{"report_id":"814348d6-53e6-443e-8a17-7a96c16ce933","version":0,"status":"done","tags":[],"date":"2026-07-13T00:43:36Z","url":{"schema":"https","addr":"firelightfinances-proposal.live/","fqdn":"firelightfinances-proposal.live","domain":"firelightfinances-proposal.live","tld":"live"},"ip":{"addr":"104.21.14.3","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"firelightfinances-proposal.live/","fqdn":"firelightfinances-proposal.live","domain":"firelightfinances-proposal.live","tld":"live"},"title":"Firelight — Phase 2 Vote","dom":{"size":1398,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"a5f39c08ce75b6f7b93162f31c3ac821","sha1":"71ae8e88c75ac7fab94f334d46e895820b8b4850","sha256":"97e3db1d49408debd2215763fa041decf07a49c40c73ab6ef7603ac6b8a45f7d","sha512":"9900bcef65b35e7f00a8ea66e4ace1ddec6ed95b126e94a3568f4407cbc99f9456df34a84a1884c6276566fbeb9fa8afbb06c1933cc115bdb0c77d14daac2836","ssdeep":"","tlshash":"74212393d5e000ab039292c365d7bb55bdc2ca0fc54d0c0075ad51d44fbef86e56798b","dom_hash":"domhash3202f159e11f25569819329de028aa36","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"firelightfinances-proposal.live/","fqdn":"firelightfinances-proposal.live","domain":"firelightfinances-proposal.live","tld":"live"},"ip":{"addr":"104.21.14.3","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-08-17T00:43:36Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"firelightfinances-proposal.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null},"summary":[{"fqdn":"firelightfinances-proposal.live","ip":{"addr":"172.67.133.149","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-07-11T14:48:48.384048Z","last_seen":"2026-07-11T14:48:48.384048Z","alert_count":9,"request_count":9,"received_data":356863,"sent_data":8066,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-07-12T22:19:35.511658Z","alert_count":0,"request_count":3,"received_data":113235,"sent_data":1782,"comment":"","tags":null,"fingerprints":null},{"fqdn":"challenges.cloudflare.com","ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-02-17","domain_rank":11393,"first_seen":"2021-10-20T05:02:03Z","last_seen":"2026-07-12T23:34:29.320154Z","alert_count":0,"request_count":6,"received_data":827714,"sent_data":4325,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-07-12T22:22:25.184057Z","alert_count":0,"request_count":1,"received_data":4232,"sent_data":549,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"brunhild.challenges.cloudflare.com","ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2009-02-17","domain_rank":0,"first_seen":"2026-06-24T10:51:41.235285Z","last_seen":"2026-07-08T10:55:10.965839Z","alert_count":0,"request_count":1,"received_data":0,"sent_data":628,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/av0/rch/8lak5/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-07-17T23:40:41.493098Z","times_seen":777906,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/av0/rch/8lak5/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"4be7b6b8aa783300ae657a82c16d2a09","sha1":"39c051c1ee899fb0fdec892c96de143739ad2628","sha256":"9ce4a40dab4ae7a062f4860f6a5f77bb0f93dd15b4a24f086e633a62dfaa26cc","sha512":"ed4f6be02687fb5ca630c617096aea4f63e85839ce294d6026bac126865ce8de8cfca9d5bfb335b13b135351e13d49cee6712e22d8274a313c9f1b15f858c66d","ssdeep":"","tlshash":"89900277b5817125574568f1842a251be61946d406544459910400862d104648651bd9","size":50,"data":"","first_seen":"2026-04-23T17:24:48.285702Z","last_seen":"2026-07-17T23:43:16.357737Z","times_seen":77210,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/av0/rch/8lak5/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"93e354e833ee7b4feead7057a3f33168","sha1":"4025c763f11cdc2eef6318108989528620fef9e7","sha256":"80b90237b40178e74c34d6652d95b3918d01b603ba83f9dce47ba6b19343c245","sha512":"2b37a9bb6f2c3e2ad3624228638881eaeb961c98a31e60a424d9c6146f002a852cec318a17772a5be5015fd197ad4582b007eb0b15335ba6d25412b27b576c13","ssdeep":"","tlshash":"19600000c0303003000f0000f00000033cc000f0cccc0003030c00f000c000c0cc000c","size":13,"data":"","first_seen":"2026-04-23T17:24:48.301435Z","last_seen":"2026-07-17T23:43:16.391928Z","times_seen":77132,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"firelightfinances-proposal.live/?__cf_chl_rt_tk=YBGqv_9CZc7A2_4W_yHDbIiw8djCMq4lLkwoYSt.W3w-1783903388-1.0.1.1-SjnyRGBWqHwVbr2pYEo5JKkn4z1eIHZB3FqOJ99r5QQ","fqdn":"firelightfinances-proposal.live","domain":"firelightfinances-proposal.live","tld":"live"},"ip":{"addr":"172.67.133.149","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-07-17T23:40:41.493098Z","times_seen":777906,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"firelightfinances-proposal.live/","fqdn":"firelightfinances-proposal.live","domain":"firelightfinances-proposal.live","tld":"live"},"ip":{"addr":"172.67.133.149","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"d48c7bb97b73d3d49c38db29034aa4d1","sha1":"b1550c3b870576f7ade990ae933de7bb4d12888a","sha256":"1329538f48c9d5c67df1c5d9789d9b40a710240acc951c63b3d764b6692687f3","sha512":"df50da01468582d7a016f4f062981cb241f77d7aa202ed947cb677f1753e376b52654594e689108e2e649bb4c86e7ba76c96a6534332bddf4b606e9ad7c3736a","ssdeep":"","tlshash":"d2c02b883bc4e014c34525355c6f43c6fa38df600c481083e4024149b9b471003def1f","size":137,"data":"","first_seen":"2026-07-02T08:33:31.180267Z","last_seen":"2026-07-13T08:43:48.207716Z","times_seen":9553,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/av0/rch/8lak5/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"dc999e744e2497dcb871778ce5534b3c","sha1":"a26f20b0cbba79cc656794f39471694541deff88","sha256":"ea7af6dc53631041112c2300326523f1e50ede27bbddc42107838512a615bcde","sha512":"2e3a93f2a0dcb5e739803f7b34fea33344c94d30b0eb0838880de67409b09c01fb76c50e825ee101fc3b20cb7ff6ea993d24a5d50bc4135ca0c14794f1977324","ssdeep":"3:N/BKL1XTT:eL1jT","tlshash":"bb5504c1544130700c10c515d1f1351d50051d40153d4411735d44d4173100400515c0","size":1337359,"data":"","first_seen":"2026-07-13T00:43:40.768232Z","last_seen":"2026-07-13T00:43:40.768232Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"firelightfinances-proposal.live/","fqdn":"firelightfinances-proposal.live","domain":"firelightfinances-proposal.live","tld":"live"},"ip":{"addr":"172.67.133.149","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"361dcbd0599dfbdbc388b8451374c29c","sha1":"043868a0f77d769cad1cb3aa9f576f5182ac83f9","sha256":"57ef7f9c83b3cee488a9a7ba4a497c3412c58242ec63f6a61341555b3835be11","sha512":"ede3d5f6f4fa140364393b3a7cf058dc9a87cceeb2448e326134d73f5a5a6ee3da695ad290770248d2208ea23e83ba41789663f68807b8d26c6ae93401c84f9c","ssdeep":"3:N/BKL1XXIn:eL1nIn","tlshash":"455504c1545030f00c14c51dd1f0141554071540153d4411705d44d4173000400505c0","size":1337359,"data":"","first_seen":"2026-07-13T00:43:40.769502Z","last_seen":"2026-07-13T00:43:40.769502Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/29c80603-0f9e-4555-a9d1-2508671d7ad9","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"","is_inline":false,"md5":"12a73182cb7b679ff84e21e7bf09d27a","sha1":"d716ab2b29547c960871672d6ed4530e52545899","sha256":"d7973d089c07e09a74e84f139d17515e78d4960d8b56f82ce5f4ddb303d2f8e9","sha512":"069e89de2214a608cce421d4efac73947445be9005615aa416eae6b841d4ce1e644d37459429143cce03307851a7762bb9080e7cf020dd5eca29fb9979c844c6","ssdeep":"","tlshash":"abd0cd0a3d71d70882a221337c7f3526d1656264654d52445739cef9cb506af2524f54","size":291,"data":"","first_seen":"2026-07-02T08:33:31.153985Z","last_seen":"2026-07-13T08:43:15.658016Z","times_seen":9285,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/av0/rch/8lak5/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"24b8e3f78052b7c3c563eeda6aae4e33","sha1":"d1415a3675c60d240c184422a720b13afb97fef0","sha256":"5931fb39197d0b94b2b1aecb8a6723c5143dac92473398b992cd2c5a60ab53ae","sha512":"f44ffac8d2b87ee07bbb5d573cc68ee903702957118d4b79ff00f2e874caf84a5cba1332a2322569556d094b5dd860801ff77f2b87b9b1a903ef0d4da5c1ee2c","ssdeep":"3:N/BKL1XkRn:eL1o","tlshash":"ee5504c1d4c130700c11c515d1f0351550051500153d4411705d44d4573300400505c0","size":1337359,"data":"","first_seen":"2026-07-13T00:43:40.771371Z","last_seen":"2026-07-13T00:43:40.771371Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"firelightfinances-proposal.live/","fqdn":"firelightfinances-proposal.live","domain":"firelightfinances-proposal.live","tld":"live"},"ip":{"addr":"172.67.133.149","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"907703de944f893bf0e46c3198e7d769","sha1":"1c958545b99a41ab7376f2f86b36b0b8b1da97f5","sha256":"f6d04fd4e47da62f2b28f98d6f43aa90831c9383a63f668acb15738dd05b0a5c","sha512":"3976d0b83b0229a1e5040594275ef24e55e420ec64354a1696c8c6591ef400fee03a4f2cfe0edd124ef08cc2c0ffc936adb4a662ca9e551c408b983704c10be1","ssdeep":"3:N/BKL1XXd:eL1nd","tlshash":"945504c1544130701c10c515d5f03d1550051500153d4411735d44d4173100400505c0","size":1337359,"data":"","first_seen":"2026-07-13T00:43:40.772582Z","last_seen":"2026-07-13T00:43:40.772582Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/av0/rch/8lak5/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"50bda72e04f85f9b4338c0f939c34b9c","sha1":"d53056a9d7a7424238f0faf0b93b098f28d4d3ca","sha256":"db8d20f2dfaf9df3877967927de5ecb9648fecda131ab44bf854f8d72baa2b23","sha512":"3e55d7e8940bd66ef537062f73d3d2c6982a25a4e9fe9ac98e18253782cf28e01f106382d2e9dbbc05b6cdd62aae372b75cd430aa5a7ce2e327fb2ece33a30d0","ssdeep":"","tlshash":"736000030c00cc300033000c0000003c30f00c3003cc000c033003f003c030c0000030","size":15,"data":"","first_seen":"2026-04-23T17:24:48.299417Z","last_seen":"2026-07-17T23:43:16.404326Z","times_seen":76838,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"firelightfinances-proposal.live/","fqdn":"firelightfinances-proposal.live","domain":"firelightfinances-proposal.live","tld":"live"},"ip":{"addr":"172.67.133.149","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-07-17T23:40:41.493098Z","times_seen":777906,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"firelightfinances-proposal.live/cdn-cgi/challenge-platform/h/b/orchestrate/chl_page/v1?ray=a1a44070ea3232fa","fqdn":"firelightfinances-proposal.live","domain":"firelightfinances-proposal.live","tld":"live"},"ip":{"addr":"172.67.133.149","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"b216ee63ad77a6ed56e07a19871b2077","sha1":"0ef1af0edc2fb036ff50236fc722d076c80896a9","sha256":"5579aaa87393e2e3cf17797e60bb34f901ac4e409258edc63e493d4f1380e350","sha512":"c9a2d6508721b806e447171b860a0112944669a00ef198eb957d2d0884c5b6f4baf30beb157d0a1884c055327c8c1dcb7f46e95f58cd54a53a3e0ecb55b7785f","ssdeep":"3072:SvtqXphY6MEbbWwjkqRk8savTBo4lfmBE7SdP7SdL:SvtqXphY6MsbrdsavTB1dSdzSdL","tlshash":"8b24b6ca7cc2b71f67c291f845733176f65e4c84805b3ae8d59192f47eb037a912ae88","size":225336,"data":"","first_seen":"2026-07-13T00:43:40.756484Z","last_seen":"2026-07-13T00:43:40.756484Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/av0/rch/8lak5/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"e4d3bb1bbfd63f4a74a86d3b063dc617","sha1":"a432ba67656b0e6862b2118417cae195ab4527f1","sha256":"bc3245564f8448059645b81cac6a98fd9942e1a4ef61ce145af0f2e71203d8c2","sha512":"fe421411e4e25e29899ef30adf23bbea55de1b5fcbd9a995987669dfa618346e95884f3499ee6ba104fce4885cc7607edbbec448daa4e796dab0072f425aa66b","ssdeep":"3072:27Q5EBpRzPXqERHOtBqgjsmSWTSqhvX5ZWO+gV0f4BsGv5/TrazpSj:2E+pDRHOtg65NSqhvpZwgVJ","tlshash":"3534f8c97cc6f72fb38692f4047b30fab61e4c94901a19d9d151a1f97db0339a62ae4c","size":240340,"data":"","first_seen":"2026-07-13T00:43:40.774601Z","last_seen":"2026-07-13T00:43:40.774601Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/av0/rch/8lak5/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"d48c7bb97b73d3d49c38db29034aa4d1","sha1":"b1550c3b870576f7ade990ae933de7bb4d12888a","sha256":"1329538f48c9d5c67df1c5d9789d9b40a710240acc951c63b3d764b6692687f3","sha512":"df50da01468582d7a016f4f062981cb241f77d7aa202ed947cb677f1753e376b52654594e689108e2e649bb4c86e7ba76c96a6534332bddf4b606e9ad7c3736a","ssdeep":"","tlshash":"d2c02b883bc4e014c34525355c6f43c6fa38df600c481083e4024149b9b471003def1f","size":137,"data":"","first_seen":"2026-07-02T08:33:31.180267Z","last_seen":"2026-07-13T08:43:48.207716Z","times_seen":9553,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eval","is_inline":false,"md5":"d9448dad54b97e8d1d2b5311c6f2c5e5","sha1":"e0602b95038781c1546dace7a878c8a2bf29513e","sha256":"c94ded3c8d029f7c9510efd2af1adc51da8d22bf298329779d3d7eead876c6d2","sha512":"2b5496fad44bdb2ecdb63c76b506ef23e8d59ac0b30b6ba00907448ea6df89558cdf527ad3b4d7a900039f5233da5df649fb2e83061fe30dea9944a38ea33065","ssdeep":"","tlshash":"35c02bc6e31801032d28480f3c9c00231810527ac984c8e7833e345308cc1c001b9308","size":143,"data":"","first_seen":"2026-07-02T08:33:31.181208Z","last_seen":"2026-07-13T08:43:15.574921Z","times_seen":1934,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/turnstile/v0/b/80a697ecdece/api.js?onload=zzCI2\u0026render=explicit","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"695698c613d35c433471c55525a0be78","sha1":"a4c5a51074996c0e6108c8e518bc871d5570745a","sha256":"5c5c445b67e1cb710a98338a2ee3631506a50351a355c9cbcf455c8fc48a21f6","sha512":"0340b6beb6180c0c059434884905597fddeaee363a7eb1ffe25847ef2da909747bb33d9ac598cb690c504de45697829966d7e3c9a5e21602b916af49d2fff1a5","ssdeep":"1536:tMAA+jXpq5RDMDpydrdopXOe1C05V4tMlsgV0Di0w58B:t1tYR0ydrMXOe1ldlP0Di0w58B","tlshash":"bd732bc472aa7862139ac0f4913b6753b3257d3aa84c8850d467dc653b7cd869233fbe","size":75049,"data":"","first_seen":"2026-07-12T22:51:46.413958Z","last_seen":"2026-07-17T23:46:43.197428Z","times_seen":8273,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eval","is_inline":false,"md5":"618aa2f6a01b870bd3a567a6d2786a2e","sha1":"87636317cbc0a4bcc77bb5763ce83b1d2a55cc50","sha256":"bdbb725c94f73122fb6f2d19a600afc371d778a51760332dc3d3bd16af2d05b7","sha512":"ceada46f50e6ce337bcac5610d7e34259ae3ef0dd555848edaaacd41825f32134b69a95019212d3a257b7165fd745d9768c566aa6ae740a79b101fa622d1d67c","ssdeep":"","tlshash":"b0a0020eb477594e4a02903179373405252d395944849290966609a60b61287505ee76","size":61,"data":"","first_seen":"2026-07-02T09:55:47.370346Z","last_seen":"2026-07-13T08:42:42.462918Z","times_seen":2114,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"firelightfinances-proposal.live/b691f88e-956e-4688-9559-ae30a8441c98","fqdn":"firelightfinances-proposal.live","domain":"firelightfinances-proposal.live","tld":"live"},"ip":{"addr":"172.67.133.149","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"","is_inline":false,"md5":"12a73182cb7b679ff84e21e7bf09d27a","sha1":"d716ab2b29547c960871672d6ed4530e52545899","sha256":"d7973d089c07e09a74e84f139d17515e78d4960d8b56f82ce5f4ddb303d2f8e9","sha512":"069e89de2214a608cce421d4efac73947445be9005615aa416eae6b841d4ce1e644d37459429143cce03307851a7762bb9080e7cf020dd5eca29fb9979c844c6","ssdeep":"","tlshash":"abd0cd0a3d71d70882a221337c7f3526d1656264654d52445739cef9cb506af2524f54","size":291,"data":"","first_seen":"2026-07-02T08:33:31.153985Z","last_seen":"2026-07-13T08:43:15.658016Z","times_seen":9285,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/av0/rch/8lak5/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"94081036cbf595a3dac383955367903b","sha1":"4c78fee58d05c79857142f6a1823b584e693d678","sha256":"a3c4f20a8b17293aceca90edf64056d45c645f5adc2d5c853448063f6fa56a8b","sha512":"99084ac603dabfdbf3736d9064ab97c259689afaf02fe04dccc45f4ed0dbb4be9af01b5e797fa80f5f6881c3f1f245f4b0d79fa6472f1eb8e2aa07f5404e5e69","ssdeep":"","tlshash":"64600000000000000000000cc00300003cc0003300cc0300c30c003000cc3cc0000000","size":13,"data":"","first_seen":"2026-04-23T17:24:48.314042Z","last_seen":"2026-07-17T23:43:16.395792Z","times_seen":76953,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eval","is_inline":false,"md5":"d5f925550e036907872c59e2a28fe47a","sha1":"9705a8a393296831dbcfa4ecb8e8cf38bac4b639","sha256":"fbf468438ab068a781ffc3bea6ce2cfa94a5a126373b6a06615793408d8748bb","sha512":"c132a5b9ce2095992cffe1e555e27ef045616b3fa457c4d0de5b8092b32fa5f15c1b155e7022916e24aae987450c28beed6ddf947f8cac94806727555bf00937","ssdeep":"","tlshash":"e0d0221ef03f1c948116183938b23510c93a32094906ba94a72a5cc31b520c08642f32","size":196,"data":"","first_seen":"2026-07-02T08:33:31.174555Z","last_seen":"2026-07-13T08:43:15.559107Z","times_seen":6874,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/av0/rch/8lak5/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"656fa1f524e9ef9852a7f1926f9f411c","sha1":"358a113517e7836bd4a32c0579ea57bcc4612895","sha256":"bd279b4d2f2e6bd8b3f5c7a4016434ff0e01acc7d95ed6fa7330cb6ff8112c01","sha512":"1cde8c02ef0b57aa160f2a1d6a6fef4eb8d5cf879d658aa4fea108f65ddecb35a4d6bcbaeaaf5e0dd2aa2764b9e4d7b87081f017d7d1ee2cf4cf18a8fce78237","ssdeep":"","tlshash":"43a004ccf141f0505303f1350c374115f11557c1041c1010554c44537d1414f4111f5c","size":71,"data":"","first_seen":"2026-04-23T17:24:48.307672Z","last_seen":"2026-07-17T23:43:16.382607Z","times_seen":76781,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"firelightfinances-proposal.live/","fqdn":"firelightfinances-proposal.live","domain":"firelightfinances-proposal.live","tld":"live"},"ip":{"addr":"172.67.133.149","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"8301393d2f49e317007a68c18f5214f8","sha1":"75600650ddf30eb683e5d58768eb7b39194013d3","sha256":"e1b80d3a03f54fdbae264e6c766396eda83b711a9c8c8a528ac48b5f4e4bbff9","sha512":"9fa221a6288200f4f897e9481d007f8fa51583fded501afa3d4961c1aacb55854170f57692cd78e42ca478c03caaade0897aefece298bc50f0bf78303ec465ad","ssdeep":"3:N/BKL1XPn:eL1f","tlshash":"645504c154413c704c50c575d1f0351d50051500153d4411705d44d4173100c00505c0","size":1337359,"data":"","first_seen":"2026-07-13T00:43:40.778555Z","last_seen":"2026-07-13T00:43:40.778555Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/av0/rch/8lak5/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"3769a04970899e0c4613b757d42f101a","sha1":"c25dc8e79dfe5e5ea7cf90b4ec3b0b66712f5e0e","sha256":"9c79a4e6bfbaee75384ccc52810283b5347a58af8eb4bd5c70ec6f4dacaa68b6","sha512":"a345710483b00f87e43d515f25d5eb48889cb88d14f08a31b52f984b9b398cb37fa244ae42dd165a462f974ec1ed3193b71640c1fb533a34be5452cc3e8dfdc3","ssdeep":"3:N/BKL1XXxSn:eL1nU","tlshash":"505504c0744030f00c14c41dd1f0141554051500153d4401705d44d417300040d50dc0","size":1337359,"data":"","first_seen":"2026-07-13T00:43:40.779774Z","last_seen":"2026-07-13T00:43:40.779774Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"firelightfinances-proposal.live/","fqdn":"firelightfinances-proposal.live","domain":"firelightfinances-proposal.live","tld":"live"},"ip":{"addr":"172.67.133.149","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"7114f3951c4e2a0636383a146dc13bd5","sha1":"ec610045c2138076e758ada3f7a0e5b0958dd2b3","sha256":"aafac67637f4f849d1d7d49a43a7d7217d4df61978fc91089b4ff514d12b5cdb","sha512":"279d4468dead748df7f4d0a0a29419555d9675550a6299d462e3557f4977715b92d0aaaddecc127c309564b988e72644c7c5f4d175c8bddcd59efd9e2e4dab8f","ssdeep":"3:N/BKL1Xrn:eL17","tlshash":"8c5504c1544134700c30dd15d1f0141570051500153d4431707d44d4173000440505c4","size":1337359,"data":"","first_seen":"2026-07-13T00:43:40.78118Z","last_seen":"2026-07-13T00:43:40.78118Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"log","text":"The next request for the Private Access Token challenge may return a 401 and show a warning in console.","filename":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/av0/rch/8lak5/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","line_number":1,"column_number":161716},{"level":"debug","text":"","filename":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/av0/rch/8lak5/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","line_number":1,"column_number":161716},{"level":"log","text":"map[actor:server1.conn0.watcher17.process8//obj124 class:RegExp displayString:/.*.*=.*/ extensible:true frozen:false isError:false ownPropertyLength:2 sealed:false type:object]","filename":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/av0/rch/8lak5/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","line_number":1,"column_number":161716},{"level":"log","text":"map[actor:server1.conn0.watcher17.process8//obj127 class:BoundFunctionObject extensible:true frozen:false isError:false ownPropertyLength:3 preview:map[kind:Object ownProperties:map[toString:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher17.process8//obj128 class:BoundFunctionObject extensible:true frozen:false isError:false ownPropertyLength:2 sealed:false type:object] writable:true]] ownPropertiesLength:3] sealed:false type:object]","filename":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/av0/rch/8lak5/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","line_number":1,"column_number":161716},{"level":"log","text":"map[actor:server1.conn0.watcher17.process8//obj131 class:HTMLAnchorElement contentDomReference:map[browsingContextId:1.5032385538e+10 id:0.10735521535365322] extensible:true frozen:false isError:false ownPropertyLength:1 preview:map[attributes:map[] attributesLength:0 isConnected:false kind:DOMNode nodeName:a nodeType:1] sealed:false type:object]","filename":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/av0/rch/8lak5/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","line_number":1,"column_number":161716},{"level":"debug","text":"0","filename":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/av0/rch/8lak5/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","line_number":1,"column_number":215332},{"level":"error","text":"0","filename":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/av0/rch/8lak5/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","line_number":1,"column_number":215332},{"level":"info","text":"0","filename":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/av0/rch/8lak5/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","line_number":1,"column_number":215332},{"level":"log","text":"0","filename":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/av0/rch/8lak5/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","line_number":1,"column_number":215332},{"level":"warn","text":"0","filename":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/av0/rch/8lak5/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","line_number":1,"column_number":215332},{"level":"log","text":"map[actor:server1.conn0.watcher17.process8//obj126 class:RegExp displayString:/.*.*=.*/ extensible:true frozen:false isError:false ownPropertyLength:2 sealed:false type:object]","filename":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/av0/rch/8lak5/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","line_number":1,"column_number":161716},{"level":"log","text":"map[actor:server1.conn0.watcher17.process8//obj129 class:BoundFunctionObject extensible:true frozen:false isError:false ownPropertyLength:3 preview:map[kind:Object ownProperties:map[toString:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher17.process8//obj130 class:BoundFunctionObject extensible:true frozen:false isError:false ownPropertyLength:2 sealed:false type:object] writable:true]] ownPropertiesLength:3] sealed:false type:object]","filename":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/av0/rch/8lak5/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","line_number":1,"column_number":161716},{"level":"log","text":"map[actor:server1.conn0.watcher17.process8//obj132 class:HTMLAnchorElement contentDomReference:map[browsingContextId:1.5032385538e+10 id:0.10735521535365322] extensible:true frozen:false isError:false ownPropertyLength:1 preview:map[attributes:map[] attributesLength:0 isConnected:false kind:DOMNode nodeName:a nodeType:1] sealed:false type:object]","filename":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/av0/rch/8lak5/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","line_number":1,"column_number":161716},{"level":"debug","text":"0","filename":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/av0/rch/8lak5/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","line_number":1,"column_number":215332},{"level":"error","text":"0","filename":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/av0/rch/8lak5/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","line_number":1,"column_number":215332},{"level":"info","text":"0","filename":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/av0/rch/8lak5/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","line_number":1,"column_number":215332},{"level":"log","text":"0","filename":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/av0/rch/8lak5/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","line_number":1,"column_number":215332},{"level":"warn","text":"0","filename":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/av0/rch/8lak5/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","line_number":1,"column_number":215332},{"level":"debug","text":"","filename":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/av0/rch/8lak5/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","line_number":1,"column_number":161716}]},"http":[{"url":{"schema":"https","addr":"firelightfinances-proposal.live/logo.png","fqdn":"firelightfinances-proposal.live","domain":"firelightfinances-proposal.live","tld":"live"},"ip":{"addr":"172.67.133.149","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://firelightfinances-proposal.live/","date":"2026-07-13T00:43:15.183Z","timestamp":1783903395183,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"firelightfinances-proposal.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Jul 2026 01:51:02 GMT","end":"Tue, 06 Oct 2026 02:49:35 GMT"},"fingerprint":{"sha1":"BC:C9:10:AC:93:52:3B:2E:26:09:7E:07:9E:B4:A9:E5:B8:97:97:5C","sha256":"85:F4:9C:4D:E3:96:AF:7D:BA:3F:1D:94:8F:04:56:69:30:74:5C:8A:FC:AD:E0:3B:6D:25:3C:C7:22:A4:05:45"}}},"request":{"raw":"GET /logo.png HTTP/1.1\r\nHost: firelightfinances-proposal.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://firelightfinances-proposal.live/\r\nCookie: cf_clearance=OPO5qbWrEnm4RoVpZGxvR0275kkDGY7kx4l0tACZkrU-1783903394-1.2.1.1-2IPY99270yDoedkVYpeaIiv7xNAoWoVR0DlmXW9gOU3FtzkSGVcqVizvO6F30vK94o1TDzt9Egq6jO72QFQ4Y65asEpa1XcaSMU1x1OiYL64oS8UbKp1X6ZKUDgnUICOMCOVJvoeJVhLNsdJNeLJMSxUhWMaslRawtdFHgc6sqUBewGGcZFgAsZBNXAkXWaH58O6iSRZ8zPPgJ.rB.jPAtFpQFxqPflm5Sl5W0PU7kY_HxPG6.tGyfdruO9cYTyYoiAOBOzQvQAes4__EVBp4mLx..UM2Z_9gY_bkcq4O3BTvvZ6cRpQ9deJyQzfdebCvkjq4sKZGTgy_gp9QqKNB8e4blQDERIZjwp03g9BLxhDIXwa6KvqKhifsn0R_ltpnoS_wE9qN2NixoggWl1H39mFUdUZpEdIjzQB_W.GAEf19xtG5lBCx3xfA3vh0EuZGNJflKAZK4xSorQD4YBG9JQt8xPEaJ8PR2QtvLzlFV6MDIYgHjhJ9EFDCs426cLQ\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\nserver-timing: cfExtPri\r\ncontent-type: image/png\r\netag: \"djt2x56cm4nc1x7\"\r\nlast-modified: Wed, 08 Jul 2026 09:23:58 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\ndate: Mon, 13 Jul 2026 00:43:15 GMT\r\nage: 6362\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kCrcvmsFPAyuTaw7i2G90v%2FOsb6m%2F6MJLlejXPbWG9jIKi8tnvQAT9NiDDt6VRZVHamIJBJ3CSY6hOC5eoKkj6gGw9qM51eMEfZw08fiq93oJBaQM81cE9E9gY4oIgHuevLe2tr1y9KsjtrwRATS%2FCwo\"}]}\r\ncf-ray: a1a4409bee2432fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 2491\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2491,"size_decoded":3232,"mime_type":"image/png","magic":"PNG image data, 241 x 240, 8-bit colormap, non-interlaced","md5":"774908dd96042307639e40a6950e03a0","sha1":"7ae1fd5c09a816c4621ede27e29f7e71fd6aa6f5","sha256":"0594fb55762cd41c9e6bc4f0ba31f2ba8fd4c8288a22a92da169c6e9bd748b8a","sha512":"fc8a1a0953c216952a585988bb4fc598e514ba032c9cd6e6df764bbd0945992eb96999fc4452c3907462863626f231fea2b802fadfe1190a53f880bffeabfaf8","ssdeep":"","tlshash":"53515df6ecbd282c4014d6ad141f00f3ec37cb86cc4d1d185a830ad496a7aa0fc943e0","first_seen":"2026-04-24T15:23:09.414396Z","last_seen":"2026-07-14T15:45:38.748748Z","times_seen":73,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"firelightfinances-proposal.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"firelightfinances-proposal.live/favicon.ico","fqdn":"firelightfinances-proposal.live","domain":"firelightfinances-proposal.live","tld":"live"},"ip":{"addr":"172.67.133.149","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://firelightfinances-proposal.live/","date":"2026-07-13T00:43:15.293Z","timestamp":1783903395293,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"firelightfinances-proposal.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Jul 2026 01:51:02 GMT","end":"Tue, 06 Oct 2026 02:49:35 GMT"},"fingerprint":{"sha1":"BC:C9:10:AC:93:52:3B:2E:26:09:7E:07:9E:B4:A9:E5:B8:97:97:5C","sha256":"85:F4:9C:4D:E3:96:AF:7D:BA:3F:1D:94:8F:04:56:69:30:74:5C:8A:FC:AD:E0:3B:6D:25:3C:C7:22:A4:05:45"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: firelightfinances-proposal.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://firelightfinances-proposal.live/\r\nCookie: cf_clearance=OPO5qbWrEnm4RoVpZGxvR0275kkDGY7kx4l0tACZkrU-1783903394-1.2.1.1-2IPY99270yDoedkVYpeaIiv7xNAoWoVR0DlmXW9gOU3FtzkSGVcqVizvO6F30vK94o1TDzt9Egq6jO72QFQ4Y65asEpa1XcaSMU1x1OiYL64oS8UbKp1X6ZKUDgnUICOMCOVJvoeJVhLNsdJNeLJMSxUhWMaslRawtdFHgc6sqUBewGGcZFgAsZBNXAkXWaH58O6iSRZ8zPPgJ.rB.jPAtFpQFxqPflm5Sl5W0PU7kY_HxPG6.tGyfdruO9cYTyYoiAOBOzQvQAes4__EVBp4mLx..UM2Z_9gY_bkcq4O3BTvvZ6cRpQ9deJyQzfdebCvkjq4sKZGTgy_gp9QqKNB8e4blQDERIZjwp03g9BLxhDIXwa6KvqKhifsn0R_ltpnoS_wE9qN2NixoggWl1H39mFUdUZpEdIjzQB_W.GAEf19xtG5lBCx3xfA3vh0EuZGNJflKAZK4xSorQD4YBG9JQt8xPEaJ8PR2QtvLzlFV6MDIYgHjhJ9EFDCs426cLQ\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-encoding: gzip\r\ncontent-type: image/vnd.microsoft.icon\r\netag: \"djt2x409d3mv3b2\"\r\nlast-modified: Wed, 08 Jul 2026 09:23:56 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\ndate: Mon, 13 Jul 2026 00:43:15 GMT\r\nserver-timing: cfExtPri\r\nage: 6369\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hNtryPjgTXFTHMJtCojhUfjGyXNFxlWeFNgCvKB6PlpZ0qJE%2FOb50QuGfxREo5nc1BW5O5QWxd1XbayJNkih2hrsYNHmfnS23y7O87rSVkQKkDOcGSL%2Fl1kFhtGtzbGD4YZivSoLpzzK2Kn22wl81x1%2B\"}]}\r\ncf-ray: a1a4409c9e2d32fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1226\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4286,"size_decoded":2009,"mime_type":"image/vnd.microsoft.icon","magic":"MS Windows icon resource - 1 icon, 32x32, 32 bits/pixel","md5":"cc062a83151176811ed966d3add0c884","sha1":"6bd0ce89e5510efe1c1642a74f8570b46a2184b5","sha256":"4f73521bd5f74ede627f2a1e1f212b052621c4a7c51b13086c6e7cd56c792c30","sha512":"af6431bb105ebb16d799daa124b9151e267862ed560499c0529ee2afeacdf6874984b56bbffd5a4cdd5867c73963d30146a572997bb75da9a7ab6d62a575feb9","ssdeep":"24:su5LgTFD/4PAZpFHvB7BSivLxM1tjvd4QLHdFP+otq/lWnAVrhHjL/Wb6HN7og+m:23FSHLd4cdalcBp5+1E8EURV","tlshash":"5591da766f23fb2fedc1317010ca72b12c2640456b7a6a1908d529563341ef7bf8ce91","first_seen":"2026-07-10T10:02:52.697571Z","last_seen":"2026-07-13T01:35:20.212032Z","times_seen":62,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"firelightfinances-proposal.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/dmsans/v17/rP2Yp2ywxg089UriI5-g4vlH9VoD8Cmcqbu0-K6z8GXhnU0.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://firelightfinances-proposal.live/","date":"2026-07-13T00:43:15.307Z","timestamp":1783903395307,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Jun 2026 08:37:23 GMT","end":"Mon, 14 Sep 2026 08:37:22 GMT"},"fingerprint":{"sha1":"CD:5B:53:23:61:72:75:37:AD:E9:F1:74:B2:D2:EE:09:81:05:55:E1","sha256":"9F:07:21:2D:14:EB:C5:C0:D4:2B:42:E4:55:80:7A:BB:AF:47:A8:BC:0C:5E:05:F3:2A:2B:1F:2A:78:4D:FF:D7"}}},"request":{"raw":"GET /s/dmsans/v17/rP2Yp2ywxg089UriI5-g4vlH9VoD8Cmcqbu0-K6z8GXhnU0.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://firelightfinances-proposal.live\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 36932\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 09 Jul 2026 04:44:35 GMT\r\nexpires: Fri, 09 Jul 2027 04:44:35 GMT\r\ncache-control: public, max-age=31536000\r\nage: 331120\r\nlast-modified: Wed, 10 Sep 2025 16:31:03 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":36932,"size_decoded":37745,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 36932, version 1.0","md5":"7c87a648293fbb5b2924aafaa59e8aea","sha1":"c57593e0adc4cf99dd9e67cb782242220a061a9d","sha256":"9fea608a947e67020c33cad9a6fe3d60c54119dfb8cff87768a8117a15ed7543","sha512":"764ced325a768dca84e1fb0cc458818239ce379dbcbdb324ee8849bbe15f54e3f0254ae6e52ee5a92741840637b4f9885d246a0978af23176b3acfe5b9cec23f","ssdeep":"768:mMQPOAQQKW6GccoXQ+OGpHNzXgtDM0SVu7P3nqtPl9Bf2csDpHUjbYE8j2:mMQz4W5og+tpH6tDJku73EPlPOcs5U/l","tlshash":"c0f2f23e7ea5691487c2b0be506b00935344c9bd37c18121bbb953f44ea67addc5d63c","first_seen":"2025-09-11T17:08:25.889763Z","last_seen":"2026-07-17T23:02:52.993478Z","times_seen":30208,"resource_available":false,"data":null}},"time_used":83,"timings":{"blocked":-1,"dns":3,"connect":29,"send":0,"wait":18,"receive":33,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/dmsans/v17/rP2Yp2ywxg089UriI5-g4vlH9VoD8Cmcqbu0-K6z8GXhnU0.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://firelightfinances-proposal.live/","date":"2026-07-13T00:43:15.308Z","timestamp":1783903395308,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Jun 2026 08:37:23 GMT","end":"Mon, 14 Sep 2026 08:37:22 GMT"},"fingerprint":{"sha1":"CD:5B:53:23:61:72:75:37:AD:E9:F1:74:B2:D2:EE:09:81:05:55:E1","sha256":"9F:07:21:2D:14:EB:C5:C0:D4:2B:42:E4:55:80:7A:BB:AF:47:A8:BC:0C:5E:05:F3:2A:2B:1F:2A:78:4D:FF:D7"}}},"request":{"raw":"GET /s/dmsans/v17/rP2Yp2ywxg089UriI5-g4vlH9VoD8Cmcqbu0-K6z8GXhnU0.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://firelightfinances-proposal.live\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 36932\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 09 Jul 2026 04:44:35 GMT\r\nexpires: Fri, 09 Jul 2027 04:44:35 GMT\r\ncache-control: public, max-age=31536000\r\nage: 331120\r\nlast-modified: Wed, 10 Sep 2025 16:31:03 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":36932,"size_decoded":37745,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 36932, version 1.0","md5":"7c87a648293fbb5b2924aafaa59e8aea","sha1":"c57593e0adc4cf99dd9e67cb782242220a061a9d","sha256":"9fea608a947e67020c33cad9a6fe3d60c54119dfb8cff87768a8117a15ed7543","sha512":"764ced325a768dca84e1fb0cc458818239ce379dbcbdb324ee8849bbe15f54e3f0254ae6e52ee5a92741840637b4f9885d246a0978af23176b3acfe5b9cec23f","ssdeep":"768:mMQPOAQQKW6GccoXQ+OGpHNzXgtDM0SVu7P3nqtPl9Bf2csDpHUjbYE8j2:mMQz4W5og+tpH6tDJku73EPlPOcs5U/l","tlshash":"c0f2f23e7ea5691487c2b0be506b00935344c9bd37c18121bbb953f44ea67addc5d63c","first_seen":"2025-09-11T17:08:25.889763Z","last_seen":"2026-07-17T23:02:52.993478Z","times_seen":30208,"resource_available":false,"data":null}},"time_used":73,"timings":{"blocked":28,"dns":1,"connect":0,"send":0,"wait":20,"receive":24,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"firelightfinances-proposal.live/favicon.ico","fqdn":"firelightfinances-proposal.live","domain":"firelightfinances-proposal.live","tld":"live"},"ip":{"addr":"172.67.133.149","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://firelightfinances-proposal.live/","date":"2026-07-13T00:43:08.563Z","timestamp":1783903388563,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"firelightfinances-proposal.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Jul 2026 01:51:02 GMT","end":"Tue, 06 Oct 2026 02:49:35 GMT"},"fingerprint":{"sha1":"BC:C9:10:AC:93:52:3B:2E:26:09:7E:07:9E:B4:A9:E5:B8:97:97:5C","sha256":"85:F4:9C:4D:E3:96:AF:7D:BA:3F:1D:94:8F:04:56:69:30:74:5C:8A:FC:AD:E0:3B:6D:25:3C:C7:22:A4:05:45"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: firelightfinances-proposal.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://firelightfinances-proposal.live/?__cf_chl_rt_tk=YBGqv_9CZc7A2_4W_yHDbIiw8djCMq4lLkwoYSt.W3w-1783903388-1.0.1.1-SjnyRGBWqHwVbr2pYEo5JKkn4z1eIHZB3FqOJ99r5QQ\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-encoding: gzip\r\ncontent-type: image/vnd.microsoft.icon\r\netag: \"djt2x409d3mv3b2\"\r\nlast-modified: Wed, 08 Jul 2026 09:23:56 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\ndate: Mon, 13 Jul 2026 00:43:08 GMT\r\nserver-timing: cfExtPri\r\nage: 6362\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3aILLNPtBiqqasmqHSMPVnxRMZUzramFPMbSUEmm2F2SsMYL4I6mr39uTiHJ5p2vdhLTFErsrDJxxs%2BYsDeHy%2B%2Bg8D%2FhYwUlfON%2F1ctRmLgG2boscF%2Fa%2BaayWfEhhlYj1PqS8v0q%2FWXdBxa5ZKpQV1mU\"}]}\r\ncf-ray: a1a440728a6632fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1226\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4286,"size_decoded":2019,"mime_type":"image/vnd.microsoft.icon","magic":"MS Windows icon resource - 1 icon, 32x32, 32 bits/pixel","md5":"cc062a83151176811ed966d3add0c884","sha1":"6bd0ce89e5510efe1c1642a74f8570b46a2184b5","sha256":"4f73521bd5f74ede627f2a1e1f212b052621c4a7c51b13086c6e7cd56c792c30","sha512":"af6431bb105ebb16d799daa124b9151e267862ed560499c0529ee2afeacdf6874984b56bbffd5a4cdd5867c73963d30146a572997bb75da9a7ab6d62a575feb9","ssdeep":"24:su5LgTFD/4PAZpFHvB7BSivLxM1tjvd4QLHdFP+otq/lWnAVrhHjL/Wb6HN7og+m:23FSHLd4cdalcBp5+1E8EURV","tlshash":"5591da766f23fb2fedc1317010ca72b12c2640456b7a6a1908d529563341ef7bf8ce91","first_seen":"2026-07-10T10:02:52.697571Z","last_seen":"2026-07-13T01:35:20.212032Z","times_seen":62,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"firelightfinances-proposal.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/cmg/1","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/av0/rch/8lak5/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","date":"2026-07-13T00:43:09.035Z","timestamp":1783903389035,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"challenges.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 16 Jun 2026 20:15:28 GMT","end":"Mon, 14 Sep 2026 21:15:13 GMT"},"fingerprint":{"sha1":"77:27:72:42:CF:51:E8:8C:7C:3E:8C:4C:A1:F0:9A:86:96:B9:0A:16","sha256":"ED:7C:F7:38:B3:0F:00:86:32:D1:14:CE:C0:FF:CA:0E:7C:86:EE:49:51:EF:A4:4B:AA:5C:B6:7C:00:B5:3D:F3"}}},"request":{"raw":"GET /cdn-cgi/challenge-platform/h/b/cmg/1 HTTP/1.1\r\nHost: challenges.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/av0/rch/8lak5/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 13 Jul 2026 00:43:09 GMT\r\ncontent-type: image/png\r\ncontent-length: 86\r\npriority: u=6,i\r\nserver: cloudflare\r\ncf-ray: a1a44075d85535a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":86,"size_decoded":305,"mime_type":"image/png","magic":"PNG image data, 2 x 2, 8-bit grayscale, non-interlaced","md5":"8210a36deb26bcad77ff38483528d4c4","sha1":"5ecfa08d6f48edce6d593c85dfc3fc171998c0b5","sha256":"2cff9914e9a2b1aaf91d7e0c8c0cd9e523869d1d8c949d845f5c2d21bd4da4d5","sha512":"5c9ddd87d9e82c8972bec44881f5a27d3370fea9d51a9f671ca0919b6781d4cbec1c2fb80610a459170141924e83df665d2dbebc49bfb772ab5f690a7adebe26","ssdeep":"","tlshash":"caa012d66184bd36c5890373c1641120f8302042010201700443e8115c12e0596d4d03","first_seen":"2026-07-08T18:35:03.608528Z","last_seen":"2026-07-13T08:16:36.452546Z","times_seen":34,"resource_available":false,"data":null}},"time_used":3,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":3,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=DM+Sans:wght@400;500;600;700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://firelightfinances-proposal.live/","date":"2026-07-13T00:43:15.179Z","timestamp":1783903395179,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Jun 2026 08:37:24 GMT","end":"Mon, 14 Sep 2026 08:37:23 GMT"},"fingerprint":{"sha1":"85:D0:EC:C2:01:33:25:23:96:FB:2B:54:90:54:84:07:0A:49:1F:03","sha256":"9D:7C:1C:9C:6A:25:1E:17:E0:DC:FD:42:95:CA:47:3D:C1:9C:20:FB:22:47:02:E3:27:EC:7C:62:03:30:83:BA"}}},"request":{"raw":"GET /css2?family=DM+Sans:wght@400;500;600;700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://firelightfinances-proposal.live/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Mon, 13 Jul 2026 00:43:15 GMT\r\ndate: Mon, 13 Jul 2026 00:43:15 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3548,"size_decoded":1137,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"1fb92adbc08c1de1a269912f833b3ada","sha1":"f95ea211408654cc94fffda67ed1776dd18dbc79","sha256":"44863786f3762f3ccf63cdf2a8b44bbee96c90e0ddafdd4f87ad8fab9dd07ca7","sha512":"47ce0e4d69dcd3690e2852ea6a0ad1b3189cd8530f9069ee9457daf8ba254abb07c590fcc1a5a679eb6698604853c4895436d88f3225d39508e7d1578e2d0cf3","ssdeep":"","tlshash":"98719b81046ba550eb971cc422cdbe62ef1fa15424549c74abfe188cacaac3d5362b8d","first_seen":"2025-09-11T19:30:23.20562Z","last_seen":"2026-07-17T19:57:33.307485Z","times_seen":647,"resource_available":false,"data":null}},"time_used":88,"timings":{"blocked":-1,"dns":3,"connect":16,"send":0,"wait":35,"receive":0,"ssl":33},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"firelightfinances-proposal.live/cdn-cgi/challenge-platform/h/b/orchestrate/chl_page/v1?ray=a1a44070ea3232fa","fqdn":"firelightfinances-proposal.live","domain":"firelightfinances-proposal.live","tld":"live"},"ip":{"addr":"172.67.133.149","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://firelightfinances-proposal.live/","date":"2026-07-13T00:43:08.534Z","timestamp":1783903388534,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"firelightfinances-proposal.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Jul 2026 01:51:02 GMT","end":"Tue, 06 Oct 2026 02:49:35 GMT"},"fingerprint":{"sha1":"BC:C9:10:AC:93:52:3B:2E:26:09:7E:07:9E:B4:A9:E5:B8:97:97:5C","sha256":"85:F4:9C:4D:E3:96:AF:7D:BA:3F:1D:94:8F:04:56:69:30:74:5C:8A:FC:AD:E0:3B:6D:25:3C:C7:22:A4:05:45"}}},"request":{"raw":"GET /cdn-cgi/challenge-platform/h/b/orchestrate/chl_page/v1?ray=a1a44070ea3232fa HTTP/1.1\r\nHost: firelightfinances-proposal.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://firelightfinances-proposal.live/?__cf_chl_rt_tk=YBGqv_9CZc7A2_4W_yHDbIiw8djCMq4lLkwoYSt.W3w-1783903388-1.0.1.1-SjnyRGBWqHwVbr2pYEo5JKkn4z1eIHZB3FqOJ99r5QQ\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: application/javascript; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\ncontent-encoding: zstd\r\ndate: Mon, 13 Jul 2026 00:43:08 GMT\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncf-ray: a1a440725a5e32fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":225336,"size_decoded":80883,"mime_type":"application/javascript; charset=UTF-8","magic":"ASCII text, with very long lines (36688)","md5":"b216ee63ad77a6ed56e07a19871b2077","sha1":"0ef1af0edc2fb036ff50236fc722d076c80896a9","sha256":"5579aaa87393e2e3cf17797e60bb34f901ac4e409258edc63e493d4f1380e350","sha512":"c9a2d6508721b806e447171b860a0112944669a00ef198eb957d2d0884c5b6f4baf30beb157d0a1884c055327c8c1dcb7f46e95f58cd54a53a3e0ecb55b7785f","ssdeep":"3072:SvtqXphY6MEbbWwjkqRk8savTBo4lfmBE7SdP7SdL:SvtqXphY6MsbrdsavTB1dSdzSdL","tlshash":"8b24b6ca7cc2b71f67c291f845733176f65e4c84805b3ae8d59192f47eb037a912ae88","first_seen":"2026-07-13T00:43:40.756484Z","last_seen":"2026-07-13T00:43:40.756484Z","times_seen":1,"resource_available":true,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"firelightfinances-proposal.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/turnstile/v0/b/80a697ecdece/api.js?onload=zzCI2\u0026render=explicit","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://firelightfinances-proposal.live/","date":"2026-07-13T00:43:08.800Z","timestamp":1783903388800,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"challenges.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 16 Jun 2026 20:15:28 GMT","end":"Mon, 14 Sep 2026 21:15:13 GMT"},"fingerprint":{"sha1":"77:27:72:42:CF:51:E8:8C:7C:3E:8C:4C:A1:F0:9A:86:96:B9:0A:16","sha256":"ED:7C:F7:38:B3:0F:00:86:32:D1:14:CE:C0:FF:CA:0E:7C:86:EE:49:51:EF:A4:4B:AA:5C:B6:7C:00:B5:3D:F3"}}},"request":{"raw":"GET /turnstile/v0/b/80a697ecdece/api.js?onload=zzCI2\u0026render=explicit HTTP/1.1\r\nHost: challenges.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://firelightfinances-proposal.live\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 13 Jul 2026 00:43:08 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nlast-modified: Sun, 12 Jul 2026 00:36:37 GMT\r\ncache-control: max-age=31536000, stale-if-error=10800, stale-while-revalidate=31536000, public\r\naccess-control-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: https://firelightfinances-proposal.live\r\npriority: u=3,i=?0\r\netag: W/\"6a52e195.00000000-12529\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: a1a4407419afb509-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":75049,"size_decoded":24753,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"695698c613d35c433471c55525a0be78","sha1":"a4c5a51074996c0e6108c8e518bc871d5570745a","sha256":"5c5c445b67e1cb710a98338a2ee3631506a50351a355c9cbcf455c8fc48a21f6","sha512":"0340b6beb6180c0c059434884905597fddeaee363a7eb1ffe25847ef2da909747bb33d9ac598cb690c504de45697829966d7e3c9a5e21602b916af49d2fff1a5","ssdeep":"1536:tMAA+jXpq5RDMDpydrdopXOe1C05V4tMlsgV0Di0w58B:t1tYR0ydrMXOe1ldlP0Di0w58B","tlshash":"bd732bc472aa7862139ac0f4913b6753b3257d3aa84c8850d467dc653b7cd869233fbe","first_seen":"2026-07-12T22:51:46.413958Z","last_seen":"2026-07-17T23:46:43.197428Z","times_seen":8273,"resource_available":true,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":4,"connect":12,"send":0,"wait":9,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"firelightfinances-proposal.live/cdn-cgi/challenge-platform/h/b/fo/4268014346:1783901715:9xglYVc37426r0GOh5kX4RR7bEIsl2cuilIaOVzwTKc/a1a44070ea3232fa/rJ74fCZVayvfu_3ZV4V.wIt8cXFR8YMNpGawJ7ZuZh8-1783903388-1.2.1.1-R8fGclsGEpd_DV7h3ftckoFIukNXvvlTO5G1V7JkcIE.2854aouOHt1ijT9XlPPS","fqdn":"firelightfinances-proposal.live","domain":"firelightfinances-proposal.live","tld":"live"},"ip":{"addr":"172.67.133.149","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://firelightfinances-proposal.live/","date":"2026-07-13T00:43:08.822Z","timestamp":1783903388822,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"firelightfinances-proposal.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Jul 2026 01:51:02 GMT","end":"Tue, 06 Oct 2026 02:49:35 GMT"},"fingerprint":{"sha1":"BC:C9:10:AC:93:52:3B:2E:26:09:7E:07:9E:B4:A9:E5:B8:97:97:5C","sha256":"85:F4:9C:4D:E3:96:AF:7D:BA:3F:1D:94:8F:04:56:69:30:74:5C:8A:FC:AD:E0:3B:6D:25:3C:C7:22:A4:05:45"}}},"request":{"raw":"POST /cdn-cgi/challenge-platform/h/b/fo/4268014346:1783901715:9xglYVc37426r0GOh5kX4RR7bEIsl2cuilIaOVzwTKc/a1a44070ea3232fa/rJ74fCZVayvfu_3ZV4V.wIt8cXFR8YMNpGawJ7ZuZh8-1783903388-1.2.1.1-R8fGclsGEpd_DV7h3ftckoFIukNXvvlTO5G1V7JkcIE.2854aouOHt1ijT9XlPPS HTTP/1.1\r\nHost: firelightfinances-proposal.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://firelightfinances-proposal.live/\r\ncf-chl: rJ74fCZVayvfu_3ZV4V.wIt8cXFR8YMNpGawJ7ZuZh8-1783903388-1.2.1.1-R8fGclsGEpd_DV7h3ftckoFIukNXvvlTO5G1V7JkcIE.2854aouOHt1ijT9XlPPS\r\ncf-chl-ra: 0\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 2092\r\nOrigin: https://firelightfinances-proposal.live\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":2092,"data":"F9O+2HkXDIRt$ee$jkgqf7IpH$Gvyxw02qKP3FgWWxr$b1qP+ov+nQd+sy+nbVf+KccT+LaY-TjcQwvOhLqcm$-pSaAvfM2iRzT7SYJS+Cc$vAJ3Abj-GxPp5ll6jYyXv$y4e9U71Thn6SIUuzJD9gnkhW2EKChRJhi3aNGyi2D1HWSKkNup2TeoftEFdi6eaA5XVO4Zsi$u1SmPwWHbD0Os$Ek-Wu+i1KdNO$3j1j7ZKFvn1YDvdGfeZZVW6tawuWIcoyTIovskXuRtoM0h5uL1ywu6bt+BIqrI4+pNByg$QhMW1m6gM-a$NVESS$SUvpSFHU0evl-Pg$OWyYZs$qZIuok3hhXOPJv-nJrhhadCjwTTh7m6T+KQJvJ1muDmiLmK20M15GXvVXlZnbncgnb+1u$gkiP2-GPJ0$-BlRt505VRAPGcvY4AYcYICwjFnCOp++bj3ER1tQ$Vz4ucz60OP2H79dB+YGJwwVOoydcdewpyYRmKjXl2qDWNfV325Dnc2kCtW6ab+mfYQbtd2rXocO+QMI1TX-dmqCWtzq0Tpf$OqpL2xXxSeVeLcRv+dATKGKqwP4lW4WlIJEU1VWcWkTvllzJEVIQlRsSdhiTi6vOsp$hAYLAvLA4OpONq0qDN90zBXQai2jEndS9cZ3kGpq6UhfSRflDn+t2OuwW+ZvhRjh4AZRuXGpXO3Z66CxA+CXIqQgsbPpjWz9-G2UnKIS7jAEpC1ZwqYXd1qGjZ9YlEVmdiekJsJB-bUPJKb7zIs9UlBfcz$V2iMcpZEIHfQCRCDk+4sPEgyAktdPzPycXg3zlqzhn$CH2Ke2yRP2JD$t2j2LTo-czebCzo9IZpXjFxG++fwYQF416XwcWWc6uFtsJ3XSp+1N-dRwWDSNcEAH+lCQmEa3pvI+h-4c02BwzpulNSMr4ZOpAe7i6duVZl3Qd+Cqxb0ke$pNcyFfBv$FUr9nA1ERGZL$Tjrt+lpbQkPNv2dcfCcezcAsbvvrR90lmmPLsZqlVAQBLX1V9X20WYEfjZ5R7UL4w5JKea$PAEMssRleyHgAfXZzGYJ2UKqIFnC+YZTwz93WkU33FBauD9lSBh2ik67XWwhgKh5pNbCtFu-9TR7tOeSvWrsRtCGDHUfT3RbifBUCv1ox0wpjIhWZdutB-LtxcZVoHY6FUzUrVWpqrfLlT6yAdcLXPDA+Vs6q2j2DweZFIShNX1Cw4p5Skl$tQArbfJ0EfXqSYlxfjRhsw3jSpUNdLlJuSRxvH7$2EvgQSV6NdZxCOSiDPZaRD0DGewnVrS-MH1fjV5SUVC04StwpIbJ-2vAK2JnvVCCqqZx+H3wAcZo3qHE0qxgz9R9rLfswjOPwlVpyOIOOHbPeQdFBdU6fSq1PepxzWZbpmAOnO5fX6CEaBgTSnYUy64inGgJOOJCdRW6cMgHm0+l3RQNJRq4HuRekZSdYTl1tWVlhMI-VTsTehB$iwGWnk0IyjLYv4qPKQ513FrtGxdDyll9Mix$t5+-TZHAWAPNjt9uzurP720J9XR0q6lu01BGukFgqwocsaQKxJex0CXzzy4hc4pY-Aa5NQvuzLfDA2s2ZWoBV1GKaA0xbSUXY+Fk90+7sXOu2hrqKeltpJcXps$eo+CHOl6a73MLe9ezSzmQu0tu+$tD9Qc7NhKv1jhEI+e2Wgx6H7YQlOPyni3sWGUeJEvHQukLHOU7mDY-sYgyQhLm-tfdDCfTkGOcv$$AnvzdXvcUCbFUClWoxpmE3mgLbdk9nN-cFKGQQ1JpmBa2N-ZS3NKMZ2Wk$9SHvdG9AU0hE4cOFpWNHg4JOQc+gJkrmY-JG9Bse-rP+xtkr+FTKW9Y$csfo2Ia5$miM46z1oE0Pi$6ARuGv6LM-rxFitjyNNp05kZrJFsw3-G7wZ4QdCC20Gb7QneXA-APBGhVZt6mzwWj7B4iZCUYXwlI2RhIXvcipE6AtXYm+vxx5RBrKa+3ShbE4e$eQ3h-VL0ogI2sCZXfG2dZWwYpNNqjU-JQCEqLd9gvdPZa-tFF$kXlRYl0BLWwuk+xNMxbRlCfJKG161mZCKYdS3A5cbH-HX1PDyJwXNX"}},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/plain; charset=UTF-8\r\ncf-chl-gen: I4a0tCHKCr5uBWRnReqrUalU8zZVeRiYhTg542w2WwE=$8l68Jej4p5dPzsmwdgn9ww==\r\ntiming-allow-origin: https://firelightfinances-proposal.live\r\ncontent-encoding: zstd\r\ndate: Mon, 13 Jul 2026 00:43:08 GMT\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncf-ray: a1a440742a9232fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":97720,"size_decoded":24529,"mime_type":"text/plain; charset=UTF-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"8106f9b53065d9d2bf1fdb69352091c3","sha1":"d82b880260ac510fc60681d8644f0fcee174ee6e","sha256":"9a33045053ff48bc991e23d60ac5b8405446f75dc426f46c577343b08621cdee","sha512":"cb96c241224ace404c6c50314bb2d4cc51475c8fb55078f33e824c899af4a4af2772d8c615014ea543355644efa56eab979d2b70521047597ce64bc7fbcef535","ssdeep":"1536:fXCrCgPRRHHqlFRqj3Dj3Dj3Dj3Dj3Dj3Dj3Dj3Dj3Dj3Dj3Dj3Dj3Dj3Dj3Dj3Z:f49fHcOLDLDLDLDLDLDLDLDLDLDLDLD9","tlshash":"20a38e850ebbca75890b9fff6ac7f1143ebf44754b61a8ed91d9a925231440e083372e","first_seen":"2026-07-13T00:43:40.758278Z","last_seen":"2026-07-13T00:43:40.758278Z","times_seen":1,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"firelightfinances-proposal.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/av0/rch/8lak5/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://firelightfinances-proposal.live/","date":"2026-07-13T00:43:08.893Z","timestamp":1783903388893,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"challenges.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 16 Jun 2026 20:15:28 GMT","end":"Mon, 14 Sep 2026 21:15:13 GMT"},"fingerprint":{"sha1":"77:27:72:42:CF:51:E8:8C:7C:3E:8C:4C:A1:F0:9A:86:96:B9:0A:16","sha256":"ED:7C:F7:38:B3:0F:00:86:32:D1:14:CE:C0:FF:CA:0E:7C:86:EE:49:51:EF:A4:4B:AA:5C:B6:7C:00:B5:3D:F3"}}},"request":{"raw":"GET /cdn-cgi/challenge-platform/h/b/turnstile/f/av0/rch/8lak5/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto HTTP/1.1\r\nHost: challenges.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 13 Jul 2026 00:43:08 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\npermissions-policy: accelerometer=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=(),xr-spatial-tracking=*\r\ncontent-security-policy: default-src 'none'; script-src 'nonce-HsfPSzxJRNBt7NB40xuw8z' 'unsafe-eval'; script-src-attr 'none'; worker-src blob:; style-src 'unsafe-inline'; img-src 'self'; connect-src 'self' https://hagen.challenges.cloudflare.com https://brunhild.challenges.cloudflare.com; frame-src 'self' blob:; child-src 'self' blob:; form-action 'none'; base-uri 'self'; trusted-types OTUN3 default; require-trusted-types-for 'script'; sandbox allow-same-origin allow-scripts allow-popups allow-forms\r\ncross-origin-embedder-policy: require-corp\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: cross-origin\r\norigin-agent-cluster: ?1\r\naccept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA\r\ncritical-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA\r\nreferrer-policy: same-origin\r\ndocument-policy: js-profiling\r\npriority: u=6,i=?0\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: a1a440749eec35a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: v3giwacx;dur=258271, cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":258271,"size_decoded":99872,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (65536), with no line terminators","md5":"31d3af7445ae28099f7e0dd0906022a4","sha1":"4d42f2ca0dfcfebd06b1b10727486fb5fd5d6f79","sha256":"33f842b21eabe478d0a49a8447cc08c676860b32aaa2e587f9e74c9d5cc9b100","sha512":"75f5c622181fc16a0df3834a4dc23135078a12ec70a14ff35bc1da3463b319184638bcb8b98377dbb0119af3ff46e8c2ddae3095560a2aea580271de5212a7a4","ssdeep":"3072:H2s7Q5EBpRzPXqERHOtBqgjsmSWTSqhvX5ZWO+gV0f4BsGv5/TrazpSr:LE+pDRHOtg65NSqhvpZwgV5","tlshash":"2c4409c97cc6f72fb38691f4047b30fab62e4c94901a15d9d151a1f9bda0339a62be4c","first_seen":"2026-07-13T00:43:40.759177Z","last_seen":"2026-07-13T00:43:40.759177Z","times_seen":1,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/fo/1361061753:1783901717:5rr56DyHkbG5PvVPwPAyixymeuZL7WIcX2hJBUUlYy0/a1a440749eec35a6/.HQp2F5Sk8Tk_wqvXU0KqzKK8302dZQ2L83hZTHskgU-1783903388-1.2.1.1-3vsM6Khy9olcMpOlWqTlVgDSsLkRH3zW7AFehEoeljuzq1xBbcEYhyv0hifooJtu","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/av0/rch/8lak5/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","date":"2026-07-13T00:43:09.312Z","timestamp":1783903389312,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"challenges.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 16 Jun 2026 20:15:28 GMT","end":"Mon, 14 Sep 2026 21:15:13 GMT"},"fingerprint":{"sha1":"77:27:72:42:CF:51:E8:8C:7C:3E:8C:4C:A1:F0:9A:86:96:B9:0A:16","sha256":"ED:7C:F7:38:B3:0F:00:86:32:D1:14:CE:C0:FF:CA:0E:7C:86:EE:49:51:EF:A4:4B:AA:5C:B6:7C:00:B5:3D:F3"}}},"request":{"raw":"POST /cdn-cgi/challenge-platform/h/b/fo/1361061753:1783901717:5rr56DyHkbG5PvVPwPAyixymeuZL7WIcX2hJBUUlYy0/a1a440749eec35a6/.HQp2F5Sk8Tk_wqvXU0KqzKK8302dZQ2L83hZTHskgU-1783903388-1.2.1.1-3vsM6Khy9olcMpOlWqTlVgDSsLkRH3zW7AFehEoeljuzq1xBbcEYhyv0hifooJtu HTTP/1.1\r\nHost: challenges.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/av0/rch/8lak5/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto\r\ncf-chl: .HQp2F5Sk8Tk_wqvXU0KqzKK8302dZQ2L83hZTHskgU-1783903388-1.2.1.1-3vsM6Khy9olcMpOlWqTlVgDSsLkRH3zW7AFehEoeljuzq1xBbcEYhyv0hifooJtu\r\ncf-chl-ra: 0\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 4386\r\nOrigin: https://challenges.cloudflare.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":4386,"data":"L7+euPrhWWXA6kMC3AIdXgbE3RbWsqoswXh0MeE02Ku8hFm0XQJmxPdVZV2Eso+7r0ymPEKll9bunx7Uj$NM5U+MaXLNnUMyIVKZso0mHzfnmWWCMyaUJ7kS4bAcsy2RlvcmYA1krslWaJoxrPLwYT$iuheHZ6+lPY3sJmL0ko5-8U1Iz7ZQ$fd5emxhmg470YWgoOXD9QEia270HMo2hVrdU0GqE0NHg9B6wzir$uQ0wXjZHcFTzSmXAp$5E9VoUb+pSFzIxxglaJlBrFjex9evn8jbGr$2QqAhdlo0g8Kg8eihCUZU4Eu+Wlzlg7jU-ZkOPq3ICoxC-+xK11G-GFQYMlrcguzz7H$SHk6VofXj3eKi-21kLK99PvBVGbsx+aiOBRi810Z-JlDqiiSHBKVd$-RcrH6iOJCVq6QfK5TLhmuQS3KL-W1+FiYjub$cSlK89vLXOCrR4wfIN2jVq21fHGO$gaHyr5g-rjRjN$CpcJXNm8vgfBBbmw9AjkN-O48u7y6V1mAeiG-gJ4YOfWCxlVjid$aVPyX-BQSXZ7Xf$gfzyC+FWwxAI7oyJy4RlksN0fJd1AaZ5PcrNeLfqv1xQG-MmwKz69uBvMEBgcoJSX+X1IWUMiCg+394j0uRjDFKT$mCbcj9Za3BFvMM+rJ9OgNCkGzG0XU6ooLgZfMv8jDUTBM+W6CYHroY5uoel$T45E3eq9xcvZYgiCy9W2Op0+b+Menye9njWdgPfwWuDZSDaoRy9hj+rOMcJ0HD4PKC6INUR7g9NbmE1Q8Yk4a-n5uf6aARgoMco846fKk8pmnM6wSqjaVXewxBLCyiLQY44v3cy+cRHHxsiX$fFyerT7ljI7denJ6KuVQQcp1FnNom8rIM6QLmiBjJ3vhY4f0CeCwb8ak-Kry-JJSGvrN$4S+fsjCRjoJgiFkfniAUgbvnPJmm7+Db-2IpgMgZO5F5E4fbEaJcpuc3i3JQKcdWvMxge8J-3feZ5i-3f4AhJvH+qQrP4U+LFCRO5cZ-QTVaqIRC+0iVSY$3NokAFyQewbGL8gcAlIis-HZEIfcp2SBwjWHO5SZgwwSCe3zpdMeloU8csZ+RMDZlpp1-P5jaaG7XmwsIjRw5+XBoMzkNYcxzhK2IV$hU46esyx8ZBb4xbljavT$UGVQh9ijA-ElmhJe6B-380iru7H6Cxsv4KHz$j-zJh3lmATmH6xu7byf3J2AGqJBXrR0mXYp45yyn8THeKE+Lz8FlDAHJf6Dag7RN053YiG9Ovcl2Gq1lzqkB-XfrSCIqUeOmCR-PnfB8y7W6b7qKxRDe$mf3kEP0gSd6X4XLTRduhMxkafIDJmf5Zma3vxq5sEUyFs$SW+cPvNTn-J5dkfBfokI-1mzEdDqwU8hMEn4Jy4lj2CujB1N4q7vz7H2$RFR-VCjOkrIPSNCcvn-WDQ$78nNI4GXTLCkvuWkEjOM2S9keupmbyGGEqrZcxniyoE1BYj8fI6JOm4RJSrjL42qiLO7q+N0h4F03RqFTw5vzjYZhyrbLqqsdwzHywB89RJHDYfnEF6uR8h$3vp1wVARiPXbH5bVKPng+fZ8jQyGmhwwIWH4U3n6LdThp25xW6m29IxS-a3pB1MAjo1+xKRBpZ6NsosNK9TAH3n-JHyuYSbnPQqrj1cdCM2o4G1$IlS6UhEz7p3-DJUN$TL2bcPbAgD1HAxGOqobOB0TExxqGy1UWhGjGeaAS2CjSGNAk2DuZh1owexnJi4LpW7$vy1I01f26oEAjCO1H5GPogxKb3Wm1isxlGozW8wAUrZY4SEvbmDk2Kzo+2Zhn8rnLvjNZJzSvLTlE93XRdT4ZzDry3Ny7Kdo2UwaLlNQ$EBrbk$dYFu$uuDMuc-Jcmu5cKBlYMBumwPOccA8ZGghY0hMpmdyPQ2kkS3-LDRn96RbzQab50NASLXF24DCaY45x$KYueaEJf68rYQYANx0pwRyARaf6Da7WB15QogV8CwQyrnZmB26NQkR$4SiTkox-MTHpXEjH0EPjz$1dfb9RLzrSKYYG$6e$pkejFYA6NiQ7v9OUHHEu-ox$NduSrGoLmG8ashfRihklBz6e6c5TCDj40v7+sG$gbzi+B4DwCARNpzP035EZUqpyGiOyYy79nbHYyHF+mdARoxVsNzLLSBMSeamACmObZHgvhIFbSLU7OmT1YaM4H+XvcldpaZJuJ3dOlDqo7Hg-c6Kaipms5dIqiG7W9+houMDRbnOeAPFbTZpWZLoc4C1yVjkO3vxs$yobkre5ouI-roDcYhYuzIzdPbZlnAjneq+-g7wwLgparvBowd6Q3ww9kVGN4Vpzw9ZY9nTylhIyui5Vyl5eR1pQnHzM4IUWOyx4HI+kJOgWFrBu$ujORoeiAS9Tb8RmKn8cGcl6skF106y8cM5pPfdC1i284iBD3GJ0GE6WolxrfoukdDo4lKm$w9aZS$esmAFXEo6p43fjRM3M+5WGfUepDdqaJdV5IC69DkG6Gvb-6EypGmw0-11lMUqXHNgo2s-4Z$8fD$5L$RgGEmKsubcyhylzEm5CJqNEQPMO+dgkkBsDGmFdHWVAijV52xmRBWOdAJX-2WUVkL+JbRZLkWuZxxso9xXU0zf4rbkmi6FG7ynb15i8hqJoay2FJlm2Lc7KwiYTELb9iH2s0UgYgbBY+QcLqMshvX8SU1l7u$dlCXLSKCgN8Na2W76XPVxvNDjhX6vO87dYEIdXygla85UVpHcTwF0rgKX0mrqhQgdurvPN+wSK54mCoMzjxfufSf9yu3yVj9ToaHXirMSsrEcCjAfG$O2jdRy$8Hq30ilee1CkAxqK3OFAJxlcAfNRdyzVSmHsm4zDv8lPHK2TiGV25NRcCpE49RnPoifOAKoVhHJ-F4of$lXmS+lB5bO65Gjw5X7y1m3WvdiDxnrlmlQ8nUk022caaKurxFvoc5oqGcMffJS5qwu+HTZlPoOvOu4Za$sWylkDLg8NCwsKkWZoycT5kfNUr$iVjpi6GsC7pRwlr9rDVMQvTaVL1jMLm6DhlA4jb+-ReQ$h7THbPdRE3pRNu559LlKXJWsgmyT1l8LA2PmbScd8R$XM8UKxQZoKsJ7+heMeospeXo4p3ff22YSVbVbAgV5gTF9MfHxQUPKuii0+1GwrATEuqJloJeZCyuNY0JhORlAK+AO0GxygXgfrWa706wFl4CD1EhUmAIIlHQcs06u-+dPB$43IHOb2uF5CmIvzBd1mZzUMD5FvF2y0GS34wncbMV$6Yj-m$IpKOWBZxaPDIu3WSlaCrLesHmK9A49Fmp4hGF35Yp0JE0D17yIXec+O16FlYT7h77JO4qipDNZ+$l2uaTP0pnaixU+LFYmH4HDi+es7zRI759-x40RiA$W5bjQ3kXMX3kujBvCXnyB3a$EoqK4xqh2oAulvunHpn3ez7L8m8E1Cn1rU4Z08GacBjMjAceyi3wpROWHynCFcinYZl$ZK4EgWrsMI1DWWiawMCqLI0C0hLzeqgNh6-6nXw0TG6poIz93uuKoNkBEEJd5oIqqalDJ-Qw4uVIyT7Wk$KR5-CE18C+H9jyiU8MrVWURU3bLwQns2G$2aHSJvEeXc-fjjQq16A-XOZM-vvaAingUhqC1SRXmW$liJv55IRwkKFHESdVEkkJaM3YWkE99IiKgdO4S$xriwzXWvKIXJBBBkzVpPyIe5DVdava8DNq3ozpq11WwT0DAICygjQNmFgo4AqehUYxZKYc4Ana3TRanl7ER0cZVb+UEIeZgicyQNucP3Jpc$hWiirolGkh-0hlGk+X3rvgL4J6O77JuU52d+MaG10Dx2HcXKOFCX4Q8GoF1kn8K1+W$L7Cqzoukn4bG1s$f$7k1nOBaluEN$hhBrUMSisUIhKFpxl0W5JQ$u8gwslv6oqzY9VmzxjHrRysE2Cl8T9xQe9-k6n1wg+W4jiRrU8T8Z-g8-oKY3VGIaCNpdhG40VLFK0qdvbERkre8Fhguq7XBuYC7fE0bogU1Pc01SAOkauVq8oxgZ+chRw5mS3lDgMmeR20L--eUhL6HCChn6sf65CbbhV-iBlPNAuHQLwv4zDlmqh1c8D2NFRFEBdBhEyFuqUWwcQ+VYSuBjZVGO0ACELiZmBZK0sWF7-mfmyPrn2OXyrCNbIdU87AP0DL+5F7ji1l2xAuJ68E$+E981xWHTa73maprsgCb6g$sRgPbXdM++Qwzi-AiD-EldWkYL9JAKyUfW73kywL9DINVIhg+fJ6je96AReb-iTrUGjxfvf2AF7$Y9rakYPfK4YCLc19B0r5Zz57uY5bLxYd2amAx0nAHME5lm$I+VPYDm865RMciqnxY47512hA9+udJJQ$BwSNyUl3TMNJBgen"}},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 13 Jul 2026 00:43:09 GMT\r\ncontent-type: text/plain; charset=UTF-8\r\ncf-chl-gen: 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$Df0QmQIqJO52Pkw5sm0Wrg==\r\ntiming-allow-origin: https://challenges.cloudflare.com\r\npriority: u=3,i=?0\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: a1a440773a1e35a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":487292,"size_decoded":318548,"mime_type":"text/plain; charset=UTF-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"9aefaad4a0af3bcd336a0e2a39f5538f","sha1":"f572964e16a1a268b0cc3982856e1e23fa7ed394","sha256":"b11299b782479eda823c6cf29160d7d534c01857018e73a226862eb7907d0e0f","sha512":"696c38e719e30b2a4321c209d07426bc34f9eafea595d28d067c4f25af4a7967692f8b4445f93ce594797405fd6e03a82941693bd2f41ef3efa36fd13e67e653","ssdeep":"12288:NEINgodgUoztYCTV7q+P0jWuYx+UwiL/4yKR:NEINgoaztPTVLxuUjvLAyKR","tlshash":"d1a40262f3a19b8bd2002123a13b2f1705c5499a88a99ff692bbdbd3cc9cd115d4dc7d","first_seen":"2026-07-13T00:43:40.759951Z","last_seen":"2026-07-13T00:43:40.759951Z","times_seen":1,"resource_available":false,"data":null}},"time_used":114,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":107,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"firelightfinances-proposal.live/style.css","fqdn":"firelightfinances-proposal.live","domain":"firelightfinances-proposal.live","tld":"live"},"ip":{"addr":"172.67.133.149","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://firelightfinances-proposal.live/","date":"2026-07-13T00:43:15.180Z","timestamp":1783903395180,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"firelightfinances-proposal.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Jul 2026 01:51:02 GMT","end":"Tue, 06 Oct 2026 02:49:35 GMT"},"fingerprint":{"sha1":"BC:C9:10:AC:93:52:3B:2E:26:09:7E:07:9E:B4:A9:E5:B8:97:97:5C","sha256":"85:F4:9C:4D:E3:96:AF:7D:BA:3F:1D:94:8F:04:56:69:30:74:5C:8A:FC:AD:E0:3B:6D:25:3C:C7:22:A4:05:45"}}},"request":{"raw":"GET /style.css HTTP/1.1\r\nHost: firelightfinances-proposal.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://firelightfinances-proposal.live/\r\nCookie: cf_clearance=OPO5qbWrEnm4RoVpZGxvR0275kkDGY7kx4l0tACZkrU-1783903394-1.2.1.1-2IPY99270yDoedkVYpeaIiv7xNAoWoVR0DlmXW9gOU3FtzkSGVcqVizvO6F30vK94o1TDzt9Egq6jO72QFQ4Y65asEpa1XcaSMU1x1OiYL64oS8UbKp1X6ZKUDgnUICOMCOVJvoeJVhLNsdJNeLJMSxUhWMaslRawtdFHgc6sqUBewGGcZFgAsZBNXAkXWaH58O6iSRZ8zPPgJ.rB.jPAtFpQFxqPflm5Sl5W0PU7kY_HxPG6.tGyfdruO9cYTyYoiAOBOzQvQAes4__EVBp4mLx..UM2Z_9gY_bkcq4O3BTvvZ6cRpQ9deJyQzfdebCvkjq4sKZGTgy_gp9QqKNB8e4blQDERIZjwp03g9BLxhDIXwa6KvqKhifsn0R_ltpnoS_wE9qN2NixoggWl1H39mFUdUZpEdIjzQB_W.GAEf19xtG5lBCx3xfA3vh0EuZGNJflKAZK4xSorQD4YBG9JQt8xPEaJ8PR2QtvLzlFV6MDIYgHjhJ9EFDCs426cLQ\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-encoding: gzip\r\ncontent-type: text/css; charset=utf-8\r\netag: \"djt2x5gvvgm730g\"\r\nlast-modified: Wed, 08 Jul 2026 09:23:59 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\ndate: Mon, 13 Jul 2026 00:43:15 GMT\r\nserver-timing: cfExtPri\r\nage: 6362\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7N20f7hn637teLmIq0VcjrI%2FLjtk48TVr2LVRHepQjfGZTUB3HPKptXEX8ZNg1fjlDc3t3pzlJ8UwzBhIj4vdIXhEUEctsiNs5Qwt7CgHU4G946JupVKDG1DubM0qeksk1Ctsbf3%2BSZvPJhcsVvcG81T\"}]}\r\ncf-ray: a1a4409bee2332fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1341\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3904,"size_decoded":2121,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with CRLF line terminators","md5":"a63d4e2f0eacb96a4f41104a23f9b714","sha1":"6283f935cb77699b94e6f7ad00c199f5a9c9e19f","sha256":"4803263d989953fcb28b9c90bb13475f0639410715a45b2f960d01ab15887bb2","sha512":"77a32e115dbeb47e608f7c35379cf42d2ce805af10f2beb564ae080d9102ba0d96a767819ecd7e33d3621f8f0761a350c24c1a03929ad2f3313efeeb7c6c64bd","ssdeep":"","tlshash":"3481fe68db126552b6339f982be68b0ef384a1174a01467e7bc862844ff617dc390f9c","first_seen":"2026-07-10T10:02:52.695728Z","last_seen":"2026-07-13T01:35:20.224019Z","times_seen":51,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"firelightfinances-proposal.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/dmsans/v17/rP2Yp2ywxg089UriI5-g4vlH9VoD8Cmcqbu0-K6z8GXhnU0.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://firelightfinances-proposal.live/","date":"2026-07-13T00:43:15.311Z","timestamp":1783903395311,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Jun 2026 08:37:23 GMT","end":"Mon, 14 Sep 2026 08:37:22 GMT"},"fingerprint":{"sha1":"CD:5B:53:23:61:72:75:37:AD:E9:F1:74:B2:D2:EE:09:81:05:55:E1","sha256":"9F:07:21:2D:14:EB:C5:C0:D4:2B:42:E4:55:80:7A:BB:AF:47:A8:BC:0C:5E:05:F3:2A:2B:1F:2A:78:4D:FF:D7"}}},"request":{"raw":"GET /s/dmsans/v17/rP2Yp2ywxg089UriI5-g4vlH9VoD8Cmcqbu0-K6z8GXhnU0.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://firelightfinances-proposal.live\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 36932\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 09 Jul 2026 04:44:35 GMT\r\nexpires: Fri, 09 Jul 2027 04:44:35 GMT\r\ncache-control: public, max-age=31536000\r\nage: 331120\r\nlast-modified: Wed, 10 Sep 2025 16:31:03 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":36932,"size_decoded":37745,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 36932, version 1.0","md5":"7c87a648293fbb5b2924aafaa59e8aea","sha1":"c57593e0adc4cf99dd9e67cb782242220a061a9d","sha256":"9fea608a947e67020c33cad9a6fe3d60c54119dfb8cff87768a8117a15ed7543","sha512":"764ced325a768dca84e1fb0cc458818239ce379dbcbdb324ee8849bbe15f54e3f0254ae6e52ee5a92741840637b4f9885d246a0978af23176b3acfe5b9cec23f","ssdeep":"768:mMQPOAQQKW6GccoXQ+OGpHNzXgtDM0SVu7P3nqtPl9Bf2csDpHUjbYE8j2:mMQz4W5og+tpH6tDJku73EPlPOcs5U/l","tlshash":"c0f2f23e7ea5691487c2b0be506b00935344c9bd37c18121bbb953f44ea67addc5d63c","first_seen":"2025-09-11T17:08:25.889763Z","last_seen":"2026-07-17T23:02:52.993478Z","times_seen":30208,"resource_available":false,"data":null}},"time_used":76,"timings":{"blocked":28,"dns":0,"connect":0,"send":0,"wait":26,"receive":22,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"firelightfinances-proposal.live/","fqdn":"firelightfinances-proposal.live","domain":"firelightfinances-proposal.live","tld":"live"},"ip":{"addr":"172.67.133.149","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-07-13T00:43:08.214Z","timestamp":1783903388214,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"firelightfinances-proposal.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Jul 2026 01:51:02 GMT","end":"Tue, 06 Oct 2026 02:49:35 GMT"},"fingerprint":{"sha1":"BC:C9:10:AC:93:52:3B:2E:26:09:7E:07:9E:B4:A9:E5:B8:97:97:5C","sha256":"85:F4:9C:4D:E3:96:AF:7D:BA:3F:1D:94:8F:04:56:69:30:74:5C:8A:FC:AD:E0:3B:6D:25:3C:C7:22:A4:05:45"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: firelightfinances-proposal.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 403 \r\naccept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA\r\ncf-mitigated: challenge\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-security-policy: default-src 'none'; script-src 'nonce-E1hX6DTpaLIAQxnGkNnUYD' 'unsafe-eval' https://challenges.cloudflare.com; script-src-attr 'none'; style-src 'unsafe-inline'; img-src 'self' https://challenges.cloudflare.com; connect-src 'self' https://challenges.cloudflare.com; frame-src 'self' https://challenges.cloudflare.com blob:; child-src 'self' https://challenges.cloudflare.com blob:; worker-src blob:; form-action http: https:; base-uri 'self'\r\nserver: cloudflare\r\ncritical-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA\r\ncross-origin-embedder-policy: require-corp\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: same-origin\r\norigin-agent-cluster: ?1\r\npermissions-policy: accelerometer=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=(),xr-spatial-tracking=*\r\nreferrer-policy: same-origin\r\nserver-timing: chlray;desc=\"a1a44070ea3232fa\", cfExtPri\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0jgJyo4lU31bt33Q2Gd3V52pCIN8ERQ%2BhtswcgaSw%2FgnTzwdEDGeBmCdG5m8PgZznZ0yQCTEk1tp%2FnWNXAI4p7DrKwCPT2s8X9sZugTh%2B131go%2BMyQorGrWX8o8ZeOMi178HcmRxswNnfGXX54kApFL8\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Mon, 13 Jul 2026 00:43:08 GMT\r\npriority: u=0,i\r\ncontent-encoding: zstd\r\ncf-ray: a1a44070ea3232fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5635,"size_decoded":5608,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (5635), with no line terminators","md5":"50fc476840a0a01081aee6e2d0b947bc","sha1":"3f15d17df21ff3df622f0edc0296c2d6f0a5b6ae","sha256":"9059133fa0b5b9efc6f35c46d48895974b0fd7116db52f4f64aeba03acbe8a5c","sha512":"f4c0d9894346ee20f7ee2b3bd37a7f3568390100df78f64b7f90af3992f554e5f750c00c41f1bdb8f602cf4a22c5130c54c7f590988c27e1eaf73abde17a8aa3","ssdeep":"96:PNyWtoXZzIEb0EaW87yRn/pUs8rrQPaOoSRV/UDlL/XwnEXYzueh8pmw:PNjtkCBA/9oQCvSRaDl7AnEoyGw","tlshash":"fcc13ab3a677502a93f26ff625f6232c532471887b09d1b0c0e2cf6d46cef1e4661455","first_seen":"2026-07-13T00:43:40.761458Z","last_seen":"2026-07-13T00:43:40.761458Z","times_seen":1,"resource_available":true,"data":null}},"time_used":98,"timings":{"blocked":-1,"dns":75,"connect":14,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"firelightfinances-proposal.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/pat/a1a440749eec35a6/1783903389322/4eec03db229486840638840af2ae0c8adb7c858c1435d5b714108fb4abe6ea74/TGP_cpF-hWDjwPS","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/av0/rch/8lak5/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","date":"2026-07-13T00:43:09.674Z","timestamp":1783903389674,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"challenges.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 16 Jun 2026 20:15:28 GMT","end":"Mon, 14 Sep 2026 21:15:13 GMT"},"fingerprint":{"sha1":"77:27:72:42:CF:51:E8:8C:7C:3E:8C:4C:A1:F0:9A:86:96:B9:0A:16","sha256":"ED:7C:F7:38:B3:0F:00:86:32:D1:14:CE:C0:FF:CA:0E:7C:86:EE:49:51:EF:A4:4B:AA:5C:B6:7C:00:B5:3D:F3"}}},"request":{"raw":"GET /cdn-cgi/challenge-platform/h/b/pat/a1a440749eec35a6/1783903389322/4eec03db229486840638840af2ae0c8adb7c858c1435d5b714108fb4abe6ea74/TGP_cpF-hWDjwPS HTTP/1.1\r\nHost: challenges.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/av0/rch/8lak5/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 401 \r\ndate: Mon, 13 Jul 2026 00:43:09 GMT\r\ncontent-type: text/plain; charset=utf-8\r\ncontent-length: 1\r\nwww-authenticate: PrivateToken challenge=\"AAIAGXBhdC1pc3N1ZXIuY2xvdWRmbGFyZS5jb20gTuwD2yKUhoQGOIQK8q4Mitt8hYwUNdW3FBCPtKvm6nQAGWNoYWxsZW5nZXMuY2xvdWRmbGFyZS5jb20=\", token-key=\"MIIBUjA9BgkqhkiG9w0BAQowMKANMAsGCWCGSAFlAwQCAqEaMBgGCSqGSIb3DQEBCDALBglghkgBZQMEAgKiAwIBMAOCAQ8AMIIBCgKCAQEAuTeUSPYDXZKjpADiTx8KA2RtBP5tbKWSL54MNuzus9GmJhgw15Uz0bozIwdMNWEU02tRSfJeN9HVOrsfaCXBqqmmcxAmLWvIKofsYJtu6U3U4tGmCQfK0VJeyx6x-d15IyjUdlWSzFIs78lxBjqktIN1iGXVw_nkXfiGo28mDInsy1z-bIPmieKYF7-2gH-5bm_D9fBuDsNeqkNnHWuITZNaTgZE4vwLhewdrYWvAMyHLvi4N2cnBzUfqW0Rpg4v4DdjUFiT9ajtXfdhIGsVyWM2S5N9ZoKpjIvE5jqmFBA3ZYKhoay1GLsnovwjeNyWZGNuT3C03V1a1mQHutywlQIDAQAB\", max-age=20, PrivateToken challenge=\"AAIAHXNhdC5wYXQtaXNzdWVyLmNsb3VkZmxhcmUuY29tIE7sA9silIaEBjiECvKuDIrbfIWMFDXVtxQQj7Sr5up0ABljaGFsbGVuZ2VzLmNsb3VkZmxhcmUuY29t\", token-key=\"MIIBUjA9BgkqhkiG9w0BAQowMKANMAsGCWCGSAFlAwQCAqEaMBgGCSqGSIb3DQEBCDALBglghkgBZQMEAgKiAwIBMAOCAQ8AMIIBCgKCAQEAjWBcVzHWFnWXjt7XASHDnYDHBLwoq6NYsOxDj3JjAGRWTzeQ-saPlxzN9lPM6Ga8n2JrUyZE_kcOiRrr8769qmC2I9zaca7BPsEDCcePanBHfRQbu---6TitA-A8Haxs3MMd1ALk8P57oBorcv5dZFxaWy82zJxSCq3CV2Mc9qLydP9stfZ2l-RTsL5XLcb_H7QikZmacBSf7EOYaU2DgSMEpCd0YB1zgELV9csiOiIMmSvYkFoh-jLyIm7AAYm9VDjq7wys19eGRBBfYg2ot3ieHAL4Lmdn_Q3-lb_EAr2nuMRYVFu7PAFpHSLbFCR9jnoK35HMPUdGz9wXgTAINQIDAQAB\", max-age=20, PrivateToken challenge=\"AAIALHBwLWlzc3Vlci1wcm9kdWN0aW9uLnJlc2VhcmNoLmNsb3VkZmxhcmUuY29tIE7sA9silIaEBjiECvKuDIrbfIWMFDXVtxQQj7Sr5up0ABljaGFsbGVuZ2VzLmNsb3VkZmxhcmUuY29t\", token-key=\"MIIBUjA9BgkqhkiG9w0BAQowMKANMAsGCWCGSAFlAwQCAqEaMBgGCSqGSIb3DQEBCDALBglghkgBZQMEAgKiAwIBMAOCAQ8AMIIBCgKCAQEAuScRiQlGvqpsm0933uZ2uO-fGogyh7V8uGJn78PY0S5iRF_riUSxQzQdz3VavcEj5KdWxaSQ-sw0xmISl5r-DWDEuhUlc3ymHVvlHdLtElkn9u3acGn9WTOGOSka-SbASXSi5GR47N1puyVCzD8rI33TRLADSMtzb_fIBz9UCxz8-UQcyTVcoQ_G8_kjIjnqfaWuWVESH59cxOcb-5Nmb3sdazPmBhwJTbq7bL_IFKv9Ea8gZhlOXpqOZIDWNFnCGtFibtX1rhxbkg0kYrrfnO4hEmZisNf2TFcl_xncvBUgZDb3aIKUJ3GeXsNM21n5Hez3s23ezkEP1zMtXJAOgwIDAQAB\", max-age=20\r\npriority: u=6,i=?0\r\nserver: cloudflare\r\ncf-ray: a1a440797c7e35a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"401","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1,"size_decoded":2171,"mime_type":"text/plain; charset=utf-8","magic":"very short file (no magic)","md5":"ff44570aca8241914870afbc310cdb85","sha1":"58668e7669fd564d99db5d581fcdb6a5618440b5","sha256":"6da43b944e494e885e69af021f93c6d9331c78aa228084711429160a5bbd15b5","sha512":"3c266c0035de59eab2a0dd31b3dcb4a9dd157b310289e5db9ab4f8c2fddb7433466d48f25da7ad735a1cb8f2935aa612ad1f62f0efcece3933ba9979082e2304","ssdeep":"","tlshash":"c700000000000003c00000300000003000000000000000000003000000000000000000","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-17T23:40:41.482088Z","times_seen":486892,"resource_available":true,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"firelightfinances-proposal.live/","fqdn":"firelightfinances-proposal.live","domain":"firelightfinances-proposal.live","tld":"live"},"ip":{"addr":"172.67.133.149","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-07-13T00:43:15.003Z","timestamp":1783903395003,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"firelightfinances-proposal.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Jul 2026 01:51:02 GMT","end":"Tue, 06 Oct 2026 02:49:35 GMT"},"fingerprint":{"sha1":"BC:C9:10:AC:93:52:3B:2E:26:09:7E:07:9E:B4:A9:E5:B8:97:97:5C","sha256":"85:F4:9C:4D:E3:96:AF:7D:BA:3F:1D:94:8F:04:56:69:30:74:5C:8A:FC:AD:E0:3B:6D:25:3C:C7:22:A4:05:45"}}},"request":{"raw":"POST / HTTP/1.1\r\nHost: firelightfinances-proposal.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://firelightfinances-proposal.live/?__cf_chl_tk=YBGqv_9CZc7A2_4W_yHDbIiw8djCMq4lLkwoYSt.W3w-1783903388-1.0.1.1-SjnyRGBWqHwVbr2pYEo5JKkn4z1eIHZB3FqOJ99r5QQ\r\nContent-Type: application/x-www-form-urlencoded\r\nContent-Length: 2136\r\nOrigin: https://firelightfinances-proposal.live\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: cf_clearance=OPO5qbWrEnm4RoVpZGxvR0275kkDGY7kx4l0tACZkrU-1783903394-1.2.1.1-2IPY99270yDoedkVYpeaIiv7xNAoWoVR0DlmXW9gOU3FtzkSGVcqVizvO6F30vK94o1TDzt9Egq6jO72QFQ4Y65asEpa1XcaSMU1x1OiYL64oS8UbKp1X6ZKUDgnUICOMCOVJvoeJVhLNsdJNeLJMSxUhWMaslRawtdFHgc6sqUBewGGcZFgAsZBNXAkXWaH58O6iSRZ8zPPgJ.rB.jPAtFpQFxqPflm5Sl5W0PU7kY_HxPG6.tGyfdruO9cYTyYoiAOBOzQvQAes4__EVBp4mLx..UM2Z_9gY_bkcq4O3BTvvZ6cRpQ9deJyQzfdebCvkjq4sKZGTgy_gp9QqKNB8e4blQDERIZjwp03g9BLxhDIXwa6KvqKhifsn0R_ltpnoS_wE9qN2NixoggWl1H39mFUdUZpEdIjzQB_W.GAEf19xtG5lBCx3xfA3vh0EuZGNJflKAZK4xSorQD4YBG9JQt8xPEaJ8PR2QtvLzlFV6MDIYgHjhJ9EFDCs426cLQ\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nSec-Fetch-User: ?1\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":2136,"data":"003f7bce5e140d9907c56f2259ec5bcbc6338dde78d9257d164cd0aac51005b1=Rxb7lNAqf5HZu6n6lF45nkiR8it.o2.YulMXfALODps-1783903388-1.2.1.1-Oz0asNgdEOo_X6sjxYGF17j2RdwT7PSiqFmyKrLYQPRTHnCaeafuw3EO9rYM4JLlK8VfK.dAf2C0Xl3WP.3G68b5zmElWLvDNdvMHifAMcSsLfINSyTaksy4P8TtHgd05rH8umsGYpfzb1zFPadFBHk9tla80rmItGL3Dl887T0TSb4Kqw.YUSRuh1jjwvD2Yz2StuSEnCDGsDcwhKsVwNTqqecLdXgZql7YpNTgDafRmRJTX9bvrFXgbFo529Z1zMwEgvtsr4._9PyulFJzFow09ikSRohSCdDYkk1vb.Zz3UmtIqTeOLoPsvUre3qAd3c4eQY6a19F76dTITDa6zjLOBLkQvl_ccsbTu87Tp6b_D08psk.9kISYJeRDYhqqkKqZE2Y08egI7Rl1WLe463dYTGnSh55PNmkH8ETNw1Oe5hSQAeQsEEvq00CN0JsBl.8OsgLUE3oogo_7RIrhOU9MqzTEKyGaZr.nWbo.mLWnIll0Emo98SEA0vBVifeHda.KN.gcqTBi4rSa0I90P7z6ckQzpQqeitQq4tJE9Joy_6m9Um3HHFt8soY56X0JrmDj4XEJXM.1JoZOSHMNo3akeU18oQu9dKIs53QNCYrSUtxAFOmq7EUBjdpIM6eJuVT7m.2QcsngJyNp4itFFv7Qec03Lv3coVoRPvdGtnUDyQhu73T0EOBZ2givkY3e21edf9_VWldI0Bz5g_4yDgEWg5wT60Q18p9f8L6reaLXL2U0XEvbOf4we9dPv6pIcWkMuXmFQkoN1D1hoZUfhMazVbP0HqVDZO4.MyyjLDdngsAhacem9lN5wJh5dGjgamPbjl2f8aUfvoQfJu1cftq2fqLjVtXewNLwcosUSgPquWftU8iev4yxTruJAA3gClvoOiF5ORUBnClYROp_K1qLHEWPYeFsQwMOrVwn90Tnxf6aMMSqazRiKIsO81aMaGQFFkxEzWu_F8Ow7i2Vxp4wcrv_3yn9iLSpdIN1anzIRgRVDlZT59k_u.til4dGG4Z_mct8SOdmaI.K136gw\u0026c07ac2813127fb9b9a54e9baa4a4ce97ea2da6250597804b82f79e0100c2a527=bhpg9_GRQDowU8bL1cHRCALhjaSvxSuRrNAYWBKbhUg-1783903388-1.2.1.1-Tfc3IOrv5e8y.I8PnVVKDNOnO56LgYB6wA2.Kwe4qbaJ2.rSFVPCd79Rc.WP_w0cK_U2XejfCS6myukJ3YlodrIn_oNLk18gLjBFiDYEs_h5NEqUSx1oVpvBG3G.QqAkzbaOEkGcCXc6BhuPSk.dizRWjWZt3H2nlCVOmojeIwYv9yojR2MQI.NFvQEoBLcRTJjfBzi.28XiSacNsJ5bwiTmaGG.MdxbPyNU2R3G41syxNgo1fvdzUx9KOg1SUAaaz.GQMo5naXSYuntyALIz77KyKWfouOLoacnqPfWbXLQ3JHPnZO_yq9v.2tfbTG_yRMBlsP8Btgzh59FSo7UDqGZSvOAZVd9BrQ16KDV8d.SUEiL.LHu8fasVT_LA57XiGxRmxmfjQtR2.xSoe._M40kMhK6aauG2pVX_fU34q1pcvrQzY8AtWXe8FtdJ6bsOu8EcRN0uAdC9xP0K0lb5vu.U5gXSEGfb.SRXOo091mFbv33_W0st3wG.C2opBhR\u00263092605e01839459320793d0b667c4a3261f975b99fbc0fcede148af92644242=LNdfd4lPq4eWUP00vCU5P1l.bLTY9rYkyFCicsv6muw-1783903394-1.0.1.1-2hW6j_irJpPHN0jf_kZCig7abtcoN6eUNEeJY7tKgVrzzEIQOWN08nsWQWi1YaJrpgwvFcURMgvDj9m2Ut89.r.m6jKeQquW9uFW8wkpprXiIZ58P9I3iE8i2o0jS4JC7ACgi5k3UaVRGrh.xOcL9JoT.o_BznoEZuF3NcZ3QE15q4j2OPh6Pr1rCTCj95m4"}},"response":{"raw":"HTTP/3 200 \r\npriority: u=0,i\r\ncontent-type: text/html; charset=utf-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Wed, 08 Jul 2026 09:23:57 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\ndate: Mon, 13 Jul 2026 00:43:15 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=F2dC7%2BM7GU2r03SneMelPw8u8DSCy10WKW0uwNT8nKOsu3Ul8i3pdAEe%2FikiwfuSPa5%2FYnHxtwbULSwny6Jck4%2ByvGwbGrBCYLZRlPQzCSO3jWnbujiCcoV%2F7yXOdTAiSlXaxVaNxgz%2FUG8UQmH85ubg\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: zstd\r\ncf-ray: a1a4409ace0e32fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1419,"size_decoded":1433,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"84a00309e78b5cdbe20dc4c35bc482f4","sha1":"109d5466e56f1c772893b9b31b55c25c79761f0d","sha256":"467afc006b61a3504e4981c68d01fd45cac2a310b862a7c42e625188b31f65d6","sha512":"860c8755a9e0f737fd0c8c24d0cda41c694b683e299ee123d6b5966dce6741ac6fd2d2a6314aa4e2c622243f46f54ccd09090e4a29b70bca78062e68e0c5a366","ssdeep":"","tlshash":"d5215393d5e000ab039292d365d7bb15bdc2ca0fc54d080076ed61944ffef86e96b98b","first_seen":"2026-07-10T10:05:05.436754Z","last_seen":"2026-07-13T01:35:20.215352Z","times_seen":47,"resource_available":true,"data":null}},"time_used":73,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":73,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"firelightfinances-proposal.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"firelightfinances-proposal.live/favicon.ico","fqdn":"firelightfinances-proposal.live","domain":"firelightfinances-proposal.live","tld":"live"},"ip":{"addr":"172.67.133.149","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://firelightfinances-proposal.live/","date":"2026-07-13T00:43:08.825Z","timestamp":1783903388825,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"firelightfinances-proposal.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Jul 2026 01:51:02 GMT","end":"Tue, 06 Oct 2026 02:49:35 GMT"},"fingerprint":{"sha1":"BC:C9:10:AC:93:52:3B:2E:26:09:7E:07:9E:B4:A9:E5:B8:97:97:5C","sha256":"85:F4:9C:4D:E3:96:AF:7D:BA:3F:1D:94:8F:04:56:69:30:74:5C:8A:FC:AD:E0:3B:6D:25:3C:C7:22:A4:05:45"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: firelightfinances-proposal.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://firelightfinances-proposal.live/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-encoding: gzip\r\ncontent-type: image/vnd.microsoft.icon\r\netag: \"djt2x409d3mv3b2\"\r\nlast-modified: Wed, 08 Jul 2026 09:23:56 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\ndate: Mon, 13 Jul 2026 00:43:08 GMT\r\nserver-timing: cfExtPri\r\nage: 6362\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OdKQb08NmT%2FYlQnefvkPONI90h%2F4zJRlWFw7EnIy6y8vixJhzQQppPvKbFi03%2FXdz23IbYVnZLrTNxfbWm81%2B8Mu9Is4h1xfyp7g399hacjoQVYWnMNubUEql5TSD%2B3Fi%2BNpkhSfxzjNI3QXtFbzgfGZ\"}]}\r\ncf-ray: a1a440742a9332fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1226\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4286,"size_decoded":2012,"mime_type":"image/vnd.microsoft.icon","magic":"MS Windows icon resource - 1 icon, 32x32, 32 bits/pixel","md5":"cc062a83151176811ed966d3add0c884","sha1":"6bd0ce89e5510efe1c1642a74f8570b46a2184b5","sha256":"4f73521bd5f74ede627f2a1e1f212b052621c4a7c51b13086c6e7cd56c792c30","sha512":"af6431bb105ebb16d799daa124b9151e267862ed560499c0529ee2afeacdf6874984b56bbffd5a4cdd5867c73963d30146a572997bb75da9a7ab6d62a575feb9","ssdeep":"24:su5LgTFD/4PAZpFHvB7BSivLxM1tjvd4QLHdFP+otq/lWnAVrhHjL/Wb6HN7og+m:23FSHLd4cdalcBp5+1E8EURV","tlshash":"5591da766f23fb2fedc1317010ca72b12c2640456b7a6a1908d529563341ef7bf8ce91","first_seen":"2026-07-10T10:02:52.697571Z","last_seen":"2026-07-13T01:35:20.212032Z","times_seen":62,"resource_available":false,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"firelightfinances-proposal.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"brunhild.challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/i/a1a440749eec35a6/.HQp2F5Sk8Tk_wqvXU0KqzKK8302dZQ2L83hZTHskgU-1783903388-1.2.1.1-3vsM6Khy9olcMpOlWqTlVgDSsLkRH3zW7AFehEoeljuzq1xBbcEYhyv0hifooJtu","fqdn":"brunhild.challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/av0/rch/8lak5/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","date":"2026-07-13T00:43:09.670Z","timestamp":1783903389670,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /cdn-cgi/challenge-platform/h/b/i/a1a440749eec35a6/.HQp2F5Sk8Tk_wqvXU0KqzKK8302dZQ2L83hZTHskgU-1783903388-1.2.1.1-3vsM6Khy9olcMpOlWqTlVgDSsLkRH3zW7AFehEoeljuzq1xBbcEYhyv0hifooJtu HTTP/1.1\r\nHost: brunhild.challenges.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://challenges.cloudflare.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-17T23:40:28.518186Z","times_seen":17325131,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/ci/a1a440749eec35a6/1783903389322/10t4Hs8TE61q4KG","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/av0/rch/8lak5/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","date":"2026-07-13T00:43:09.820Z","timestamp":1783903389820,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"challenges.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 16 Jun 2026 20:15:28 GMT","end":"Mon, 14 Sep 2026 21:15:13 GMT"},"fingerprint":{"sha1":"77:27:72:42:CF:51:E8:8C:7C:3E:8C:4C:A1:F0:9A:86:96:B9:0A:16","sha256":"ED:7C:F7:38:B3:0F:00:86:32:D1:14:CE:C0:FF:CA:0E:7C:86:EE:49:51:EF:A4:4B:AA:5C:B6:7C:00:B5:3D:F3"}}},"request":{"raw":"GET /cdn-cgi/challenge-platform/h/b/ci/a1a440749eec35a6/1783903389322/10t4Hs8TE61q4KG HTTP/1.1\r\nHost: challenges.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/av0/rch/8lak5/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 13 Jul 2026 00:43:09 GMT\r\ncontent-type: image/png\r\ncontent-length: 640\r\npriority: u=6,i\r\nserver: cloudflare\r\ncf-ray: a1a4407a6d7535a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":640,"size_decoded":860,"mime_type":"image/png","magic":"PNG image data, 9 x 56, 8-bit grayscale, non-interlaced","md5":"d249951e8023da1f7799fbf27a0d7eaa","sha1":"f97aa8843b42cc25c01355fae34748d7909721a5","sha256":"9d1d42b90a628de99f4c834c6064874f6a83553dc893baea9a77e4a8661ac6e0","sha512":"d41ba6f4b13846ff551aa6ee28ee820c5bb7c92276570e6e19c4932965dca2e12f45ac82fd8b5604141ad22229b71118001bceda824f18222ea1757fa7f1536c","ssdeep":"","tlshash":"58f012dd59414e6dc0b2043d40540020cb34111220214a24202ea4151150d5541c4302","first_seen":"2026-07-13T00:43:40.763955Z","last_seen":"2026-07-13T00:43:40.763955Z","times_seen":1,"resource_available":false,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}