{"report_id":"7874b1e2-a59c-49c9-b57d-d85bfafe3f6c","version":0,"status":"done","tags":[],"date":"2026-07-03T15:17:01Z","url":{"schema":"https","addr":"checkfirelight.info/","fqdn":"checkfirelight.info","domain":"checkfirelight.info","tld":"info"},"ip":{"addr":"172.67.128.191","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"about","addr":"about:privatebrowsing","fqdn":"","domain":"","tld":""},"title":"New Private Tab","dom":{"size":4247,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"3b4b47295c61c76d16ecc2340682b7c7","sha1":"68f9c12f351c477994c753909a67706e033a6cd3","sha256":"47b02f791fb5cd4958ce1eddb6372aa9fe22da8a0ff8e431231e30ef420e9516","sha512":"c683387d5a99fa77429caf65e8b96fea282a4db68c2c52bb32394ebcd7f9342f6a9b57b203e3a736ca8d30a5ba41c75fb1c0eedab0fa44f5891f3281a5ff0b63","ssdeep":"96:DJFs1Bx13gb61j1l0zH7gx10UFZV4jl22D+i8kDNLeOl:H61rpfmULV4jM2D+z0sI","tlshash":"9e9162a544f5663b18a386a9e9d07f479f817607ce8d29417baf00e31f87d54c46f20c","dom_hash":"domhashe55c5b0a9b0c37e90d2a11b31f2bc448","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"checkfirelight.info/","fqdn":"checkfirelight.info","domain":"checkfirelight.info","tld":"info"},"ip":{"addr":"172.67.128.191","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-08-07T15:17:01Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":82}},"detection":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-03","alert":"Sinkholed","trigger":"gateway.irys.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-03","alert":"Sinkholed","trigger":"checkfirelight.info","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-03","alert":"Sinkholed","trigger":"checkfirelight.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-03","alert":"Sinkholed","trigger":"enr4cxf3dl3xz57mcmmg6wlxvi7gda2w5xdradzypkaigsdonhma.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-03","alert":"Sinkholed","trigger":"enr4cxf3dl3xz57mcmmg6wlxvi7gda2w5xdradzypkaigsdonhma.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-03","alert":"Sinkholed","trigger":"enr4cxf3dl3xz57mcmmg6wlxvi7gda2w5xdradzypkaigsdonhma.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-03","alert":"Sinkholed","trigger":"aa5xkwqvefm3tszfisosqh6wdakhahxso3jyl5d5wsibuczex6ma.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-03","alert":"Sinkholed","trigger":"aa5xkwqvefm3tszfisosqh6wdakhahxso3jyl5d5wsibuczex6ma.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-03","alert":"Sinkholed","trigger":"aa5xkwqvefm3tszfisosqh6wdakhahxso3jyl5d5wsibuczex6ma.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-03","alert":"Sinkholed","trigger":"egp3uffvpgr2wpafcervpo3f64y2lpvikbnscmfvn3udttq77joq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-03","alert":"Sinkholed","trigger":"egp3uffvpgr2wpafcervpo3f64y2lpvikbnscmfvn3udttq77joq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-03","alert":"Sinkholed","trigger":"egp3uffvpgr2wpafcervpo3f64y2lpvikbnscmfvn3udttq77joq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-03","alert":"Sinkholed","trigger":"wqfquz32a4lzecqogmqyxh4zeqpie2ndhtrq2liju6ygvivvaykq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-03","alert":"Sinkholed","trigger":"wqfquz32a4lzecqogmqyxh4zeqpie2ndhtrq2liju6ygvivvaykq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-03","alert":"Sinkholed","trigger":"wqfquz32a4lzecqogmqyxh4zeqpie2ndhtrq2liju6ygvivvaykq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-03","alert":"Sinkholed","trigger":"re3ropp2geh4d5qidoozfesfsagireabcedh4j6agvkzpc463fcq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-03","alert":"Sinkholed","trigger":"re3ropp2geh4d5qidoozfesfsagireabcedh4j6agvkzpc463fcq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-03","alert":"Sinkholed","trigger":"re3ropp2geh4d5qidoozfesfsagireabcedh4j6agvkzpc463fcq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-03","alert":"Sinkholed","trigger":"buutf2tmltbd5uchhy32zl6l6dichmeqmkfy746sru4cutui7g3q.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-03","alert":"Sinkholed","trigger":"buutf2tmltbd5uchhy32zl6l6dichmeqmkfy746sru4cutui7g3q.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-03","alert":"Sinkholed","trigger":"buutf2tmltbd5uchhy32zl6l6dichmeqmkfy746sru4cutui7g3q.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-03","alert":"Sinkholed","trigger":"kezjuikcsaiyqvsd2w32dhijntrtnjkh4vwendcd35dw34hhszna.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-03","alert":"Sinkholed","trigger":"kezjuikcsaiyqvsd2w32dhijntrtnjkh4vwendcd35dw34hhszna.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-03","alert":"Sinkholed","trigger":"kezjuikcsaiyqvsd2w32dhijntrtnjkh4vwendcd35dw34hhszna.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-03","alert":"Sinkholed","trigger":"hkmjhyubcmyt55tyslqmyt4arfmczeuf7xtrysanzghe6n5ezduq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-03","alert":"Sinkholed","trigger":"hkmjhyubcmyt55tyslqmyt4arfmczeuf7xtrysanzghe6n5ezduq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-03","alert":"Sinkholed","trigger":"hkmjhyubcmyt55tyslqmyt4arfmczeuf7xtrysanzghe6n5ezduq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-03","alert":"Sinkholed","trigger":"e5pt46sfryibvjq4hrrz5src2xmfrc7jvtiolpsp3jzjl4eyeaga.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-03","alert":"Sinkholed","trigger":"e5pt46sfryibvjq4hrrz5src2xmfrc7jvtiolpsp3jzjl4eyeaga.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-03","alert":"Sinkholed","trigger":"e5pt46sfryibvjq4hrrz5src2xmfrc7jvtiolpsp3jzjl4eyeaga.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-03","alert":"Sinkholed","trigger":"lzqmfxcfxzkmtpb2kkhciww2krq6nbxvcrakzllef64mn2325ugq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-03","alert":"Sinkholed","trigger":"lzqmfxcfxzkmtpb2kkhciww2krq6nbxvcrakzllef64mn2325ugq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-03","alert":"Sinkholed","trigger":"lzqmfxcfxzkmtpb2kkhciww2krq6nbxvcrakzllef64mn2325ugq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-03","alert":"Sinkholed","trigger":"jfrwbu3xjectzwr6zpvpvbewqkwb3tvpr7kikhkfa7gcmzugoycq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-03","alert":"Sinkholed","trigger":"jfrwbu3xjectzwr6zpvpvbewqkwb3tvpr7kikhkfa7gcmzugoycq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-03","alert":"Sinkholed","trigger":"jfrwbu3xjectzwr6zpvpvbewqkwb3tvpr7kikhkfa7gcmzugoycq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-03","alert":"Sinkholed","trigger":"sxkbzjsq65wh654do6f2fcn4t5phs2iozxkrihpxbz4jaqr3fuaq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-03","alert":"Sinkholed","trigger":"sxkbzjsq65wh654do6f2fcn4t5phs2iozxkrihpxbz4jaqr3fuaq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-03","alert":"Sinkholed","trigger":"sxkbzjsq65wh654do6f2fcn4t5phs2iozxkrihpxbz4jaqr3fuaq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-03","alert":"Sinkholed","trigger":"zzcs2m5lomlcptku6ihjjgjt3gz7ni5ok2jfwmd7eiwlz2a5giaq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-03","alert":"Sinkholed","trigger":"zzcs2m5lomlcptku6ihjjgjt3gz7ni5ok2jfwmd7eiwlz2a5giaq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-03","alert":"Sinkholed","trigger":"zzcs2m5lomlcptku6ihjjgjt3gz7ni5ok2jfwmd7eiwlz2a5giaq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-03","alert":"Sinkholed","trigger":"ukhvzo2rrxh7wozvlpmgie2zqeaaaquohhrc7a6usunqtlubkr7a.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-03","alert":"Sinkholed","trigger":"ukhvzo2rrxh7wozvlpmgie2zqeaaaquohhrc7a6usunqtlubkr7a.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-03","alert":"Sinkholed","trigger":"ukhvzo2rrxh7wozvlpmgie2zqeaaaquohhrc7a6usunqtlubkr7a.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-03","alert":"Sinkholed","trigger":"v57bhor75skl3yh2fasy5zibmxu374hc564a5oiidpjj3yk5qoua.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-03","alert":"Sinkholed","trigger":"v57bhor75skl3yh2fasy5zibmxu374hc564a5oiidpjj3yk5qoua.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-03","alert":"Sinkholed","trigger":"v57bhor75skl3yh2fasy5zibmxu374hc564a5oiidpjj3yk5qoua.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-03","alert":"Sinkholed","trigger":"api.checkfirelight.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-03","alert":"Sinkholed","trigger":"api.checkfirelight.info","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-03","alert":"Sinkholed","trigger":"iv4gcnkpfdnodp3rm73df3m6vnf4ucnpjwdlcsrtmns4li5aljfq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-03","alert":"Sinkholed","trigger":"iv4gcnkpfdnodp3rm73df3m6vnf4ucnpjwdlcsrtmns4li5aljfq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-03","alert":"Sinkholed","trigger":"iv4gcnkpfdnodp3rm73df3m6vnf4ucnpjwdlcsrtmns4li5aljfq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-03","alert":"Sinkholed","trigger":"ipgv6k3cx6mftzzxhfhhzv64ydqttwwd4p6dtqjffey5ckd47buq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-03","alert":"Sinkholed","trigger":"ipgv6k3cx6mftzzxhfhhzv64ydqttwwd4p6dtqjffey5ckd47buq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-03","alert":"Sinkholed","trigger":"ipgv6k3cx6mftzzxhfhhzv64ydqttwwd4p6dtqjffey5ckd47buq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-03","alert":"Sinkholed","trigger":"lqm65l4rsie7lcqzwyygqd4xmycpt6vpx7jqzqhlj6x4xnaxvvva.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-03","alert":"Sinkholed","trigger":"lqm65l4rsie7lcqzwyygqd4xmycpt6vpx7jqzqhlj6x4xnaxvvva.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-03","alert":"Sinkholed","trigger":"lqm65l4rsie7lcqzwyygqd4xmycpt6vpx7jqzqhlj6x4xnaxvvva.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-03","alert":"Sinkholed","trigger":"4zbpk6lzsya26tazaje3yw7d6st53o23iriglps2sp2bnpqb6e7q.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-03","alert":"Sinkholed","trigger":"4zbpk6lzsya26tazaje3yw7d6st53o23iriglps2sp2bnpqb6e7q.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-03","alert":"Sinkholed","trigger":"4zbpk6lzsya26tazaje3yw7d6st53o23iriglps2sp2bnpqb6e7q.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-03","alert":"Sinkholed","trigger":"t73giqqwtpkhhdyyeszo2vv4sqyyuafuk7y2deshpm3xftc7jg7q.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-03","alert":"Sinkholed","trigger":"t73giqqwtpkhhdyyeszo2vv4sqyyuafuk7y2deshpm3xftc7jg7q.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-03","alert":"Sinkholed","trigger":"t73giqqwtpkhhdyyeszo2vv4sqyyuafuk7y2deshpm3xftc7jg7q.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-03","alert":"Sinkholed","trigger":"65anjlffv6f37wsp5aoj34ltgjeakkozcoaujzb6feeub2bhg67a.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-03","alert":"Sinkholed","trigger":"65anjlffv6f37wsp5aoj34ltgjeakkozcoaujzb6feeub2bhg67a.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-03","alert":"Sinkholed","trigger":"65anjlffv6f37wsp5aoj34ltgjeakkozcoaujzb6feeub2bhg67a.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-03","alert":"Sinkholed","trigger":"noteworthy-lox.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-03","alert":"Sinkholed","trigger":"noteworthy-lox.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-03","alert":"Sinkholed","trigger":"zunczd3cinnovpzh2w3sv4yyf4ycdzgcmlyvoo2eu3edqrvshgvq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-03","alert":"Sinkholed","trigger":"zunczd3cinnovpzh2w3sv4yyf4ycdzgcmlyvoo2eu3edqrvshgvq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-03","alert":"Sinkholed","trigger":"zunczd3cinnovpzh2w3sv4yyf4ycdzgcmlyvoo2eu3edqrvshgvq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-03","alert":"Sinkholed","trigger":"ipzqcmr26hbzpnzybg3ewzxzuu26ypvig3lp4irbfe643kmo3g5a.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-03","alert":"Sinkholed","trigger":"ipzqcmr26hbzpnzybg3ewzxzuu26ypvig3lp4irbfe643kmo3g5a.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-03","alert":"Sinkholed","trigger":"ipzqcmr26hbzpnzybg3ewzxzuu26ypvig3lp4irbfe643kmo3g5a.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-03","alert":"Sinkholed","trigger":"3piw7lupog56srrpctt46tuuiroz3dh47v2vjdtocircg3f7u4za.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-03","alert":"Sinkholed","trigger":"3piw7lupog56srrpctt46tuuiroz3dh47v2vjdtocircg3f7u4za.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-03","alert":"Sinkholed","trigger":"3piw7lupog56srrpctt46tuuiroz3dh47v2vjdtocircg3f7u4za.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-03","alert":"Sinkholed","trigger":"f6xwz3lwcfil7qwaikhvuopkgolm7x4zdfqegfkqcoceimvb65bq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-03","alert":"Sinkholed","trigger":"f6xwz3lwcfil7qwaikhvuopkgolm7x4zdfqegfkqcoceimvb65bq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-03","alert":"Sinkholed","trigger":"f6xwz3lwcfil7qwaikhvuopkgolm7x4zdfqegfkqcoceimvb65bq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null},"summary":[{"fqdn":"arbitrum.meowrpc.com","ip":{"addr":"172.67.70.45","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2023-05-04","domain_rank":2819481,"first_seen":"2025-08-16T04:05:13.25434Z","last_seen":"2026-07-02T20:32:09.595054Z","alert_count":0,"request_count":2,"received_data":1545,"sent_data":1083,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"zzcs2m5lomlcptku6ihjjgjt3gz7ni5ok2jfwmd7eiwlz2a5giaq.mainnet-1.datasprite-cdn.com","ip":{"addr":"104.21.15.158","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-04-02","domain_rank":0,"first_seen":"2026-06-11T07:30:21.665153Z","last_seen":"2026-06-22T09:56:27.078902Z","alert_count":3,"request_count":1,"received_data":0,"sent_data":612,"comment":"","tags":null,"fingerprints":null},{"fqdn":"lqm65l4rsie7lcqzwyygqd4xmycpt6vpx7jqzqhlj6x4xnaxvvva.mainnet-1.datasprite-cdn.com","ip":{"addr":"104.21.15.158","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-04-02","domain_rank":0,"first_seen":"2026-06-11T07:30:15.472116Z","last_seen":"2026-06-22T09:56:19.810087Z","alert_count":3,"request_count":1,"received_data":0,"sent_data":612,"comment":"","tags":null,"fingerprints":null},{"fqdn":"gateway.irys.xyz","ip":{"addr":"104.20.31.170","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2023-03-25","domain_rank":2119884,"first_seen":"2023-11-30T18:58:13Z","last_seen":"2026-06-22T09:56:26.737132Z","alert_count":57,"request_count":57,"received_data":29423,"sent_data":32944,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"re3ropp2geh4d5qidoozfesfsagireabcedh4j6agvkzpc463fcq.mainnet-1.datasprite-cdn.com","ip":{"addr":"104.21.15.158","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-04-02","domain_rank":0,"first_seen":"2026-06-11T07:30:22.220629Z","last_seen":"2026-06-22T09:56:21.706422Z","alert_count":3,"request_count":1,"received_data":0,"sent_data":612,"comment":"","tags":null,"fingerprints":null},{"fqdn":"ukhvzo2rrxh7wozvlpmgie2zqeaaaquohhrc7a6usunqtlubkr7a.mainnet-1.datasprite-cdn.com","ip":{"addr":"104.21.15.158","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-04-02","domain_rank":0,"first_seen":"2026-06-11T07:30:17.159815Z","last_seen":"2026-06-28T11:15:40.472002Z","alert_count":3,"request_count":1,"received_data":0,"sent_data":612,"comment":"","tags":null,"fingerprints":null},{"fqdn":"arbitrum.drpc.org","ip":{"addr":"104.18.10.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2005-01-09","domain_rank":1951970,"first_seen":"2024-10-14T17:26:29.664661Z","last_seen":"2026-06-24T11:04:01.014303Z","alert_count":0,"request_count":2,"received_data":1465,"sent_data":1077,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"zunczd3cinnovpzh2w3sv4yyf4ycdzgcmlyvoo2eu3edqrvshgvq.mainnet-1.datasprite-cdn.com","ip":{"addr":"104.21.15.158","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-04-02","domain_rank":0,"first_seen":"2026-06-13T04:41:16.549772Z","last_seen":"2026-06-24T18:48:25.656798Z","alert_count":3,"request_count":1,"received_data":0,"sent_data":612,"comment":"","tags":null,"fingerprints":null},{"fqdn":"sxkbzjsq65wh654do6f2fcn4t5phs2iozxkrihpxbz4jaqr3fuaq.mainnet-1.datasprite-cdn.com","ip":{"addr":"172.67.163.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-04-02","domain_rank":0,"first_seen":"2026-06-11T07:30:17.372315Z","last_seen":"2026-06-22T17:53:32.256682Z","alert_count":3,"request_count":1,"received_data":0,"sent_data":612,"comment":"","tags":null,"fingerprints":null},{"fqdn":"api.checkfirelight.info","ip":{"addr":"104.21.1.68","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":2,"request_count":1,"received_data":7875,"sent_data":482,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"ipgv6k3cx6mftzzxhfhhzv64ydqttwwd4p6dtqjffey5ckd47buq.mainnet-1.datasprite-cdn.com","ip":{"addr":"104.21.15.158","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-04-02","domain_rank":0,"first_seen":"2026-06-11T07:30:15.954615Z","last_seen":"2026-06-22T09:56:23.342306Z","alert_count":3,"request_count":1,"received_data":0,"sent_data":612,"comment":"","tags":null,"fingerprints":null},{"fqdn":"wqfquz32a4lzecqogmqyxh4zeqpie2ndhtrq2liju6ygvivvaykq.mainnet-1.datasprite-cdn.com","ip":{"addr":"104.21.15.158","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-04-02","domain_rank":0,"first_seen":"2026-06-11T07:30:19.1075Z","last_seen":"2026-07-01T06:57:01.006612Z","alert_count":3,"request_count":1,"received_data":0,"sent_data":612,"comment":"","tags":null,"fingerprints":null},{"fqdn":"buutf2tmltbd5uchhy32zl6l6dichmeqmkfy746sru4cutui7g3q.mainnet-1.datasprite-cdn.com","ip":{"addr":"104.21.15.158","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-04-02","domain_rank":0,"first_seen":"2026-06-11T07:30:15.397557Z","last_seen":"2026-06-24T18:48:27.142979Z","alert_count":3,"request_count":1,"received_data":0,"sent_data":611,"comment":"","tags":null,"fingerprints":null},{"fqdn":"hkmjhyubcmyt55tyslqmyt4arfmczeuf7xtrysanzghe6n5ezduq.mainnet-1.datasprite-cdn.com","ip":{"addr":"104.21.15.158","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-04-02","domain_rank":0,"first_seen":"2026-06-11T07:30:14.514043Z","last_seen":"2026-06-22T17:53:31.960264Z","alert_count":3,"request_count":1,"received_data":0,"sent_data":612,"comment":"","tags":null,"fingerprints":null},{"fqdn":"v57bhor75skl3yh2fasy5zibmxu374hc564a5oiidpjj3yk5qoua.mainnet-1.datasprite-cdn.com","ip":{"addr":"172.67.163.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-04-02","domain_rank":0,"first_seen":"2026-06-11T07:30:16.300482Z","last_seen":"2026-06-22T17:53:33.050286Z","alert_count":3,"request_count":1,"received_data":0,"sent_data":612,"comment":"","tags":null,"fingerprints":null},{"fqdn":"arbitrum.llamarpc.com","ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2022-02-07","domain_rank":3027975,"first_seen":"2023-12-02T14:30:00Z","last_seen":"2026-07-02T20:32:09.70465Z","alert_count":0,"request_count":1,"received_data":0,"sent_data":559,"comment":"","tags":null,"fingerprints":null},{"fqdn":"3piw7lupog56srrpctt46tuuiroz3dh47v2vjdtocircg3f7u4za.mainnet-1.datasprite-cdn.com","ip":{"addr":"104.21.15.158","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-04-02","domain_rank":0,"first_seen":"2026-06-11T07:30:21.213765Z","last_seen":"2026-06-24T18:48:27.403581Z","alert_count":3,"request_count":1,"received_data":0,"sent_data":612,"comment":"","tags":null,"fingerprints":null},{"fqdn":"enr4cxf3dl3xz57mcmmg6wlxvi7gda2w5xdradzypkaigsdonhma.mainnet-1.datasprite-cdn.com","ip":{"addr":"104.21.15.158","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-04-02","domain_rank":0,"first_seen":"2026-06-11T07:30:20.285114Z","last_seen":"2026-06-24T18:48:26.513673Z","alert_count":3,"request_count":1,"received_data":0,"sent_data":612,"comment":"","tags":null,"fingerprints":null},{"fqdn":"4zbpk6lzsya26tazaje3yw7d6st53o23iriglps2sp2bnpqb6e7q.mainnet-1.datasprite-cdn.com","ip":{"addr":"104.21.15.158","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-04-02","domain_rank":0,"first_seen":"2026-06-11T07:30:17.356019Z","last_seen":"2026-06-22T09:56:20.749382Z","alert_count":3,"request_count":1,"received_data":0,"sent_data":612,"comment":"","tags":null,"fingerprints":null},{"fqdn":"checkfirelight.info","ip":{"addr":"172.67.128.191","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":88,"request_count":44,"received_data":6202014,"sent_data":51607,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Framer Sites","description":"Framer is a no-code web design platform for designing and publishing responsive websites.","website":"https://www.framer.com","common_platform_enumeration":"","icon":"Framer Sites.svg","categories":["CMS","Page builders"]},{"name":"React","description":"React is an open-source JavaScript library for building user interfaces or UI components.","website":"https://reactjs.org","common_platform_enumeration":"cpe:2.3:a:facebook:react:*:*:*:*:*:*:*:*","icon":"React.svg","categories":["JavaScript frameworks"]}]},{"fqdn":"kezjuikcsaiyqvsd2w32dhijntrtnjkh4vwendcd35dw34hhszna.mainnet-1.datasprite-cdn.com","ip":{"addr":"104.21.15.158","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-04-02","domain_rank":0,"first_seen":"2026-06-11T07:30:18.271691Z","last_seen":"2026-06-22T09:56:20.974199Z","alert_count":3,"request_count":1,"received_data":0,"sent_data":612,"comment":"","tags":null,"fingerprints":null},{"fqdn":"lzqmfxcfxzkmtpb2kkhciww2krq6nbxvcrakzllef64mn2325ugq.mainnet-1.datasprite-cdn.com","ip":{"addr":"104.21.15.158","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-04-02","domain_rank":0,"first_seen":"2026-06-11T07:30:17.165286Z","last_seen":"2026-06-22T09:56:20.287828Z","alert_count":3,"request_count":1,"received_data":0,"sent_data":612,"comment":"","tags":null,"fingerprints":null},{"fqdn":"arbitrum.gateway.tenderly.co","ip":{"addr":"35.227.193.242","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"domain_registered":"2020-05-11","domain_rank":0,"first_seen":"2025-08-03T10:23:07.270939Z","last_seen":"2026-07-02T20:32:10.880165Z","alert_count":0,"request_count":2,"received_data":1213,"sent_data":1099,"comment":"","tags":null,"fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}]},{"fqdn":"iv4gcnkpfdnodp3rm73df3m6vnf4ucnpjwdlcsrtmns4li5aljfq.mainnet-1.datasprite-cdn.com","ip":{"addr":"104.21.15.158","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-04-02","domain_rank":0,"first_seen":"2026-06-11T07:30:14.504231Z","last_seen":"2026-06-22T17:53:31.778367Z","alert_count":3,"request_count":1,"received_data":0,"sent_data":612,"comment":"","tags":null,"fingerprints":null},{"fqdn":"t73giqqwtpkhhdyyeszo2vv4sqyyuafuk7y2deshpm3xftc7jg7q.mainnet-1.datasprite-cdn.com","ip":{"addr":"104.21.15.158","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-04-02","domain_rank":0,"first_seen":"2026-06-11T07:30:19.791287Z","last_seen":"2026-06-22T09:56:22.102825Z","alert_count":3,"request_count":1,"received_data":0,"sent_data":612,"comment":"","tags":null,"fingerprints":null},{"fqdn":"challenges.cloudflare.com","ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-02-17","domain_rank":11393,"first_seen":"2021-10-20T05:02:03Z","last_seen":"2026-06-28T23:33:38.028008Z","alert_count":0,"request_count":8,"received_data":922101,"sent_data":6403,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"egp3uffvpgr2wpafcervpo3f64y2lpvikbnscmfvn3udttq77joq.mainnet-1.datasprite-cdn.com","ip":{"addr":"104.21.15.158","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-04-02","domain_rank":0,"first_seen":"2026-06-11T07:30:20.987253Z","last_seen":"2026-06-24T18:48:25.770847Z","alert_count":3,"request_count":1,"received_data":0,"sent_data":612,"comment":"","tags":null,"fingerprints":null},{"fqdn":"65anjlffv6f37wsp5aoj34ltgjeakkozcoaujzb6feeub2bhg67a.mainnet-1.datasprite-cdn.com","ip":{"addr":"104.21.15.158","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-04-02","domain_rank":0,"first_seen":"2026-06-11T07:30:14.502245Z","last_seen":"2026-06-22T09:56:26.037316Z","alert_count":3,"request_count":1,"received_data":0,"sent_data":612,"comment":"","tags":null,"fingerprints":null},{"fqdn":"ipzqcmr26hbzpnzybg3ewzxzuu26ypvig3lp4irbfe643kmo3g5a.mainnet-1.datasprite-cdn.com","ip":{"addr":"104.21.15.158","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-04-02","domain_rank":0,"first_seen":"2026-06-11T07:30:18.148619Z","last_seen":"2026-07-03T03:00:50.132739Z","alert_count":3,"request_count":1,"received_data":0,"sent_data":612,"comment":"","tags":null,"fingerprints":null},{"fqdn":"f6xwz3lwcfil7qwaikhvuopkgolm7x4zdfqegfkqcoceimvb65bq.mainnet-1.datasprite-cdn.com","ip":{"addr":"104.21.15.158","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-04-02","domain_rank":0,"first_seen":"2026-06-11T07:30:19.714098Z","last_seen":"2026-06-22T17:53:33.165703Z","alert_count":3,"request_count":1,"received_data":0,"sent_data":612,"comment":"","tags":null,"fingerprints":null},{"fqdn":"aa5xkwqvefm3tszfisosqh6wdakhahxso3jyl5d5wsibuczex6ma.mainnet-1.datasprite-cdn.com","ip":{"addr":"104.21.15.158","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-04-02","domain_rank":0,"first_seen":"2026-06-11T07:30:16.930397Z","last_seen":"2026-06-22T09:56:22.841687Z","alert_count":3,"request_count":1,"received_data":0,"sent_data":611,"comment":"","tags":null,"fingerprints":null},{"fqdn":"esm.sh","ip":{"addr":"172.67.70.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2020-09-06","domain_rank":47501,"first_seen":"2020-09-23T23:39:41Z","last_seen":"2026-06-27T18:40:22.999644Z","alert_count":0,"request_count":4,"received_data":21687,"sent_data":1868,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"e5pt46sfryibvjq4hrrz5src2xmfrc7jvtiolpsp3jzjl4eyeaga.mainnet-1.datasprite-cdn.com","ip":{"addr":"104.21.15.158","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-04-02","domain_rank":0,"first_seen":"2026-06-13T04:41:16.529093Z","last_seen":"2026-06-22T09:56:20.060709Z","alert_count":3,"request_count":1,"received_data":0,"sent_data":612,"comment":"","tags":null,"fingerprints":null},{"fqdn":"jfrwbu3xjectzwr6zpvpvbewqkwb3tvpr7kikhkfa7gcmzugoycq.mainnet-1.datasprite-cdn.com","ip":{"addr":"104.21.15.158","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-04-02","domain_rank":0,"first_seen":"2026-06-11T07:30:22.683703Z","last_seen":"2026-06-22T09:56:21.551118Z","alert_count":3,"request_count":1,"received_data":0,"sent_data":612,"comment":"","tags":null,"fingerprints":null},{"fqdn":"arb1.arbitrum.io","ip":{"addr":"104.20.39.96","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2018-01-03","domain_rank":513999,"first_seen":"2021-05-28T20:40:01Z","last_seen":"2026-07-02T20:32:09.671396Z","alert_count":0,"request_count":2,"received_data":1169,"sent_data":1081,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}]},{"fqdn":"rpc.ankr.com","ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2007-04-23","domain_rank":541361,"first_seen":"2021-10-24T12:41:06Z","last_seen":"2026-06-29T09:53:28.307995Z","alert_count":0,"request_count":1,"received_data":0,"sent_data":558,"comment":"","tags":null,"fingerprints":null},{"fqdn":"noteworthy-lox.xyz","ip":{"addr":"172.67.166.95","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-06-08","domain_rank":0,"first_seen":"2026-06-08T14:54:56.894128Z","last_seen":"2026-07-02T20:32:10.868878Z","alert_count":2,"request_count":1,"received_data":4777180,"sent_data":479,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"arbitrum-one.publicnode.com","ip":{"addr":"104.20.24.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2016-08-16","domain_rank":3618652,"first_seen":"2023-07-09T07:25:43Z","last_seen":"2026-06-29T09:53:28.446702Z","alert_count":0,"request_count":2,"received_data":1597,"sent_data":1097,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}]},{"fqdn":"brunhild.challenges.cloudflare.com","ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2009-02-17","domain_rank":0,"first_seen":"2026-06-24T10:51:41.235285Z","last_seen":"2026-07-01T10:54:50.048577Z","alert_count":0,"request_count":1,"received_data":0,"sent_data":628,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"challenges.cloudflare.com/d816f75f-62f2-47b8-b023-e0e8ff77771c","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"","is_inline":false,"md5":"12a73182cb7b679ff84e21e7bf09d27a","sha1":"d716ab2b29547c960871672d6ed4530e52545899","sha256":"d7973d089c07e09a74e84f139d17515e78d4960d8b56f82ce5f4ddb303d2f8e9","sha512":"069e89de2214a608cce421d4efac73947445be9005615aa416eae6b841d4ce1e644d37459429143cce03307851a7762bb9080e7cf020dd5eca29fb9979c844c6","ssdeep":"","tlshash":"abd0cd0a3d71d70882a221337c7f3526d1656264654d52445739cef9cb506af2524f54","size":291,"data":"","first_seen":"2026-07-02T08:33:31.153985Z","last_seen":"2026-07-03T19:19:47.228246Z","times_seen":1528,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/av0/rch/n1hp3/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-07-03T19:16:17.914935Z","times_seen":762211,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/av0/rch/n1hp3/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"58a8411e3d4bee53952d73c4b522409b","sha1":"f57dc00099a43a829c851428db12837f78616aa7","sha256":"4d963e78dfb237dcd8d4e7d7d2957612575b2613fa4953b84ac1f0c340bbb031","sha512":"13b5c35ac911cf44c7747ca3e255c0f44ef852163b1ad7f1fa439b228c4204c8fe218bf44ee22906b1dddbdd76ca9583d161669028268785c8420c29169f4e4b","ssdeep":"3:N/BKL1X0LdVn:eL1GV","tlshash":"fb5504c0754031701414c404d570147d515515011317044174dd04d5173100400f05c0","size":1337359,"data":"","first_seen":"2026-07-03T15:17:27.630084Z","last_seen":"2026-07-03T15:17:27.630084Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/av0/rch/n1hp3/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"530a96de7d088d27653001e89b4c675f","sha1":"08e4ffedc5aff2771eb9aaf246334972e3c29d67","sha256":"37361fd440041b8d6f1c4d58f0edc1362cd15e26fc63c2ebd3e4d2e2f5b1b173","sha512":"0a5c5482c9eeb503d03e13d35eae8bc29a8b3b067d86b8df98e3e1bc2dd9eec7edf84239770cb06842e263949c4c3e7a77a58391791efacf68e9f07d5644ae36","ssdeep":"3:N/BKL1X0Lvn:eL1+","tlshash":"f75504c0f4403170041cd40cd550143dd33d15001315144170dd04d5173401400f05c0","size":1337359,"data":"","first_seen":"2026-07-03T15:17:27.631477Z","last_seen":"2026-07-03T15:17:27.631477Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/672e4340-2273-4749-98c7-da52c4407a14","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"","is_inline":false,"md5":"12a73182cb7b679ff84e21e7bf09d27a","sha1":"d716ab2b29547c960871672d6ed4530e52545899","sha256":"d7973d089c07e09a74e84f139d17515e78d4960d8b56f82ce5f4ddb303d2f8e9","sha512":"069e89de2214a608cce421d4efac73947445be9005615aa416eae6b841d4ce1e644d37459429143cce03307851a7762bb9080e7cf020dd5eca29fb9979c844c6","ssdeep":"","tlshash":"abd0cd0a3d71d70882a221337c7f3526d1656264654d52445739cef9cb506af2524f54","size":291,"data":"","first_seen":"2026-07-02T08:33:31.153985Z","last_seen":"2026-07-03T19:19:47.228246Z","times_seen":1528,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"checkfirelight.info/","fqdn":"checkfirelight.info","domain":"checkfirelight.info","tld":"info"},"ip":{"addr":"172.67.128.191","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"d48c7bb97b73d3d49c38db29034aa4d1","sha1":"b1550c3b870576f7ade990ae933de7bb4d12888a","sha256":"1329538f48c9d5c67df1c5d9789d9b40a710240acc951c63b3d764b6692687f3","sha512":"df50da01468582d7a016f4f062981cb241f77d7aa202ed947cb677f1753e376b52654594e689108e2e649bb4c86e7ba76c96a6534332bddf4b606e9ad7c3736a","ssdeep":"","tlshash":"d2c02b883bc4e014c34525355c6f43c6fa38df600c481083e4024149b9b471003def1f","size":137,"data":"","first_seen":"2026-07-02T08:33:31.180267Z","last_seen":"2026-07-03T19:19:47.239526Z","times_seen":1577,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/turnstile/v0/b/80a697ecdece/api.js?onload=zzCI2\u0026render=explicit","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9bac72699d1e8dd22f462600d5bd305f","sha1":"c8962fc2ade8fcd5f5f670f867beb919ebb81247","sha256":"4bfc3d3ed2a5431c2153a17bd427b1362cdf873d5dfb55a31e2fffc644ceae9c","sha512":"19b9c51e2e59376ef594944efac73b14487e8755268c5f225680c1e7b23cb8cc1b78e289a91f37d03e43528741f5a560717d89f8e5028742b6ed281b42e83c95","ssdeep":"1536:fRRSguA/hUq5cfF3Cd7TeFhKHRfz9hY/YHJMYq:PSQOEcITeFMtzA/YHJA","tlshash":"e8633b8472aa786223d9c0f4e17b6753b3257d3aa84cc450d427dc653a7cd869233fba","size":70745,"data":"","first_seen":"2026-07-02T08:19:42.142539Z","last_seen":"2026-07-03T19:19:47.194263Z","times_seen":3100,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"checkfirelight.info/","fqdn":"checkfirelight.info","domain":"checkfirelight.info","tld":"info"},"ip":{"addr":"172.67.128.191","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"98d25ff1702ce876305db39363411fa7","sha1":"f9e276d6d30098750e06f1726ef3eb5e27c6b005","sha256":"f7d5f7f4047ba6522e0dada64d6d2c2fa07583387ca5ee08b51e87877d74cae6","sha512":"524c46c91f240090eeed39bd695eb0d44226ec15cbe8bb1bd08565198aa0f85509f0296c4ebded4fc9881c3cd30e6f8cf0fe07994cdbb147e52bc9768599b18e","ssdeep":"3:N/BKL1X0LRTn:eL1cT","tlshash":"d85504c4744031700414d414d750153d511535005315144170dd04f53f3004400f05d0","size":1337359,"data":"","first_seen":"2026-07-03T15:17:27.633416Z","last_seen":"2026-07-03T15:17:27.633416Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/av0/rch/n1hp3/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"5523850bcdd500b52a0a347a9152133b","sha1":"8e4e20e9e4b601fd6a47e2db47967ef226b3e3fb","sha256":"83350202276494bf54782bebdd4c7b8251c801bcee115bb190d73250b42159ab","sha512":"a65420dbd51fd09be0f28e3dbb42a2433f9f132c19ce2af32c305877c518c36c96ca54d409cf9252ec999914ccde68a7482c1bc0cb7bb72278f31188f8f06048","ssdeep":"3:N/BKL1X0LSWT:eL1s","tlshash":"6c5504c074403170041cc414f5d0147d511535001315044170dd04d5173004400f05d0","size":1337359,"data":"","first_seen":"2026-07-03T15:17:27.63474Z","last_seen":"2026-07-03T15:17:27.63474Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"checkfirelight.info/","fqdn":"checkfirelight.info","domain":"checkfirelight.info","tld":"info"},"ip":{"addr":"172.67.128.191","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"18fa576bed1cd0cd738dca2b4fe4ec15","sha1":"7a7cb9e5bb41055f94e2db14d3d009e5f8adfca1","sha256":"97f302398a7b59d46aec71b0834c0cf9307e55aba191de3be12df2f653ff4de8","sha512":"a72cb65c25617154fff6202b859f6fcb3c989625cec8c71961e0b83736684ead27f4beaeef2506e7e9b2e95f8103fcb7f1272b89b0211930a2db2aa81e4c1a06","ssdeep":"3:N/BKL1X0LFTS:eL1se","tlshash":"da5504c0745431700414c404f550143d531515051355045170dd04d5177000400f05c0","size":1337359,"data":"","first_seen":"2026-07-03T15:17:27.635976Z","last_seen":"2026-07-03T15:17:27.635976Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"esm.sh/mipd@0.0.7","fqdn":"esm.sh","domain":"esm.sh","tld":"sh"},"ip":{"addr":"172.67.70.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"c086cf4bfd6eff57b5209b43659c1697","sha1":"f7052fed487141e6f548a8318071d65a51ae2cd8","sha256":"d10981647c684009f82945a2b89daa0e45b5ff6bcb095e641d10608d9c6fa163","sha512":"97dafc1ec705f4235e906819727bd0bbe7dc297ff1832d01cc049e24a949fb1007e41a0975b5f8ba4bd4696e73bf54abd4f427c5f78bed59dbbaf02b5b635816","ssdeep":"","tlshash":"08a002a501d7053c3b3139d4223fd12ad3a31784e48386cc24b9174159c4850993d1bb","size":71,"data":"","first_seen":"2026-04-20T20:39:03.019439Z","last_seen":"2026-07-03T15:17:27.592145Z","times_seen":151,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/av0/rch/n1hp3/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"d48c7bb97b73d3d49c38db29034aa4d1","sha1":"b1550c3b870576f7ade990ae933de7bb4d12888a","sha256":"1329538f48c9d5c67df1c5d9789d9b40a710240acc951c63b3d764b6692687f3","sha512":"df50da01468582d7a016f4f062981cb241f77d7aa202ed947cb677f1753e376b52654594e689108e2e649bb4c86e7ba76c96a6534332bddf4b606e9ad7c3736a","ssdeep":"","tlshash":"d2c02b883bc4e014c34525355c6f43c6fa38df600c481083e4024149b9b471003def1f","size":137,"data":"","first_seen":"2026-07-02T08:33:31.180267Z","last_seen":"2026-07-03T19:19:47.239526Z","times_seen":1577,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eval","is_inline":false,"md5":"5c08546e02a77989d54715a2dbcf4477","sha1":"06b92ebc5be7676265837a60bca15b5fd657ccdb","sha256":"330c0ec12f77eb4472cecb4ad99839a3110a0727f537a02fe18f1bcb677c5a5c","sha512":"bfb6712c06d80229f63527a9e6a3e641ac7f17843dc80e257b68acc1ea277946c1b0d0caddddb89b7dd037da4338ec8006c9b178db6635abc176921aa6efc033","ssdeep":"","tlshash":"cb51d8e9b795f1a0d37228f22f5f046eb4bd45215a249190c708dda22c9dfc8a137f15","size":3122,"data":"","first_seen":"2026-07-03T15:17:27.637014Z","last_seen":"2026-07-03T15:17:27.637014Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"noteworthy-lox.xyz/teK2WbBKRvMAJe3wGZImS.js","fqdn":"noteworthy-lox.xyz","domain":"noteworthy-lox.xyz","tld":"xyz"},"ip":{"addr":"172.67.166.95","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"cc0c4df860bdb3e15f45056fa7f35f43","sha1":"9801cbc5b9fe4a861c7f08943312943fbc0ab03f","sha256":"3ebb137b42a29b6e929dd010a549c4925b7744d1697a975ecaae5db56521467e","sha512":"218a3aaa589f9167699cefb5a4b52dbea5bae93bbfa29952d7481f2b6aacdf7a0cecdd01d8d48e4171d72b47d867df28653e2590028a7450c20e1e525f2f3e4e","ssdeep":"98304:NA2UaNsuB4E08OxGQ6uprvLXX3KE5/yQ5SBZ9e4G7EmZE0zn6GQPuwrAFXX3SEfX:e2UaNsuB4E08OxGQ6uprvLXX3KE5/yQd","tlshash":"1526cd6b3e0bbc89c2861be0ac9e10c3f9a51ef8458bbb356f6d74d472407b5e495138","size":4776395,"data":"","first_seen":"2026-07-03T15:17:27.638622Z","last_seen":"2026-07-03T15:17:27.638622Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"checkfirelight.info/","fqdn":"checkfirelight.info","domain":"checkfirelight.info","tld":"info"},"ip":{"addr":"172.67.128.191","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-07-03T19:16:17.914935Z","times_seen":762211,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"checkfirelight.info/","fqdn":"checkfirelight.info","domain":"checkfirelight.info","tld":"info"},"ip":{"addr":"172.67.128.191","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"8b9440780eb47b86e817d172d8add020","sha1":"3d9c3835a49bc157dd1d7f748c007da19880ff50","sha256":"1be15e219cecdaaa83866d636fe5cd5fec3e081596e9164cf6d59efcffdbdb92","sha512":"2c1f7069b7aa79f5bbe474aa710b33189d050edb97de58a6717a905dd5cbc84ef2ef8770f93914c1e3695fe62b2709fbba95ef682bcdc09e3c35c84b5ba54509","ssdeep":"3:N/BKL1X0Lm:eL1X","tlshash":"d95504d0f4403170041dc40cd750143d531515401315044570dd14d5173000400f05c0","size":1337359,"data":"","first_seen":"2026-07-03T15:17:27.63989Z","last_seen":"2026-07-03T15:17:27.63989Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"checkfirelight.info/cdn-cgi/challenge-platform/h/b/orchestrate/chl_page/v1?ray=a156da011a5f76ef","fqdn":"checkfirelight.info","domain":"checkfirelight.info","tld":"info"},"ip":{"addr":"172.67.128.191","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"416b1350357f352732fd907e72f4c226","sha1":"9d42008b140b192a1cfd48a205ddf1a39a9bce12","sha256":"77e46d91c3a4092f376f1d3359b2c5b5e0ce7a797956c5fef26ee2ff25799502","sha512":"75405a8e0950751c86f73f89652e8ac3cc7b4d656824efc3c933eb0d25811632e5ea9e0c87bba97f92ae295f3f8d8c6705aa52629ffcda0feda3d719c1ac909d","ssdeep":"6144:Wbj7vCsBQcm62T4qq4q0q0hA2ZGJB2YUSb:A2sqvOASb","tlshash":"be24d78d7dc3f05b37827af40427714af16cbc44985c6568ea1ec9b83c6db998b2b91c","size":221955,"data":"","first_seen":"2026-07-03T15:17:27.604088Z","last_seen":"2026-07-03T15:17:27.604088Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"checkfirelight.info/?__cf_chl_rt_tk=eGKU5iLblymwxyOeNmNruQ.l3zP2OCXLr.zIScLHzv0-1783091788-1.0.1.1-Fv87xRPeIv3TprVCiZ.2hi.uzbhacVecKxhd1NX43eg","fqdn":"checkfirelight.info","domain":"checkfirelight.info","tld":"info"},"ip":{"addr":"172.67.128.191","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-07-03T19:16:17.914935Z","times_seen":762211,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"checkfirelight.info/e516c93a-708f-4d55-8cd6-315c1a21b36c","fqdn":"checkfirelight.info","domain":"checkfirelight.info","tld":"info"},"ip":{"addr":"172.67.128.191","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"","is_inline":false,"md5":"12a73182cb7b679ff84e21e7bf09d27a","sha1":"d716ab2b29547c960871672d6ed4530e52545899","sha256":"d7973d089c07e09a74e84f139d17515e78d4960d8b56f82ce5f4ddb303d2f8e9","sha512":"069e89de2214a608cce421d4efac73947445be9005615aa416eae6b841d4ce1e644d37459429143cce03307851a7762bb9080e7cf020dd5eca29fb9979c844c6","ssdeep":"","tlshash":"abd0cd0a3d71d70882a221337c7f3526d1656264654d52445739cef9cb506af2524f54","size":291,"data":"","first_seen":"2026-07-02T08:33:31.153985Z","last_seen":"2026-07-03T19:19:47.228246Z","times_seen":1528,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/av0/rch/n1hp3/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"4be7b6b8aa783300ae657a82c16d2a09","sha1":"39c051c1ee899fb0fdec892c96de143739ad2628","sha256":"9ce4a40dab4ae7a062f4860f6a5f77bb0f93dd15b4a24f086e633a62dfaa26cc","sha512":"ed4f6be02687fb5ca630c617096aea4f63e85839ce294d6026bac126865ce8de8cfca9d5bfb335b13b135351e13d49cee6712e22d8274a313c9f1b15f858c66d","ssdeep":"","tlshash":"89900277b5817125574568f1842a251be61946d406544459910400862d104648651bd9","size":50,"data":"","first_seen":"2026-04-23T17:24:48.285702Z","last_seen":"2026-07-03T19:17:07.943577Z","times_seen":63129,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/av0/rch/n1hp3/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"93e354e833ee7b4feead7057a3f33168","sha1":"4025c763f11cdc2eef6318108989528620fef9e7","sha256":"80b90237b40178e74c34d6652d95b3918d01b603ba83f9dce47ba6b19343c245","sha512":"2b37a9bb6f2c3e2ad3624228638881eaeb961c98a31e60a424d9c6146f002a852cec318a17772a5be5015fd197ad4582b007eb0b15335ba6d25412b27b576c13","ssdeep":"","tlshash":"19600000c0303003000f0000f00000033cc000f0cccc0003030c00f000c000c0cc000c","size":13,"data":"","first_seen":"2026-04-23T17:24:48.301435Z","last_seen":"2026-07-03T19:17:07.998396Z","times_seen":63063,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/av0/rch/n1hp3/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"656fa1f524e9ef9852a7f1926f9f411c","sha1":"358a113517e7836bd4a32c0579ea57bcc4612895","sha256":"bd279b4d2f2e6bd8b3f5c7a4016434ff0e01acc7d95ed6fa7330cb6ff8112c01","sha512":"1cde8c02ef0b57aa160f2a1d6a6fef4eb8d5cf879d658aa4fea108f65ddecb35a4d6bcbaeaaf5e0dd2aa2764b9e4d7b87081f017d7d1ee2cf4cf18a8fce78237","ssdeep":"","tlshash":"43a004ccf141f0505303f1350c374115f11557c1041c1010554c44537d1414f4111f5c","size":71,"data":"","first_seen":"2026-04-23T17:24:48.307672Z","last_seen":"2026-07-03T19:17:07.91986Z","times_seen":62734,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"checkfirelight.info/","fqdn":"checkfirelight.info","domain":"checkfirelight.info","tld":"info"},"ip":{"addr":"172.67.128.191","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"1e3455cf7ca52baaf1dafe9009b84ec7","sha1":"1ecaf5d1b253834166ec9c8eb02d048938f61ae4","sha256":"1f1f812c4a3e92c4e209be99d93c23b4631ab1cdf0c061260ce6945a78097eab","sha512":"f9595817554c51bf9a34ec2bc8a27674b54e629489dd06ff027f29e674faf3bbc5da3e4ef39c96c12e3ed25f8a2baea32e14e741223f5804b1251f3e3a3e7a91","ssdeep":"3:N/BKL1X0LObn:eL1z","tlshash":"ea5504c07c4431700514c404d550143f511515007335044170dd14d5173001401f05c0","size":1337359,"data":"","first_seen":"2026-07-03T15:17:27.643817Z","last_seen":"2026-07-03T15:17:27.643817Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/av0/rch/n1hp3/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"b1c3a9a6737982f8ac9b40d6250d5955","sha1":"ed453f90641a85aed145512890ac1d4e9f8a0cad","sha256":"6ab7c477488579e9783d64810a9cf4b95f1c0903d231d8814f4ad53bb00c3e6a","sha512":"f94e95f7e21a07ac2f09e8bbef57dad85088b93b3069fdd514eb1457e8b2762a042e0767c608af8846d09a1ff69fface04528dc98ac20cab9341bfc4c3b2b435","ssdeep":"3:N/BKL1X0LKXn:eL1j","tlshash":"725504c0754031f00414c404d550143d511515003317554170dd14f5177000401f05c0","size":1337359,"data":"","first_seen":"2026-07-03T15:17:27.645066Z","last_seen":"2026-07-03T15:17:27.645066Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"esm.sh/disable-devtool@0.3.9/es2022/disable-devtool.mjs","fqdn":"esm.sh","domain":"esm.sh","tld":"sh"},"ip":{"addr":"172.67.70.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"6f134aa0a4c14df6fe081e2a6643f4bf","sha1":"61989a9857651a3e6e67a4f56bd65a0ac61e1faf","sha256":"f24cb4d56e23c43c0f5927a4ab308c23741e40fbb13e3996e3c42679982559a9","sha512":"b2b21f9c85678b62e77b009768a4ce7fcd1332410817c76f1fc8bff5595edf99fa48b353886413d0952504c7d1629fd4983751c8361bff9edf79d5bec6db839f","ssdeep":"384:XTkAes3CkB0YatnIE3EmI/N62D7LI2fU6HFvQxCN:P3Ck5ibEPt7bU6lvECN","tlshash":"b982c5dcf55770706bb2b9b4403f450ab2367856908c8440e669c8e06eb856fe27bf3e","size":18401,"data":"","first_seen":"2026-05-26T18:42:46.16671Z","last_seen":"2026-07-03T15:17:27.598425Z","times_seen":96,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/av0/rch/n1hp3/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"7a6b6d1f157c3c12ce693952f83dcfd5","sha1":"b296dcc073d8caa80e6f5bcb646d2f56f0be2179","sha256":"f2821cf5b4ddc04d4e8cfc44acb1d2b91f154a00ca16ed6bf2f91aeacaab3e3c","sha512":"58ebaa7880bb4d298ee252b1caf2ef6d6f5182340ec3a0d13bef8f531665e50e41a54b85a8be8c39fe637ffeb896963c7c9f94c69691cb53662a5f251376ee7a","ssdeep":"6144:nYnzb+ezABwozqDPbM4ofvYKEPokKsluEu:+4BwyazUiuT","tlshash":"0034d7897cc7b01b27457eb40463b09bf16dac4c984c1248da56f8f57cba7589b3be88","size":238870,"data":"","first_seen":"2026-07-03T15:17:27.646013Z","last_seen":"2026-07-03T15:17:27.646013Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/av0/rch/n1hp3/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"94081036cbf595a3dac383955367903b","sha1":"4c78fee58d05c79857142f6a1823b584e693d678","sha256":"a3c4f20a8b17293aceca90edf64056d45c645f5adc2d5c853448063f6fa56a8b","sha512":"99084ac603dabfdbf3736d9064ab97c259689afaf02fe04dccc45f4ed0dbb4be9af01b5e797fa80f5f6881c3f1f245f4b0d79fa6472f1eb8e2aa07f5404e5e69","ssdeep":"","tlshash":"64600000000000000000000cc00300003cc0003300cc0300c30c003000cc3cc0000000","size":13,"data":"","first_seen":"2026-04-23T17:24:48.314042Z","last_seen":"2026-07-03T19:17:07.944193Z","times_seen":62893,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/av0/rch/n1hp3/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"eb86fab515659fa1dfcb5d9b12f4de2e","sha1":"57ea4847af198e0b178651fdbf8ec86036a06784","sha256":"7dc31c82238c13de9d7c84a8d751d2de8ce0f0e85a31e7dbc076774e2c563274","sha512":"06f9bcf7497e1dc49830f9104caaf9fcbe0a0b655d43b8aadc86cb1c44bc5f7d06e0e66b2cab4c23d55bd81896dea531e34779637aa116b3bdefd59763475507","ssdeep":"3:N/BKL1X0Lc:eL1Z","tlshash":"775504d074c031700415c404d750147d511715001315044770dd1cd7173000400f05c0","size":1337359,"data":"","first_seen":"2026-07-03T15:17:27.647785Z","last_seen":"2026-07-03T15:17:27.647785Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"checkfirelight.info/?__cf_chl_f_tk=eGKU5iLblymwxyOeNmNruQ.l3zP2OCXLr.zIScLHzv0-1783091788-1.0.1.1-Fv87xRPeIv3TprVCiZ.2hi.uzbhacVecKxhd1NX43eg","fqdn":"checkfirelight.info","domain":"checkfirelight.info","tld":"info"},"ip":{"addr":"172.67.128.191","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-07-03T19:16:17.914935Z","times_seen":762211,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/av0/rch/n1hp3/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"2bebcddc36e1e9108b22960f8ef27a9b","sha1":"127edfead3a236ec87953d76af97eca3705f2dc6","sha256":"e99885cdcb2f979afb4d3838e447cc157c6e9215b2b441536287d40272ece816","sha512":"d170287070f9e11fd6f55f58ac67a628054d8a2e93597ad199575ccd83987908a07b26a50279c31874619cb6ee6669edf07a37edc537c83aab642885b7b16933","ssdeep":"3:N/BKL1X0Lhcn:eL12cn","tlshash":"e85504c0754031700414c40dd550147d555515001315044170dd04d5173000400f05c0","size":1337359,"data":"","first_seen":"2026-07-03T15:17:27.648963Z","last_seen":"2026-07-03T15:17:27.648963Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"checkfirelight.info/","fqdn":"checkfirelight.info","domain":"checkfirelight.info","tld":"info"},"ip":{"addr":"172.67.128.191","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"2122e181123550cd68ca89279742ea62","sha1":"5a0c7b17b1b425ffa0fbf6ad53e78fede122e9b3","sha256":"1efd18feebd06fdeace6bc849065de2924b1f3ed09289c23fd704542ffd671dc","sha512":"93f508905ba7fd5fd82032f56d6033a71c7fc2449a1e02942dbbeb11335587608bd64fdaac856a9bb5bc89a12f8ee99d19319dd9242dd0919da375b513f6fbb7","ssdeep":"3:N/BKL1X0LIP:eL1N","tlshash":"ea5504c0744033700414c404d550147d511535003315144170dd14d5173000401f05d0","size":1337359,"data":"","first_seen":"2026-07-03T15:17:27.650144Z","last_seen":"2026-07-03T15:17:27.650144Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"checkfirelight.info/","fqdn":"checkfirelight.info","domain":"checkfirelight.info","tld":"info"},"ip":{"addr":"172.67.128.191","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"a9b4a180aae4bace81903eeb8bbd4f06","sha1":"02d008dade7908e3ba8d0a76d811a862657eac93","sha256":"ec2ce280affe6943e45af2c962480aa655eba893a5fb52113fc33dc7409d8e67","sha512":"8810359b94c81f6444d5888781b5fe0c69e67bd224bc74908beaf8eac3e4bbacd735f2ec5e2922f8a1f0d50848740dcc3b71d2af52c2ce2cb9a16e584fac8c73","ssdeep":"3:N/BKL1X0Lj:eL1i","tlshash":"5f5504c07c403170041cd404d550543d511515001315044171df04d5173c00400f05c0","size":1337359,"data":"","first_seen":"2026-07-03T15:17:27.651208Z","last_seen":"2026-07-03T15:17:27.651208Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"checkfirelight.info/","fqdn":"checkfirelight.info","domain":"checkfirelight.info","tld":"info"},"ip":{"addr":"172.67.128.191","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"61f161315865532f600cd951ed9fa381","sha1":"155cc196e0bd5dc98374ab40187a3d9c52fc0bbc","sha256":"17133df294c6b4bc64f0dad9ed9ad7be0379b567002b49f25a2e540348998554","sha512":"d125d5d72634edb7b0a01a2c5460672267fdfaf2f05881fbd9d617a61fbd3a7318f1bb2fee4a53c2447a1346bba4ca666472fa6f3c10f0770645ea858ead278f","ssdeep":"3:N/BKL1X0LVn:eL1In","tlshash":"2e5504c0744031700414c44cd5d4153d51151d001315044570ff4cd7173400400705c0","size":1337359,"data":"","first_seen":"2026-07-03T15:17:27.652394Z","last_seen":"2026-07-03T15:17:27.652394Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"checkfirelight.info/","fqdn":"checkfirelight.info","domain":"checkfirelight.info","tld":"info"},"ip":{"addr":"172.67.128.191","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"d7301e17fb9599fbb3445ae6d245ee01","sha1":"54d84555ea1e0f69252d4cd962d05833e17504ad","sha256":"7b154f092ee6ad2d849e9420e52ed45bef74719bf323aeb3d22d11d22810b80b","sha512":"ebe2df4e1cbea77144d2670dffd36066a0bfe6e5af12b6240f08cf73e720e97ececea3dd5cdbef39262ef2b7c43bfc403616f57e2f0763362522a527a29715e6","ssdeep":"3:N/BKL1X0Lxn:eL1An","tlshash":"ad5504c074c03170041cd404d550143d51151500131d044170dd04d51f3000410f05c0","size":1337359,"data":"","first_seen":"2026-07-03T15:17:27.653642Z","last_seen":"2026-07-03T15:17:27.653642Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/av0/rch/n1hp3/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"5ad0e73df50ad64470a443370d307a96","sha1":"7826ce814953a651b1cfd5e12e46fa8a0012c5f9","sha256":"958a8179eefbcbd94f1df3ad8ea27d88dd16076642e5b1a743f4808e524dfa30","sha512":"604f2615834180be04679c319e9425a8447a22b396c5e41439afd9d35c35e494f29a829fcb5a7a6c86b8321e1c95f31b300cddcfba63f5b1726df1a5e2df528d","ssdeep":"3:N/BKL1X0L4:eL15","tlshash":"8d5504c074c03170041cd404d550143d511515411315044174dd04fd173000400f05c0","size":1337359,"data":"","first_seen":"2026-07-03T15:17:27.654791Z","last_seen":"2026-07-03T15:17:27.654791Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/av0/rch/n1hp3/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"7da689ef4ca2ba703139e6f47699dab5","sha1":"f88d4fd6d540664094b6b607010fd78788eeb074","sha256":"b47652726547b0adcbdbd92170c2ced9deec2d20d5479c51f60009789f384b22","sha512":"8ce812328f607c485302ee84e23a5471d16c2e358dd8a13bc7963d5c60ad711eea77203dcf776547d554c46d3ef40a418903897415819871d409ceb7de8c38e0","ssdeep":"3:N/BKL1X0LHXTn:eL1uD","tlshash":"205504c0744031700454c404f550143d511515001315044170dd04d5373400400f05c0","size":1337359,"data":"","first_seen":"2026-07-03T15:17:27.655951Z","last_seen":"2026-07-03T15:17:27.655951Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"esm.sh/disable-devtool","fqdn":"esm.sh","domain":"esm.sh","tld":"sh"},"ip":{"addr":"172.67.70.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"97c69ddec5a41bfd71d4e46f03aa3a66","sha1":"6632a0a55d48d322450a0a0147526f0e91b4cc0b","sha256":"bbd0cbecbc43488ec920e0660e7a0b903af3d9fcd3114421a7620f55ffa98792","sha512":"80e5b974e51b127e2b9c0f227c6cc0b302351806ae1947f0691cb18a67d3743f4390cfe8d0d45f57ab6f5ba899eae8775fdd776edcdb2c0c733997bb38abd90b","ssdeep":"","tlshash":"66c08c10c033f0382a308cb832b4eaefe3a302c6d20c52b88e04022c93cf100d22cba4","size":181,"data":"","first_seen":"2026-05-26T18:42:46.141539Z","last_seen":"2026-07-03T15:17:27.606784Z","times_seen":106,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"esm.sh/mipd@0.0.7/es2022/mipd.mjs","fqdn":"esm.sh","domain":"esm.sh","tld":"sh"},"ip":{"addr":"172.67.70.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"e27f01505d3b2b0d7e37a489a1643bbe","sha1":"fcc0c28426a74da52b56598e904c94480c94b312","sha256":"362f8af6b974b302df4cb1e8025c65db1dc7217fb5789a0f65ff2eacc605ff5f","sha512":"5e0bf97d23034bacea36a6e213d16a1463b3722367cb32f46722b06fc7214af716fefee6b21ebeb56366dce7d6e187d62cbd3484ae2c5a42dd969982957d9c96","ssdeep":"","tlshash":"1a2166e571576a7517610a8fa7dfdf00a7097ac2a015422cc46121fe705dc8788adae0","size":1111,"data":"","first_seen":"2026-04-20T20:39:03.040451Z","last_seen":"2026-07-03T15:17:27.603424Z","times_seen":145,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"checkfirelight.info/","fqdn":"checkfirelight.info","domain":"checkfirelight.info","tld":"info"},"ip":{"addr":"172.67.128.191","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"1c59fe396e1dd71e40748545f9903cc2","sha1":"fc2de55dfffd020b396186b728b6981789892738","sha256":"9c84bcfa5df3630deed25fab2873a2debf58dd799b4c79b6272f51a107158ed5","sha512":"7ade6393fe5c8a1c7ac2d8a0601d6ee76ed1423effbae802656be4b7b1b300958b886b1948a09be8784e425a7f7480e907f0f43df9acba12d612d06582437005","ssdeep":"3:N/BKL1X0LmU:eL1S","tlshash":"335504c0754031700c14c41cd5501c3d51d517001315044170dd04d5173000400f05c0","size":1337359,"data":"","first_seen":"2026-07-03T15:17:27.657153Z","last_seen":"2026-07-03T15:17:27.657153Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/av0/rch/n1hp3/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"50bda72e04f85f9b4338c0f939c34b9c","sha1":"d53056a9d7a7424238f0faf0b93b098f28d4d3ca","sha256":"db8d20f2dfaf9df3877967927de5ecb9648fecda131ab44bf854f8d72baa2b23","sha512":"3e55d7e8940bd66ef537062f73d3d2c6982a25a4e9fe9ac98e18253782cf28e01f106382d2e9dbbc05b6cdd62aae372b75cd430aa5a7ce2e327fb2ece33a30d0","ssdeep":"","tlshash":"736000030c00cc300033000c0000003c30f00c3003cc000c033003f003c030c0000030","size":15,"data":"","first_seen":"2026-04-23T17:24:48.299417Z","last_seen":"2026-07-03T19:17:07.974174Z","times_seen":62785,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/av0/rch/n1hp3/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"d61fc3c507f7cda83648d09a25ba7107","sha1":"534978d8576cd74e23e6f39e74614238b9a09051","sha256":"f100126f80d2cb6eeac0901f928de32714728452c9e6fc4dd2dd2492470fc239","sha512":"2a6ee92dd793b4c1fa0474c066d0730a0ffdc484e280c827399a882d35f7516c707d78e44985b9c6597209a38e50a6759a02bd6614f457bf0f7fac721c324fdc","ssdeep":"3:N/BKL1X0Lbn:eL1e","tlshash":"6c5504f07c4031700415c404d770543d511715003315044174dd1dd7173000404f45c0","size":1337359,"data":"","first_seen":"2026-07-03T15:17:27.659128Z","last_seen":"2026-07-03T15:17:27.659128Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"checkfirelight.info/","fqdn":"checkfirelight.info","domain":"checkfirelight.info","tld":"info"},"ip":{"addr":"172.67.128.191","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"60ce5f4182dfabc407065dfadb9f3922","sha1":"18e9e806e0092b3c26c5f59a707bef1bea9277d4","sha256":"5e3c0fe37cf8799a5ae7f4be79fb52eb84b61f48916bf78230f88baa4e645647","sha512":"a8e7747e7f6101443c8cd9d845ad1d43dc187e5be7e936c43964e1e0e0fa1bd02ba02db2b870937c7a0324ebc77d5ac996cc6dedc9a3e124d41266590fafe3b2","ssdeep":"3:N/BKL1X0LCKn:eL12n","tlshash":"ca5504c07c4031700414c404f550143d511515001335044570dd04dd173001400f05c0","size":1337359,"data":"","first_seen":"2026-07-03T15:17:27.660289Z","last_seen":"2026-07-03T15:17:27.660289Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"checkfirelight.info/","fqdn":"checkfirelight.info","domain":"checkfirelight.info","tld":"info"},"ip":{"addr":"172.67.128.191","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"b9c6c449df3afbd0c0ede1f8fc1aa613","sha1":"c58634d8c1bc828dda4cb3995185de31c8770877","sha256":"28f21c86799ea14d29ecf66a1be5bb1cbbefb1b0179fe4e44b9a634012ba82e6","sha512":"267e63e2598fe0d0e5eefd399ca7175fee742d280e1980599e56d2964f35b627e2deb14793eabe0209db7831f5120c41b1f003d56e4c137948d72ca415043464","ssdeep":"3:N/BKL1X0L2n:eL1j","tlshash":"d35504c0755031700414c404d554543d515515001317044170dd04d7173000410f55c0","size":1337359,"data":"","first_seen":"2026-07-03T15:17:27.661485Z","last_seen":"2026-07-03T15:17:27.661485Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/av0/rch/n1hp3/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"71685467cd9e1a9354b5d5a3ac150605","sha1":"8570ecf180764b622d0c44eabe36071434dd8f90","sha256":"80cfe715190078ebd49c2321614b6e4f59b13107af62bae001e416dcd992d702","sha512":"4c936944532107baca15b6671f253deeb53b0deb84e4b376eb5c52e1b08c6e29cacf87a3ee7ab7f2fa06d9c58a0942d355b41f3397fd87c89d092659ab5b64c0","ssdeep":"3:N/BKL1X0LUdQ:eL1jQ","tlshash":"345504c07c4431700414c414d550143d531d35011315044170dd04d5373100400f05d5","size":1337359,"data":"","first_seen":"2026-07-03T15:17:27.66266Z","last_seen":"2026-07-03T15:17:27.66266Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"checkfirelight.info/","fqdn":"checkfirelight.info","domain":"checkfirelight.info","tld":"info"},"ip":{"addr":"172.67.128.191","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"4202833054fef4db9a74408164f5b4b7","sha1":"75ad29b5a375b593d21a9f7fc11143c2b5085864","sha256":"f418dd672d10c377c4e868fc7211a3280cd0a014d9eb21174292b7cbf4efffad","sha512":"8613f543494ff304de593fb9940c31c765bd886c9e4626a267159f9099f0a7bd8869fc1f78f28bd36cd6929dee95968dadab041e620477058fcc4c068bf4b508","ssdeep":"3:N/BKL1X0L5Q:eL1+Q","tlshash":"7b5504d07c443570041dc444f754143d511515001317044170dd14dd173000400f05c0","size":1337359,"data":"","first_seen":"2026-07-03T15:17:27.663801Z","last_seen":"2026-07-03T15:17:27.663801Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"checkfirelight.info/","fqdn":"checkfirelight.info","domain":"checkfirelight.info","tld":"info"},"ip":{"addr":"172.67.128.191","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"2269dc7b38409b5a2a3399628b916c6d","sha1":"fab6560904390833462151eb0990859c18774332","sha256":"d2fbde53006cb26f8b1ce153f523eb60057d81c8608fb45e46bd20b9ffc025d9","sha512":"5156ba4a641b7908924297961c5ba45e56d4bd96576281f0420eb1f7c4ce261913683b921389b7a90dffbedcd584a532ce8c27693ea23fba04c2f1a177ebb5b2","ssdeep":"3:N/BKL1X0Ltd:eL1ed","tlshash":"185504c074c031700414c504ddd0143d51151500531d145571dd04d5173004400f05c0","size":1337359,"data":"","first_seen":"2026-07-03T15:17:27.664921Z","last_seen":"2026-07-03T15:17:27.664921Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"checkfirelight.info/assets/registry-system.js","fqdn":"checkfirelight.info","domain":"checkfirelight.info","tld":"info"},"ip":{"addr":"172.67.128.191","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"5302546edfdb4f0345f173c2c83fe159","sha1":"c2510b2263c4f7c12f59a7e3de15b60143140f0f","sha256":"de2ebb3cb48f6d5a4644345ac4e7cbefb885e4c90870e32aaea69f951c560971","sha512":"4f077345afe85f3ee4c86860948e58e07aaaccf393251965e69e600714d40e1a461a7810758fc820e4237b11684cb17029d8fccbcc82ae1f81b0ba17074019ed","ssdeep":"3072:zojleK8ChS2JrpDZbn/1B/Hvz6PE9pFMpTSz+GlK1n2KZCsGHg+uTgKOU2NkclJn:zQ8crDRn/1B3zxSTSzFk1n3CsGDbB","tlshash":"02d454fb9686d632b74a60dfc79ad791b9126c2b17c414a7584cc1a3b3f408bfb9046c","size":620058,"data":"","first_seen":"2026-06-20T19:56:15.903206Z","last_seen":"2026-07-03T15:17:27.613558Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"checkfirelight.info/?__cf_chl_f_tk=eGKU5iLblymwxyOeNmNruQ.l3zP2OCXLr.zIScLHzv0-1783091788-1.0.1.1-Fv87xRPeIv3TprVCiZ.2hi.uzbhacVecKxhd1NX43eg","fqdn":"checkfirelight.info","domain":"checkfirelight.info","tld":"info"},"ip":{"addr":"172.67.128.191","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"cd0ca4dfb30d46fe83a720167d66bcac","sha1":"00f707285ee072e4d74f9c722e6c67bd97189780","sha256":"e70b3a8f063a99cf1b42fa2fc19009e464e5248ac5e17b79d1c83c4e1f1cc3cf","sha512":"84e1f042a38d01ac20bcd9a80e4dba0d92f3a5e72d92fe047798fddf91a44654be77f376e4f1c630b71c82a0a210639a1e000322b1f0581fb071bb153cf7eadb","ssdeep":"3072:pXOV5omDhY3CTr533ld/7B3/Jrs5sJVFMzBC/Os1wJZpOijy0K0S+TQmEasXW21E:plmVQCxVd/7BhrLOBC/NCJZRy0c9E","tlshash":"c1d445ff9686da32a74a50dfc79ad791b9126c2b13c454a7584cc1a3b3f408bfb9046c","size":616810,"data":"","first_seen":"2026-07-01T04:22:51.756393Z","last_seen":"2026-07-03T15:17:27.666016Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eval","is_inline":false,"md5":"d5f925550e036907872c59e2a28fe47a","sha1":"9705a8a393296831dbcfa4ecb8e8cf38bac4b639","sha256":"fbf468438ab068a781ffc3bea6ce2cfa94a5a126373b6a06615793408d8748bb","sha512":"c132a5b9ce2095992cffe1e555e27ef045616b3fa457c4d0de5b8092b32fa5f15c1b155e7022916e24aae987450c28beed6ddf947f8cac94806727555bf00937","ssdeep":"","tlshash":"e0d0221ef03f1c948116183938b23510c93a32094906ba94a72a5cc31b520c08642f32","size":196,"data":"","first_seen":"2026-07-02T08:33:31.174555Z","last_seen":"2026-07-03T19:21:55.314775Z","times_seen":1044,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"checkfirelight.info/?__cf_chl_f_tk=eGKU5iLblymwxyOeNmNruQ.l3zP2OCXLr.zIScLHzv0-1783091788-1.0.1.1-Fv87xRPeIv3TprVCiZ.2hi.uzbhacVecKxhd1NX43eg","fqdn":"checkfirelight.info","domain":"checkfirelight.info","tld":"info"},"ip":{"addr":"172.67.128.191","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"cda3492798db59d6184269f612ac66a6","sha1":"0a2408504bd803317c355ba23c48352587dce5b9","sha256":"56f819a0b0df371b5ccdfb77627f8a9320235ea1e2c98a2690820a9305000a38","sha512":"91687bd018cd42994abd58a089b614b2ff4a03dc47821584a78ed939cc71d753a94e1a0b703c2509434d319fd37fceaa64958b2588230e2a701bad7a3f8c48fd","ssdeep":"98304:YuB4E08OxGQ6uprvLXX3KE5/yQ5SBZ9e4G7EmZE0zn6GQPuwrAFXX3SEfl5LyZel:YuB4E08OxGQ6uprvLXX3KE5/yQ5SBZ9W","tlshash":"1706496b3e0fbc89c2865be4ad9e10c3f9951ef8458bbb356f7e709072407b5e495028","size":3981405,"data":"","first_seen":"2026-07-03T15:17:27.668427Z","last_seen":"2026-07-03T15:17:27.668427Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"checkfirelight.info/?__cf_chl_f_tk=eGKU5iLblymwxyOeNmNruQ.l3zP2OCXLr.zIScLHzv0-1783091788-1.0.1.1-Fv87xRPeIv3TprVCiZ.2hi.uzbhacVecKxhd1NX43eg","fqdn":"checkfirelight.info","domain":"checkfirelight.info","tld":"info"},"ip":{"addr":"172.67.128.191","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e7cbc06714d2fc19ccf1483189e1e5d","sha1":"b637551beb40ca6d33d6c62f285dc372c69f2790","sha256":"2b587575bd980abd9c292016ed6a8458e0c65f8b120b9fefae6352d635bc19a5","sha512":"f597e87714f7a5de1f5e0702b38213bbbfbd6e511a8aab8210a65ce2d1fcf92586e2cd13da4b6c5c5a05868b5feab741daa315b6ec907bd5b2ec31a26877daed","ssdeep":"","tlshash":"088000a20e833020c02020ab803000c0f0280008002eaa203c80222238a02b8302a228","size":28,"data":"","first_seen":"2026-07-03T15:17:27.669414Z","last_seen":"2026-07-03T15:17:27.669414Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"log","text":"The next request for the Private Access Token challenge may return a 401 and show a warning in console.","filename":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/av0/rch/n1hp3/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","line_number":1,"column_number":185564},{"level":"log","text":"map[actor:server1.conn0.watcher17.process8//obj90 class:RegExp displayString:/.*.*=.*/ extensible:true frozen:false isError:false ownPropertyLength:2 sealed:false type:object]","filename":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/av0/rch/n1hp3/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","line_number":1,"column_number":185564},{"level":"log","text":"map[actor:server1.conn0.watcher17.process8//obj93 class:BoundFunctionObject extensible:true frozen:false isError:false ownPropertyLength:3 preview:map[kind:Object ownProperties:map[toString:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher17.process8//obj94 class:BoundFunctionObject extensible:true frozen:false isError:false ownPropertyLength:2 sealed:false type:object] writable:true]] ownPropertiesLength:3] sealed:false type:object]","filename":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/av0/rch/n1hp3/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","line_number":1,"column_number":185564},{"level":"log","text":"map[actor:server1.conn0.watcher17.process8//obj96 class:HTMLAnchorElement contentDomReference:map[browsingContextId:1.5032385538e+10 id:0.6923324824988256] extensible:true frozen:false isError:false ownPropertyLength:1 preview:map[attributes:map[] attributesLength:0 isConnected:false kind:DOMNode nodeName:a nodeType:1] sealed:false type:object]","filename":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/av0/rch/n1hp3/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","line_number":1,"column_number":185564},{"level":"debug","text":"0","filename":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/av0/rch/n1hp3/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","line_number":1,"column_number":141693},{"level":"error","text":"0","filename":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/av0/rch/n1hp3/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","line_number":1,"column_number":141693},{"level":"info","text":"0","filename":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/av0/rch/n1hp3/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","line_number":1,"column_number":141693},{"level":"log","text":"0","filename":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/av0/rch/n1hp3/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","line_number":1,"column_number":141693},{"level":"warn","text":"0","filename":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/av0/rch/n1hp3/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","line_number":1,"column_number":141693},{"level":"debug","text":"","filename":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/av0/rch/n1hp3/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","line_number":1,"column_number":185564},{"level":"log","text":"map[actor:server1.conn0.watcher17.process8//obj88 class:RegExp displayString:/.*.*=.*/ extensible:true frozen:false isError:false ownPropertyLength:2 sealed:false type:object]","filename":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/av0/rch/n1hp3/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","line_number":1,"column_number":185564},{"level":"log","text":"map[actor:server1.conn0.watcher17.process8//obj91 class:BoundFunctionObject extensible:true frozen:false isError:false ownPropertyLength:3 preview:map[kind:Object ownProperties:map[toString:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher17.process8//obj92 class:BoundFunctionObject extensible:true frozen:false isError:false ownPropertyLength:2 sealed:false type:object] writable:true]] ownPropertiesLength:3] sealed:false type:object]","filename":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/av0/rch/n1hp3/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","line_number":1,"column_number":185564},{"level":"log","text":"map[actor:server1.conn0.watcher17.process8//obj95 class:HTMLAnchorElement contentDomReference:map[browsingContextId:1.5032385538e+10 id:0.6923324824988256] extensible:true frozen:false isError:false ownPropertyLength:1 preview:map[attributes:map[] attributesLength:0 isConnected:false kind:DOMNode nodeName:a nodeType:1] sealed:false type:object]","filename":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/av0/rch/n1hp3/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","line_number":1,"column_number":185564},{"level":"debug","text":"0","filename":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/av0/rch/n1hp3/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","line_number":1,"column_number":141693},{"level":"error","text":"0","filename":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/av0/rch/n1hp3/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","line_number":1,"column_number":141693},{"level":"info","text":"0","filename":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/av0/rch/n1hp3/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","line_number":1,"column_number":141693},{"level":"log","text":"0","filename":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/av0/rch/n1hp3/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","line_number":1,"column_number":141693},{"level":"warn","text":"0","filename":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/av0/rch/n1hp3/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","line_number":1,"column_number":141693},{"level":"debug","text":"","filename":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/av0/rch/n1hp3/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","line_number":1,"column_number":185564},{"level":"log","text":"[ EL CE ] : ok","filename":"https://noteworthy-lox.xyz/teK2WbBKRvMAJe3wGZImS.js line 20 \u003e Function","line_number":3,"column_number":697321},{"level":"log","text":"[ EL ] : Installation started","filename":"https://noteworthy-lox.xyz/teK2WbBKRvMAJe3wGZImS.js line 20 \u003e Function","line_number":3,"column_number":1805651},{"level":"log","text":"[ EL ] : Finished loading","filename":"https://noteworthy-lox.xyz/teK2WbBKRvMAJe3wGZImS.js line 20 \u003e Function","line_number":3,"column_number":1824495},{"level":"log","text":"map[actor:server1.conn0.watcher17.process9//obj79 class:HTMLDivElement contentDomReference:map[browsingContextId:13 id:0.6914950602094355] extensible:true frozen:false isError:false ownPropertyLength:1 preview:map[attributes:map[] attributesLength:0 isConnected:false kind:DOMNode nodeName:div nodeType:1] sealed:false type:object]","filename":"https://esm.sh/disable-devtool@0.3.9/es2022/disable-devtool.mjs","line_number":3,"column_number":10594},{"level":"log","text":"map[actor:server1.conn0.watcher17.process9//obj80 class:Date extensible:true frozen:false isError:false ownPropertyLength:1 preview:map[timestamp:1.78309180075e+12] sealed:false type:object]","filename":"https://esm.sh/disable-devtool@0.3.9/es2022/disable-devtool.mjs","line_number":3,"column_number":11700},{"level":"log","text":"map[actor:server1.conn0.watcher17.process9//obj81 class:Function displayName:me\u003c/\u003c/value/this.func extensible:true frozen:false isAsync:false isClassConstructor:false isError:false isGenerator:false location:map[column:11976 line:3 url:https://esm.sh/disable-devtool@0.3.9/es2022/disable-devtool.mjs] ownPropertyLength:4 parameterNames:[] sealed:false type:object]","filename":"https://esm.sh/disable-devtool@0.3.9/es2022/disable-devtool.mjs","line_number":3,"column_number":12079},{"level":"log","text":"map[actor:server1.conn0.watcher17.process9//obj143 class:Array extensible:true frozen:false isError:false ownPropertyLength:51 preview:map[items:[map[actor:server1.conn0.watcher17.process9//obj144 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher17.process9//obj145 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher17.process9//obj146 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher17.process9//obj147 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher17.process9//obj148 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher17.process9//obj149 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher17.process9//obj150 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher17.process9//obj151 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher17.process9//obj152 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher17.process9//obj153 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object]] kind:ArrayLike length:50] sealed:false type:object]","filename":"https://esm.sh/disable-devtool@0.3.9/es2022/disable-devtool.mjs","line_number":3,"column_number":12696},{"level":"log","text":"map[actor:server1.conn0.watcher17.process9//obj207 class:HTMLDivElement contentDomReference:map[browsingContextId:13 id:0.6914950602094355] extensible:true frozen:false isError:false ownPropertyLength:1 preview:map[attributes:map[] attributesLength:0 isConnected:false kind:DOMNode nodeName:div nodeType:1] sealed:false type:object]","filename":"https://esm.sh/disable-devtool@0.3.9/es2022/disable-devtool.mjs","line_number":3,"column_number":10594},{"level":"log","text":"map[actor:server1.conn0.watcher17.process9//obj208 class:Date extensible:true frozen:false isError:false ownPropertyLength:1 preview:map[timestamp:1.78309180075e+12] sealed:false type:object]","filename":"https://esm.sh/disable-devtool@0.3.9/es2022/disable-devtool.mjs","line_number":3,"column_number":11700},{"level":"log","text":"map[actor:server1.conn0.watcher17.process9//obj209 class:Function displayName:me\u003c/\u003c/value/this.func extensible:true frozen:false isAsync:false isClassConstructor:false isError:false isGenerator:false location:map[column:11976 line:3 url:https://esm.sh/disable-devtool@0.3.9/es2022/disable-devtool.mjs] ownPropertyLength:4 parameterNames:[] sealed:false type:object]","filename":"https://esm.sh/disable-devtool@0.3.9/es2022/disable-devtool.mjs","line_number":3,"column_number":12079},{"level":"log","text":"map[actor:server1.conn0.watcher17.process9//obj271 class:Array extensible:true frozen:false isError:false ownPropertyLength:51 preview:map[items:[map[actor:server1.conn0.watcher17.process9//obj272 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher17.process9//obj273 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher17.process9//obj274 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher17.process9//obj275 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher17.process9//obj276 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher17.process9//obj277 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher17.process9//obj278 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher17.process9//obj279 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher17.process9//obj280 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher17.process9//obj281 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object]] kind:ArrayLike length:50] sealed:false type:object]","filename":"https://esm.sh/disable-devtool@0.3.9/es2022/disable-devtool.mjs","line_number":3,"column_number":12696},{"level":"log","text":"map[actor:server1.conn0.watcher17.process9//obj343 class:Array extensible:true frozen:false isError:false ownPropertyLength:51 preview:map[items:[map[actor:server1.conn0.watcher17.process9//obj344 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher17.process9//obj345 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher17.process9//obj346 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher17.process9//obj347 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher17.process9//obj348 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher17.process9//obj349 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher17.process9//obj350 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher17.process9//obj351 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher17.process9//obj352 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher17.process9//obj353 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object]] kind:ArrayLike length:50] sealed:false type:object]","filename":"https://esm.sh/disable-devtool@0.3.9/es2022/disable-devtool.mjs","line_number":3,"column_number":12696},{"level":"log","text":"map[actor:server1.conn0.watcher17.process9//obj415 class:Array extensible:true frozen:false isError:false ownPropertyLength:51 preview:map[items:[map[actor:server1.conn0.watcher17.process9//obj416 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher17.process9//obj417 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher17.process9//obj418 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher17.process9//obj419 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher17.process9//obj420 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher17.process9//obj421 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher17.process9//obj422 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher17.process9//obj423 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher17.process9//obj424 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher17.process9//obj425 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object]] kind:ArrayLike length:50] sealed:false type:object]","filename":"https://esm.sh/disable-devtool@0.3.9/es2022/disable-devtool.mjs","line_number":3,"column_number":12696},{"level":"warn","text":"You don't have permission to use DEVTOOL!【type = 6】","filename":"https://esm.sh/disable-devtool@0.3.9/es2022/disable-devtool.mjs","line_number":3,"column_number":5140},{"level":"log","text":"map[actor:server1.conn0.watcher17.process9//obj426 class:HTMLDivElement contentDomReference:map[browsingContextId:13 id:0.6914950602094355] extensible:true frozen:false isError:false ownPropertyLength:1 preview:map[attributes:map[] attributesLength:0 isConnected:false kind:DOMNode nodeName:div nodeType:1] sealed:false type:object]","filename":"https://esm.sh/disable-devtool@0.3.9/es2022/disable-devtool.mjs","line_number":3,"column_number":10594},{"level":"log","text":"map[actor:server1.conn0.watcher17.process9//obj427 class:Date extensible:true frozen:false isError:false ownPropertyLength:1 preview:map[timestamp:1.78309180075e+12] sealed:false type:object]","filename":"https://esm.sh/disable-devtool@0.3.9/es2022/disable-devtool.mjs","line_number":3,"column_number":11700},{"level":"log","text":"map[actor:server1.conn0.watcher17.process9//obj428 class:Function displayName:me\u003c/\u003c/value/this.func extensible:true frozen:false isAsync:false isClassConstructor:false isError:false isGenerator:false location:map[column:11976 line:3 url:https://esm.sh/disable-devtool@0.3.9/es2022/disable-devtool.mjs] ownPropertyLength:4 parameterNames:[] sealed:false type:object]","filename":"https://esm.sh/disable-devtool@0.3.9/es2022/disable-devtool.mjs","line_number":3,"column_number":12079},{"level":"log","text":"map[actor:server1.conn0.watcher17.process9//obj490 class:Array extensible:true frozen:false isError:false ownPropertyLength:51 preview:map[items:[map[actor:server1.conn0.watcher17.process9//obj491 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher17.process9//obj492 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher17.process9//obj493 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher17.process9//obj494 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher17.process9//obj495 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher17.process9//obj496 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher17.process9//obj497 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher17.process9//obj498 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher17.process9//obj499 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher17.process9//obj500 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object]] kind:ArrayLike length:50] sealed:false type:object]","filename":"https://esm.sh/disable-devtool@0.3.9/es2022/disable-devtool.mjs","line_number":3,"column_number":12696},{"level":"warn","text":"You don't have permission to use DEVTOOL!【type = 6】","filename":"https://esm.sh/disable-devtool@0.3.9/es2022/disable-devtool.mjs","line_number":3,"column_number":5140}]},"http":[{"url":{"schema":"https","addr":"gateway.irys.xyz/B5sLi9Stwf8xRFrbJ6Bm6wZojhuyzkGcWowZenqKD4fz","fqdn":"gateway.irys.xyz","domain":"irys.xyz","tld":"xyz"},"ip":{"addr":"104.20.31.170","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://checkfirelight.info/?__cf_chl_f_tk=eGKU5iLblymwxyOeNmNruQ.l3zP2OCXLr.zIScLHzv0-1783091788-1.0.1.1-Fv87xRPeIv3TprVCiZ.2hi.uzbhacVecKxhd1NX43eg","date":"2026-07-03T15:16:40.444Z","timestamp":1783091800444,"http_version":"HTTP/2","security_state":"secure","security_info":null,"request":{"raw":"GET /B5sLi9Stwf8xRFrbJ6Bm6wZojhuyzkGcWowZenqKD4fz HTTP/1.1\r\nHost: gateway.irys.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://checkfirelight.info/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 \r\ndate: Fri, 03 Jul 2026 15:16:40 GMT\r\ncontent-length: 0\r\nlocation: https://sxkbzjsq65wh654do6f2fcn4t5phs2iozxkrihpxbz4jaqr3fuaq.mainnet-1.datasprite-cdn.com/B5sLi9Stwf8xRFrbJ6Bm6wZojhuyzkGcWowZenqKD4fz/\r\nserver: cloudflare\r\naccess-control-expose-headers: cache-control, location\r\ncache-control: no-store\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-credentials: true\r\nx-cache-status: BYPASS\r\ncf-cache-status: BYPASS\r\ncf-ray: a156da48cea9569f-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-03T19:16:40.563677Z","times_seen":16948877,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-03","alert":"Sinkholed","trigger":"gateway.irys.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gateway.irys.xyz/5M61R7ETnvpQLgBp7a6DRVWm759u5Ls8PB1FWJv52rx1","fqdn":"gateway.irys.xyz","domain":"irys.xyz","tld":"xyz"},"ip":{"addr":"104.20.31.170","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://checkfirelight.info/?__cf_chl_f_tk=eGKU5iLblymwxyOeNmNruQ.l3zP2OCXLr.zIScLHzv0-1783091788-1.0.1.1-Fv87xRPeIv3TprVCiZ.2hi.uzbhacVecKxhd1NX43eg","date":"2026-07-03T15:16:40.454Z","timestamp":1783091800454,"http_version":"HTTP/2","security_state":"secure","security_info":null,"request":{"raw":"GET /5M61R7ETnvpQLgBp7a6DRVWm759u5Ls8PB1FWJv52rx1 HTTP/1.1\r\nHost: gateway.irys.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://checkfirelight.info/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 \r\ndate: Fri, 03 Jul 2026 15:16:40 GMT\r\ncontent-length: 0\r\nlocation: https://ickanb5psbhquhnys6hyxxn5kcs7k75kvqwlajid5qycvq2ijgra.mainnet-1.datasprite-cdn.com/5M61R7ETnvpQLgBp7a6DRVWm759u5Ls8PB1FWJv52rx1/\r\nserver: cloudflare\r\naccess-control-allow-credentials: true\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\ncache-control: no-store\r\naccess-control-expose-headers: location, cache-control\r\nx-cache-status: BYPASS\r\ncf-cache-status: BYPASS\r\ncf-ray: a156da48dec2569f-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-03T19:16:40.563677Z","times_seen":16948877,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-03","alert":"Sinkholed","trigger":"gateway.irys.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gateway.irys.xyz/GVqzNswLTwAnCD7CtTZw67VCMbChaqBxjezVsqQAqUzS","fqdn":"gateway.irys.xyz","domain":"irys.xyz","tld":"xyz"},"ip":{"addr":"104.20.31.170","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://checkfirelight.info/?__cf_chl_f_tk=eGKU5iLblymwxyOeNmNruQ.l3zP2OCXLr.zIScLHzv0-1783091788-1.0.1.1-Fv87xRPeIv3TprVCiZ.2hi.uzbhacVecKxhd1NX43eg","date":"2026-07-03T15:16:40.458Z","timestamp":1783091800458,"http_version":"HTTP/2","security_state":"secure","security_info":null,"request":{"raw":"GET /GVqzNswLTwAnCD7CtTZw67VCMbChaqBxjezVsqQAqUzS HTTP/1.1\r\nHost: gateway.irys.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://checkfirelight.info/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 \r\ndate: Fri, 03 Jul 2026 15:16:40 GMT\r\ncontent-length: 0\r\nlocation: https://4zbpk6lzsya26tazaje3yw7d6st53o23iriglps2sp2bnpqb6e7q.mainnet-1.datasprite-cdn.com/GVqzNswLTwAnCD7CtTZw67VCMbChaqBxjezVsqQAqUzS/\r\nserver: cloudflare\r\naccess-control-expose-headers: location, cache-control\r\ncache-control: no-store\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-credentials: true\r\nx-cache-status: BYPASS\r\ncf-cache-status: BYPASS\r\ncf-ray: a156da48dec9569f-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-03T19:16:40.563677Z","times_seen":16948877,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-03","alert":"Sinkholed","trigger":"gateway.irys.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"checkfirelight.info/ea3f56e306962481bcb38735c71ea5039b9ce2bd.woff2","fqdn":"checkfirelight.info","domain":"checkfirelight.info","tld":"info"},"ip":{"addr":"172.67.128.191","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://checkfirelight.info/?__cf_chl_f_tk=eGKU5iLblymwxyOeNmNruQ.l3zP2OCXLr.zIScLHzv0-1783091788-1.0.1.1-Fv87xRPeIv3TprVCiZ.2hi.uzbhacVecKxhd1NX43eg","date":"2026-07-03T15:16:36.958Z","timestamp":1783091796958,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"checkfirelight.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Jun 2026 16:28:10 GMT","end":"Mon, 28 Sep 2026 17:26:57 GMT"},"fingerprint":{"sha1":"E2:6B:21:81:9C:B8:AD:23:84:9C:B6:45:4A:80:6C:AB:99:5C:10:CE","sha256":"74:38:CD:39:7B:FF:5B:B8:A3:DA:05:94:43:47:07:5D:75:8F:ED:21:4F:0A:80:2E:4D:AE:4E:E7:5B:5C:7C:DC"}}},"request":{"raw":"GET /ea3f56e306962481bcb38735c71ea5039b9ce2bd.woff2 HTTP/1.1\r\nHost: checkfirelight.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://checkfirelight.info/?__cf_chl_f_tk=eGKU5iLblymwxyOeNmNruQ.l3zP2OCXLr.zIScLHzv0-1783091788-1.0.1.1-Fv87xRPeIv3TprVCiZ.2hi.uzbhacVecKxhd1NX43eg\r\nCookie: cf_clearance=x7CrPDFa3VxjzKhrvkEtAP2DZJf60Q5q9K_NH0LnzxU-1783091796-1.2.1.1-XBW1i5n_SDimWqwX6Vod0hbq9bRwT8EgUnJ3vfsz7d03j.ElHU8e.vZVTsRQNgL6zQtCZ4AcOM7zUV3ZCjlG7.5pbuGDdkUEFeHF6a3XncUT7oWL6nykc7ZemxMFnSF.jP0HtU3YPWbNZSyY1DwDDJsHKfrO.QDrYbJ_Xt4pam1O9dvV2z8RwqkAhfg0ooK3FIUgBnpqmlpCvkrJ4FjiBNY5fUQszDf9hR_5V2FcrRvb6NfDKTu9wRl1JIYx.KoEKdHLoXfET8nvf9FBigAOgaC4gvY6FCohBYjcTNHnz9CvY.oFpNookrmmKc_aKOubsA9qrVprld9Oy.u2o8mmIHi8WkYxzprYORqFzBRs2K4UpY0OOsFmXH_nWCes.q2ii5Jl5DTBlO_B5yBY.QiwNiF.zFiseZKEoEE3u9FpAbcSIVRV2cKFYjyRDGl_Aek68EuYCh.mz2sN.hwRdkqbwRN.l3tOXqiv2Pp4kueYbdoLTRBU2_ON7Vss.5M7..9z\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: font/woff2\r\netag: \"b65daadded7406d746e61b25ebbe0ca9\"\r\nlast-modified: Tue, 30 Jun 2026 17:20:31 GMT\r\ndate: Fri, 03 Jul 2026 15:16:37 GMT\r\nserver: cloudflare\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sc3W8CQ1%2FvIIaHq3xNC5O88AFGA12kgiF%2F7hUBXh4gOxO%2F9b6JLANCLFcCVkalPJhD1yTLASV8CaHrEcCWZdNXbsotiScu%2BSHa1YIVsN%2BXPAkjlmZ49cOD7OQaMaqe3yW2kmPqgR\"}]}\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a156da32fbb176ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":35348,"size_decoded":36028,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 35348, version 1.0","md5":"b65daadded7406d746e61b25ebbe0ca9","sha1":"ea3f56e306962481bcb38735c71ea5039b9ce2bd","sha256":"691cd1d9b4c0cdf31a1dcf04259c86f92c85e69f6622abab7964d81e36890691","sha512":"d9e53ee3bcdede0965db0fe62de1b5b78d59bad2bc2fbf1ae3ef9152e5883cffdb694a36fffd00ebcc71aaff2c4b58630c808781e966231ce4fc103b62df002a","ssdeep":"768:ob6sJaIWkw3gUba/bdQl/tVgm+l1OXO+FtG4Vqh6rUPA/X:E6sJ4kuo8tLq1OXXPVqh6rAAf","tlshash":"80f2f19ffa66b986b08385e35f265d537aa30c6a6281f521596f210f34dd34f0e71f04","first_seen":"2025-06-08T13:10:33.776668Z","last_seen":"2026-07-03T17:12:02.096027Z","times_seen":3453,"resource_available":false,"data":null}},"time_used":234,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":150,"receive":84,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-03","alert":"Sinkholed","trigger":"checkfirelight.info","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-03","alert":"Sinkholed","trigger":"checkfirelight.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"checkfirelight.info/f11d729bb0a4d8350d2ea3d0fc062cf6ef2d5298.woff2","fqdn":"checkfirelight.info","domain":"checkfirelight.info","tld":"info"},"ip":{"addr":"172.67.128.191","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://checkfirelight.info/?__cf_chl_f_tk=eGKU5iLblymwxyOeNmNruQ.l3zP2OCXLr.zIScLHzv0-1783091788-1.0.1.1-Fv87xRPeIv3TprVCiZ.2hi.uzbhacVecKxhd1NX43eg","date":"2026-07-03T15:16:37.050Z","timestamp":1783091797050,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"checkfirelight.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Jun 2026 16:28:10 GMT","end":"Mon, 28 Sep 2026 17:26:57 GMT"},"fingerprint":{"sha1":"E2:6B:21:81:9C:B8:AD:23:84:9C:B6:45:4A:80:6C:AB:99:5C:10:CE","sha256":"74:38:CD:39:7B:FF:5B:B8:A3:DA:05:94:43:47:07:5D:75:8F:ED:21:4F:0A:80:2E:4D:AE:4E:E7:5B:5C:7C:DC"}}},"request":{"raw":"GET /f11d729bb0a4d8350d2ea3d0fc062cf6ef2d5298.woff2 HTTP/1.1\r\nHost: checkfirelight.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://checkfirelight.info/?__cf_chl_f_tk=eGKU5iLblymwxyOeNmNruQ.l3zP2OCXLr.zIScLHzv0-1783091788-1.0.1.1-Fv87xRPeIv3TprVCiZ.2hi.uzbhacVecKxhd1NX43eg\r\nCookie: cf_clearance=x7CrPDFa3VxjzKhrvkEtAP2DZJf60Q5q9K_NH0LnzxU-1783091796-1.2.1.1-XBW1i5n_SDimWqwX6Vod0hbq9bRwT8EgUnJ3vfsz7d03j.ElHU8e.vZVTsRQNgL6zQtCZ4AcOM7zUV3ZCjlG7.5pbuGDdkUEFeHF6a3XncUT7oWL6nykc7ZemxMFnSF.jP0HtU3YPWbNZSyY1DwDDJsHKfrO.QDrYbJ_Xt4pam1O9dvV2z8RwqkAhfg0ooK3FIUgBnpqmlpCvkrJ4FjiBNY5fUQszDf9hR_5V2FcrRvb6NfDKTu9wRl1JIYx.KoEKdHLoXfET8nvf9FBigAOgaC4gvY6FCohBYjcTNHnz9CvY.oFpNookrmmKc_aKOubsA9qrVprld9Oy.u2o8mmIHi8WkYxzprYORqFzBRs2K4UpY0OOsFmXH_nWCes.q2ii5Jl5DTBlO_B5yBY.QiwNiF.zFiseZKEoEE3u9FpAbcSIVRV2cKFYjyRDGl_Aek68EuYCh.mz2sN.hwRdkqbwRN.l3tOXqiv2Pp4kueYbdoLTRBU2_ON7Vss.5M7..9z\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: font/woff2\r\netag: \"260c81a4759baf163c025001c4f27872\"\r\nlast-modified: Tue, 30 Jun 2026 17:20:31 GMT\r\ndate: Fri, 03 Jul 2026 15:16:37 GMT\r\nserver: cloudflare\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Ntw%2BDCnWCIB%2BojcHcIn894YsjliLXpW9WB24AZD2lZ3GmK8iNoyUDwxwoZe1CX0Rom7iYGACIEoaze2goYVuQa6C4%2FasM8tnAOPJxSzgjZX6zHYH9QCZNMD7SLR%2BbkX43iVuGeTY\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a156da339bd976ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":48256,"size_decoded":48927,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48256, version 1.0","md5":"260c81a4759baf163c025001c4f27872","sha1":"f11d729bb0a4d8350d2ea3d0fc062cf6ef2d5298","sha256":"3100e775e8616cd2611beecfa23a4263d7037586789b43f035236a2e6fbd4c62","sha512":"9acec3e7a411a1eb6d072c3773bb14e5aa74d85d334674ec0fb018b7937174d5b612b756b2ce7aa3993d31dfe172516e7aaec79c7dd209eac5fd15d9aea077e9","ssdeep":"768:Gp4Wb3wv+eCLRZRtq9uGHpHveBOX5qw/14X+5edVWK4afHSTle4MRhVUNMT/TQDt:Gp483wdmXRtqhJPeByj/f4WK4mHIj8xw","tlshash":"be2302df9e4d72d29271267045338383798e2d8a50aae7a1061c0fe6de05b69d31fb9c","first_seen":"2025-05-30T10:47:22.433446Z","last_seen":"2026-07-03T18:41:25.097213Z","times_seen":21052,"resource_available":false,"data":null}},"time_used":434,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":265,"receive":169,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-03","alert":"Sinkholed","trigger":"checkfirelight.info","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-03","alert":"Sinkholed","trigger":"checkfirelight.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gateway.irys.xyz/1uax15bZQNN9id5YyXCs7XPHXgsx2XaS5z93YrdvjDH","fqdn":"gateway.irys.xyz","domain":"irys.xyz","tld":"xyz"},"ip":{"addr":"104.20.31.170","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://checkfirelight.info/?__cf_chl_f_tk=eGKU5iLblymwxyOeNmNruQ.l3zP2OCXLr.zIScLHzv0-1783091788-1.0.1.1-Fv87xRPeIv3TprVCiZ.2hi.uzbhacVecKxhd1NX43eg","date":"2026-07-03T15:16:40.422Z","timestamp":1783091800422,"http_version":"HTTP/2","security_state":"secure","security_info":null,"request":{"raw":"GET /1uax15bZQNN9id5YyXCs7XPHXgsx2XaS5z93YrdvjDH HTTP/1.1\r\nHost: gateway.irys.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://checkfirelight.info/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 \r\ndate: Fri, 03 Jul 2026 15:16:40 GMT\r\ncontent-length: 0\r\nlocation: https://aa5xkwqvefm3tszfisosqh6wdakhahxso3jyl5d5wsibuczex6ma.mainnet-1.datasprite-cdn.com/1uax15bZQNN9id5YyXCs7XPHXgsx2XaS5z93YrdvjDH/\r\nserver: cloudflare\r\naccess-control-expose-headers: cache-control, location\r\ncache-control: no-store\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-credentials: true\r\nx-cache-status: BYPASS\r\ncf-cache-status: BYPASS\r\ncf-ray: a156da48ae79569f-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-03T19:16:40.563677Z","times_seen":16948877,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-03","alert":"Sinkholed","trigger":"gateway.irys.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gateway.irys.xyz/Cp3rKQhcxnwLeryCXo65zSv8dYFvXn4b47fC9GiYbXu9","fqdn":"gateway.irys.xyz","domain":"irys.xyz","tld":"xyz"},"ip":{"addr":"104.20.31.170","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://checkfirelight.info/?__cf_chl_f_tk=eGKU5iLblymwxyOeNmNruQ.l3zP2OCXLr.zIScLHzv0-1783091788-1.0.1.1-Fv87xRPeIv3TprVCiZ.2hi.uzbhacVecKxhd1NX43eg","date":"2026-07-03T15:16:40.437Z","timestamp":1783091800437,"http_version":"HTTP/2","security_state":"secure","security_info":null,"request":{"raw":"GET /Cp3rKQhcxnwLeryCXo65zSv8dYFvXn4b47fC9GiYbXu9 HTTP/1.1\r\nHost: gateway.irys.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://checkfirelight.info/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 \r\ndate: Fri, 03 Jul 2026 15:16:40 GMT\r\ncontent-length: 0\r\nlocation: https://v57bhor75skl3yh2fasy5zibmxu374hc564a5oiidpjj3yk5qoua.mainnet-1.datasprite-cdn.com/Cp3rKQhcxnwLeryCXo65zSv8dYFvXn4b47fC9GiYbXu9/\r\nserver: cloudflare\r\naccess-control-allow-credentials: true\r\ncache-control: no-store\r\naccess-control-expose-headers: location, cache-control\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nx-cache-status: BYPASS\r\ncf-cache-status: BYPASS\r\ncf-ray: a156da48be9a569f-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-03T19:16:40.563677Z","times_seen":16948877,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-03","alert":"Sinkholed","trigger":"gateway.irys.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gateway.irys.xyz/2NjDWqEJ9EGvxgj9wS1oDfh2jWS7mq5KLYvofQx24YXM","fqdn":"gateway.irys.xyz","domain":"irys.xyz","tld":"xyz"},"ip":{"addr":"104.20.31.170","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://checkfirelight.info/?__cf_chl_f_tk=eGKU5iLblymwxyOeNmNruQ.l3zP2OCXLr.zIScLHzv0-1783091788-1.0.1.1-Fv87xRPeIv3TprVCiZ.2hi.uzbhacVecKxhd1NX43eg","date":"2026-07-03T15:16:40.507Z","timestamp":1783091800507,"http_version":"HTTP/2","security_state":"secure","security_info":null,"request":{"raw":"GET /2NjDWqEJ9EGvxgj9wS1oDfh2jWS7mq5KLYvofQx24YXM HTTP/1.1\r\nHost: gateway.irys.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://checkfirelight.info/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 \r\ndate: Fri, 03 Jul 2026 15:16:40 GMT\r\ncontent-length: 0\r\nlocation: https://crwj4ebgvb7k4zcwmmxrnzxbs2gaegjyku7rc4eqjkvdnsvrehsa.mainnet-1.datasprite-cdn.com/2NjDWqEJ9EGvxgj9wS1oDfh2jWS7mq5KLYvofQx24YXM/\r\nserver: cloudflare\r\naccess-control-allow-credentials: true\r\ncache-control: no-store\r\naccess-control-expose-headers: location, cache-control\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nx-cache-status: BYPASS\r\ncf-cache-status: BYPASS\r\ncf-ray: a156da492f26569f-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-03T19:16:40.563677Z","times_seen":16948877,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-03","alert":"Sinkholed","trigger":"gateway.irys.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/av0/rch/n1hp3/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://checkfirelight.info/","date":"2026-07-03T15:16:29.792Z","timestamp":1783091789792,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"challenges.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 16 Jun 2026 20:15:28 GMT","end":"Mon, 14 Sep 2026 21:15:13 GMT"},"fingerprint":{"sha1":"77:27:72:42:CF:51:E8:8C:7C:3E:8C:4C:A1:F0:9A:86:96:B9:0A:16","sha256":"ED:7C:F7:38:B3:0F:00:86:32:D1:14:CE:C0:FF:CA:0E:7C:86:EE:49:51:EF:A4:4B:AA:5C:B6:7C:00:B5:3D:F3"}}},"request":{"raw":"GET /cdn-cgi/challenge-platform/h/b/turnstile/f/av0/rch/n1hp3/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto HTTP/1.1\r\nHost: challenges.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 03 Jul 2026 15:16:29 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\npermissions-policy: accelerometer=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=(),xr-spatial-tracking=*\r\ncontent-security-policy: default-src 'none'; script-src 'nonce-iwW41RuzIrDrIoshVtSkdt' 'unsafe-eval'; script-src-attr 'none'; worker-src blob:; style-src 'unsafe-inline'; img-src 'self'; connect-src 'self' https://hagen.challenges.cloudflare.com https://brunhild.challenges.cloudflare.com; frame-src 'self' blob:; child-src 'self' blob:; form-action 'none'; base-uri 'self'; trusted-types OTUN3 default; require-trusted-types-for 'script'; sandbox allow-same-origin allow-scripts allow-popups allow-forms\r\ncross-origin-embedder-policy: require-corp\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: cross-origin\r\norigin-agent-cluster: ?1\r\naccept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA\r\ncritical-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA\r\nreferrer-policy: same-origin\r\ndocument-policy: js-profiling\r\npriority: u=6,i=?0\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: a156da0639454c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: huf1w2s5;dur=256801, cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":256801,"size_decoded":99984,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (65536), with no line terminators","md5":"7c33d6d51a11b78b206062010e7b6eef","sha1":"f66514fe9257bc264eceb27fb109cc022589cee8","sha256":"f1a6dd0cc12d80cf3c1b02fb6a0be8ee825d8d2d60e73526b124b74a73772eb1","sha512":"d99b71ff7a6b81c38a0cb5ca17946ac26a7a3bb38bc07dda40392f0969d2bacfbb5436694e045fe223d002261f675c3dcceb921d27db60292468ff9ecc5a2ce0","ssdeep":"6144:4Ynzb+ezABwozqDPbM4ofvYKEPokKsluEu:B4BwyazUiu7","tlshash":"b844f8897dc7b01b27467eb40453b09bf169ac4cd44c1248ea56f8f4bcb97589b3be88","first_seen":"2026-07-03T15:17:27.589583Z","last_seen":"2026-07-03T15:17:27.589583Z","times_seen":1,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"checkfirelight.info/05768f48200596944dbe567095051ea1a2c9e610.bin","fqdn":"checkfirelight.info","domain":"checkfirelight.info","tld":"info"},"ip":{"addr":"172.67.128.191","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://checkfirelight.info/?__cf_chl_f_tk=eGKU5iLblymwxyOeNmNruQ.l3zP2OCXLr.zIScLHzv0-1783091788-1.0.1.1-Fv87xRPeIv3TprVCiZ.2hi.uzbhacVecKxhd1NX43eg","date":"2026-07-03T15:16:37.046Z","timestamp":1783091797046,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"checkfirelight.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Jun 2026 16:28:10 GMT","end":"Mon, 28 Sep 2026 17:26:57 GMT"},"fingerprint":{"sha1":"E2:6B:21:81:9C:B8:AD:23:84:9C:B6:45:4A:80:6C:AB:99:5C:10:CE","sha256":"74:38:CD:39:7B:FF:5B:B8:A3:DA:05:94:43:47:07:5D:75:8F:ED:21:4F:0A:80:2E:4D:AE:4E:E7:5B:5C:7C:DC"}}},"request":{"raw":"GET /05768f48200596944dbe567095051ea1a2c9e610.bin HTTP/1.1\r\nHost: checkfirelight.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://checkfirelight.info/?__cf_chl_f_tk=eGKU5iLblymwxyOeNmNruQ.l3zP2OCXLr.zIScLHzv0-1783091788-1.0.1.1-Fv87xRPeIv3TprVCiZ.2hi.uzbhacVecKxhd1NX43eg\r\nCookie: cf_clearance=x7CrPDFa3VxjzKhrvkEtAP2DZJf60Q5q9K_NH0LnzxU-1783091796-1.2.1.1-XBW1i5n_SDimWqwX6Vod0hbq9bRwT8EgUnJ3vfsz7d03j.ElHU8e.vZVTsRQNgL6zQtCZ4AcOM7zUV3ZCjlG7.5pbuGDdkUEFeHF6a3XncUT7oWL6nykc7ZemxMFnSF.jP0HtU3YPWbNZSyY1DwDDJsHKfrO.QDrYbJ_Xt4pam1O9dvV2z8RwqkAhfg0ooK3FIUgBnpqmlpCvkrJ4FjiBNY5fUQszDf9hR_5V2FcrRvb6NfDKTu9wRl1JIYx.KoEKdHLoXfET8nvf9FBigAOgaC4gvY6FCohBYjcTNHnz9CvY.oFpNookrmmKc_aKOubsA9qrVprld9Oy.u2o8mmIHi8WkYxzprYORqFzBRs2K4UpY0OOsFmXH_nWCes.q2ii5Jl5DTBlO_B5yBY.QiwNiF.zFiseZKEoEE3u9FpAbcSIVRV2cKFYjyRDGl_Aek68EuYCh.mz2sN.hwRdkqbwRN.l3tOXqiv2Pp4kueYbdoLTRBU2_ON7Vss.5M7..9z\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: application/octet-stream\r\netag: \"82c9bec110e9fd9adf34dbe24ab9837b\"\r\nlast-modified: Tue, 30 Jun 2026 17:20:30 GMT\r\ndate: Fri, 03 Jul 2026 15:16:37 GMT\r\nserver: cloudflare\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=J0ag749u4y%2Bh4Cbi%2BqF%2BLD87vJ5CwNKSajWx0sTQhhko5jGqVam%2FfYSgEru1Gmz6NVmB%2F7dXRV3kYGNmcahEwQP17RvOR7aenDNagMuR1lxVDupDelNqZd9mt3%2FNjUT0vD2TAYNb\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a156da338bd776ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":30912,"size_decoded":31601,"mime_type":"application/octet-stream","magic":"Web Open Font Format (Version 2), TrueType, length 30912, version 1.0","md5":"82c9bec110e9fd9adf34dbe24ab9837b","sha1":"05768f48200596944dbe567095051ea1a2c9e610","sha256":"9f056b86a0ee13b109d6c26ec35cab6f82ff9ace2222b58782cb295121b9044a","sha512":"a9ae3f517a1ceda8dceb4aa9f926ddfbdcfeea766af45f8e5b3c1005a872d4c71440395d10d2f96bed62794528bdedc49282f913fe2b9913e2e7b0e5cd5df3a7","ssdeep":"768:LHfmeZ3NNYWQSqa4b0OEacjJdFK0v7w9Ctbas:LHOy3NNYMx4b0jA0v7wCOs","tlshash":"5cd2e1c9a78e1dd0b4f75cec32b685f6326e9620403bbb1468244f392385b56bdc9735","first_seen":"2025-08-31T05:39:52.16138Z","last_seen":"2026-07-03T15:17:27.590742Z","times_seen":32,"resource_available":false,"data":null}},"time_used":339,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":251,"receive":88,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-03","alert":"Sinkholed","trigger":"checkfirelight.info","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-03","alert":"Sinkholed","trigger":"checkfirelight.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"arbitrum-one.publicnode.com/","fqdn":"arbitrum-one.publicnode.com","domain":"publicnode.com","tld":"com"},"ip":{"addr":"104.20.24.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://checkfirelight.info/?__cf_chl_f_tk=eGKU5iLblymwxyOeNmNruQ.l3zP2OCXLr.zIScLHzv0-1783091788-1.0.1.1-Fv87xRPeIv3TprVCiZ.2hi.uzbhacVecKxhd1NX43eg","date":"2026-07-03T15:16:38.147Z","timestamp":1783091798147,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"publicnode.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Jun 2026 01:05:04 GMT","end":"Mon, 07 Sep 2026 02:05:00 GMT"},"fingerprint":{"sha1":"39:B4:D5:B4:26:71:60:64:13:47:CC:54:ED:BC:AD:E1:33:77:19:00","sha256":"65:A9:40:31:FB:2A:25:C7:3B:B6:B3:F0:4E:96:B9:08:CE:FC:27:5A:F6:DB:32:E8:7E:64:C7:51:34:DA:93:85"}}},"request":{"raw":"OPTIONS / HTTP/1.1\r\nHost: arbitrum-one.publicnode.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://checkfirelight.info/\r\nOrigin: https://checkfirelight.info\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 204 \r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: content-type\r\naccess-control-allow-methods: GET,HEAD,OPTIONS,POST\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 172800\r\nallow: OPTIONS, POST\r\nvary: Origin,Access-Control-Request-Method,Access-Control-Request-Headers\r\ndate: Fri, 03 Jul 2026 15:16:38 GMT\r\nx-envoy-upstream-service-time: 1\r\nserver: cloudflare\r\ncf-cache-status: DYNAMIC\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\npriority: u=4,i=?0\r\nx-content-type-options: nosniff\r\ncf-ray: a156da3a8cb75687-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":0,"size_decoded":641,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-03T19:16:40.563677Z","times_seen":16948877,"resource_available":true,"data":null}},"time_used":61,"timings":{"blocked":-1,"dns":1,"connect":15,"send":0,"wait":44,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gateway.irys.xyz/EtCAcusz6dRAmAEjLhg5caTZC47eQwZ31wgKWofrPc4g","fqdn":"gateway.irys.xyz","domain":"irys.xyz","tld":"xyz"},"ip":{"addr":"104.20.31.170","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://checkfirelight.info/?__cf_chl_f_tk=eGKU5iLblymwxyOeNmNruQ.l3zP2OCXLr.zIScLHzv0-1783091788-1.0.1.1-Fv87xRPeIv3TprVCiZ.2hi.uzbhacVecKxhd1NX43eg","date":"2026-07-03T15:16:40.424Z","timestamp":1783091800424,"http_version":"HTTP/2","security_state":"secure","security_info":null,"request":{"raw":"GET /EtCAcusz6dRAmAEjLhg5caTZC47eQwZ31wgKWofrPc4g HTTP/1.1\r\nHost: gateway.irys.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://checkfirelight.info/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 \r\ndate: Fri, 03 Jul 2026 15:16:40 GMT\r\ncontent-length: 0\r\nlocation: https://zzcs2m5lomlcptku6ihjjgjt3gz7ni5ok2jfwmd7eiwlz2a5giaq.mainnet-1.datasprite-cdn.com/EtCAcusz6dRAmAEjLhg5caTZC47eQwZ31wgKWofrPc4g/\r\nserver: cloudflare\r\naccess-control-expose-headers: location, cache-control\r\ncache-control: no-store\r\naccess-control-allow-credentials: true\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nx-cache-status: BYPASS\r\ncf-cache-status: BYPASS\r\ncf-ray: a156da48be87569f-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-03T19:16:40.563677Z","times_seen":16948877,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-03","alert":"Sinkholed","trigger":"gateway.irys.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gateway.irys.xyz/tNjir8swBoPJcDaSUy49m7YW8n9rjjUNZzKpeJzjGhC","fqdn":"gateway.irys.xyz","domain":"irys.xyz","tld":"xyz"},"ip":{"addr":"104.20.31.170","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://checkfirelight.info/?__cf_chl_f_tk=eGKU5iLblymwxyOeNmNruQ.l3zP2OCXLr.zIScLHzv0-1783091788-1.0.1.1-Fv87xRPeIv3TprVCiZ.2hi.uzbhacVecKxhd1NX43eg","date":"2026-07-03T15:16:40.441Z","timestamp":1783091800441,"http_version":"HTTP/2","security_state":"secure","security_info":null,"request":{"raw":"GET /tNjir8swBoPJcDaSUy49m7YW8n9rjjUNZzKpeJzjGhC HTTP/1.1\r\nHost: gateway.irys.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://checkfirelight.info/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 \r\ndate: Fri, 03 Jul 2026 15:16:40 GMT\r\ncontent-length: 0\r\nlocation: https://buutf2tmltbd5uchhy32zl6l6dichmeqmkfy746sru4cutui7g3q.mainnet-1.datasprite-cdn.com/tNjir8swBoPJcDaSUy49m7YW8n9rjjUNZzKpeJzjGhC/\r\nserver: cloudflare\r\naccess-control-expose-headers: cache-control, location\r\ncache-control: no-store\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-credentials: true\r\nx-cache-status: BYPASS\r\ncf-cache-status: BYPASS\r\ncf-ray: a156da48ce9f569f-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-03T19:16:40.563677Z","times_seen":16948877,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-03","alert":"Sinkholed","trigger":"gateway.irys.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gateway.irys.xyz/ENERkaSEqTZ9HDtcuY5LHchHWY4CPN3Q31Qasqrq4f6k","fqdn":"gateway.irys.xyz","domain":"irys.xyz","tld":"xyz"},"ip":{"addr":"104.20.31.170","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://checkfirelight.info/?__cf_chl_f_tk=eGKU5iLblymwxyOeNmNruQ.l3zP2OCXLr.zIScLHzv0-1783091788-1.0.1.1-Fv87xRPeIv3TprVCiZ.2hi.uzbhacVecKxhd1NX43eg","date":"2026-07-03T15:16:40.506Z","timestamp":1783091800506,"http_version":"HTTP/2","security_state":"secure","security_info":null,"request":{"raw":"GET /ENERkaSEqTZ9HDtcuY5LHchHWY4CPN3Q31Qasqrq4f6k HTTP/1.1\r\nHost: gateway.irys.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://checkfirelight.info/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 \r\ndate: Fri, 03 Jul 2026 15:16:40 GMT\r\ncontent-length: 0\r\nlocation: https://y2me6bz5xzrin5vis76bc53hqcyzeg6ccrbutd74zgrtsncobg6q.mainnet-1.datasprite-cdn.com/ENERkaSEqTZ9HDtcuY5LHchHWY4CPN3Q31Qasqrq4f6k/\r\nserver: cloudflare\r\naccess-control-expose-headers: location, cache-control\r\naccess-control-allow-credentials: true\r\ncache-control: no-store\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nx-cache-status: BYPASS\r\ncf-cache-status: BYPASS\r\ncf-ray: a156da492f24569f-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-03T19:16:40.563677Z","times_seen":16948877,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-03","alert":"Sinkholed","trigger":"gateway.irys.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"enr4cxf3dl3xz57mcmmg6wlxvi7gda2w5xdradzypkaigsdonhma.mainnet-1.datasprite-cdn.com/3P9VdFHyd9sSnhWw6vt5skH79MDNbmAPLeKZ3WU6GZjD/","fqdn":"enr4cxf3dl3xz57mcmmg6wlxvi7gda2w5xdradzypkaigsdonhma.mainnet-1.datasprite-cdn.com","domain":"datasprite-cdn.com","tld":"com"},"ip":{"addr":"104.21.15.158","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://checkfirelight.info/?__cf_chl_f_tk=eGKU5iLblymwxyOeNmNruQ.l3zP2OCXLr.zIScLHzv0-1783091788-1.0.1.1-Fv87xRPeIv3TprVCiZ.2hi.uzbhacVecKxhd1NX43eg","date":"2026-07-03T15:16:40.752Z","timestamp":1783091800752,"http_version":"HTTP/3","security_state":"secure","security_info":null,"request":{"raw":"GET /3P9VdFHyd9sSnhWw6vt5skH79MDNbmAPLeKZ3WU6GZjD/ HTTP/1.1\r\nHost: enr4cxf3dl3xz57mcmmg6wlxvi7gda2w5xdradzypkaigsdonhma.mainnet-1.datasprite-cdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://checkfirelight.info/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-03T19:16:40.563677Z","times_seen":16948877,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-03","alert":"Sinkholed","trigger":"enr4cxf3dl3xz57mcmmg6wlxvi7gda2w5xdradzypkaigsdonhma.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-03","alert":"Sinkholed","trigger":"enr4cxf3dl3xz57mcmmg6wlxvi7gda2w5xdradzypkaigsdonhma.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-03","alert":"Sinkholed","trigger":"enr4cxf3dl3xz57mcmmg6wlxvi7gda2w5xdradzypkaigsdonhma.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aa5xkwqvefm3tszfisosqh6wdakhahxso3jyl5d5wsibuczex6ma.mainnet-1.datasprite-cdn.com/1uax15bZQNN9id5YyXCs7XPHXgsx2XaS5z93YrdvjDH/","fqdn":"aa5xkwqvefm3tszfisosqh6wdakhahxso3jyl5d5wsibuczex6ma.mainnet-1.datasprite-cdn.com","domain":"datasprite-cdn.com","tld":"com"},"ip":{"addr":"104.21.15.158","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://checkfirelight.info/?__cf_chl_f_tk=eGKU5iLblymwxyOeNmNruQ.l3zP2OCXLr.zIScLHzv0-1783091788-1.0.1.1-Fv87xRPeIv3TprVCiZ.2hi.uzbhacVecKxhd1NX43eg","date":"2026-07-03T15:16:40.807Z","timestamp":1783091800807,"http_version":"HTTP/3","security_state":"secure","security_info":null,"request":{"raw":"GET /1uax15bZQNN9id5YyXCs7XPHXgsx2XaS5z93YrdvjDH/ HTTP/1.1\r\nHost: aa5xkwqvefm3tszfisosqh6wdakhahxso3jyl5d5wsibuczex6ma.mainnet-1.datasprite-cdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://checkfirelight.info/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-03T19:16:40.563677Z","times_seen":16948877,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-03","alert":"Sinkholed","trigger":"aa5xkwqvefm3tszfisosqh6wdakhahxso3jyl5d5wsibuczex6ma.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-03","alert":"Sinkholed","trigger":"aa5xkwqvefm3tszfisosqh6wdakhahxso3jyl5d5wsibuczex6ma.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-03","alert":"Sinkholed","trigger":"aa5xkwqvefm3tszfisosqh6wdakhahxso3jyl5d5wsibuczex6ma.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"checkfirelight.info/15b473b878370e5f6aad0b061defe05ec4093155.woff2","fqdn":"checkfirelight.info","domain":"checkfirelight.info","tld":"info"},"ip":{"addr":"172.67.128.191","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://checkfirelight.info/?__cf_chl_f_tk=eGKU5iLblymwxyOeNmNruQ.l3zP2OCXLr.zIScLHzv0-1783091788-1.0.1.1-Fv87xRPeIv3TprVCiZ.2hi.uzbhacVecKxhd1NX43eg","date":"2026-07-03T15:16:36.936Z","timestamp":1783091796936,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"checkfirelight.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Jun 2026 16:28:10 GMT","end":"Mon, 28 Sep 2026 17:26:57 GMT"},"fingerprint":{"sha1":"E2:6B:21:81:9C:B8:AD:23:84:9C:B6:45:4A:80:6C:AB:99:5C:10:CE","sha256":"74:38:CD:39:7B:FF:5B:B8:A3:DA:05:94:43:47:07:5D:75:8F:ED:21:4F:0A:80:2E:4D:AE:4E:E7:5B:5C:7C:DC"}}},"request":{"raw":"GET /15b473b878370e5f6aad0b061defe05ec4093155.woff2 HTTP/1.1\r\nHost: checkfirelight.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://checkfirelight.info/?__cf_chl_f_tk=eGKU5iLblymwxyOeNmNruQ.l3zP2OCXLr.zIScLHzv0-1783091788-1.0.1.1-Fv87xRPeIv3TprVCiZ.2hi.uzbhacVecKxhd1NX43eg\r\nCookie: cf_clearance=x7CrPDFa3VxjzKhrvkEtAP2DZJf60Q5q9K_NH0LnzxU-1783091796-1.2.1.1-XBW1i5n_SDimWqwX6Vod0hbq9bRwT8EgUnJ3vfsz7d03j.ElHU8e.vZVTsRQNgL6zQtCZ4AcOM7zUV3ZCjlG7.5pbuGDdkUEFeHF6a3XncUT7oWL6nykc7ZemxMFnSF.jP0HtU3YPWbNZSyY1DwDDJsHKfrO.QDrYbJ_Xt4pam1O9dvV2z8RwqkAhfg0ooK3FIUgBnpqmlpCvkrJ4FjiBNY5fUQszDf9hR_5V2FcrRvb6NfDKTu9wRl1JIYx.KoEKdHLoXfET8nvf9FBigAOgaC4gvY6FCohBYjcTNHnz9CvY.oFpNookrmmKc_aKOubsA9qrVprld9Oy.u2o8mmIHi8WkYxzprYORqFzBRs2K4UpY0OOsFmXH_nWCes.q2ii5Jl5DTBlO_B5yBY.QiwNiF.zFiseZKEoEE3u9FpAbcSIVRV2cKFYjyRDGl_Aek68EuYCh.mz2sN.hwRdkqbwRN.l3tOXqiv2Pp4kueYbdoLTRBU2_ON7Vss.5M7..9z\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: font/woff2\r\netag: \"115dc5b24361b570908f74beeb867280\"\r\nlast-modified: Tue, 30 Jun 2026 17:20:30 GMT\r\ndate: Fri, 03 Jul 2026 15:16:37 GMT\r\nserver: cloudflare\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CJ%2Byx5iv9UoLz7KJkMGDZWmuWzdOk4uijmhTK%2BUPmVPI3t47ZML2WSzY2OyPLOoTIjRQCzpyg3O4fn4vaFsg%2FmglMrA3FQ0%2BLgawm8SDWmgqZ6fc9eQR5CKhWuJWlPoDTPqcnPAp\"}]}\r\ncf-ray: a156da32dba276ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 5332\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5332,"size_decoded":6047,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), CFF, length 5332, version 1.0","md5":"115dc5b24361b570908f74beeb867280","sha1":"15b473b878370e5f6aad0b061defe05ec4093155","sha256":"d39f873f016a48c20bedfca5c6cfd69acde4076069c4a866764cda95e08d59d3","sha512":"1d560800fefa03170659d46bcbd53b6f7316b11ac105f971f122dd82185aed3781b8e626b43527b20e5adda7e62245b093f3342b68ff0a8cd3cc7c23006ca038","ssdeep":"96:saZE6k9dCffoOPCI4LvmVt3NvfBeClG7V9t5TH065jfiNVC2o7e0vQvI1z2lbsU:s06goOqDgJTVI/tdU61qNRo7e0viPH","tlshash":"91b18d04c425a51ff6594876b4a65df38ba12959c404a3cf3d0987ce92fa22883e9ba1","first_seen":"2026-02-16T14:56:50.16867Z","last_seen":"2026-07-03T15:17:27.591461Z","times_seen":22,"resource_available":false,"data":null}},"time_used":383,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":383,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-03","alert":"Sinkholed","trigger":"checkfirelight.info","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-03","alert":"Sinkholed","trigger":"checkfirelight.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"esm.sh/mipd@0.0.7","fqdn":"esm.sh","domain":"esm.sh","tld":"sh"},"ip":{"addr":"172.67.70.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://checkfirelight.info/?__cf_chl_f_tk=eGKU5iLblymwxyOeNmNruQ.l3zP2OCXLr.zIScLHzv0-1783091788-1.0.1.1-Fv87xRPeIv3TprVCiZ.2hi.uzbhacVecKxhd1NX43eg","date":"2026-07-03T15:16:40.372Z","timestamp":1783091800372,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"esm.sh","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 21 Jun 2026 04:25:37 GMT","end":"Sat, 19 Sep 2026 05:25:34 GMT"},"fingerprint":{"sha1":"06:01:9A:2D:10:55:51:3D:71:BF:F8:20:33:F8:71:A5:9E:90:2A:AB","sha256":"1B:0D:06:A9:0C:41:8A:5B:EE:63:99:62:63:72:3A:1C:48:69:DD:7C:A6:61:EB:03:67:80:79:9E:62:BA:EA:CC"}}},"request":{"raw":"GET /mipd@0.0.7 HTTP/1.1\r\nHost: esm.sh\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://checkfirelight.info\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://noteworthy-lox.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 03 Jul 2026 15:16:40 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: X-ESM-Path, X-TypeScript-Types\r\ncache-control: public, max-age=31536000, immutable\r\nserver: cloudflare\r\nvary: User-Agent\r\nx-esm-path: /mipd@0.0.7/es2022/mipd.mjs\r\nx-typescript-types: https://esm.sh/mipd@0.0.7/dist/types/index.d.ts\r\nlast-modified: Fri, 03 Jul 2026 15:16:40 GMT\r\ncf-cache-status: HIT\r\ncontent-encoding: br\r\ncf-ray: a156da485b000b31-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":71,"size_decoded":606,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text","md5":"c086cf4bfd6eff57b5209b43659c1697","sha1":"f7052fed487141e6f548a8318071d65a51ae2cd8","sha256":"d10981647c684009f82945a2b89daa0e45b5ff6bcb095e641d10608d9c6fa163","sha512":"97dafc1ec705f4235e906819727bd0bbe7dc297ff1832d01cc049e24a949fb1007e41a0975b5f8ba4bd4696e73bf54abd4f427c5f78bed59dbbaf02b5b635816","ssdeep":"","tlshash":"08a002a501d7053c3b3139d4223fd12ad3a31784e48386cc24b9174159c4850993d1bb","first_seen":"2026-04-20T20:39:03.019439Z","last_seen":"2026-07-03T15:17:27.592145Z","times_seen":151,"resource_available":true,"data":null}},"time_used":112,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":112,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gateway.irys.xyz/Ee22Pv7cBH8BUouBujgDbWKxMkbCCZGKJUPot9ZNpLsi","fqdn":"gateway.irys.xyz","domain":"irys.xyz","tld":"xyz"},"ip":{"addr":"104.20.31.170","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://checkfirelight.info/?__cf_chl_f_tk=eGKU5iLblymwxyOeNmNruQ.l3zP2OCXLr.zIScLHzv0-1783091788-1.0.1.1-Fv87xRPeIv3TprVCiZ.2hi.uzbhacVecKxhd1NX43eg","date":"2026-07-03T15:16:40.397Z","timestamp":1783091800397,"http_version":"HTTP/2","security_state":"secure","security_info":null,"request":{"raw":"GET /Ee22Pv7cBH8BUouBujgDbWKxMkbCCZGKJUPot9ZNpLsi HTTP/1.1\r\nHost: gateway.irys.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://checkfirelight.info/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"302","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-03T19:16:40.563677Z","times_seen":16948877,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-03","alert":"Sinkholed","trigger":"gateway.irys.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"checkfirelight.info/favicon.ico","fqdn":"checkfirelight.info","domain":"checkfirelight.info","tld":"info"},"ip":{"addr":"172.67.128.191","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://checkfirelight.info/?__cf_chl_f_tk=eGKU5iLblymwxyOeNmNruQ.l3zP2OCXLr.zIScLHzv0-1783091788-1.0.1.1-Fv87xRPeIv3TprVCiZ.2hi.uzbhacVecKxhd1NX43eg","date":"2026-07-03T15:16:36.572Z","timestamp":1783091796572,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"checkfirelight.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Jun 2026 16:28:10 GMT","end":"Mon, 28 Sep 2026 17:26:57 GMT"},"fingerprint":{"sha1":"E2:6B:21:81:9C:B8:AD:23:84:9C:B6:45:4A:80:6C:AB:99:5C:10:CE","sha256":"74:38:CD:39:7B:FF:5B:B8:A3:DA:05:94:43:47:07:5D:75:8F:ED:21:4F:0A:80:2E:4D:AE:4E:E7:5B:5C:7C:DC"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: checkfirelight.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://checkfirelight.info/?__cf_chl_f_tk=eGKU5iLblymwxyOeNmNruQ.l3zP2OCXLr.zIScLHzv0-1783091788-1.0.1.1-Fv87xRPeIv3TprVCiZ.2hi.uzbhacVecKxhd1NX43eg\r\nCookie: cf_clearance=x7CrPDFa3VxjzKhrvkEtAP2DZJf60Q5q9K_NH0LnzxU-1783091796-1.2.1.1-XBW1i5n_SDimWqwX6Vod0hbq9bRwT8EgUnJ3vfsz7d03j.ElHU8e.vZVTsRQNgL6zQtCZ4AcOM7zUV3ZCjlG7.5pbuGDdkUEFeHF6a3XncUT7oWL6nykc7ZemxMFnSF.jP0HtU3YPWbNZSyY1DwDDJsHKfrO.QDrYbJ_Xt4pam1O9dvV2z8RwqkAhfg0ooK3FIUgBnpqmlpCvkrJ4FjiBNY5fUQszDf9hR_5V2FcrRvb6NfDKTu9wRl1JIYx.KoEKdHLoXfET8nvf9FBigAOgaC4gvY6FCohBYjcTNHnz9CvY.oFpNookrmmKc_aKOubsA9qrVprld9Oy.u2o8mmIHi8WkYxzprYORqFzBRs2K4UpY0OOsFmXH_nWCes.q2ii5Jl5DTBlO_B5yBY.QiwNiF.zFiseZKEoEE3u9FpAbcSIVRV2cKFYjyRDGl_Aek68EuYCh.mz2sN.hwRdkqbwRN.l3tOXqiv2Pp4kueYbdoLTRBU2_ON7Vss.5M7..9z\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\ndate: Fri, 03 Jul 2026 15:16:36 GMT\r\nserver: cloudflare\r\nserver-timing: cfExtPri\r\nage: 6\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SjbRLm3OyPFmTxQjKdBe5MN8R4sQhPRTutkCRqCLIDQWoN9PIlvsj6tharzXHICoGRewhJqZrK8W8DEzB7SpxQgUdW5JtgotFgc8OMZ%2FkUfIl1FDur7Pboem6mU%2Bvx2aeQ55Of5Y\"}]}\r\ncf-ray: a156da309b2c76ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 0\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":579,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-03T19:16:40.563677Z","times_seen":16948877,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-03","alert":"Sinkholed","trigger":"checkfirelight.info","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-03","alert":"Sinkholed","trigger":"checkfirelight.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"checkfirelight.info/61fdd268a7b95706c26ba67b0e7831366cf665c4.png","fqdn":"checkfirelight.info","domain":"checkfirelight.info","tld":"info"},"ip":{"addr":"172.67.128.191","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://checkfirelight.info/?__cf_chl_f_tk=eGKU5iLblymwxyOeNmNruQ.l3zP2OCXLr.zIScLHzv0-1783091788-1.0.1.1-Fv87xRPeIv3TprVCiZ.2hi.uzbhacVecKxhd1NX43eg","date":"2026-07-03T15:16:36.972Z","timestamp":1783091796972,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"checkfirelight.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Jun 2026 16:28:10 GMT","end":"Mon, 28 Sep 2026 17:26:57 GMT"},"fingerprint":{"sha1":"E2:6B:21:81:9C:B8:AD:23:84:9C:B6:45:4A:80:6C:AB:99:5C:10:CE","sha256":"74:38:CD:39:7B:FF:5B:B8:A3:DA:05:94:43:47:07:5D:75:8F:ED:21:4F:0A:80:2E:4D:AE:4E:E7:5B:5C:7C:DC"}}},"request":{"raw":"GET /61fdd268a7b95706c26ba67b0e7831366cf665c4.png HTTP/1.1\r\nHost: checkfirelight.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://checkfirelight.info/?__cf_chl_f_tk=eGKU5iLblymwxyOeNmNruQ.l3zP2OCXLr.zIScLHzv0-1783091788-1.0.1.1-Fv87xRPeIv3TprVCiZ.2hi.uzbhacVecKxhd1NX43eg\r\nCookie: cf_clearance=x7CrPDFa3VxjzKhrvkEtAP2DZJf60Q5q9K_NH0LnzxU-1783091796-1.2.1.1-XBW1i5n_SDimWqwX6Vod0hbq9bRwT8EgUnJ3vfsz7d03j.ElHU8e.vZVTsRQNgL6zQtCZ4AcOM7zUV3ZCjlG7.5pbuGDdkUEFeHF6a3XncUT7oWL6nykc7ZemxMFnSF.jP0HtU3YPWbNZSyY1DwDDJsHKfrO.QDrYbJ_Xt4pam1O9dvV2z8RwqkAhfg0ooK3FIUgBnpqmlpCvkrJ4FjiBNY5fUQszDf9hR_5V2FcrRvb6NfDKTu9wRl1JIYx.KoEKdHLoXfET8nvf9FBigAOgaC4gvY6FCohBYjcTNHnz9CvY.oFpNookrmmKc_aKOubsA9qrVprld9Oy.u2o8mmIHi8WkYxzprYORqFzBRs2K4UpY0OOsFmXH_nWCes.q2ii5Jl5DTBlO_B5yBY.QiwNiF.zFiseZKEoEE3u9FpAbcSIVRV2cKFYjyRDGl_Aek68EuYCh.mz2sN.hwRdkqbwRN.l3tOXqiv2Pp4kueYbdoLTRBU2_ON7Vss.5M7..9z\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: image/png\r\netag: \"cfc3f805b1b7bfef518b54617dbdca36\"\r\nlast-modified: Tue, 30 Jun 2026 17:20:30 GMT\r\ndate: Fri, 03 Jul 2026 15:16:37 GMT\r\nserver: cloudflare\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CDS2HMojv4BacBnmgLo8mg%2FZOYqWFlva87tvqz6DznW6rAeSZbD%2FlEAZP8JqOKC5eHGCbTEjzJJtQCv9IXMvZM6dLrXunD8p99FZrqWnz58%2BS3UxBChCvZakgizK4sShSxOQtBd%2F\"}]}\r\ncf-ray: a156da331bb976ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 2297\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2297,"size_decoded":3008,"mime_type":"image/png","magic":"PNG image data, 82 x 78, 8-bit/color RGBA, non-interlaced","md5":"cfc3f805b1b7bfef518b54617dbdca36","sha1":"61fdd268a7b95706c26ba67b0e7831366cf665c4","sha256":"39f32bc8d98f625908b59a56f97fed24ccead48af0466cfa3be6da0de022ada3","sha512":"be675cdcd973541025d053feeaaef97580f8f65d7eb45a703b887cccfc06c128ff01b1276c5d4a6166d47efdddbf54ae2d8a997c3e75849800148a6ec5fe93a6","ssdeep":"","tlshash":"ee41c6952df079e1d0d529b10dc2420a49bb8d87388de58bb3ec1d932f9d950925a7cd","first_seen":"2026-04-17T17:57:05.286395Z","last_seen":"2026-07-03T15:17:27.592827Z","times_seen":32,"resource_available":false,"data":null}},"time_used":167,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":167,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-03","alert":"Sinkholed","trigger":"checkfirelight.info","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-03","alert":"Sinkholed","trigger":"checkfirelight.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gateway.irys.xyz/4fknCk58W1hxsN2yyfLGwPmgrvjRZwGoMCtrY6DtfWPA","fqdn":"gateway.irys.xyz","domain":"irys.xyz","tld":"xyz"},"ip":{"addr":"104.20.31.170","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://checkfirelight.info/?__cf_chl_f_tk=eGKU5iLblymwxyOeNmNruQ.l3zP2OCXLr.zIScLHzv0-1783091788-1.0.1.1-Fv87xRPeIv3TprVCiZ.2hi.uzbhacVecKxhd1NX43eg","date":"2026-07-03T15:16:40.435Z","timestamp":1783091800435,"http_version":"HTTP/2","security_state":"secure","security_info":null,"request":{"raw":"GET /4fknCk58W1hxsN2yyfLGwPmgrvjRZwGoMCtrY6DtfWPA HTTP/1.1\r\nHost: gateway.irys.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://checkfirelight.info/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 \r\ndate: Fri, 03 Jul 2026 15:16:40 GMT\r\ncontent-length: 0\r\nlocation: https://g2akedaejpemffcb3k3tbk3zmsdzsgpvw3zsqilmev3jh4ywcf4q.mainnet-1.datasprite-cdn.com/4fknCk58W1hxsN2yyfLGwPmgrvjRZwGoMCtrY6DtfWPA/\r\nserver: cloudflare\r\naccess-control-allow-credentials: true\r\ncache-control: no-store\r\naccess-control-expose-headers: location, cache-control\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nx-cache-status: BYPASS\r\ncf-cache-status: BYPASS\r\ncf-ray: a156da48be95569f-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-03T19:16:40.563677Z","times_seen":16948877,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-03","alert":"Sinkholed","trigger":"gateway.irys.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gateway.irys.xyz/7MQuBTrRdm5iYhmrHxm5x4SbttL9dZTrssQBRhuxrYEg","fqdn":"gateway.irys.xyz","domain":"irys.xyz","tld":"xyz"},"ip":{"addr":"104.20.31.170","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://checkfirelight.info/?__cf_chl_f_tk=eGKU5iLblymwxyOeNmNruQ.l3zP2OCXLr.zIScLHzv0-1783091788-1.0.1.1-Fv87xRPeIv3TprVCiZ.2hi.uzbhacVecKxhd1NX43eg","date":"2026-07-03T15:16:40.461Z","timestamp":1783091800461,"http_version":"HTTP/2","security_state":"secure","security_info":null,"request":{"raw":"GET /7MQuBTrRdm5iYhmrHxm5x4SbttL9dZTrssQBRhuxrYEg HTTP/1.1\r\nHost: gateway.irys.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://checkfirelight.info/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 \r\ndate: Fri, 03 Jul 2026 15:16:40 GMT\r\ncontent-length: 0\r\nlocation: https://lzqmfxcfxzkmtpb2kkhciww2krq6nbxvcrakzllef64mn2325ugq.mainnet-1.datasprite-cdn.com/7MQuBTrRdm5iYhmrHxm5x4SbttL9dZTrssQBRhuxrYEg/\r\nserver: cloudflare\r\naccess-control-allow-credentials: true\r\naccess-control-expose-headers: location, cache-control\r\ncache-control: no-store\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nx-cache-status: BYPASS\r\ncf-cache-status: BYPASS\r\ncf-ray: a156da48eecc569f-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-03T19:16:40.563677Z","times_seen":16948877,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-03","alert":"Sinkholed","trigger":"gateway.irys.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gateway.irys.xyz/12PdhtpXedXaMXrbokFcSkznJ5dABUVrBGffsHKjVWbN","fqdn":"gateway.irys.xyz","domain":"irys.xyz","tld":"xyz"},"ip":{"addr":"104.20.31.170","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://checkfirelight.info/?__cf_chl_f_tk=eGKU5iLblymwxyOeNmNruQ.l3zP2OCXLr.zIScLHzv0-1783091788-1.0.1.1-Fv87xRPeIv3TprVCiZ.2hi.uzbhacVecKxhd1NX43eg","date":"2026-07-03T15:16:40.509Z","timestamp":1783091800509,"http_version":"HTTP/2","security_state":"secure","security_info":null,"request":{"raw":"GET /12PdhtpXedXaMXrbokFcSkznJ5dABUVrBGffsHKjVWbN HTTP/1.1\r\nHost: gateway.irys.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://checkfirelight.info/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 \r\ndate: Fri, 03 Jul 2026 15:16:40 GMT\r\ncontent-length: 0\r\nlocation: https://abnsx7str6j5sa3pdbm5r66xojf3es2dyofcb7tsun2spudnhioq.mainnet-1.datasprite-cdn.com/12PdhtpXedXaMXrbokFcSkznJ5dABUVrBGffsHKjVWbN/\r\nserver: cloudflare\r\naccess-control-allow-credentials: true\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\ncache-control: no-store\r\naccess-control-expose-headers: location, cache-control\r\nx-cache-status: BYPASS\r\ncf-cache-status: BYPASS\r\ncf-ray: a156da492f2c569f-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-03T19:16:40.563677Z","times_seen":16948877,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-03","alert":"Sinkholed","trigger":"gateway.irys.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gateway.irys.xyz/GmwajjdnKm9Mst1txGwAqi6bxVzqhg6ysJGdzGgPF6uB","fqdn":"gateway.irys.xyz","domain":"irys.xyz","tld":"xyz"},"ip":{"addr":"104.20.31.170","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://checkfirelight.info/?__cf_chl_f_tk=eGKU5iLblymwxyOeNmNruQ.l3zP2OCXLr.zIScLHzv0-1783091788-1.0.1.1-Fv87xRPeIv3TprVCiZ.2hi.uzbhacVecKxhd1NX43eg","date":"2026-07-03T15:16:40.523Z","timestamp":1783091800523,"http_version":"HTTP/2","security_state":"secure","security_info":null,"request":{"raw":"GET /GmwajjdnKm9Mst1txGwAqi6bxVzqhg6ysJGdzGgPF6uB HTTP/1.1\r\nHost: gateway.irys.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://checkfirelight.info/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 \r\ndate: Fri, 03 Jul 2026 15:16:40 GMT\r\ncontent-length: 0\r\nlocation: https://5jrjgp2nl37gpefz75hgo6idl2q2frezh2ewvezllzssodeldc3a.mainnet-1.datasprite-cdn.com/GmwajjdnKm9Mst1txGwAqi6bxVzqhg6ysJGdzGgPF6uB/\r\nserver: cloudflare\r\naccess-control-allow-credentials: true\r\ncache-control: no-store\r\naccess-control-expose-headers: cache-control, location\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nx-cache-status: BYPASS\r\ncf-cache-status: BYPASS\r\ncf-ray: a156da494f48569f-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-03T19:16:40.563677Z","times_seen":16948877,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-03","alert":"Sinkholed","trigger":"gateway.irys.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"egp3uffvpgr2wpafcervpo3f64y2lpvikbnscmfvn3udttq77joq.mainnet-1.datasprite-cdn.com/3GFibxLTiHvi7DucnoGZGgHbWb3eA9cXG3E85dEnjRsi/","fqdn":"egp3uffvpgr2wpafcervpo3f64y2lpvikbnscmfvn3udttq77joq.mainnet-1.datasprite-cdn.com","domain":"datasprite-cdn.com","tld":"com"},"ip":{"addr":"104.21.15.158","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://checkfirelight.info/?__cf_chl_f_tk=eGKU5iLblymwxyOeNmNruQ.l3zP2OCXLr.zIScLHzv0-1783091788-1.0.1.1-Fv87xRPeIv3TprVCiZ.2hi.uzbhacVecKxhd1NX43eg","date":"2026-07-03T15:16:40.816Z","timestamp":1783091800816,"http_version":"HTTP/3","security_state":"secure","security_info":null,"request":{"raw":"GET /3GFibxLTiHvi7DucnoGZGgHbWb3eA9cXG3E85dEnjRsi/ HTTP/1.1\r\nHost: egp3uffvpgr2wpafcervpo3f64y2lpvikbnscmfvn3udttq77joq.mainnet-1.datasprite-cdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://checkfirelight.info/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-03T19:16:40.563677Z","times_seen":16948877,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-03","alert":"Sinkholed","trigger":"egp3uffvpgr2wpafcervpo3f64y2lpvikbnscmfvn3udttq77joq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-03","alert":"Sinkholed","trigger":"egp3uffvpgr2wpafcervpo3f64y2lpvikbnscmfvn3udttq77joq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-03","alert":"Sinkholed","trigger":"egp3uffvpgr2wpafcervpo3f64y2lpvikbnscmfvn3udttq77joq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wqfquz32a4lzecqogmqyxh4zeqpie2ndhtrq2liju6ygvivvaykq.mainnet-1.datasprite-cdn.com/D7p9hb5EEeuut3VvifV1UNAiPEfnuNCrK6ubse1dWiwE/","fqdn":"wqfquz32a4lzecqogmqyxh4zeqpie2ndhtrq2liju6ygvivvaykq.mainnet-1.datasprite-cdn.com","domain":"datasprite-cdn.com","tld":"com"},"ip":{"addr":"104.21.15.158","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://checkfirelight.info/?__cf_chl_f_tk=eGKU5iLblymwxyOeNmNruQ.l3zP2OCXLr.zIScLHzv0-1783091788-1.0.1.1-Fv87xRPeIv3TprVCiZ.2hi.uzbhacVecKxhd1NX43eg","date":"2026-07-03T15:16:40.837Z","timestamp":1783091800837,"http_version":"HTTP/3","security_state":"secure","security_info":null,"request":{"raw":"GET /D7p9hb5EEeuut3VvifV1UNAiPEfnuNCrK6ubse1dWiwE/ HTTP/1.1\r\nHost: wqfquz32a4lzecqogmqyxh4zeqpie2ndhtrq2liju6ygvivvaykq.mainnet-1.datasprite-cdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://checkfirelight.info/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-03T19:16:40.563677Z","times_seen":16948877,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-03","alert":"Sinkholed","trigger":"wqfquz32a4lzecqogmqyxh4zeqpie2ndhtrq2liju6ygvivvaykq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-03","alert":"Sinkholed","trigger":"wqfquz32a4lzecqogmqyxh4zeqpie2ndhtrq2liju6ygvivvaykq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-03","alert":"Sinkholed","trigger":"wqfquz32a4lzecqogmqyxh4zeqpie2ndhtrq2liju6ygvivvaykq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gateway.irys.xyz/8JR7J4bybYjEWs8Ep7tqRFEpqwftdhxQghx2a5EQUaCr","fqdn":"gateway.irys.xyz","domain":"irys.xyz","tld":"xyz"},"ip":{"addr":"104.20.31.170","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://checkfirelight.info/?__cf_chl_f_tk=eGKU5iLblymwxyOeNmNruQ.l3zP2OCXLr.zIScLHzv0-1783091788-1.0.1.1-Fv87xRPeIv3TprVCiZ.2hi.uzbhacVecKxhd1NX43eg","date":"2026-07-03T15:16:40.477Z","timestamp":1783091800477,"http_version":"HTTP/2","security_state":"secure","security_info":null,"request":{"raw":"GET /8JR7J4bybYjEWs8Ep7tqRFEpqwftdhxQghx2a5EQUaCr HTTP/1.1\r\nHost: gateway.irys.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://checkfirelight.info/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 \r\ndate: Fri, 03 Jul 2026 15:16:40 GMT\r\ncontent-length: 0\r\nlocation: https://nr37cg543n2zbiykifsgbtzl3tuysa2xn3ymy57xhyrvm3g2j2nq.mainnet-1.datasprite-cdn.com/8JR7J4bybYjEWs8Ep7tqRFEpqwftdhxQghx2a5EQUaCr/\r\nserver: cloudflare\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-credentials: true\r\ncache-control: no-store\r\naccess-control-expose-headers: location, cache-control\r\nx-cache-status: BYPASS\r\ncf-cache-status: BYPASS\r\ncf-ray: a156da48fede569f-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-03T19:16:40.563677Z","times_seen":16948877,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-03","alert":"Sinkholed","trigger":"gateway.irys.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gateway.irys.xyz/5ZfwxdeiMwp91zkMTo5ABo4XYBcStqopPe52LZRVUSwr","fqdn":"gateway.irys.xyz","domain":"irys.xyz","tld":"xyz"},"ip":{"addr":"104.20.31.170","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://checkfirelight.info/?__cf_chl_f_tk=eGKU5iLblymwxyOeNmNruQ.l3zP2OCXLr.zIScLHzv0-1783091788-1.0.1.1-Fv87xRPeIv3TprVCiZ.2hi.uzbhacVecKxhd1NX43eg","date":"2026-07-03T15:16:40.450Z","timestamp":1783091800450,"http_version":"HTTP/2","security_state":"secure","security_info":null,"request":{"raw":"GET /5ZfwxdeiMwp91zkMTo5ABo4XYBcStqopPe52LZRVUSwr HTTP/1.1\r\nHost: gateway.irys.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://checkfirelight.info/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 \r\ndate: Fri, 03 Jul 2026 15:16:40 GMT\r\ncontent-length: 0\r\nlocation: https://ipgv6k3cx6mftzzxhfhhzv64ydqttwwd4p6dtqjffey5ckd47buq.mainnet-1.datasprite-cdn.com/5ZfwxdeiMwp91zkMTo5ABo4XYBcStqopPe52LZRVUSwr/\r\nserver: cloudflare\r\naccess-control-allow-credentials: true\r\ncache-control: no-store\r\naccess-control-expose-headers: location, cache-control\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nx-cache-status: BYPASS\r\ncf-cache-status: BYPASS\r\ncf-ray: a156da48deb5569f-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-03T19:16:40.563677Z","times_seen":16948877,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-03","alert":"Sinkholed","trigger":"gateway.irys.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gateway.irys.xyz/D7p9hb5EEeuut3VvifV1UNAiPEfnuNCrK6ubse1dWiwE","fqdn":"gateway.irys.xyz","domain":"irys.xyz","tld":"xyz"},"ip":{"addr":"104.20.31.170","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://checkfirelight.info/?__cf_chl_f_tk=eGKU5iLblymwxyOeNmNruQ.l3zP2OCXLr.zIScLHzv0-1783091788-1.0.1.1-Fv87xRPeIv3TprVCiZ.2hi.uzbhacVecKxhd1NX43eg","date":"2026-07-03T15:16:40.475Z","timestamp":1783091800475,"http_version":"HTTP/2","security_state":"secure","security_info":null,"request":{"raw":"GET /D7p9hb5EEeuut3VvifV1UNAiPEfnuNCrK6ubse1dWiwE HTTP/1.1\r\nHost: gateway.irys.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://checkfirelight.info/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 \r\ndate: Fri, 03 Jul 2026 15:16:40 GMT\r\ncontent-length: 0\r\nlocation: https://wqfquz32a4lzecqogmqyxh4zeqpie2ndhtrq2liju6ygvivvaykq.mainnet-1.datasprite-cdn.com/D7p9hb5EEeuut3VvifV1UNAiPEfnuNCrK6ubse1dWiwE/\r\nserver: cloudflare\r\naccess-control-allow-credentials: true\r\naccess-control-expose-headers: location, cache-control\r\ncache-control: no-store\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nx-cache-status: BYPASS\r\ncf-cache-status: BYPASS\r\ncf-ray: a156da48fedb569f-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-03T19:16:40.563677Z","times_seen":16948877,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-03","alert":"Sinkholed","trigger":"gateway.irys.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"re3ropp2geh4d5qidoozfesfsagireabcedh4j6agvkzpc463fcq.mainnet-1.datasprite-cdn.com/AEdaUbAHJH6uu1qeTC5sgQUzocwS61ZW7xEYJMCzuuq6/","fqdn":"re3ropp2geh4d5qidoozfesfsagireabcedh4j6agvkzpc463fcq.mainnet-1.datasprite-cdn.com","domain":"datasprite-cdn.com","tld":"com"},"ip":{"addr":"104.21.15.158","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://checkfirelight.info/?__cf_chl_f_tk=eGKU5iLblymwxyOeNmNruQ.l3zP2OCXLr.zIScLHzv0-1783091788-1.0.1.1-Fv87xRPeIv3TprVCiZ.2hi.uzbhacVecKxhd1NX43eg","date":"2026-07-03T15:16:40.819Z","timestamp":1783091800819,"http_version":"HTTP/3","security_state":"secure","security_info":null,"request":{"raw":"GET /AEdaUbAHJH6uu1qeTC5sgQUzocwS61ZW7xEYJMCzuuq6/ HTTP/1.1\r\nHost: re3ropp2geh4d5qidoozfesfsagireabcedh4j6agvkzpc463fcq.mainnet-1.datasprite-cdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://checkfirelight.info/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-03T19:16:40.563677Z","times_seen":16948877,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-03","alert":"Sinkholed","trigger":"re3ropp2geh4d5qidoozfesfsagireabcedh4j6agvkzpc463fcq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-03","alert":"Sinkholed","trigger":"re3ropp2geh4d5qidoozfesfsagireabcedh4j6agvkzpc463fcq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-03","alert":"Sinkholed","trigger":"re3ropp2geh4d5qidoozfesfsagireabcedh4j6agvkzpc463fcq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gateway.irys.xyz/5wUerABHQTtos15xuLUSaGKLdHRysPmt8cLkhr169WEp","fqdn":"gateway.irys.xyz","domain":"irys.xyz","tld":"xyz"},"ip":{"addr":"104.20.31.170","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://checkfirelight.info/?__cf_chl_f_tk=eGKU5iLblymwxyOeNmNruQ.l3zP2OCXLr.zIScLHzv0-1783091788-1.0.1.1-Fv87xRPeIv3TprVCiZ.2hi.uzbhacVecKxhd1NX43eg","date":"2026-07-03T15:16:40.469Z","timestamp":1783091800469,"http_version":"HTTP/2","security_state":"secure","security_info":null,"request":{"raw":"GET /5wUerABHQTtos15xuLUSaGKLdHRysPmt8cLkhr169WEp HTTP/1.1\r\nHost: gateway.irys.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://checkfirelight.info/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 \r\ndate: Fri, 03 Jul 2026 15:16:40 GMT\r\ncontent-length: 0\r\nlocation: https://jfrwbu3xjectzwr6zpvpvbewqkwb3tvpr7kikhkfa7gcmzugoycq.mainnet-1.datasprite-cdn.com/5wUerABHQTtos15xuLUSaGKLdHRysPmt8cLkhr169WEp/\r\nserver: cloudflare\r\naccess-control-expose-headers: location, cache-control\r\ncache-control: no-store\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-credentials: true\r\nx-cache-status: BYPASS\r\ncf-cache-status: BYPASS\r\ncf-ray: a156da48eed4569f-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-03T19:16:40.563677Z","times_seen":16948877,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-03","alert":"Sinkholed","trigger":"gateway.irys.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gateway.irys.xyz/ErFp6xHQkocPcwKe4eVa6afbKPpCdjzp1bvBARDXwsuc","fqdn":"gateway.irys.xyz","domain":"irys.xyz","tld":"xyz"},"ip":{"addr":"104.20.31.170","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://checkfirelight.info/?__cf_chl_f_tk=eGKU5iLblymwxyOeNmNruQ.l3zP2OCXLr.zIScLHzv0-1783091788-1.0.1.1-Fv87xRPeIv3TprVCiZ.2hi.uzbhacVecKxhd1NX43eg","date":"2026-07-03T15:16:40.481Z","timestamp":1783091800481,"http_version":"HTTP/2","security_state":"secure","security_info":null,"request":{"raw":"GET /ErFp6xHQkocPcwKe4eVa6afbKPpCdjzp1bvBARDXwsuc HTTP/1.1\r\nHost: gateway.irys.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://checkfirelight.info/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 \r\ndate: Fri, 03 Jul 2026 15:16:40 GMT\r\ncontent-length: 0\r\nlocation: https://zxdcgrwdlct5d5hkzf5ikt35hpxjgyetcpfzrvlhwzw2f6fnevbq.mainnet-1.datasprite-cdn.com/ErFp6xHQkocPcwKe4eVa6afbKPpCdjzp1bvBARDXwsuc/\r\nserver: cloudflare\r\naccess-control-expose-headers: location, cache-control\r\ncache-control: no-store\r\naccess-control-allow-credentials: true\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nx-cache-status: BYPASS\r\ncf-cache-status: BYPASS\r\ncf-ray: a156da490ee7569f-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-03T19:16:40.563677Z","times_seen":16948877,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-03","alert":"Sinkholed","trigger":"gateway.irys.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gateway.irys.xyz/A2nNXgUMwV5nKhUomHb1gTsdg7PQh8kY6o5Xd5fjAGN3","fqdn":"gateway.irys.xyz","domain":"irys.xyz","tld":"xyz"},"ip":{"addr":"104.20.31.170","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://checkfirelight.info/?__cf_chl_f_tk=eGKU5iLblymwxyOeNmNruQ.l3zP2OCXLr.zIScLHzv0-1783091788-1.0.1.1-Fv87xRPeIv3TprVCiZ.2hi.uzbhacVecKxhd1NX43eg","date":"2026-07-03T15:16:40.488Z","timestamp":1783091800488,"http_version":"HTTP/2","security_state":"secure","security_info":null,"request":{"raw":"GET /A2nNXgUMwV5nKhUomHb1gTsdg7PQh8kY6o5Xd5fjAGN3 HTTP/1.1\r\nHost: gateway.irys.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://checkfirelight.info/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 \r\ndate: Fri, 03 Jul 2026 15:16:40 GMT\r\ncontent-length: 0\r\nlocation: https://qyxbba7uefsmigd4oki3zm3hcmilt5fjudhha7n37oeygwrgdcua.mainnet-1.datasprite-cdn.com/A2nNXgUMwV5nKhUomHb1gTsdg7PQh8kY6o5Xd5fjAGN3/\r\nserver: cloudflare\r\naccess-control-expose-headers: cache-control, location\r\naccess-control-allow-credentials: true\r\ncache-control: no-store\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nx-cache-status: BYPASS\r\ncf-cache-status: BYPASS\r\ncf-ray: a156da490ef8569f-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-03T19:16:40.563677Z","times_seen":16948877,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-03","alert":"Sinkholed","trigger":"gateway.irys.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"checkfirelight.info/favicon.ico","fqdn":"checkfirelight.info","domain":"checkfirelight.info","tld":"info"},"ip":{"addr":"172.67.128.191","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://checkfirelight.info/","date":"2026-07-03T15:16:29.720Z","timestamp":1783091789720,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"checkfirelight.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Jun 2026 16:28:10 GMT","end":"Mon, 28 Sep 2026 17:26:57 GMT"},"fingerprint":{"sha1":"E2:6B:21:81:9C:B8:AD:23:84:9C:B6:45:4A:80:6C:AB:99:5C:10:CE","sha256":"74:38:CD:39:7B:FF:5B:B8:A3:DA:05:94:43:47:07:5D:75:8F:ED:21:4F:0A:80:2E:4D:AE:4E:E7:5B:5C:7C:DC"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: checkfirelight.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://checkfirelight.info/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\ndate: Fri, 03 Jul 2026 15:16:29 GMT\r\nserver: cloudflare\r\nserver-timing: cfExtPri\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QqTZCGxYYJ0qnTNnGQrPPBuHyZzVMOyoB1l%2B7yYh1GKAgprUqNLdPXm80jpG%2FKHR4TNXArSI9pWrlTCUetkzcDGCob1iOzvLNrx%2Fhe1bpI4sxBxRnhUYCYVVm7dLsE48w5wuCaWV\"}]}\r\ncf-ray: a156da05cb2a76ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 0\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":578,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-03T19:16:40.563677Z","times_seen":16948877,"resource_available":true,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-03","alert":"Sinkholed","trigger":"checkfirelight.info","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-03","alert":"Sinkholed","trigger":"checkfirelight.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"brunhild.challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/i/a156da0639454c11/Q.G9HOlRYSmNPReGLsqtCH118tX8T9xo230iYDyoWbg-1783091789-1.2.1.1-H5LoDq9mPl2jDPRt2DEGipOcK9Hb3_yihEmR.mYE4whTtV46XovPxhWc45rBhGHQ","fqdn":"brunhild.challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/av0/rch/n1hp3/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","date":"2026-07-03T15:16:30.599Z","timestamp":1783091790599,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /cdn-cgi/challenge-platform/h/b/i/a156da0639454c11/Q.G9HOlRYSmNPReGLsqtCH118tX8T9xo230iYDyoWbg-1783091789-1.2.1.1-H5LoDq9mPl2jDPRt2DEGipOcK9Hb3_yihEmR.mYE4whTtV46XovPxhWc45rBhGHQ HTTP/1.1\r\nHost: brunhild.challenges.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://challenges.cloudflare.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-03T19:16:40.563677Z","times_seen":16948877,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"arbitrum.meowrpc.com/","fqdn":"arbitrum.meowrpc.com","domain":"meowrpc.com","tld":"com"},"ip":{"addr":"172.67.70.45","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://checkfirelight.info/?__cf_chl_f_tk=eGKU5iLblymwxyOeNmNruQ.l3zP2OCXLr.zIScLHzv0-1783091788-1.0.1.1-Fv87xRPeIv3TprVCiZ.2hi.uzbhacVecKxhd1NX43eg","date":"2026-07-03T15:16:38.165Z","timestamp":1783091798165,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"meowrpc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 17:34:32 GMT","end":"Tue, 01 Sep 2026 18:34:19 GMT"},"fingerprint":{"sha1":"78:4A:BA:FF:8C:0B:6A:C6:ED:79:41:C4:76:F9:F8:BF:73:62:59:82","sha256":"B7:3B:89:BB:B9:D1:2E:D6:73:1E:CD:1B:A5:D3:D9:21:43:F6:C5:57:71:93:11:42:0E:54:A9:E7:B4:CB:08:47"}}},"request":{"raw":"OPTIONS / HTTP/1.1\r\nHost: arbitrum.meowrpc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://checkfirelight.info/\r\nOrigin: https://checkfirelight.info\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 03 Jul 2026 15:16:38 GMT\r\ncontent-length: 0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: origin, access-control-request-method, access-control-request-headers\r\naccess-control-allow-methods: GET,POST,OPTIONS\r\naccess-control-allow-headers: authorization,content-type,dnt,keep-alive,user-agent,x-requested-with,if-modified-since,cache-control,range,x-api-key\r\naccess-control-allow-origin: *\r\nallow: POST\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BV0JZgAsDBUHec6T6iX5dR4MUzwyQlCsNwiLhTf7Ihg%2FfErCWjpo2tOAaruevufQjFqyKTGtx%2FwUFaOq9gtGsKSdgnA0Qi55I1wsxlk%2FlPFcyLrkvYqSukz0ki2Fkxc5SxM9eaq9\"}]}\r\nserver: cloudflare\r\ncf-ray: a156da3aad8f56b7-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":813,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-03T19:16:40.563677Z","times_seen":16948877,"resource_available":true,"data":null}},"time_used":43,"timings":{"blocked":-1,"dns":0,"connect":1,"send":0,"wait":28,"receive":0,"ssl":12},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gateway.irys.xyz/3eh8oadBGXTp7k1PY4iYeiBbyhE1u2zmMMaMm9nBanHq","fqdn":"gateway.irys.xyz","domain":"irys.xyz","tld":"xyz"},"ip":{"addr":"104.20.31.170","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://checkfirelight.info/?__cf_chl_f_tk=eGKU5iLblymwxyOeNmNruQ.l3zP2OCXLr.zIScLHzv0-1783091788-1.0.1.1-Fv87xRPeIv3TprVCiZ.2hi.uzbhacVecKxhd1NX43eg","date":"2026-07-03T15:16:40.394Z","timestamp":1783091800394,"http_version":"HTTP/2","security_state":"secure","security_info":null,"request":{"raw":"GET /3eh8oadBGXTp7k1PY4iYeiBbyhE1u2zmMMaMm9nBanHq HTTP/1.1\r\nHost: gateway.irys.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://checkfirelight.info/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 \r\ndate: Fri, 03 Jul 2026 15:16:40 GMT\r\ncontent-length: 0\r\nlocation: https://e5pt46sfryibvjq4hrrz5src2xmfrc7jvtiolpsp3jzjl4eyeaga.mainnet-1.datasprite-cdn.com/3eh8oadBGXTp7k1PY4iYeiBbyhE1u2zmMMaMm9nBanHq/\r\nserver: cloudflare\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-credentials: true\r\ncache-control: no-store\r\naccess-control-expose-headers: location, cache-control\r\nx-cache-status: BYPASS\r\ncf-cache-status: BYPASS\r\ncf-ray: a156da48ae75569f-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-03T19:16:40.563677Z","times_seen":16948877,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-03","alert":"Sinkholed","trigger":"gateway.irys.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"checkfirelight.info/ea3f56e306962481bcb38735c71ea5039b9ce2bd.woff2","fqdn":"checkfirelight.info","domain":"checkfirelight.info","tld":"info"},"ip":{"addr":"172.67.128.191","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://checkfirelight.info/?__cf_chl_f_tk=eGKU5iLblymwxyOeNmNruQ.l3zP2OCXLr.zIScLHzv0-1783091788-1.0.1.1-Fv87xRPeIv3TprVCiZ.2hi.uzbhacVecKxhd1NX43eg","date":"2026-07-03T15:16:36.942Z","timestamp":1783091796942,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"checkfirelight.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Jun 2026 16:28:10 GMT","end":"Mon, 28 Sep 2026 17:26:57 GMT"},"fingerprint":{"sha1":"E2:6B:21:81:9C:B8:AD:23:84:9C:B6:45:4A:80:6C:AB:99:5C:10:CE","sha256":"74:38:CD:39:7B:FF:5B:B8:A3:DA:05:94:43:47:07:5D:75:8F:ED:21:4F:0A:80:2E:4D:AE:4E:E7:5B:5C:7C:DC"}}},"request":{"raw":"GET /ea3f56e306962481bcb38735c71ea5039b9ce2bd.woff2 HTTP/1.1\r\nHost: checkfirelight.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://checkfirelight.info/?__cf_chl_f_tk=eGKU5iLblymwxyOeNmNruQ.l3zP2OCXLr.zIScLHzv0-1783091788-1.0.1.1-Fv87xRPeIv3TprVCiZ.2hi.uzbhacVecKxhd1NX43eg\r\nCookie: cf_clearance=x7CrPDFa3VxjzKhrvkEtAP2DZJf60Q5q9K_NH0LnzxU-1783091796-1.2.1.1-XBW1i5n_SDimWqwX6Vod0hbq9bRwT8EgUnJ3vfsz7d03j.ElHU8e.vZVTsRQNgL6zQtCZ4AcOM7zUV3ZCjlG7.5pbuGDdkUEFeHF6a3XncUT7oWL6nykc7ZemxMFnSF.jP0HtU3YPWbNZSyY1DwDDJsHKfrO.QDrYbJ_Xt4pam1O9dvV2z8RwqkAhfg0ooK3FIUgBnpqmlpCvkrJ4FjiBNY5fUQszDf9hR_5V2FcrRvb6NfDKTu9wRl1JIYx.KoEKdHLoXfET8nvf9FBigAOgaC4gvY6FCohBYjcTNHnz9CvY.oFpNookrmmKc_aKOubsA9qrVprld9Oy.u2o8mmIHi8WkYxzprYORqFzBRs2K4UpY0OOsFmXH_nWCes.q2ii5Jl5DTBlO_B5yBY.QiwNiF.zFiseZKEoEE3u9FpAbcSIVRV2cKFYjyRDGl_Aek68EuYCh.mz2sN.hwRdkqbwRN.l3tOXqiv2Pp4kueYbdoLTRBU2_ON7Vss.5M7..9z\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: font/woff2\r\netag: \"b65daadded7406d746e61b25ebbe0ca9\"\r\nlast-modified: Tue, 30 Jun 2026 17:20:31 GMT\r\ndate: Fri, 03 Jul 2026 15:16:37 GMT\r\nserver: cloudflare\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2Fhy2oZSOzoldPlgX0F5U1TS3ExPtnSJOMBS7rbcPDrXE2Y5cRjcQ0wdohA6MFXWQ4FC3c5sUpbej18l2hO6ajMWcJ7WNxe6Ljhx3lQ0LXJjfWe0ywNFzqv3AJilWToafTLSS0K%2F9\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a156da32eba476ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":35348,"size_decoded":36015,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 35348, version 1.0","md5":"b65daadded7406d746e61b25ebbe0ca9","sha1":"ea3f56e306962481bcb38735c71ea5039b9ce2bd","sha256":"691cd1d9b4c0cdf31a1dcf04259c86f92c85e69f6622abab7964d81e36890691","sha512":"d9e53ee3bcdede0965db0fe62de1b5b78d59bad2bc2fbf1ae3ef9152e5883cffdb694a36fffd00ebcc71aaff2c4b58630c808781e966231ce4fc103b62df002a","ssdeep":"768:ob6sJaIWkw3gUba/bdQl/tVgm+l1OXO+FtG4Vqh6rUPA/X:E6sJ4kuo8tLq1OXXPVqh6rAAf","tlshash":"80f2f19ffa66b986b08385e35f265d537aa30c6a6281f521596f210f34dd34f0e71f04","first_seen":"2025-06-08T13:10:33.776668Z","last_seen":"2026-07-03T17:12:02.096027Z","times_seen":3453,"resource_available":false,"data":null}},"time_used":250,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":166,"receive":84,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-03","alert":"Sinkholed","trigger":"checkfirelight.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-03","alert":"Sinkholed","trigger":"checkfirelight.info","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"checkfirelight.info/index_1.html","fqdn":"checkfirelight.info","domain":"checkfirelight.info","tld":"info"},"ip":{"addr":"172.67.128.191","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://checkfirelight.info/?__cf_chl_f_tk=eGKU5iLblymwxyOeNmNruQ.l3zP2OCXLr.zIScLHzv0-1783091788-1.0.1.1-Fv87xRPeIv3TprVCiZ.2hi.uzbhacVecKxhd1NX43eg","date":"2026-07-03T15:16:36.977Z","timestamp":1783091796977,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"checkfirelight.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Jun 2026 16:28:10 GMT","end":"Mon, 28 Sep 2026 17:26:57 GMT"},"fingerprint":{"sha1":"E2:6B:21:81:9C:B8:AD:23:84:9C:B6:45:4A:80:6C:AB:99:5C:10:CE","sha256":"74:38:CD:39:7B:FF:5B:B8:A3:DA:05:94:43:47:07:5D:75:8F:ED:21:4F:0A:80:2E:4D:AE:4E:E7:5B:5C:7C:DC"}}},"request":{"raw":"GET /index_1.html HTTP/1.1\r\nHost: checkfirelight.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://checkfirelight.info/?__cf_chl_f_tk=eGKU5iLblymwxyOeNmNruQ.l3zP2OCXLr.zIScLHzv0-1783091788-1.0.1.1-Fv87xRPeIv3TprVCiZ.2hi.uzbhacVecKxhd1NX43eg\r\nCookie: cf_clearance=x7CrPDFa3VxjzKhrvkEtAP2DZJf60Q5q9K_NH0LnzxU-1783091796-1.2.1.1-XBW1i5n_SDimWqwX6Vod0hbq9bRwT8EgUnJ3vfsz7d03j.ElHU8e.vZVTsRQNgL6zQtCZ4AcOM7zUV3ZCjlG7.5pbuGDdkUEFeHF6a3XncUT7oWL6nykc7ZemxMFnSF.jP0HtU3YPWbNZSyY1DwDDJsHKfrO.QDrYbJ_Xt4pam1O9dvV2z8RwqkAhfg0ooK3FIUgBnpqmlpCvkrJ4FjiBNY5fUQszDf9hR_5V2FcrRvb6NfDKTu9wRl1JIYx.KoEKdHLoXfET8nvf9FBigAOgaC4gvY6FCohBYjcTNHnz9CvY.oFpNookrmmKc_aKOubsA9qrVprld9Oy.u2o8mmIHi8WkYxzprYORqFzBRs2K4UpY0OOsFmXH_nWCes.q2ii5Jl5DTBlO_B5yBY.QiwNiF.zFiseZKEoEE3u9FpAbcSIVRV2cKFYjyRDGl_Aek68EuYCh.mz2sN.hwRdkqbwRN.l3tOXqiv2Pp4kueYbdoLTRBU2_ON7Vss.5M7..9z\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\ndate: Fri, 03 Jul 2026 15:16:37 GMT\r\nserver: cloudflare\r\nserver-timing: cfExtPri\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Fl0RfNvAjNMc5W2EfmvW%2FTeWAXykt3c18vJtLJ6XkiVGfyOK7zDPW48r%2Bymd9eMgEWCeyWZrMqeRZcsa1GOlhc%2FE9FZHvD5JZLgMFkiTzmYot0SIXyYAuE0XyFM0q7xPsYuZlUYI\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: a156da331bbe76ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 0\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":547,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-03T19:16:40.563677Z","times_seen":16948877,"resource_available":true,"data":null}},"time_used":160,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":160,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-03","alert":"Sinkholed","trigger":"checkfirelight.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-03","alert":"Sinkholed","trigger":"checkfirelight.info","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"checkfirelight.info/a3d59d1afa1e26e1a417f2371e617fabdb787345.woff2","fqdn":"checkfirelight.info","domain":"checkfirelight.info","tld":"info"},"ip":{"addr":"172.67.128.191","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://checkfirelight.info/?__cf_chl_f_tk=eGKU5iLblymwxyOeNmNruQ.l3zP2OCXLr.zIScLHzv0-1783091788-1.0.1.1-Fv87xRPeIv3TprVCiZ.2hi.uzbhacVecKxhd1NX43eg","date":"2026-07-03T15:16:37.159Z","timestamp":1783091797159,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"checkfirelight.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Jun 2026 16:28:10 GMT","end":"Mon, 28 Sep 2026 17:26:57 GMT"},"fingerprint":{"sha1":"E2:6B:21:81:9C:B8:AD:23:84:9C:B6:45:4A:80:6C:AB:99:5C:10:CE","sha256":"74:38:CD:39:7B:FF:5B:B8:A3:DA:05:94:43:47:07:5D:75:8F:ED:21:4F:0A:80:2E:4D:AE:4E:E7:5B:5C:7C:DC"}}},"request":{"raw":"GET /a3d59d1afa1e26e1a417f2371e617fabdb787345.woff2 HTTP/1.1\r\nHost: checkfirelight.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://checkfirelight.info/?__cf_chl_f_tk=eGKU5iLblymwxyOeNmNruQ.l3zP2OCXLr.zIScLHzv0-1783091788-1.0.1.1-Fv87xRPeIv3TprVCiZ.2hi.uzbhacVecKxhd1NX43eg\r\nCookie: cf_clearance=x7CrPDFa3VxjzKhrvkEtAP2DZJf60Q5q9K_NH0LnzxU-1783091796-1.2.1.1-XBW1i5n_SDimWqwX6Vod0hbq9bRwT8EgUnJ3vfsz7d03j.ElHU8e.vZVTsRQNgL6zQtCZ4AcOM7zUV3ZCjlG7.5pbuGDdkUEFeHF6a3XncUT7oWL6nykc7ZemxMFnSF.jP0HtU3YPWbNZSyY1DwDDJsHKfrO.QDrYbJ_Xt4pam1O9dvV2z8RwqkAhfg0ooK3FIUgBnpqmlpCvkrJ4FjiBNY5fUQszDf9hR_5V2FcrRvb6NfDKTu9wRl1JIYx.KoEKdHLoXfET8nvf9FBigAOgaC4gvY6FCohBYjcTNHnz9CvY.oFpNookrmmKc_aKOubsA9qrVprld9Oy.u2o8mmIHi8WkYxzprYORqFzBRs2K4UpY0OOsFmXH_nWCes.q2ii5Jl5DTBlO_B5yBY.QiwNiF.zFiseZKEoEE3u9FpAbcSIVRV2cKFYjyRDGl_Aek68EuYCh.mz2sN.hwRdkqbwRN.l3tOXqiv2Pp4kueYbdoLTRBU2_ON7Vss.5M7..9z\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: font/woff2\r\netag: \"510c61a400fcbbcc0129713f8002c6ff\"\r\nlast-modified: Tue, 30 Jun 2026 17:20:30 GMT\r\ndate: Fri, 03 Jul 2026 15:16:37 GMT\r\nserver: cloudflare\r\nserver-timing: cfExtPri\r\nage: 0\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=K3vcsFSoVusTHXFshhZwwIu1jMNtBsf9TWKHTkPiez4okVCO8rNKighWwNIQFQIxYjJrjqiQUOBSwCObvW5dhKQN3LVuUVwSw8iEjKonh2zoi%2BOsc7pByUgWI41ifrXHKrdRJcfx\"}]}\r\ncf-ray: a156da343bf176ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 5280\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5280,"size_decoded":5996,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), CFF, length 5280, version 1.0","md5":"510c61a400fcbbcc0129713f8002c6ff","sha1":"a3d59d1afa1e26e1a417f2371e617fabdb787345","sha256":"3f0776df024550c2fb9da2ee25ae16742ffff7ef4578ebd7587ce6d9c7f2d55c","sha512":"a363f6ec4078d42e50c362f08828c94d638365ab0d6c893ed58ae9b6862af68c1acd84551decd30ce8bf4d3a82c1549f3aa8bb9c6ebf228093881e419cc02778","ssdeep":"96:xEs+mOgr0DnrUvpmoqE+FpFOHIA/KVaKDA6qwpU1/3XUOBsuOUCezJjCF+6HWyyb:ys+mOgADnrUvpmW+FWo2Kbq3/3dsuOUj","tlshash":"d1b1af882e0a9165d686aeb8dc651ff42722d51dcd38991c1d4f984d7f0234e285edb8","first_seen":"2026-04-30T10:56:43.294254Z","last_seen":"2026-07-03T15:17:27.593522Z","times_seen":11,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-03","alert":"Sinkholed","trigger":"checkfirelight.info","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-03","alert":"Sinkholed","trigger":"checkfirelight.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gateway.irys.xyz/HvyemAESJHULoAKmn8NDZwnCL6NodeAUeqwxbtjumDgH","fqdn":"gateway.irys.xyz","domain":"irys.xyz","tld":"xyz"},"ip":{"addr":"104.20.31.170","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://checkfirelight.info/?__cf_chl_f_tk=eGKU5iLblymwxyOeNmNruQ.l3zP2OCXLr.zIScLHzv0-1783091788-1.0.1.1-Fv87xRPeIv3TprVCiZ.2hi.uzbhacVecKxhd1NX43eg","date":"2026-07-03T15:16:40.501Z","timestamp":1783091800501,"http_version":"HTTP/2","security_state":"secure","security_info":null,"request":{"raw":"GET /HvyemAESJHULoAKmn8NDZwnCL6NodeAUeqwxbtjumDgH HTTP/1.1\r\nHost: gateway.irys.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://checkfirelight.info/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 \r\ndate: Fri, 03 Jul 2026 15:16:40 GMT\r\ncontent-length: 0\r\nlocation: https://7ohnisscwweqylohacphls5cmyhfuuworva4o7nypw42xdl6i63a.mainnet-1.datasprite-cdn.com/HvyemAESJHULoAKmn8NDZwnCL6NodeAUeqwxbtjumDgH/\r\nserver: cloudflare\r\naccess-control-expose-headers: cache-control, location\r\ncache-control: no-store\r\naccess-control-allow-credentials: true\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nx-cache-status: BYPASS\r\ncf-cache-status: BYPASS\r\ncf-ray: a156da492f1a569f-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-03T19:16:40.563677Z","times_seen":16948877,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-03","alert":"Sinkholed","trigger":"gateway.irys.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gateway.irys.xyz/7ND2SiYwsfvAPwL9K4ZdpbAi3iABc5jpoJqvVdppHRsY","fqdn":"gateway.irys.xyz","domain":"irys.xyz","tld":"xyz"},"ip":{"addr":"104.20.31.170","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://checkfirelight.info/?__cf_chl_f_tk=eGKU5iLblymwxyOeNmNruQ.l3zP2OCXLr.zIScLHzv0-1783091788-1.0.1.1-Fv87xRPeIv3TprVCiZ.2hi.uzbhacVecKxhd1NX43eg","date":"2026-07-03T15:16:40.508Z","timestamp":1783091800508,"http_version":"HTTP/2","security_state":"secure","security_info":null,"request":{"raw":"GET /7ND2SiYwsfvAPwL9K4ZdpbAi3iABc5jpoJqvVdppHRsY HTTP/1.1\r\nHost: gateway.irys.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://checkfirelight.info/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 \r\ndate: Fri, 03 Jul 2026 15:16:40 GMT\r\ncontent-length: 0\r\nlocation: https://l2kourp7xt2ar7nw3fpgqmxu3mvfli4qxvsvx3cacditkaifq6rq.mainnet-1.datasprite-cdn.com/7ND2SiYwsfvAPwL9K4ZdpbAi3iABc5jpoJqvVdppHRsY/\r\nserver: cloudflare\r\naccess-control-expose-headers: location, cache-control\r\ncache-control: no-store\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-credentials: true\r\nx-cache-status: BYPASS\r\ncf-cache-status: BYPASS\r\ncf-ray: a156da492f29569f-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-03T19:16:40.563677Z","times_seen":16948877,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-03","alert":"Sinkholed","trigger":"gateway.irys.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"checkfirelight.info/f2a99d499d2f432ff42c683adce3d4f8f0e67b97.png","fqdn":"checkfirelight.info","domain":"checkfirelight.info","tld":"info"},"ip":{"addr":"172.67.128.191","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://checkfirelight.info/?__cf_chl_f_tk=eGKU5iLblymwxyOeNmNruQ.l3zP2OCXLr.zIScLHzv0-1783091788-1.0.1.1-Fv87xRPeIv3TprVCiZ.2hi.uzbhacVecKxhd1NX43eg","date":"2026-07-03T15:16:36.823Z","timestamp":1783091796823,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"checkfirelight.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Jun 2026 16:28:10 GMT","end":"Mon, 28 Sep 2026 17:26:57 GMT"},"fingerprint":{"sha1":"E2:6B:21:81:9C:B8:AD:23:84:9C:B6:45:4A:80:6C:AB:99:5C:10:CE","sha256":"74:38:CD:39:7B:FF:5B:B8:A3:DA:05:94:43:47:07:5D:75:8F:ED:21:4F:0A:80:2E:4D:AE:4E:E7:5B:5C:7C:DC"}}},"request":{"raw":"GET /f2a99d499d2f432ff42c683adce3d4f8f0e67b97.png HTTP/1.1\r\nHost: checkfirelight.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://checkfirelight.info/?__cf_chl_f_tk=eGKU5iLblymwxyOeNmNruQ.l3zP2OCXLr.zIScLHzv0-1783091788-1.0.1.1-Fv87xRPeIv3TprVCiZ.2hi.uzbhacVecKxhd1NX43eg\r\nCookie: cf_clearance=x7CrPDFa3VxjzKhrvkEtAP2DZJf60Q5q9K_NH0LnzxU-1783091796-1.2.1.1-XBW1i5n_SDimWqwX6Vod0hbq9bRwT8EgUnJ3vfsz7d03j.ElHU8e.vZVTsRQNgL6zQtCZ4AcOM7zUV3ZCjlG7.5pbuGDdkUEFeHF6a3XncUT7oWL6nykc7ZemxMFnSF.jP0HtU3YPWbNZSyY1DwDDJsHKfrO.QDrYbJ_Xt4pam1O9dvV2z8RwqkAhfg0ooK3FIUgBnpqmlpCvkrJ4FjiBNY5fUQszDf9hR_5V2FcrRvb6NfDKTu9wRl1JIYx.KoEKdHLoXfET8nvf9FBigAOgaC4gvY6FCohBYjcTNHnz9CvY.oFpNookrmmKc_aKOubsA9qrVprld9Oy.u2o8mmIHi8WkYxzprYORqFzBRs2K4UpY0OOsFmXH_nWCes.q2ii5Jl5DTBlO_B5yBY.QiwNiF.zFiseZKEoEE3u9FpAbcSIVRV2cKFYjyRDGl_Aek68EuYCh.mz2sN.hwRdkqbwRN.l3tOXqiv2Pp4kueYbdoLTRBU2_ON7Vss.5M7..9z\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: image/png\r\netag: \"28f3c1cc4d40a59fcf0f079642b9b0cd\"\r\nlast-modified: Tue, 30 Jun 2026 17:20:30 GMT\r\ndate: Fri, 03 Jul 2026 15:16:37 GMT\r\nserver: cloudflare\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=x6Q1siMAdQq5LLUokbTPJUypJ4FI4F8JHiRy5LBUOkKKktA2OHzkNUIEQ0KOKuIm4RKiLR5%2FjtJdPnmg2g2eBaDhoVrFGEihuyxeq9pjNlVNdQSPHozoNJcYmF%2Bf4jzb6BEIEDEs\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a156da322b7576ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":26608,"size_decoded":27271,"mime_type":"image/png","magic":"PNG image data, 374 x 375, 8-bit colormap, non-interlaced","md5":"28f3c1cc4d40a59fcf0f079642b9b0cd","sha1":"f2a99d499d2f432ff42c683adce3d4f8f0e67b97","sha256":"d256b15f5b457d476bf59db37035aef282e31bb2c1c79a6e1e1b568eb3e6247f","sha512":"7e89e7b186c93607bbcd7d6c91c615613b478e12f76fd6371e0cff13d94827e900a7195c2aacf29585349ead1e87f7ac8e3ff1f6ba2c162938f4dd4178057fdc","ssdeep":"768:as3FNSH36osLOmYPLwpyym3Kx4F3kpyhuMY:9VNSXtlpLKc90","tlshash":"42c2e0e2010ad43ac1879667bdd6e812073e0a5de681ca86637c8f0b8e4d488ef5df48","first_seen":"2026-04-24T15:23:09.42495Z","last_seen":"2026-07-03T15:17:27.594183Z","times_seen":19,"resource_available":false,"data":null}},"time_used":577,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":496,"receive":81,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-03","alert":"Sinkholed","trigger":"checkfirelight.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-03","alert":"Sinkholed","trigger":"checkfirelight.info","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"checkfirelight.info/d213a58fb04b95e7468571d12402b6fde176f172.png","fqdn":"checkfirelight.info","domain":"checkfirelight.info","tld":"info"},"ip":{"addr":"172.67.128.191","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://checkfirelight.info/?__cf_chl_f_tk=eGKU5iLblymwxyOeNmNruQ.l3zP2OCXLr.zIScLHzv0-1783091788-1.0.1.1-Fv87xRPeIv3TprVCiZ.2hi.uzbhacVecKxhd1NX43eg","date":"2026-07-03T15:16:36.825Z","timestamp":1783091796825,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"checkfirelight.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Jun 2026 16:28:10 GMT","end":"Mon, 28 Sep 2026 17:26:57 GMT"},"fingerprint":{"sha1":"E2:6B:21:81:9C:B8:AD:23:84:9C:B6:45:4A:80:6C:AB:99:5C:10:CE","sha256":"74:38:CD:39:7B:FF:5B:B8:A3:DA:05:94:43:47:07:5D:75:8F:ED:21:4F:0A:80:2E:4D:AE:4E:E7:5B:5C:7C:DC"}}},"request":{"raw":"GET /d213a58fb04b95e7468571d12402b6fde176f172.png HTTP/1.1\r\nHost: checkfirelight.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://checkfirelight.info/?__cf_chl_f_tk=eGKU5iLblymwxyOeNmNruQ.l3zP2OCXLr.zIScLHzv0-1783091788-1.0.1.1-Fv87xRPeIv3TprVCiZ.2hi.uzbhacVecKxhd1NX43eg\r\nCookie: cf_clearance=x7CrPDFa3VxjzKhrvkEtAP2DZJf60Q5q9K_NH0LnzxU-1783091796-1.2.1.1-XBW1i5n_SDimWqwX6Vod0hbq9bRwT8EgUnJ3vfsz7d03j.ElHU8e.vZVTsRQNgL6zQtCZ4AcOM7zUV3ZCjlG7.5pbuGDdkUEFeHF6a3XncUT7oWL6nykc7ZemxMFnSF.jP0HtU3YPWbNZSyY1DwDDJsHKfrO.QDrYbJ_Xt4pam1O9dvV2z8RwqkAhfg0ooK3FIUgBnpqmlpCvkrJ4FjiBNY5fUQszDf9hR_5V2FcrRvb6NfDKTu9wRl1JIYx.KoEKdHLoXfET8nvf9FBigAOgaC4gvY6FCohBYjcTNHnz9CvY.oFpNookrmmKc_aKOubsA9qrVprld9Oy.u2o8mmIHi8WkYxzprYORqFzBRs2K4UpY0OOsFmXH_nWCes.q2ii5Jl5DTBlO_B5yBY.QiwNiF.zFiseZKEoEE3u9FpAbcSIVRV2cKFYjyRDGl_Aek68EuYCh.mz2sN.hwRdkqbwRN.l3tOXqiv2Pp4kueYbdoLTRBU2_ON7Vss.5M7..9z\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: image/png\r\netag: \"458971cf7b04c53fc2e69b96a2f4d537\"\r\nlast-modified: Tue, 30 Jun 2026 17:20:30 GMT\r\ndate: Fri, 03 Jul 2026 15:16:37 GMT\r\nserver: cloudflare\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LgH9s%2BJ1og4WEMybqTymaa67zkDhwIWpSs3GI%2F6aKegIsukNOr14own6gH1Qctkk6LuW7vNXIi%2FxZQwHEPkDehsSrAWfFR6KCdFZIE8pPanMZNN9sgrw2KO5llLSOMQyCZ7Z0LZe\"}]}\r\ncf-ray: a156da322b7676ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 9228\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9228,"size_decoded":9937,"mime_type":"image/png","magic":"PNG image data, 512 x 384, 8-bit colormap, non-interlaced","md5":"458971cf7b04c53fc2e69b96a2f4d537","sha1":"d213a58fb04b95e7468571d12402b6fde176f172","sha256":"6998349bcd9fff3c7d51d5c589fa7e613916870e0cab65fbd439c8f6f0eee16d","sha512":"187240c70c2be4b21b2a37e41a59bcb8468fecc99d21e3a6a2e86c9df6fa201cce8563169f3e3e6efdb9fe2266529961068a2c3011b6d500b00a32d07d8d5a04","ssdeep":"192:JeKZ9FUyh3ax7fR8QvoWe6h77EE1Ym2VYp3Rz8SXJLR3xfkTX:JeKZnh3a5fFvoWe631Y5VYb8gJRxfGX","tlshash":"af12bf680606954e80c706bde7649e38e358a90bd3aad153b837db654c355b8ec9c8fc","first_seen":"2026-04-29T09:31:56.252985Z","last_seen":"2026-07-03T15:17:27.594901Z","times_seen":19,"resource_available":false,"data":null}},"time_used":397,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":397,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-03","alert":"Sinkholed","trigger":"checkfirelight.info","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-03","alert":"Sinkholed","trigger":"checkfirelight.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"checkfirelight.info/658f8cdcc5d5ae48eb3db8f5f2b3472b430024ed.woff2","fqdn":"checkfirelight.info","domain":"checkfirelight.info","tld":"info"},"ip":{"addr":"172.67.128.191","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://checkfirelight.info/?__cf_chl_f_tk=eGKU5iLblymwxyOeNmNruQ.l3zP2OCXLr.zIScLHzv0-1783091788-1.0.1.1-Fv87xRPeIv3TprVCiZ.2hi.uzbhacVecKxhd1NX43eg","date":"2026-07-03T15:16:36.940Z","timestamp":1783091796940,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"checkfirelight.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Jun 2026 16:28:10 GMT","end":"Mon, 28 Sep 2026 17:26:57 GMT"},"fingerprint":{"sha1":"E2:6B:21:81:9C:B8:AD:23:84:9C:B6:45:4A:80:6C:AB:99:5C:10:CE","sha256":"74:38:CD:39:7B:FF:5B:B8:A3:DA:05:94:43:47:07:5D:75:8F:ED:21:4F:0A:80:2E:4D:AE:4E:E7:5B:5C:7C:DC"}}},"request":{"raw":"GET /658f8cdcc5d5ae48eb3db8f5f2b3472b430024ed.woff2 HTTP/1.1\r\nHost: checkfirelight.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://checkfirelight.info/?__cf_chl_f_tk=eGKU5iLblymwxyOeNmNruQ.l3zP2OCXLr.zIScLHzv0-1783091788-1.0.1.1-Fv87xRPeIv3TprVCiZ.2hi.uzbhacVecKxhd1NX43eg\r\nCookie: cf_clearance=x7CrPDFa3VxjzKhrvkEtAP2DZJf60Q5q9K_NH0LnzxU-1783091796-1.2.1.1-XBW1i5n_SDimWqwX6Vod0hbq9bRwT8EgUnJ3vfsz7d03j.ElHU8e.vZVTsRQNgL6zQtCZ4AcOM7zUV3ZCjlG7.5pbuGDdkUEFeHF6a3XncUT7oWL6nykc7ZemxMFnSF.jP0HtU3YPWbNZSyY1DwDDJsHKfrO.QDrYbJ_Xt4pam1O9dvV2z8RwqkAhfg0ooK3FIUgBnpqmlpCvkrJ4FjiBNY5fUQszDf9hR_5V2FcrRvb6NfDKTu9wRl1JIYx.KoEKdHLoXfET8nvf9FBigAOgaC4gvY6FCohBYjcTNHnz9CvY.oFpNookrmmKc_aKOubsA9qrVprld9Oy.u2o8mmIHi8WkYxzprYORqFzBRs2K4UpY0OOsFmXH_nWCes.q2ii5Jl5DTBlO_B5yBY.QiwNiF.zFiseZKEoEE3u9FpAbcSIVRV2cKFYjyRDGl_Aek68EuYCh.mz2sN.hwRdkqbwRN.l3tOXqiv2Pp4kueYbdoLTRBU2_ON7Vss.5M7..9z\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: font/woff2\r\netag: \"bfb826ea3b1f35c35bb3b4091fea4246\"\r\nlast-modified: Tue, 30 Jun 2026 17:20:30 GMT\r\ndate: Fri, 03 Jul 2026 15:16:37 GMT\r\nserver: cloudflare\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IYjiXaeE4LG%2F%2F5YSrYbolfABnqido5HcdNLp6IsnN5BXu4QaUq4v0tm2Daj8CCnnQUpUQYE2dzV%2Bn%2FAcEBPQ3ExSLQpWJKo7DCL0hsZCX6AIaAm8Twrj9XyYYt1Q3eybALqb6C5u\"}]}\r\ncf-ray: a156da32eba376ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 5364\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5364,"size_decoded":6079,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), CFF, length 5364, version 1.0","md5":"bfb826ea3b1f35c35bb3b4091fea4246","sha1":"658f8cdcc5d5ae48eb3db8f5f2b3472b430024ed","sha256":"5959f47a1d474288d514b3aa9aadbc339e01756e1df3a369e041fa5f04b6423f","sha512":"4b94c0b1b8d71d571f5be69adf32e55f6363641ebabd59e9cb14e1331e35c922821b6cf5ef1c92553791141b9987ef9726351024929f60b17d3b03bf08d5e687","ssdeep":"96:LrMjXYrXr8PIFZ1eAexv9WvcjcWZxJYyxL6kgMNWNpDrcffLmG97:fOiAAxix1H9XJYFk2QaG","tlshash":"29b18e9786d698cfea32cd396a513143081dbd261f84fe4096e80cb69372d2a48b123d","first_seen":"2025-12-16T22:25:45.588559Z","last_seen":"2026-07-03T15:17:27.59563Z","times_seen":15,"resource_available":false,"data":null}},"time_used":168,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":168,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-03","alert":"Sinkholed","trigger":"checkfirelight.info","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-03","alert":"Sinkholed","trigger":"checkfirelight.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gateway.irys.xyz/5ALLUP4yuGwDcVHWQu9rkA4iavNi6RPYuFSFagBKuJAX","fqdn":"gateway.irys.xyz","domain":"irys.xyz","tld":"xyz"},"ip":{"addr":"104.20.31.170","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://checkfirelight.info/?__cf_chl_f_tk=eGKU5iLblymwxyOeNmNruQ.l3zP2OCXLr.zIScLHzv0-1783091788-1.0.1.1-Fv87xRPeIv3TprVCiZ.2hi.uzbhacVecKxhd1NX43eg","date":"2026-07-03T15:16:40.512Z","timestamp":1783091800512,"http_version":"HTTP/2","security_state":"secure","security_info":null,"request":{"raw":"GET /5ALLUP4yuGwDcVHWQu9rkA4iavNi6RPYuFSFagBKuJAX HTTP/1.1\r\nHost: gateway.irys.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://checkfirelight.info/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 \r\ndate: Fri, 03 Jul 2026 15:16:40 GMT\r\ncontent-length: 0\r\nlocation: https://hxjnnbfgmzureusmhjgltavcqubaut2yzqx23rrlalgrwm4nynga.mainnet-1.datasprite-cdn.com/5ALLUP4yuGwDcVHWQu9rkA4iavNi6RPYuFSFagBKuJAX/\r\nserver: cloudflare\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-credentials: true\r\ncache-control: no-store\r\naccess-control-expose-headers: location, cache-control\r\nx-cache-status: BYPASS\r\ncf-cache-status: BYPASS\r\ncf-ray: a156da493f31569f-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-03T19:16:40.563677Z","times_seen":16948877,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-03","alert":"Sinkholed","trigger":"gateway.irys.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"buutf2tmltbd5uchhy32zl6l6dichmeqmkfy746sru4cutui7g3q.mainnet-1.datasprite-cdn.com/tNjir8swBoPJcDaSUy49m7YW8n9rjjUNZzKpeJzjGhC/","fqdn":"buutf2tmltbd5uchhy32zl6l6dichmeqmkfy746sru4cutui7g3q.mainnet-1.datasprite-cdn.com","domain":"datasprite-cdn.com","tld":"com"},"ip":{"addr":"104.21.15.158","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://checkfirelight.info/?__cf_chl_f_tk=eGKU5iLblymwxyOeNmNruQ.l3zP2OCXLr.zIScLHzv0-1783091788-1.0.1.1-Fv87xRPeIv3TprVCiZ.2hi.uzbhacVecKxhd1NX43eg","date":"2026-07-03T15:16:40.821Z","timestamp":1783091800821,"http_version":"HTTP/3","security_state":"secure","security_info":null,"request":{"raw":"GET /tNjir8swBoPJcDaSUy49m7YW8n9rjjUNZzKpeJzjGhC/ HTTP/1.1\r\nHost: buutf2tmltbd5uchhy32zl6l6dichmeqmkfy746sru4cutui7g3q.mainnet-1.datasprite-cdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://checkfirelight.info/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-03T19:16:40.563677Z","times_seen":16948877,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-03","alert":"Sinkholed","trigger":"buutf2tmltbd5uchhy32zl6l6dichmeqmkfy746sru4cutui7g3q.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-03","alert":"Sinkholed","trigger":"buutf2tmltbd5uchhy32zl6l6dichmeqmkfy746sru4cutui7g3q.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-03","alert":"Sinkholed","trigger":"buutf2tmltbd5uchhy32zl6l6dichmeqmkfy746sru4cutui7g3q.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kezjuikcsaiyqvsd2w32dhijntrtnjkh4vwendcd35dw34hhszna.mainnet-1.datasprite-cdn.com/6Txn2Htb2ZZS6c5kQnF6q6P8YraMrEyZwCs1fuJs85ku/","fqdn":"kezjuikcsaiyqvsd2w32dhijntrtnjkh4vwendcd35dw34hhszna.mainnet-1.datasprite-cdn.com","domain":"datasprite-cdn.com","tld":"com"},"ip":{"addr":"104.21.15.158","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://checkfirelight.info/?__cf_chl_f_tk=eGKU5iLblymwxyOeNmNruQ.l3zP2OCXLr.zIScLHzv0-1783091788-1.0.1.1-Fv87xRPeIv3TprVCiZ.2hi.uzbhacVecKxhd1NX43eg","date":"2026-07-03T15:16:40.805Z","timestamp":1783091800805,"http_version":"HTTP/3","security_state":"secure","security_info":null,"request":{"raw":"GET /6Txn2Htb2ZZS6c5kQnF6q6P8YraMrEyZwCs1fuJs85ku/ HTTP/1.1\r\nHost: kezjuikcsaiyqvsd2w32dhijntrtnjkh4vwendcd35dw34hhszna.mainnet-1.datasprite-cdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://checkfirelight.info/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-03T19:16:40.563677Z","times_seen":16948877,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-03","alert":"Sinkholed","trigger":"kezjuikcsaiyqvsd2w32dhijntrtnjkh4vwendcd35dw34hhszna.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-03","alert":"Sinkholed","trigger":"kezjuikcsaiyqvsd2w32dhijntrtnjkh4vwendcd35dw34hhszna.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-03","alert":"Sinkholed","trigger":"kezjuikcsaiyqvsd2w32dhijntrtnjkh4vwendcd35dw34hhszna.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"checkfirelight.info/b6ad9e40c45ed5117f4040e65f8c652bb40135fd.svg","fqdn":"checkfirelight.info","domain":"checkfirelight.info","tld":"info"},"ip":{"addr":"172.67.128.191","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://checkfirelight.info/?__cf_chl_f_tk=eGKU5iLblymwxyOeNmNruQ.l3zP2OCXLr.zIScLHzv0-1783091788-1.0.1.1-Fv87xRPeIv3TprVCiZ.2hi.uzbhacVecKxhd1NX43eg","date":"2026-07-03T15:16:36.903Z","timestamp":1783091796903,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"checkfirelight.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Jun 2026 16:28:10 GMT","end":"Mon, 28 Sep 2026 17:26:57 GMT"},"fingerprint":{"sha1":"E2:6B:21:81:9C:B8:AD:23:84:9C:B6:45:4A:80:6C:AB:99:5C:10:CE","sha256":"74:38:CD:39:7B:FF:5B:B8:A3:DA:05:94:43:47:07:5D:75:8F:ED:21:4F:0A:80:2E:4D:AE:4E:E7:5B:5C:7C:DC"}}},"request":{"raw":"GET /b6ad9e40c45ed5117f4040e65f8c652bb40135fd.svg HTTP/1.1\r\nHost: checkfirelight.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://checkfirelight.info/?__cf_chl_f_tk=eGKU5iLblymwxyOeNmNruQ.l3zP2OCXLr.zIScLHzv0-1783091788-1.0.1.1-Fv87xRPeIv3TprVCiZ.2hi.uzbhacVecKxhd1NX43eg\r\nCookie: cf_clearance=x7CrPDFa3VxjzKhrvkEtAP2DZJf60Q5q9K_NH0LnzxU-1783091796-1.2.1.1-XBW1i5n_SDimWqwX6Vod0hbq9bRwT8EgUnJ3vfsz7d03j.ElHU8e.vZVTsRQNgL6zQtCZ4AcOM7zUV3ZCjlG7.5pbuGDdkUEFeHF6a3XncUT7oWL6nykc7ZemxMFnSF.jP0HtU3YPWbNZSyY1DwDDJsHKfrO.QDrYbJ_Xt4pam1O9dvV2z8RwqkAhfg0ooK3FIUgBnpqmlpCvkrJ4FjiBNY5fUQszDf9hR_5V2FcrRvb6NfDKTu9wRl1JIYx.KoEKdHLoXfET8nvf9FBigAOgaC4gvY6FCohBYjcTNHnz9CvY.oFpNookrmmKc_aKOubsA9qrVprld9Oy.u2o8mmIHi8WkYxzprYORqFzBRs2K4UpY0OOsFmXH_nWCes.q2ii5Jl5DTBlO_B5yBY.QiwNiF.zFiseZKEoEE3u9FpAbcSIVRV2cKFYjyRDGl_Aek68EuYCh.mz2sN.hwRdkqbwRN.l3tOXqiv2Pp4kueYbdoLTRBU2_ON7Vss.5M7..9z\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=K4lqp5kz2bFCytdjMGGVk1sMrzAb7yjm7INhwMJUHO5Iqzru04tw9mF6BdwJ1wUPPekFew%2FIPfBzGSojQMfYFXxJqDl3LE%2BCP5hyMWFLvEn%2BH9QLGkoAD5MD0W1nsGAt%2FiSMmGei\"}]}\r\nlast-modified: Tue, 30 Jun 2026 17:20:30 GMT\r\ndate: Fri, 03 Jul 2026 15:16:37 GMT\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\netag: W/\"d29271f69bf5a5cce9b99cad01619a31\"\r\ncf-ray: a156da32ab8c76ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1041,"size_decoded":1279,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"d29271f69bf5a5cce9b99cad01619a31","sha1":"b6ad9e40c45ed5117f4040e65f8c652bb40135fd","sha256":"84d8f03e0016bfc7b24a243733e74f211aa5e2c3d6423746e0ed93bca660852a","sha512":"564d71caca9c28b10400e0d2eb39a242da88996d6d0f3ebe567c01d5e6824e01432920cb008db0abe44a7e38f2f69b0b8e546c448600432e05d76f2ea24f1eb4","ssdeep":"","tlshash":"3511affe4bb95bf0495e8bbaf932118cba06fc352bd459cec14d5d469091ce8e582801","first_seen":"2026-04-24T15:23:09.436872Z","last_seen":"2026-07-03T15:17:27.596286Z","times_seen":16,"resource_available":false,"data":null}},"time_used":157,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":157,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-03","alert":"Sinkholed","trigger":"checkfirelight.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-03","alert":"Sinkholed","trigger":"checkfirelight.info","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"checkfirelight.info/6aa8a20f82d42a42b35dd8c62f95331eaf1ba39c.woff2","fqdn":"checkfirelight.info","domain":"checkfirelight.info","tld":"info"},"ip":{"addr":"172.67.128.191","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://checkfirelight.info/?__cf_chl_f_tk=eGKU5iLblymwxyOeNmNruQ.l3zP2OCXLr.zIScLHzv0-1783091788-1.0.1.1-Fv87xRPeIv3TprVCiZ.2hi.uzbhacVecKxhd1NX43eg","date":"2026-07-03T15:16:36.946Z","timestamp":1783091796946,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"checkfirelight.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Jun 2026 16:28:10 GMT","end":"Mon, 28 Sep 2026 17:26:57 GMT"},"fingerprint":{"sha1":"E2:6B:21:81:9C:B8:AD:23:84:9C:B6:45:4A:80:6C:AB:99:5C:10:CE","sha256":"74:38:CD:39:7B:FF:5B:B8:A3:DA:05:94:43:47:07:5D:75:8F:ED:21:4F:0A:80:2E:4D:AE:4E:E7:5B:5C:7C:DC"}}},"request":{"raw":"GET /6aa8a20f82d42a42b35dd8c62f95331eaf1ba39c.woff2 HTTP/1.1\r\nHost: checkfirelight.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://checkfirelight.info/?__cf_chl_f_tk=eGKU5iLblymwxyOeNmNruQ.l3zP2OCXLr.zIScLHzv0-1783091788-1.0.1.1-Fv87xRPeIv3TprVCiZ.2hi.uzbhacVecKxhd1NX43eg\r\nCookie: cf_clearance=x7CrPDFa3VxjzKhrvkEtAP2DZJf60Q5q9K_NH0LnzxU-1783091796-1.2.1.1-XBW1i5n_SDimWqwX6Vod0hbq9bRwT8EgUnJ3vfsz7d03j.ElHU8e.vZVTsRQNgL6zQtCZ4AcOM7zUV3ZCjlG7.5pbuGDdkUEFeHF6a3XncUT7oWL6nykc7ZemxMFnSF.jP0HtU3YPWbNZSyY1DwDDJsHKfrO.QDrYbJ_Xt4pam1O9dvV2z8RwqkAhfg0ooK3FIUgBnpqmlpCvkrJ4FjiBNY5fUQszDf9hR_5V2FcrRvb6NfDKTu9wRl1JIYx.KoEKdHLoXfET8nvf9FBigAOgaC4gvY6FCohBYjcTNHnz9CvY.oFpNookrmmKc_aKOubsA9qrVprld9Oy.u2o8mmIHi8WkYxzprYORqFzBRs2K4UpY0OOsFmXH_nWCes.q2ii5Jl5DTBlO_B5yBY.QiwNiF.zFiseZKEoEE3u9FpAbcSIVRV2cKFYjyRDGl_Aek68EuYCh.mz2sN.hwRdkqbwRN.l3tOXqiv2Pp4kueYbdoLTRBU2_ON7Vss.5M7..9z\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: font/woff2\r\netag: \"f5284a3495917f6a44f26fb5dd1d8afd\"\r\nlast-modified: Tue, 30 Jun 2026 17:20:30 GMT\r\ndate: Fri, 03 Jul 2026 15:16:37 GMT\r\nserver: cloudflare\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QYIFT8hSLgkUsjIKw9UY6Y2JSTPLLUafwmjOC1pmFoMH2ZHaHPTV63wbHKYJjx58nVBt%2BERG4zdFPU0lEXNBtczsDPoN4%2BBo3R6Yw208vpadTn8D5zgxu0N8XUb9Fu%2BPgGe50XuS\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a156da32eba676ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":27676,"size_decoded":28345,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 27676, version 4.0","md5":"f5284a3495917f6a44f26fb5dd1d8afd","sha1":"6aa8a20f82d42a42b35dd8c62f95331eaf1ba39c","sha256":"6aba565c1cc33eb1275f69fe270a717b21a9b2cebbfa3cd109e862f2187a0f49","sha512":"63dfe3cf3aff75ab6a25de7bfaff4f8731d31c98a85b04aa3555b62111c10b48738e9de3624b31b61e0881e995eba8c1ce65aeec39e9aa65922dd67e51c42e2c","ssdeep":"768:fr+UfEvrHN8aHZhqjJvkL1WTWYwHTwyHXhJOFY/H+:6KEvjN8a50ds1W6YwHT9RMY/+","tlshash":"27c2e1fe0439d63cc8558f1edd91b98c0b872f9cd9868a1001edbef4497f8f4620a44a","first_seen":"2025-08-23T14:43:00.600022Z","last_seen":"2026-07-03T15:17:27.596997Z","times_seen":245,"resource_available":false,"data":null}},"time_used":251,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":164,"receive":87,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-03","alert":"Sinkholed","trigger":"checkfirelight.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-03","alert":"Sinkholed","trigger":"checkfirelight.info","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"checkfirelight.info/a3d59d1afa1e26e1a417f2371e617fabdb787345.woff2","fqdn":"checkfirelight.info","domain":"checkfirelight.info","tld":"info"},"ip":{"addr":"172.67.128.191","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://checkfirelight.info/?__cf_chl_f_tk=eGKU5iLblymwxyOeNmNruQ.l3zP2OCXLr.zIScLHzv0-1783091788-1.0.1.1-Fv87xRPeIv3TprVCiZ.2hi.uzbhacVecKxhd1NX43eg","date":"2026-07-03T15:16:36.959Z","timestamp":1783091796959,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"checkfirelight.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Jun 2026 16:28:10 GMT","end":"Mon, 28 Sep 2026 17:26:57 GMT"},"fingerprint":{"sha1":"E2:6B:21:81:9C:B8:AD:23:84:9C:B6:45:4A:80:6C:AB:99:5C:10:CE","sha256":"74:38:CD:39:7B:FF:5B:B8:A3:DA:05:94:43:47:07:5D:75:8F:ED:21:4F:0A:80:2E:4D:AE:4E:E7:5B:5C:7C:DC"}}},"request":{"raw":"GET /a3d59d1afa1e26e1a417f2371e617fabdb787345.woff2 HTTP/1.1\r\nHost: checkfirelight.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://checkfirelight.info/?__cf_chl_f_tk=eGKU5iLblymwxyOeNmNruQ.l3zP2OCXLr.zIScLHzv0-1783091788-1.0.1.1-Fv87xRPeIv3TprVCiZ.2hi.uzbhacVecKxhd1NX43eg\r\nCookie: cf_clearance=x7CrPDFa3VxjzKhrvkEtAP2DZJf60Q5q9K_NH0LnzxU-1783091796-1.2.1.1-XBW1i5n_SDimWqwX6Vod0hbq9bRwT8EgUnJ3vfsz7d03j.ElHU8e.vZVTsRQNgL6zQtCZ4AcOM7zUV3ZCjlG7.5pbuGDdkUEFeHF6a3XncUT7oWL6nykc7ZemxMFnSF.jP0HtU3YPWbNZSyY1DwDDJsHKfrO.QDrYbJ_Xt4pam1O9dvV2z8RwqkAhfg0ooK3FIUgBnpqmlpCvkrJ4FjiBNY5fUQszDf9hR_5V2FcrRvb6NfDKTu9wRl1JIYx.KoEKdHLoXfET8nvf9FBigAOgaC4gvY6FCohBYjcTNHnz9CvY.oFpNookrmmKc_aKOubsA9qrVprld9Oy.u2o8mmIHi8WkYxzprYORqFzBRs2K4UpY0OOsFmXH_nWCes.q2ii5Jl5DTBlO_B5yBY.QiwNiF.zFiseZKEoEE3u9FpAbcSIVRV2cKFYjyRDGl_Aek68EuYCh.mz2sN.hwRdkqbwRN.l3tOXqiv2Pp4kueYbdoLTRBU2_ON7Vss.5M7..9z\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: font/woff2\r\netag: \"510c61a400fcbbcc0129713f8002c6ff\"\r\nlast-modified: Tue, 30 Jun 2026 17:20:30 GMT\r\ndate: Fri, 03 Jul 2026 15:16:37 GMT\r\nserver: cloudflare\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4oRfXp4Yo%2FE0HRH%2Byag0uKAd4zU72qQ4dcl8PSJ5XJNVWN5hlyXY5uwUhsdS3pvDFo5dp%2FqUmuxZHsR0v%2BrU3%2B8zmw2Il%2BAmFmc%2FZOpb5LYOR5b7SluHse1vH0ZwpEzpYGrnejX0\"}]}\r\ncf-ray: a156da32fbb276ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 5280\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5280,"size_decoded":6001,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), CFF, length 5280, version 1.0","md5":"510c61a400fcbbcc0129713f8002c6ff","sha1":"a3d59d1afa1e26e1a417f2371e617fabdb787345","sha256":"3f0776df024550c2fb9da2ee25ae16742ffff7ef4578ebd7587ce6d9c7f2d55c","sha512":"a363f6ec4078d42e50c362f08828c94d638365ab0d6c893ed58ae9b6862af68c1acd84551decd30ce8bf4d3a82c1549f3aa8bb9c6ebf228093881e419cc02778","ssdeep":"96:xEs+mOgr0DnrUvpmoqE+FpFOHIA/KVaKDA6qwpU1/3XUOBsuOUCezJjCF+6HWyyb:ys+mOgADnrUvpmW+FWo2Kbq3/3dsuOUj","tlshash":"d1b1af882e0a9165d686aeb8dc651ff42722d51dcd38991c1d4f984d7f0234e285edb8","first_seen":"2026-04-30T10:56:43.294254Z","last_seen":"2026-07-03T15:17:27.593522Z","times_seen":11,"resource_available":false,"data":null}},"time_used":173,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":173,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-03","alert":"Sinkholed","trigger":"checkfirelight.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-03","alert":"Sinkholed","trigger":"checkfirelight.info","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gateway.irys.xyz/BwZqZkoJjgvs5QoobRe8CysTNUs155FJAKg6xngJ4yXj","fqdn":"gateway.irys.xyz","domain":"irys.xyz","tld":"xyz"},"ip":{"addr":"104.20.31.170","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://checkfirelight.info/?__cf_chl_f_tk=eGKU5iLblymwxyOeNmNruQ.l3zP2OCXLr.zIScLHzv0-1783091788-1.0.1.1-Fv87xRPeIv3TprVCiZ.2hi.uzbhacVecKxhd1NX43eg","date":"2026-07-03T15:16:40.425Z","timestamp":1783091800425,"http_version":"HTTP/2","security_state":"secure","security_info":null,"request":{"raw":"GET /BwZqZkoJjgvs5QoobRe8CysTNUs155FJAKg6xngJ4yXj HTTP/1.1\r\nHost: gateway.irys.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://checkfirelight.info/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 \r\ndate: Fri, 03 Jul 2026 15:16:40 GMT\r\ncontent-length: 0\r\nlocation: https://ukhvzo2rrxh7wozvlpmgie2zqeaaaquohhrc7a6usunqtlubkr7a.mainnet-1.datasprite-cdn.com/BwZqZkoJjgvs5QoobRe8CysTNUs155FJAKg6xngJ4yXj/\r\nserver: cloudflare\r\naccess-control-allow-credentials: true\r\ncache-control: no-store\r\naccess-control-expose-headers: location, cache-control\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nx-cache-status: BYPASS\r\ncf-cache-status: BYPASS\r\ncf-ray: a156da48be8c569f-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-03T19:16:40.563677Z","times_seen":16948877,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-03","alert":"Sinkholed","trigger":"gateway.irys.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gateway.irys.xyz/3MT5FBCpHxMz8SpzNZQUrhWmpXbjFb5jKMxSKUbk2HJe","fqdn":"gateway.irys.xyz","domain":"irys.xyz","tld":"xyz"},"ip":{"addr":"104.20.31.170","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://checkfirelight.info/?__cf_chl_f_tk=eGKU5iLblymwxyOeNmNruQ.l3zP2OCXLr.zIScLHzv0-1783091788-1.0.1.1-Fv87xRPeIv3TprVCiZ.2hi.uzbhacVecKxhd1NX43eg","date":"2026-07-03T15:16:40.496Z","timestamp":1783091800496,"http_version":"HTTP/2","security_state":"secure","security_info":null,"request":{"raw":"GET /3MT5FBCpHxMz8SpzNZQUrhWmpXbjFb5jKMxSKUbk2HJe HTTP/1.1\r\nHost: gateway.irys.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://checkfirelight.info/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 \r\ndate: Fri, 03 Jul 2026 15:16:40 GMT\r\ncontent-length: 0\r\nlocation: https://el2hrgbroeyi4qgvgvj2lqoggwyiygesvezu3i5thvntgjewgylq.mainnet-1.datasprite-cdn.com/3MT5FBCpHxMz8SpzNZQUrhWmpXbjFb5jKMxSKUbk2HJe/\r\nserver: cloudflare\r\naccess-control-allow-credentials: true\r\ncache-control: no-store\r\naccess-control-expose-headers: location, cache-control\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nx-cache-status: BYPASS\r\ncf-cache-status: BYPASS\r\ncf-ray: a156da491f06569f-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-03T19:16:40.563677Z","times_seen":16948877,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-03","alert":"Sinkholed","trigger":"gateway.irys.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hkmjhyubcmyt55tyslqmyt4arfmczeuf7xtrysanzghe6n5ezduq.mainnet-1.datasprite-cdn.com/4wjb3TudcCwb4QiUeXRMGVHnVoozBbvLCZzu92xYgcUx/","fqdn":"hkmjhyubcmyt55tyslqmyt4arfmczeuf7xtrysanzghe6n5ezduq.mainnet-1.datasprite-cdn.com","domain":"datasprite-cdn.com","tld":"com"},"ip":{"addr":"104.21.15.158","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://checkfirelight.info/?__cf_chl_f_tk=eGKU5iLblymwxyOeNmNruQ.l3zP2OCXLr.zIScLHzv0-1783091788-1.0.1.1-Fv87xRPeIv3TprVCiZ.2hi.uzbhacVecKxhd1NX43eg","date":"2026-07-03T15:16:40.763Z","timestamp":1783091800763,"http_version":"HTTP/3","security_state":"secure","security_info":null,"request":{"raw":"GET /4wjb3TudcCwb4QiUeXRMGVHnVoozBbvLCZzu92xYgcUx/ HTTP/1.1\r\nHost: hkmjhyubcmyt55tyslqmyt4arfmczeuf7xtrysanzghe6n5ezduq.mainnet-1.datasprite-cdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://checkfirelight.info/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-03T19:16:40.563677Z","times_seen":16948877,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-03","alert":"Sinkholed","trigger":"hkmjhyubcmyt55tyslqmyt4arfmczeuf7xtrysanzghe6n5ezduq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-03","alert":"Sinkholed","trigger":"hkmjhyubcmyt55tyslqmyt4arfmczeuf7xtrysanzghe6n5ezduq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-03","alert":"Sinkholed","trigger":"hkmjhyubcmyt55tyslqmyt4arfmczeuf7xtrysanzghe6n5ezduq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"e5pt46sfryibvjq4hrrz5src2xmfrc7jvtiolpsp3jzjl4eyeaga.mainnet-1.datasprite-cdn.com/3eh8oadBGXTp7k1PY4iYeiBbyhE1u2zmMMaMm9nBanHq/","fqdn":"e5pt46sfryibvjq4hrrz5src2xmfrc7jvtiolpsp3jzjl4eyeaga.mainnet-1.datasprite-cdn.com","domain":"datasprite-cdn.com","tld":"com"},"ip":{"addr":"104.21.15.158","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://checkfirelight.info/?__cf_chl_f_tk=eGKU5iLblymwxyOeNmNruQ.l3zP2OCXLr.zIScLHzv0-1783091788-1.0.1.1-Fv87xRPeIv3TprVCiZ.2hi.uzbhacVecKxhd1NX43eg","date":"2026-07-03T15:16:40.803Z","timestamp":1783091800803,"http_version":"HTTP/3","security_state":"secure","security_info":null,"request":{"raw":"GET /3eh8oadBGXTp7k1PY4iYeiBbyhE1u2zmMMaMm9nBanHq/ HTTP/1.1\r\nHost: e5pt46sfryibvjq4hrrz5src2xmfrc7jvtiolpsp3jzjl4eyeaga.mainnet-1.datasprite-cdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://checkfirelight.info/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-03T19:16:40.563677Z","times_seen":16948877,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-03","alert":"Sinkholed","trigger":"e5pt46sfryibvjq4hrrz5src2xmfrc7jvtiolpsp3jzjl4eyeaga.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-03","alert":"Sinkholed","trigger":"e5pt46sfryibvjq4hrrz5src2xmfrc7jvtiolpsp3jzjl4eyeaga.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-03","alert":"Sinkholed","trigger":"e5pt46sfryibvjq4hrrz5src2xmfrc7jvtiolpsp3jzjl4eyeaga.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"checkfirelight.info/37ff3688bc9e5c4ce51a0deb73d5ac807a3b2a52.svg","fqdn":"checkfirelight.info","domain":"checkfirelight.info","tld":"info"},"ip":{"addr":"172.67.128.191","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://checkfirelight.info/?__cf_chl_f_tk=eGKU5iLblymwxyOeNmNruQ.l3zP2OCXLr.zIScLHzv0-1783091788-1.0.1.1-Fv87xRPeIv3TprVCiZ.2hi.uzbhacVecKxhd1NX43eg","date":"2026-07-03T15:16:37.030Z","timestamp":1783091797030,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"checkfirelight.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Jun 2026 16:28:10 GMT","end":"Mon, 28 Sep 2026 17:26:57 GMT"},"fingerprint":{"sha1":"E2:6B:21:81:9C:B8:AD:23:84:9C:B6:45:4A:80:6C:AB:99:5C:10:CE","sha256":"74:38:CD:39:7B:FF:5B:B8:A3:DA:05:94:43:47:07:5D:75:8F:ED:21:4F:0A:80:2E:4D:AE:4E:E7:5B:5C:7C:DC"}}},"request":{"raw":"GET /37ff3688bc9e5c4ce51a0deb73d5ac807a3b2a52.svg HTTP/1.1\r\nHost: checkfirelight.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://checkfirelight.info/?__cf_chl_f_tk=eGKU5iLblymwxyOeNmNruQ.l3zP2OCXLr.zIScLHzv0-1783091788-1.0.1.1-Fv87xRPeIv3TprVCiZ.2hi.uzbhacVecKxhd1NX43eg\r\nCookie: cf_clearance=x7CrPDFa3VxjzKhrvkEtAP2DZJf60Q5q9K_NH0LnzxU-1783091796-1.2.1.1-XBW1i5n_SDimWqwX6Vod0hbq9bRwT8EgUnJ3vfsz7d03j.ElHU8e.vZVTsRQNgL6zQtCZ4AcOM7zUV3ZCjlG7.5pbuGDdkUEFeHF6a3XncUT7oWL6nykc7ZemxMFnSF.jP0HtU3YPWbNZSyY1DwDDJsHKfrO.QDrYbJ_Xt4pam1O9dvV2z8RwqkAhfg0ooK3FIUgBnpqmlpCvkrJ4FjiBNY5fUQszDf9hR_5V2FcrRvb6NfDKTu9wRl1JIYx.KoEKdHLoXfET8nvf9FBigAOgaC4gvY6FCohBYjcTNHnz9CvY.oFpNookrmmKc_aKOubsA9qrVprld9Oy.u2o8mmIHi8WkYxzprYORqFzBRs2K4UpY0OOsFmXH_nWCes.q2ii5Jl5DTBlO_B5yBY.QiwNiF.zFiseZKEoEE3u9FpAbcSIVRV2cKFYjyRDGl_Aek68EuYCh.mz2sN.hwRdkqbwRN.l3tOXqiv2Pp4kueYbdoLTRBU2_ON7Vss.5M7..9z\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=k4KpDxdpGu8rZGHQMWxAIRwjVH2%2FRosLnb7YQB2X%2BSSEgbRCOQCAmTUL9KBlOvSTgvdApAyF0YscCNRtlCwBZ5kObjISwdSCB32XMMkrT8cP%2FHaQ8MKjqOMXrCWbYi6xU918rCq7\"}]}\r\nlast-modified: Tue, 30 Jun 2026 17:20:30 GMT\r\ndate: Fri, 03 Jul 2026 15:16:37 GMT\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\netag: W/\"d52d6a01e6c96b24719b6988fe5e7b97\"\r\ncf-ray: a156da336bcb76ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3879,"size_decoded":2076,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"d52d6a01e6c96b24719b6988fe5e7b97","sha1":"37ff3688bc9e5c4ce51a0deb73d5ac807a3b2a52","sha256":"2243915c6eddc18a5dded6f2221560e7d2629743bc797b691817543b22cd8d2a","sha512":"0067e9b7b9e0d5eadbb8ec8bdfab711c0a24e5de633aa6bfabee210da9c0eeacb8098b4d2554d9d809fe9a9bc771b6f9b586eb8790326dd0bc87ac32df9f8870","ssdeep":"","tlshash":"ac81c0ffff2427be6469a3daf613109a7c85f8a826818e81c18cdd8556e1c8d95cd8c1","first_seen":"2026-04-24T15:23:09.431445Z","last_seen":"2026-07-03T15:17:27.597689Z","times_seen":16,"resource_available":false,"data":null}},"time_used":246,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":246,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-03","alert":"Sinkholed","trigger":"checkfirelight.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-03","alert":"Sinkholed","trigger":"checkfirelight.info","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"esm.sh/disable-devtool@0.3.9/es2022/disable-devtool.mjs","fqdn":"esm.sh","domain":"esm.sh","tld":"sh"},"ip":{"addr":"172.67.70.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://checkfirelight.info/?__cf_chl_f_tk=eGKU5iLblymwxyOeNmNruQ.l3zP2OCXLr.zIScLHzv0-1783091788-1.0.1.1-Fv87xRPeIv3TprVCiZ.2hi.uzbhacVecKxhd1NX43eg","date":"2026-07-03T15:16:40.542Z","timestamp":1783091800542,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"esm.sh","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 21 Jun 2026 04:25:37 GMT","end":"Sat, 19 Sep 2026 05:25:34 GMT"},"fingerprint":{"sha1":"06:01:9A:2D:10:55:51:3D:71:BF:F8:20:33:F8:71:A5:9E:90:2A:AB","sha256":"1B:0D:06:A9:0C:41:8A:5B:EE:63:99:62:63:72:3A:1C:48:69:DD:7C:A6:61:EB:03:67:80:79:9E:62:BA:EA:CC"}}},"request":{"raw":"GET /disable-devtool@0.3.9/es2022/disable-devtool.mjs HTTP/1.1\r\nHost: esm.sh\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://checkfirelight.info\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://esm.sh/disable-devtool\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, immutable\r\npriority: u=3,i=?0\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Fri, 21 Nov 2025 02:57:18 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\ndate: Fri, 03 Jul 2026 15:16:40 GMT\r\ncf-cache-status: HIT\r\ncf-ray: a156da4969b84e4c-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":18401,"size_decoded":8513,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (14919)","md5":"6f134aa0a4c14df6fe081e2a6643f4bf","sha1":"61989a9857651a3e6e67a4f56bd65a0ac61e1faf","sha256":"f24cb4d56e23c43c0f5927a4ab308c23741e40fbb13e3996e3c42679982559a9","sha512":"b2b21f9c85678b62e77b009768a4ce7fcd1332410817c76f1fc8bff5595edf99fa48b353886413d0952504c7d1629fd4983751c8361bff9edf79d5bec6db839f","ssdeep":"384:XTkAes3CkB0YatnIE3EmI/N62D7LI2fU6HFvQxCN:P3Ck5ibEPt7bU6lvECN","tlshash":"b982c5dcf55770706bb2b9b4403f450ab2367856908c8440e669c8e06eb856fe27bf3e","first_seen":"2026-05-26T18:42:46.16671Z","last_seen":"2026-07-03T15:17:27.598425Z","times_seen":96,"resource_available":true,"data":null}},"time_used":120,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":120,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lzqmfxcfxzkmtpb2kkhciww2krq6nbxvcrakzllef64mn2325ugq.mainnet-1.datasprite-cdn.com/7MQuBTrRdm5iYhmrHxm5x4SbttL9dZTrssQBRhuxrYEg/","fqdn":"lzqmfxcfxzkmtpb2kkhciww2krq6nbxvcrakzllef64mn2325ugq.mainnet-1.datasprite-cdn.com","domain":"datasprite-cdn.com","tld":"com"},"ip":{"addr":"104.21.15.158","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://checkfirelight.info/?__cf_chl_f_tk=eGKU5iLblymwxyOeNmNruQ.l3zP2OCXLr.zIScLHzv0-1783091788-1.0.1.1-Fv87xRPeIv3TprVCiZ.2hi.uzbhacVecKxhd1NX43eg","date":"2026-07-03T15:16:40.824Z","timestamp":1783091800824,"http_version":"HTTP/3","security_state":"secure","security_info":null,"request":{"raw":"GET /7MQuBTrRdm5iYhmrHxm5x4SbttL9dZTrssQBRhuxrYEg/ HTTP/1.1\r\nHost: lzqmfxcfxzkmtpb2kkhciww2krq6nbxvcrakzllef64mn2325ugq.mainnet-1.datasprite-cdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://checkfirelight.info/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-03T19:16:40.563677Z","times_seen":16948877,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-03","alert":"Sinkholed","trigger":"lzqmfxcfxzkmtpb2kkhciww2krq6nbxvcrakzllef64mn2325ugq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-03","alert":"Sinkholed","trigger":"lzqmfxcfxzkmtpb2kkhciww2krq6nbxvcrakzllef64mn2325ugq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-03","alert":"Sinkholed","trigger":"lzqmfxcfxzkmtpb2kkhciww2krq6nbxvcrakzllef64mn2325ugq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"checkfirelight.info/ed37fffbc9143807f4b38ff004f1c693a7fb982f.png","fqdn":"checkfirelight.info","domain":"checkfirelight.info","tld":"info"},"ip":{"addr":"172.67.128.191","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://checkfirelight.info/?__cf_chl_f_tk=eGKU5iLblymwxyOeNmNruQ.l3zP2OCXLr.zIScLHzv0-1783091788-1.0.1.1-Fv87xRPeIv3TprVCiZ.2hi.uzbhacVecKxhd1NX43eg","date":"2026-07-03T15:16:36.828Z","timestamp":1783091796828,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"checkfirelight.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Jun 2026 16:28:10 GMT","end":"Mon, 28 Sep 2026 17:26:57 GMT"},"fingerprint":{"sha1":"E2:6B:21:81:9C:B8:AD:23:84:9C:B6:45:4A:80:6C:AB:99:5C:10:CE","sha256":"74:38:CD:39:7B:FF:5B:B8:A3:DA:05:94:43:47:07:5D:75:8F:ED:21:4F:0A:80:2E:4D:AE:4E:E7:5B:5C:7C:DC"}}},"request":{"raw":"GET /ed37fffbc9143807f4b38ff004f1c693a7fb982f.png HTTP/1.1\r\nHost: checkfirelight.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://checkfirelight.info/?__cf_chl_f_tk=eGKU5iLblymwxyOeNmNruQ.l3zP2OCXLr.zIScLHzv0-1783091788-1.0.1.1-Fv87xRPeIv3TprVCiZ.2hi.uzbhacVecKxhd1NX43eg\r\nCookie: cf_clearance=x7CrPDFa3VxjzKhrvkEtAP2DZJf60Q5q9K_NH0LnzxU-1783091796-1.2.1.1-XBW1i5n_SDimWqwX6Vod0hbq9bRwT8EgUnJ3vfsz7d03j.ElHU8e.vZVTsRQNgL6zQtCZ4AcOM7zUV3ZCjlG7.5pbuGDdkUEFeHF6a3XncUT7oWL6nykc7ZemxMFnSF.jP0HtU3YPWbNZSyY1DwDDJsHKfrO.QDrYbJ_Xt4pam1O9dvV2z8RwqkAhfg0ooK3FIUgBnpqmlpCvkrJ4FjiBNY5fUQszDf9hR_5V2FcrRvb6NfDKTu9wRl1JIYx.KoEKdHLoXfET8nvf9FBigAOgaC4gvY6FCohBYjcTNHnz9CvY.oFpNookrmmKc_aKOubsA9qrVprld9Oy.u2o8mmIHi8WkYxzprYORqFzBRs2K4UpY0OOsFmXH_nWCes.q2ii5Jl5DTBlO_B5yBY.QiwNiF.zFiseZKEoEE3u9FpAbcSIVRV2cKFYjyRDGl_Aek68EuYCh.mz2sN.hwRdkqbwRN.l3tOXqiv2Pp4kueYbdoLTRBU2_ON7Vss.5M7..9z\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: image/png\r\netag: \"ad0389142192fa77d4655eeac3875267\"\r\nlast-modified: Tue, 30 Jun 2026 17:20:30 GMT\r\ndate: Fri, 03 Jul 2026 15:16:37 GMT\r\nserver: cloudflare\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=t4Vzz0iNpzoXMNP7Wjh8ZGN%2Bdz6t5JmDCQiQZ0s8cMZBq4f6ICjNfZ9xj14PvUV4mcmHS1STKc7AfomF%2Bd2yDg6H54b7XAKEydE4jiq15EUlz%2Bn0mRl00gLfgHqZQK%2Bva7tfWdwX\"}]}\r\ncf-ray: a156da323b7876ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 10544\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10544,"size_decoded":11256,"mime_type":"image/png","magic":"PNG image data, 512 x 384, 8-bit colormap, non-interlaced","md5":"ad0389142192fa77d4655eeac3875267","sha1":"ed37fffbc9143807f4b38ff004f1c693a7fb982f","sha256":"91ac80610f3a72ee41bb54531bcf11d3b88b301d2c9b5cf3f2a5d571fdc73fbe","sha512":"197cb672765fbdf1dcd4acc495c6f785c67cc043394dcc23e95527842db794ee75cfac47f605bf20d8f7971b6fbb9067ea150e73f7f6c9dfffeff4316d851d72","ssdeep":"192:2gZ+WDdyPCmBDMecRJiGDQx02F0bQO3YpEdJCnGmOMqBAZb0sVsXJ:KWDdOJDM7QxFF0TIpEOPqB0Na5","tlshash":"55229f1a9bc737014d22bd3b29c43167a3b3e79205374aee7468daf1eac9441b569318","first_seen":"2026-04-29T09:31:56.2608Z","last_seen":"2026-07-03T15:17:27.599108Z","times_seen":19,"resource_available":false,"data":null}},"time_used":493,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":493,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-03","alert":"Sinkholed","trigger":"checkfirelight.info","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-03","alert":"Sinkholed","trigger":"checkfirelight.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"checkfirelight.info/7b6cfb7a2ef669b66dbffa362e757d6def075182.woff2","fqdn":"checkfirelight.info","domain":"checkfirelight.info","tld":"info"},"ip":{"addr":"172.67.128.191","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://checkfirelight.info/?__cf_chl_f_tk=eGKU5iLblymwxyOeNmNruQ.l3zP2OCXLr.zIScLHzv0-1783091788-1.0.1.1-Fv87xRPeIv3TprVCiZ.2hi.uzbhacVecKxhd1NX43eg","date":"2026-07-03T15:16:36.948Z","timestamp":1783091796948,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"checkfirelight.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Jun 2026 16:28:10 GMT","end":"Mon, 28 Sep 2026 17:26:57 GMT"},"fingerprint":{"sha1":"E2:6B:21:81:9C:B8:AD:23:84:9C:B6:45:4A:80:6C:AB:99:5C:10:CE","sha256":"74:38:CD:39:7B:FF:5B:B8:A3:DA:05:94:43:47:07:5D:75:8F:ED:21:4F:0A:80:2E:4D:AE:4E:E7:5B:5C:7C:DC"}}},"request":{"raw":"GET /7b6cfb7a2ef669b66dbffa362e757d6def075182.woff2 HTTP/1.1\r\nHost: checkfirelight.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://checkfirelight.info/?__cf_chl_f_tk=eGKU5iLblymwxyOeNmNruQ.l3zP2OCXLr.zIScLHzv0-1783091788-1.0.1.1-Fv87xRPeIv3TprVCiZ.2hi.uzbhacVecKxhd1NX43eg\r\nCookie: cf_clearance=x7CrPDFa3VxjzKhrvkEtAP2DZJf60Q5q9K_NH0LnzxU-1783091796-1.2.1.1-XBW1i5n_SDimWqwX6Vod0hbq9bRwT8EgUnJ3vfsz7d03j.ElHU8e.vZVTsRQNgL6zQtCZ4AcOM7zUV3ZCjlG7.5pbuGDdkUEFeHF6a3XncUT7oWL6nykc7ZemxMFnSF.jP0HtU3YPWbNZSyY1DwDDJsHKfrO.QDrYbJ_Xt4pam1O9dvV2z8RwqkAhfg0ooK3FIUgBnpqmlpCvkrJ4FjiBNY5fUQszDf9hR_5V2FcrRvb6NfDKTu9wRl1JIYx.KoEKdHLoXfET8nvf9FBigAOgaC4gvY6FCohBYjcTNHnz9CvY.oFpNookrmmKc_aKOubsA9qrVprld9Oy.u2o8mmIHi8WkYxzprYORqFzBRs2K4UpY0OOsFmXH_nWCes.q2ii5Jl5DTBlO_B5yBY.QiwNiF.zFiseZKEoEE3u9FpAbcSIVRV2cKFYjyRDGl_Aek68EuYCh.mz2sN.hwRdkqbwRN.l3tOXqiv2Pp4kueYbdoLTRBU2_ON7Vss.5M7..9z\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: font/woff2\r\netag: \"0b4811bcc09cdbe18daae99bec603851\"\r\nlast-modified: Tue, 30 Jun 2026 17:20:31 GMT\r\ndate: Fri, 03 Jul 2026 15:16:37 GMT\r\nserver: cloudflare\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=B3u3ik%2BpUtKoADtGcY%2ByTVSTrklLniUN%2Fur9Fgn3x1Mv2HlVPYNaug0JuZKaTtI4BQk%2Fh6OQ6SalqmuK%2FVzyyq5eF0PnU0n5D6nW2LcRSDjsAkEOEWA20lkqPYGUIvk1eGvK%2BS55\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a156da32eba876ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":52004,"size_decoded":52679,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 52004, version 1.0","md5":"0b4811bcc09cdbe18daae99bec603851","sha1":"7b6cfb7a2ef669b66dbffa362e757d6def075182","sha256":"a1bd10b6ed388425809ea1941dd148251b0bd9c326dd6c599ec32461c4790b90","sha512":"6221e5fd3e5c7901295a2d169cb31828134a89a3d542dd08deacdd6c0cb853cbd84805f5aa526a0be29b6ec1223995ed3a2d3e60f7197282e094f16dcc405b3d","ssdeep":"1536:VkVpAgm7qwZAwvjJ4mK/Ygsee2J44zGIk9tq:VkU9AwboYgsz82rq","tlshash":"263301bf6725bae4ec5abd18411cf13bb0d801eda6f32aca8dd75e471218c855c6724c","first_seen":"2025-05-19T17:46:32.910287Z","last_seen":"2026-07-03T15:17:27.600262Z","times_seen":15,"resource_available":false,"data":null}},"time_used":340,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":164,"receive":176,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-03","alert":"Sinkholed","trigger":"checkfirelight.info","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-03","alert":"Sinkholed","trigger":"checkfirelight.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"checkfirelight.info/855afc4d65243f4a81932d17b614a80e3270d184.png","fqdn":"checkfirelight.info","domain":"checkfirelight.info","tld":"info"},"ip":{"addr":"172.67.128.191","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://checkfirelight.info/?__cf_chl_f_tk=eGKU5iLblymwxyOeNmNruQ.l3zP2OCXLr.zIScLHzv0-1783091788-1.0.1.1-Fv87xRPeIv3TprVCiZ.2hi.uzbhacVecKxhd1NX43eg","date":"2026-07-03T15:16:36.970Z","timestamp":1783091796970,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"checkfirelight.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Jun 2026 16:28:10 GMT","end":"Mon, 28 Sep 2026 17:26:57 GMT"},"fingerprint":{"sha1":"E2:6B:21:81:9C:B8:AD:23:84:9C:B6:45:4A:80:6C:AB:99:5C:10:CE","sha256":"74:38:CD:39:7B:FF:5B:B8:A3:DA:05:94:43:47:07:5D:75:8F:ED:21:4F:0A:80:2E:4D:AE:4E:E7:5B:5C:7C:DC"}}},"request":{"raw":"GET /855afc4d65243f4a81932d17b614a80e3270d184.png HTTP/1.1\r\nHost: checkfirelight.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://checkfirelight.info/?__cf_chl_f_tk=eGKU5iLblymwxyOeNmNruQ.l3zP2OCXLr.zIScLHzv0-1783091788-1.0.1.1-Fv87xRPeIv3TprVCiZ.2hi.uzbhacVecKxhd1NX43eg\r\nCookie: cf_clearance=x7CrPDFa3VxjzKhrvkEtAP2DZJf60Q5q9K_NH0LnzxU-1783091796-1.2.1.1-XBW1i5n_SDimWqwX6Vod0hbq9bRwT8EgUnJ3vfsz7d03j.ElHU8e.vZVTsRQNgL6zQtCZ4AcOM7zUV3ZCjlG7.5pbuGDdkUEFeHF6a3XncUT7oWL6nykc7ZemxMFnSF.jP0HtU3YPWbNZSyY1DwDDJsHKfrO.QDrYbJ_Xt4pam1O9dvV2z8RwqkAhfg0ooK3FIUgBnpqmlpCvkrJ4FjiBNY5fUQszDf9hR_5V2FcrRvb6NfDKTu9wRl1JIYx.KoEKdHLoXfET8nvf9FBigAOgaC4gvY6FCohBYjcTNHnz9CvY.oFpNookrmmKc_aKOubsA9qrVprld9Oy.u2o8mmIHi8WkYxzprYORqFzBRs2K4UpY0OOsFmXH_nWCes.q2ii5Jl5DTBlO_B5yBY.QiwNiF.zFiseZKEoEE3u9FpAbcSIVRV2cKFYjyRDGl_Aek68EuYCh.mz2sN.hwRdkqbwRN.l3tOXqiv2Pp4kueYbdoLTRBU2_ON7Vss.5M7..9z\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: image/png\r\netag: \"50a4c82f0093ecbd8d78f85b691f591d\"\r\nlast-modified: Tue, 30 Jun 2026 17:20:30 GMT\r\ndate: Fri, 03 Jul 2026 15:16:37 GMT\r\nserver: cloudflare\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=L7A2ytqDecvH%2B48JvBEH4nmLaeiKtAf7bA%2Ful5DZcONR4DPa4XqoOgfP%2FXTwS4jtHMTMuKa92yfn4lNSDFQW0Onj3JvhOu1yIIALctIptY48LLH68w5rBwrIKFSZHpm2tFV%2FLtvJ\"}]}\r\ncf-ray: a156da331bb876ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 9008\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9008,"size_decoded":9719,"mime_type":"image/png","magic":"PNG image data, 2048 x 1152, 8-bit colormap, non-interlaced","md5":"50a4c82f0093ecbd8d78f85b691f591d","sha1":"855afc4d65243f4a81932d17b614a80e3270d184","sha256":"7e426939ff92655448b8ae69c852ad986d124ed81ba25b6f180fbdfd9b1db640","sha512":"57acfe3ff3627a24d832f37be249880a7e4f3b423db50812a73339da0b0bebef3483ab4d91ab809461a26695f93aec520080f8dca37dabf82177651f3d2ee2a4","ssdeep":"192:9SM17Kd8K44+ZsqcCmf1z4XtnOJBEHWhK:8E7Kdd44+zcCk5+pOJBEHWhK","tlshash":"cf029eccd55684afc10e2c31568cded7c66eb145122982db7716a8b383fc061b5322a3","first_seen":"2026-04-24T15:23:09.418012Z","last_seen":"2026-07-03T15:17:27.600961Z","times_seen":18,"resource_available":false,"data":null}},"time_used":162,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":162,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-03","alert":"Sinkholed","trigger":"checkfirelight.info","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-03","alert":"Sinkholed","trigger":"checkfirelight.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"arbitrum.gateway.tenderly.co/","fqdn":"arbitrum.gateway.tenderly.co","domain":"tenderly.co","tld":"co"},"ip":{"addr":"35.227.193.242","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://checkfirelight.info/?__cf_chl_f_tk=eGKU5iLblymwxyOeNmNruQ.l3zP2OCXLr.zIScLHzv0-1783091788-1.0.1.1-Fv87xRPeIv3TprVCiZ.2hi.uzbhacVecKxhd1NX43eg","date":"2026-07-03T15:16:38.152Z","timestamp":1783091798152,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gateway.tenderly.co","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 15 Jun 2026 18:01:31 GMT","end":"Sun, 13 Sep 2026 18:01:30 GMT"},"fingerprint":{"sha1":"9A:41:E5:34:79:91:EC:A6:18:2C:A5:9B:64:A2:94:81:A0:74:A3:57","sha256":"DD:73:B2:F2:0C:93:E6:AC:22:8B:33:E7:18:12:2F:78:95:14:EF:D9:E1:B3:D5:59:5A:73:0E:1B:07:B3:90:E9"}}},"request":{"raw":"POST / HTTP/1.1\r\nHost: arbitrum.gateway.tenderly.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://checkfirelight.info/\r\nContent-Type: application/json\r\nContent-Length: 136\r\nOrigin: https://checkfirelight.info\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\ncontent-type: application/json; charset=utf-8\r\nvary: Origin\r\nx-tdly-limit: 20\r\nx-tdly-remaining: 16\r\nx-tdly-reset-timestamp: 1783091799291\r\ndate: Fri, 03 Jul 2026 15:16:38 GMT\r\ncontent-length: 422\r\nx-envoy-upstream-service-time: 4\r\nserver: envoy\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":422,"size_decoded":810,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"0ffc036afc3a9ddb245d311fcb164fcc","sha1":"e7ddfd2ff059c51d69a73521ff646763d74d41ed","sha256":"b2350d17a06f7e8d1f262035aad4dc2772d4987c35f10c20d25211c95da9bbc2","sha512":"8ec60e49aebdd167152ca83af297dd89ecf5ca8262ad247891ec76d5df936e60009ade42c1d6e91121496029faf80c01576e7ee568ef354038272666b9ee4b0a","ssdeep":"","tlshash":"80e02be42047a596f66808bbe6c43671b075730bc5e1cf83494df80009409a1eb0e54c","first_seen":"2026-07-03T15:17:27.601703Z","last_seen":"2026-07-03T15:17:27.601703Z","times_seen":1,"resource_available":false,"data":null}},"time_used":47,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":47,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"arbitrum.gateway.tenderly.co/","fqdn":"arbitrum.gateway.tenderly.co","domain":"tenderly.co","tld":"co"},"ip":{"addr":"35.227.193.242","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://checkfirelight.info/?__cf_chl_f_tk=eGKU5iLblymwxyOeNmNruQ.l3zP2OCXLr.zIScLHzv0-1783091788-1.0.1.1-Fv87xRPeIv3TprVCiZ.2hi.uzbhacVecKxhd1NX43eg","date":"2026-07-03T15:16:38.163Z","timestamp":1783091798163,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gateway.tenderly.co","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 15 Jun 2026 18:01:31 GMT","end":"Sun, 13 Sep 2026 18:01:30 GMT"},"fingerprint":{"sha1":"9A:41:E5:34:79:91:EC:A6:18:2C:A5:9B:64:A2:94:81:A0:74:A3:57","sha256":"DD:73:B2:F2:0C:93:E6:AC:22:8B:33:E7:18:12:2F:78:95:14:EF:D9:E1:B3:D5:59:5A:73:0E:1B:07:B3:90:E9"}}},"request":{"raw":"OPTIONS / HTTP/1.1\r\nHost: arbitrum.gateway.tenderly.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://checkfirelight.info/\r\nOrigin: https://checkfirelight.info\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-headers: Content-Type\r\naccess-control-allow-methods: POST\r\naccess-control-allow-origin: *\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\ndate: Fri, 03 Jul 2026 15:16:38 GMT\r\ncontent-length: 0\r\nx-envoy-upstream-service-time: 2\r\nserver: envoy\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":0,"size_decoded":403,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-03T19:16:40.563677Z","times_seen":16948877,"resource_available":true,"data":null}},"time_used":86,"timings":{"blocked":-1,"dns":9,"connect":12,"send":0,"wait":45,"receive":0,"ssl":20},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"checkfirelight.info/0cb1894f50a5c2ade690c461347c7d8631faf0a4.svg","fqdn":"checkfirelight.info","domain":"checkfirelight.info","tld":"info"},"ip":{"addr":"172.67.128.191","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://checkfirelight.info/?__cf_chl_f_tk=eGKU5iLblymwxyOeNmNruQ.l3zP2OCXLr.zIScLHzv0-1783091788-1.0.1.1-Fv87xRPeIv3TprVCiZ.2hi.uzbhacVecKxhd1NX43eg","date":"2026-07-03T15:16:37.027Z","timestamp":1783091797027,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"checkfirelight.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Jun 2026 16:28:10 GMT","end":"Mon, 28 Sep 2026 17:26:57 GMT"},"fingerprint":{"sha1":"E2:6B:21:81:9C:B8:AD:23:84:9C:B6:45:4A:80:6C:AB:99:5C:10:CE","sha256":"74:38:CD:39:7B:FF:5B:B8:A3:DA:05:94:43:47:07:5D:75:8F:ED:21:4F:0A:80:2E:4D:AE:4E:E7:5B:5C:7C:DC"}}},"request":{"raw":"GET /0cb1894f50a5c2ade690c461347c7d8631faf0a4.svg HTTP/1.1\r\nHost: checkfirelight.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://checkfirelight.info/?__cf_chl_f_tk=eGKU5iLblymwxyOeNmNruQ.l3zP2OCXLr.zIScLHzv0-1783091788-1.0.1.1-Fv87xRPeIv3TprVCiZ.2hi.uzbhacVecKxhd1NX43eg\r\nCookie: cf_clearance=x7CrPDFa3VxjzKhrvkEtAP2DZJf60Q5q9K_NH0LnzxU-1783091796-1.2.1.1-XBW1i5n_SDimWqwX6Vod0hbq9bRwT8EgUnJ3vfsz7d03j.ElHU8e.vZVTsRQNgL6zQtCZ4AcOM7zUV3ZCjlG7.5pbuGDdkUEFeHF6a3XncUT7oWL6nykc7ZemxMFnSF.jP0HtU3YPWbNZSyY1DwDDJsHKfrO.QDrYbJ_Xt4pam1O9dvV2z8RwqkAhfg0ooK3FIUgBnpqmlpCvkrJ4FjiBNY5fUQszDf9hR_5V2FcrRvb6NfDKTu9wRl1JIYx.KoEKdHLoXfET8nvf9FBigAOgaC4gvY6FCohBYjcTNHnz9CvY.oFpNookrmmKc_aKOubsA9qrVprld9Oy.u2o8mmIHi8WkYxzprYORqFzBRs2K4UpY0OOsFmXH_nWCes.q2ii5Jl5DTBlO_B5yBY.QiwNiF.zFiseZKEoEE3u9FpAbcSIVRV2cKFYjyRDGl_Aek68EuYCh.mz2sN.hwRdkqbwRN.l3tOXqiv2Pp4kueYbdoLTRBU2_ON7Vss.5M7..9z\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eHjRaCU5kN%2BXLIm9xvFCBVkwJAf7XfORDvuZAWzuMFe3Em%2FAOtLWYKxmtUGhZAzu6m6XtdwZxTJ%2BVF9n2QAWOY83ZeAPTMqaQOZa1CEhwLXb3KJSCy7U1LdbKCrEDwqPsFZohUJy\"}]}\r\nlast-modified: Tue, 30 Jun 2026 17:20:30 GMT\r\ndate: Fri, 03 Jul 2026 15:16:37 GMT\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\netag: W/\"24cbbbebe06d4a5850ad67e6068f79f6\"\r\ncf-ray: a156da336bc776ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7201,"size_decoded":3458,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"24cbbbebe06d4a5850ad67e6068f79f6","sha1":"0cb1894f50a5c2ade690c461347c7d8631faf0a4","sha256":"7bd532e3a4ebced01358408339f03d015d9edb8e0156da8919cf386de05e1c5c","sha512":"9f2b4c383ed8f74a51f6617a1cb2a51d923e3a1a5c9589993e05414343b19d7f1f8fb2eef19b8f16124eccd4e301bc80a35d029ab3cd389aa59f643bbbad1ca9","ssdeep":"192:xleT+7MERwQO/fmJEbvqtIxiFbZ3pEKkF9b:6JSKfJl2bZG3b","tlshash":"ece165edef7c2a7cf4c8a7eaf323106c7b0aeca01915ce5ac65d4d5a588284c9915cc3","first_seen":"2026-04-24T15:23:09.438265Z","last_seen":"2026-07-03T15:17:27.602753Z","times_seen":16,"resource_available":false,"data":null}},"time_used":162,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":162,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-03","alert":"Sinkholed","trigger":"checkfirelight.info","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-03","alert":"Sinkholed","trigger":"checkfirelight.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gateway.irys.xyz/46y4UEUG6a2zPWBDoDstJ7Efqgc3hqxYUwUgUHuAByem","fqdn":"gateway.irys.xyz","domain":"irys.xyz","tld":"xyz"},"ip":{"addr":"104.20.31.170","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://checkfirelight.info/?__cf_chl_f_tk=eGKU5iLblymwxyOeNmNruQ.l3zP2OCXLr.zIScLHzv0-1783091788-1.0.1.1-Fv87xRPeIv3TprVCiZ.2hi.uzbhacVecKxhd1NX43eg","date":"2026-07-03T15:16:40.482Z","timestamp":1783091800482,"http_version":"HTTP/2","security_state":"secure","security_info":null,"request":{"raw":"GET /46y4UEUG6a2zPWBDoDstJ7Efqgc3hqxYUwUgUHuAByem HTTP/1.1\r\nHost: gateway.irys.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://checkfirelight.info/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 \r\ndate: Fri, 03 Jul 2026 15:16:40 GMT\r\ncontent-length: 0\r\nlocation: https://fynfue6gizxdkcyib7qzqxl6yplic3utnguuvmr3vhltij4lrsha.mainnet-1.datasprite-cdn.com/46y4UEUG6a2zPWBDoDstJ7Efqgc3hqxYUwUgUHuAByem/\r\nserver: cloudflare\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-credentials: true\r\ncache-control: no-store\r\naccess-control-expose-headers: cache-control, location\r\nx-cache-status: BYPASS\r\ncf-cache-status: BYPASS\r\ncf-ray: a156da490ee9569f-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-03T19:16:40.563677Z","times_seen":16948877,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-03","alert":"Sinkholed","trigger":"gateway.irys.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"esm.sh/mipd@0.0.7/es2022/mipd.mjs","fqdn":"esm.sh","domain":"esm.sh","tld":"sh"},"ip":{"addr":"172.67.70.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://checkfirelight.info/?__cf_chl_f_tk=eGKU5iLblymwxyOeNmNruQ.l3zP2OCXLr.zIScLHzv0-1783091788-1.0.1.1-Fv87xRPeIv3TprVCiZ.2hi.uzbhacVecKxhd1NX43eg","date":"2026-07-03T15:16:40.543Z","timestamp":1783091800543,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"esm.sh","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 21 Jun 2026 04:25:37 GMT","end":"Sat, 19 Sep 2026 05:25:34 GMT"},"fingerprint":{"sha1":"06:01:9A:2D:10:55:51:3D:71:BF:F8:20:33:F8:71:A5:9E:90:2A:AB","sha256":"1B:0D:06:A9:0C:41:8A:5B:EE:63:99:62:63:72:3A:1C:48:69:DD:7C:A6:61:EB:03:67:80:79:9E:62:BA:EA:CC"}}},"request":{"raw":"GET /mipd@0.0.7/es2022/mipd.mjs HTTP/1.1\r\nHost: esm.sh\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://checkfirelight.info\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://esm.sh/mipd@0.0.7\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, immutable\r\npriority: u=3,i=?0\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Mon, 17 Nov 2025 23:17:09 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\ndate: Fri, 03 Jul 2026 15:16:40 GMT\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\ncf-ray: a156da4969b94e4c-OSL\r\ncontent-length: 638\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1111,"size_decoded":1078,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (1051)","md5":"e27f01505d3b2b0d7e37a489a1643bbe","sha1":"fcc0c28426a74da52b56598e904c94480c94b312","sha256":"362f8af6b974b302df4cb1e8025c65db1dc7217fb5789a0f65ff2eacc605ff5f","sha512":"5e0bf97d23034bacea36a6e213d16a1463b3722367cb32f46722b06fc7214af716fefee6b21ebeb56366dce7d6e187d62cbd3484ae2c5a42dd969982957d9c96","ssdeep":"","tlshash":"1a2166e571576a7517610a8fa7dfdf00a7097ac2a015422cc46121fe705dc8788adae0","first_seen":"2026-04-20T20:39:03.040451Z","last_seen":"2026-07-03T15:17:27.603424Z","times_seen":145,"resource_available":true,"data":null}},"time_used":105,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":105,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jfrwbu3xjectzwr6zpvpvbewqkwb3tvpr7kikhkfa7gcmzugoycq.mainnet-1.datasprite-cdn.com/5wUerABHQTtos15xuLUSaGKLdHRysPmt8cLkhr169WEp/","fqdn":"jfrwbu3xjectzwr6zpvpvbewqkwb3tvpr7kikhkfa7gcmzugoycq.mainnet-1.datasprite-cdn.com","domain":"datasprite-cdn.com","tld":"com"},"ip":{"addr":"104.21.15.158","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://checkfirelight.info/?__cf_chl_f_tk=eGKU5iLblymwxyOeNmNruQ.l3zP2OCXLr.zIScLHzv0-1783091788-1.0.1.1-Fv87xRPeIv3TprVCiZ.2hi.uzbhacVecKxhd1NX43eg","date":"2026-07-03T15:16:40.835Z","timestamp":1783091800835,"http_version":"HTTP/3","security_state":"secure","security_info":null,"request":{"raw":"GET /5wUerABHQTtos15xuLUSaGKLdHRysPmt8cLkhr169WEp/ HTTP/1.1\r\nHost: jfrwbu3xjectzwr6zpvpvbewqkwb3tvpr7kikhkfa7gcmzugoycq.mainnet-1.datasprite-cdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://checkfirelight.info/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-03T19:16:40.563677Z","times_seen":16948877,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-03","alert":"Sinkholed","trigger":"jfrwbu3xjectzwr6zpvpvbewqkwb3tvpr7kikhkfa7gcmzugoycq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-03","alert":"Sinkholed","trigger":"jfrwbu3xjectzwr6zpvpvbewqkwb3tvpr7kikhkfa7gcmzugoycq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-03","alert":"Sinkholed","trigger":"jfrwbu3xjectzwr6zpvpvbewqkwb3tvpr7kikhkfa7gcmzugoycq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"checkfirelight.info/cdn-cgi/challenge-platform/h/b/orchestrate/chl_page/v1?ray=a156da011a5f76ef","fqdn":"checkfirelight.info","domain":"checkfirelight.info","tld":"info"},"ip":{"addr":"172.67.128.191","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://checkfirelight.info/","date":"2026-07-03T15:16:29.300Z","timestamp":1783091789300,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"checkfirelight.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Jun 2026 16:28:10 GMT","end":"Mon, 28 Sep 2026 17:26:57 GMT"},"fingerprint":{"sha1":"E2:6B:21:81:9C:B8:AD:23:84:9C:B6:45:4A:80:6C:AB:99:5C:10:CE","sha256":"74:38:CD:39:7B:FF:5B:B8:A3:DA:05:94:43:47:07:5D:75:8F:ED:21:4F:0A:80:2E:4D:AE:4E:E7:5B:5C:7C:DC"}}},"request":{"raw":"GET /cdn-cgi/challenge-platform/h/b/orchestrate/chl_page/v1?ray=a156da011a5f76ef HTTP/1.1\r\nHost: checkfirelight.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://checkfirelight.info/?__cf_chl_rt_tk=eGKU5iLblymwxyOeNmNruQ.l3zP2OCXLr.zIScLHzv0-1783091788-1.0.1.1-Fv87xRPeIv3TprVCiZ.2hi.uzbhacVecKxhd1NX43eg\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: application/javascript; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\ncontent-encoding: zstd\r\ndate: Fri, 03 Jul 2026 15:16:29 GMT\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncf-ray: a156da031ab576ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":221955,"size_decoded":79923,"mime_type":"application/javascript; charset=UTF-8","magic":"ASCII text, with very long lines (49816)","md5":"416b1350357f352732fd907e72f4c226","sha1":"9d42008b140b192a1cfd48a205ddf1a39a9bce12","sha256":"77e46d91c3a4092f376f1d3359b2c5b5e0ce7a797956c5fef26ee2ff25799502","sha512":"75405a8e0950751c86f73f89652e8ac3cc7b4d656824efc3c933eb0d25811632e5ea9e0c87bba97f92ae295f3f8d8c6705aa52629ffcda0feda3d719c1ac909d","ssdeep":"6144:Wbj7vCsBQcm62T4qq4q0q0hA2ZGJB2YUSb:A2sqvOASb","tlshash":"be24d78d7dc3f05b37827af40427714af16cbc44985c6568ea1ec9b83c6db998b2b91c","first_seen":"2026-07-03T15:17:27.604088Z","last_seen":"2026-07-03T15:17:27.604088Z","times_seen":1,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-03","alert":"Sinkholed","trigger":"checkfirelight.info","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-03","alert":"Sinkholed","trigger":"checkfirelight.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gateway.irys.xyz/5gBbYXnATXAj3B6zmP8CaV88YB5uB9m8PZrfKJ7WjwUv","fqdn":"gateway.irys.xyz","domain":"irys.xyz","tld":"xyz"},"ip":{"addr":"104.20.31.170","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://checkfirelight.info/?__cf_chl_f_tk=eGKU5iLblymwxyOeNmNruQ.l3zP2OCXLr.zIScLHzv0-1783091788-1.0.1.1-Fv87xRPeIv3TprVCiZ.2hi.uzbhacVecKxhd1NX43eg","date":"2026-07-03T15:16:40.447Z","timestamp":1783091800447,"http_version":"HTTP/2","security_state":"secure","security_info":null,"request":{"raw":"GET /5gBbYXnATXAj3B6zmP8CaV88YB5uB9m8PZrfKJ7WjwUv HTTP/1.1\r\nHost: gateway.irys.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://checkfirelight.info/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 \r\ndate: Fri, 03 Jul 2026 15:16:40 GMT\r\ncontent-length: 0\r\nlocation: https://iv4gcnkpfdnodp3rm73df3m6vnf4ucnpjwdlcsrtmns4li5aljfq.mainnet-1.datasprite-cdn.com/5gBbYXnATXAj3B6zmP8CaV88YB5uB9m8PZrfKJ7WjwUv/\r\nserver: cloudflare\r\naccess-control-expose-headers: cache-control, location\r\naccess-control-allow-credentials: true\r\ncache-control: no-store\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nx-cache-status: BYPASS\r\ncf-cache-status: BYPASS\r\ncf-ray: a156da48ceaf569f-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-03T19:16:40.563677Z","times_seen":16948877,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-03","alert":"Sinkholed","trigger":"gateway.irys.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gateway.irys.xyz/2DGBFeacTMVeEKeuYdJgdXZMjMhUFdxygmQLNcvBR3iu","fqdn":"gateway.irys.xyz","domain":"irys.xyz","tld":"xyz"},"ip":{"addr":"104.20.31.170","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://checkfirelight.info/?__cf_chl_f_tk=eGKU5iLblymwxyOeNmNruQ.l3zP2OCXLr.zIScLHzv0-1783091788-1.0.1.1-Fv87xRPeIv3TprVCiZ.2hi.uzbhacVecKxhd1NX43eg","date":"2026-07-03T15:16:40.484Z","timestamp":1783091800484,"http_version":"HTTP/2","security_state":"secure","security_info":null,"request":{"raw":"GET /2DGBFeacTMVeEKeuYdJgdXZMjMhUFdxygmQLNcvBR3iu HTTP/1.1\r\nHost: gateway.irys.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://checkfirelight.info/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 \r\ndate: Fri, 03 Jul 2026 15:16:40 GMT\r\ncontent-length: 0\r\nlocation: https://ch75ckxualkloc7t5fsfem56e5odt55sl7lel66ksibigpvzxsda.mainnet-1.datasprite-cdn.com/2DGBFeacTMVeEKeuYdJgdXZMjMhUFdxygmQLNcvBR3iu/\r\nserver: cloudflare\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-credentials: true\r\ncache-control: no-store\r\naccess-control-expose-headers: cache-control, location\r\nx-cache-status: BYPASS\r\ncf-cache-status: BYPASS\r\ncf-ray: a156da490eed569f-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-03T19:16:40.563677Z","times_seen":16948877,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-03","alert":"Sinkholed","trigger":"gateway.irys.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sxkbzjsq65wh654do6f2fcn4t5phs2iozxkrihpxbz4jaqr3fuaq.mainnet-1.datasprite-cdn.com/B5sLi9Stwf8xRFrbJ6Bm6wZojhuyzkGcWowZenqKD4fz/","fqdn":"sxkbzjsq65wh654do6f2fcn4t5phs2iozxkrihpxbz4jaqr3fuaq.mainnet-1.datasprite-cdn.com","domain":"datasprite-cdn.com","tld":"com"},"ip":{"addr":"172.67.163.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://checkfirelight.info/?__cf_chl_f_tk=eGKU5iLblymwxyOeNmNruQ.l3zP2OCXLr.zIScLHzv0-1783091788-1.0.1.1-Fv87xRPeIv3TprVCiZ.2hi.uzbhacVecKxhd1NX43eg","date":"2026-07-03T15:16:40.759Z","timestamp":1783091800759,"http_version":"HTTP/3","security_state":"secure","security_info":null,"request":{"raw":"GET /B5sLi9Stwf8xRFrbJ6Bm6wZojhuyzkGcWowZenqKD4fz/ HTTP/1.1\r\nHost: sxkbzjsq65wh654do6f2fcn4t5phs2iozxkrihpxbz4jaqr3fuaq.mainnet-1.datasprite-cdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://checkfirelight.info/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-03T19:16:40.563677Z","times_seen":16948877,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-03","alert":"Sinkholed","trigger":"sxkbzjsq65wh654do6f2fcn4t5phs2iozxkrihpxbz4jaqr3fuaq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-03","alert":"Sinkholed","trigger":"sxkbzjsq65wh654do6f2fcn4t5phs2iozxkrihpxbz4jaqr3fuaq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-03","alert":"Sinkholed","trigger":"sxkbzjsq65wh654do6f2fcn4t5phs2iozxkrihpxbz4jaqr3fuaq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zzcs2m5lomlcptku6ihjjgjt3gz7ni5ok2jfwmd7eiwlz2a5giaq.mainnet-1.datasprite-cdn.com/EtCAcusz6dRAmAEjLhg5caTZC47eQwZ31wgKWofrPc4g/","fqdn":"zzcs2m5lomlcptku6ihjjgjt3gz7ni5ok2jfwmd7eiwlz2a5giaq.mainnet-1.datasprite-cdn.com","domain":"datasprite-cdn.com","tld":"com"},"ip":{"addr":"104.21.15.158","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://checkfirelight.info/?__cf_chl_f_tk=eGKU5iLblymwxyOeNmNruQ.l3zP2OCXLr.zIScLHzv0-1783091788-1.0.1.1-Fv87xRPeIv3TprVCiZ.2hi.uzbhacVecKxhd1NX43eg","date":"2026-07-03T15:16:40.800Z","timestamp":1783091800800,"http_version":"HTTP/3","security_state":"secure","security_info":null,"request":{"raw":"GET /EtCAcusz6dRAmAEjLhg5caTZC47eQwZ31wgKWofrPc4g/ HTTP/1.1\r\nHost: zzcs2m5lomlcptku6ihjjgjt3gz7ni5ok2jfwmd7eiwlz2a5giaq.mainnet-1.datasprite-cdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://checkfirelight.info/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-03T19:16:40.563677Z","times_seen":16948877,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-03","alert":"Sinkholed","trigger":"zzcs2m5lomlcptku6ihjjgjt3gz7ni5ok2jfwmd7eiwlz2a5giaq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-03","alert":"Sinkholed","trigger":"zzcs2m5lomlcptku6ihjjgjt3gz7ni5ok2jfwmd7eiwlz2a5giaq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-03","alert":"Sinkholed","trigger":"zzcs2m5lomlcptku6ihjjgjt3gz7ni5ok2jfwmd7eiwlz2a5giaq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/fo/1625915179:1783087218:WvWUDcOSiYlRM35LNHGLW59lbd1JzsbZuZXYZJmNj_c/a156da0639454c11/Q.G9HOlRYSmNPReGLsqtCH118tX8T9xo230iYDyoWbg-1783091789-1.2.1.1-H5LoDq9mPl2jDPRt2DEGipOcK9Hb3_yihEmR.mYE4whTtV46XovPxhWc45rBhGHQ","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/av0/rch/n1hp3/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","date":"2026-07-03T15:16:31.838Z","timestamp":1783091791838,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"challenges.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 16 Jun 2026 20:15:28 GMT","end":"Mon, 14 Sep 2026 21:15:13 GMT"},"fingerprint":{"sha1":"77:27:72:42:CF:51:E8:8C:7C:3E:8C:4C:A1:F0:9A:86:96:B9:0A:16","sha256":"ED:7C:F7:38:B3:0F:00:86:32:D1:14:CE:C0:FF:CA:0E:7C:86:EE:49:51:EF:A4:4B:AA:5C:B6:7C:00:B5:3D:F3"}}},"request":{"raw":"POST /cdn-cgi/challenge-platform/h/b/fo/1625915179:1783087218:WvWUDcOSiYlRM35LNHGLW59lbd1JzsbZuZXYZJmNj_c/a156da0639454c11/Q.G9HOlRYSmNPReGLsqtCH118tX8T9xo230iYDyoWbg-1783091789-1.2.1.1-H5LoDq9mPl2jDPRt2DEGipOcK9Hb3_yihEmR.mYE4whTtV46XovPxhWc45rBhGHQ HTTP/1.1\r\nHost: challenges.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/av0/rch/n1hp3/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto\r\ncf-chl: Q.G9HOlRYSmNPReGLsqtCH118tX8T9xo230iYDyoWbg-1783091789-1.2.1.1-H5LoDq9mPl2jDPRt2DEGipOcK9Hb3_yihEmR.mYE4whTtV46XovPxhWc45rBhGHQ\r\ncf-chl-ra: 0\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 82167\r\nOrigin: https://challenges.cloudflare.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 03 Jul 2026 15:16:31 GMT\r\ncontent-type: text/plain; charset=UTF-8\r\ncf-chl-gen: Giq2COWI60VPEeQNy3sNwWqEOvjD1IT8XKuFId24mkN15r7JaQ1RBq5uhcdVQrJ8$6trHIyO1jj9lYlRN1F2gVg==\r\ntiming-allow-origin: https://challenges.cloudflare.com\r\npriority: u=3,i=?0\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: a156da12fb864c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":108828,"size_decoded":35679,"mime_type":"text/plain; charset=UTF-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"76e4581dbad9e922b87151b64ee7aad6","sha1":"128fb6a7bc748992c59bc10768d628ee2fafdfa1","sha256":"edf655bf7cb3ab0008a3a368dc840e4a101e3b497544a19f2970a1fbc3dc99e1","sha512":"d24edc1ccbd1d87dfb69e6c262ef84f5763b7af0e9d72f0181cd13febf48026dc3364bd9ce213a842690881d0b84fe5f892357b4875092c13f239da85554720c","ssdeep":"768:uo2DwC1fLAL2uPSfaCPgvundM2qWvJFPvQjyP5qRTWuIjdxxxx9IExFpY:5eAz6faCPo6+sfvXqxOdxxxxKE5Y","tlshash":"29b3afca1f3557c2f0d61864f06993a0d225f58d84ebaaa3c4e34f55c83dce016cae6e","first_seen":"2026-07-03T15:17:27.60515Z","last_seen":"2026-07-03T15:17:27.60515Z","times_seen":1,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"checkfirelight.info/?__cf_chl_f_tk=eGKU5iLblymwxyOeNmNruQ.l3zP2OCXLr.zIScLHzv0-1783091788-1.0.1.1-Fv87xRPeIv3TprVCiZ.2hi.uzbhacVecKxhd1NX43eg","fqdn":"checkfirelight.info","domain":"checkfirelight.info","tld":"info"},"ip":{"addr":"172.67.128.191","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-07-03T15:16:36.296Z","timestamp":1783091796296,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"checkfirelight.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Jun 2026 16:28:10 GMT","end":"Mon, 28 Sep 2026 17:26:57 GMT"},"fingerprint":{"sha1":"E2:6B:21:81:9C:B8:AD:23:84:9C:B6:45:4A:80:6C:AB:99:5C:10:CE","sha256":"74:38:CD:39:7B:FF:5B:B8:A3:DA:05:94:43:47:07:5D:75:8F:ED:21:4F:0A:80:2E:4D:AE:4E:E7:5B:5C:7C:DC"}}},"request":{"raw":"POST /?__cf_chl_f_tk=eGKU5iLblymwxyOeNmNruQ.l3zP2OCXLr.zIScLHzv0-1783091788-1.0.1.1-Fv87xRPeIv3TprVCiZ.2hi.uzbhacVecKxhd1NX43eg HTTP/1.1\r\nHost: checkfirelight.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://checkfirelight.info/\r\nContent-Type: application/x-www-form-urlencoded\r\nContent-Length: 2093\r\nOrigin: https://checkfirelight.info\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: cf_clearance=x7CrPDFa3VxjzKhrvkEtAP2DZJf60Q5q9K_NH0LnzxU-1783091796-1.2.1.1-XBW1i5n_SDimWqwX6Vod0hbq9bRwT8EgUnJ3vfsz7d03j.ElHU8e.vZVTsRQNgL6zQtCZ4AcOM7zUV3ZCjlG7.5pbuGDdkUEFeHF6a3XncUT7oWL6nykc7ZemxMFnSF.jP0HtU3YPWbNZSyY1DwDDJsHKfrO.QDrYbJ_Xt4pam1O9dvV2z8RwqkAhfg0ooK3FIUgBnpqmlpCvkrJ4FjiBNY5fUQszDf9hR_5V2FcrRvb6NfDKTu9wRl1JIYx.KoEKdHLoXfET8nvf9FBigAOgaC4gvY6FCohBYjcTNHnz9CvY.oFpNookrmmKc_aKOubsA9qrVprld9Oy.u2o8mmIHi8WkYxzprYORqFzBRs2K4UpY0OOsFmXH_nWCes.q2ii5Jl5DTBlO_B5yBY.QiwNiF.zFiseZKEoEE3u9FpAbcSIVRV2cKFYjyRDGl_Aek68EuYCh.mz2sN.hwRdkqbwRN.l3tOXqiv2Pp4kueYbdoLTRBU2_ON7Vss.5M7..9z\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nSec-Fetch-User: ?1\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/html;charset=utf-8\r\npriority: u=0,i\r\nlast-modified: Tue, 30 Jun 2026 17:20:31 GMT\r\ndate: Fri, 03 Jul 2026 15:16:36 GMT\r\nserver: cloudflare\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DWbL4PJmWe%2BSMMaTW6K0TBWNzh1kJZYi8XHYxuCYRrxSAjH5zywZqhK7vH5sjnMqgfQuR5AIQhHrYFd4EKYGfEEot4ztPK7neZZfOVW1m%2FNiJHLLHhLJeZZfVUMppHJZCiuBTzkk\"}]}\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a156da2edaeb76ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Framer Sites","description":"Framer is a no-code web design platform for designing and publishing responsive websites.","website":"https://www.framer.com","common_platform_enumeration":"","icon":"Framer Sites.svg","categories":["CMS","Page builders"]},{"name":"React","description":"React is an open-source JavaScript library for building user interfaces or UI components.","website":"https://reactjs.org","common_platform_enumeration":"cpe:2.3:a:facebook:react:*:*:*:*:*:*:*:*","icon":"React.svg","categories":["JavaScript frameworks"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":591849,"size_decoded":82282,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1572)","md5":"5b2ff2bbcd32f4a935e1bbdec1250533","sha1":"9460dea8e113c7f7e0455eafad4621270dad5704","sha256":"accb7630dd611d6b8c52748950ae37f89a1acba3cea9df35aefb373f5b56f0f0","sha512":"57191fc495d764b15e6e525d2839edd3a652fd628a0941b4bc9de70c4b0b862d8e38ca5be77d6872d818513641e338630d30c7b634670d10cbd4c9605d675e18","ssdeep":"3072:Ykg/7cNSvoMJRe+BY9mxeLAwH29evHt94foO0WcAfYtI4fzM0WcEfRbfeu1lEz:YkgJ74AELRH2KbADeKSz","tlshash":"1ac408132255d0392cd769aef398b62836186102fb3386dd72fd216fdac9df4126279c","first_seen":"2026-06-28T13:56:02.73585Z","last_seen":"2026-07-03T15:17:27.606123Z","times_seen":5,"resource_available":true,"data":null}},"time_used":602,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":160,"receive":442,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-03","alert":"Sinkholed","trigger":"checkfirelight.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-03","alert":"Sinkholed","trigger":"checkfirelight.info","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"esm.sh/disable-devtool","fqdn":"esm.sh","domain":"esm.sh","tld":"sh"},"ip":{"addr":"172.67.70.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://checkfirelight.info/?__cf_chl_f_tk=eGKU5iLblymwxyOeNmNruQ.l3zP2OCXLr.zIScLHzv0-1783091788-1.0.1.1-Fv87xRPeIv3TprVCiZ.2hi.uzbhacVecKxhd1NX43eg","date":"2026-07-03T15:16:40.220Z","timestamp":1783091800220,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"esm.sh","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 21 Jun 2026 04:25:37 GMT","end":"Sat, 19 Sep 2026 05:25:34 GMT"},"fingerprint":{"sha1":"06:01:9A:2D:10:55:51:3D:71:BF:F8:20:33:F8:71:A5:9E:90:2A:AB","sha256":"1B:0D:06:A9:0C:41:8A:5B:EE:63:99:62:63:72:3A:1C:48:69:DD:7C:A6:61:EB:03:67:80:79:9E:62:BA:EA:CC"}}},"request":{"raw":"GET /disable-devtool HTTP/1.1\r\nHost: esm.sh\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://checkfirelight.info\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://noteworthy-lox.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 03 Jul 2026 15:16:40 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: X-ESM-Path, X-TypeScript-Types\r\ncache-control: public, max-age=600\r\nserver: cloudflare\r\nvary: User-Agent\r\nx-esm-path: /disable-devtool@0.3.9/es2022/disable-devtool.mjs\r\nx-typescript-types: https://esm.sh/disable-devtool@0.3.9/index.d.ts\r\nlast-modified: Fri, 03 Jul 2026 15:16:40 GMT\r\ncf-cache-status: HIT\r\ncontent-encoding: br\r\ncf-ray: a156da477a770b31-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":181,"size_decoded":629,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text","md5":"97c69ddec5a41bfd71d4e46f03aa3a66","sha1":"6632a0a55d48d322450a0a0147526f0e91b4cc0b","sha256":"bbd0cbecbc43488ec920e0660e7a0b903af3d9fcd3114421a7620f55ffa98792","sha512":"80e5b974e51b127e2b9c0f227c6cc0b302351806ae1947f0691cb18a67d3743f4390cfe8d0d45f57ab6f5ba899eae8775fdd776edcdb2c0c733997bb38abd90b","ssdeep":"","tlshash":"66c08c10c033f0382a308cb832b4eaefe3a302c6d20c52b88e04022c93cf100d22cba4","first_seen":"2026-05-26T18:42:46.141539Z","last_seen":"2026-07-03T15:17:27.606784Z","times_seen":106,"resource_available":true,"data":null}},"time_used":129,"timings":{"blocked":0,"dns":1,"connect":1,"send":0,"wait":113,"receive":0,"ssl":11},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gateway.irys.xyz/FxfTrcshALLke9qQSKxpTpvZHc6wdnzk3EmjMb9bbith","fqdn":"gateway.irys.xyz","domain":"irys.xyz","tld":"xyz"},"ip":{"addr":"104.20.31.170","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://checkfirelight.info/?__cf_chl_f_tk=eGKU5iLblymwxyOeNmNruQ.l3zP2OCXLr.zIScLHzv0-1783091788-1.0.1.1-Fv87xRPeIv3TprVCiZ.2hi.uzbhacVecKxhd1NX43eg","date":"2026-07-03T15:16:40.497Z","timestamp":1783091800497,"http_version":"HTTP/2","security_state":"secure","security_info":null,"request":{"raw":"GET /FxfTrcshALLke9qQSKxpTpvZHc6wdnzk3EmjMb9bbith HTTP/1.1\r\nHost: gateway.irys.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://checkfirelight.info/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 \r\ndate: Fri, 03 Jul 2026 15:16:40 GMT\r\ncontent-length: 0\r\nlocation: https://3zda2p33cro63eoev6gcult7nzm6vegrll7kg6cknocqfq4tavva.mainnet-1.datasprite-cdn.com/FxfTrcshALLke9qQSKxpTpvZHc6wdnzk3EmjMb9bbith/\r\nserver: cloudflare\r\naccess-control-expose-headers: cache-control, location\r\ncache-control: no-store\r\naccess-control-allow-credentials: true\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nx-cache-status: BYPASS\r\ncf-cache-status: BYPASS\r\ncf-ray: a156da491f0d569f-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-03T19:16:40.563677Z","times_seen":16948877,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-03","alert":"Sinkholed","trigger":"gateway.irys.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"checkfirelight.info/d9f21a476ed4dc3967816cf76c7a1b414629d3d9.svg","fqdn":"checkfirelight.info","domain":"checkfirelight.info","tld":"info"},"ip":{"addr":"172.67.128.191","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://checkfirelight.info/?__cf_chl_f_tk=eGKU5iLblymwxyOeNmNruQ.l3zP2OCXLr.zIScLHzv0-1783091788-1.0.1.1-Fv87xRPeIv3TprVCiZ.2hi.uzbhacVecKxhd1NX43eg","date":"2026-07-03T15:16:37.031Z","timestamp":1783091797031,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"checkfirelight.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Jun 2026 16:28:10 GMT","end":"Mon, 28 Sep 2026 17:26:57 GMT"},"fingerprint":{"sha1":"E2:6B:21:81:9C:B8:AD:23:84:9C:B6:45:4A:80:6C:AB:99:5C:10:CE","sha256":"74:38:CD:39:7B:FF:5B:B8:A3:DA:05:94:43:47:07:5D:75:8F:ED:21:4F:0A:80:2E:4D:AE:4E:E7:5B:5C:7C:DC"}}},"request":{"raw":"GET /d9f21a476ed4dc3967816cf76c7a1b414629d3d9.svg HTTP/1.1\r\nHost: checkfirelight.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://checkfirelight.info/?__cf_chl_f_tk=eGKU5iLblymwxyOeNmNruQ.l3zP2OCXLr.zIScLHzv0-1783091788-1.0.1.1-Fv87xRPeIv3TprVCiZ.2hi.uzbhacVecKxhd1NX43eg\r\nCookie: cf_clearance=x7CrPDFa3VxjzKhrvkEtAP2DZJf60Q5q9K_NH0LnzxU-1783091796-1.2.1.1-XBW1i5n_SDimWqwX6Vod0hbq9bRwT8EgUnJ3vfsz7d03j.ElHU8e.vZVTsRQNgL6zQtCZ4AcOM7zUV3ZCjlG7.5pbuGDdkUEFeHF6a3XncUT7oWL6nykc7ZemxMFnSF.jP0HtU3YPWbNZSyY1DwDDJsHKfrO.QDrYbJ_Xt4pam1O9dvV2z8RwqkAhfg0ooK3FIUgBnpqmlpCvkrJ4FjiBNY5fUQszDf9hR_5V2FcrRvb6NfDKTu9wRl1JIYx.KoEKdHLoXfET8nvf9FBigAOgaC4gvY6FCohBYjcTNHnz9CvY.oFpNookrmmKc_aKOubsA9qrVprld9Oy.u2o8mmIHi8WkYxzprYORqFzBRs2K4UpY0OOsFmXH_nWCes.q2ii5Jl5DTBlO_B5yBY.QiwNiF.zFiseZKEoEE3u9FpAbcSIVRV2cKFYjyRDGl_Aek68EuYCh.mz2sN.hwRdkqbwRN.l3tOXqiv2Pp4kueYbdoLTRBU2_ON7Vss.5M7..9z\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sb61cGUyywj%2FI92Q4zhVeIMqrF5%2Bm7Rk1s8R7%2Fbg8x4b5EtakciRxGwcHEybzslaG2ytoSTqHXNHgcwEUNc4Axe18e4aC3p%2BAHe4JXMdvTYuI1jNpci%2FzIIY5hSxsmv%2BPQ5eM1hI\"}]}\r\nlast-modified: Tue, 30 Jun 2026 17:20:30 GMT\r\ndate: Fri, 03 Jul 2026 15:16:37 GMT\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\netag: W/\"5a0cb2856f15edf4bbb07e9a227d36b8\"\r\ncf-ray: a156da337bcc76ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3570,"size_decoded":2017,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"5a0cb2856f15edf4bbb07e9a227d36b8","sha1":"d9f21a476ed4dc3967816cf76c7a1b414629d3d9","sha256":"648b8fcabf85413ff444fb1cd0e5ed65a31fe82c574e840086f5b350b90e6c27","sha512":"923a5c9b2ae96bf83d751990a815851410d19cda32beda465f9659374bb01c6cb5f5ec1445a43455652a7d6ef239e8543a8c3a735a740fca59e20f265c65aa90","ssdeep":"","tlshash":"c671e0efeebc23d874cca3fae3538099b20e64e41451ce99cc2e9c0cdd4585da497850","first_seen":"2026-04-24T15:23:09.421323Z","last_seen":"2026-07-03T15:17:27.607418Z","times_seen":16,"resource_available":false,"data":null}},"time_used":159,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":159,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-03","alert":"Sinkholed","trigger":"checkfirelight.info","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-03","alert":"Sinkholed","trigger":"checkfirelight.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"arbitrum-one.publicnode.com/","fqdn":"arbitrum-one.publicnode.com","domain":"publicnode.com","tld":"com"},"ip":{"addr":"104.20.24.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://checkfirelight.info/?__cf_chl_f_tk=eGKU5iLblymwxyOeNmNruQ.l3zP2OCXLr.zIScLHzv0-1783091788-1.0.1.1-Fv87xRPeIv3TprVCiZ.2hi.uzbhacVecKxhd1NX43eg","date":"2026-07-03T15:16:38.141Z","timestamp":1783091798141,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"publicnode.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Jun 2026 01:05:04 GMT","end":"Mon, 07 Sep 2026 02:05:00 GMT"},"fingerprint":{"sha1":"39:B4:D5:B4:26:71:60:64:13:47:CC:54:ED:BC:AD:E1:33:77:19:00","sha256":"65:A9:40:31:FB:2A:25:C7:3B:B6:B3:F0:4E:96:B9:08:CE:FC:27:5A:F6:DB:32:E8:7E:64:C7:51:34:DA:93:85"}}},"request":{"raw":"POST / HTTP/1.1\r\nHost: arbitrum-one.publicnode.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://checkfirelight.info/\r\nContent-Type: application/json\r\nContent-Length: 136\r\nOrigin: https://checkfirelight.info\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 \r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 1728000\r\ncontent-type: application/json\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, accept-encoding\r\ndate: Fri, 03 Jul 2026 15:16:38 GMT\r\npriority: u=4,i=?0\r\nx-envoy-upstream-service-time: 1\r\nserver: cloudflare\r\ncf-cache-status: DYNAMIC\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\ncf-ray: a156da3b0cc05687-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":423,"size_decoded":710,"mime_type":"application/json","magic":"JSON text data","md5":"71a318977785f5eeb3ac998855678f02","sha1":"1ceb0da3b93bdc179004b4c69c7273a9fd6b3592","sha256":"6ac7df5865cd508fe576ed84f1c4bc0f6cb45e768559599b45805ec978f399df","sha512":"b10fd1b2611b28a1e8e6a4319458862b55f3f7969344be166875dbf3df05a43998e30d8c0f5c370cb83221995830a7e6080da409c82407080b2356eff1a59e16","ssdeep":"","tlshash":"00e02ba4204ba596f16808bbe6c43661b075724bc9e1cf83098df8040a409a1eb0e55c","first_seen":"2026-07-03T15:17:27.608074Z","last_seen":"2026-07-03T15:17:27.608074Z","times_seen":1,"resource_available":false,"data":null}},"time_used":48,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":48,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"arbitrum.meowrpc.com/","fqdn":"arbitrum.meowrpc.com","domain":"meowrpc.com","tld":"com"},"ip":{"addr":"172.67.70.45","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://checkfirelight.info/?__cf_chl_f_tk=eGKU5iLblymwxyOeNmNruQ.l3zP2OCXLr.zIScLHzv0-1783091788-1.0.1.1-Fv87xRPeIv3TprVCiZ.2hi.uzbhacVecKxhd1NX43eg","date":"2026-07-03T15:16:38.155Z","timestamp":1783091798155,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"meowrpc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 17:34:32 GMT","end":"Tue, 01 Sep 2026 18:34:19 GMT"},"fingerprint":{"sha1":"78:4A:BA:FF:8C:0B:6A:C6:ED:79:41:C4:76:F9:F8:BF:73:62:59:82","sha256":"B7:3B:89:BB:B9:D1:2E:D6:73:1E:CD:1B:A5:D3:D9:21:43:F6:C5:57:71:93:11:42:0E:54:A9:E7:B4:CB:08:47"}}},"request":{"raw":"POST / HTTP/1.1\r\nHost: arbitrum.meowrpc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://checkfirelight.info/\r\nContent-Type: application/json\r\nContent-Length: 136\r\nOrigin: https://checkfirelight.info\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 03 Jul 2026 15:16:38 GMT\r\ncontent-type: application/json\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: origin, access-control-request-method, access-control-request-headers\r\naccess-control-allow-origin: *\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FpDrG9dfP7NVIAUGsevXInVnf8Y7ix%2Bx7T2zdDSSDiNmfQbzvzrTfVr9sjgKKtJn9m4tgwa2DELgLQUU3dOdE1aB4jSVNJ808EdwY87KXGnCFHS9FePiJmepHAAPBgo6B4bs57dh\"}]}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: a156da3adddc56b7-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":98,"size_decoded":714,"mime_type":"application/json","magic":"JSON text data","md5":"e46902157aa64abcdc41f29ace8b171a","sha1":"b959cf3eceb9eee47817435a4c36f0792aa15811","sha256":"36edf520b814be5fc0d5360dc0f6ae1e9ed28f47bcc63fe6ede8285bfe2ce982","sha512":"49d1d832b1949ee103d35f061172658ef17bc4970391dca16e61aabfce51f02db86daa7cbe9d7657265e1ebf17916c347233226eedfe065aacadabc4409ce6c5","ssdeep":"","tlshash":"c5b01220514e2b30715a49067e0d394d57f099f104507f031c0c8a09250951790c2130","first_seen":"2026-02-05T07:43:22.648531Z","last_seen":"2026-07-03T15:17:27.60897Z","times_seen":164,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gateway.irys.xyz/Fo5WiNNZWKWpLsBjTE9UVq9c5h2Y9DKF9BCyMd9f4p4H","fqdn":"gateway.irys.xyz","domain":"irys.xyz","tld":"xyz"},"ip":{"addr":"104.20.31.170","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://checkfirelight.info/?__cf_chl_f_tk=eGKU5iLblymwxyOeNmNruQ.l3zP2OCXLr.zIScLHzv0-1783091788-1.0.1.1-Fv87xRPeIv3TprVCiZ.2hi.uzbhacVecKxhd1NX43eg","date":"2026-07-03T15:16:40.409Z","timestamp":1783091800409,"http_version":"HTTP/2","security_state":"secure","security_info":null,"request":{"raw":"GET /Fo5WiNNZWKWpLsBjTE9UVq9c5h2Y9DKF9BCyMd9f4p4H HTTP/1.1\r\nHost: gateway.irys.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://checkfirelight.info/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 \r\ndate: Fri, 03 Jul 2026 15:16:40 GMT\r\ncontent-length: 0\r\nlocation: https://3piw7lupog56srrpctt46tuuiroz3dh47v2vjdtocircg3f7u4za.mainnet-1.datasprite-cdn.com/Fo5WiNNZWKWpLsBjTE9UVq9c5h2Y9DKF9BCyMd9f4p4H/\r\nserver: cloudflare\r\naccess-control-allow-credentials: true\r\ncache-control: no-store\r\naccess-control-expose-headers: location, cache-control\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nx-cache-status: BYPASS\r\ncf-cache-status: BYPASS\r\ncf-ray: a156da48be98569f-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-03T19:16:40.563677Z","times_seen":16948877,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-03","alert":"Sinkholed","trigger":"gateway.irys.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gateway.irys.xyz/HpG4ABhwNauwmtHUfh2BiLRYzJS5uQfZVSsU9P5dCc8n","fqdn":"gateway.irys.xyz","domain":"irys.xyz","tld":"xyz"},"ip":{"addr":"104.20.31.170","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://checkfirelight.info/?__cf_chl_f_tk=eGKU5iLblymwxyOeNmNruQ.l3zP2OCXLr.zIScLHzv0-1783091788-1.0.1.1-Fv87xRPeIv3TprVCiZ.2hi.uzbhacVecKxhd1NX43eg","date":"2026-07-03T15:16:40.510Z","timestamp":1783091800510,"http_version":"HTTP/2","security_state":"secure","security_info":null,"request":{"raw":"GET /HpG4ABhwNauwmtHUfh2BiLRYzJS5uQfZVSsU9P5dCc8n HTTP/1.1\r\nHost: gateway.irys.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://checkfirelight.info/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 \r\ndate: Fri, 03 Jul 2026 15:16:40 GMT\r\ncontent-length: 0\r\nlocation: https://7hle7g76hwhzkcgcytuleelhk7lwp5k2ivnywsyp5umgak26bktq.mainnet-1.datasprite-cdn.com/HpG4ABhwNauwmtHUfh2BiLRYzJS5uQfZVSsU9P5dCc8n/\r\nserver: cloudflare\r\naccess-control-allow-credentials: true\r\naccess-control-expose-headers: location, cache-control\r\ncache-control: no-store\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nx-cache-status: BYPASS\r\ncf-cache-status: BYPASS\r\ncf-ray: a156da493f30569f-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-03T19:16:40.563677Z","times_seen":16948877,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-03","alert":"Sinkholed","trigger":"gateway.irys.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ukhvzo2rrxh7wozvlpmgie2zqeaaaquohhrc7a6usunqtlubkr7a.mainnet-1.datasprite-cdn.com/BwZqZkoJjgvs5QoobRe8CysTNUs155FJAKg6xngJ4yXj/","fqdn":"ukhvzo2rrxh7wozvlpmgie2zqeaaaquohhrc7a6usunqtlubkr7a.mainnet-1.datasprite-cdn.com","domain":"datasprite-cdn.com","tld":"com"},"ip":{"addr":"104.21.15.158","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://checkfirelight.info/?__cf_chl_f_tk=eGKU5iLblymwxyOeNmNruQ.l3zP2OCXLr.zIScLHzv0-1783091788-1.0.1.1-Fv87xRPeIv3TprVCiZ.2hi.uzbhacVecKxhd1NX43eg","date":"2026-07-03T15:16:40.828Z","timestamp":1783091800828,"http_version":"HTTP/3","security_state":"secure","security_info":null,"request":{"raw":"GET /BwZqZkoJjgvs5QoobRe8CysTNUs155FJAKg6xngJ4yXj/ HTTP/1.1\r\nHost: ukhvzo2rrxh7wozvlpmgie2zqeaaaquohhrc7a6usunqtlubkr7a.mainnet-1.datasprite-cdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://checkfirelight.info/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-03T19:16:40.563677Z","times_seen":16948877,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-03","alert":"Sinkholed","trigger":"ukhvzo2rrxh7wozvlpmgie2zqeaaaquohhrc7a6usunqtlubkr7a.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-03","alert":"Sinkholed","trigger":"ukhvzo2rrxh7wozvlpmgie2zqeaaaquohhrc7a6usunqtlubkr7a.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-03","alert":"Sinkholed","trigger":"ukhvzo2rrxh7wozvlpmgie2zqeaaaquohhrc7a6usunqtlubkr7a.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/fo/1625915179:1783087218:WvWUDcOSiYlRM35LNHGLW59lbd1JzsbZuZXYZJmNj_c/a156da0639454c11/Q.G9HOlRYSmNPReGLsqtCH118tX8T9xo230iYDyoWbg-1783091789-1.2.1.1-H5LoDq9mPl2jDPRt2DEGipOcK9Hb3_yihEmR.mYE4whTtV46XovPxhWc45rBhGHQ","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/av0/rch/n1hp3/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","date":"2026-07-03T15:16:30.216Z","timestamp":1783091790216,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"challenges.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 16 Jun 2026 20:15:28 GMT","end":"Mon, 14 Sep 2026 21:15:13 GMT"},"fingerprint":{"sha1":"77:27:72:42:CF:51:E8:8C:7C:3E:8C:4C:A1:F0:9A:86:96:B9:0A:16","sha256":"ED:7C:F7:38:B3:0F:00:86:32:D1:14:CE:C0:FF:CA:0E:7C:86:EE:49:51:EF:A4:4B:AA:5C:B6:7C:00:B5:3D:F3"}}},"request":{"raw":"POST /cdn-cgi/challenge-platform/h/b/fo/1625915179:1783087218:WvWUDcOSiYlRM35LNHGLW59lbd1JzsbZuZXYZJmNj_c/a156da0639454c11/Q.G9HOlRYSmNPReGLsqtCH118tX8T9xo230iYDyoWbg-1783091789-1.2.1.1-H5LoDq9mPl2jDPRt2DEGipOcK9Hb3_yihEmR.mYE4whTtV46XovPxhWc45rBhGHQ HTTP/1.1\r\nHost: challenges.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/av0/rch/n1hp3/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto\r\ncf-chl: Q.G9HOlRYSmNPReGLsqtCH118tX8T9xo230iYDyoWbg-1783091789-1.2.1.1-H5LoDq9mPl2jDPRt2DEGipOcK9Hb3_yihEmR.mYE4whTtV46XovPxhWc45rBhGHQ\r\ncf-chl-ra: 0\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 4332\r\nOrigin: https://challenges.cloudflare.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 03 Jul 2026 15:16:30 GMT\r\ncontent-type: text/plain; charset=UTF-8\r\ncf-chl-gen: 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$ui+T1Ebz6+TLOGgxAVZEVg==\r\ntiming-allow-origin: https://challenges.cloudflare.com\r\npriority: u=3,i=?0\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: a156da08da934c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":467660,"size_decoded":305917,"mime_type":"text/plain; charset=UTF-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"987a79e44d86a1b8035903db4a6952c1","sha1":"70cda607beeaa57dec44a581672f5797ae521cff","sha256":"bee1284456180a7fc47ec25c7cdceaf42b835f7f1cd2a57cf8dcca250dfec1fa","sha512":"737d90455127c7dbf8722fa50303b9d83001c5bad36c1ca0e472ba05f3973f7d9f29dae7d3c2f79d2e88ea9a6f2ee2f4476c77a381c650a4c82143f4744b9f14","ssdeep":"6144:HcQNBoMfc379Fnq9OiHoD4/9DUlZDu7H9sVgyGMWrxxm3jOsSSUUUUU664Ot+opK:HsMfc7YOiHTlQPaWuyiISsxropelaw","tlshash":"daa402617bb81bdfac0bd571612fedbce801294541c4f864c2fc89dfa4a68ecb934529","first_seen":"2026-07-03T15:17:27.609635Z","last_seen":"2026-07-03T15:17:27.609635Z","times_seen":1,"resource_available":false,"data":null}},"time_used":117,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":112,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"checkfirelight.info/d9b6c81a600dfbb3fa4c740e56247ad8ce4fc393.svg","fqdn":"checkfirelight.info","domain":"checkfirelight.info","tld":"info"},"ip":{"addr":"172.67.128.191","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://checkfirelight.info/?__cf_chl_f_tk=eGKU5iLblymwxyOeNmNruQ.l3zP2OCXLr.zIScLHzv0-1783091788-1.0.1.1-Fv87xRPeIv3TprVCiZ.2hi.uzbhacVecKxhd1NX43eg","date":"2026-07-03T15:16:37.040Z","timestamp":1783091797040,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"checkfirelight.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Jun 2026 16:28:10 GMT","end":"Mon, 28 Sep 2026 17:26:57 GMT"},"fingerprint":{"sha1":"E2:6B:21:81:9C:B8:AD:23:84:9C:B6:45:4A:80:6C:AB:99:5C:10:CE","sha256":"74:38:CD:39:7B:FF:5B:B8:A3:DA:05:94:43:47:07:5D:75:8F:ED:21:4F:0A:80:2E:4D:AE:4E:E7:5B:5C:7C:DC"}}},"request":{"raw":"GET /d9b6c81a600dfbb3fa4c740e56247ad8ce4fc393.svg HTTP/1.1\r\nHost: checkfirelight.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://checkfirelight.info/?__cf_chl_f_tk=eGKU5iLblymwxyOeNmNruQ.l3zP2OCXLr.zIScLHzv0-1783091788-1.0.1.1-Fv87xRPeIv3TprVCiZ.2hi.uzbhacVecKxhd1NX43eg\r\nCookie: cf_clearance=x7CrPDFa3VxjzKhrvkEtAP2DZJf60Q5q9K_NH0LnzxU-1783091796-1.2.1.1-XBW1i5n_SDimWqwX6Vod0hbq9bRwT8EgUnJ3vfsz7d03j.ElHU8e.vZVTsRQNgL6zQtCZ4AcOM7zUV3ZCjlG7.5pbuGDdkUEFeHF6a3XncUT7oWL6nykc7ZemxMFnSF.jP0HtU3YPWbNZSyY1DwDDJsHKfrO.QDrYbJ_Xt4pam1O9dvV2z8RwqkAhfg0ooK3FIUgBnpqmlpCvkrJ4FjiBNY5fUQszDf9hR_5V2FcrRvb6NfDKTu9wRl1JIYx.KoEKdHLoXfET8nvf9FBigAOgaC4gvY6FCohBYjcTNHnz9CvY.oFpNookrmmKc_aKOubsA9qrVprld9Oy.u2o8mmIHi8WkYxzprYORqFzBRs2K4UpY0OOsFmXH_nWCes.q2ii5Jl5DTBlO_B5yBY.QiwNiF.zFiseZKEoEE3u9FpAbcSIVRV2cKFYjyRDGl_Aek68EuYCh.mz2sN.hwRdkqbwRN.l3tOXqiv2Pp4kueYbdoLTRBU2_ON7Vss.5M7..9z\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TqAwTjrbsHnPd9qVT1%2B8PwQbEUEx3ALhyZbbxGIanZP14pbzMd0S%2BwWCPK9g7BpOefhzFAGOHfo1uiqiXNaS3ALZBicI94uHHXvMig3LmqHm5Apz7oGHUZX54KacSRU5QEgum8QD\"}]}\r\nlast-modified: Tue, 30 Jun 2026 17:20:30 GMT\r\ndate: Fri, 03 Jul 2026 15:16:37 GMT\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\netag: W/\"80fd4d380001d7ba50f3289bc01fd1b7\"\r\ncf-ray: a156da338bd076ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3877,"size_decoded":2287,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"80fd4d380001d7ba50f3289bc01fd1b7","sha1":"d9b6c81a600dfbb3fa4c740e56247ad8ce4fc393","sha256":"44338ccd50646a9c9f8acf3f0540ba1137f5a8ceb2385e445db4281c8a0865f1","sha512":"0ddc190dce986075259952e547cef6e22d0d1849c5063930dfae18c37381512666d03b790c40a3553dee62766c10cb6c98d447b502a700a4a9fb15b00d6ac59b","ssdeep":"","tlshash":"9381f2feef7853d8a4c9b7f6f7221528740fa4f096e58e62c65c1c0a589785ce954c80","first_seen":"2026-04-24T15:23:09.440933Z","last_seen":"2026-07-03T15:17:27.610601Z","times_seen":14,"resource_available":false,"data":null}},"time_used":254,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":254,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-03","alert":"Sinkholed","trigger":"checkfirelight.info","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-03","alert":"Sinkholed","trigger":"checkfirelight.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"arb1.arbitrum.io/rpc","fqdn":"arb1.arbitrum.io","domain":"arbitrum.io","tld":"io"},"ip":{"addr":"104.20.39.96","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://checkfirelight.info/?__cf_chl_f_tk=eGKU5iLblymwxyOeNmNruQ.l3zP2OCXLr.zIScLHzv0-1783091788-1.0.1.1-Fv87xRPeIv3TprVCiZ.2hi.uzbhacVecKxhd1NX43eg","date":"2026-07-03T15:16:38.137Z","timestamp":1783091798137,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"arbitrum.io","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 05 May 2026 15:12:06 GMT","end":"Mon, 03 Aug 2026 15:12:05 GMT"},"fingerprint":{"sha1":"D3:54:F9:E1:4F:A1:F9:48:7A:90:AD:25:77:28:AC:8B:25:9F:8A:9B","sha256":"68:2B:C8:BC:79:16:DB:47:A5:AC:06:03:88:EF:7E:35:91:D6:08:8C:3A:52:2B:59:54:D3:FD:A9:7C:A4:61:06"}}},"request":{"raw":"OPTIONS /rpc HTTP/1.1\r\nHost: arb1.arbitrum.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://checkfirelight.info/\r\nOrigin: https://checkfirelight.info\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 \r\ndate: Fri, 03 Jul 2026 15:16:38 GMT\r\naccess-control-allow-headers: content-type\r\naccess-control-allow-methods: POST\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 600\r\ncontent-encoding: gzip\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nx-envoy-upstream-service-time: 0\r\nserver: cloudflare\r\ncf-cache-status: DYNAMIC\r\ncf-ray: a156da3a7baa4e4c-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":0,"size_decoded":424,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-03T19:16:40.563677Z","times_seen":16948877,"resource_available":true,"data":null}},"time_used":153,"timings":{"blocked":-1,"dns":0,"connect":3,"send":0,"wait":133,"receive":0,"ssl":17},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rpc.ankr.com/arbitrum","fqdn":"rpc.ankr.com","domain":"ankr.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://checkfirelight.info/?__cf_chl_f_tk=eGKU5iLblymwxyOeNmNruQ.l3zP2OCXLr.zIScLHzv0-1783091788-1.0.1.1-Fv87xRPeIv3TprVCiZ.2hi.uzbhacVecKxhd1NX43eg","date":"2026-07-03T15:16:38.158Z","timestamp":1783091798158,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"OPTIONS /arbitrum HTTP/1.1\r\nHost: rpc.ankr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://checkfirelight.info/\r\nOrigin: https://checkfirelight.info\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-03T19:16:40.563677Z","times_seen":16948877,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v57bhor75skl3yh2fasy5zibmxu374hc564a5oiidpjj3yk5qoua.mainnet-1.datasprite-cdn.com/Cp3rKQhcxnwLeryCXo65zSv8dYFvXn4b47fC9GiYbXu9/","fqdn":"v57bhor75skl3yh2fasy5zibmxu374hc564a5oiidpjj3yk5qoua.mainnet-1.datasprite-cdn.com","domain":"datasprite-cdn.com","tld":"com"},"ip":{"addr":"172.67.163.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://checkfirelight.info/?__cf_chl_f_tk=eGKU5iLblymwxyOeNmNruQ.l3zP2OCXLr.zIScLHzv0-1783091788-1.0.1.1-Fv87xRPeIv3TprVCiZ.2hi.uzbhacVecKxhd1NX43eg","date":"2026-07-03T15:16:40.756Z","timestamp":1783091800756,"http_version":"HTTP/3","security_state":"secure","security_info":null,"request":{"raw":"GET /Cp3rKQhcxnwLeryCXo65zSv8dYFvXn4b47fC9GiYbXu9/ HTTP/1.1\r\nHost: v57bhor75skl3yh2fasy5zibmxu374hc564a5oiidpjj3yk5qoua.mainnet-1.datasprite-cdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://checkfirelight.info/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-03T19:16:40.563677Z","times_seen":16948877,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-03","alert":"Sinkholed","trigger":"v57bhor75skl3yh2fasy5zibmxu374hc564a5oiidpjj3yk5qoua.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-03","alert":"Sinkholed","trigger":"v57bhor75skl3yh2fasy5zibmxu374hc564a5oiidpjj3yk5qoua.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-03","alert":"Sinkholed","trigger":"v57bhor75skl3yh2fasy5zibmxu374hc564a5oiidpjj3yk5qoua.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/turnstile/v0/b/80a697ecdece/api.js?onload=zzCI2\u0026render=explicit","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://checkfirelight.info/","date":"2026-07-03T15:16:29.691Z","timestamp":1783091789691,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"challenges.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 16 Jun 2026 20:15:28 GMT","end":"Mon, 14 Sep 2026 21:15:13 GMT"},"fingerprint":{"sha1":"77:27:72:42:CF:51:E8:8C:7C:3E:8C:4C:A1:F0:9A:86:96:B9:0A:16","sha256":"ED:7C:F7:38:B3:0F:00:86:32:D1:14:CE:C0:FF:CA:0E:7C:86:EE:49:51:EF:A4:4B:AA:5C:B6:7C:00:B5:3D:F3"}}},"request":{"raw":"GET /turnstile/v0/b/80a697ecdece/api.js?onload=zzCI2\u0026render=explicit HTTP/1.1\r\nHost: challenges.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://checkfirelight.info\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 03 Jul 2026 15:16:29 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nlast-modified: Wed, 01 Jul 2026 16:51:03 GMT\r\ncache-control: max-age=31536000, stale-if-error=10800, stale-while-revalidate=31536000, public\r\naccess-control-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: https://checkfirelight.info\r\npriority: u=3,i=?0\r\netag: W/\"6a454577.00000000-11459\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: a156da05bcae56b7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":70745,"size_decoded":23340,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"9bac72699d1e8dd22f462600d5bd305f","sha1":"c8962fc2ade8fcd5f5f670f867beb919ebb81247","sha256":"4bfc3d3ed2a5431c2153a17bd427b1362cdf873d5dfb55a31e2fffc644ceae9c","sha512":"19b9c51e2e59376ef594944efac73b14487e8755268c5f225680c1e7b23cb8cc1b78e289a91f37d03e43528741f5a560717d89f8e5028742b6ed281b42e83c95","ssdeep":"1536:fRRSguA/hUq5cfF3Cd7TeFhKHRfz9hY/YHJMYq:PSQOEcITeFMtzA/YHJA","tlshash":"e8633b8472aa786223d9c0f4e17b6753b3257d3aa84cc450d427dc653a7cd869233fba","first_seen":"2026-07-02T08:19:42.142539Z","last_seen":"2026-07-03T19:19:47.194263Z","times_seen":3100,"resource_available":true,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":3,"connect":16,"send":0,"wait":12,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"checkfirelight.info/cdn-cgi/challenge-platform/h/b/fo/164613808:1783090830:nkg7FHmMHwmfjhhHzII7r-k11_LxWcE5cbmdGdGelGU/a156da011a5f76ef/ZC1nKWwNAj6S8mhmsz7bG3Sr8JjxLPaJn1LhAXjRRfs-1783091788-1.2.1.1-9dGZgCKYBiD3z2dVMVHYnt2uR2GEw6K.WKZJONtJ8n5fyXHuVT7rMBKbZJRqOAud","fqdn":"checkfirelight.info","domain":"checkfirelight.info","tld":"info"},"ip":{"addr":"172.67.128.191","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://checkfirelight.info/","date":"2026-07-03T15:16:29.713Z","timestamp":1783091789713,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"checkfirelight.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Jun 2026 16:28:10 GMT","end":"Mon, 28 Sep 2026 17:26:57 GMT"},"fingerprint":{"sha1":"E2:6B:21:81:9C:B8:AD:23:84:9C:B6:45:4A:80:6C:AB:99:5C:10:CE","sha256":"74:38:CD:39:7B:FF:5B:B8:A3:DA:05:94:43:47:07:5D:75:8F:ED:21:4F:0A:80:2E:4D:AE:4E:E7:5B:5C:7C:DC"}}},"request":{"raw":"POST /cdn-cgi/challenge-platform/h/b/fo/164613808:1783090830:nkg7FHmMHwmfjhhHzII7r-k11_LxWcE5cbmdGdGelGU/a156da011a5f76ef/ZC1nKWwNAj6S8mhmsz7bG3Sr8JjxLPaJn1LhAXjRRfs-1783091788-1.2.1.1-9dGZgCKYBiD3z2dVMVHYnt2uR2GEw6K.WKZJONtJ8n5fyXHuVT7rMBKbZJRqOAud HTTP/1.1\r\nHost: checkfirelight.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://checkfirelight.info/\r\ncf-chl: ZC1nKWwNAj6S8mhmsz7bG3Sr8JjxLPaJn1LhAXjRRfs-1783091788-1.2.1.1-9dGZgCKYBiD3z2dVMVHYnt2uR2GEw6K.WKZJONtJ8n5fyXHuVT7rMBKbZJRqOAud\r\ncf-chl-ra: 0\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 2060\r\nOrigin: https://checkfirelight.info\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/plain; charset=UTF-8\r\ncf-chl-gen: Yd6WnKlwojKCArcrqDf89/TRxnX2hv5V4kRyQtmJXn0=$pipPD7RpzOF2pKRqP4vPww==\r\ntiming-allow-origin: https://checkfirelight.info\r\ncontent-encoding: zstd\r\ndate: Fri, 03 Jul 2026 15:16:29 GMT\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncf-ray: a156da05bb2976ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":97640,"size_decoded":26114,"mime_type":"text/plain; charset=UTF-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"dbf2ec547790b66144d60c743125865f","sha1":"3453baa41e2304d0dfd276b8052a8d96323495b3","sha256":"ca10429a2bc353526d5b12be647a85463d960e69e72110448b76026402dc1389","sha512":"742ee523e30116c779465879c8970df2a0c43ca02423e6bcc6a3215f751b1a696cdca1e11ce7c99c0d48f76eb221ba19c282a5e5d77e061d9310c5d34da38845","ssdeep":"1536:DauJixCq2xVfrocBYxWcYHxHxHxHxHx8a2+W+W+W+W+W+W+W+W+W+W+W+W+W+W+F:HWCxN8odzRxn","tlshash":"01931b3c5e682e5dca6f7c5acedb75ad0d070f9722cc64a41208a2bfbc6426c495387d","first_seen":"2026-07-03T15:17:27.611985Z","last_seen":"2026-07-03T15:17:27.611985Z","times_seen":1,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-03","alert":"Sinkholed","trigger":"checkfirelight.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-03","alert":"Sinkholed","trigger":"checkfirelight.info","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"checkfirelight.info/24a16cebd7e30f6458aabc37a83b37cceeeabd4e.png","fqdn":"checkfirelight.info","domain":"checkfirelight.info","tld":"info"},"ip":{"addr":"172.67.128.191","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://checkfirelight.info/?__cf_chl_f_tk=eGKU5iLblymwxyOeNmNruQ.l3zP2OCXLr.zIScLHzv0-1783091788-1.0.1.1-Fv87xRPeIv3TprVCiZ.2hi.uzbhacVecKxhd1NX43eg","date":"2026-07-03T15:16:36.974Z","timestamp":1783091796974,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"checkfirelight.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Jun 2026 16:28:10 GMT","end":"Mon, 28 Sep 2026 17:26:57 GMT"},"fingerprint":{"sha1":"E2:6B:21:81:9C:B8:AD:23:84:9C:B6:45:4A:80:6C:AB:99:5C:10:CE","sha256":"74:38:CD:39:7B:FF:5B:B8:A3:DA:05:94:43:47:07:5D:75:8F:ED:21:4F:0A:80:2E:4D:AE:4E:E7:5B:5C:7C:DC"}}},"request":{"raw":"GET /24a16cebd7e30f6458aabc37a83b37cceeeabd4e.png HTTP/1.1\r\nHost: checkfirelight.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://checkfirelight.info/?__cf_chl_f_tk=eGKU5iLblymwxyOeNmNruQ.l3zP2OCXLr.zIScLHzv0-1783091788-1.0.1.1-Fv87xRPeIv3TprVCiZ.2hi.uzbhacVecKxhd1NX43eg\r\nCookie: cf_clearance=x7CrPDFa3VxjzKhrvkEtAP2DZJf60Q5q9K_NH0LnzxU-1783091796-1.2.1.1-XBW1i5n_SDimWqwX6Vod0hbq9bRwT8EgUnJ3vfsz7d03j.ElHU8e.vZVTsRQNgL6zQtCZ4AcOM7zUV3ZCjlG7.5pbuGDdkUEFeHF6a3XncUT7oWL6nykc7ZemxMFnSF.jP0HtU3YPWbNZSyY1DwDDJsHKfrO.QDrYbJ_Xt4pam1O9dvV2z8RwqkAhfg0ooK3FIUgBnpqmlpCvkrJ4FjiBNY5fUQszDf9hR_5V2FcrRvb6NfDKTu9wRl1JIYx.KoEKdHLoXfET8nvf9FBigAOgaC4gvY6FCohBYjcTNHnz9CvY.oFpNookrmmKc_aKOubsA9qrVprld9Oy.u2o8mmIHi8WkYxzprYORqFzBRs2K4UpY0OOsFmXH_nWCes.q2ii5Jl5DTBlO_B5yBY.QiwNiF.zFiseZKEoEE3u9FpAbcSIVRV2cKFYjyRDGl_Aek68EuYCh.mz2sN.hwRdkqbwRN.l3tOXqiv2Pp4kueYbdoLTRBU2_ON7Vss.5M7..9z\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: image/png\r\netag: \"a2baae138966c94954ebc32cb9e8e0a1\"\r\nlast-modified: Tue, 30 Jun 2026 17:20:30 GMT\r\ndate: Fri, 03 Jul 2026 15:16:37 GMT\r\nserver: cloudflare\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BI0h58vK%2BR71juAmCV44jPSNKibx9M0%2FnsQj1tM6NzNodMwHU68YKWMILz57ZCuVgoIxpMdD4mt25hedHyAfBsVZmF9XgjrhEV%2FAOvDJOvZekyh23W9ZZpioCJvUai8fDDeN2qqp\"}]}\r\ncf-ray: a156da331bbc76ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 2388\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2388,"size_decoded":3097,"mime_type":"image/png","magic":"PNG image data, 78 x 68, 8-bit/color RGBA, non-interlaced","md5":"a2baae138966c94954ebc32cb9e8e0a1","sha1":"24a16cebd7e30f6458aabc37a83b37cceeeabd4e","sha256":"a9b23000d64c8f88f3b58854ab92bfc3e1bd01c3972b75f6f22b98d9a356584e","sha512":"3dfa8b76995d907be13b0091cf2093d2ebb54ac9fb67aa828d3f5638610c77ac3d04e54c01093830738d9d9ea3e4349af52462399fdc447410a1ffa03d7ebca6","ssdeep":"","tlshash":"be41ea991ef1a5b2e1d426b14dc6424609b38a876c0eb0c37bdd1d532fcec2421ab7cd","first_seen":"2026-04-17T17:57:05.279222Z","last_seen":"2026-07-03T15:17:27.612893Z","times_seen":33,"resource_available":false,"data":null}},"time_used":163,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":163,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-03","alert":"Sinkholed","trigger":"checkfirelight.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-03","alert":"Sinkholed","trigger":"checkfirelight.info","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gateway.irys.xyz/3GFibxLTiHvi7DucnoGZGgHbWb3eA9cXG3E85dEnjRsi","fqdn":"gateway.irys.xyz","domain":"irys.xyz","tld":"xyz"},"ip":{"addr":"104.20.31.170","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://checkfirelight.info/?__cf_chl_f_tk=eGKU5iLblymwxyOeNmNruQ.l3zP2OCXLr.zIScLHzv0-1783091788-1.0.1.1-Fv87xRPeIv3TprVCiZ.2hi.uzbhacVecKxhd1NX43eg","date":"2026-07-03T15:16:40.411Z","timestamp":1783091800411,"http_version":"HTTP/2","security_state":"secure","security_info":null,"request":{"raw":"GET /3GFibxLTiHvi7DucnoGZGgHbWb3eA9cXG3E85dEnjRsi HTTP/1.1\r\nHost: gateway.irys.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://checkfirelight.info/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 \r\ndate: Fri, 03 Jul 2026 15:16:40 GMT\r\ncontent-length: 0\r\nlocation: https://egp3uffvpgr2wpafcervpo3f64y2lpvikbnscmfvn3udttq77joq.mainnet-1.datasprite-cdn.com/3GFibxLTiHvi7DucnoGZGgHbWb3eA9cXG3E85dEnjRsi/\r\nserver: cloudflare\r\naccess-control-expose-headers: cache-control, location\r\ncache-control: no-store\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-credentials: true\r\nx-cache-status: BYPASS\r\ncf-cache-status: BYPASS\r\ncf-ray: a156da48be99569f-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-03T19:16:40.563677Z","times_seen":16948877,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-03","alert":"Sinkholed","trigger":"gateway.irys.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gateway.irys.xyz/4D9JvTbpqf8it29ZeG4AkLd9PUPhpwWH7MzH8bjqcE8a","fqdn":"gateway.irys.xyz","domain":"irys.xyz","tld":"xyz"},"ip":{"addr":"104.20.31.170","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://checkfirelight.info/?__cf_chl_f_tk=eGKU5iLblymwxyOeNmNruQ.l3zP2OCXLr.zIScLHzv0-1783091788-1.0.1.1-Fv87xRPeIv3TprVCiZ.2hi.uzbhacVecKxhd1NX43eg","date":"2026-07-03T15:16:40.449Z","timestamp":1783091800449,"http_version":"HTTP/2","security_state":"secure","security_info":null,"request":{"raw":"GET /4D9JvTbpqf8it29ZeG4AkLd9PUPhpwWH7MzH8bjqcE8a HTTP/1.1\r\nHost: gateway.irys.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://checkfirelight.info/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 \r\ndate: Fri, 03 Jul 2026 15:16:40 GMT\r\ncontent-length: 0\r\nlocation: https://f6xwz3lwcfil7qwaikhvuopkgolm7x4zdfqegfkqcoceimvb65bq.mainnet-1.datasprite-cdn.com/4D9JvTbpqf8it29ZeG4AkLd9PUPhpwWH7MzH8bjqcE8a/\r\nserver: cloudflare\r\naccess-control-expose-headers: cache-control, location\r\ncache-control: no-store\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-credentials: true\r\nx-cache-status: BYPASS\r\ncf-cache-status: BYPASS\r\ncf-ray: a156da48ceb1569f-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-03T19:16:40.563677Z","times_seen":16948877,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-03","alert":"Sinkholed","trigger":"gateway.irys.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"checkfirelight.info/assets/registry-system.js","fqdn":"checkfirelight.info","domain":"checkfirelight.info","tld":"info"},"ip":{"addr":"172.67.128.191","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://checkfirelight.info/?__cf_chl_f_tk=eGKU5iLblymwxyOeNmNruQ.l3zP2OCXLr.zIScLHzv0-1783091788-1.0.1.1-Fv87xRPeIv3TprVCiZ.2hi.uzbhacVecKxhd1NX43eg","date":"2026-07-03T15:16:36.818Z","timestamp":1783091796818,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"checkfirelight.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Jun 2026 16:28:10 GMT","end":"Mon, 28 Sep 2026 17:26:57 GMT"},"fingerprint":{"sha1":"E2:6B:21:81:9C:B8:AD:23:84:9C:B6:45:4A:80:6C:AB:99:5C:10:CE","sha256":"74:38:CD:39:7B:FF:5B:B8:A3:DA:05:94:43:47:07:5D:75:8F:ED:21:4F:0A:80:2E:4D:AE:4E:E7:5B:5C:7C:DC"}}},"request":{"raw":"GET /assets/registry-system.js HTTP/1.1\r\nHost: checkfirelight.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://checkfirelight.info/?__cf_chl_f_tk=eGKU5iLblymwxyOeNmNruQ.l3zP2OCXLr.zIScLHzv0-1783091788-1.0.1.1-Fv87xRPeIv3TprVCiZ.2hi.uzbhacVecKxhd1NX43eg\r\nCookie: cf_clearance=x7CrPDFa3VxjzKhrvkEtAP2DZJf60Q5q9K_NH0LnzxU-1783091796-1.2.1.1-XBW1i5n_SDimWqwX6Vod0hbq9bRwT8EgUnJ3vfsz7d03j.ElHU8e.vZVTsRQNgL6zQtCZ4AcOM7zUV3ZCjlG7.5pbuGDdkUEFeHF6a3XncUT7oWL6nykc7ZemxMFnSF.jP0HtU3YPWbNZSyY1DwDDJsHKfrO.QDrYbJ_Xt4pam1O9dvV2z8RwqkAhfg0ooK3FIUgBnpqmlpCvkrJ4FjiBNY5fUQszDf9hR_5V2FcrRvb6NfDKTu9wRl1JIYx.KoEKdHLoXfET8nvf9FBigAOgaC4gvY6FCohBYjcTNHnz9CvY.oFpNookrmmKc_aKOubsA9qrVprld9Oy.u2o8mmIHi8WkYxzprYORqFzBRs2K4UpY0OOsFmXH_nWCes.q2ii5Jl5DTBlO_B5yBY.QiwNiF.zFiseZKEoEE3u9FpAbcSIVRV2cKFYjyRDGl_Aek68EuYCh.mz2sN.hwRdkqbwRN.l3tOXqiv2Pp4kueYbdoLTRBU2_ON7Vss.5M7..9z\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/javascript;charset=utf-8\r\npriority: u=3,i=?0\r\nlast-modified: Tue, 30 Jun 2026 17:20:31 GMT\r\ndate: Fri, 03 Jul 2026 15:16:37 GMT\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"22ac7895226f387eababf5e5e85ed605\"\r\ncontent-encoding: zstd\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XVVuzfZgbukgkgM4oC1ZK6HjBQpxNKMTut3VlgGExIYQni%2FelWvCk5YXIqQMf%2F49nRokEC8KUoCzJkWcrToSDRiofA25ujv%2FVEyQf0JG99qaJnvDFGj500EWgt0rkgRWfmtl3zfP\"}]}\r\ncf-ray: a156da321b7376ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":620256,"size_decoded":213253,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (27901), with no line terminators","md5":"5302546edfdb4f0345f173c2c83fe159","sha1":"c2510b2263c4f7c12f59a7e3de15b60143140f0f","sha256":"de2ebb3cb48f6d5a4644345ac4e7cbefb885e4c90870e32aaea69f951c560971","sha512":"4f077345afe85f3ee4c86860948e58e07aaaccf393251965e69e600714d40e1a461a7810758fc820e4237b11684cb17029d8fccbcc82ae1f81b0ba17074019ed","ssdeep":"3072:zojleK8ChS2JrpDZbn/1B/Hvz6PE9pFMpTSz+GlK1n2KZCsGHg+uTgKOU2NkclJn:zQ8crDRn/1B3zxSTSzFk1n3CsGDbB","tlshash":"02d454fb9686d632b74a60dfc79ad791b9126c2b17c414a7584cc1a3b3f408bfb9046c","first_seen":"2026-06-20T19:56:15.903206Z","last_seen":"2026-07-03T15:17:27.613558Z","times_seen":5,"resource_available":true,"data":null}},"time_used":588,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":463,"receive":125,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-03","alert":"Sinkholed","trigger":"checkfirelight.info","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-03","alert":"Sinkholed","trigger":"checkfirelight.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"arbitrum.llamarpc.com/","fqdn":"arbitrum.llamarpc.com","domain":"llamarpc.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://checkfirelight.info/?__cf_chl_f_tk=eGKU5iLblymwxyOeNmNruQ.l3zP2OCXLr.zIScLHzv0-1783091788-1.0.1.1-Fv87xRPeIv3TprVCiZ.2hi.uzbhacVecKxhd1NX43eg","date":"2026-07-03T15:16:38.144Z","timestamp":1783091798144,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"OPTIONS / HTTP/1.1\r\nHost: arbitrum.llamarpc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://checkfirelight.info/\r\nOrigin: https://checkfirelight.info\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-03T19:16:40.563677Z","times_seen":16948877,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.checkfirelight.info/?req=ping","fqdn":"api.checkfirelight.info","domain":"checkfirelight.info","tld":"info"},"ip":{"addr":"104.21.1.68","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://checkfirelight.info/?__cf_chl_f_tk=eGKU5iLblymwxyOeNmNruQ.l3zP2OCXLr.zIScLHzv0-1783091788-1.0.1.1-Fv87xRPeIv3TprVCiZ.2hi.uzbhacVecKxhd1NX43eg","date":"2026-07-03T15:16:40.237Z","timestamp":1783091800237,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"checkfirelight.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Jun 2026 16:28:10 GMT","end":"Mon, 28 Sep 2026 17:26:57 GMT"},"fingerprint":{"sha1":"E2:6B:21:81:9C:B8:AD:23:84:9C:B6:45:4A:80:6C:AB:99:5C:10:CE","sha256":"74:38:CD:39:7B:FF:5B:B8:A3:DA:05:94:43:47:07:5D:75:8F:ED:21:4F:0A:80:2E:4D:AE:4E:E7:5B:5C:7C:DC"}}},"request":{"raw":"GET /?req=ping HTTP/1.1\r\nHost: api.checkfirelight.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://checkfirelight.info/\r\nOrigin: https://checkfirelight.info\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 403 \r\naccept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA\r\ncf-mitigated: challenge\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-security-policy: default-src 'none'; script-src 'nonce-61W7zfTnsaHcVQWXvScwRw' 'unsafe-eval' https://challenges.cloudflare.com; script-src-attr 'none'; style-src 'unsafe-inline'; img-src 'self' https://challenges.cloudflare.com; connect-src 'self' https://challenges.cloudflare.com; frame-src 'self' https://challenges.cloudflare.com blob:; child-src 'self' https://challenges.cloudflare.com blob:; worker-src blob:; form-action http: https:; base-uri 'self'\r\nserver: cloudflare\r\ncritical-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA\r\ncross-origin-embedder-policy: require-corp\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: same-origin\r\norigin-agent-cluster: ?1\r\npermissions-policy: accelerometer=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=(),xr-spatial-tracking=*\r\nreferrer-policy: same-origin\r\nserver-timing: chlray;desc=\"a156da47acddb4ff\", cfExtPri\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hxQ8oaIsE0MP%2BHW%2F3YOWLyjsmokSRDPS%2ByOhbWPLh%2BoVRvr8yQKQeZ4wHjOaRe%2FpBCzlhrQH97%2BnQy7WYErDbqFfixXdClZGRu0qNiSh6H%2Bh0dNMduOS%2FA%2F%2BKH1pnMakJaitttrY5KRNQA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Fri, 03 Jul 2026 15:16:40 GMT\r\npriority: u=4,i=?0\r\ncontent-encoding: zstd\r\ncf-ray: a156da47acddb4ff-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5669,"size_decoded":5623,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (5669), with no line terminators","md5":"19677043e6c3160b667348885eba2cbe","sha1":"21d4fd65f4fc80ff8baf232963f22276aaa451b5","sha256":"f465d945e983437fd5438071d71e3c70fd9b43ae68856240e062db32d8ef9948","sha512":"13e3fee49c2f32e3a2e635e3b214378afa093ee0bd2c3436ecd9bea9d2cead2e56f228335452d22b6d9a15e9a4ce3b7fe807b6dcf02a18755078a46a7e8cd10d","ssdeep":"96:PNyKtoXZzIEb0EaW87Cx5f586VxqoLonxxy49U3fcmnfDzxYzueh8iwmw:PNztkCBwjVxJLonSqVmnLzmys3w","tlshash":"aac13ba7aa35402b97fa6f5678b3b3ac5320f346f7068188d4db895ec1ecf4b4576080","first_seen":"2026-07-03T15:17:27.614223Z","last_seen":"2026-07-03T15:17:27.614223Z","times_seen":1,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":6,"connect":13,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-03","alert":"Sinkholed","trigger":"api.checkfirelight.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-03","alert":"Sinkholed","trigger":"api.checkfirelight.info","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gateway.irys.xyz/6Txn2Htb2ZZS6c5kQnF6q6P8YraMrEyZwCs1fuJs85ku","fqdn":"gateway.irys.xyz","domain":"irys.xyz","tld":"xyz"},"ip":{"addr":"104.20.31.170","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://checkfirelight.info/?__cf_chl_f_tk=eGKU5iLblymwxyOeNmNruQ.l3zP2OCXLr.zIScLHzv0-1783091788-1.0.1.1-Fv87xRPeIv3TprVCiZ.2hi.uzbhacVecKxhd1NX43eg","date":"2026-07-03T15:16:40.417Z","timestamp":1783091800417,"http_version":"HTTP/2","security_state":"secure","security_info":null,"request":{"raw":"GET /6Txn2Htb2ZZS6c5kQnF6q6P8YraMrEyZwCs1fuJs85ku HTTP/1.1\r\nHost: gateway.irys.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://checkfirelight.info/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 \r\ndate: Fri, 03 Jul 2026 15:16:40 GMT\r\ncontent-length: 0\r\nlocation: https://kezjuikcsaiyqvsd2w32dhijntrtnjkh4vwendcd35dw34hhszna.mainnet-1.datasprite-cdn.com/6Txn2Htb2ZZS6c5kQnF6q6P8YraMrEyZwCs1fuJs85ku/\r\nserver: cloudflare\r\naccess-control-allow-credentials: true\r\naccess-control-expose-headers: location, cache-control\r\ncache-control: no-store\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nx-cache-status: BYPASS\r\ncf-cache-status: BYPASS\r\ncf-ray: a156da48ae76569f-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-03T19:16:40.563677Z","times_seen":16948877,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-03","alert":"Sinkholed","trigger":"gateway.irys.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gateway.irys.xyz/5aFEMn7GceUbCyMFsKjcw8DJY9c9PzWNeJv7ragvUWTT","fqdn":"gateway.irys.xyz","domain":"irys.xyz","tld":"xyz"},"ip":{"addr":"104.20.31.170","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://checkfirelight.info/?__cf_chl_f_tk=eGKU5iLblymwxyOeNmNruQ.l3zP2OCXLr.zIScLHzv0-1783091788-1.0.1.1-Fv87xRPeIv3TprVCiZ.2hi.uzbhacVecKxhd1NX43eg","date":"2026-07-03T15:16:40.418Z","timestamp":1783091800418,"http_version":"HTTP/2","security_state":"secure","security_info":null,"request":{"raw":"GET /5aFEMn7GceUbCyMFsKjcw8DJY9c9PzWNeJv7ragvUWTT HTTP/1.1\r\nHost: gateway.irys.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://checkfirelight.info/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 \r\ndate: Fri, 03 Jul 2026 15:16:40 GMT\r\ncontent-length: 0\r\nlocation: https://ipzqcmr26hbzpnzybg3ewzxzuu26ypvig3lp4irbfe643kmo3g5a.mainnet-1.datasprite-cdn.com/5aFEMn7GceUbCyMFsKjcw8DJY9c9PzWNeJv7ragvUWTT/\r\nserver: cloudflare\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-credentials: true\r\ncache-control: no-store\r\naccess-control-expose-headers: cache-control, location\r\nx-cache-status: BYPASS\r\ncf-cache-status: BYPASS\r\ncf-ray: a156da48ae77569f-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-03T19:16:40.563677Z","times_seen":16948877,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-03","alert":"Sinkholed","trigger":"gateway.irys.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gateway.irys.xyz/AhAYuinacUyu1gTLdVFFMVBnVCPnn5hadJ6sQ9oUW2wB","fqdn":"gateway.irys.xyz","domain":"irys.xyz","tld":"xyz"},"ip":{"addr":"104.20.31.170","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://checkfirelight.info/?__cf_chl_f_tk=eGKU5iLblymwxyOeNmNruQ.l3zP2OCXLr.zIScLHzv0-1783091788-1.0.1.1-Fv87xRPeIv3TprVCiZ.2hi.uzbhacVecKxhd1NX43eg","date":"2026-07-03T15:16:40.426Z","timestamp":1783091800426,"http_version":"HTTP/2","security_state":"secure","security_info":null,"request":{"raw":"GET /AhAYuinacUyu1gTLdVFFMVBnVCPnn5hadJ6sQ9oUW2wB HTTP/1.1\r\nHost: gateway.irys.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://checkfirelight.info/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 \r\ndate: Fri, 03 Jul 2026 15:16:40 GMT\r\ncontent-length: 0\r\nlocation: https://sabtndk46ts7f2qr7ndhhfdkgivlnbtawgrzpqlfgsuv3vrcx3ra.mainnet-1.datasprite-cdn.com/AhAYuinacUyu1gTLdVFFMVBnVCPnn5hadJ6sQ9oUW2wB/\r\nserver: cloudflare\r\naccess-control-expose-headers: cache-control, location\r\ncache-control: no-store\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-credentials: true\r\nx-cache-status: BYPASS\r\ncf-cache-status: BYPASS\r\ncf-ray: a156da48be8d569f-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-03T19:16:40.563677Z","times_seen":16948877,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-03","alert":"Sinkholed","trigger":"gateway.irys.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"iv4gcnkpfdnodp3rm73df3m6vnf4ucnpjwdlcsrtmns4li5aljfq.mainnet-1.datasprite-cdn.com/5gBbYXnATXAj3B6zmP8CaV88YB5uB9m8PZrfKJ7WjwUv/","fqdn":"iv4gcnkpfdnodp3rm73df3m6vnf4ucnpjwdlcsrtmns4li5aljfq.mainnet-1.datasprite-cdn.com","domain":"datasprite-cdn.com","tld":"com"},"ip":{"addr":"104.21.15.158","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://checkfirelight.info/?__cf_chl_f_tk=eGKU5iLblymwxyOeNmNruQ.l3zP2OCXLr.zIScLHzv0-1783091788-1.0.1.1-Fv87xRPeIv3TprVCiZ.2hi.uzbhacVecKxhd1NX43eg","date":"2026-07-03T15:16:40.797Z","timestamp":1783091800797,"http_version":"HTTP/3","security_state":"secure","security_info":null,"request":{"raw":"GET /5gBbYXnATXAj3B6zmP8CaV88YB5uB9m8PZrfKJ7WjwUv/ HTTP/1.1\r\nHost: iv4gcnkpfdnodp3rm73df3m6vnf4ucnpjwdlcsrtmns4li5aljfq.mainnet-1.datasprite-cdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://checkfirelight.info/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-03T19:16:40.563677Z","times_seen":16948877,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-03","alert":"Sinkholed","trigger":"iv4gcnkpfdnodp3rm73df3m6vnf4ucnpjwdlcsrtmns4li5aljfq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-03","alert":"Sinkholed","trigger":"iv4gcnkpfdnodp3rm73df3m6vnf4ucnpjwdlcsrtmns4li5aljfq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-03","alert":"Sinkholed","trigger":"iv4gcnkpfdnodp3rm73df3m6vnf4ucnpjwdlcsrtmns4li5aljfq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gateway.irys.xyz/HBj8Z3AkcCFxM5BdpG2ciRACVipaCQnwJ8QboBwkHgX5","fqdn":"gateway.irys.xyz","domain":"irys.xyz","tld":"xyz"},"ip":{"addr":"104.20.31.170","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://checkfirelight.info/?__cf_chl_f_tk=eGKU5iLblymwxyOeNmNruQ.l3zP2OCXLr.zIScLHzv0-1783091788-1.0.1.1-Fv87xRPeIv3TprVCiZ.2hi.uzbhacVecKxhd1NX43eg","date":"2026-07-03T15:16:40.479Z","timestamp":1783091800479,"http_version":"HTTP/2","security_state":"secure","security_info":null,"request":{"raw":"GET /HBj8Z3AkcCFxM5BdpG2ciRACVipaCQnwJ8QboBwkHgX5 HTTP/1.1\r\nHost: gateway.irys.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://checkfirelight.info/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 \r\ndate: Fri, 03 Jul 2026 15:16:40 GMT\r\ncontent-length: 0\r\nlocation: https://6b5g7comjyz3c4cgalgs5qvnmcfq4arqkx6d2np6kdxclsrmnc6a.mainnet-1.datasprite-cdn.com/HBj8Z3AkcCFxM5BdpG2ciRACVipaCQnwJ8QboBwkHgX5/\r\nserver: cloudflare\r\naccess-control-allow-credentials: true\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\ncache-control: no-store\r\naccess-control-expose-headers: cache-control, location\r\nx-cache-status: BYPASS\r\ncf-cache-status: BYPASS\r\ncf-ray: a156da490ee6569f-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-03T19:16:40.563677Z","times_seen":16948877,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-03","alert":"Sinkholed","trigger":"gateway.irys.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"checkfirelight.info/21f62e23c13dade325e4c67f7120144d8c1b000f.png","fqdn":"checkfirelight.info","domain":"checkfirelight.info","tld":"info"},"ip":{"addr":"172.67.128.191","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://checkfirelight.info/?__cf_chl_f_tk=eGKU5iLblymwxyOeNmNruQ.l3zP2OCXLr.zIScLHzv0-1783091788-1.0.1.1-Fv87xRPeIv3TprVCiZ.2hi.uzbhacVecKxhd1NX43eg","date":"2026-07-03T15:16:36.821Z","timestamp":1783091796821,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"checkfirelight.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Jun 2026 16:28:10 GMT","end":"Mon, 28 Sep 2026 17:26:57 GMT"},"fingerprint":{"sha1":"E2:6B:21:81:9C:B8:AD:23:84:9C:B6:45:4A:80:6C:AB:99:5C:10:CE","sha256":"74:38:CD:39:7B:FF:5B:B8:A3:DA:05:94:43:47:07:5D:75:8F:ED:21:4F:0A:80:2E:4D:AE:4E:E7:5B:5C:7C:DC"}}},"request":{"raw":"GET /21f62e23c13dade325e4c67f7120144d8c1b000f.png HTTP/1.1\r\nHost: checkfirelight.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://checkfirelight.info/?__cf_chl_f_tk=eGKU5iLblymwxyOeNmNruQ.l3zP2OCXLr.zIScLHzv0-1783091788-1.0.1.1-Fv87xRPeIv3TprVCiZ.2hi.uzbhacVecKxhd1NX43eg\r\nCookie: cf_clearance=x7CrPDFa3VxjzKhrvkEtAP2DZJf60Q5q9K_NH0LnzxU-1783091796-1.2.1.1-XBW1i5n_SDimWqwX6Vod0hbq9bRwT8EgUnJ3vfsz7d03j.ElHU8e.vZVTsRQNgL6zQtCZ4AcOM7zUV3ZCjlG7.5pbuGDdkUEFeHF6a3XncUT7oWL6nykc7ZemxMFnSF.jP0HtU3YPWbNZSyY1DwDDJsHKfrO.QDrYbJ_Xt4pam1O9dvV2z8RwqkAhfg0ooK3FIUgBnpqmlpCvkrJ4FjiBNY5fUQszDf9hR_5V2FcrRvb6NfDKTu9wRl1JIYx.KoEKdHLoXfET8nvf9FBigAOgaC4gvY6FCohBYjcTNHnz9CvY.oFpNookrmmKc_aKOubsA9qrVprld9Oy.u2o8mmIHi8WkYxzprYORqFzBRs2K4UpY0OOsFmXH_nWCes.q2ii5Jl5DTBlO_B5yBY.QiwNiF.zFiseZKEoEE3u9FpAbcSIVRV2cKFYjyRDGl_Aek68EuYCh.mz2sN.hwRdkqbwRN.l3tOXqiv2Pp4kueYbdoLTRBU2_ON7Vss.5M7..9z\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: image/png\r\netag: \"325c005cc1e45972382827f49da0ea96\"\r\nlast-modified: Tue, 30 Jun 2026 17:20:30 GMT\r\ndate: Fri, 03 Jul 2026 15:16:37 GMT\r\nserver: cloudflare\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hN79wBtunpaZwb9hzr0oI5LVOtrgMk95oWH%2BuluFy5HVJOSpHIVO4K%2BDEyXew5ZH6vShILaA%2BGKq1mmNw5MOEXx4d3n6a4eqUUyLQqKiXq4NRvuF5JJcClSpJiYiG5lxGnPH4kOF\"}]}\r\ncf-ray: a156da322b7476ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 9561\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9561,"size_decoded":10270,"mime_type":"image/png","magic":"PNG image data, 512 x 330, 8-bit colormap, non-interlaced","md5":"325c005cc1e45972382827f49da0ea96","sha1":"21f62e23c13dade325e4c67f7120144d8c1b000f","sha256":"28a269ed570eb9464988f5f1f95f0ad058af621737c019168764e7ff9729db5e","sha512":"c7a86a6b652478b09fd68683da1c1aa291c52bdb6dcf90f92c1c1876b41e183827e46a4957273291708f691d769268355a175b5cfed0c9107da5ee3b878ddb42","ssdeep":"192:UN57AmbeVJVa3qiQXLS/w78IuvOu1U1MOb9ndxMCYdEyGsSTtY:ituVpiy76vOuW3N9zTtY","tlshash":"ee12c0517a4fa87f5687233802aa639154426de4eee9dc2f07737e3c98281b172586cf","first_seen":"2026-04-24T15:23:09.435668Z","last_seen":"2026-07-03T15:17:27.615186Z","times_seen":19,"resource_available":false,"data":null}},"time_used":434,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":434,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-03","alert":"Sinkholed","trigger":"checkfirelight.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-03","alert":"Sinkholed","trigger":"checkfirelight.info","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"arb1.arbitrum.io/rpc","fqdn":"arb1.arbitrum.io","domain":"arbitrum.io","tld":"io"},"ip":{"addr":"104.20.39.96","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://checkfirelight.info/?__cf_chl_f_tk=eGKU5iLblymwxyOeNmNruQ.l3zP2OCXLr.zIScLHzv0-1783091788-1.0.1.1-Fv87xRPeIv3TprVCiZ.2hi.uzbhacVecKxhd1NX43eg","date":"2026-07-03T15:16:38.133Z","timestamp":1783091798133,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"arbitrum.io","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 05 May 2026 15:12:06 GMT","end":"Mon, 03 Aug 2026 15:12:05 GMT"},"fingerprint":{"sha1":"D3:54:F9:E1:4F:A1:F9:48:7A:90:AD:25:77:28:AC:8B:25:9F:8A:9B","sha256":"68:2B:C8:BC:79:16:DB:47:A5:AC:06:03:88:EF:7E:35:91:D6:08:8C:3A:52:2B:59:54:D3:FD:A9:7C:A4:61:06"}}},"request":{"raw":"POST /rpc HTTP/1.1\r\nHost: arb1.arbitrum.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://checkfirelight.info/\r\nContent-Type: application/json\r\nContent-Length: 136\r\nOrigin: https://checkfirelight.info\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 03 Jul 2026 15:16:38 GMT\r\ncontent-type: application/json\r\ncontent-length: 206\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nvary: Origin, accept-encoding\r\nx-envoy-upstream-service-time: 2\r\nserver: cloudflare\r\ncf-cache-status: DYNAMIC\r\ncf-ray: a156da3b5e714e4c-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":423,"size_decoded":528,"mime_type":"application/json","magic":"JSON text data","md5":"71a318977785f5eeb3ac998855678f02","sha1":"1ceb0da3b93bdc179004b4c69c7273a9fd6b3592","sha256":"6ac7df5865cd508fe576ed84f1c4bc0f6cb45e768559599b45805ec978f399df","sha512":"b10fd1b2611b28a1e8e6a4319458862b55f3f7969344be166875dbf3df05a43998e30d8c0f5c370cb83221995830a7e6080da409c82407080b2356eff1a59e16","ssdeep":"","tlshash":"00e02ba4204ba596f16808bbe6c43661b075724bc9e1cf83098df8040a409a1eb0e55c","first_seen":"2026-07-03T15:17:27.608074Z","last_seen":"2026-07-03T15:17:27.608074Z","times_seen":1,"resource_available":false,"data":null}},"time_used":133,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":133,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gateway.irys.xyz/HeB3Cq7j5UgGvECfes722J2hB6d3zFNAX8qrtvdaebbj","fqdn":"gateway.irys.xyz","domain":"irys.xyz","tld":"xyz"},"ip":{"addr":"104.20.31.170","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://checkfirelight.info/?__cf_chl_f_tk=eGKU5iLblymwxyOeNmNruQ.l3zP2OCXLr.zIScLHzv0-1783091788-1.0.1.1-Fv87xRPeIv3TprVCiZ.2hi.uzbhacVecKxhd1NX43eg","date":"2026-07-03T15:16:40.420Z","timestamp":1783091800420,"http_version":"HTTP/2","security_state":"secure","security_info":null,"request":{"raw":"GET /HeB3Cq7j5UgGvECfes722J2hB6d3zFNAX8qrtvdaebbj HTTP/1.1\r\nHost: gateway.irys.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://checkfirelight.info/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 \r\ndate: Fri, 03 Jul 2026 15:16:40 GMT\r\ncontent-length: 0\r\nlocation: https://65anjlffv6f37wsp5aoj34ltgjeakkozcoaujzb6feeub2bhg67a.mainnet-1.datasprite-cdn.com/HeB3Cq7j5UgGvECfes722J2hB6d3zFNAX8qrtvdaebbj/\r\nserver: cloudflare\r\naccess-control-allow-credentials: true\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\ncache-control: no-store\r\naccess-control-expose-headers: location, cache-control\r\nx-cache-status: BYPASS\r\ncf-cache-status: BYPASS\r\ncf-ray: a156da48ae78569f-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-03T19:16:40.563677Z","times_seen":16948877,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-03","alert":"Sinkholed","trigger":"gateway.irys.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gateway.irys.xyz/4wjb3TudcCwb4QiUeXRMGVHnVoozBbvLCZzu92xYgcUx","fqdn":"gateway.irys.xyz","domain":"irys.xyz","tld":"xyz"},"ip":{"addr":"104.20.31.170","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://checkfirelight.info/?__cf_chl_f_tk=eGKU5iLblymwxyOeNmNruQ.l3zP2OCXLr.zIScLHzv0-1783091788-1.0.1.1-Fv87xRPeIv3TprVCiZ.2hi.uzbhacVecKxhd1NX43eg","date":"2026-07-03T15:16:40.439Z","timestamp":1783091800439,"http_version":"HTTP/2","security_state":"secure","security_info":null,"request":{"raw":"GET /4wjb3TudcCwb4QiUeXRMGVHnVoozBbvLCZzu92xYgcUx HTTP/1.1\r\nHost: gateway.irys.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://checkfirelight.info/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 \r\ndate: Fri, 03 Jul 2026 15:16:40 GMT\r\ncontent-length: 0\r\nlocation: https://hkmjhyubcmyt55tyslqmyt4arfmczeuf7xtrysanzghe6n5ezduq.mainnet-1.datasprite-cdn.com/4wjb3TudcCwb4QiUeXRMGVHnVoozBbvLCZzu92xYgcUx/\r\nserver: cloudflare\r\naccess-control-expose-headers: cache-control, location\r\ncache-control: no-store\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-credentials: true\r\nx-cache-status: BYPASS\r\ncf-cache-status: BYPASS\r\ncf-ray: a156da48ce9c569f-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-03T19:16:40.563677Z","times_seen":16948877,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-03","alert":"Sinkholed","trigger":"gateway.irys.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gateway.irys.xyz/9rVKcKYLPvNfTyUKrT2QXE8XwqyHgTdHF5TY6zV8pNSR","fqdn":"gateway.irys.xyz","domain":"irys.xyz","tld":"xyz"},"ip":{"addr":"104.20.31.170","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://checkfirelight.info/?__cf_chl_f_tk=eGKU5iLblymwxyOeNmNruQ.l3zP2OCXLr.zIScLHzv0-1783091788-1.0.1.1-Fv87xRPeIv3TprVCiZ.2hi.uzbhacVecKxhd1NX43eg","date":"2026-07-03T15:16:40.502Z","timestamp":1783091800502,"http_version":"HTTP/2","security_state":"secure","security_info":null,"request":{"raw":"GET /9rVKcKYLPvNfTyUKrT2QXE8XwqyHgTdHF5TY6zV8pNSR HTTP/1.1\r\nHost: gateway.irys.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://checkfirelight.info/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 \r\ndate: Fri, 03 Jul 2026 15:16:40 GMT\r\ncontent-length: 0\r\nlocation: https://qofpup6nmdjajko4dxgkt5mq2htvoe4uqxfbycxyrybfw7p5to7a.mainnet-1.datasprite-cdn.com/9rVKcKYLPvNfTyUKrT2QXE8XwqyHgTdHF5TY6zV8pNSR/\r\nserver: cloudflare\r\naccess-control-expose-headers: cache-control, location\r\naccess-control-allow-credentials: true\r\ncache-control: no-store\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nx-cache-status: BYPASS\r\ncf-cache-status: BYPASS\r\ncf-ray: a156da492f1c569f-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-03T19:16:40.563677Z","times_seen":16948877,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-03","alert":"Sinkholed","trigger":"gateway.irys.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ipgv6k3cx6mftzzxhfhhzv64ydqttwwd4p6dtqjffey5ckd47buq.mainnet-1.datasprite-cdn.com/5ZfwxdeiMwp91zkMTo5ABo4XYBcStqopPe52LZRVUSwr/","fqdn":"ipgv6k3cx6mftzzxhfhhzv64ydqttwwd4p6dtqjffey5ckd47buq.mainnet-1.datasprite-cdn.com","domain":"datasprite-cdn.com","tld":"com"},"ip":{"addr":"104.21.15.158","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://checkfirelight.info/?__cf_chl_f_tk=eGKU5iLblymwxyOeNmNruQ.l3zP2OCXLr.zIScLHzv0-1783091788-1.0.1.1-Fv87xRPeIv3TprVCiZ.2hi.uzbhacVecKxhd1NX43eg","date":"2026-07-03T15:16:40.798Z","timestamp":1783091800798,"http_version":"HTTP/3","security_state":"secure","security_info":null,"request":{"raw":"GET /5ZfwxdeiMwp91zkMTo5ABo4XYBcStqopPe52LZRVUSwr/ HTTP/1.1\r\nHost: ipgv6k3cx6mftzzxhfhhzv64ydqttwwd4p6dtqjffey5ckd47buq.mainnet-1.datasprite-cdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://checkfirelight.info/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-03T19:16:40.563677Z","times_seen":16948877,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-03","alert":"Sinkholed","trigger":"ipgv6k3cx6mftzzxhfhhzv64ydqttwwd4p6dtqjffey5ckd47buq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-03","alert":"Sinkholed","trigger":"ipgv6k3cx6mftzzxhfhhzv64ydqttwwd4p6dtqjffey5ckd47buq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-03","alert":"Sinkholed","trigger":"ipgv6k3cx6mftzzxhfhhzv64ydqttwwd4p6dtqjffey5ckd47buq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gateway.irys.xyz/BmRja2B3uNcEnmSf4spQwbDhyXoU8SpESENkTyQBN6Wr","fqdn":"gateway.irys.xyz","domain":"irys.xyz","tld":"xyz"},"ip":{"addr":"104.20.31.170","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://checkfirelight.info/?__cf_chl_f_tk=eGKU5iLblymwxyOeNmNruQ.l3zP2OCXLr.zIScLHzv0-1783091788-1.0.1.1-Fv87xRPeIv3TprVCiZ.2hi.uzbhacVecKxhd1NX43eg","date":"2026-07-03T15:16:40.463Z","timestamp":1783091800463,"http_version":"HTTP/2","security_state":"secure","security_info":null,"request":{"raw":"GET /BmRja2B3uNcEnmSf4spQwbDhyXoU8SpESENkTyQBN6Wr HTTP/1.1\r\nHost: gateway.irys.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://checkfirelight.info/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 \r\ndate: Fri, 03 Jul 2026 15:16:40 GMT\r\ncontent-length: 0\r\nlocation: https://t73giqqwtpkhhdyyeszo2vv4sqyyuafuk7y2deshpm3xftc7jg7q.mainnet-1.datasprite-cdn.com/BmRja2B3uNcEnmSf4spQwbDhyXoU8SpESENkTyQBN6Wr/\r\nserver: cloudflare\r\naccess-control-expose-headers: cache-control, location\r\naccess-control-allow-credentials: true\r\ncache-control: no-store\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nx-cache-status: BYPASS\r\ncf-cache-status: BYPASS\r\ncf-ray: a156da48eece569f-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-03T19:16:40.563677Z","times_seen":16948877,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-03","alert":"Sinkholed","trigger":"gateway.irys.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/pat/a156da0639454c11/1783091790221/9c0f12f8850105bb27d956412fbda0d8f314c7091743fb4f60c6a2048f488c99/Ad1nZJV-UU-mQZy","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/av0/rch/n1hp3/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","date":"2026-07-03T15:16:30.605Z","timestamp":1783091790605,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"challenges.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 16 Jun 2026 20:15:28 GMT","end":"Mon, 14 Sep 2026 21:15:13 GMT"},"fingerprint":{"sha1":"77:27:72:42:CF:51:E8:8C:7C:3E:8C:4C:A1:F0:9A:86:96:B9:0A:16","sha256":"ED:7C:F7:38:B3:0F:00:86:32:D1:14:CE:C0:FF:CA:0E:7C:86:EE:49:51:EF:A4:4B:AA:5C:B6:7C:00:B5:3D:F3"}}},"request":{"raw":"GET /cdn-cgi/challenge-platform/h/b/pat/a156da0639454c11/1783091790221/9c0f12f8850105bb27d956412fbda0d8f314c7091743fb4f60c6a2048f488c99/Ad1nZJV-UU-mQZy HTTP/1.1\r\nHost: challenges.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/av0/rch/n1hp3/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 401 \r\ndate: Fri, 03 Jul 2026 15:16:30 GMT\r\ncontent-type: text/plain; charset=utf-8\r\ncontent-length: 1\r\nwww-authenticate: PrivateToken challenge=\"AAIAGXBhdC1pc3N1ZXIuY2xvdWRmbGFyZS5jb20gnA8S-IUBBbsn2VZBL72g2PMUxwkXQ_tPYMaiBI9IjJkAGWNoYWxsZW5nZXMuY2xvdWRmbGFyZS5jb20=\", token-key=\"MIIBUjA9BgkqhkiG9w0BAQowMKANMAsGCWCGSAFlAwQCAqEaMBgGCSqGSIb3DQEBCDALBglghkgBZQMEAgKiAwIBMAOCAQ8AMIIBCgKCAQEAoy6k2FYWMQLRxIENh8zdstEjgMRc3RMX-l2JX5fx9UyiZZQZUxW2tgyiO3Z2VYXhnQ1TtiLATp22iKh5c3aVRJBo8rZ0nrnF3H1FMA_N0sKv4ZSu_030tk1la-Rqk49sWKiNkOGovBX4Cwy3tdFmzBPiwVXT2_J0UpvfmNaTFNePWJiXWzb716SqteFy8WczV7nnRuX-VUyahHquG7C1qZlG3kxYwNLnwSzU6aaVs_JgMdo6LcqL9aEUCXmyYHaLD-FE77ajVf41WTFFYkv6h4gh_C85dDPq9_2VNR-rp10Ep5Iiwj8i7kfPpCf71HtBGgLfe2riCIAf0CMTOm0ECwIDAQAB\", max-age=20, PrivateToken challenge=\"AAIAHXNhdC5wYXQtaXNzdWVyLmNsb3VkZmxhcmUuY29tIJwPEviFAQW7J9lWQS-9oNjzFMcJF0P7T2DGogSPSIyZABljaGFsbGVuZ2VzLmNsb3VkZmxhcmUuY29t\", token-key=\"MIIBUjA9BgkqhkiG9w0BAQowMKANMAsGCWCGSAFlAwQCAqEaMBgGCSqGSIb3DQEBCDALBglghkgBZQMEAgKiAwIBMAOCAQ8AMIIBCgKCAQEA2p5iV60kg8BIPfQkG0zPHcTilBFZnLpS-NhJadKo7_gxoK3CeP92IpEJSDBxRNrjs2X11IbEYlm_cB3jyu-AekRza1tt-f1c4Mao6uNS_3HclgMQyETdOuL_hMeTp0BXANlPSJPeepvkZEShWgZAEE7meK_OJuNEJNUFMSe3unc2fPssSIBrHnVXbG-zyXCsz8jF2ElexD_d8pO-hZ7TCesYE8lR4oXfJ5vMM7RQ_ozprHLp7tigo20qIQ3lBoWoMxhBkVKQj0tv7lJMC7XScFI-eZe0WRbR16J5i3RmHhzaVZyEfLimy6w__0F-7VFOEyqqQX_vYxhulh-KbxxsrwIDAQAB\", max-age=20, PrivateToken challenge=\"AAIALHBwLWlzc3Vlci1wcm9kdWN0aW9uLnJlc2VhcmNoLmNsb3VkZmxhcmUuY29tIJwPEviFAQW7J9lWQS-9oNjzFMcJF0P7T2DGogSPSIyZABljaGFsbGVuZ2VzLmNsb3VkZmxhcmUuY29t\", token-key=\"MIIBUjA9BgkqhkiG9w0BAQowMKANMAsGCWCGSAFlAwQCAqEaMBgGCSqGSIb3DQEBCDALBglghkgBZQMEAgKiAwIBMAOCAQ8AMIIBCgKCAQEAuScRiQlGvqpsm0933uZ2uO-fGogyh7V8uGJn78PY0S5iRF_riUSxQzQdz3VavcEj5KdWxaSQ-sw0xmISl5r-DWDEuhUlc3ymHVvlHdLtElkn9u3acGn9WTOGOSka-SbASXSi5GR47N1puyVCzD8rI33TRLADSMtzb_fIBz9UCxz8-UQcyTVcoQ_G8_kjIjnqfaWuWVESH59cxOcb-5Nmb3sdazPmBhwJTbq7bL_IFKv9Ea8gZhlOXpqOZIDWNFnCGtFibtX1rhxbkg0kYrrfnO4hEmZisNf2TFcl_xncvBUgZDb3aIKUJ3GeXsNM21n5Hez3s23ezkEP1zMtXJAOgwIDAQAB\", max-age=20\r\npriority: u=6,i=?0\r\nserver: cloudflare\r\ncf-ray: a156da0b4aa44c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"401","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1,"size_decoded":2171,"mime_type":"text/plain; charset=utf-8","magic":"very short file (no magic)","md5":"ff44570aca8241914870afbc310cdb85","sha1":"58668e7669fd564d99db5d581fcdb6a5618440b5","sha256":"6da43b944e494e885e69af021f93c6d9331c78aa228084711429160a5bbd15b5","sha512":"3c266c0035de59eab2a0dd31b3dcb4a9dd157b310289e5db9ab4f8c2fddb7433466d48f25da7ad735a1cb8f2935aa612ad1f62f0efcece3933ba9979082e2304","ssdeep":"","tlshash":"c700000000000003c00000300000003000000000000000000003000000000000000000","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-03T19:16:17.91342Z","times_seen":475733,"resource_available":true,"data":null}},"time_used":4,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":4,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"arbitrum.drpc.org/","fqdn":"arbitrum.drpc.org","domain":"drpc.org","tld":"org"},"ip":{"addr":"104.18.10.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://checkfirelight.info/?__cf_chl_f_tk=eGKU5iLblymwxyOeNmNruQ.l3zP2OCXLr.zIScLHzv0-1783091788-1.0.1.1-Fv87xRPeIv3TprVCiZ.2hi.uzbhacVecKxhd1NX43eg","date":"2026-07-03T15:16:38.161Z","timestamp":1783091798161,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"drpc.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 14 Jun 2026 23:01:08 GMT","end":"Sun, 13 Sep 2026 00:00:59 GMT"},"fingerprint":{"sha1":"7F:E5:3C:EC:15:AC:2B:17:FE:8B:3B:16:E4:25:9A:40:37:43:63:45","sha256":"DF:D3:75:05:E3:1C:E5:C2:B8:D6:2A:66:75:39:9A:D3:91:D6:86:E7:7B:11:D6:84:3E:A1:0F:FF:79:47:06:19"}}},"request":{"raw":"OPTIONS / HTTP/1.1\r\nHost: arbitrum.drpc.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://checkfirelight.info/\r\nOrigin: https://checkfirelight.info\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 204 \r\ndate: Fri, 03 Jul 2026 15:16:38 GMT\r\naccess-control-allow-headers: content-type\r\naccess-control-allow-methods: POST\r\naccess-control-allow-origin: https://checkfirelight.info\r\naccess-control-max-age: 600\r\ncontent-encoding: gzip\r\nvary: Accept-Encoding, Origin\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\ncf-ray: a156da3a9c7c120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":489,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-03T19:16:40.563677Z","times_seen":16948877,"resource_available":true,"data":null}},"time_used":220,"timings":{"blocked":-1,"dns":0,"connect":15,"send":0,"wait":205,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gateway.irys.xyz/3P9VdFHyd9sSnhWw6vt5skH79MDNbmAPLeKZ3WU6GZjD","fqdn":"gateway.irys.xyz","domain":"irys.xyz","tld":"xyz"},"ip":{"addr":"104.20.31.170","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://checkfirelight.info/?__cf_chl_f_tk=eGKU5iLblymwxyOeNmNruQ.l3zP2OCXLr.zIScLHzv0-1783091788-1.0.1.1-Fv87xRPeIv3TprVCiZ.2hi.uzbhacVecKxhd1NX43eg","date":"2026-07-03T15:16:40.416Z","timestamp":1783091800416,"http_version":"HTTP/2","security_state":"secure","security_info":null,"request":{"raw":"GET /3P9VdFHyd9sSnhWw6vt5skH79MDNbmAPLeKZ3WU6GZjD HTTP/1.1\r\nHost: gateway.irys.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://checkfirelight.info/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 \r\ndate: Fri, 03 Jul 2026 15:16:40 GMT\r\ncontent-length: 0\r\nlocation: https://enr4cxf3dl3xz57mcmmg6wlxvi7gda2w5xdradzypkaigsdonhma.mainnet-1.datasprite-cdn.com/3P9VdFHyd9sSnhWw6vt5skH79MDNbmAPLeKZ3WU6GZjD/\r\nserver: cloudflare\r\naccess-control-allow-credentials: true\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\ncache-control: no-store\r\naccess-control-expose-headers: cache-control, location\r\nx-cache-status: BYPASS\r\ncf-cache-status: BYPASS\r\ncf-ray: a156da48ce9e569f-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-03T19:16:40.563677Z","times_seen":16948877,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-03","alert":"Sinkholed","trigger":"gateway.irys.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lqm65l4rsie7lcqzwyygqd4xmycpt6vpx7jqzqhlj6x4xnaxvvva.mainnet-1.datasprite-cdn.com/7CXSgx8jsxLxjzMCMaadAm2zy2HXnfgpYFs2sF6C1kEV/","fqdn":"lqm65l4rsie7lcqzwyygqd4xmycpt6vpx7jqzqhlj6x4xnaxvvva.mainnet-1.datasprite-cdn.com","domain":"datasprite-cdn.com","tld":"com"},"ip":{"addr":"104.21.15.158","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://checkfirelight.info/?__cf_chl_f_tk=eGKU5iLblymwxyOeNmNruQ.l3zP2OCXLr.zIScLHzv0-1783091788-1.0.1.1-Fv87xRPeIv3TprVCiZ.2hi.uzbhacVecKxhd1NX43eg","date":"2026-07-03T15:16:40.830Z","timestamp":1783091800830,"http_version":"HTTP/3","security_state":"secure","security_info":null,"request":{"raw":"GET /7CXSgx8jsxLxjzMCMaadAm2zy2HXnfgpYFs2sF6C1kEV/ HTTP/1.1\r\nHost: lqm65l4rsie7lcqzwyygqd4xmycpt6vpx7jqzqhlj6x4xnaxvvva.mainnet-1.datasprite-cdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://checkfirelight.info/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-03T19:16:40.563677Z","times_seen":16948877,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-03","alert":"Sinkholed","trigger":"lqm65l4rsie7lcqzwyygqd4xmycpt6vpx7jqzqhlj6x4xnaxvvva.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-03","alert":"Sinkholed","trigger":"lqm65l4rsie7lcqzwyygqd4xmycpt6vpx7jqzqhlj6x4xnaxvvva.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-03","alert":"Sinkholed","trigger":"lqm65l4rsie7lcqzwyygqd4xmycpt6vpx7jqzqhlj6x4xnaxvvva.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/fo/1625915179:1783087218:WvWUDcOSiYlRM35LNHGLW59lbd1JzsbZuZXYZJmNj_c/a156da0639454c11/Q.G9HOlRYSmNPReGLsqtCH118tX8T9xo230iYDyoWbg-1783091789-1.2.1.1-H5LoDq9mPl2jDPRt2DEGipOcK9Hb3_yihEmR.mYE4whTtV46XovPxhWc45rBhGHQ","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/av0/rch/n1hp3/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","date":"2026-07-03T15:16:36.154Z","timestamp":1783091796154,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"challenges.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 16 Jun 2026 20:15:28 GMT","end":"Mon, 14 Sep 2026 21:15:13 GMT"},"fingerprint":{"sha1":"77:27:72:42:CF:51:E8:8C:7C:3E:8C:4C:A1:F0:9A:86:96:B9:0A:16","sha256":"ED:7C:F7:38:B3:0F:00:86:32:D1:14:CE:C0:FF:CA:0E:7C:86:EE:49:51:EF:A4:4B:AA:5C:B6:7C:00:B5:3D:F3"}}},"request":{"raw":"POST /cdn-cgi/challenge-platform/h/b/fo/1625915179:1783087218:WvWUDcOSiYlRM35LNHGLW59lbd1JzsbZuZXYZJmNj_c/a156da0639454c11/Q.G9HOlRYSmNPReGLsqtCH118tX8T9xo230iYDyoWbg-1783091789-1.2.1.1-H5LoDq9mPl2jDPRt2DEGipOcK9Hb3_yihEmR.mYE4whTtV46XovPxhWc45rBhGHQ HTTP/1.1\r\nHost: challenges.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/av0/rch/n1hp3/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto\r\ncf-chl: Q.G9HOlRYSmNPReGLsqtCH118tX8T9xo230iYDyoWbg-1783091789-1.2.1.1-H5LoDq9mPl2jDPRt2DEGipOcK9Hb3_yihEmR.mYE4whTtV46XovPxhWc45rBhGHQ\r\ncf-chl-ra: 0\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 85271\r\nOrigin: https://challenges.cloudflare.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 03 Jul 2026 15:16:36 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncf-chl-out-s: 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$Kwn7rtP9IZPwT35/yjfq5A==\r\ncf-chl-out: 8/2Cx8yhg4uwsq0e3fUS/f+685xYU6yS3dt1ZCyF7Tlz+bYvln0B+Y6ZePtzkChMnYrgFW1g/2tnpQhOR1K5O1sSNYababoeKfrytq+8MinsLNFCAIzoI10iTdLIEm2AmBkmHPERZ7fnNXl1YuexaA==$N194RnPRvWA6ILoml67u1g==\r\ntiming-allow-origin: https://challenges.cloudflare.com\r\npriority: u=3,i=?0\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: a156da2dfb2f4c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6512,"size_decoded":8970,"mime_type":"text/html; charset=UTF-8","magic":"ASCII text, with very long lines (6512), with no line terminators","md5":"780ada0a4234a4c52b0ca18fa26b0e0c","sha1":"b355e088445d9f7980a426302149492b9348322b","sha256":"4964105412c0277ba2483980d80b3f11b97501ab28f97dbf13928d1f2292d779","sha512":"5365ebaa43f95bf297cb81d040174761e29b828a1dd49369af50347c4eb4f52aa0b6da5d5ca78c96d8a577c6e464a3ebe5d8b11a95de4ce12017f635f9a4c482","ssdeep":"192:NFSpU14Eksp03ASuA1gf4GJ1JKoeLC3quM:NgpW4EkS0vu/f4inK/e3jM","tlshash":"5ed19ede3e23f7960f5cd673237d1e1e984aec81e0734b69b9355d1bc46660148dc204","first_seen":"2026-07-03T15:17:27.616963Z","last_seen":"2026-07-03T15:17:27.616963Z","times_seen":1,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"checkfirelight.info/fce5de906e797a1cb5706ff97ad17ccd1a83706a.png","fqdn":"checkfirelight.info","domain":"checkfirelight.info","tld":"info"},"ip":{"addr":"172.67.128.191","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://checkfirelight.info/?__cf_chl_f_tk=eGKU5iLblymwxyOeNmNruQ.l3zP2OCXLr.zIScLHzv0-1783091788-1.0.1.1-Fv87xRPeIv3TprVCiZ.2hi.uzbhacVecKxhd1NX43eg","date":"2026-07-03T15:16:36.826Z","timestamp":1783091796826,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"checkfirelight.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Jun 2026 16:28:10 GMT","end":"Mon, 28 Sep 2026 17:26:57 GMT"},"fingerprint":{"sha1":"E2:6B:21:81:9C:B8:AD:23:84:9C:B6:45:4A:80:6C:AB:99:5C:10:CE","sha256":"74:38:CD:39:7B:FF:5B:B8:A3:DA:05:94:43:47:07:5D:75:8F:ED:21:4F:0A:80:2E:4D:AE:4E:E7:5B:5C:7C:DC"}}},"request":{"raw":"GET /fce5de906e797a1cb5706ff97ad17ccd1a83706a.png HTTP/1.1\r\nHost: checkfirelight.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://checkfirelight.info/?__cf_chl_f_tk=eGKU5iLblymwxyOeNmNruQ.l3zP2OCXLr.zIScLHzv0-1783091788-1.0.1.1-Fv87xRPeIv3TprVCiZ.2hi.uzbhacVecKxhd1NX43eg\r\nCookie: cf_clearance=x7CrPDFa3VxjzKhrvkEtAP2DZJf60Q5q9K_NH0LnzxU-1783091796-1.2.1.1-XBW1i5n_SDimWqwX6Vod0hbq9bRwT8EgUnJ3vfsz7d03j.ElHU8e.vZVTsRQNgL6zQtCZ4AcOM7zUV3ZCjlG7.5pbuGDdkUEFeHF6a3XncUT7oWL6nykc7ZemxMFnSF.jP0HtU3YPWbNZSyY1DwDDJsHKfrO.QDrYbJ_Xt4pam1O9dvV2z8RwqkAhfg0ooK3FIUgBnpqmlpCvkrJ4FjiBNY5fUQszDf9hR_5V2FcrRvb6NfDKTu9wRl1JIYx.KoEKdHLoXfET8nvf9FBigAOgaC4gvY6FCohBYjcTNHnz9CvY.oFpNookrmmKc_aKOubsA9qrVprld9Oy.u2o8mmIHi8WkYxzprYORqFzBRs2K4UpY0OOsFmXH_nWCes.q2ii5Jl5DTBlO_B5yBY.QiwNiF.zFiseZKEoEE3u9FpAbcSIVRV2cKFYjyRDGl_Aek68EuYCh.mz2sN.hwRdkqbwRN.l3tOXqiv2Pp4kueYbdoLTRBU2_ON7Vss.5M7..9z\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: image/png\r\netag: \"46f91da4dfa69727c3e5bae072b02e01\"\r\nlast-modified: Tue, 30 Jun 2026 17:20:30 GMT\r\ndate: Fri, 03 Jul 2026 15:16:37 GMT\r\nserver: cloudflare\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PTEt8SZ83KoegrHFGHC6A%2B4UN7MsiFUky9qIHjWNko7OoaGPWh8VCyaYnM79r8xbkL6Z0StRYRmgdIPD3vgYwD47BcMe%2BClTyHp600dziQf2M7FpTWRFtVaHa7CCgHRjlGDItw7v\"}]}\r\ncf-ray: a156da322b7776ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 9342\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9342,"size_decoded":10049,"mime_type":"image/png","magic":"PNG image data, 512 x 384, 8-bit colormap, non-interlaced","md5":"46f91da4dfa69727c3e5bae072b02e01","sha1":"fce5de906e797a1cb5706ff97ad17ccd1a83706a","sha256":"070197793e20ccfd87737c8113c2926f251c8a98a7e697f369fa54b2c92ac7c4","sha512":"9dda62e51b554abc588734254c7da9039d4ec2dae4fd29ace3677e18df4bfb82063b80d00740a4f3f690c50bb94bb9dd14a941a6a17b78391130abff0608faaf","ssdeep":"192:trYYNyE1elD5GjyZ2PxQwhtNtEjbUWZpUDSvdpG6SPimnVllzjGE:hBNyE1cD5XZi5yjZpUgp4imRnZ","tlshash":"be12afca5a59d8d68b34b904d8c5349d79254b9f12fe5e930703203929cb3c8c6ef7b0","first_seen":"2026-04-29T09:31:56.271822Z","last_seen":"2026-07-03T15:17:27.618086Z","times_seen":19,"resource_available":false,"data":null}},"time_used":493,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":492,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-03","alert":"Sinkholed","trigger":"checkfirelight.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-03","alert":"Sinkholed","trigger":"checkfirelight.info","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"checkfirelight.info/15228e557d41585df16d08afb36f3a43c6222ec7.mp4","fqdn":"checkfirelight.info","domain":"checkfirelight.info","tld":"info"},"ip":{"addr":"172.67.128.191","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://checkfirelight.info/?__cf_chl_f_tk=eGKU5iLblymwxyOeNmNruQ.l3zP2OCXLr.zIScLHzv0-1783091788-1.0.1.1-Fv87xRPeIv3TprVCiZ.2hi.uzbhacVecKxhd1NX43eg","date":"2026-07-03T15:16:36.981Z","timestamp":1783091796981,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"checkfirelight.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Jun 2026 16:28:10 GMT","end":"Mon, 28 Sep 2026 17:26:57 GMT"},"fingerprint":{"sha1":"E2:6B:21:81:9C:B8:AD:23:84:9C:B6:45:4A:80:6C:AB:99:5C:10:CE","sha256":"74:38:CD:39:7B:FF:5B:B8:A3:DA:05:94:43:47:07:5D:75:8F:ED:21:4F:0A:80:2E:4D:AE:4E:E7:5B:5C:7C:DC"}}},"request":{"raw":"GET /15228e557d41585df16d08afb36f3a43c6222ec7.mp4 HTTP/1.1\r\nHost: checkfirelight.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nRange: bytes=0-\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://checkfirelight.info/?__cf_chl_f_tk=eGKU5iLblymwxyOeNmNruQ.l3zP2OCXLr.zIScLHzv0-1783091788-1.0.1.1-Fv87xRPeIv3TprVCiZ.2hi.uzbhacVecKxhd1NX43eg\r\nCookie: cf_clearance=x7CrPDFa3VxjzKhrvkEtAP2DZJf60Q5q9K_NH0LnzxU-1783091796-1.2.1.1-XBW1i5n_SDimWqwX6Vod0hbq9bRwT8EgUnJ3vfsz7d03j.ElHU8e.vZVTsRQNgL6zQtCZ4AcOM7zUV3ZCjlG7.5pbuGDdkUEFeHF6a3XncUT7oWL6nykc7ZemxMFnSF.jP0HtU3YPWbNZSyY1DwDDJsHKfrO.QDrYbJ_Xt4pam1O9dvV2z8RwqkAhfg0ooK3FIUgBnpqmlpCvkrJ4FjiBNY5fUQszDf9hR_5V2FcrRvb6NfDKTu9wRl1JIYx.KoEKdHLoXfET8nvf9FBigAOgaC4gvY6FCohBYjcTNHnz9CvY.oFpNookrmmKc_aKOubsA9qrVprld9Oy.u2o8mmIHi8WkYxzprYORqFzBRs2K4UpY0OOsFmXH_nWCes.q2ii5Jl5DTBlO_B5yBY.QiwNiF.zFiseZKEoEE3u9FpAbcSIVRV2cKFYjyRDGl_Aek68EuYCh.mz2sN.hwRdkqbwRN.l3tOXqiv2Pp4kueYbdoLTRBU2_ON7Vss.5M7..9z\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: video/mp4\r\netag: \"2bbafc37fd6f72cc509bb9acd1af9bb0\"\r\nlast-modified: Tue, 30 Jun 2026 17:20:32 GMT\r\ndate: Fri, 03 Jul 2026 15:16:37 GMT\r\nserver: cloudflare\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EngorDqqNO30Rj6DZXTwC8o8W%2BHgaim6dnJsnRhMkdFGVelE9dwjJI772ZPDd8dAmXxUnj0qg7pvFLrWm0vHtKjM3Zbg%2FDz8dyc3lSTKk3ZD3fhQM3HxB%2Frro9ZRJXfV1pNJt4Wl\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: a156da332bbf76ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4035324,"size_decoded":4035992,"mime_type":"video/mp4","magic":"ISO Media, MP4 Base Media v1 [ISO 14496-12:2003]","md5":"9de9ba113eb8f1ca99386823b91d5dd7","sha1":"36681774b53174489a888cf919e20e4ba09a136e","sha256":"65d083efb97e50d7d49f53ed25396483eafa93decf7f60bea8e7304342b15061","sha512":"0eff98e971b0cc000f44525fdad5e1b566cd91ac2a613f122c17799da5adbfec0c0218fdd89014fd52ac27c0b458e6e0dfc0ec77b7883e9ca33f0d706745d5e6","ssdeep":"24576:4OmWxkfP3WD7Bh2RF02rcowzKPk8lKoCwU/VK953u:XNGfP3WvB0Cscn8hC5/l","tlshash":"fd2533de3bcfa6dae812317b8ad20700321fdd947558279153e05cbffc16aa4ed90694","first_seen":"2026-04-24T15:23:09.405122Z","last_seen":"2026-07-03T15:17:27.618765Z","times_seen":18,"resource_available":false,"data":null}},"time_used":885,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":171,"receive":714,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-03","alert":"Sinkholed","trigger":"checkfirelight.info","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-03","alert":"Sinkholed","trigger":"checkfirelight.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"checkfirelight.info/8e018b889c4e12ffe9715f78d2fd0f6a42ac7881.svg","fqdn":"checkfirelight.info","domain":"checkfirelight.info","tld":"info"},"ip":{"addr":"172.67.128.191","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://checkfirelight.info/?__cf_chl_f_tk=eGKU5iLblymwxyOeNmNruQ.l3zP2OCXLr.zIScLHzv0-1783091788-1.0.1.1-Fv87xRPeIv3TprVCiZ.2hi.uzbhacVecKxhd1NX43eg","date":"2026-07-03T15:16:37.028Z","timestamp":1783091797028,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"checkfirelight.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Jun 2026 16:28:10 GMT","end":"Mon, 28 Sep 2026 17:26:57 GMT"},"fingerprint":{"sha1":"E2:6B:21:81:9C:B8:AD:23:84:9C:B6:45:4A:80:6C:AB:99:5C:10:CE","sha256":"74:38:CD:39:7B:FF:5B:B8:A3:DA:05:94:43:47:07:5D:75:8F:ED:21:4F:0A:80:2E:4D:AE:4E:E7:5B:5C:7C:DC"}}},"request":{"raw":"GET /8e018b889c4e12ffe9715f78d2fd0f6a42ac7881.svg HTTP/1.1\r\nHost: checkfirelight.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://checkfirelight.info/?__cf_chl_f_tk=eGKU5iLblymwxyOeNmNruQ.l3zP2OCXLr.zIScLHzv0-1783091788-1.0.1.1-Fv87xRPeIv3TprVCiZ.2hi.uzbhacVecKxhd1NX43eg\r\nCookie: cf_clearance=x7CrPDFa3VxjzKhrvkEtAP2DZJf60Q5q9K_NH0LnzxU-1783091796-1.2.1.1-XBW1i5n_SDimWqwX6Vod0hbq9bRwT8EgUnJ3vfsz7d03j.ElHU8e.vZVTsRQNgL6zQtCZ4AcOM7zUV3ZCjlG7.5pbuGDdkUEFeHF6a3XncUT7oWL6nykc7ZemxMFnSF.jP0HtU3YPWbNZSyY1DwDDJsHKfrO.QDrYbJ_Xt4pam1O9dvV2z8RwqkAhfg0ooK3FIUgBnpqmlpCvkrJ4FjiBNY5fUQszDf9hR_5V2FcrRvb6NfDKTu9wRl1JIYx.KoEKdHLoXfET8nvf9FBigAOgaC4gvY6FCohBYjcTNHnz9CvY.oFpNookrmmKc_aKOubsA9qrVprld9Oy.u2o8mmIHi8WkYxzprYORqFzBRs2K4UpY0OOsFmXH_nWCes.q2ii5Jl5DTBlO_B5yBY.QiwNiF.zFiseZKEoEE3u9FpAbcSIVRV2cKFYjyRDGl_Aek68EuYCh.mz2sN.hwRdkqbwRN.l3tOXqiv2Pp4kueYbdoLTRBU2_ON7Vss.5M7..9z\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: image/svg+xml\r\npriority: u=4,i\r\nlast-modified: Tue, 30 Jun 2026 17:20:30 GMT\r\ndate: Fri, 03 Jul 2026 15:16:37 GMT\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"cf7a1b121dc1d99915e6b1122b271e43\"\r\ncontent-encoding: zstd\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Xx%2BPVSaSfEDxZYsaLk1X7xPpO2OVYxaH8it5hrKx%2FDpIiXi7XAOwlwihy49iBxtAzUJO%2FSGlAqGazMd0FuiM3cGhWUCUwCLP9lbGl3mnAWAs8rsBkrp%2B9%2Bky75aE8tmQwGDmlAbp\"}]}\r\ncf-ray: a156da336bc876ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5003,"size_decoded":2460,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"cf7a1b121dc1d99915e6b1122b271e43","sha1":"8e018b889c4e12ffe9715f78d2fd0f6a42ac7881","sha256":"007e4ec9317dacf6b970caf775ba67b5b6d8a80127b27f5971e645c13cc90ac4","sha512":"e1446e5425a8db2f62ad69cfe3a42350c325b4db251320db3419677ee8ca44dd9180e2a326f0b9a74842cdd72bddcff0757399a066e590ca9f832ab346b61a60","ssdeep":"96:+OUArTSZHwUn+hyo6JluvfkMhe8CPUt/Qiv9lCjQVLETTHGpU2Y+8oYqt:nFc3MD+WgNPUtDlcUVoXmSo/t","tlshash":"c8a101eefbfc22b8d0d8a7a2f223014f399fb4652f42cf53c17d8e8d6405818a6a5445","first_seen":"2026-04-24T15:23:09.419836Z","last_seen":"2026-07-03T15:17:27.619408Z","times_seen":16,"resource_available":false,"data":null}},"time_used":249,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":249,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-03","alert":"Sinkholed","trigger":"checkfirelight.info","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-03","alert":"Sinkholed","trigger":"checkfirelight.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"checkfirelight.info/1729aa1263747dd8b8588b63077202ed2d2d7318.svg","fqdn":"checkfirelight.info","domain":"checkfirelight.info","tld":"info"},"ip":{"addr":"172.67.128.191","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://checkfirelight.info/?__cf_chl_f_tk=eGKU5iLblymwxyOeNmNruQ.l3zP2OCXLr.zIScLHzv0-1783091788-1.0.1.1-Fv87xRPeIv3TprVCiZ.2hi.uzbhacVecKxhd1NX43eg","date":"2026-07-03T15:16:37.033Z","timestamp":1783091797033,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"checkfirelight.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Jun 2026 16:28:10 GMT","end":"Mon, 28 Sep 2026 17:26:57 GMT"},"fingerprint":{"sha1":"E2:6B:21:81:9C:B8:AD:23:84:9C:B6:45:4A:80:6C:AB:99:5C:10:CE","sha256":"74:38:CD:39:7B:FF:5B:B8:A3:DA:05:94:43:47:07:5D:75:8F:ED:21:4F:0A:80:2E:4D:AE:4E:E7:5B:5C:7C:DC"}}},"request":{"raw":"GET /1729aa1263747dd8b8588b63077202ed2d2d7318.svg HTTP/1.1\r\nHost: checkfirelight.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://checkfirelight.info/?__cf_chl_f_tk=eGKU5iLblymwxyOeNmNruQ.l3zP2OCXLr.zIScLHzv0-1783091788-1.0.1.1-Fv87xRPeIv3TprVCiZ.2hi.uzbhacVecKxhd1NX43eg\r\nCookie: cf_clearance=x7CrPDFa3VxjzKhrvkEtAP2DZJf60Q5q9K_NH0LnzxU-1783091796-1.2.1.1-XBW1i5n_SDimWqwX6Vod0hbq9bRwT8EgUnJ3vfsz7d03j.ElHU8e.vZVTsRQNgL6zQtCZ4AcOM7zUV3ZCjlG7.5pbuGDdkUEFeHF6a3XncUT7oWL6nykc7ZemxMFnSF.jP0HtU3YPWbNZSyY1DwDDJsHKfrO.QDrYbJ_Xt4pam1O9dvV2z8RwqkAhfg0ooK3FIUgBnpqmlpCvkrJ4FjiBNY5fUQszDf9hR_5V2FcrRvb6NfDKTu9wRl1JIYx.KoEKdHLoXfET8nvf9FBigAOgaC4gvY6FCohBYjcTNHnz9CvY.oFpNookrmmKc_aKOubsA9qrVprld9Oy.u2o8mmIHi8WkYxzprYORqFzBRs2K4UpY0OOsFmXH_nWCes.q2ii5Jl5DTBlO_B5yBY.QiwNiF.zFiseZKEoEE3u9FpAbcSIVRV2cKFYjyRDGl_Aek68EuYCh.mz2sN.hwRdkqbwRN.l3tOXqiv2Pp4kueYbdoLTRBU2_ON7Vss.5M7..9z\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=J6Ri0fVi8PF406sk55SMEVJB0nGy1xP%2BJzIqIuJh1iWngvovlyJ%2FCWzETFe%2F4caYT3eUnyeNC2YfuV5asP9WutK2jDzsCBFnTtOEkQnDF0ZknQKSFvI2g2fQE84fl50L0XyKoyKZ\"}]}\r\nlast-modified: Tue, 30 Jun 2026 17:20:30 GMT\r\ndate: Fri, 03 Jul 2026 15:16:37 GMT\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\netag: W/\"2af18033ebf1d46e16a2a12fa77e9a35\"\r\ncf-ray: a156da337bcd76ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4401,"size_decoded":2510,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"2af18033ebf1d46e16a2a12fa77e9a35","sha1":"1729aa1263747dd8b8588b63077202ed2d2d7318","sha256":"0a861394733fd023e83d260dabef406361dfb0ab1231b6c1bdc9ac6e212ed2da","sha512":"7ec8ed5d91caa45544f2b4e2cc81f4965ff94417ff2d1c4c0970aaefa296186246e141e2828f9e23bdf26ccaada2c9ee68c1e2ecdcb795390195ac8a038dcd62","ssdeep":"96:+Zk7pzJjO2fK2eSRNREFRuSoOApRc7pdL7QHS9EdP1HEDxG:yk7fb2SRNREFRQOApCpdDEJ5EDxG","tlshash":"679176eedfbcb5e5b089e3eefb536098351f98766281ce91c34d2c896096c0cd9994d0","first_seen":"2026-02-16T14:56:50.163733Z","last_seen":"2026-07-03T15:17:27.620045Z","times_seen":18,"resource_available":false,"data":null}},"time_used":258,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":258,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-03","alert":"Sinkholed","trigger":"checkfirelight.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-03","alert":"Sinkholed","trigger":"checkfirelight.info","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gateway.irys.xyz/FGwxtfb99CU7ZWrkGJ1tKhV8vxUmhrTjs6zgp62ko6W7","fqdn":"gateway.irys.xyz","domain":"irys.xyz","tld":"xyz"},"ip":{"addr":"104.20.31.170","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://checkfirelight.info/?__cf_chl_f_tk=eGKU5iLblymwxyOeNmNruQ.l3zP2OCXLr.zIScLHzv0-1783091788-1.0.1.1-Fv87xRPeIv3TprVCiZ.2hi.uzbhacVecKxhd1NX43eg","date":"2026-07-03T15:16:40.433Z","timestamp":1783091800433,"http_version":"HTTP/2","security_state":"secure","security_info":null,"request":{"raw":"GET /FGwxtfb99CU7ZWrkGJ1tKhV8vxUmhrTjs6zgp62ko6W7 HTTP/1.1\r\nHost: gateway.irys.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://checkfirelight.info/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 \r\ndate: Fri, 03 Jul 2026 15:16:40 GMT\r\ncontent-length: 0\r\nlocation: https://2qmxub74calbyr5e4vgvxb6tbvyem7xps23rhcmptoozpppemsga.mainnet-1.datasprite-cdn.com/FGwxtfb99CU7ZWrkGJ1tKhV8vxUmhrTjs6zgp62ko6W7/\r\nserver: cloudflare\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-credentials: true\r\ncache-control: no-store\r\naccess-control-expose-headers: location, cache-control\r\nx-cache-status: BYPASS\r\ncf-cache-status: BYPASS\r\ncf-ray: a156da48be93569f-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-03T19:16:40.563677Z","times_seen":16948877,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-03","alert":"Sinkholed","trigger":"gateway.irys.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gateway.irys.xyz/HTRnUQQDU47XpwWJMzeSSqzX7y5GMLuXnowdYk183S2i","fqdn":"gateway.irys.xyz","domain":"irys.xyz","tld":"xyz"},"ip":{"addr":"104.20.31.170","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://checkfirelight.info/?__cf_chl_f_tk=eGKU5iLblymwxyOeNmNruQ.l3zP2OCXLr.zIScLHzv0-1783091788-1.0.1.1-Fv87xRPeIv3TprVCiZ.2hi.uzbhacVecKxhd1NX43eg","date":"2026-07-03T15:16:40.471Z","timestamp":1783091800471,"http_version":"HTTP/2","security_state":"secure","security_info":null,"request":{"raw":"GET /HTRnUQQDU47XpwWJMzeSSqzX7y5GMLuXnowdYk183S2i HTTP/1.1\r\nHost: gateway.irys.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://checkfirelight.info/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 \r\ndate: Fri, 03 Jul 2026 15:16:40 GMT\r\ncontent-length: 0\r\nlocation: https://6sab273b7nl3rcdustvjejsgxkwzkkibobj56v5dumz7i6xdbltq.mainnet-1.datasprite-cdn.com/HTRnUQQDU47XpwWJMzeSSqzX7y5GMLuXnowdYk183S2i/\r\nserver: cloudflare\r\naccess-control-allow-credentials: true\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\ncache-control: no-store\r\naccess-control-expose-headers: location, cache-control\r\nx-cache-status: BYPASS\r\ncf-cache-status: BYPASS\r\ncf-ray: a156da48fed5569f-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-03T19:16:40.563677Z","times_seen":16948877,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-03","alert":"Sinkholed","trigger":"gateway.irys.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gateway.irys.xyz/AA7kJLwyTxzxHDmpsHigApQXVPexXwmEAK6K939kfcX8","fqdn":"gateway.irys.xyz","domain":"irys.xyz","tld":"xyz"},"ip":{"addr":"104.20.31.170","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://checkfirelight.info/?__cf_chl_f_tk=eGKU5iLblymwxyOeNmNruQ.l3zP2OCXLr.zIScLHzv0-1783091788-1.0.1.1-Fv87xRPeIv3TprVCiZ.2hi.uzbhacVecKxhd1NX43eg","date":"2026-07-03T15:16:40.504Z","timestamp":1783091800504,"http_version":"HTTP/2","security_state":"secure","security_info":null,"request":{"raw":"GET /AA7kJLwyTxzxHDmpsHigApQXVPexXwmEAK6K939kfcX8 HTTP/1.1\r\nHost: gateway.irys.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://checkfirelight.info/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 \r\ndate: Fri, 03 Jul 2026 15:16:40 GMT\r\ncontent-length: 0\r\nlocation: https://rahqtny5jec73ifzc2gg5x3d5s6bznpxhj4g3ky25pp5g2l7y7pq.mainnet-1.datasprite-cdn.com/AA7kJLwyTxzxHDmpsHigApQXVPexXwmEAK6K939kfcX8/\r\nserver: cloudflare\r\naccess-control-expose-headers: cache-control, location\r\ncache-control: no-store\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-credentials: true\r\nx-cache-status: BYPASS\r\ncf-cache-status: BYPASS\r\ncf-ray: a156da492f21569f-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-03T19:16:40.563677Z","times_seen":16948877,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-03","alert":"Sinkholed","trigger":"gateway.irys.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"4zbpk6lzsya26tazaje3yw7d6st53o23iriglps2sp2bnpqb6e7q.mainnet-1.datasprite-cdn.com/GVqzNswLTwAnCD7CtTZw67VCMbChaqBxjezVsqQAqUzS/","fqdn":"4zbpk6lzsya26tazaje3yw7d6st53o23iriglps2sp2bnpqb6e7q.mainnet-1.datasprite-cdn.com","domain":"datasprite-cdn.com","tld":"com"},"ip":{"addr":"104.21.15.158","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://checkfirelight.info/?__cf_chl_f_tk=eGKU5iLblymwxyOeNmNruQ.l3zP2OCXLr.zIScLHzv0-1783091788-1.0.1.1-Fv87xRPeIv3TprVCiZ.2hi.uzbhacVecKxhd1NX43eg","date":"2026-07-03T15:16:40.812Z","timestamp":1783091800812,"http_version":"HTTP/3","security_state":"secure","security_info":null,"request":{"raw":"GET /GVqzNswLTwAnCD7CtTZw67VCMbChaqBxjezVsqQAqUzS/ HTTP/1.1\r\nHost: 4zbpk6lzsya26tazaje3yw7d6st53o23iriglps2sp2bnpqb6e7q.mainnet-1.datasprite-cdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://checkfirelight.info/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-03T19:16:40.563677Z","times_seen":16948877,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-03","alert":"Sinkholed","trigger":"4zbpk6lzsya26tazaje3yw7d6st53o23iriglps2sp2bnpqb6e7q.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-03","alert":"Sinkholed","trigger":"4zbpk6lzsya26tazaje3yw7d6st53o23iriglps2sp2bnpqb6e7q.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-03","alert":"Sinkholed","trigger":"4zbpk6lzsya26tazaje3yw7d6st53o23iriglps2sp2bnpqb6e7q.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/ci/a156da0639454c11/1783091790222/Nec9QJ7oZYuKG1a","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/av0/rch/n1hp3/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","date":"2026-07-03T15:16:31.648Z","timestamp":1783091791648,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"challenges.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 16 Jun 2026 20:15:28 GMT","end":"Mon, 14 Sep 2026 21:15:13 GMT"},"fingerprint":{"sha1":"77:27:72:42:CF:51:E8:8C:7C:3E:8C:4C:A1:F0:9A:86:96:B9:0A:16","sha256":"ED:7C:F7:38:B3:0F:00:86:32:D1:14:CE:C0:FF:CA:0E:7C:86:EE:49:51:EF:A4:4B:AA:5C:B6:7C:00:B5:3D:F3"}}},"request":{"raw":"GET /cdn-cgi/challenge-platform/h/b/ci/a156da0639454c11/1783091790222/Nec9QJ7oZYuKG1a HTTP/1.1\r\nHost: challenges.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/av0/rch/n1hp3/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 03 Jul 2026 15:16:31 GMT\r\ncontent-type: image/png\r\ncontent-length: 703\r\npriority: u=6,i\r\nserver: cloudflare\r\ncf-ray: a156da11cf594c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":703,"size_decoded":923,"mime_type":"image/png","magic":"PNG image data, 88 x 7, 8-bit grayscale, non-interlaced","md5":"83e9efbaf8c84c4806a318b23b08c690","sha1":"a72db1aa7cae04f00814f6b6ba41564161f92df6","sha256":"4633767ac271f0d22215987cfe8d8836b930e4fb1dd4314866db99eb4c2f474f","sha512":"c0a29fd6872483ee1dd8eb06d9ca6ff7904f43406deeeac4946d2ee762f738c72d651bcace7e188ee414ec01525b705cb3c2962351ccc1d1f980f33d7cbce080","ssdeep":"","tlshash":"af0112d562434465c501003e40782005c832c132143342004002e838102149a62cdba6","first_seen":"2026-07-03T15:17:27.62161Z","last_seen":"2026-07-03T15:17:27.62161Z","times_seen":1,"resource_available":false,"data":null}},"time_used":5,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gateway.irys.xyz/Eodj8znQBik51BJNXiRTw1t2HXyv9p3LNhiNvsoMuDbg","fqdn":"gateway.irys.xyz","domain":"irys.xyz","tld":"xyz"},"ip":{"addr":"104.20.31.170","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://checkfirelight.info/?__cf_chl_f_tk=eGKU5iLblymwxyOeNmNruQ.l3zP2OCXLr.zIScLHzv0-1783091788-1.0.1.1-Fv87xRPeIv3TprVCiZ.2hi.uzbhacVecKxhd1NX43eg","date":"2026-07-03T15:16:40.443Z","timestamp":1783091800443,"http_version":"HTTP/2","security_state":"secure","security_info":null,"request":{"raw":"GET /Eodj8znQBik51BJNXiRTw1t2HXyv9p3LNhiNvsoMuDbg HTTP/1.1\r\nHost: gateway.irys.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://checkfirelight.info/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 \r\ndate: Fri, 03 Jul 2026 15:16:40 GMT\r\ncontent-length: 0\r\nlocation: https://zunczd3cinnovpzh2w3sv4yyf4ycdzgcmlyvoo2eu3edqrvshgvq.mainnet-1.datasprite-cdn.com/Eodj8znQBik51BJNXiRTw1t2HXyv9p3LNhiNvsoMuDbg/\r\nserver: cloudflare\r\naccess-control-allow-credentials: true\r\ncache-control: no-store\r\naccess-control-expose-headers: location, cache-control\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nx-cache-status: BYPASS\r\ncf-cache-status: BYPASS\r\ncf-ray: a156da48cea0569f-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-03T19:16:40.563677Z","times_seen":16948877,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-03","alert":"Sinkholed","trigger":"gateway.irys.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gateway.irys.xyz/74njk3B4UNqUutfcYrw4BdPfvw2YHdMC7oXCH4ywgNiK","fqdn":"gateway.irys.xyz","domain":"irys.xyz","tld":"xyz"},"ip":{"addr":"104.20.31.170","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://checkfirelight.info/?__cf_chl_f_tk=eGKU5iLblymwxyOeNmNruQ.l3zP2OCXLr.zIScLHzv0-1783091788-1.0.1.1-Fv87xRPeIv3TprVCiZ.2hi.uzbhacVecKxhd1NX43eg","date":"2026-07-03T15:16:40.486Z","timestamp":1783091800486,"http_version":"HTTP/2","security_state":"secure","security_info":null,"request":{"raw":"GET /74njk3B4UNqUutfcYrw4BdPfvw2YHdMC7oXCH4ywgNiK HTTP/1.1\r\nHost: gateway.irys.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://checkfirelight.info/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 \r\ndate: Fri, 03 Jul 2026 15:16:40 GMT\r\ncontent-length: 0\r\nlocation: https://lipjimvtizvuyifeddgmjfapysx6npsrkjjwfy5zxmvkhkoal6ea.mainnet-1.datasprite-cdn.com/74njk3B4UNqUutfcYrw4BdPfvw2YHdMC7oXCH4ywgNiK/\r\nserver: cloudflare\r\naccess-control-expose-headers: location, cache-control\r\naccess-control-allow-credentials: true\r\ncache-control: no-store\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nx-cache-status: BYPASS\r\ncf-cache-status: BYPASS\r\ncf-ray: a156da490ef2569f-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-03T19:16:40.563677Z","times_seen":16948877,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-03","alert":"Sinkholed","trigger":"gateway.irys.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"t73giqqwtpkhhdyyeszo2vv4sqyyuafuk7y2deshpm3xftc7jg7q.mainnet-1.datasprite-cdn.com/BmRja2B3uNcEnmSf4spQwbDhyXoU8SpESENkTyQBN6Wr/","fqdn":"t73giqqwtpkhhdyyeszo2vv4sqyyuafuk7y2deshpm3xftc7jg7q.mainnet-1.datasprite-cdn.com","domain":"datasprite-cdn.com","tld":"com"},"ip":{"addr":"104.21.15.158","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://checkfirelight.info/?__cf_chl_f_tk=eGKU5iLblymwxyOeNmNruQ.l3zP2OCXLr.zIScLHzv0-1783091788-1.0.1.1-Fv87xRPeIv3TprVCiZ.2hi.uzbhacVecKxhd1NX43eg","date":"2026-07-03T15:16:40.810Z","timestamp":1783091800810,"http_version":"HTTP/3","security_state":"secure","security_info":null,"request":{"raw":"GET /BmRja2B3uNcEnmSf4spQwbDhyXoU8SpESENkTyQBN6Wr/ HTTP/1.1\r\nHost: t73giqqwtpkhhdyyeszo2vv4sqyyuafuk7y2deshpm3xftc7jg7q.mainnet-1.datasprite-cdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://checkfirelight.info/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-03T19:16:40.563677Z","times_seen":16948877,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-03","alert":"Sinkholed","trigger":"t73giqqwtpkhhdyyeszo2vv4sqyyuafuk7y2deshpm3xftc7jg7q.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-03","alert":"Sinkholed","trigger":"t73giqqwtpkhhdyyeszo2vv4sqyyuafuk7y2deshpm3xftc7jg7q.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-03","alert":"Sinkholed","trigger":"t73giqqwtpkhhdyyeszo2vv4sqyyuafuk7y2deshpm3xftc7jg7q.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"65anjlffv6f37wsp5aoj34ltgjeakkozcoaujzb6feeub2bhg67a.mainnet-1.datasprite-cdn.com/HeB3Cq7j5UgGvECfes722J2hB6d3zFNAX8qrtvdaebbj/","fqdn":"65anjlffv6f37wsp5aoj34ltgjeakkozcoaujzb6feeub2bhg67a.mainnet-1.datasprite-cdn.com","domain":"datasprite-cdn.com","tld":"com"},"ip":{"addr":"104.21.15.158","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://checkfirelight.info/?__cf_chl_f_tk=eGKU5iLblymwxyOeNmNruQ.l3zP2OCXLr.zIScLHzv0-1783091788-1.0.1.1-Fv87xRPeIv3TprVCiZ.2hi.uzbhacVecKxhd1NX43eg","date":"2026-07-03T15:16:40.814Z","timestamp":1783091800814,"http_version":"HTTP/3","security_state":"secure","security_info":null,"request":{"raw":"GET /HeB3Cq7j5UgGvECfes722J2hB6d3zFNAX8qrtvdaebbj/ HTTP/1.1\r\nHost: 65anjlffv6f37wsp5aoj34ltgjeakkozcoaujzb6feeub2bhg67a.mainnet-1.datasprite-cdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://checkfirelight.info/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-03T19:16:40.563677Z","times_seen":16948877,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-03","alert":"Sinkholed","trigger":"65anjlffv6f37wsp5aoj34ltgjeakkozcoaujzb6feeub2bhg67a.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-03","alert":"Sinkholed","trigger":"65anjlffv6f37wsp5aoj34ltgjeakkozcoaujzb6feeub2bhg67a.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-03","alert":"Sinkholed","trigger":"65anjlffv6f37wsp5aoj34ltgjeakkozcoaujzb6feeub2bhg67a.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"checkfirelight.info/","fqdn":"checkfirelight.info","domain":"checkfirelight.info","tld":"info"},"ip":{"addr":"172.67.128.191","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-07-03T15:16:28.880Z","timestamp":1783091788880,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"checkfirelight.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Jun 2026 16:28:10 GMT","end":"Mon, 28 Sep 2026 17:26:57 GMT"},"fingerprint":{"sha1":"E2:6B:21:81:9C:B8:AD:23:84:9C:B6:45:4A:80:6C:AB:99:5C:10:CE","sha256":"74:38:CD:39:7B:FF:5B:B8:A3:DA:05:94:43:47:07:5D:75:8F:ED:21:4F:0A:80:2E:4D:AE:4E:E7:5B:5C:7C:DC"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: checkfirelight.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 403 \r\naccept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA\r\ncf-mitigated: challenge\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-security-policy: default-src 'none'; script-src 'nonce-jrrl6RrJgb1PvpUnere364' 'unsafe-eval' https://challenges.cloudflare.com; script-src-attr 'none'; style-src 'unsafe-inline'; img-src 'self' https://challenges.cloudflare.com; connect-src 'self' https://challenges.cloudflare.com; frame-src 'self' https://challenges.cloudflare.com blob:; child-src 'self' https://challenges.cloudflare.com blob:; worker-src blob:; form-action http: https:; base-uri 'self'\r\nserver: cloudflare\r\ncritical-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA\r\ncross-origin-embedder-policy: require-corp\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: same-origin\r\norigin-agent-cluster: ?1\r\npermissions-policy: accelerometer=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=(),xr-spatial-tracking=*\r\nreferrer-policy: same-origin\r\nserver-timing: chlray;desc=\"a156da011a5f76ef\", cfExtPri\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Nx0OYClLWP%2FCbOEBX7kCvsIwoFweNZoNjybnQsNOnPGZfCTcbyT3o%2Bfu%2FIp1d6ZAPz9shb86NWPGwwnt32h%2B9ePh97BV8fXCF3YlJ6mX0wkQiG%2B%2BXwj9xActJ4L5rLQWbhBo07nV\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Fri, 03 Jul 2026 15:16:28 GMT\r\npriority: u=0,i\r\ncontent-encoding: zstd\r\ncf-ray: a156da011a5f76ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5580,"size_decoded":5557,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (5580), with no line terminators","md5":"ac120603b15195fe1511dda1d0da725e","sha1":"faa922c4adb6ac615088b5bf11d2c0c62ae20393","sha256":"0ad93ca39b32d796b80336460a9b476a3a76ba86fa256571d78b32367aab2e6a","sha512":"81795d6b9ce521c89c01541ccf6c927cf609c025ebef1fbc47946c44e48b9e8b2f0c4577a8e3c7498aa09690596045771166c13d16fd33e6b4164105333e4764","ssdeep":"96:PNy8toXZzIEb0EaW874xqsr0EKjEK+NJugVLD6uYzueh8ZEKXmw:PNptkCBZw0EeEfNJu4LD6TyvEPw","tlshash":"69b15cb3ec32a12a87ee2f8628f6735c4670720abb0501cda5e1d55e92ddd5e81a68c4","first_seen":"2026-07-03T15:17:27.622676Z","last_seen":"2026-07-03T15:17:27.622676Z","times_seen":1,"resource_available":true,"data":null}},"time_used":102,"timings":{"blocked":-1,"dns":77,"connect":17,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-03","alert":"Sinkholed","trigger":"checkfirelight.info","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-03","alert":"Sinkholed","trigger":"checkfirelight.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"checkfirelight.info/15b473b878370e5f6aad0b061defe05ec4093155.woff2","fqdn":"checkfirelight.info","domain":"checkfirelight.info","tld":"info"},"ip":{"addr":"172.67.128.191","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://checkfirelight.info/?__cf_chl_f_tk=eGKU5iLblymwxyOeNmNruQ.l3zP2OCXLr.zIScLHzv0-1783091788-1.0.1.1-Fv87xRPeIv3TprVCiZ.2hi.uzbhacVecKxhd1NX43eg","date":"2026-07-03T15:16:37.358Z","timestamp":1783091797358,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"checkfirelight.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Jun 2026 16:28:10 GMT","end":"Mon, 28 Sep 2026 17:26:57 GMT"},"fingerprint":{"sha1":"E2:6B:21:81:9C:B8:AD:23:84:9C:B6:45:4A:80:6C:AB:99:5C:10:CE","sha256":"74:38:CD:39:7B:FF:5B:B8:A3:DA:05:94:43:47:07:5D:75:8F:ED:21:4F:0A:80:2E:4D:AE:4E:E7:5B:5C:7C:DC"}}},"request":{"raw":"GET /15b473b878370e5f6aad0b061defe05ec4093155.woff2 HTTP/1.1\r\nHost: checkfirelight.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://checkfirelight.info/?__cf_chl_f_tk=eGKU5iLblymwxyOeNmNruQ.l3zP2OCXLr.zIScLHzv0-1783091788-1.0.1.1-Fv87xRPeIv3TprVCiZ.2hi.uzbhacVecKxhd1NX43eg\r\nCookie: cf_clearance=x7CrPDFa3VxjzKhrvkEtAP2DZJf60Q5q9K_NH0LnzxU-1783091796-1.2.1.1-XBW1i5n_SDimWqwX6Vod0hbq9bRwT8EgUnJ3vfsz7d03j.ElHU8e.vZVTsRQNgL6zQtCZ4AcOM7zUV3ZCjlG7.5pbuGDdkUEFeHF6a3XncUT7oWL6nykc7ZemxMFnSF.jP0HtU3YPWbNZSyY1DwDDJsHKfrO.QDrYbJ_Xt4pam1O9dvV2z8RwqkAhfg0ooK3FIUgBnpqmlpCvkrJ4FjiBNY5fUQszDf9hR_5V2FcrRvb6NfDKTu9wRl1JIYx.KoEKdHLoXfET8nvf9FBigAOgaC4gvY6FCohBYjcTNHnz9CvY.oFpNookrmmKc_aKOubsA9qrVprld9Oy.u2o8mmIHi8WkYxzprYORqFzBRs2K4UpY0OOsFmXH_nWCes.q2ii5Jl5DTBlO_B5yBY.QiwNiF.zFiseZKEoEE3u9FpAbcSIVRV2cKFYjyRDGl_Aek68EuYCh.mz2sN.hwRdkqbwRN.l3tOXqiv2Pp4kueYbdoLTRBU2_ON7Vss.5M7..9z\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: font/woff2\r\netag: \"115dc5b24361b570908f74beeb867280\"\r\nlast-modified: Tue, 30 Jun 2026 17:20:30 GMT\r\ndate: Fri, 03 Jul 2026 15:16:37 GMT\r\nserver: cloudflare\r\nserver-timing: cfExtPri\r\nage: 0\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kjeuubzbpemYP2LELTTqzYR8q1TAUIenaTxrJ1ctwW3Rlgga2ABdRhcwFvefrqhaC2irTRjeTT4AnOlO3AxJWTKaIw%2FttvzudT92j5ojwz6NnkKROamHaZiQgzEp1OFQyfOpfrdo\"}]}\r\ncf-ray: a156da357c3776ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 5332\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5332,"size_decoded":6048,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), CFF, length 5332, version 1.0","md5":"115dc5b24361b570908f74beeb867280","sha1":"15b473b878370e5f6aad0b061defe05ec4093155","sha256":"d39f873f016a48c20bedfca5c6cfd69acde4076069c4a866764cda95e08d59d3","sha512":"1d560800fefa03170659d46bcbd53b6f7316b11ac105f971f122dd82185aed3781b8e626b43527b20e5adda7e62245b093f3342b68ff0a8cd3cc7c23006ca038","ssdeep":"96:saZE6k9dCffoOPCI4LvmVt3NvfBeClG7V9t5TH065jfiNVC2o7e0vQvI1z2lbsU:s06goOqDgJTVI/tdU61qNRo7e0viPH","tlshash":"91b18d04c425a51ff6594876b4a65df38ba12959c404a3cf3d0987ce92fa22883e9ba1","first_seen":"2026-02-16T14:56:50.16867Z","last_seen":"2026-07-03T15:17:27.591461Z","times_seen":22,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-03","alert":"Sinkholed","trigger":"checkfirelight.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-03","alert":"Sinkholed","trigger":"checkfirelight.info","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gateway.irys.xyz/7CXSgx8jsxLxjzMCMaadAm2zy2HXnfgpYFs2sF6C1kEV","fqdn":"gateway.irys.xyz","domain":"irys.xyz","tld":"xyz"},"ip":{"addr":"104.20.31.170","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://checkfirelight.info/?__cf_chl_f_tk=eGKU5iLblymwxyOeNmNruQ.l3zP2OCXLr.zIScLHzv0-1783091788-1.0.1.1-Fv87xRPeIv3TprVCiZ.2hi.uzbhacVecKxhd1NX43eg","date":"2026-07-03T15:16:40.429Z","timestamp":1783091800429,"http_version":"HTTP/2","security_state":"secure","security_info":null,"request":{"raw":"GET /7CXSgx8jsxLxjzMCMaadAm2zy2HXnfgpYFs2sF6C1kEV HTTP/1.1\r\nHost: gateway.irys.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://checkfirelight.info/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 \r\ndate: Fri, 03 Jul 2026 15:16:40 GMT\r\ncontent-length: 0\r\nlocation: https://lqm65l4rsie7lcqzwyygqd4xmycpt6vpx7jqzqhlj6x4xnaxvvva.mainnet-1.datasprite-cdn.com/7CXSgx8jsxLxjzMCMaadAm2zy2HXnfgpYFs2sF6C1kEV/\r\nserver: cloudflare\r\naccess-control-allow-credentials: true\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\ncache-control: no-store\r\naccess-control-expose-headers: cache-control, location\r\nx-cache-status: BYPASS\r\ncf-cache-status: BYPASS\r\ncf-ray: a156da48be92569f-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-03T19:16:40.563677Z","times_seen":16948877,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-03","alert":"Sinkholed","trigger":"gateway.irys.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gateway.irys.xyz/3m3FKCoECFJAoQovnGLen1UBqXpwQHgYWfhkuFUywtxc","fqdn":"gateway.irys.xyz","domain":"irys.xyz","tld":"xyz"},"ip":{"addr":"104.20.31.170","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://checkfirelight.info/?__cf_chl_f_tk=eGKU5iLblymwxyOeNmNruQ.l3zP2OCXLr.zIScLHzv0-1783091788-1.0.1.1-Fv87xRPeIv3TprVCiZ.2hi.uzbhacVecKxhd1NX43eg","date":"2026-07-03T15:16:40.490Z","timestamp":1783091800490,"http_version":"HTTP/2","security_state":"secure","security_info":null,"request":{"raw":"GET /3m3FKCoECFJAoQovnGLen1UBqXpwQHgYWfhkuFUywtxc HTTP/1.1\r\nHost: gateway.irys.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://checkfirelight.info/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 \r\ndate: Fri, 03 Jul 2026 15:16:40 GMT\r\ncontent-length: 0\r\nlocation: https://fd7xqs6fnkfawh6qvkmjuuwvub4cbuycyxx3q3romqtbcbt6o4kq.mainnet-1.datasprite-cdn.com/3m3FKCoECFJAoQovnGLen1UBqXpwQHgYWfhkuFUywtxc/\r\nserver: cloudflare\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-credentials: true\r\ncache-control: no-store\r\naccess-control-expose-headers: location, cache-control\r\nx-cache-status: BYPASS\r\ncf-cache-status: BYPASS\r\ncf-ray: a156da491efb569f-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-03T19:16:40.563677Z","times_seen":16948877,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-03","alert":"Sinkholed","trigger":"gateway.irys.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gateway.irys.xyz/7p1SUU8Rx3sQFLVxhjXboi5nVLFjCRR1Qn2pbpyBnrXn","fqdn":"gateway.irys.xyz","domain":"irys.xyz","tld":"xyz"},"ip":{"addr":"104.20.31.170","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://checkfirelight.info/?__cf_chl_f_tk=eGKU5iLblymwxyOeNmNruQ.l3zP2OCXLr.zIScLHzv0-1783091788-1.0.1.1-Fv87xRPeIv3TprVCiZ.2hi.uzbhacVecKxhd1NX43eg","date":"2026-07-03T15:16:40.498Z","timestamp":1783091800498,"http_version":"HTTP/2","security_state":"secure","security_info":null,"request":{"raw":"GET /7p1SUU8Rx3sQFLVxhjXboi5nVLFjCRR1Qn2pbpyBnrXn HTTP/1.1\r\nHost: gateway.irys.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://checkfirelight.info/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 \r\ndate: Fri, 03 Jul 2026 15:16:40 GMT\r\ncontent-length: 0\r\nlocation: https://muyovc3b2336fg4hlwg73n6w7lve6xi5wwagbq3mkm34hz3fufcq.mainnet-1.datasprite-cdn.com/7p1SUU8Rx3sQFLVxhjXboi5nVLFjCRR1Qn2pbpyBnrXn/\r\nserver: cloudflare\r\naccess-control-expose-headers: cache-control, location\r\ncache-control: no-store\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-credentials: true\r\nx-cache-status: BYPASS\r\ncf-cache-status: BYPASS\r\ncf-ray: a156da491f10569f-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-03T19:16:40.563677Z","times_seen":16948877,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-03","alert":"Sinkholed","trigger":"gateway.irys.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"checkfirelight.info/c57593e0adc4cf99dd9e67cb782242220a061a9d.woff2","fqdn":"checkfirelight.info","domain":"checkfirelight.info","tld":"info"},"ip":{"addr":"172.67.128.191","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://checkfirelight.info/?__cf_chl_f_tk=eGKU5iLblymwxyOeNmNruQ.l3zP2OCXLr.zIScLHzv0-1783091788-1.0.1.1-Fv87xRPeIv3TprVCiZ.2hi.uzbhacVecKxhd1NX43eg","date":"2026-07-03T15:16:36.952Z","timestamp":1783091796952,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"checkfirelight.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Jun 2026 16:28:10 GMT","end":"Mon, 28 Sep 2026 17:26:57 GMT"},"fingerprint":{"sha1":"E2:6B:21:81:9C:B8:AD:23:84:9C:B6:45:4A:80:6C:AB:99:5C:10:CE","sha256":"74:38:CD:39:7B:FF:5B:B8:A3:DA:05:94:43:47:07:5D:75:8F:ED:21:4F:0A:80:2E:4D:AE:4E:E7:5B:5C:7C:DC"}}},"request":{"raw":"GET /c57593e0adc4cf99dd9e67cb782242220a061a9d.woff2 HTTP/1.1\r\nHost: checkfirelight.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://checkfirelight.info/?__cf_chl_f_tk=eGKU5iLblymwxyOeNmNruQ.l3zP2OCXLr.zIScLHzv0-1783091788-1.0.1.1-Fv87xRPeIv3TprVCiZ.2hi.uzbhacVecKxhd1NX43eg\r\nCookie: cf_clearance=x7CrPDFa3VxjzKhrvkEtAP2DZJf60Q5q9K_NH0LnzxU-1783091796-1.2.1.1-XBW1i5n_SDimWqwX6Vod0hbq9bRwT8EgUnJ3vfsz7d03j.ElHU8e.vZVTsRQNgL6zQtCZ4AcOM7zUV3ZCjlG7.5pbuGDdkUEFeHF6a3XncUT7oWL6nykc7ZemxMFnSF.jP0HtU3YPWbNZSyY1DwDDJsHKfrO.QDrYbJ_Xt4pam1O9dvV2z8RwqkAhfg0ooK3FIUgBnpqmlpCvkrJ4FjiBNY5fUQszDf9hR_5V2FcrRvb6NfDKTu9wRl1JIYx.KoEKdHLoXfET8nvf9FBigAOgaC4gvY6FCohBYjcTNHnz9CvY.oFpNookrmmKc_aKOubsA9qrVprld9Oy.u2o8mmIHi8WkYxzprYORqFzBRs2K4UpY0OOsFmXH_nWCes.q2ii5Jl5DTBlO_B5yBY.QiwNiF.zFiseZKEoEE3u9FpAbcSIVRV2cKFYjyRDGl_Aek68EuYCh.mz2sN.hwRdkqbwRN.l3tOXqiv2Pp4kueYbdoLTRBU2_ON7Vss.5M7..9z\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: font/woff2\r\netag: \"7c87a648293fbb5b2924aafaa59e8aea\"\r\nlast-modified: Tue, 30 Jun 2026 17:20:31 GMT\r\ndate: Fri, 03 Jul 2026 15:16:37 GMT\r\nserver: cloudflare\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6MwyVU%2FOqI7UZBJKL8N6Uepq4w4n8BnbbtiClpNK9aDnPj8Majcnnslz8I8rM9ZpMkJZo6FO2F4Br3eeVNfo9RmrngRNI5%2FuiTMoyuFV0Ha3s6xWbrgcA1Jo2IUHwsKwoJB6J0T4\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a156da32fbaf76ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":36932,"size_decoded":37599,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 36932, version 1.0","md5":"7c87a648293fbb5b2924aafaa59e8aea","sha1":"c57593e0adc4cf99dd9e67cb782242220a061a9d","sha256":"9fea608a947e67020c33cad9a6fe3d60c54119dfb8cff87768a8117a15ed7543","sha512":"764ced325a768dca84e1fb0cc458818239ce379dbcbdb324ee8849bbe15f54e3f0254ae6e52ee5a92741840637b4f9885d246a0978af23176b3acfe5b9cec23f","ssdeep":"768:mMQPOAQQKW6GccoXQ+OGpHNzXgtDM0SVu7P3nqtPl9Bf2csDpHUjbYE8j2:mMQz4W5og+tpH6tDJku73EPlPOcs5U/l","tlshash":"c0f2f23e7ea5691487c2b0be506b00935344c9bd37c18121bbb953f44ea67addc5d63c","first_seen":"2025-09-11T17:08:25.889763Z","last_seen":"2026-07-03T19:05:07.581836Z","times_seen":28710,"resource_available":false,"data":null}},"time_used":252,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":167,"receive":85,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-03","alert":"Sinkholed","trigger":"checkfirelight.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-03","alert":"Sinkholed","trigger":"checkfirelight.info","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gateway.irys.xyz/BZsRGcBURQnewjAfV98ZUziy45VCmwCQHch8hcGU64wz","fqdn":"gateway.irys.xyz","domain":"irys.xyz","tld":"xyz"},"ip":{"addr":"104.20.31.170","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://checkfirelight.info/?__cf_chl_f_tk=eGKU5iLblymwxyOeNmNruQ.l3zP2OCXLr.zIScLHzv0-1783091788-1.0.1.1-Fv87xRPeIv3TprVCiZ.2hi.uzbhacVecKxhd1NX43eg","date":"2026-07-03T15:16:40.494Z","timestamp":1783091800494,"http_version":"HTTP/2","security_state":"secure","security_info":null,"request":{"raw":"GET /BZsRGcBURQnewjAfV98ZUziy45VCmwCQHch8hcGU64wz HTTP/1.1\r\nHost: gateway.irys.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://checkfirelight.info/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 \r\ndate: Fri, 03 Jul 2026 15:16:40 GMT\r\ncontent-length: 0\r\nlocation: https://tuahnjjbd4ptq2z3dq73mmxdcdpdxt5sjs4uwfluwoxw2i3zrv4q.mainnet-1.datasprite-cdn.com/BZsRGcBURQnewjAfV98ZUziy45VCmwCQHch8hcGU64wz/\r\nserver: cloudflare\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-credentials: true\r\ncache-control: no-store\r\naccess-control-expose-headers: location, cache-control\r\nx-cache-status: BYPASS\r\ncf-cache-status: BYPASS\r\ncf-ray: a156da491f02569f-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-03T19:16:40.563677Z","times_seen":16948877,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-03","alert":"Sinkholed","trigger":"gateway.irys.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gateway.irys.xyz/23q4kgVKA71hmzEKL9qhRwSTESeYhDZ84LUNc1HJ8XX2","fqdn":"gateway.irys.xyz","domain":"irys.xyz","tld":"xyz"},"ip":{"addr":"104.20.31.170","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://checkfirelight.info/?__cf_chl_f_tk=eGKU5iLblymwxyOeNmNruQ.l3zP2OCXLr.zIScLHzv0-1783091788-1.0.1.1-Fv87xRPeIv3TprVCiZ.2hi.uzbhacVecKxhd1NX43eg","date":"2026-07-03T15:16:40.499Z","timestamp":1783091800499,"http_version":"HTTP/2","security_state":"secure","security_info":null,"request":{"raw":"GET /23q4kgVKA71hmzEKL9qhRwSTESeYhDZ84LUNc1HJ8XX2 HTTP/1.1\r\nHost: gateway.irys.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://checkfirelight.info/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 \r\ndate: Fri, 03 Jul 2026 15:16:40 GMT\r\ncontent-length: 0\r\nlocation: https://b6ktecz7yjy6fzgzlivivwfm4xtjvavuqbddceaslq46lxbuw2wq.mainnet-1.datasprite-cdn.com/23q4kgVKA71hmzEKL9qhRwSTESeYhDZ84LUNc1HJ8XX2/\r\nserver: cloudflare\r\naccess-control-expose-headers: cache-control, location\r\ncache-control: no-store\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-credentials: true\r\nx-cache-status: BYPASS\r\ncf-cache-status: BYPASS\r\ncf-ray: a156da491f16569f-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-03T19:16:40.563677Z","times_seen":16948877,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-03","alert":"Sinkholed","trigger":"gateway.irys.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"noteworthy-lox.xyz/teK2WbBKRvMAJe3wGZImS.js","fqdn":"noteworthy-lox.xyz","domain":"noteworthy-lox.xyz","tld":"xyz"},"ip":{"addr":"172.67.166.95","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://checkfirelight.info/?__cf_chl_f_tk=eGKU5iLblymwxyOeNmNruQ.l3zP2OCXLr.zIScLHzv0-1783091788-1.0.1.1-Fv87xRPeIv3TprVCiZ.2hi.uzbhacVecKxhd1NX43eg","date":"2026-07-03T15:16:38.316Z","timestamp":1783091798316,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"noteworthy-lox.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Jun 2026 06:57:49 GMT","end":"Sun, 06 Sep 2026 07:56:39 GMT"},"fingerprint":{"sha1":"DB:74:6F:94:75:02:7C:E6:BC:B0:7B:9C:CC:4B:65:10:1D:D4:2E:21","sha256":"11:DE:20:78:C9:21:8B:67:CD:B9:F4:8A:20:C6:EA:C6:D2:35:95:87:2C:61:16:18:B8:AF:BF:91:52:7A:4E:50"}}},"request":{"raw":"GET /teK2WbBKRvMAJe3wGZImS.js HTTP/1.1\r\nHost: noteworthy-lox.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://checkfirelight.info\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://checkfirelight.info/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/javascript;charset=utf-8\r\npriority: u=3,i=?0\r\nlast-modified: Fri, 03 Jul 2026 15:00:17 GMT\r\ndate: Fri, 03 Jul 2026 15:16:38 GMT\r\nserver: cloudflare\r\naccess-control-allow-origin: *\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"cc0c4df860bdb3e15f45056fa7f35f43\"\r\ncontent-encoding: zstd\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FBzUXG4MoTEXnSBaM0BTCJqIg2LpeqPY6nOJqezTk567NHSPLstoFosXA0WX3GtfK7yLDYMwX%2Ff5scMUKXNCtz2FXR36gRyTR%2ByPN5h01MATiJ2VsCP55gIK49p%2FpODEupVDEEw%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-methods: GET\r\ncf-ray: a156da3c1c7d56bb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4776395,"size_decoded":765816,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"4dd3e4d7c5dc7b6eb6e0b25193ab196e","sha1":"9067129f1d04826bfe950d4d09cc4743e53d4e68","sha256":"b547b9e14f80ee84b33c88a9847d1555835a51341397bb19972eb4a819b9cab8","sha512":"fd5792e9409c2544631a189f3441b567c8f107599c1f1ca4d5b4445a7d938e7335bf930075e39a8e7a8775d04d98a8b25602ed1164413b7253c4b926f1abf708","ssdeep":"12288:Njgt5uPKYXU2jzQ6PXs0N8noHie8DUpYwM6sSq1de:NjW5D2U2jzp80eniie8iYjQqK","tlshash":"5a3519af23207152836951908836358cf178e9980c89d06ff7b8ecffb959c94a657f36","first_seen":"2026-07-03T15:17:27.624433Z","last_seen":"2026-07-03T15:17:27.624433Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1425,"timings":{"blocked":0,"dns":86,"connect":13,"send":0,"wait":172,"receive":1154,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-03","alert":"Sinkholed","trigger":"noteworthy-lox.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-03","alert":"Sinkholed","trigger":"noteworthy-lox.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gateway.irys.xyz/AEdaUbAHJH6uu1qeTC5sgQUzocwS61ZW7xEYJMCzuuq6","fqdn":"gateway.irys.xyz","domain":"irys.xyz","tld":"xyz"},"ip":{"addr":"104.20.31.170","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://checkfirelight.info/?__cf_chl_f_tk=eGKU5iLblymwxyOeNmNruQ.l3zP2OCXLr.zIScLHzv0-1783091788-1.0.1.1-Fv87xRPeIv3TprVCiZ.2hi.uzbhacVecKxhd1NX43eg","date":"2026-07-03T15:16:40.466Z","timestamp":1783091800466,"http_version":"HTTP/2","security_state":"secure","security_info":null,"request":{"raw":"GET /AEdaUbAHJH6uu1qeTC5sgQUzocwS61ZW7xEYJMCzuuq6 HTTP/1.1\r\nHost: gateway.irys.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://checkfirelight.info/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 \r\ndate: Fri, 03 Jul 2026 15:16:40 GMT\r\ncontent-length: 0\r\nlocation: https://re3ropp2geh4d5qidoozfesfsagireabcedh4j6agvkzpc463fcq.mainnet-1.datasprite-cdn.com/AEdaUbAHJH6uu1qeTC5sgQUzocwS61ZW7xEYJMCzuuq6/\r\nserver: cloudflare\r\naccess-control-allow-credentials: true\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\ncache-control: no-store\r\naccess-control-expose-headers: cache-control, location\r\nx-cache-status: BYPASS\r\ncf-cache-status: BYPASS\r\ncf-ray: a156da48eed0569f-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-03T19:16:40.563677Z","times_seen":16948877,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-03","alert":"Sinkholed","trigger":"gateway.irys.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zunczd3cinnovpzh2w3sv4yyf4ycdzgcmlyvoo2eu3edqrvshgvq.mainnet-1.datasprite-cdn.com/Eodj8znQBik51BJNXiRTw1t2HXyv9p3LNhiNvsoMuDbg/","fqdn":"zunczd3cinnovpzh2w3sv4yyf4ycdzgcmlyvoo2eu3edqrvshgvq.mainnet-1.datasprite-cdn.com","domain":"datasprite-cdn.com","tld":"com"},"ip":{"addr":"104.21.15.158","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://checkfirelight.info/?__cf_chl_f_tk=eGKU5iLblymwxyOeNmNruQ.l3zP2OCXLr.zIScLHzv0-1783091788-1.0.1.1-Fv87xRPeIv3TprVCiZ.2hi.uzbhacVecKxhd1NX43eg","date":"2026-07-03T15:16:40.761Z","timestamp":1783091800761,"http_version":"HTTP/3","security_state":"secure","security_info":null,"request":{"raw":"GET /Eodj8znQBik51BJNXiRTw1t2HXyv9p3LNhiNvsoMuDbg/ HTTP/1.1\r\nHost: zunczd3cinnovpzh2w3sv4yyf4ycdzgcmlyvoo2eu3edqrvshgvq.mainnet-1.datasprite-cdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://checkfirelight.info/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-03T19:16:40.563677Z","times_seen":16948877,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-03","alert":"Sinkholed","trigger":"zunczd3cinnovpzh2w3sv4yyf4ycdzgcmlyvoo2eu3edqrvshgvq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-03","alert":"Sinkholed","trigger":"zunczd3cinnovpzh2w3sv4yyf4ycdzgcmlyvoo2eu3edqrvshgvq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-03","alert":"Sinkholed","trigger":"zunczd3cinnovpzh2w3sv4yyf4ycdzgcmlyvoo2eu3edqrvshgvq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"checkfirelight.info/favicon.ico","fqdn":"checkfirelight.info","domain":"checkfirelight.info","tld":"info"},"ip":{"addr":"172.67.128.191","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://checkfirelight.info/","date":"2026-07-03T15:16:29.327Z","timestamp":1783091789327,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"checkfirelight.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Jun 2026 16:28:10 GMT","end":"Mon, 28 Sep 2026 17:26:57 GMT"},"fingerprint":{"sha1":"E2:6B:21:81:9C:B8:AD:23:84:9C:B6:45:4A:80:6C:AB:99:5C:10:CE","sha256":"74:38:CD:39:7B:FF:5B:B8:A3:DA:05:94:43:47:07:5D:75:8F:ED:21:4F:0A:80:2E:4D:AE:4E:E7:5B:5C:7C:DC"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: checkfirelight.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://checkfirelight.info/?__cf_chl_rt_tk=eGKU5iLblymwxyOeNmNruQ.l3zP2OCXLr.zIScLHzv0-1783091788-1.0.1.1-Fv87xRPeIv3TprVCiZ.2hi.uzbhacVecKxhd1NX43eg\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\ndate: Fri, 03 Jul 2026 15:16:29 GMT\r\nserver: cloudflare\r\nserver-timing: cfExtPri\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=S0Jck%2BrHw8sGWNP6YzMueOMrygHnLbydKxOZm9mZmxiv6wUTXO849d5wD%2BmhTtEHKSBBRrhAoOI9Z3Sw%2BrcfdM7saWnR8bH5pjenIhme1TfZdSDSTqrbb9SbPuUzgCDWdvK6CDZV\"}]}\r\ncf-ray: a156da034abc76ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 0\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":574,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-03T19:16:40.563677Z","times_seen":16948877,"resource_available":true,"data":null}},"time_used":415,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":415,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-03","alert":"Sinkholed","trigger":"checkfirelight.info","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-03","alert":"Sinkholed","trigger":"checkfirelight.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"checkfirelight.info/cdn-cgi/challenge-platform/h/b/fo/164613808:1783090830:nkg7FHmMHwmfjhhHzII7r-k11_LxWcE5cbmdGdGelGU/a156da011a5f76ef/ZC1nKWwNAj6S8mhmsz7bG3Sr8JjxLPaJn1LhAXjRRfs-1783091788-1.2.1.1-9dGZgCKYBiD3z2dVMVHYnt2uR2GEw6K.WKZJONtJ8n5fyXHuVT7rMBKbZJRqOAud","fqdn":"checkfirelight.info","domain":"checkfirelight.info","tld":"info"},"ip":{"addr":"172.67.128.191","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://checkfirelight.info/","date":"2026-07-03T15:16:36.227Z","timestamp":1783091796227,"http_version":"HTTP/3","security_state":"secure","security_info":null,"request":{"raw":"POST /cdn-cgi/challenge-platform/h/b/fo/164613808:1783090830:nkg7FHmMHwmfjhhHzII7r-k11_LxWcE5cbmdGdGelGU/a156da011a5f76ef/ZC1nKWwNAj6S8mhmsz7bG3Sr8JjxLPaJn1LhAXjRRfs-1783091788-1.2.1.1-9dGZgCKYBiD3z2dVMVHYnt2uR2GEw6K.WKZJONtJ8n5fyXHuVT7rMBKbZJRqOAud HTTP/1.1\r\nHost: checkfirelight.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://checkfirelight.info/\r\ncf-chl: ZC1nKWwNAj6S8mhmsz7bG3Sr8JjxLPaJn1LhAXjRRfs-1783091788-1.2.1.1-9dGZgCKYBiD3z2dVMVHYnt2uR2GEw6K.WKZJONtJ8n5fyXHuVT7rMBKbZJRqOAud\r\ncf-chl-ra: 0\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 8034\r\nOrigin: https://checkfirelight.info\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-03T19:16:40.563677Z","times_seen":16948877,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-03","alert":"Sinkholed","trigger":"checkfirelight.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-03","alert":"Sinkholed","trigger":"checkfirelight.info","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"checkfirelight.info/","fqdn":"checkfirelight.info","domain":"checkfirelight.info","tld":"info"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-07-03T15:16:42.227Z","timestamp":1783091802227,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"checkfirelight.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Jun 2026 16:28:10 GMT","end":"Mon, 28 Sep 2026 17:26:57 GMT"},"fingerprint":{"sha1":"E2:6B:21:81:9C:B8:AD:23:84:9C:B6:45:4A:80:6C:AB:99:5C:10:CE","sha256":"74:38:CD:39:7B:FF:5B:B8:A3:DA:05:94:43:47:07:5D:75:8F:ED:21:4F:0A:80:2E:4D:AE:4E:E7:5B:5C:7C:DC"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: checkfirelight.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: cf_clearance=x7CrPDFa3VxjzKhrvkEtAP2DZJf60Q5q9K_NH0LnzxU-1783091796-1.2.1.1-XBW1i5n_SDimWqwX6Vod0hbq9bRwT8EgUnJ3vfsz7d03j.ElHU8e.vZVTsRQNgL6zQtCZ4AcOM7zUV3ZCjlG7.5pbuGDdkUEFeHF6a3XncUT7oWL6nykc7ZemxMFnSF.jP0HtU3YPWbNZSyY1DwDDJsHKfrO.QDrYbJ_Xt4pam1O9dvV2z8RwqkAhfg0ooK3FIUgBnpqmlpCvkrJ4FjiBNY5fUQszDf9hR_5V2FcrRvb6NfDKTu9wRl1JIYx.KoEKdHLoXfET8nvf9FBigAOgaC4gvY6FCohBYjcTNHnz9CvY.oFpNookrmmKc_aKOubsA9qrVprld9Oy.u2o8mmIHi8WkYxzprYORqFzBRs2K4UpY0OOsFmXH_nWCes.q2ii5Jl5DTBlO_B5yBY.QiwNiF.zFiseZKEoEE3u9FpAbcSIVRV2cKFYjyRDGl_Aek68EuYCh.mz2sN.hwRdkqbwRN.l3tOXqiv2Pp4kueYbdoLTRBU2_ON7Vss.5M7..9z\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-03T19:16:40.563677Z","times_seen":16948877,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-03","alert":"Sinkholed","trigger":"checkfirelight.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-03","alert":"Sinkholed","trigger":"checkfirelight.info","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"checkfirelight.info/7ae1fd5c09a816c4621ede27e29f7e71fd6aa6f5.png","fqdn":"checkfirelight.info","domain":"checkfirelight.info","tld":"info"},"ip":{"addr":"172.67.128.191","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://checkfirelight.info/?__cf_chl_f_tk=eGKU5iLblymwxyOeNmNruQ.l3zP2OCXLr.zIScLHzv0-1783091788-1.0.1.1-Fv87xRPeIv3TprVCiZ.2hi.uzbhacVecKxhd1NX43eg","date":"2026-07-03T15:16:36.674Z","timestamp":1783091796674,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"checkfirelight.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Jun 2026 16:28:10 GMT","end":"Mon, 28 Sep 2026 17:26:57 GMT"},"fingerprint":{"sha1":"E2:6B:21:81:9C:B8:AD:23:84:9C:B6:45:4A:80:6C:AB:99:5C:10:CE","sha256":"74:38:CD:39:7B:FF:5B:B8:A3:DA:05:94:43:47:07:5D:75:8F:ED:21:4F:0A:80:2E:4D:AE:4E:E7:5B:5C:7C:DC"}}},"request":{"raw":"GET /7ae1fd5c09a816c4621ede27e29f7e71fd6aa6f5.png HTTP/1.1\r\nHost: checkfirelight.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://checkfirelight.info/?__cf_chl_f_tk=eGKU5iLblymwxyOeNmNruQ.l3zP2OCXLr.zIScLHzv0-1783091788-1.0.1.1-Fv87xRPeIv3TprVCiZ.2hi.uzbhacVecKxhd1NX43eg\r\nCookie: cf_clearance=x7CrPDFa3VxjzKhrvkEtAP2DZJf60Q5q9K_NH0LnzxU-1783091796-1.2.1.1-XBW1i5n_SDimWqwX6Vod0hbq9bRwT8EgUnJ3vfsz7d03j.ElHU8e.vZVTsRQNgL6zQtCZ4AcOM7zUV3ZCjlG7.5pbuGDdkUEFeHF6a3XncUT7oWL6nykc7ZemxMFnSF.jP0HtU3YPWbNZSyY1DwDDJsHKfrO.QDrYbJ_Xt4pam1O9dvV2z8RwqkAhfg0ooK3FIUgBnpqmlpCvkrJ4FjiBNY5fUQszDf9hR_5V2FcrRvb6NfDKTu9wRl1JIYx.KoEKdHLoXfET8nvf9FBigAOgaC4gvY6FCohBYjcTNHnz9CvY.oFpNookrmmKc_aKOubsA9qrVprld9Oy.u2o8mmIHi8WkYxzprYORqFzBRs2K4UpY0OOsFmXH_nWCes.q2ii5Jl5DTBlO_B5yBY.QiwNiF.zFiseZKEoEE3u9FpAbcSIVRV2cKFYjyRDGl_Aek68EuYCh.mz2sN.hwRdkqbwRN.l3tOXqiv2Pp4kueYbdoLTRBU2_ON7Vss.5M7..9z\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: image/png\r\netag: \"774908dd96042307639e40a6950e03a0\"\r\nlast-modified: Tue, 30 Jun 2026 17:20:30 GMT\r\ndate: Fri, 03 Jul 2026 15:16:37 GMT\r\nserver: cloudflare\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UNzoKboqasbt%2FHk5ujeP3oS6%2F5laA7GWsahO43eBsedvUPDzYaY9UKsGil8ljcAmJEIuc%2FQW35h8aklf5AigX0AgJvXxS66xFguqgn3BxUlStcfIi9UyK4S%2BURGQ0oshaWX78Sf8\"}]}\r\ncf-ray: a156da313b4276ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 2491\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2491,"size_decoded":3205,"mime_type":"image/png","magic":"PNG image data, 241 x 240, 8-bit colormap, non-interlaced","md5":"774908dd96042307639e40a6950e03a0","sha1":"7ae1fd5c09a816c4621ede27e29f7e71fd6aa6f5","sha256":"0594fb55762cd41c9e6bc4f0ba31f2ba8fd4c8288a22a92da169c6e9bd748b8a","sha512":"fc8a1a0953c216952a585988bb4fc598e514ba032c9cd6e6df764bbd0945992eb96999fc4452c3907462863626f231fea2b802fadfe1190a53f880bffeabfaf8","ssdeep":"","tlshash":"53515df6ecbd282c4014d6ad141f00f3ec37cb86cc4d1d185a830ad496a7aa0fc943e0","first_seen":"2026-04-24T15:23:09.414396Z","last_seen":"2026-07-03T15:17:27.625489Z","times_seen":19,"resource_available":false,"data":null}},"time_used":549,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":549,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-03","alert":"Sinkholed","trigger":"checkfirelight.info","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-03","alert":"Sinkholed","trigger":"checkfirelight.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"checkfirelight.info/f905dfdaee0239159a779f2d1e56c4da73766ce1.woff2","fqdn":"checkfirelight.info","domain":"checkfirelight.info","tld":"info"},"ip":{"addr":"172.67.128.191","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://checkfirelight.info/?__cf_chl_f_tk=eGKU5iLblymwxyOeNmNruQ.l3zP2OCXLr.zIScLHzv0-1783091788-1.0.1.1-Fv87xRPeIv3TprVCiZ.2hi.uzbhacVecKxhd1NX43eg","date":"2026-07-03T15:16:36.961Z","timestamp":1783091796961,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"checkfirelight.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Jun 2026 16:28:10 GMT","end":"Mon, 28 Sep 2026 17:26:57 GMT"},"fingerprint":{"sha1":"E2:6B:21:81:9C:B8:AD:23:84:9C:B6:45:4A:80:6C:AB:99:5C:10:CE","sha256":"74:38:CD:39:7B:FF:5B:B8:A3:DA:05:94:43:47:07:5D:75:8F:ED:21:4F:0A:80:2E:4D:AE:4E:E7:5B:5C:7C:DC"}}},"request":{"raw":"GET /f905dfdaee0239159a779f2d1e56c4da73766ce1.woff2 HTTP/1.1\r\nHost: checkfirelight.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://checkfirelight.info/?__cf_chl_f_tk=eGKU5iLblymwxyOeNmNruQ.l3zP2OCXLr.zIScLHzv0-1783091788-1.0.1.1-Fv87xRPeIv3TprVCiZ.2hi.uzbhacVecKxhd1NX43eg\r\nCookie: cf_clearance=x7CrPDFa3VxjzKhrvkEtAP2DZJf60Q5q9K_NH0LnzxU-1783091796-1.2.1.1-XBW1i5n_SDimWqwX6Vod0hbq9bRwT8EgUnJ3vfsz7d03j.ElHU8e.vZVTsRQNgL6zQtCZ4AcOM7zUV3ZCjlG7.5pbuGDdkUEFeHF6a3XncUT7oWL6nykc7ZemxMFnSF.jP0HtU3YPWbNZSyY1DwDDJsHKfrO.QDrYbJ_Xt4pam1O9dvV2z8RwqkAhfg0ooK3FIUgBnpqmlpCvkrJ4FjiBNY5fUQszDf9hR_5V2FcrRvb6NfDKTu9wRl1JIYx.KoEKdHLoXfET8nvf9FBigAOgaC4gvY6FCohBYjcTNHnz9CvY.oFpNookrmmKc_aKOubsA9qrVprld9Oy.u2o8mmIHi8WkYxzprYORqFzBRs2K4UpY0OOsFmXH_nWCes.q2ii5Jl5DTBlO_B5yBY.QiwNiF.zFiseZKEoEE3u9FpAbcSIVRV2cKFYjyRDGl_Aek68EuYCh.mz2sN.hwRdkqbwRN.l3tOXqiv2Pp4kueYbdoLTRBU2_ON7Vss.5M7..9z\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: font/woff2\r\netag: \"b8cdc28bcb64c4f37591d58dcc29003c\"\r\nlast-modified: Tue, 30 Jun 2026 17:20:31 GMT\r\ndate: Fri, 03 Jul 2026 15:16:37 GMT\r\nserver: cloudflare\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TNWbo%2BYZAEhLbRVIzAyxCgLv%2Betq%2BhY4W8DARkVQG8UhIe5jjI%2BEzkmosXJ7P5SZSiO2euoKqcW5OxhSJwEX1QSigw1WVoMZlI5dzwvBiGz9QasDggiUshNfieZ8MytXCcdvSVZ2\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a156da330bb476ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":18060,"size_decoded":18731,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 18060, version 1.0","md5":"b8cdc28bcb64c4f37591d58dcc29003c","sha1":"f905dfdaee0239159a779f2d1e56c4da73766ce1","sha256":"745b4c6588e0a743d0785ccec0b7287e4fdb3330ca3613db2d8038a6fa2d1077","sha512":"26238e428285656f308ab57b2acbf9d57f185dd6207b551a58b642a60d9270cecd8f2e5c450a732e2942893ed36c3c88119e46fe08608ff006e7c065262fe664","ssdeep":"384:VCcPC24dmbtaf09GwGLUxu6e2+bp12M8SwEtAnNA1PFJFku7LpK+gYHJZeCY2QWI:VTPC2PtaAGwOUVX+bpr8SZtAn4kuHltC","tlshash":"4c82e1388a85a3dffed245bbbf1488eba45302a097e29e7cd08dd6886f05345c815f15","first_seen":"2025-06-27T15:07:05.124003Z","last_seen":"2026-07-03T15:17:27.626557Z","times_seen":17,"resource_available":false,"data":null}},"time_used":245,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":170,"receive":75,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-03","alert":"Sinkholed","trigger":"checkfirelight.info","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-03","alert":"Sinkholed","trigger":"checkfirelight.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"arbitrum.drpc.org/","fqdn":"arbitrum.drpc.org","domain":"drpc.org","tld":"org"},"ip":{"addr":"104.18.10.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://checkfirelight.info/?__cf_chl_f_tk=eGKU5iLblymwxyOeNmNruQ.l3zP2OCXLr.zIScLHzv0-1783091788-1.0.1.1-Fv87xRPeIv3TprVCiZ.2hi.uzbhacVecKxhd1NX43eg","date":"2026-07-03T15:16:38.149Z","timestamp":1783091798149,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"drpc.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 14 Jun 2026 23:01:08 GMT","end":"Sun, 13 Sep 2026 00:00:59 GMT"},"fingerprint":{"sha1":"7F:E5:3C:EC:15:AC:2B:17:FE:8B:3B:16:E4:25:9A:40:37:43:63:45","sha256":"DF:D3:75:05:E3:1C:E5:C2:B8:D6:2A:66:75:39:9A:D3:91:D6:86:E7:7B:11:D6:84:3E:A1:0F:FF:79:47:06:19"}}},"request":{"raw":"POST / HTTP/1.1\r\nHost: arbitrum.drpc.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://checkfirelight.info/\r\nContent-Type: application/json\r\nContent-Length: 136\r\nOrigin: https://checkfirelight.info\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 03 Jul 2026 15:16:39 GMT\r\ncontent-type: application/json\r\naccess-control-allow-origin: *\r\nvary: Accept-Encoding\r\nx-drpc-owner-id: cb501251-31a8-4028-8b0a-54679f15c385\r\nx-drpc-owner-tier: free\r\nx-drpc-provider-id: drpc-public-multiregion\r\nx-drpc-trace-id: 573c72d65f4ddef595258c52a5ea4c5c\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\ncontent-encoding: zstd\r\nserver: cloudflare\r\ncf-ray: a156da3be8cc120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":422,"size_decoded":748,"mime_type":"application/json","magic":"JSON text data","md5":"0ffc036afc3a9ddb245d311fcb164fcc","sha1":"e7ddfd2ff059c51d69a73521ff646763d74d41ed","sha256":"b2350d17a06f7e8d1f262035aad4dc2772d4987c35f10c20d25211c95da9bbc2","sha512":"8ec60e49aebdd167152ca83af297dd89ecf5ca8262ad247891ec76d5df936e60009ade42c1d6e91121496029faf80c01576e7ee568ef354038272666b9ee4b0a","ssdeep":"","tlshash":"80e02be42047a596f66808bbe6c43671b075730bc5e1cf83494df80009409a1eb0e54c","first_seen":"2026-07-03T15:17:27.601703Z","last_seen":"2026-07-03T15:17:27.601703Z","times_seen":1,"resource_available":false,"data":null}},"time_used":833,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":833,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gateway.irys.xyz/GUcEiBVePo1UyG8J3tBaNDDHn3k2isozZHErCoS64QLf","fqdn":"gateway.irys.xyz","domain":"irys.xyz","tld":"xyz"},"ip":{"addr":"104.20.31.170","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://checkfirelight.info/?__cf_chl_f_tk=eGKU5iLblymwxyOeNmNruQ.l3zP2OCXLr.zIScLHzv0-1783091788-1.0.1.1-Fv87xRPeIv3TprVCiZ.2hi.uzbhacVecKxhd1NX43eg","date":"2026-07-03T15:16:40.503Z","timestamp":1783091800503,"http_version":"HTTP/2","security_state":"secure","security_info":null,"request":{"raw":"GET /GUcEiBVePo1UyG8J3tBaNDDHn3k2isozZHErCoS64QLf HTTP/1.1\r\nHost: gateway.irys.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://checkfirelight.info/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 \r\ndate: Fri, 03 Jul 2026 15:16:40 GMT\r\ncontent-length: 0\r\nlocation: https://4xy5hycubobxyykm63sfnbkjznatsbung7ttetuoehkqf7ozquma.mainnet-1.datasprite-cdn.com/GUcEiBVePo1UyG8J3tBaNDDHn3k2isozZHErCoS64QLf/\r\nserver: cloudflare\r\naccess-control-allow-credentials: true\r\naccess-control-expose-headers: location, cache-control\r\ncache-control: no-store\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nx-cache-status: BYPASS\r\ncf-cache-status: BYPASS\r\ncf-ray: a156da492f1f569f-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-03T19:16:40.563677Z","times_seen":16948877,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-03","alert":"Sinkholed","trigger":"gateway.irys.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ipzqcmr26hbzpnzybg3ewzxzuu26ypvig3lp4irbfe643kmo3g5a.mainnet-1.datasprite-cdn.com/5aFEMn7GceUbCyMFsKjcw8DJY9c9PzWNeJv7ragvUWTT/","fqdn":"ipzqcmr26hbzpnzybg3ewzxzuu26ypvig3lp4irbfe643kmo3g5a.mainnet-1.datasprite-cdn.com","domain":"datasprite-cdn.com","tld":"com"},"ip":{"addr":"104.21.15.158","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://checkfirelight.info/?__cf_chl_f_tk=eGKU5iLblymwxyOeNmNruQ.l3zP2OCXLr.zIScLHzv0-1783091788-1.0.1.1-Fv87xRPeIv3TprVCiZ.2hi.uzbhacVecKxhd1NX43eg","date":"2026-07-03T15:16:40.795Z","timestamp":1783091800795,"http_version":"HTTP/3","security_state":"secure","security_info":null,"request":{"raw":"GET /5aFEMn7GceUbCyMFsKjcw8DJY9c9PzWNeJv7ragvUWTT/ HTTP/1.1\r\nHost: ipzqcmr26hbzpnzybg3ewzxzuu26ypvig3lp4irbfe643kmo3g5a.mainnet-1.datasprite-cdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://checkfirelight.info/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-03T19:16:40.563677Z","times_seen":16948877,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-03","alert":"Sinkholed","trigger":"ipzqcmr26hbzpnzybg3ewzxzuu26ypvig3lp4irbfe643kmo3g5a.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-03","alert":"Sinkholed","trigger":"ipzqcmr26hbzpnzybg3ewzxzuu26ypvig3lp4irbfe643kmo3g5a.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-03","alert":"Sinkholed","trigger":"ipzqcmr26hbzpnzybg3ewzxzuu26ypvig3lp4irbfe643kmo3g5a.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"checkfirelight.info/06819da46a119a541dbda36e9a9eb47a68ee89a4.png","fqdn":"checkfirelight.info","domain":"checkfirelight.info","tld":"info"},"ip":{"addr":"172.67.128.191","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://checkfirelight.info/?__cf_chl_f_tk=eGKU5iLblymwxyOeNmNruQ.l3zP2OCXLr.zIScLHzv0-1783091788-1.0.1.1-Fv87xRPeIv3TprVCiZ.2hi.uzbhacVecKxhd1NX43eg","date":"2026-07-03T15:16:36.976Z","timestamp":1783091796976,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"checkfirelight.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Jun 2026 16:28:10 GMT","end":"Mon, 28 Sep 2026 17:26:57 GMT"},"fingerprint":{"sha1":"E2:6B:21:81:9C:B8:AD:23:84:9C:B6:45:4A:80:6C:AB:99:5C:10:CE","sha256":"74:38:CD:39:7B:FF:5B:B8:A3:DA:05:94:43:47:07:5D:75:8F:ED:21:4F:0A:80:2E:4D:AE:4E:E7:5B:5C:7C:DC"}}},"request":{"raw":"GET /06819da46a119a541dbda36e9a9eb47a68ee89a4.png HTTP/1.1\r\nHost: checkfirelight.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://checkfirelight.info/?__cf_chl_f_tk=eGKU5iLblymwxyOeNmNruQ.l3zP2OCXLr.zIScLHzv0-1783091788-1.0.1.1-Fv87xRPeIv3TprVCiZ.2hi.uzbhacVecKxhd1NX43eg\r\nCookie: cf_clearance=x7CrPDFa3VxjzKhrvkEtAP2DZJf60Q5q9K_NH0LnzxU-1783091796-1.2.1.1-XBW1i5n_SDimWqwX6Vod0hbq9bRwT8EgUnJ3vfsz7d03j.ElHU8e.vZVTsRQNgL6zQtCZ4AcOM7zUV3ZCjlG7.5pbuGDdkUEFeHF6a3XncUT7oWL6nykc7ZemxMFnSF.jP0HtU3YPWbNZSyY1DwDDJsHKfrO.QDrYbJ_Xt4pam1O9dvV2z8RwqkAhfg0ooK3FIUgBnpqmlpCvkrJ4FjiBNY5fUQszDf9hR_5V2FcrRvb6NfDKTu9wRl1JIYx.KoEKdHLoXfET8nvf9FBigAOgaC4gvY6FCohBYjcTNHnz9CvY.oFpNookrmmKc_aKOubsA9qrVprld9Oy.u2o8mmIHi8WkYxzprYORqFzBRs2K4UpY0OOsFmXH_nWCes.q2ii5Jl5DTBlO_B5yBY.QiwNiF.zFiseZKEoEE3u9FpAbcSIVRV2cKFYjyRDGl_Aek68EuYCh.mz2sN.hwRdkqbwRN.l3tOXqiv2Pp4kueYbdoLTRBU2_ON7Vss.5M7..9z\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: image/png\r\netag: \"22b70ab1a57849b2d9229ea5f20e55c7\"\r\nlast-modified: Tue, 30 Jun 2026 17:20:31 GMT\r\ndate: Fri, 03 Jul 2026 15:16:37 GMT\r\nserver: cloudflare\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TWCl0kw9VKBNKohmkV57rEyl%2BhfHz12jNfp8zYKJyJnz7j214SjG%2Fbn%2FZM%2B0TxvXNkDtyaoVOcA5sQAy8Bg86U%2Fu52CLRa80K9iboFNJHmlWwtAu8%2BXosyCEH3NtfsnuBBD%2BJ94w\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a156da331bbd76ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":142171,"size_decoded":142844,"mime_type":"image/png","magic":"PNG image data, 800 x 776, 8-bit/color RGBA, non-interlaced","md5":"22b70ab1a57849b2d9229ea5f20e55c7","sha1":"06819da46a119a541dbda36e9a9eb47a68ee89a4","sha256":"b66c86f3a8fc126a563f582f85ec7e2bc36a4608d33b81e0777401114eed2818","sha512":"925f53ac647440f879a67709f1611dbc4e1b4173be31cee7014417417ed6225bba69c61862d6cd2a48ef04a2bf6abb6c723cfd387af6a975c681c512aab80c85","ssdeep":"3072:UOrY2fP7LgFIvLtU3JffWuVpnLQhvqTjv+6i++iJWUnhJIJ/d0RuYAS:UOrTHgoK38uVVLDn+nwnnIddrS","tlshash":"9dd3132ee8c062716d0d1b7e84c97c73050aedd7636aef3d4e3054eab9348923ba5547","first_seen":"2026-04-17T17:57:05.28014Z","last_seen":"2026-07-03T15:17:27.627194Z","times_seen":39,"resource_available":false,"data":null}},"time_used":426,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":164,"receive":262,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-03","alert":"Sinkholed","trigger":"checkfirelight.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-03","alert":"Sinkholed","trigger":"checkfirelight.info","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gateway.irys.xyz/5GHDNrA7AEgG9NmMQKVL78E5F3oMjEvyd59Ls5SEk6JC","fqdn":"gateway.irys.xyz","domain":"irys.xyz","tld":"xyz"},"ip":{"addr":"104.20.31.170","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://checkfirelight.info/?__cf_chl_f_tk=eGKU5iLblymwxyOeNmNruQ.l3zP2OCXLr.zIScLHzv0-1783091788-1.0.1.1-Fv87xRPeIv3TprVCiZ.2hi.uzbhacVecKxhd1NX43eg","date":"2026-07-03T15:16:40.492Z","timestamp":1783091800492,"http_version":"HTTP/2","security_state":"secure","security_info":null,"request":{"raw":"GET /5GHDNrA7AEgG9NmMQKVL78E5F3oMjEvyd59Ls5SEk6JC HTTP/1.1\r\nHost: gateway.irys.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://checkfirelight.info/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"302","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-03T19:16:40.563677Z","times_seen":16948877,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-03","alert":"Sinkholed","trigger":"gateway.irys.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"checkfirelight.info/assets/secure.php?req=ping","fqdn":"checkfirelight.info","domain":"checkfirelight.info","tld":"info"},"ip":{"addr":"172.67.128.191","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://checkfirelight.info/?__cf_chl_f_tk=eGKU5iLblymwxyOeNmNruQ.l3zP2OCXLr.zIScLHzv0-1783091788-1.0.1.1-Fv87xRPeIv3TprVCiZ.2hi.uzbhacVecKxhd1NX43eg","date":"2026-07-03T15:16:40.537Z","timestamp":1783091800537,"http_version":"HTTP/3","security_state":"secure","security_info":null,"request":{"raw":"GET /assets/secure.php?req=ping HTTP/1.1\r\nHost: checkfirelight.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://checkfirelight.info/?__cf_chl_f_tk=eGKU5iLblymwxyOeNmNruQ.l3zP2OCXLr.zIScLHzv0-1783091788-1.0.1.1-Fv87xRPeIv3TprVCiZ.2hi.uzbhacVecKxhd1NX43eg\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: cf_clearance=x7CrPDFa3VxjzKhrvkEtAP2DZJf60Q5q9K_NH0LnzxU-1783091796-1.2.1.1-XBW1i5n_SDimWqwX6Vod0hbq9bRwT8EgUnJ3vfsz7d03j.ElHU8e.vZVTsRQNgL6zQtCZ4AcOM7zUV3ZCjlG7.5pbuGDdkUEFeHF6a3XncUT7oWL6nykc7ZemxMFnSF.jP0HtU3YPWbNZSyY1DwDDJsHKfrO.QDrYbJ_Xt4pam1O9dvV2z8RwqkAhfg0ooK3FIUgBnpqmlpCvkrJ4FjiBNY5fUQszDf9hR_5V2FcrRvb6NfDKTu9wRl1JIYx.KoEKdHLoXfET8nvf9FBigAOgaC4gvY6FCohBYjcTNHnz9CvY.oFpNookrmmKc_aKOubsA9qrVprld9Oy.u2o8mmIHi8WkYxzprYORqFzBRs2K4UpY0OOsFmXH_nWCes.q2ii5Jl5DTBlO_B5yBY.QiwNiF.zFiseZKEoEE3u9FpAbcSIVRV2cKFYjyRDGl_Aek68EuYCh.mz2sN.hwRdkqbwRN.l3tOXqiv2Pp4kueYbdoLTRBU2_ON7Vss.5M7..9z\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-03T19:16:40.563677Z","times_seen":16948877,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-03","alert":"Sinkholed","trigger":"checkfirelight.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-03","alert":"Sinkholed","trigger":"checkfirelight.info","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/cmg/1","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/av0/rch/n1hp3/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","date":"2026-07-03T15:16:29.898Z","timestamp":1783091789898,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"challenges.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 16 Jun 2026 20:15:28 GMT","end":"Mon, 14 Sep 2026 21:15:13 GMT"},"fingerprint":{"sha1":"77:27:72:42:CF:51:E8:8C:7C:3E:8C:4C:A1:F0:9A:86:96:B9:0A:16","sha256":"ED:7C:F7:38:B3:0F:00:86:32:D1:14:CE:C0:FF:CA:0E:7C:86:EE:49:51:EF:A4:4B:AA:5C:B6:7C:00:B5:3D:F3"}}},"request":{"raw":"GET /cdn-cgi/challenge-platform/h/b/cmg/1 HTTP/1.1\r\nHost: challenges.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/av0/rch/n1hp3/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 03 Jul 2026 15:16:29 GMT\r\ncontent-type: image/png\r\ncontent-length: 86\r\npriority: u=6,i\r\nserver: cloudflare\r\ncf-ray: a156da074d194c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":86,"size_decoded":305,"mime_type":"image/png","magic":"PNG image data, 2 x 2, 8-bit grayscale, non-interlaced","md5":"6a08fee287b5b4c2cde40612fb341c85","sha1":"1ff153aa48bdff75f4a1c1937c9dc66b4dc50cd4","sha256":"ccae66d59316610a4b8b0dcd92968c1e10b7420b51efa7ca66a406cb32c63fd6","sha512":"74b2067a92d4818d21757ab08515e67ecf2ae744da4135b6155d0f77b3a4c8d47e32ffb3bd3709b6b774c5fc331c0c85478fa34d8c2493755d6bebe987916b09","ssdeep":"","tlshash":"7ea012d572c0ad36c58a0233c1501121f8341187010205300043c8220411f08c3d4942","first_seen":"2026-07-02T12:13:36.025163Z","last_seen":"2026-07-03T17:50:08.625759Z","times_seen":29,"resource_available":false,"data":null}},"time_used":3,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":3,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"checkfirelight.info/c57593e0adc4cf99dd9e67cb782242220a061a9d.woff2","fqdn":"checkfirelight.info","domain":"checkfirelight.info","tld":"info"},"ip":{"addr":"172.67.128.191","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://checkfirelight.info/?__cf_chl_f_tk=eGKU5iLblymwxyOeNmNruQ.l3zP2OCXLr.zIScLHzv0-1783091788-1.0.1.1-Fv87xRPeIv3TprVCiZ.2hi.uzbhacVecKxhd1NX43eg","date":"2026-07-03T15:16:36.954Z","timestamp":1783091796954,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"checkfirelight.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Jun 2026 16:28:10 GMT","end":"Mon, 28 Sep 2026 17:26:57 GMT"},"fingerprint":{"sha1":"E2:6B:21:81:9C:B8:AD:23:84:9C:B6:45:4A:80:6C:AB:99:5C:10:CE","sha256":"74:38:CD:39:7B:FF:5B:B8:A3:DA:05:94:43:47:07:5D:75:8F:ED:21:4F:0A:80:2E:4D:AE:4E:E7:5B:5C:7C:DC"}}},"request":{"raw":"GET /c57593e0adc4cf99dd9e67cb782242220a061a9d.woff2 HTTP/1.1\r\nHost: checkfirelight.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://checkfirelight.info/?__cf_chl_f_tk=eGKU5iLblymwxyOeNmNruQ.l3zP2OCXLr.zIScLHzv0-1783091788-1.0.1.1-Fv87xRPeIv3TprVCiZ.2hi.uzbhacVecKxhd1NX43eg\r\nCookie: cf_clearance=x7CrPDFa3VxjzKhrvkEtAP2DZJf60Q5q9K_NH0LnzxU-1783091796-1.2.1.1-XBW1i5n_SDimWqwX6Vod0hbq9bRwT8EgUnJ3vfsz7d03j.ElHU8e.vZVTsRQNgL6zQtCZ4AcOM7zUV3ZCjlG7.5pbuGDdkUEFeHF6a3XncUT7oWL6nykc7ZemxMFnSF.jP0HtU3YPWbNZSyY1DwDDJsHKfrO.QDrYbJ_Xt4pam1O9dvV2z8RwqkAhfg0ooK3FIUgBnpqmlpCvkrJ4FjiBNY5fUQszDf9hR_5V2FcrRvb6NfDKTu9wRl1JIYx.KoEKdHLoXfET8nvf9FBigAOgaC4gvY6FCohBYjcTNHnz9CvY.oFpNookrmmKc_aKOubsA9qrVprld9Oy.u2o8mmIHi8WkYxzprYORqFzBRs2K4UpY0OOsFmXH_nWCes.q2ii5Jl5DTBlO_B5yBY.QiwNiF.zFiseZKEoEE3u9FpAbcSIVRV2cKFYjyRDGl_Aek68EuYCh.mz2sN.hwRdkqbwRN.l3tOXqiv2Pp4kueYbdoLTRBU2_ON7Vss.5M7..9z\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: font/woff2\r\netag: \"7c87a648293fbb5b2924aafaa59e8aea\"\r\nlast-modified: Tue, 30 Jun 2026 17:20:31 GMT\r\ndate: Fri, 03 Jul 2026 15:16:37 GMT\r\nserver: cloudflare\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rK0TdgWziaRdYS0QbaSOg6o33uuc9jKEDLW2FlXNAQkTSGh5VWhMDBRPLYNYIW6t0P0KD6uP4sEQ2HX0%2B300MxI%2BC0c1siSFh6WuDfBhKMdl%2BR2uiRdVVaXSWfR8XqLdKgrB1mkb\"}]}\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a156da32fbb076ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":36932,"size_decoded":37608,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 36932, version 1.0","md5":"7c87a648293fbb5b2924aafaa59e8aea","sha1":"c57593e0adc4cf99dd9e67cb782242220a061a9d","sha256":"9fea608a947e67020c33cad9a6fe3d60c54119dfb8cff87768a8117a15ed7543","sha512":"764ced325a768dca84e1fb0cc458818239ce379dbcbdb324ee8849bbe15f54e3f0254ae6e52ee5a92741840637b4f9885d246a0978af23176b3acfe5b9cec23f","ssdeep":"768:mMQPOAQQKW6GccoXQ+OGpHNzXgtDM0SVu7P3nqtPl9Bf2csDpHUjbYE8j2:mMQz4W5og+tpH6tDJku73EPlPOcs5U/l","tlshash":"c0f2f23e7ea5691487c2b0be506b00935344c9bd37c18121bbb953f44ea67addc5d63c","first_seen":"2025-09-11T17:08:25.889763Z","last_seen":"2026-07-03T19:05:07.581836Z","times_seen":28710,"resource_available":false,"data":null}},"time_used":249,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":164,"receive":85,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-03","alert":"Sinkholed","trigger":"checkfirelight.info","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-03","alert":"Sinkholed","trigger":"checkfirelight.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gateway.irys.xyz/GYXDFoP5N7zD9drksjJDtzLyuKMxzVC6cxL7hd5FTEmG","fqdn":"gateway.irys.xyz","domain":"irys.xyz","tld":"xyz"},"ip":{"addr":"104.20.31.170","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://checkfirelight.info/?__cf_chl_f_tk=eGKU5iLblymwxyOeNmNruQ.l3zP2OCXLr.zIScLHzv0-1783091788-1.0.1.1-Fv87xRPeIv3TprVCiZ.2hi.uzbhacVecKxhd1NX43eg","date":"2026-07-03T15:16:40.452Z","timestamp":1783091800452,"http_version":"HTTP/2","security_state":"secure","security_info":null,"request":{"raw":"GET /GYXDFoP5N7zD9drksjJDtzLyuKMxzVC6cxL7hd5FTEmG HTTP/1.1\r\nHost: gateway.irys.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://checkfirelight.info/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 \r\ndate: Fri, 03 Jul 2026 15:16:40 GMT\r\ncontent-length: 0\r\nlocation: https://43zhqeb6vzldlqwzbqdiamkbmmrohzz5bvua563j7rbvxnd5u5fq.mainnet-1.datasprite-cdn.com/GYXDFoP5N7zD9drksjJDtzLyuKMxzVC6cxL7hd5FTEmG/\r\nserver: cloudflare\r\naccess-control-expose-headers: location, cache-control\r\ncache-control: no-store\r\naccess-control-allow-credentials: true\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nx-cache-status: BYPASS\r\ncf-cache-status: BYPASS\r\ncf-ray: a156da48deba569f-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-03T19:16:40.563677Z","times_seen":16948877,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-03","alert":"Sinkholed","trigger":"gateway.irys.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"3piw7lupog56srrpctt46tuuiroz3dh47v2vjdtocircg3f7u4za.mainnet-1.datasprite-cdn.com/Fo5WiNNZWKWpLsBjTE9UVq9c5h2Y9DKF9BCyMd9f4p4H/","fqdn":"3piw7lupog56srrpctt46tuuiroz3dh47v2vjdtocircg3f7u4za.mainnet-1.datasprite-cdn.com","domain":"datasprite-cdn.com","tld":"com"},"ip":{"addr":"104.21.15.158","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://checkfirelight.info/?__cf_chl_f_tk=eGKU5iLblymwxyOeNmNruQ.l3zP2OCXLr.zIScLHzv0-1783091788-1.0.1.1-Fv87xRPeIv3TprVCiZ.2hi.uzbhacVecKxhd1NX43eg","date":"2026-07-03T15:16:40.754Z","timestamp":1783091800754,"http_version":"HTTP/3","security_state":"secure","security_info":null,"request":{"raw":"GET /Fo5WiNNZWKWpLsBjTE9UVq9c5h2Y9DKF9BCyMd9f4p4H/ HTTP/1.1\r\nHost: 3piw7lupog56srrpctt46tuuiroz3dh47v2vjdtocircg3f7u4za.mainnet-1.datasprite-cdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://checkfirelight.info/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-03T19:16:40.563677Z","times_seen":16948877,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-03","alert":"Sinkholed","trigger":"3piw7lupog56srrpctt46tuuiroz3dh47v2vjdtocircg3f7u4za.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-03","alert":"Sinkholed","trigger":"3piw7lupog56srrpctt46tuuiroz3dh47v2vjdtocircg3f7u4za.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-03","alert":"Sinkholed","trigger":"3piw7lupog56srrpctt46tuuiroz3dh47v2vjdtocircg3f7u4za.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"f6xwz3lwcfil7qwaikhvuopkgolm7x4zdfqegfkqcoceimvb65bq.mainnet-1.datasprite-cdn.com/4D9JvTbpqf8it29ZeG4AkLd9PUPhpwWH7MzH8bjqcE8a/","fqdn":"f6xwz3lwcfil7qwaikhvuopkgolm7x4zdfqegfkqcoceimvb65bq.mainnet-1.datasprite-cdn.com","domain":"datasprite-cdn.com","tld":"com"},"ip":{"addr":"104.21.15.158","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://checkfirelight.info/?__cf_chl_f_tk=eGKU5iLblymwxyOeNmNruQ.l3zP2OCXLr.zIScLHzv0-1783091788-1.0.1.1-Fv87xRPeIv3TprVCiZ.2hi.uzbhacVecKxhd1NX43eg","date":"2026-07-03T15:16:40.839Z","timestamp":1783091800839,"http_version":"HTTP/3","security_state":"secure","security_info":null,"request":{"raw":"GET /4D9JvTbpqf8it29ZeG4AkLd9PUPhpwWH7MzH8bjqcE8a/ HTTP/1.1\r\nHost: f6xwz3lwcfil7qwaikhvuopkgolm7x4zdfqegfkqcoceimvb65bq.mainnet-1.datasprite-cdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://checkfirelight.info/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-03T19:16:40.563677Z","times_seen":16948877,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-03","alert":"Sinkholed","trigger":"f6xwz3lwcfil7qwaikhvuopkgolm7x4zdfqegfkqcoceimvb65bq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-03","alert":"Sinkholed","trigger":"f6xwz3lwcfil7qwaikhvuopkgolm7x4zdfqegfkqcoceimvb65bq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-03","alert":"Sinkholed","trigger":"f6xwz3lwcfil7qwaikhvuopkgolm7x4zdfqegfkqcoceimvb65bq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}}]}