1Gdh0Coue1Jg4k1qEi7V2kg8jsZ_fFURgMEwRDOIW0bsW6aEtUPFrCAzfcKMM_OJSCc5QzEKNFM5VLoB6gCoW_dtlP7S9MwCDybt1LdlsSMlWrV966zQDu3.fSkgjPX7YH_BdCJ6xwpGuD1vdVBjXePcw4w4KmvHWZKNg1Z5atG_sqUEENZ3iLOTGCThDT23MgQWDjvSlwOjOfHtYL8Xg2_RKAusWFoV24lUhXqWZboI4DQQ_WrrAq4Y9HxV_0ij9Nxdl25xC594wFDj4xdba5WMvkP8OhM3ycqKmUuo9MC9VwQIHuaD5UccAdwS_PLO3wAXcL8MOKlt_zRwnUEUXAHQEznZYKp8xmkJjHzdLlqmOXou2jeRJC7MWL8F6xmw2v5fTwZ\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: image/webp\r\netag: \"74a99529b73a19efaf2d7e028cda1c9b\"\r\nlast-modified: Mon, 08 Jun 2026 10:56:26 GMT\r\ndate: Thu, 18 Jun 2026 16:04:17 GMT\r\nserver: cloudflare\r\npriority: u=5,i\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IoV%2FD2%2FOkAr8QqWzN2pNIa3YUYRFhakCGMdbhoITu7%2B7wWkeV5xeV7%2BBjxY0Sh4bJgu0hmdEOFFLBY5EvMBMJO3oUDzDa3hX%2Bi%2ButNJuCNTDKnCnvpndgFmZ8VkJtyFq%2FLEJ\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-length: 1504\r\ncf-ray: a0db87666fa1569b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1504,"size_decoded":2218,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"74a99529b73a19efaf2d7e028cda1c9b","sha1":"87f011fee23c56de730cb79b6ddf36a7f5ed92be","sha256":"794f63b21ecf0941b26436e18d536c830abcbf5332832baaa53821f95c5b87d8","sha512":"8c7a72c51cd3b350d1e0e8ca3de82da58be817b6603c47f6f5d62acefefa894dd69176cbd2f0179e8d1266bc40b7e4c0fdaf6ae0166f193449241f29856a779b","ssdeep":"","tlshash":"c331d78a3b637026e10c053831cc1122622048143a29bc23593fb4f80420691e5badab","first_seen":"2025-08-11T21:39:04.736165Z","last_seen":"2026-06-18T19:31:13.736772Z","times_seen":33,"resource_available":false,"data":null}},"time_used":318,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":318,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"phase2-xrpfi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"phase2-xrpfi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}}]}