{"report_id":"aaf8ffb1-f61e-4aaa-9d85-d69041c9e8ea","version":0,"status":"done","tags":[],"date":"2026-07-12T22:58:41Z","url":{"schema":"https","addr":"firelightfinances-xrp.live/","fqdn":"firelightfinances-xrp.live","domain":"firelightfinances-xrp.live","tld":"live"},"ip":{"addr":"172.67.171.181","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"firelightfinances-xrp.live/","fqdn":"firelightfinances-xrp.live","domain":"firelightfinances-xrp.live","tld":"live"},"title":"Firelight — Phase 2 Vote","dom":{"size":1398,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"a5f39c08ce75b6f7b93162f31c3ac821","sha1":"71ae8e88c75ac7fab94f334d46e895820b8b4850","sha256":"97e3db1d49408debd2215763fa041decf07a49c40c73ab6ef7603ac6b8a45f7d","sha512":"9900bcef65b35e7f00a8ea66e4ace1ddec6ed95b126e94a3568f4407cbc99f9456df34a84a1884c6276566fbeb9fa8afbb06c1933cc115bdb0c77d14daac2836","ssdeep":"","tlshash":"74212393d5e000ab039292c365d7bb55bdc2ca0fc54d0c0075ad51d44fbef86e56798b","dom_hash":"domhash3202f159e11f25569819329de028aa36","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"firelightfinances-xrp.live/","fqdn":"firelightfinances-xrp.live","domain":"firelightfinances-xrp.live","tld":"live"},"ip":{"addr":"172.67.171.181","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-08-16T22:58:41Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"firelightfinances-xrp.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null},"summary":[{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-07-12T22:22:25.184057Z","alert_count":0,"request_count":1,"received_data":684,"sent_data":544,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"firelightfinances-xrp.live","ip":{"addr":"172.67.171.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-07-11T14:29:07.603602Z","last_seen":"2026-07-11T14:29:07.603602Z","alert_count":8,"request_count":8,"received_data":351238,"sent_data":6845,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"challenges.cloudflare.com","ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-02-17","domain_rank":11393,"first_seen":"2021-10-20T05:02:03Z","last_seen":"2026-07-05T23:33:46.327486Z","alert_count":0,"request_count":3,"received_data":834117,"sent_data":2177,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/f/av0/rch/8caa0/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-07-15T13:18:14.52102Z","times_seen":775668,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"firelightfinances-xrp.live/5786146b-2517-4f04-b85f-b888cb261fc1","fqdn":"firelightfinances-xrp.live","domain":"firelightfinances-xrp.live","tld":"live"},"ip":{"addr":"172.67.171.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"","is_inline":false,"md5":"7276e9e60bb27ccbf4c91c350e0ffbc1","sha1":"3527cc6fb6c067314c03ca3ab0ef2771fa879fff","sha256":"16f9fabe64a292dd85ba76d962fcc4867ca8321468c04e39a3f45ab972b3752c","sha512":"24df718d0a1062962a7958f297616967248c671426fab7d29bcdbdd30b89d8bc30c96361c55ca8728af9b5ea8847d49f1d65f90587c96650247de455779c638b","ssdeep":"","tlshash":"88d0cd093d71d60982a251337c7f3521c1616268650952445375cef9cb50aaf6514f54","size":291,"data":"","first_seen":"2026-07-09T15:59:03.562627Z","last_seen":"2026-07-13T11:08:20.546696Z","times_seen":2733,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/f/av0/rch/8caa0/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"b795fe1e51edbdafbfdcb1f8f77b02af","sha1":"c5fc7bb62e3545db32c397fe828b033ad7a5942e","sha256":"954e85b42023935dec4963def44c6e3ebea90e178957759f910803585898a79b","sha512":"5370ee7c7f2ac6e25334ccb3be28747fd9c1a1bf071b896d814006c9a09ce2ae725b260a16c2b70a5b195ad8abab7e240e784c376a63ad18100886bc5852cbc3","ssdeep":"3:N/BKL1XMrQyn:eL1yQyn","tlshash":"b45504c0dd4030f00410d405d17014157005350111151c0175dd04d4577040d00705d0","size":1337359,"data":"","first_seen":"2026-07-12T22:58:44.448706Z","last_seen":"2026-07-12T22:58:44.448706Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/56a797ea-94f9-4bf1-ae34-7900066d851f","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"","is_inline":false,"md5":"7276e9e60bb27ccbf4c91c350e0ffbc1","sha1":"3527cc6fb6c067314c03ca3ab0ef2771fa879fff","sha256":"16f9fabe64a292dd85ba76d962fcc4867ca8321468c04e39a3f45ab972b3752c","sha512":"24df718d0a1062962a7958f297616967248c671426fab7d29bcdbdd30b89d8bc30c96361c55ca8728af9b5ea8847d49f1d65f90587c96650247de455779c638b","ssdeep":"","tlshash":"88d0cd093d71d60982a251337c7f3521c1616268650952445375cef9cb50aaf6514f54","size":291,"data":"","first_seen":"2026-07-09T15:59:03.562627Z","last_seen":"2026-07-13T11:08:20.546696Z","times_seen":2733,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/f/av0/rch/8caa0/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"649b838edf38e5afdcf3cf72b32db327","sha1":"40207b6b142cc1920e68c0056699c9266b9b4830","sha256":"d170b4e2678df5cfed25f9e69862403db6311887023b0fac8e3a7178ada56c6b","sha512":"5b01939f48eaabd7c3bb7a41ea3625a03413a93e2d15b58100da45140d64f7c8f2d8e35412f96d74d227fe568a0d55af7f04785c979c09ad9171022b067eda0f","ssdeep":"6144:LicAZ9HZ5DFh/pvBHMtgJ02Jp0GDTUHrutF6u+4wx644KmlvKgfNjVdOc9ra5nr+:c9HthxvBHD02JpMWNjPOc9ra5nr/G","tlshash":"56341bcfbccbf48d238eaafc409b34dbe4595c9464e8564882b0d1e43aa034d5b7bd59","size":248032,"data":"","first_seen":"2026-07-12T22:58:44.44968Z","last_seen":"2026-07-12T22:58:44.44968Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"firelightfinances-xrp.live/","fqdn":"firelightfinances-xrp.live","domain":"firelightfinances-xrp.live","tld":"live"},"ip":{"addr":"172.67.171.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"24ff232e8db6a975dbc22b96e3e84870","sha1":"5fe057f5180c6a07f433c5c49bf4bfab3c3ad913","sha256":"8e3a4a7fd93d8e2c0c32d458f3f3415124b247b207b5b9be9413e0a74bfcfad3","sha512":"8a6e5f13f9ed294d782a8e88f7b3c746855f12dd07293c64ce2b43606b752cd71e1a783e53a165e8ec59be1076d3cd8eb8572ae7a5c9f60c1a72a65493a8685c","ssdeep":"","tlshash":"fec09b883bc5e015c755363a5daf4286f639efa04c585053e052514ab7b0751439ef5f","size":136,"data":"","first_seen":"2026-07-09T15:59:03.578942Z","last_seen":"2026-07-13T11:08:20.551598Z","times_seen":2797,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"firelightfinances-xrp.live/?__cf_chl_rt_tk=spKTiiDSBlko1ZHvOZcrcM0QS3O2PVsRRtxWFqplu4w-1783897094-1.0.1.1-7yfANKPBoX14xJGCADNlUh8yVJIt2.ngarfVCOJrjNo","fqdn":"firelightfinances-xrp.live","domain":"firelightfinances-xrp.live","tld":"live"},"ip":{"addr":"172.67.171.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-07-15T13:18:14.52102Z","times_seen":775668,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"firelightfinances-xrp.live/","fqdn":"firelightfinances-xrp.live","domain":"firelightfinances-xrp.live","tld":"live"},"ip":{"addr":"172.67.171.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"8d71ea7a68d9e33f1adece25da9ea9da","sha1":"7cf380e2ac7909dad1bc5562f15f84cb940afb12","sha256":"928fa543ed017ea12c6968c6fd44f22061eef4c57d78f2d41adc2cfb8e3e452a","sha512":"64e4f22164caada2ccae5773e5e6c5f72d6bfff5ca85b560eec39064c272de72ff79deccd385f3d9865222c8eb4396402f260ff2d10d9a42dd571a4c2317e7a2","ssdeep":"3:N/BKL1XMrRlVn:eL1ydn","tlshash":"635504c05dc031700410d504d1505435500535411515140173dd04dc173001d00705d0","size":1337359,"data":"","first_seen":"2026-07-12T22:58:44.451205Z","last_seen":"2026-07-12T22:58:44.451205Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"firelightfinances-xrp.live/cdn-cgi/challenge-platform/h/g/orchestrate/chl_page/v1?ray=a1a3a6c89ac45687","fqdn":"firelightfinances-xrp.live","domain":"firelightfinances-xrp.live","tld":"live"},"ip":{"addr":"172.67.171.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"5ad3abb9e187f65ea1c07603fd1d708f","sha1":"5ab921a05829e2580e717b0bc3f11f18ef06f7f1","sha256":"c22b8cb2c720e265cc951bd440c2ef0e3fc20c00b34d3457f7d1237e924c4517","sha512":"e377c55a3f7f97f7970f325060046e7d1bc79ac979c602fd6ab31fb10965105585a1afc63444b5b5645d116cde3992235567abc30dda7ea238c24d35d57ef6e4","ssdeep":"6144:9/H3vI2yIMZ1kn13j+GwOUJNCAA7HnIWjn1OwfYjKajAqFt7iRzV0zWHXB9rITE:nMZ1kn13j+GZUpA7HIWjn1OwfYjKasqc","tlshash":"7e24f9cf3dc7f44a230ae37900db39db9a594ca474f43948e0a191f42a753a8977be58","size":225212,"data":"","first_seen":"2026-07-12T22:58:44.43939Z","last_seen":"2026-07-12T22:58:44.43939Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/turnstile/v0/g/73f5d73b1f13/api.js?onload=Jdvdh0\u0026render=explicit","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"15221d51bd292126fd260c66336db19c","sha1":"d0ca22a3b568b71997d266bf6fe48bdedd932807","sha256":"90acf284e78ceb1183e080909b7558617bd981480fd3000ae1b433d5eb28c459","sha512":"7477e39dc11f4c71e65ca6192e71a74cad6d93b8b4ba702fdac40ea0af2029b6b8f395aae2b20c0c39a8f31d1e1f32db92a9b41632e4e2da5624d7b0d9fddb8f","ssdeep":"1536:tM5A+jXSq5RDMDpydrdopXOe1H05V46MlsgV0Dixw5MB:tEuYR0ydrMXOe1U8lP0Dixw5MB","tlshash":"81732bc472aa7862139ac0f4913b6753b3257d3aa84c8850d467dc653b7cd869233fba","size":75049,"data":"","first_seen":"2026-07-09T15:43:08.802758Z","last_seen":"2026-07-13T11:08:19.965925Z","times_seen":6436,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"firelightfinances-xrp.live/","fqdn":"firelightfinances-xrp.live","domain":"firelightfinances-xrp.live","tld":"live"},"ip":{"addr":"172.67.171.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-07-15T13:18:14.52102Z","times_seen":775668,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/f/av0/rch/8caa0/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"24ff232e8db6a975dbc22b96e3e84870","sha1":"5fe057f5180c6a07f433c5c49bf4bfab3c3ad913","sha256":"8e3a4a7fd93d8e2c0c32d458f3f3415124b247b207b5b9be9413e0a74bfcfad3","sha512":"8a6e5f13f9ed294d782a8e88f7b3c746855f12dd07293c64ce2b43606b752cd71e1a783e53a165e8ec59be1076d3cd8eb8572ae7a5c9f60c1a72a65493a8685c","ssdeep":"","tlshash":"fec09b883bc5e015c755363a5daf4286f639efa04c585053e052514ab7b0751439ef5f","size":136,"data":"","first_seen":"2026-07-09T15:59:03.578942Z","last_seen":"2026-07-13T11:08:20.551598Z","times_seen":2797,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"firelightfinances-xrp.live/","fqdn":"firelightfinances-xrp.live","domain":"firelightfinances-xrp.live","tld":"live"},"ip":{"addr":"172.67.171.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"2357345712ff1453e2851250baba6529","sha1":"7f72ffac0fcb84f1c6f1878be477b695940ae4da","sha256":"284b7e8499533e17b90a726a6c51e54d538e3b6212857f258b321781e1a49015","sha512":"bf8b8786cf1be68b9e98fc45a22925bd80766a689b47ea26ad41818617a53b0def1b0e9e6259ac1ac52b737a2db08ab4e4521ccaebcefd36bbe8f3b46a7fb523","ssdeep":"3:N/BKL1XMrQ1U:eL1yQe","tlshash":"c75504c0dd5030700450d405d1503455500515111557150171dd04d4573040d00705d0","size":1337359,"data":"","first_seen":"2026-07-12T22:58:44.452198Z","last_seen":"2026-07-12T22:58:44.452198Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"log","text":"map[actor:server1.conn0.watcher14.process8//obj172 class:RegExp displayString:/.*.*=.*/ extensible:true frozen:false isError:false ownPropertyLength:2 sealed:false type:object]","filename":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/f/av0/rch/8caa0/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","line_number":1,"column_number":89992},{"level":"log","text":"map[actor:server1.conn0.watcher14.process8//obj175 class:BoundFunctionObject extensible:true frozen:false isError:false ownPropertyLength:3 preview:map[kind:Object ownProperties:map[toString:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher14.process8//obj176 class:BoundFunctionObject extensible:true frozen:false isError:false ownPropertyLength:2 sealed:false type:object] writable:true]] ownPropertiesLength:3] sealed:false type:object]","filename":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/f/av0/rch/8caa0/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","line_number":1,"column_number":89992},{"level":"log","text":"map[actor:server1.conn0.watcher14.process8//obj178 class:HTMLAnchorElement contentDomReference:map[browsingContextId:1.5032385538e+10 id:0.5214422308797937] extensible:true frozen:false isError:false ownPropertyLength:1 preview:map[attributes:map[] attributesLength:0 isConnected:false kind:DOMNode nodeName:a nodeType:1] sealed:false type:object]","filename":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/f/av0/rch/8caa0/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","line_number":1,"column_number":89992},{"level":"debug","text":"0","filename":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/f/av0/rch/8caa0/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","line_number":1,"column_number":224499},{"level":"error","text":"0","filename":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/f/av0/rch/8caa0/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","line_number":1,"column_number":224499},{"level":"info","text":"0","filename":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/f/av0/rch/8caa0/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","line_number":1,"column_number":224499},{"level":"log","text":"0","filename":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/f/av0/rch/8caa0/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","line_number":1,"column_number":224499},{"level":"warn","text":"0","filename":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/f/av0/rch/8caa0/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","line_number":1,"column_number":224499},{"level":"debug","text":"","filename":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/f/av0/rch/8caa0/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","line_number":1,"column_number":89992},{"level":"log","text":"map[actor:server1.conn0.watcher14.process8//obj170 class:RegExp displayString:/.*.*=.*/ extensible:true frozen:false isError:false ownPropertyLength:2 sealed:false type:object]","filename":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/f/av0/rch/8caa0/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","line_number":1,"column_number":89992},{"level":"log","text":"map[actor:server1.conn0.watcher14.process8//obj173 class:BoundFunctionObject extensible:true frozen:false isError:false ownPropertyLength:3 preview:map[kind:Object ownProperties:map[toString:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher14.process8//obj174 class:BoundFunctionObject extensible:true frozen:false isError:false ownPropertyLength:2 sealed:false type:object] writable:true]] ownPropertiesLength:3] sealed:false type:object]","filename":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/f/av0/rch/8caa0/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","line_number":1,"column_number":89992},{"level":"log","text":"map[actor:server1.conn0.watcher14.process8//obj177 class:HTMLAnchorElement contentDomReference:map[browsingContextId:1.5032385538e+10 id:0.5214422308797937] extensible:true frozen:false isError:false ownPropertyLength:1 preview:map[attributes:map[] attributesLength:0 isConnected:false kind:DOMNode nodeName:a nodeType:1] sealed:false type:object]","filename":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/f/av0/rch/8caa0/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","line_number":1,"column_number":89992},{"level":"debug","text":"0","filename":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/f/av0/rch/8caa0/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","line_number":1,"column_number":224499},{"level":"error","text":"0","filename":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/f/av0/rch/8caa0/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","line_number":1,"column_number":224499},{"level":"info","text":"0","filename":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/f/av0/rch/8caa0/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","line_number":1,"column_number":224499},{"level":"log","text":"0","filename":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/f/av0/rch/8caa0/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","line_number":1,"column_number":224499},{"level":"warn","text":"0","filename":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/f/av0/rch/8caa0/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","line_number":1,"column_number":224499},{"level":"debug","text":"","filename":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/f/av0/rch/8caa0/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","line_number":1,"column_number":89992}]},"http":[{"url":{"schema":"https","addr":"firelightfinances-xrp.live/cdn-cgi/challenge-platform/h/g/orchestrate/chl_page/v1?ray=a1a3a6c89ac45687","fqdn":"firelightfinances-xrp.live","domain":"firelightfinances-xrp.live","tld":"live"},"ip":{"addr":"172.67.171.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://firelightfinances-xrp.live/","date":"2026-07-12T22:58:14.775Z","timestamp":1783897094775,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"firelightfinances-xrp.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Jul 2026 21:14:44 GMT","end":"Tue, 06 Oct 2026 22:12:15 GMT"},"fingerprint":{"sha1":"2E:9F:70:02:6A:E7:80:F6:FF:2A:A5:44:CE:48:27:1A:E5:2D:4B:99","sha256":"AC:31:41:19:20:D3:59:49:6C:F9:27:DE:2D:15:76:E3:6F:13:50:65:16:97:E4:4D:54:EF:8C:7C:E4:1D:B7:6E"}}},"request":{"raw":"GET /cdn-cgi/challenge-platform/h/g/orchestrate/chl_page/v1?ray=a1a3a6c89ac45687 HTTP/1.1\r\nHost: firelightfinances-xrp.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://firelightfinances-xrp.live/?__cf_chl_rt_tk=spKTiiDSBlko1ZHvOZcrcM0QS3O2PVsRRtxWFqplu4w-1783897094-1.0.1.1-7yfANKPBoX14xJGCADNlUh8yVJIt2.ngarfVCOJrjNo\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: application/javascript; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\ncontent-encoding: zstd\r\ndate: Sun, 12 Jul 2026 22:58:14 GMT\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncf-ray: a1a3a6ca5aca5687-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":225212,"size_decoded":80339,"mime_type":"application/javascript; charset=UTF-8","magic":"ASCII text, with very long lines (27154)","md5":"5ad3abb9e187f65ea1c07603fd1d708f","sha1":"5ab921a05829e2580e717b0bc3f11f18ef06f7f1","sha256":"c22b8cb2c720e265cc951bd440c2ef0e3fc20c00b34d3457f7d1237e924c4517","sha512":"e377c55a3f7f97f7970f325060046e7d1bc79ac979c602fd6ab31fb10965105585a1afc63444b5b5645d116cde3992235567abc30dda7ea238c24d35d57ef6e4","ssdeep":"6144:9/H3vI2yIMZ1kn13j+GwOUJNCAA7HnIWjn1OwfYjKajAqFt7iRzV0zWHXB9rITE:nMZ1kn13j+GZUpA7HIWjn1OwfYjKasqc","tlshash":"7e24f9cf3dc7f44a230ae37900db39db9a594ca474f43948e0a191f42a753a8977be58","first_seen":"2026-07-12T22:58:44.43939Z","last_seen":"2026-07-12T22:58:44.43939Z","times_seen":1,"resource_available":true,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"firelightfinances-xrp.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"firelightfinances-xrp.live/cdn-cgi/challenge-platform/h/g/fo/2724934520:1783893918:aktvZQLeIVVEXn1BYucCdaHmDYmw-I6TIQrv_C6rg2U/a1a3a6c89ac45687/QGfqx4fau9gNryTLmcpzV4WEuAF6RLeel228E9lUYLw-1783897094-1.2.1.1-U5VYXKBP9NxdM2SZPSSyCtbYu8R_9f47R3a1YTwiGW.wRZXANlOkaSAr46RDFYfI","fqdn":"firelightfinances-xrp.live","domain":"firelightfinances-xrp.live","tld":"live"},"ip":{"addr":"172.67.171.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://firelightfinances-xrp.live/","date":"2026-07-12T22:58:15.098Z","timestamp":1783897095098,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"firelightfinances-xrp.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Jul 2026 21:14:44 GMT","end":"Tue, 06 Oct 2026 22:12:15 GMT"},"fingerprint":{"sha1":"2E:9F:70:02:6A:E7:80:F6:FF:2A:A5:44:CE:48:27:1A:E5:2D:4B:99","sha256":"AC:31:41:19:20:D3:59:49:6C:F9:27:DE:2D:15:76:E3:6F:13:50:65:16:97:E4:4D:54:EF:8C:7C:E4:1D:B7:6E"}}},"request":{"raw":"POST /cdn-cgi/challenge-platform/h/g/fo/2724934520:1783893918:aktvZQLeIVVEXn1BYucCdaHmDYmw-I6TIQrv_C6rg2U/a1a3a6c89ac45687/QGfqx4fau9gNryTLmcpzV4WEuAF6RLeel228E9lUYLw-1783897094-1.2.1.1-U5VYXKBP9NxdM2SZPSSyCtbYu8R_9f47R3a1YTwiGW.wRZXANlOkaSAr46RDFYfI HTTP/1.1\r\nHost: firelightfinances-xrp.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://firelightfinances-xrp.live/\r\ncf-chl: QGfqx4fau9gNryTLmcpzV4WEuAF6RLeel228E9lUYLw-1783897094-1.2.1.1-U5VYXKBP9NxdM2SZPSSyCtbYu8R_9f47R3a1YTwiGW.wRZXANlOkaSAr46RDFYfI\r\ncf-chl-ra: 0\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 2092\r\nOrigin: https://firelightfinances-xrp.live\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":2092,"data":"EH+wDlVD6$bxsj$NxtEJIPFOxDXnPivJC0djTbOJ470amLsHtGqfShdNyAAmrzm+Kc$ZXKf3fgfSaOYqZ0hRHNHIHXTCe9RT6qsgP7NFqFzg7D9NADMTmnXS71PQsKCoKZP71cqha5aYl73nvi7BZtP5TiCl1ozA-AtjbzPJ0wRW-jb$T8Y3RkpT-FFvisdZvw2zIjZNj8UMYIFxVgICA7ZnvO1$vrHqjivafVg-9QDKz29NmhWAdRPSq$njvjwc7MAd7tnUj-0SDYXeD2LOoCCcYPBCqx81cgWwg$i$OXt0NPDLP4KapOrMs0O300kPggvnp+bwX2OUgXKidKhBI2RmR9MsqDXrDnPrTjMSWE38AY4nNVZEtfMofqzmwJt0jv+IYlfXgn6is7wdTGBjtjovN4REd0l-aiwGr9vQmFjPAyVhf$0j4T+lHRhYC-z2ni7peLs5JIZe4Z5Qst-h0SrmzqCCH1kj9x5Y6idYm-H6bJiT31qOWjUGADGFlYl7KeHqFePxAww+wQmyxj3azWo9FIJZ9jIKj$cdD38ccMKRvYHC+0j5MjrE90DKOjpZC-OfwrvCCiEhgUjqRQsQg5cdDbzC08JthoTMeH248U3hjFs+q$Ep+9GoVVOYgc-4Y$4H7bWrngF9-yCyY86bCQwC2hncbs3MZZtBMWxdy8xWjbKNwUWizFqkvspoiDNHcl76hbGeMxLfq8m803Y4Wiv+IVAIsGrXthLcLAVHxGP-Loq9XXMVjARTIEpJRWWBSrGHCXDroS6rZxcOP1Wj3KcUp6+X-UgQlvGafZSUKk+1iAsT$kU8wPQN1wkbq+q6e5OTXz2Zp3b$S2MLTwjY81Fmka69o3HPj+-RPfLAjy$jNT5ASccq9+-LW55N2nB9WVqKDzJvILsc9i+9A9btsAzl-oocJU67PtrpIfl8rWWsrl3iiO9siKx0Q5$O518i0AQZV3vrcbaC3Nh7q7ovn2AGjrbALhPl79-LogmNEE9qMVWxsIm48kqZwY$+bUljAjlwexTIZVBiYjpAwbAQbQ-Zppc6CakfrdNsGPSGPr1jMYTBPRfKco9MkoDgmM7w+pqGUrF9F$hT1hsc3ctSF-RkA0iSL0VBSGoPHHbgdlKY54iZq4lt22cqfsWAMt3x4SQCPahdvZeBNHYzy0jnE58NVdMd-vrKNtfnILsSeXzEMrPFvL6CIG217HCb+nUO5oSRmH3TYokbMR9oGtpi+vkoOwPbolylZO+LjB64l5N3aReDSeW3EN7nVzo1jS+2jFf$ibAU3xD-VJgseM2GZ89eitPpAL$SaCkoBr8-7owkYtqBb$l4UBpgFX6exCTL$0MUTbnXs8UpDvMdbF+TGFeoFdU2dKFNT6hmgqa1UeLz8lvXY-8qN07ETAIOLmmUtqEhKXRr0QhK9xjRnpCg9pxYgXTExwXUYXoR09nS9tbbeyYpA-DwvVQA6jwfV2OLJnz+1LqyI2MkvJo6IA0+1ZK2pEe3tT8nIlRD4GLzIsOK4Da+N2O6xEqN-pa+Dh41HBorDkvrVKXVI6nXSJ6WZH9mckVYVM2xKfADjOWPpL1Q2z$rthqMFJO445gTWxk13kJy6V4TThEcofod1dFFi8ECIJ-FPSXaTxRSwsLkjJN33tiKD5fr1B+-3yZ3$AMEJjq1rUiUUUA8+QyiOCqJyIkcnKZktTdM0ra3s+9EbSgtAW0BxZy4O4wIMr9cKjNztL5nQHeTasEJNwI5yd-zzg5hgxjbpLwpiYXXw3smDBJPUAnpivPd6jdaDq2SNw2MgSIUEqXh1zpCxwTFqD+kF7028Cj6EbJygsk7NdCIQcI1K8n8G6C-82TRainB5oGaTF-by437hT1L309UVeSrA0X1QO0DcOT8i04U5nG1AWM0vDGW5OnQbA69aYBiowyKBSA29SWpnpCzBjQv7Jc81qdrSPei7CF4Vlw+DAgqlXa$miLC4ypvHwQaIZnUJ0+RrL3p+8iSKU4vmD4cJaUwQSGv1$ZQ$kByW1n8a3tdlBECD84TVprfvw9xMOrVHY20ExEDx29hZecJdN0XcZNTzz0x8ZK3IXtqlV9Mdxs-m$Ia"}},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/plain; charset=UTF-8\r\ncf-chl-gen: aT2Se3MjNI+Lywjk8JKqiiEjZiPfWl7oYxwhP5+GICE=$T6ne+0u/2xf18N2iBL+9Hw==\r\ntiming-allow-origin: https://firelightfinances-xrp.live\r\ncontent-encoding: zstd\r\ndate: Sun, 12 Jul 2026 22:58:15 GMT\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncf-ray: a1a3a6cc5ad35687-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":101232,"size_decoded":27960,"mime_type":"text/plain; charset=UTF-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"247c9aa1540a4ba7717ebe1d464092d2","sha1":"bd499371ecafe92150037896213eefa7c9b98487","sha256":"24e193a48e845358373e8b920c0b3c8a692338a61801ddb8c483db0468bebc97","sha512":"82b5f3551dbfba41a8c32c6a30a6533359e9f6a1fc8392323f92dbe85909d49bdc7f30da387eacc757b2ebfb0c2040c5a2068b9407be10bb0341aadee31667ae","ssdeep":"3072:KLVmTuD5ltBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBWp:OVm61Sp","tlshash":"b6a36ee18ff9b06194e568cd35cb3240155a128bfadb9026363a8641f63e9bf47dc7c2","first_seen":"2026-07-12T22:58:44.44053Z","last_seen":"2026-07-12T22:58:44.44053Z","times_seen":1,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"firelightfinances-xrp.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"firelightfinances-xrp.live/","fqdn":"firelightfinances-xrp.live","domain":"firelightfinances-xrp.live","tld":"live"},"ip":{"addr":"172.67.171.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-07-12T22:58:21.229Z","timestamp":1783897101229,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"firelightfinances-xrp.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Jul 2026 21:14:44 GMT","end":"Tue, 06 Oct 2026 22:12:15 GMT"},"fingerprint":{"sha1":"2E:9F:70:02:6A:E7:80:F6:FF:2A:A5:44:CE:48:27:1A:E5:2D:4B:99","sha256":"AC:31:41:19:20:D3:59:49:6C:F9:27:DE:2D:15:76:E3:6F:13:50:65:16:97:E4:4D:54:EF:8C:7C:E4:1D:B7:6E"}}},"request":{"raw":"POST / HTTP/1.1\r\nHost: firelightfinances-xrp.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://firelightfinances-xrp.live/?__cf_chl_tk=spKTiiDSBlko1ZHvOZcrcM0QS3O2PVsRRtxWFqplu4w-1783897094-1.0.1.1-7yfANKPBoX14xJGCADNlUh8yVJIt2.ngarfVCOJrjNo\r\nContent-Type: application/x-www-form-urlencoded\r\nContent-Length: 2136\r\nOrigin: https://firelightfinances-xrp.live\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: cf_clearance=NCz.3X.CknjFBVl1L4HruLq8uER.hXn_dxcSzWYWdbU-1783897101-1.2.1.1-VAMZkSZHOpMd1lbxTMDuQx2IOSxk9kgMM3uj6cNa4K71Jqk3aDLRRdGeiFd_lWmAqOYiVaOs94qvU6v1TN_NUpzvQIiYvgTMd3IvWy1PB8uC_xe.2U1tCwvTux7CMkNXOv4HTJ_fTOhV6HMVOPqM5Zxd8N.VCqOBn3masdhgcXlv4rmcyP64T0gXCCkCjU1CVfBvvUuxdrQc7UbpRj5nWgaxUCeQ3PB_ey4faOzXmGVmTIzqT4g6c2MGHp4.i2IDpAUdRn.abc7roIS_q7w9ThQ8rJSaC2N_MF_9fkUXyEhjg0YbaIypYM3pTKHxdHRWEJZV5GiBjNdFOhVj3kFTSpoGemfH6x7RM9jhszACbTcJxu6G7D4yJ33RtGqFvXxiDrk9hioStDkhmKVGyeQCFuxybHX58H3KHVcPl2Pj1JjgcNsOkzgK6QiYP6BIyE66XKRE_kcewbF0dRJy__KHVgN8NsiEaTS6WuXf_7_g.Yn4xxhACo12Cp1MtH2EQxS2\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nSec-Fetch-User: ?1\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":2136,"data":"50d453b6fc55dd7f98c5a251c9aa25f0de3d107bebd00590e59334a14f9aee24=P_ov6Cr0k06GEeqIiDoVQV0l7JEJ7ka6if69_o49kec-1783897094-1.2.1.1-..MM1LZ8TH12zoZiR7ufI99m_1QY_U5hMbNTl6.TXeaYwoOkYTj1llZ2uYUiOLTj_1lChEKLkow1MTb5WaE6UGWEuLzxvArawK.eUexy1tFOzfiwgk_rkhH_D8Nz856f1zyCE.7sQgJMTkTz32MZLkxcb37_a8Pn1jYVev2VynWWxhiBTh14verIrrfAuhHwK8XGNZY0t9NTShTkT0.vZm_EbOIe1gRH42UPzofHbMMiUQhEcTeNaOCTHc9OqMTw_f1eUDU6.loomGvNiR9acgDeVuyFG4WuxrSgw4oQ7RsfDtlx1bpwjYTPfnBAxN1HtTD3a70y8W7_j1rzxTfeiVOHDg9F6FDAkuOBPCPMjxrN_i0MVjfkAvyKPXHyQcU_9CwvNr0ce7_yym4MxzmXyePdAAOCzYdxcwPpb5Ty4T9vwof7XGuCbGlO3n53k8XyzaTEYytLCGoyckArP8xhrefYpa3WJPebn62gPs2fy3kiaCubThCBLkmszHeVPb3r_sL_xgD22wiqQuz0zHZQ.pzUMt4QYuq1CrP.6Vp_b.PAGHqjnUC4wdhRT5P0GbmnDf3jJ4VShD35NKi9bL3gjNFuFpcaUYMyF9b.ZhUnmiCu9DfH1Zv3gpLwTxlVF.syxkd9FgrnC7b2OG_hN7NvE.Lkp3BfOk22OO_LkQqL1nfyqvyXirSNi8n9ICp3IUchS4kP6a8z1enhfrnTFRj_SCqHWgRJ2bBIO12Zmsir8Cf.lnzztx79VC8EQCcO5K8sKu0dkqNpwEAMkFfwsBKfgHjP68hT_cmtromEVFYblUiwLSOAryUvXl..uX70Ss5.9JJVbhBrzw4btF9JK9WPdBfwqa_GPPUQ2ts.y92BBnS.oa0hPm.lYRpJYrLiiwAUs6eCJCPgQXPsrHmTrzy9enSsz76kOYZFYN80yq6THdkI7MFg9nA3BNwP9ctMlG6usZ2Kpns9OCVp14Ka2s4TkqAXDDhhh_K87WJbUKuj4G_dhNFDX51rrwvIA_d4DtYxQfdqG3V2OxlmUOm4BCQCZA\u0026d661b9b3aa08fd691d0d3c4aa133f93aff9b5ad6adf0f2cdbdcdb6360edc3f8a=gGiKpFxTkxGFx9bT7bvobOCuY9PBvP7bJnsuI505gDM-1783897094-1.2.1.1-4Fhguv7zSleG4SWQfNg6BSbiIuuxKFgUScjfkc20PTIXxXrQj63mD3i1dm0h6PxyqQ3SN7bXR_knCwfq.yzbHfVkbHpInqAfFIjPHWCgiT1TWH1q6esiQX.sJ20yynPU7c0PQAfNKN6s78p6PiG9roofg35KGTLYkRNgOQZru1lJXCv.AewKQmnzOiljzy5vakkTp4qlSADeU93MJxMxNuAh5tgRZUbJY8hzmCbvzFnWO8d.zlxwIW6u.lu7wkTKtg325YprQdV.NHbGuCg9cZfNF4uU4zkSP0VGTD7A1Jg5j8qJuHU3HHZ6F87QvqnUoopK7mQEVU8xKGOHLF4graxP51UizMyx6jPa97JBQOoLGM5jbYNHS_rOTwIuGuMTTtBWa04QZx7zO8dScl3wjgEPmq3Kn5Z1bhag5TmYIklCMsqEqPxTWOrxEbrYWMrCHNv2bCLxFiawPcf9EW8GoDAk3TY91qSC5omLxSW_0yTgZNrSSKpH5XGYnG7KnHLv\u00268d2b536d5514524889470192b1e212fbb4c8169891a2fcf51b1829773a0580bb=ThdyAm2PmnoFIe2RqcSyZDo1U_PiEgvZkyve7tv8VHk-1783897101-1.0.1.1-8cszNtQzh7gzdZxLAB.N.XmyZerpKbSUqvln56TLUaSnZzy3KtFt4.RONXZHdDDrXJQ1iRuc0z9_Jzao1GjXl7.76f9PfMh4dpp3qRKZ2i9GUcuW4nPuktb_BcM6bvjUJux5S6sKtGqjKq3BgvgCiSS7BPRT7jAAEGfe51WxezRedqTA5SP9.hrm1OFx3BMo"}},"response":{"raw":"HTTP/3 200 \r\npriority: u=0,i\r\ncontent-type: text/html; charset=utf-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Thu, 09 Jul 2026 08:53:54 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\ndate: Sun, 12 Jul 2026 22:58:21 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Q3hZEJfFqg5hw0iBTLB3xu3E35uLxCVgWWtmy77D1SrYb788ZDfGBgepEEmACbS%2BXTyrelaHP%2B2rpDnOIxR%2BmhaAyYGnVPyU4gstehNKeQ17KmwSOAARaO43GTPAb1umI7qipHTt6nzjbyrbxg%3D%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: zstd\r\ncf-ray: a1a3a6f2bcc85687-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1419,"size_decoded":1427,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"84a00309e78b5cdbe20dc4c35bc482f4","sha1":"109d5466e56f1c772893b9b31b55c25c79761f0d","sha256":"467afc006b61a3504e4981c68d01fd45cac2a310b862a7c42e625188b31f65d6","sha512":"860c8755a9e0f737fd0c8c24d0cda41c694b683e299ee123d6b5966dce6741ac6fd2d2a6314aa4e2c622243f46f54ccd09090e4a29b70bca78062e68e0c5a366","ssdeep":"","tlshash":"d5215393d5e000ab039292d365d7bb15bdc2ca0fc54d080076ed61944ffef86e96b98b","first_seen":"2026-07-10T10:05:05.436754Z","last_seen":"2026-07-13T01:35:20.215352Z","times_seen":47,"resource_available":true,"data":null}},"time_used":81,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":81,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"firelightfinances-xrp.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"firelightfinances-xrp.live/favicon.ico","fqdn":"firelightfinances-xrp.live","domain":"firelightfinances-xrp.live","tld":"live"},"ip":{"addr":"172.67.171.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://firelightfinances-xrp.live/","date":"2026-07-12T22:58:15.099Z","timestamp":1783897095099,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"firelightfinances-xrp.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Jul 2026 21:14:44 GMT","end":"Tue, 06 Oct 2026 22:12:15 GMT"},"fingerprint":{"sha1":"2E:9F:70:02:6A:E7:80:F6:FF:2A:A5:44:CE:48:27:1A:E5:2D:4B:99","sha256":"AC:31:41:19:20:D3:59:49:6C:F9:27:DE:2D:15:76:E3:6F:13:50:65:16:97:E4:4D:54:EF:8C:7C:E4:1D:B7:6E"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: firelightfinances-xrp.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://firelightfinances-xrp.live/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-encoding: gzip\r\ncontent-type: image/vnd.microsoft.icon\r\netag: \"djtwwn83ap843b2\"\r\nlast-modified: Thu, 09 Jul 2026 08:53:52 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\ndate: Sun, 12 Jul 2026 22:58:15 GMT\r\nserver-timing: cfExtPri\r\nage: 0\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=L8fLoUCsHTeNultlzfGJSZXqtRj5SvfkkbzE7o8Wr8fvPj3jMqVgz51UJvS7cAArJdSv5KQmKJkqilHvpeeDVvpzrEr66srHmat8VaVo3ifeqaMC3dUdtHxuUglFDUqaldGLYjg78kiunAvYKg%3D%3D\"}]}\r\ncf-ray: a1a3a6cc6ad45687-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1226\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4286,"size_decoded":1997,"mime_type":"image/vnd.microsoft.icon","magic":"MS Windows icon resource - 1 icon, 32x32, 32 bits/pixel","md5":"cc062a83151176811ed966d3add0c884","sha1":"6bd0ce89e5510efe1c1642a74f8570b46a2184b5","sha256":"4f73521bd5f74ede627f2a1e1f212b052621c4a7c51b13086c6e7cd56c792c30","sha512":"af6431bb105ebb16d799daa124b9151e267862ed560499c0529ee2afeacdf6874984b56bbffd5a4cdd5867c73963d30146a572997bb75da9a7ab6d62a575feb9","ssdeep":"24:su5LgTFD/4PAZpFHvB7BSivLxM1tjvd4QLHdFP+otq/lWnAVrhHjL/Wb6HN7og+m:23FSHLd4cdalcBp5+1E8EURV","tlshash":"5591da766f23fb2fedc1317010ca72b12c2640456b7a6a1908d529563341ef7bf8ce91","first_seen":"2026-07-10T10:02:52.697571Z","last_seen":"2026-07-13T01:35:20.212032Z","times_seen":62,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"firelightfinances-xrp.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/fo/3148164810:1783893920:N-A-Q-JQ5ahgRZR5JNZbsTj7fyyCe_5a8WS0NDSso-U/a1a3a6ccefc52efa/hPqK8FNRgUCahnYDQVl1c8X618KyCIksCCORz9VB6NU-1783897095-1.2.1.1-dqm7bHH9nbJ4L7LjDs96SNfqNTjQaqPu8xWg8q88K.I4PMBRnTtBOl93ihV6UU0a","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/f/av0/rch/8caa0/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","date":"2026-07-12T22:58:15.543Z","timestamp":1783897095543,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"challenges.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 16 Jun 2026 20:15:28 GMT","end":"Mon, 14 Sep 2026 21:15:13 GMT"},"fingerprint":{"sha1":"77:27:72:42:CF:51:E8:8C:7C:3E:8C:4C:A1:F0:9A:86:96:B9:0A:16","sha256":"ED:7C:F7:38:B3:0F:00:86:32:D1:14:CE:C0:FF:CA:0E:7C:86:EE:49:51:EF:A4:4B:AA:5C:B6:7C:00:B5:3D:F3"}}},"request":{"raw":"POST /cdn-cgi/challenge-platform/h/g/fo/3148164810:1783893920:N-A-Q-JQ5ahgRZR5JNZbsTj7fyyCe_5a8WS0NDSso-U/a1a3a6ccefc52efa/hPqK8FNRgUCahnYDQVl1c8X618KyCIksCCORz9VB6NU-1783897095-1.2.1.1-dqm7bHH9nbJ4L7LjDs96SNfqNTjQaqPu8xWg8q88K.I4PMBRnTtBOl93ihV6UU0a HTTP/1.1\r\nHost: challenges.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/f/av0/rch/8caa0/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto\r\ncf-chl: hPqK8FNRgUCahnYDQVl1c8X618KyCIksCCORz9VB6NU-1783897095-1.2.1.1-dqm7bHH9nbJ4L7LjDs96SNfqNTjQaqPu8xWg8q88K.I4PMBRnTtBOl93ihV6UU0a\r\ncf-chl-ra: 0\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 4322\r\nOrigin: https://challenges.cloudflare.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":4322,"data":"hA24VhkJEPx-IX83g7TXK5G+y4+Zy1aSAx1AfDs63V04MQUJ0xGfFyJBKdU4KhsxMtmsEg84iWlWIt81OGNRAUFnZXjydT$IAY$3N8V+hJf+n6ctHx35QUSf44-iu$+mYqChxSAifuXGYxQfQWAyJNNowov4Bkht4z5wrOus-naHNTkTD8sAY1quJDWeHnzF6z7L$Auk5Q8QK$QIKfxwsTejXv9gSyJqT9Os9DEznETpl2asYK+LfQJMzE8odVcRh4VluZ25+s3Gjce+ajZeDC1+$1id19aL$OTj9OZ4BlUVH9kZSYSxoYyq3PChSVHQE-6YQmts+ofcXRvzcdoizXYsCnZkdR01ZCHAU1D-qhDmHl$L8ZoSMaR0J0twp4D558nVEhlh0rjniMcqzY4h1yPaSgPsf8tSL6fIqV5Kee1X31z+QMTFtIYG0q5VDMAmtIeFECwY6d4gUyNQtPvi53kWgqmctGsrWRn51Tvl4tucfX2BmeONwMRgzzjL5y3Hr7T-4qt-g-$kz8M-WYpdq10jPdcBQzDBAh-C$sMCTaCGAxaPINu3ASZCcB06WInEt7LzRKLx3kufBg0nO9e4eBUHXhofavpG2V3tDoSdM8-2TqQR76GR01NrxBkoPQ$imMBG+cZWOUG+2M5w5+$YcppSTGdJZuVgUvBoWSj1IsNwrjpkjwDEsCUlGt-S-1axlG4LLk$5VQRT4YcG0kEOxOcWTu8-WR+xolhTiLj61IGecZ7zxYtWpqVKBP++AVxfJcqzMV102yjki-4eccndxker6GyK+rRCCvEHRPWYnfrtcxilr2ItepUQuUwdlEDx7ZtXL4pmn3adHImPHiF11HKXr$zLr8+MkANdreNT6ZF9MkNQQz71SRILfJS73f4GODYoYZvsiKP-CXKMt5NBDuK9rrUoQiRptO-pLkg+VaM$tH63$fwmYu$osRPvg3Pq0CIe2uRcEPurp+piiXzeoCgvJo4oWW3zZX4qYdU5GSdP8BhR$mqHMUH5NYhf2slhi96r$-ja2fBf-TEGJIcTEQ3+WA6hj0ZCKhKdIlVG2DELvk7HdxIrYWTD4xqKGL$xkIklp1RJQ$JdeppNdzYOBZ0iggq+O4kpstUCHP8t5TWGmVIGQf5cyxus$gmnvTv+urLev1uUxVnKFrHGfuVpwhqPndMwag292VOUerAOC3z+GxvSr5$26Gsx$EkCrA8ch5jAydilWUfY2KOocRdcAtu13let3OMRDn56UVPrh82sUAzGNU91CRysgnPjvGTJ3UFxjW4AyH7$-lkExpKZcEDB2QjTkOcoowvWcvlWrqMN$Rq1i3FTFc-66Mn+SP8v+pyOYCRsmuTdMHeQTXfqtVCj65qungGpk+3R8WnFBQ8+vk9NDRINqdvc9Y6c+FKcZQky5lNRVCfKXev8QlI7dGDBZOaw3FpgNckGKK7ouwRyUuwLLzkL7ZFKOGkLUaP651dCBtRZzIYGr38oPs6j2nr$WzlEWAtVgDkEWMpaa22+9kqfDPgdyh$f0IsUwl9CaZ-tQu71fqJD$7uADRrEDf4M-xUEzG7EpgsyqttZUnw7pI3qlmN1rVmmiEyf+VYKnUym2haUwFMlpv5jsqB+kKeyAHUPL1np2iwzeUr$UaTt7R2Lm1ow8fSFUhjqM7vVxXqdTpPsy8ercHYGIeQgHZu6gXraJ0FC-2aDmHdNXzxpeIGiG77afXi3Mj22MgJkiMRSPSBlIX4XBSEq+olQnFBRER2-H-ZkP+gQhDmsvciLG5Qc3QEzfIofh2GR5-zSEtBf4jDllQxGAjYG99f0IisPj-SfHGvf8S6HQomP3E5OaY8cKPzd+C2lS-O8iv-eVvIS5Wre-m8L7gNe5jt+5+0Jzj+d5JHMGW1nMdxG+WzNsP1owGpvawuMzirz8imV4kLChcCO62-EoPXDz$vxFKRp12a+4KEcOKa3ASTfYHqDelevmW0iM0f8+JFVmj5nJQQ3LQUjv17pOO8F8PC4u2JE60GGcuyq0ECZ3BGTn8JjqJwnvp48afpIHmm$lXDsVJpX08GWL-5y1Ty70myCF-vWUEt3Ic70+PDUB1zoKHaW$$xqC9ep8ENw$GItq3agcppVMsDMzc5QodcmQ8IN6ZdKLGo2HYPAETEmwS+eYtcldsB-UPk3jtlfyvJTNrYOm28-EJYAoSk5VTwt0zXiYnZeRY+1RCgOwivCnGjh5eCmI$zjHnVLaKBWUSVfH84l$LBD2Bt9DREon7yO3zzuRtFmfjiOZkZvjFLHsMXrtpnQRLo4Ouq-G7AmleRP+YWXu00QD+2NYhl2kgmSn4sHGn$2hfIzOYwRWCVZHCIor9VncT101$W4p9$Fp7Vq2ZKgpDSS8Q-SSoLM$S4deRNtINzowMLWx4rzGPs0MDRsXJUsRC$4OsepjVD3Vu1YxkL0FrlZsslAHefEe$NOMjFfPmwUTLvdHFF67-ncfOPqYp1CTe8E-zV08$xYHXI$ttngN7la-SjC8t3jLRTwBaXAuQEwPXPLEQMsqSQoxBXw0-gCgHl7tq-3TxZetuiF4oLFfHYAIU-GveoDJyTDHMQIXSohGHvTNY03GUTRg45xhvhC6zIfNc8QCA+BY+KaZeYOFzFuZ4RgRGdLnAaacJsTeWvVLrUz1otnVyKCuc4n9WTR+K0etnVyAx4NR8NBvGeYhqW8a3odXGOCLzDOsu+P9erF4naWHfrBEnSRmTq24gl3jdv7kWoxJ$1l5pA83rVRJhF2eXvwUyEBtMf7Ep7tZodA5wLCCZlH4e+F7iFR2Olr9BZ6-6z36Mu3j2Agu6pw$szFiQiTa0YjWvzv-UkXHtqdys5R6I8gOFFBzHPkcMGk+MeovErlEK9Ql7FggcVhnoD7nijgJS6y$ddpL8fAUYT-AKMdmt0IuBYFumazHk6ZLuFBjkN0tSKFkp7Vxz0vxR-d6U3EAeXPYQXfPxVYuXKMGs3t0HDs6d36orNXudran8VlPH2ZmahnRO06zSe28kzLkjI4YDvMgxzgs+QiX-T$n99Jf5nSNPg3HtCJkD69$Ct9hRxr2MOHe-l0zhB7Z$kuvNkDXVg1klrRFITgnmjxPFAkWlFIF2AEcJ-x4DhwY1T7uYkKOMlIQB6WkiHeJGaV2-NuIPLE2tH0U6vIDJ3LIigx8khcgBsS2RA2ww0SCmqGVAXSCCyZ3nlnrTtHUXPQhNp6gMoBkIGpZIr0GEioYZVEKEXx0UYRn2qlByYLluw8rpNqhc-fl1F4zL4agF-vOwWIsgFnzChQYUmGOTLuSE9$W4dWE9C6MPsp$Gt1DjEURHMValvC$jI9ahGg6vo9dyo9+lFl7Ju3zpHYXQKeDdgMP2hwiccjeDxdEVBpoOStBR963OPu8993pwFRDqe52KrjtaLmZ+nK$jANDuaX44mnPsFHDJxrKsvdMcTVSMtXXQp-N65vDhKJwINDoNRc+nlsjlHv$BeQ-0GB6rhGyqA1Otzukk73QzjnSTP5FpAWZew6-cm4qWXzn5v1tINdWT1EDFeUryiDL82Q3lI58wcspql-6f3$Rc-0h26t9lsrDsDc8maR2KFCAekTTeYuFxUgZ4LiJwLSv19J1iHsjHpEf5tqHux7IHKsv5LQOqn1Oxrfyo3X4yUGLhXnAscvBlwXGG8FSlpSO69Na76T51RIdfQ++KRgpYzO9jezScpuzuh-vM2qXMsBtgqU89VIqYUhTz9vZf1HJALdnCOHKn3xPGz$cKILCRR3NJlwzge9G$-GyoeQhGnpUGUla+YrTcHXILzg0GTBPs8GTyZlLi3nfpmgT$rQ49-dA9F+sM1xl0QOkjIhYXWr-gwJjz5XZJha+3oxBVEj+Q1lI4x7QhaCRcRJwpo-TUF0gJqWmzhXPBH+QnpFY1SSKKT$fT9C70HGe89QBEJlesauUECZjf1VJCSpLtSqFdt2fXfU64YrTHkpR0qCmAwSmrKqOL4nYl0OZ2e3MnJXhyWSGdPO-Hnr$z4YXicXnKHOq1Qr21xDyO5FHq9ngV8ITTgHY-g-Dd23Z15ZC9Zl95vAycogQO1MxC6iWoavmJeUx5Ql0EZyaY2iIqAPIA2FXFQz3TPvxkJLhe-2Outy4pNTRwILj+QRAcQF0lB2HYD6TOnJBQhDtprCgXYPQAsgaeDuErqQ2LYQZaWftjjvkyxVXQ5rGjEFPIlIJSjzX-m-G+9YEDoROLm1aVycZgvEE8LNM3gNitP8hMN5SUIKocuGUv4IWmizfx5-K6O17giaiv9pctFe+hSqTPCypv+tdgdvZU86gVCZUKiBO-y+2qDKsQ-iHSQoSuiflt"}},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 12 Jul 2026 22:58:15 GMT\r\ncontent-type: text/plain; charset=UTF-8\r\ncf-chl-gen: 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$WRgPDQlDQSFltQ0h5D8f1g==\r\ntiming-allow-origin: https://challenges.cloudflare.com\r\npriority: u=3,i=?0\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: a1a3a6cf2ba92efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":489600,"size_decoded":322295,"mime_type":"text/plain; charset=UTF-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"d078b9dd8df414bbc7a1c53513b1a5a4","sha1":"bb8128f10d1425d91c8cee1cabb6109395a2e66a","sha256":"f91c0bc021d52ba04e4a089b9bf9ec41f4b71ecce362dc5c28753fbc30b03cbb","sha512":"77ae0f63d41bb98a6dfa0380a3c175b24625d2783d2a11ca06289b3418b23f4ea9855892f98d3f5261d73d3f74985c2b6429de1590b854299ef2bf4ae5b7cdbb","ssdeep":"12288:qupptFyirVZ+jTFfUp6Xq5WCU9rlSmQBNS:pHy0QmMXLjTQq","tlshash":"dda4029f7a5b130ac185b03d37ba843d591a47e0742642a6a4666f4fcb04ff476e883f","first_seen":"2026-07-12T22:58:44.443206Z","last_seen":"2026-07-12T22:58:44.443206Z","times_seen":1,"resource_available":false,"data":null}},"time_used":153,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":147,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"firelightfinances-xrp.live/","fqdn":"firelightfinances-xrp.live","domain":"firelightfinances-xrp.live","tld":"live"},"ip":{"addr":"172.67.171.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-07-12T22:58:14.400Z","timestamp":1783897094400,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"firelightfinances-xrp.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Jul 2026 21:14:44 GMT","end":"Tue, 06 Oct 2026 22:12:15 GMT"},"fingerprint":{"sha1":"2E:9F:70:02:6A:E7:80:F6:FF:2A:A5:44:CE:48:27:1A:E5:2D:4B:99","sha256":"AC:31:41:19:20:D3:59:49:6C:F9:27:DE:2D:15:76:E3:6F:13:50:65:16:97:E4:4D:54:EF:8C:7C:E4:1D:B7:6E"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: firelightfinances-xrp.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 403 \r\naccept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA\r\ncf-mitigated: challenge\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-security-policy: default-src 'none'; script-src 'nonce-QoHE5MfTL7NJlxM5wgb7hC' 'unsafe-eval' https://challenges.cloudflare.com; script-src-attr 'none'; style-src 'unsafe-inline'; img-src 'self' https://challenges.cloudflare.com; connect-src 'self' https://challenges.cloudflare.com; frame-src 'self' https://challenges.cloudflare.com blob:; child-src 'self' https://challenges.cloudflare.com blob:; worker-src blob:; form-action http: https:; base-uri 'self'\r\nserver: cloudflare\r\ncritical-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA\r\ncross-origin-embedder-policy: require-corp\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: same-origin\r\norigin-agent-cluster: ?1\r\npermissions-policy: accelerometer=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=(),xr-spatial-tracking=*\r\nreferrer-policy: same-origin\r\nserver-timing: chlray;desc=\"a1a3a6c89ac45687\", cfExtPri\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hKL33g6GSBF3swRY75mzVjJzUQKWy9qLNWIuuG7oLL3Gkf1X4tO92HOhGyVLitQhiK2SVDiR1aYL3IlTmwFQol8gd%2BpkJQ5dN4GubZZZwamV5NQRg7e6H3qWWQRyGABJGxsdIfhUrT%2BqJZvuLQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Sun, 12 Jul 2026 22:58:14 GMT\r\npriority: u=0,i\r\ncontent-encoding: zstd\r\ncf-ray: a1a3a6c89ac45687-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5630,"size_decoded":5602,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (5630), with no line terminators","md5":"25d8333a7893dc2d360b6e78773ea5c3","sha1":"31fbd9be8491234921a49bcc07644cab5f338297","sha256":"755e406bf4debba0e8257956bad09651e48e8bb123e92765896dd9cb520fcdea","sha512":"6ec7bb78ddca3d9b4e83acfcf9043de5bfb1d2dcd4ec36f319a10803c6cf40d6b40c9fb8cd447d26e9f29db17dc403813d6a6ce54b2995a9325041991d23b5f0","ssdeep":"96:PNyKtoXZzIEb0EaW87gRRCZEkoasaoJapGJxrVwmh41o5N4ydQVBmYzueh8uajmw:PNHtkCBW0Eko9hJO+Vwmio5TYBLyYPw","tlshash":"94c139a3ee36902683b6af9a14f7726943107545bb0495cd82e3d6ac88ddf4f800a4e4","first_seen":"2026-07-12T22:58:44.444172Z","last_seen":"2026-07-12T22:58:44.444172Z","times_seen":1,"resource_available":true,"data":null}},"time_used":101,"timings":{"blocked":-1,"dns":73,"connect":16,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"firelightfinances-xrp.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"firelightfinances-xrp.live/favicon.ico","fqdn":"firelightfinances-xrp.live","domain":"firelightfinances-xrp.live","tld":"live"},"ip":{"addr":"172.67.171.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://firelightfinances-xrp.live/","date":"2026-07-12T22:58:14.803Z","timestamp":1783897094803,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"firelightfinances-xrp.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Jul 2026 21:14:44 GMT","end":"Tue, 06 Oct 2026 22:12:15 GMT"},"fingerprint":{"sha1":"2E:9F:70:02:6A:E7:80:F6:FF:2A:A5:44:CE:48:27:1A:E5:2D:4B:99","sha256":"AC:31:41:19:20:D3:59:49:6C:F9:27:DE:2D:15:76:E3:6F:13:50:65:16:97:E4:4D:54:EF:8C:7C:E4:1D:B7:6E"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: firelightfinances-xrp.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://firelightfinances-xrp.live/?__cf_chl_rt_tk=spKTiiDSBlko1ZHvOZcrcM0QS3O2PVsRRtxWFqplu4w-1783897094-1.0.1.1-7yfANKPBoX14xJGCADNlUh8yVJIt2.ngarfVCOJrjNo\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-encoding: gzip\r\ncontent-type: image/vnd.microsoft.icon\r\netag: \"djtwwn83ap843b2\"\r\nlast-modified: Thu, 09 Jul 2026 08:53:52 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\ndate: Sun, 12 Jul 2026 22:58:14 GMT\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zSu%2Fk9XZqGMkVNFxfkEziL2hvEd5LS5M6fPQz8On1azRzE20LOX6wKo4Pxyskw7zjQB9%2BzVsBH24C6jagABanXix6NCklALIrOPADHVe%2Bg%2BZcpjpJRXtu0gyRoftg7PfIxwSzthqYBuPKEhQyg%3D%3D\"}]}\r\ncf-ray: a1a3a6ca8acc5687-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1226\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4286,"size_decoded":2008,"mime_type":"image/vnd.microsoft.icon","magic":"MS Windows icon resource - 1 icon, 32x32, 32 bits/pixel","md5":"cc062a83151176811ed966d3add0c884","sha1":"6bd0ce89e5510efe1c1642a74f8570b46a2184b5","sha256":"4f73521bd5f74ede627f2a1e1f212b052621c4a7c51b13086c6e7cd56c792c30","sha512":"af6431bb105ebb16d799daa124b9151e267862ed560499c0529ee2afeacdf6874984b56bbffd5a4cdd5867c73963d30146a572997bb75da9a7ab6d62a575feb9","ssdeep":"24:su5LgTFD/4PAZpFHvB7BSivLxM1tjvd4QLHdFP+otq/lWnAVrhHjL/Wb6HN7og+m:23FSHLd4cdalcBp5+1E8EURV","tlshash":"5591da766f23fb2fedc1317010ca72b12c2640456b7a6a1908d529563341ef7bf8ce91","first_seen":"2026-07-10T10:02:52.697571Z","last_seen":"2026-07-13T01:35:20.212032Z","times_seen":62,"resource_available":false,"data":null}},"time_used":83,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":83,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"firelightfinances-xrp.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/turnstile/v0/g/73f5d73b1f13/api.js?onload=Jdvdh0\u0026render=explicit","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://firelightfinances-xrp.live/","date":"2026-07-12T22:58:15.077Z","timestamp":1783897095077,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"challenges.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 16 Jun 2026 20:15:28 GMT","end":"Mon, 14 Sep 2026 21:15:13 GMT"},"fingerprint":{"sha1":"77:27:72:42:CF:51:E8:8C:7C:3E:8C:4C:A1:F0:9A:86:96:B9:0A:16","sha256":"ED:7C:F7:38:B3:0F:00:86:32:D1:14:CE:C0:FF:CA:0E:7C:86:EE:49:51:EF:A4:4B:AA:5C:B6:7C:00:B5:3D:F3"}}},"request":{"raw":"GET /turnstile/v0/g/73f5d73b1f13/api.js?onload=Jdvdh0\u0026render=explicit HTTP/1.1\r\nHost: challenges.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://firelightfinances-xrp.live\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 12 Jul 2026 22:58:15 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nlast-modified: Thu, 09 Jul 2026 13:13:20 GMT\r\ncache-control: max-age=31536000, stale-if-error=10800, stale-while-revalidate=31536000, public\r\naccess-control-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: https://firelightfinances-xrp.live\r\npriority: u=3,i=?0\r\netag: W/\"6a4f9e70.00000000-12529\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: a1a3a6cc589f56c9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":75049,"size_decoded":24748,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"15221d51bd292126fd260c66336db19c","sha1":"d0ca22a3b568b71997d266bf6fe48bdedd932807","sha256":"90acf284e78ceb1183e080909b7558617bd981480fd3000ae1b433d5eb28c459","sha512":"7477e39dc11f4c71e65ca6192e71a74cad6d93b8b4ba702fdac40ea0af2029b6b8f395aae2b20c0c39a8f31d1e1f32db92a9b41632e4e2da5624d7b0d9fddb8f","ssdeep":"1536:tM5A+jXSq5RDMDpydrdopXOe1H05V46MlsgV0Dixw5MB:tEuYR0ydrMXOe1U8lP0Dixw5MB","tlshash":"81732bc472aa7862139ac0f4913b6753b3257d3aa84c8850d467dc653b7cd869233fba","first_seen":"2026-07-09T15:43:08.802758Z","last_seen":"2026-07-13T11:08:19.965925Z","times_seen":6436,"resource_available":true,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":3,"connect":10,"send":0,"wait":10,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/f/av0/rch/8caa0/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://firelightfinances-xrp.live/","date":"2026-07-12T22:58:15.179Z","timestamp":1783897095179,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"challenges.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 16 Jun 2026 20:15:28 GMT","end":"Mon, 14 Sep 2026 21:15:13 GMT"},"fingerprint":{"sha1":"77:27:72:42:CF:51:E8:8C:7C:3E:8C:4C:A1:F0:9A:86:96:B9:0A:16","sha256":"ED:7C:F7:38:B3:0F:00:86:32:D1:14:CE:C0:FF:CA:0E:7C:86:EE:49:51:EF:A4:4B:AA:5C:B6:7C:00:B5:3D:F3"}}},"request":{"raw":"GET /cdn-cgi/challenge-platform/h/g/turnstile/f/av0/rch/8caa0/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto HTTP/1.1\r\nHost: challenges.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 12 Jul 2026 22:58:15 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\npermissions-policy: accelerometer=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=(),xr-spatial-tracking=*\r\ncontent-security-policy: default-src 'none'; script-src 'nonce-lphPc4Sfe2Y2BiXUWup96k' 'unsafe-eval'; script-src-attr 'none'; worker-src blob:; style-src 'unsafe-inline'; img-src 'self'; connect-src 'self' https://hagen.challenges.cloudflare.com https://brunhild.challenges.cloudflare.com; frame-src 'self' blob:; child-src 'self' blob:; form-action 'none'; base-uri 'self'; trusted-types WMqk0 default; require-trusted-types-for 'script'; sandbox allow-same-origin allow-scripts allow-popups allow-forms\r\ncross-origin-embedder-policy: require-corp\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: cross-origin\r\norigin-agent-cluster: ?1\r\naccept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA\r\ncritical-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA\r\nreferrer-policy: same-origin\r\ndocument-policy: js-profiling\r\npriority: u=6,i=?0\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: a1a3a6ccefc52efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: 5ua65blm;dur=265751, cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":265751,"size_decoded":103251,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (65536), with no line terminators","md5":"3de7381f84db7d238cc26eb710380778","sha1":"2abd8f71d312059b7a7ca5787624a9a07ad26de8","sha256":"5addddfc212b41797e5ed8fd9faffabb0d6da47a4ac1ef771c6976489b93f190","sha512":"a9dc761cefb333578dfa1c3b9f3674a5dbe5cc20f753c3235c3509f03b139198f0b1b5770245fcd4b704cd3a30d6e623c0fe2b19fab5dc972972f4bb560f3f13","ssdeep":"6144:+icAZ9HZ5DFh/pvBHMtgJ02Jp0GDTUHrutF6u+4wx644KmlvKgfNjVdOc9ra5nre:B9HthxvBHD02JpMWNjPOc9ra5nr/W","tlshash":"5a440acfbccbb48d278eaafc409b34d7e0195c84a4e45648d2b0d2f43aa13495b7bd59","first_seen":"2026-07-12T22:58:44.445739Z","last_seen":"2026-07-12T22:58:44.445739Z","times_seen":1,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":12,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"firelightfinances-xrp.live/logo.png","fqdn":"firelightfinances-xrp.live","domain":"firelightfinances-xrp.live","tld":"live"},"ip":{"addr":"172.67.171.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://firelightfinances-xrp.live/","date":"2026-07-12T22:58:21.444Z","timestamp":1783897101444,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"firelightfinances-xrp.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Jul 2026 21:14:44 GMT","end":"Tue, 06 Oct 2026 22:12:15 GMT"},"fingerprint":{"sha1":"2E:9F:70:02:6A:E7:80:F6:FF:2A:A5:44:CE:48:27:1A:E5:2D:4B:99","sha256":"AC:31:41:19:20:D3:59:49:6C:F9:27:DE:2D:15:76:E3:6F:13:50:65:16:97:E4:4D:54:EF:8C:7C:E4:1D:B7:6E"}}},"request":{"raw":"GET /logo.png HTTP/1.1\r\nHost: firelightfinances-xrp.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://firelightfinances-xrp.live/\r\nCookie: cf_clearance=NCz.3X.CknjFBVl1L4HruLq8uER.hXn_dxcSzWYWdbU-1783897101-1.2.1.1-VAMZkSZHOpMd1lbxTMDuQx2IOSxk9kgMM3uj6cNa4K71Jqk3aDLRRdGeiFd_lWmAqOYiVaOs94qvU6v1TN_NUpzvQIiYvgTMd3IvWy1PB8uC_xe.2U1tCwvTux7CMkNXOv4HTJ_fTOhV6HMVOPqM5Zxd8N.VCqOBn3masdhgcXlv4rmcyP64T0gXCCkCjU1CVfBvvUuxdrQc7UbpRj5nWgaxUCeQ3PB_ey4faOzXmGVmTIzqT4g6c2MGHp4.i2IDpAUdRn.abc7roIS_q7w9ThQ8rJSaC2N_MF_9fkUXyEhjg0YbaIypYM3pTKHxdHRWEJZV5GiBjNdFOhVj3kFTSpoGemfH6x7RM9jhszACbTcJxu6G7D4yJ33RtGqFvXxiDrk9hioStDkhmKVGyeQCFuxybHX58H3KHVcPl2Pj1JjgcNsOkzgK6QiYP6BIyE66XKRE_kcewbF0dRJy__KHVgN8NsiEaTS6WuXf_7_g.Yn4xxhACo12Cp1MtH2EQxS2\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\nserver-timing: cfExtPri\r\ncontent-type: image/png\r\netag: \"djtwwoed3umd1x7\"\r\nlast-modified: Thu, 09 Jul 2026 08:53:55 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\ndate: Sun, 12 Jul 2026 22:58:21 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Grkq9d6fWWF%2FhAZdroJYjfoQM7KIUa%2BvPw%2F4alY582s3RZ2D42qiUVnjRry27adAPHG4Dx%2B7GUxflHXwZN6X3C2lQU0lxT3FNIntW1EeOVswhZDMbQvLPm49vQBWQH%2BCAMRHUz7%2BtGmS8lpZ%2Bg%3D%3D\"}]}\r\ncf-ray: a1a3a6f40ce15687-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 2491\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2491,"size_decoded":3237,"mime_type":"image/png","magic":"PNG image data, 241 x 240, 8-bit colormap, non-interlaced","md5":"774908dd96042307639e40a6950e03a0","sha1":"7ae1fd5c09a816c4621ede27e29f7e71fd6aa6f5","sha256":"0594fb55762cd41c9e6bc4f0ba31f2ba8fd4c8288a22a92da169c6e9bd748b8a","sha512":"fc8a1a0953c216952a585988bb4fc598e514ba032c9cd6e6df764bbd0945992eb96999fc4452c3907462863626f231fea2b802fadfe1190a53f880bffeabfaf8","ssdeep":"","tlshash":"53515df6ecbd282c4014d6ad141f00f3ec37cb86cc4d1d185a830ad496a7aa0fc943e0","first_seen":"2026-04-24T15:23:09.414396Z","last_seen":"2026-07-14T15:45:38.748748Z","times_seen":73,"resource_available":false,"data":null}},"time_used":47,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":47,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"firelightfinances-xrp.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=DM+Sans:wght@400;500;600;700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://firelightfinances-xrp.live/","date":"2026-07-12T22:58:21.433Z","timestamp":1783897101433,"http_version":"HTTP/2","security_state":"","security_info":null,"request":{"raw":"GET /css2?family=DM+Sans:wght@400;500;600;700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://firelightfinances-xrp.live/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sun, 12 Jul 2026 22:58:21 GMT\r\ndate: Sun, 12 Jul 2026 22:58:21 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-15T13:18:41.261333Z","times_seen":17265395,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"firelightfinances-xrp.live/style.css","fqdn":"firelightfinances-xrp.live","domain":"firelightfinances-xrp.live","tld":"live"},"ip":{"addr":"172.67.171.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://firelightfinances-xrp.live/","date":"2026-07-12T22:58:21.440Z","timestamp":1783897101440,"http_version":"HTTP/3","security_state":"","security_info":null,"request":{"raw":"GET /style.css HTTP/1.1\r\nHost: firelightfinances-xrp.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://firelightfinances-xrp.live/\r\nCookie: cf_clearance=NCz.3X.CknjFBVl1L4HruLq8uER.hXn_dxcSzWYWdbU-1783897101-1.2.1.1-VAMZkSZHOpMd1lbxTMDuQx2IOSxk9kgMM3uj6cNa4K71Jqk3aDLRRdGeiFd_lWmAqOYiVaOs94qvU6v1TN_NUpzvQIiYvgTMd3IvWy1PB8uC_xe.2U1tCwvTux7CMkNXOv4HTJ_fTOhV6HMVOPqM5Zxd8N.VCqOBn3masdhgcXlv4rmcyP64T0gXCCkCjU1CVfBvvUuxdrQc7UbpRj5nWgaxUCeQ3PB_ey4faOzXmGVmTIzqT4g6c2MGHp4.i2IDpAUdRn.abc7roIS_q7w9ThQ8rJSaC2N_MF_9fkUXyEhjg0YbaIypYM3pTKHxdHRWEJZV5GiBjNdFOhVj3kFTSpoGemfH6x7RM9jhszACbTcJxu6G7D4yJ33RtGqFvXxiDrk9hioStDkhmKVGyeQCFuxybHX58H3KHVcPl2Pj1JjgcNsOkzgK6QiYP6BIyE66XKRE_kcewbF0dRJy__KHVgN8NsiEaTS6WuXf_7_g.Yn4xxhACo12Cp1MtH2EQxS2\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-encoding: gzip\r\ncontent-type: text/css; charset=utf-8\r\netag: \"djtwwoovru3h30g\"\r\nlast-modified: Thu, 09 Jul 2026 08:53:55 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\ndate: Sun, 12 Jul 2026 22:58:21 GMT\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZccQFQuCAUkx85ndJSTquZROF8Wpw%2F%2BI%2BhcWC7mgUPkKKsvEmYD7joDSyqHSnM2asP5DbAYPu0euQmb6D7tgXqUn0U7NcODGo3dfCujNzeups1rqB%2Fn2f11pI1ayRBuzzu5M3JkEVVBq%2BUyMBQ%3D%3D\"}]}\r\ncf-ray: a1a3a6f40cdf5687-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1341\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-15T13:18:41.261333Z","times_seen":17265395,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"firelightfinances-xrp.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}}]}