{"report_id":"910a3d74-a47c-4ba9-836a-aeb0ff5e0dda","version":6,"status":"done","tags":[],"date":"2025-08-17T17:34:30Z","url":{"schema":"https","addr":"xrp-era.net/","fqdn":"xrp-era.net","domain":"xrp-era.net","tld":"net"},"ip":{"addr":"93.152.230.99","port":0,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"final":{"url":{"schema":"https","addr":"xrp-era.net/","fqdn":"xrp-era.net","domain":"xrp-era.net","tld":"net"},"title":"Ripple Inc. | BIG EVENT | 2025"},"submit":{"url":{"schema":"https","addr":"xrp-era.net/","fqdn":"xrp-era.net","domain":"xrp-era.net","tld":"net"},"ip":{"addr":"93.152.230.99","port":0,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"tags":null,"meta":null,"user":{"user_id":"akbkyowd9geqr98"}},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-09-21T17:34:30Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2025-08-13T15:14:14.224423Z","alert_count":0,"request_count":1,"received_data":4594,"sent_data":486,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"xrp-era.net","ip":{"addr":"93.152.230.99","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"domain_registered":"2025-07-20","domain_rank":0,"first_seen":"2025-08-17T17:25:58.8963Z","last_seen":"2025-08-17T17:25:58.8963Z","alert_count":0,"request_count":4,"received_data":1939084,"sent_data":1771,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.28.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"embed.tawk.to","ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":52083,"first_seen":"2014-03-19T21:03:49Z","last_seen":"2025-08-13T22:04:18.060109Z","alert_count":0,"request_count":1,"received_data":2613,"sent_data":458,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2025-08-13T15:10:36.82984Z","alert_count":0,"request_count":1,"received_data":38663,"sent_data":546,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":null}],"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"embed.tawk.to/67fc2d16cc5a28191377db54/1iooh08j4","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"29b3ace2b5bbb7349a0f7dcb826c3b43","sha1":"d6a0d5cc7f0bb9cc7eb836d7283a1cfff190b8e7","sha256":"6321d91a2fe3dd0c7ad493c4e4f5d4e499f32fbfe99e2ba77df312a5edce780d","sha512":"a2fc29931b4f31ddabb8b499b8009b45c8df7e17a5ef56366802630d17235c223d97e067a753f3e63ac4eaf0f77caab93605704a5eddf07da2063f59b531e132","ssdeep":"","tlshash":"2b4124d67b8f5863a33710d80caff90e747771e648e9d992cb0940417275aad2acdd38","size":2123,"data":"","first_seen":"2025-08-17T17:26:02.692582Z","last_seen":"2025-08-17T17:34:31.359225Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xrp-era.net/","fqdn":"xrp-era.net","domain":"xrp-era.net","tld":"net"},"ip":{"addr":"93.152.230.99","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"introduction_type":"scriptElement","is_inline":true,"md5":"96e9047e238fef21fe495c486db22dba","sha1":"6576f63de1397955c33e8497a9909b7fbc999cb4","sha256":"e79daa2255770e8ded215f22218e618e05efec6c635049153bf1cb3b0883e322","sha512":"57fef7094455a9548136495fb45b50906bc8acd86b8dd90b1b0cc23f52ed875f9eabbe7c8ff08626bc90669c461a9907329b70629581e244372f9e04e5dd9070","ssdeep":"","tlshash":"3fc012013a50011dc0a531880c112298f0368837e64c08737dfcf1018f514031cd2378","size":191,"data":"","first_seen":"2025-08-17T17:26:02.69408Z","last_seen":"2025-08-17T17:34:31.368443Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xrp-era.net/","fqdn":"xrp-era.net","domain":"xrp-era.net","tld":"net"},"ip":{"addr":"93.152.230.99","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"introduction_type":"scriptElement","is_inline":true,"md5":"8ea8f0e729ce4123178a6ea5d75aedf5","sha1":"7f0d0a613401926bc63934e129ec3844a7623cb8","sha256":"c6180b1090a63e154480b2ae0668806e589847155040b1ad585dcbdfbcaf2913","sha512":"4a35c914c7c0bc1d22c5d8f55c9b11db1157040727dceb235b848e499889592f9ee36a8ae1899a8d1f30da4447e87ac90d62b910b2f0bd208feff4094dc9375b","ssdeep":"","tlshash":"bee0265d39417d25926699a720b2de4c78a23028e94dd850999fc8493a1898ec929ba8","size":334,"data":"","first_seen":"2025-05-06T21:48:03.283538Z","last_seen":"2026-02-16T19:39:53.192766Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Montserrat:ital,wght@0,100..900;1,100..900\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://xrp-era.net/","date":"2025-08-17T17:34:07.332Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Jul 2025 08:35:11 GMT","end":"Mon, 29 Sep 2025 08:35:10 GMT"},"fingerprint":{"sha1":"DF:A1:DB:1F:BC:5E:31:D7:F8:FE:26:E3:B9:B3:02:98:B1:C8:50:EC","sha256":"A2:57:20:B6:AE:46:89:B9:39:C7:57:9B:1E:43:96:E3:5A:BC:7E:3F:1D:18:10:34:CC:53:3D:DB:78:4E:5C:21"}}},"request":{"raw":"GET /css2?family=Montserrat:ital,wght@0,100..900;1,100..900\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xrp-era.net/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sun, 17 Aug 2025 17:34:07 GMT\r\ndate: Sun, 17 Aug 2025 17:34:07 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3908,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"05ee166840d6beeb80553e4ba53799d1","sha1":"3a13ccc259a7adfdd8726bb3caca82eece990dbd","sha256":"d453cd8e0ad6f039c8460fd5b40c14a30cdc0197466da5c83bfc4cdf34583baa","sha512":"3f9f1f44825c651f4ba38768696b9dec3cee71dda549eae45982f707e6f52b1b6df27d6a2fe55c369f57f179c655fb40cc3f1c74873a2c6bd5f0ce8f6328524f","ssdeep":"","tlshash":"ff81e0810517a104da471cc923cf7e269e0e62727494d5797ffe2ca4bdead220320b3c","first_seen":"2025-05-29T22:42:04.721417Z","last_seen":"2025-09-05T00:23:48.183293Z","times_seen":3268,"resource_available":false,"data":null}},"time_used":282,"timings":{"blocked":122,"dns":1,"connect":15,"send":0,"wait":32,"receive":0,"ssl":109},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xrp-era.net/static/js/main.590af717.js","fqdn":"xrp-era.net","domain":"xrp-era.net","tld":"net"},"ip":{"addr":"93.152.230.99","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xrp-era.net/","date":"2025-08-17T17:34:07.334Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xrp-era.net","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Sat, 02 Aug 2025 19:52:28 GMT","end":"Fri, 31 Oct 2025 19:52:27 GMT"},"fingerprint":{"sha1":"0F:89:44:69:50:6C:67:5C:CE:F0:A6:73:AF:92:61:E5:15:65:59:A0","sha256":"16:34:BB:D4:54:08:75:E5:E0:7F:B6:32:40:94:F7:4D:82:AD:23:CF:62:9F:73:44:B2:76:79:E9:3D:99:FB:5C"}}},"request":{"raw":"GET /static/js/main.590af717.js HTTP/1.1\r\nHost: xrp-era.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xrp-era.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.0\r\nDate: Sun, 17 Aug 2025 17:34:07 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 1899560\r\nLast-Modified: Tue, 24 Jun 2025 21:22:00 GMT\r\nConnection: keep-alive\r\nETag: \"685b16f8-1cfc28\"\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains\r\nX-Content-Type-Options: nosniff\r\nX-Frame-Options: SAMEORIGIN\r\nX-XSS-Protection: 1; mode=block\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1899560,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"1a1865f0b906614b3ffa368f021e0729","sha1":"f64104753070f145c7d4f831b958b56d2f724148","sha256":"0dd04aa91d1094d983c2d1f184282831a8cc48d6b1c5ad83dc8a1a100eb1cbcc","sha512":"698883ea33da8625b87278d74393df50e376c16fc2dac187a0ca27a4cd8414eacd06fad85297476fc7874321208126e854c0e38958ba1c1fdb080898bfc9acd7","ssdeep":"24576:ok6tkAK6E/UsH3skn2TcWuVeFMqj23xzZ8po:L6tkAK6E/UsH3skn2gWAeFp23xzZ8po","tlshash":"4b25eb84b7d0e50b278f4f93ff17aae5d47a492b78853507c358beac18e920bd694870","first_seen":"2025-08-17T17:26:02.690999Z","last_seen":"2025-08-17T17:34:31.353965Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1476,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":145,"receive":1331,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xrp-era.net/static/css/main.af7bfb80.css","fqdn":"xrp-era.net","domain":"xrp-era.net","tld":"net"},"ip":{"addr":"93.152.230.99","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://xrp-era.net/","date":"2025-08-17T17:34:07.335Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xrp-era.net","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Sat, 02 Aug 2025 19:52:28 GMT","end":"Fri, 31 Oct 2025 19:52:27 GMT"},"fingerprint":{"sha1":"0F:89:44:69:50:6C:67:5C:CE:F0:A6:73:AF:92:61:E5:15:65:59:A0","sha256":"16:34:BB:D4:54:08:75:E5:E0:7F:B6:32:40:94:F7:4D:82:AD:23:CF:62:9F:73:44:B2:76:79:E9:3D:99:FB:5C"}}},"request":{"raw":"GET /static/css/main.af7bfb80.css HTTP/1.1\r\nHost: xrp-era.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xrp-era.net/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.0\r\nDate: Sun, 17 Aug 2025 17:34:07 GMT\r\nContent-Type: text/css\r\nContent-Length: 27509\r\nLast-Modified: Tue, 24 Jun 2025 21:22:00 GMT\r\nConnection: keep-alive\r\nETag: \"685b16f8-6b75\"\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains\r\nX-Content-Type-Options: nosniff\r\nX-Frame-Options: SAMEORIGIN\r\nX-XSS-Protection: 1; mode=block\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":27509,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (27464)","md5":"aa009449218f124e94ff2a99d64f1cbe","sha1":"76d278a49fc19237ce73f093fcc402069c670f77","sha256":"84c61fdc971a456878b3ba9ee4524492596f14fce51423e77d10dca161f4226c","sha512":"23abf154dc796cffbde2fab4f22e3d0026dd41fe08d7ccf2f8e663ad3d13ff144d91ada7eda53199a6b26c90d49912ba32d4612b4e3003f11479f8881330833c","ssdeep":"384:mi3xspTfg6wRgjUNEHrit3B5WfAQDgY3w1b6bBjJb6aiGMWBkCD2/leM:Mi2UHtCoMuQ1CCTM","tlshash":"b6c27541a9405a39bc27bc7697cddb4cd12ad0e299eb16ed7ecf901d86c23c91b32349","first_seen":"2025-05-15T14:42:28.39912Z","last_seen":"2025-08-17T17:34:31.357236Z","times_seen":3,"resource_available":false,"data":null}},"time_used":448,"timings":{"blocked":150,"dns":1,"connect":72,"send":0,"wait":139,"receive":1,"ssl":80},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/67fc2d16cc5a28191377db54/1iooh08j4","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xrp-era.net/","date":"2025-08-17T17:34:07.548Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 13 Jul 2025 02:19:59 GMT","end":"Sat, 11 Oct 2025 03:19:41 GMT"},"fingerprint":{"sha1":"F6:B2:D4:07:34:AA:36:B0:31:B4:46:F7:C0:F1:42:C1:22:C7:52:88","sha256":"3B:B7:7C:41:B1:9A:61:31:E5:4D:BE:EE:8A:62:A0:B7:7C:C0:A9:78:00:77:1E:13:EC:1C:EF:7C:5C:FF:D5:2A"}}},"request":{"raw":"GET /67fc2d16cc5a28191377db54/1iooh08j4 HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://xrp-era.net\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xrp-era.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 17 Aug 2025 17:34:07 GMT\r\ncontent-type: application/x-javascript\r\ncf-ray: 970aeba16ba4829d-ARN\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=7200, s-maxage=3600\r\netag: W/\"stable-v4-6899416770a\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nage: 1639\r\ncf-cache-status: HIT\r\nx-content-type-options: nosniff\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2123,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text","md5":"29b3ace2b5bbb7349a0f7dcb826c3b43","sha1":"d6a0d5cc7f0bb9cc7eb836d7283a1cfff190b8e7","sha256":"6321d91a2fe3dd0c7ad493c4e4f5d4e499f32fbfe99e2ba77df312a5edce780d","sha512":"a2fc29931b4f31ddabb8b499b8009b45c8df7e17a5ef56366802630d17235c223d97e067a753f3e63ac4eaf0f77caab93605704a5eddf07da2063f59b531e132","ssdeep":"","tlshash":"2b4124d67b8f5863a33710d80caff90e747771e648e9d992cb0940417275aad2acdd38","first_seen":"2025-08-17T17:26:02.692582Z","last_seen":"2025-08-17T17:34:31.359225Z","times_seen":2,"resource_available":true,"data":null}},"time_used":102,"timings":{"blocked":34,"dns":1,"connect":8,"send":0,"wait":32,"receive":0,"ssl":24},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/montserrat/v30/JTUSjIg1_i6t8kCHKm459WlhyyTn89ddpQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://xrp-era.net/","date":"2025-08-17T17:34:07.658Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Jul 2025 08:35:11 GMT","end":"Mon, 29 Sep 2025 08:35:10 GMT"},"fingerprint":{"sha1":"43:A0:95:35:FB:C7:02:15:92:9E:20:20:0D:0A:E7:8F:93:61:52:CD","sha256":"F1:59:AE:4E:F0:84:C7:D9:0F:67:4F:CB:FE:A6:ED:7D:47:17:4F:83:AA:B4:ED:FE:F5:F2:69:A8:AB:43:0E:0B"}}},"request":{"raw":"GET /s/montserrat/v30/JTUSjIg1_i6t8kCHKm459WlhyyTn89ddpQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://xrp-era.net\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 37828\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 14 Aug 2025 17:23:15 GMT\r\nexpires: Fri, 14 Aug 2026 17:23:15 GMT\r\ncache-control: public, max-age=31536000\r\nage: 259852\r\nlast-modified: Wed, 28 May 2025 18:51:10 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":37828,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 37828, version 1.0","md5":"e0b05ccbd5b6004a449ac84b466c29ac","sha1":"bcc0e513caae5f6f4164b58eaaa46eaa49622322","sha256":"1f1ae80aa76018cc05e840a37f41cf860211bbe368971f54957bf8ebb3c863d6","sha512":"abc51775b8a82afdd427b2c78aff0c23c95d19bfc7045503724e9ab4f3ce5a6b821d9b10cab9e0c6fdaca2f61c81049d583254952556f42dc147ed53a27b42e3","ssdeep":"768:PqSDNU3XMET3F2NSOiow7Lt/omB7y+/gHII7knqVHQTp4pT:PqSDNUHdT3gNS7/omFnECTp4B","tlshash":"5f03e14522f601c8f245da77fa395d849f731e00379e4ea05846c64db9b7c22aa92d2f","first_seen":"2024-11-22T05:36:25.159388Z","last_seen":"2026-08-13T21:19:03.798033Z","times_seen":38030,"resource_available":false,"data":null}},"time_used":308,"timings":{"blocked":123,"dns":1,"connect":29,"send":0,"wait":28,"receive":33,"ssl":91},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xrp-era.net/favicon.ico","fqdn":"xrp-era.net","domain":"xrp-era.net","tld":"net"},"ip":{"addr":"93.152.230.99","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xrp-era.net/","date":"2025-08-17T17:34:09.500Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xrp-era.net","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Sat, 02 Aug 2025 19:52:28 GMT","end":"Fri, 31 Oct 2025 19:52:27 GMT"},"fingerprint":{"sha1":"0F:89:44:69:50:6C:67:5C:CE:F0:A6:73:AF:92:61:E5:15:65:59:A0","sha256":"16:34:BB:D4:54:08:75:E5:E0:7F:B6:32:40:94:F7:4D:82:AD:23:CF:62:9F:73:44:B2:76:79:E9:3D:99:FB:5C"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: xrp-era.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xrp-era.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.0\r\nDate: Sun, 17 Aug 2025 17:34:09 GMT\r\nContent-Type: image/x-icon\r\nContent-Length: 8894\r\nLast-Modified: Sat, 29 Mar 2025 14:22:01 GMT\r\nConnection: keep-alive\r\nETag: \"67e80209-22be\"\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains\r\nX-Content-Type-Options: nosniff\r\nX-Frame-Options: SAMEORIGIN\r\nX-XSS-Protection: 1; mode=block\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.28.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":8894,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 46x46, 32 bits/pixel","md5":"5cb9a71e69fa7983d512fc75b3661230","sha1":"12a765046d3f04115d21cb3764ec16994b6a75f3","sha256":"2ebf557fa361f9d33be6d50453898bd5a7fb9b87c5351ff40c0f86c4f264efef","sha512":"f3796e85fd60433c939e8885e51cac8605c666d65a542279deaf5ccfeedab25649bff98a28a23df17a6443f902c661952a0dc9226956d11c7ee5606b7a3eb018","ssdeep":"48:tSWxenhmrBKNMd6JA4AI8bOe+PD8fXHEEHLLs0ghaaQTLR2jaMx6qzzm0G:AWxenhS3d6Jobp+PD8fjANaaRjaoq","tlshash":"3e02ec533117f016cf17a5355d81f1f78f897d34bd14910934bb3a2fca348b66608112","first_seen":"2025-01-27T15:14:24.540466Z","last_seen":"2026-05-17T05:52:44.621146Z","times_seen":40,"resource_available":false,"data":null}},"time_used":68,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":67,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xrp-era.net/","fqdn":"xrp-era.net","domain":"xrp-era.net","tld":"net"},"ip":{"addr":"93.152.230.99","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-08-17T17:34:06.876Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xrp-era.net","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Sat, 02 Aug 2025 19:52:28 GMT","end":"Fri, 31 Oct 2025 19:52:27 GMT"},"fingerprint":{"sha1":"0F:89:44:69:50:6C:67:5C:CE:F0:A6:73:AF:92:61:E5:15:65:59:A0","sha256":"16:34:BB:D4:54:08:75:E5:E0:7F:B6:32:40:94:F7:4D:82:AD:23:CF:62:9F:73:44:B2:76:79:E9:3D:99:FB:5C"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: xrp-era.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.0\r\nDate: Sun, 17 Aug 2025 17:34:07 GMT\r\nContent-Type: text/html\r\nContent-Length: 1505\r\nLast-Modified: Sun, 17 Aug 2025 17:06:04 GMT\r\nConnection: keep-alive\r\nETag: \"68a20bfc-5e1\"\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains\r\nX-Content-Type-Options: nosniff\r\nX-Frame-Options: SAMEORIGIN\r\nX-XSS-Protection: 1; mode=block\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.28.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1505,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (548)","md5":"89557c4ff8e55c85d1d185b9938c11bf","sha1":"35fc350f891beb0db4eda75b705dc065b72720e9","sha256":"fa1adafde455ed962953287f553a3e95be701935b7d6c05432863f2d79ac80a9","sha512":"d8c1ccd7afd92e14c17a5e98e0678a0cfe10cbbbe90993d06a49b4ff0c746bf93d4ecd4cd8a0562c7c466e64c9e325e643edce6687321d60163b236bcd959644","ssdeep":"","tlshash":"f531560aac40d449532041b779f1f61ca4aa742df754e8a0bddf8c591f94bd58c27f58","first_seen":"2025-08-17T17:26:02.67295Z","last_seen":"2025-08-17T17:34:31.365814Z","times_seen":2,"resource_available":false,"data":null}},"time_used":356,"timings":{"blocked":147,"dns":11,"connect":70,"send":0,"wait":56,"receive":0,"ssl":70},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}