{"report_id":"d2824741-2e46-4dc5-89ea-2cb5bc423a6f","version":0,"status":"done","tags":[],"date":"2026-06-18T16:02:06Z","url":{"schema":"https","addr":"join-xrpfi.xyz/","fqdn":"join-xrpfi.xyz","domain":"join-xrpfi.xyz","tld":"xyz"},"ip":{"addr":"172.67.202.7","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"theajack.github.io/disable-devtool/404.html?h=join-xrpfi.xyz","fqdn":"theajack.github.io","domain":"theajack.github.io","tld":"github.io"},"title":"Not allowed","dom":{"size":18504,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"be9fbf159f3bcf3acd8809bbcc874119","sha1":"3d9d6ac0075bd4db13730a708bac2b0fd3b0b6df","sha256":"e29526a005d8b5fe7303b0e0c3e7b255cef1e038bfc77a7561486f129564bf74","sha512":"3f163ffd393f5777d927a5fbc015c39e78bc8adb7c99703baa4120fb6de407e96b31a8c031649eef55884d07e70edb0647938c73bb1d4d986e11e6d5f4d592d9","ssdeep":"192:WniKZyNy339QQbxzAH1d6+clwnEoUSH0MWqeKgl4uoPnrekgCjk:Wnn9CVRH0WRY","tlshash":"a2822056231d683ef9150291e7d53ab1163e0233961c7368b23d0076eb1d7bf24bbae9","dom_hash":"domhash060a4c45ef48f6af4476ab2920aa1ba3","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"join-xrpfi.xyz/","fqdn":"join-xrpfi.xyz","domain":"join-xrpfi.xyz","tld":"xyz"},"ip":{"addr":"172.67.202.7","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-07-23T16:02:06Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":4}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"join-xrpfi.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"theajack.github.io","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"noteworthy-lox.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"noteworthy-lox.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null},"summary":[{"fqdn":"noteworthy-lox.xyz","ip":{"addr":"104.21.11.153","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-06-08","domain_rank":0,"first_seen":"2026-06-08T14:54:56.894128Z","last_seen":"2026-06-17T06:46:45.889429Z","alert_count":2,"request_count":1,"received_data":4580694,"sent_data":469,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"rpc.ankr.com","ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2007-04-23","domain_rank":541361,"first_seen":"2021-10-24T12:41:06Z","last_seen":"2026-06-14T13:00:54.298Z","alert_count":0,"request_count":1,"received_data":0,"sent_data":548,"comment":"","tags":null,"fingerprints":null},{"fqdn":"flare.network","ip":{"addr":"104.18.2.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2017-09-08","domain_rank":94851,"first_seen":"2025-06-17T09:05:49.543788Z","last_seen":"2026-06-18T15:55:51.423897Z","alert_count":0,"request_count":1,"received_data":2515,"sent_data":606,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Webpack","description":"Webpack is an open-source JavaScript module bundler.","website":"https://webpack.js.org/","common_platform_enumeration":"","icon":"Webpack.svg","categories":["Miscellaneous"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Next.js","description":"Next.js is a React framework for developing single page Javascript applications.","website":"https://nextjs.org","common_platform_enumeration":"cpe:2.3:a:zeit:next.js:*:*:*:*:*:*:*:*","icon":"Next.js.svg","categories":["JavaScript frameworks","Web frameworks"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"React","description":"React is an open-source JavaScript library for building user interfaces or UI components.","website":"https://reactjs.org","common_platform_enumeration":"cpe:2.3:a:facebook:react:*:*:*:*:*:*:*:*","icon":"React.svg","categories":["JavaScript frameworks"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}]},{"fqdn":"arbitrum.meowrpc.com","ip":{"addr":"104.26.10.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2023-05-04","domain_rank":2819481,"first_seen":"2025-08-16T04:05:13.25434Z","last_seen":"2026-06-17T06:46:46.364124Z","alert_count":0,"request_count":2,"received_data":1549,"sent_data":1063,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"challenges.cloudflare.com","ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-02-17","domain_rank":11393,"first_seen":"2021-10-20T05:02:03Z","last_seen":"2026-06-14T23:32:43.59512Z","alert_count":0,"request_count":7,"received_data":787158,"sent_data":5387,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"arbitrum-one.publicnode.com","ip":{"addr":"172.66.150.162","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2016-08-16","domain_rank":3618652,"first_seen":"2023-07-09T07:25:43Z","last_seen":"2026-06-14T03:39:32.274475Z","alert_count":0,"request_count":2,"received_data":1597,"sent_data":1077,"comment":"","tags":null,"fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"arbitrum.llamarpc.com","ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2022-02-07","domain_rank":3027975,"first_seen":"2023-12-02T14:30:00Z","last_seen":"2026-06-16T16:56:49.764772Z","alert_count":0,"request_count":1,"received_data":0,"sent_data":549,"comment":"","tags":null,"fingerprints":null},{"fqdn":"join-xrpfi.xyz","ip":{"addr":"172.67.202.7","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-06-09","domain_rank":0,"first_seen":"2026-06-18T16:02:31.487676Z","last_seen":"2026-06-18T16:02:31.487677Z","alert_count":45,"request_count":45,"received_data":6473234,"sent_data":47244,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"theajack.github.io","ip":{"addr":"185.199.109.153","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2013-03-08","domain_rank":1222043,"first_seen":"2022-06-30T12:27:22Z","last_seen":"2026-06-16T16:32:24.874379Z","alert_count":2,"request_count":2,"received_data":29674,"sent_data":1121,"comment":"","tags":null,"fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"GitHub Pages","description":"GitHub Pages is a static site hosting service.","website":"https://pages.github.com/","common_platform_enumeration":"","icon":"GitHub.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Fastly","description":"Fastly is a cloud computing services provider. Fastly's cloud platform provides a content delivery network, Internet security services, load balancing, and video \u0026 streaming services.","website":"https://www.fastly.com","common_platform_enumeration":"","icon":"Fastly.svg","categories":["CDN"]},{"name":"Hexo:6.2.0","description":"Hexo is a blog framework powered by Node.js.","website":"https://hexo.io","common_platform_enumeration":"","icon":"Hexo.png","categories":["Static site generator"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]}]},{"fqdn":"arbitrum.drpc.org","ip":{"addr":"104.18.11.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2005-01-09","domain_rank":1951970,"first_seen":"2024-10-14T17:26:29.664661Z","last_seen":"2026-06-16T16:56:49.648975Z","alert_count":0,"request_count":2,"received_data":1423,"sent_data":1057,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"arbitrum.gateway.tenderly.co","ip":{"addr":"35.227.193.242","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"domain_registered":"2020-05-11","domain_rank":0,"first_seen":"2025-08-03T10:23:07.270939Z","last_seen":"2026-06-17T06:46:46.037626Z","alert_count":0,"request_count":2,"received_data":1163,"sent_data":1079,"comment":"","tags":null,"fingerprints":[{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}]},{"fqdn":"arb1.arbitrum.io","ip":{"addr":"104.20.39.96","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2018-01-03","domain_rank":513999,"first_seen":"2021-05-28T20:40:01Z","last_seen":"2026-06-16T13:32:58.982802Z","alert_count":0,"request_count":2,"received_data":1169,"sent_data":1061,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/pop5b/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"6fc893822b98757decd8203e69306162","sha1":"e4b925695b969e2f820e8caafcaa69e90e6d62ed","sha256":"e6e7d52651cb7ec1f60c4ab0d9a3d4a3ac4f1f2c4107fc472a8b04a67d464231","sha512":"872f41873f4816103ba0a81b43752aeedf1727d17138e0f9002c6126e64b6a7dae92879d08659152bfb89be526d6483c9123009c0c92f51d9734b136816ceaee","ssdeep":"3:N/BKL1X/TjXTS:eL1PTjDS","tlshash":"805504c0544034741510fc10f1501415500d450010155401f05d04dd377004000d0d40","size":1337359,"data":"","first_seen":"2026-06-18T16:02:55.85428Z","last_seen":"2026-06-18T16:02:55.85428Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/pop5b/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-06-25T00:13:45.322641Z","times_seen":752924,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/pop5b/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-06-25T00:13:45.322641Z","times_seen":752924,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/pop5b/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"4be7b6b8aa783300ae657a82c16d2a09","sha1":"39c051c1ee899fb0fdec892c96de143739ad2628","sha256":"9ce4a40dab4ae7a062f4860f6a5f77bb0f93dd15b4a24f086e633a62dfaa26cc","sha512":"ed4f6be02687fb5ca630c617096aea4f63e85839ce294d6026bac126865ce8de8cfca9d5bfb335b13b135351e13d49cee6712e22d8274a313c9f1b15f858c66d","ssdeep":"","tlshash":"89900277b5817125574568f1842a251be61946d406544459910400862d104648651bd9","size":50,"data":"","first_seen":"2026-04-23T17:24:48.285702Z","last_seen":"2026-06-25T00:17:21.558039Z","times_seen":54757,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/pop5b/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-06-25T00:13:45.322641Z","times_seen":752924,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/pop5b/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"be8073a8844ae0041b6001f4937ac5e1","sha1":"946f79f990ab44337666a34f07963c7bca624cdd","sha256":"0d415eb65def2e3deb18ca803e2cc5ca1014d877b907c8ed6b0e39475969606a","sha512":"d965b99f45df7cb23e39b253d52d6e1aa7fc10bd8335246193915eecde020200ceaf740e5c98511fd0c891667ad7821ffefa68311334b4df94ea99dfcfd4a87c","ssdeep":"3:N/BKL1X/Tgr:eL1PTy","tlshash":"3d5504c05440347c1550dc11d35014155015450014150401f05d0cd53f3004040d0540","size":1337359,"data":"","first_seen":"2026-06-18T16:02:55.858432Z","last_seen":"2026-06-18T16:02:55.858432Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/pop5b/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"50bda72e04f85f9b4338c0f939c34b9c","sha1":"d53056a9d7a7424238f0faf0b93b098f28d4d3ca","sha256":"db8d20f2dfaf9df3877967927de5ecb9648fecda131ab44bf854f8d72baa2b23","sha512":"3e55d7e8940bd66ef537062f73d3d2c6982a25a4e9fe9ac98e18253782cf28e01f106382d2e9dbbc05b6cdd62aae372b75cd430aa5a7ce2e327fb2ece33a30d0","ssdeep":"","tlshash":"736000030c00cc300033000c0000003c30f00c3003cc000c033003f003c030c0000030","size":15,"data":"","first_seen":"2026-04-23T17:24:48.299417Z","last_seen":"2026-06-25T00:17:21.582009Z","times_seen":54434,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/turnstile/v0/b/7c8a194018aa/api.js?onload=VnAqC4\u0026render=explicit","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"37b007a08b4c6fddc9310bb5a711cfac","sha1":"5cccd9c1619c77aff109562386761342ebb169b8","sha256":"761743e95d8ebe80041c9679afd18599df86a9afb053d6dbba3452d27dbd79f4","sha512":"d46e0c44e8799bd3b283a3d92cf2d06988e998c6f9332ecb9ccac074370fce2e71719bc42f3d8380073e4dbfadf5ca8f0b45e90d40b223f3e00c0536631df595","ssdeep":"1536:A+RDl35kVfhRMGKHD+LxgnmeBDHYOo8LDgS9:rbSVfYEGmeBD7n9","tlshash":"a7532c987196787313d980f0a17b6743732a7d3aa94cc850d827d865367ce8a9233f7e","size":65582,"data":"","first_seen":"2026-06-16T09:36:41.625096Z","last_seen":"2026-06-23T15:16:14.513724Z","times_seen":4703,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/pop5b/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"a12130cf9ee549c653a717f419e9da55","sha1":"c8a86abed1e50642ab6cbfb1f812f0051564f2ae","sha256":"8c777b43b3b65d96a596576b86a9df9661f7b6be21c13f176e589d1df1745684","sha512":"51267244a5ce359b5e45799ea29a590555b12842a7daf73b40b1fa0e0bc70b73615b1670d8f8e5d6be1bdc195e3b7427317503c73dc96ec21871788ec3082e71","ssdeep":"3072:NDVgVvi9VKkBmMaMlgBQg2AeljgAByeTcTEQMf:BVt9lkMaSoEAelsAYTvMf","tlshash":"bd240b893aca715702f61bb4007bf9dab23b5ca41035142cd60179e0fcba76d76b7a9c","size":209986,"data":"","first_seen":"2026-06-18T16:02:55.860685Z","last_seen":"2026-06-18T16:02:55.860685Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/pop5b/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"177e67a868f4a17c803f151367228fa6","sha1":"3763f4547a31a9a6e3759b931bf3422d5893adbe","sha256":"2116faa2b355ff973bbdde11189e667bc7b0872b4a2b78d087cbf89e8e43fc17","sha512":"1e1b38fe6b932c18947b709ee3a84437df05dbc16df69a3390f04db03536216d167753e80764b4c9220b116a137e635c893959be3e189705ab84165d646a65ee","ssdeep":"3:N/BKL1X/TlcUUn:eL1PTlcUUn","tlshash":"a35504d0544034f41510dc10d150141570054500141d0401f05d05d5373004050d0d40","size":1337359,"data":"","first_seen":"2026-06-18T16:02:55.86242Z","last_seen":"2026-06-18T16:02:55.86242Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"join-xrpfi.xyz/","fqdn":"join-xrpfi.xyz","domain":"join-xrpfi.xyz","tld":"xyz"},"ip":{"addr":"172.67.202.7","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"7461e6833f62aa76f11e49c456c3f17c","sha1":"96f6abdbf602f3285ccf9c78969e4349e82ac266","sha256":"7d2c34f19b3e130cc318043c9a4ab16cd98a82907a9db37e324b3c6c663d2bce","sha512":"f323fe7705ea55d0ab3133377a65cca8395f749151c88cfae93d8539c4ed95d438990bbe68965a164d3c364e4994ba2caa4ef1c4b806467376031c5d3db53b7e","ssdeep":"3:N/BKL1X/TjTUT:eL1PTj+","tlshash":"b05504c4544074741510fc10d15015155005450010151401f05d44dd377004000d0540","size":1337359,"data":"","first_seen":"2026-06-18T16:02:55.864369Z","last_seen":"2026-06-18T16:02:55.864369Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/pop5b/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-06-25T00:13:45.322641Z","times_seen":752924,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/pop5b/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-06-25T00:13:45.322641Z","times_seen":752924,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/pop5b/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-06-25T00:13:45.322641Z","times_seen":752924,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/pop5b/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-06-25T00:13:45.322641Z","times_seen":752924,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/pop5b/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-06-25T00:13:45.322641Z","times_seen":752924,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/pop5b/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-06-25T00:13:45.322641Z","times_seen":752924,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/pop5b/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-06-25T00:13:45.322641Z","times_seen":752924,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/pop5b/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"656fa1f524e9ef9852a7f1926f9f411c","sha1":"358a113517e7836bd4a32c0579ea57bcc4612895","sha256":"bd279b4d2f2e6bd8b3f5c7a4016434ff0e01acc7d95ed6fa7330cb6ff8112c01","sha512":"1cde8c02ef0b57aa160f2a1d6a6fef4eb8d5cf879d658aa4fea108f65ddecb35a4d6bcbaeaaf5e0dd2aa2764b9e4d7b87081f017d7d1ee2cf4cf18a8fce78237","ssdeep":"","tlshash":"43a004ccf141f0505303f1350c374115f11557c1041c1010554c44537d1414f4111f5c","size":71,"data":"","first_seen":"2026-04-23T17:24:48.307672Z","last_seen":"2026-06-25T00:17:21.558652Z","times_seen":54385,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/pop5b/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-06-25T00:13:45.322641Z","times_seen":752924,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/pop5b/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"753f98de254509de7c761e6a36facf27","sha1":"e64923dfc95c3b755d2963cc0c6bd17cecef3e5e","sha256":"492f97884db6c10ee0a2ee77c83f674fadab906ba4ab41258a50ba2b2226b6d4","sha512":"6976df52baed56b0b740037f9db2a9fbab37e9bf3e8c10c4aa5be8e98878a88efeaadab3faea826c422ffd5e1070dab94564ba3536d9999fe2bd4946ad61d3e4","ssdeep":"3:N/BKL1X/Tg3:eL1PTC","tlshash":"e45504c0544034741510dc10d1d014155055450010150403f05d0cd5373014000d4540","size":1337359,"data":"","first_seen":"2026-06-18T16:02:55.874944Z","last_seen":"2026-06-18T16:02:55.874944Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"join-xrpfi.xyz/","fqdn":"join-xrpfi.xyz","domain":"join-xrpfi.xyz","tld":"xyz"},"ip":{"addr":"172.67.202.7","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"2f38044bca997c240c6baabc19f5fef1","sha1":"6b9b6711951030ae3c17409947a848c010384507","sha256":"92f19becbf34b563e6d410bf2b9738f716af06826283a0f57d9164c230d64d33","sha512":"2e0e8b562cc3f5eb943e81dbb65ad4d221b84c12512f479caf73a53a98902ed1537763cda4fcfd0137822f803a072f30ea207913501ab25ba449826467b92472","ssdeep":"3:N/BKL1X/TgP:eL1PTC","tlshash":"945504c0544074741510dc15d15014157015450051150403f05d0cd5373004000d0540","size":1337359,"data":"","first_seen":"2026-06-18T16:02:55.877747Z","last_seen":"2026-06-18T16:02:55.877747Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"join-xrpfi.xyz/","fqdn":"join-xrpfi.xyz","domain":"join-xrpfi.xyz","tld":"xyz"},"ip":{"addr":"172.67.202.7","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"3e665f5827a4e2520f0e2b6fba4b8632","sha1":"4f1b6f9203ea6480913f195268b050c76209f160","sha256":"305a9839b4d9bae54540646aa7d57e20ccc3ae46f23d3a41438c5b89d1a1dd78","sha512":"331b950ac996d11ab9f827c99c6b3a3cde631a002c0f37711c965f7f4c1461d3f908259b2de6297506edb0dfa2d8c8b4611ef19a32f4c0fd8c4abda43433f1a6","ssdeep":"3:N/BKL1X/Ti6:eL1PTp","tlshash":"d05504c05cc034741510dc50d15015555005450010550401f05d04d5373004000d35c0","size":1337359,"data":"","first_seen":"2026-06-18T16:02:55.879619Z","last_seen":"2026-06-18T16:02:55.879619Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/pop5b/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-06-25T00:13:45.322641Z","times_seen":752924,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/pop5b/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-06-25T00:13:45.322641Z","times_seen":752924,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"join-xrpfi.xyz/","fqdn":"join-xrpfi.xyz","domain":"join-xrpfi.xyz","tld":"xyz"},"ip":{"addr":"172.67.202.7","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"2755cf346d258de17d74b922a8da4d2e","sha1":"9b4a321fa6cb382910daeae0695681eec7af38eb","sha256":"85cfb1de4cde76bdb09a14714c6b02ade01e83ecdd353b7396ff3d5dd60bfe21","sha512":"2467fe0ab47f51d37e07ec0d2d9fdc3c611436e0ac9bb41ab032076e608bdcaa9f66602d04655e085b60b22cfcf955ee0430e2594e4aa59398dbcd72c1d4e81e","ssdeep":"3:N/BKL1X/ThdQ:eL1PThO","tlshash":"b15504c0544034743510dc14d150145574054500101d1501f05d14d5373004001d0540","size":1337359,"data":"","first_seen":"2026-06-18T16:02:55.881574Z","last_seen":"2026-06-18T16:02:55.881574Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/pop5b/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"404a643b4eb31cc63b11dea2ae5010c6","sha1":"9dd09cc84bb051c42e2d430bd2e67a78f67ad47f","sha256":"a6725fdc43a23be22a979f86eef839374dac9545d0275f26e041f86c4e1ec69c","sha512":"43f94f3e2cc902e64c542bc21c556460f26b98e29608b91fac86ee86fe4055681abbabdfb40e9d4954b0a65830cc45feb5a9e88f308f8dc874214bf4e46edaaa","ssdeep":"3:N/BKL1X/Tuon:eL1PTf","tlshash":"5c5504d054407c741510dc10d150141d5405550010150441f05d04d5373014000d0745","size":1337359,"data":"","first_seen":"2026-06-18T16:02:55.887782Z","last_seen":"2026-06-18T16:02:55.887782Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"noteworthy-lox.xyz/64878V0t5P2V7DK8mVG87.js","fqdn":"noteworthy-lox.xyz","domain":"noteworthy-lox.xyz","tld":"xyz"},"ip":{"addr":"104.21.11.153","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"6500e54a5c0edfa70806a25985de1392","sha1":"d44406403fb76221b3e985f363c5c5518deab243","sha256":"2d868e7144499c267649a7f70657188d9ee2efd97b2a3d4c93376acd3469f255","sha512":"cff412c93985b45b6a638ba002bf0423fda3b29476652df95f323b7222e7a73338c254ef7199864e63a2d00d1bb327e7811e443dc6487239a0b8cb60afffddf2","ssdeep":"24576:XrviZkUKxSZhOcHJyLhbj3j3sYiPt8QpgA4SR+Tr82CsJhQ/+WCT:XraKUFZhpHJyLhbj3jg4SR+TrjCY2+WY","tlshash":"b526d8c85bcba4a99b6204ec2d45e0a4ccdce9ce6c60c7e556cce7f6f880125f5e2794","size":4579907,"data":"","first_seen":"2026-06-18T16:02:55.891978Z","last_seen":"2026-06-18T16:02:55.891978Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eval","is_inline":false,"md5":"f53bcc6d455944abb38d8f3745e12f7e","sha1":"66eabdd7dd5f90f662ca9eb9db09b1fcaf18599a","sha256":"3bfb2bb7022d2cacdae8f609b6637471c6fb13d8c92f78367f623494ebe117e0","sha512":"78060e64c28543ff5cc2c7c675bbff9baa619d32cab5fd5927959e08fb7ad8a233766c0626fb23e720eaf5f92a0b062fba1b13d9f37f9fc2702fefa41d5100ff","ssdeep":"","tlshash":"f9d0222bf0be1e68d18100793cbb3428cd3f3a5c2804ba826b2b18ca0b820c5d0c1f76","size":195,"data":"","first_seen":"2026-06-16T09:40:41.466738Z","last_seen":"2026-06-25T00:31:17.645286Z","times_seen":2064,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"join-xrpfi.xyz/","fqdn":"join-xrpfi.xyz","domain":"join-xrpfi.xyz","tld":"xyz"},"ip":{"addr":"172.67.202.7","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"802a36b21f2c6534f6930339a3d7ee7d","sha1":"5cdd5a77e53ad6c126962d9e443e6b95220a2d30","sha256":"c32f8873a09d4835271d5f8837a44f3e149e4538600b377251733c6101a0a54d","sha512":"b41594420309942249991a89f263f7c6d530abd0170b0b9c6f0536043527ed2bfdac96f642487ed714f27c6760c68e0ca70ec2c4df4147e20f035a3fef77ba7c","ssdeep":"3:N/BKL1X/TjVTQ:eL1PTj5Q","tlshash":"aa5504c0544074f41510dc10d1501415500d4500101d1401f05d05d5377004000d0540","size":1337359,"data":"","first_seen":"2026-06-18T16:02:55.895062Z","last_seen":"2026-06-18T16:02:55.895062Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/pop5b/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-06-25T00:13:45.322641Z","times_seen":752924,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"join-xrpfi.xyz/","fqdn":"join-xrpfi.xyz","domain":"join-xrpfi.xyz","tld":"xyz"},"ip":{"addr":"172.67.202.7","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"07eea526b01fec16bee7e527398c9f9c","sha1":"23e9eca8d201dbd9baed8617bcaf7241c2fc4e57","sha256":"8ee87e6c532dfd99c11413c4ce9184c5f37940cd0cf72286bebac27106f1d542","sha512":"22ee527f5ba77438b72ac053960e50f7d43e8d7e881c956fa42ba3f39ece1564b70b6823b6057fbe00075112fc1f3bea9d50b042bdbc8f635b552a2b0a0675d2","ssdeep":"24576:7GcHNuDx/j3j5zK5SnWE2faR74oIZUV/M2Ci5u5+WeU:7jHNuDx/j3jS5oIZUV/zC0Y+WL","tlshash":"d90665c85bcba4a99f6314ed2d45e1a0ccccedce6c20c7e156dde7a2e890125f5e2784","size":3782238,"data":"","first_seen":"2026-06-18T16:02:55.899251Z","last_seen":"2026-06-18T16:02:55.899251Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/pop5b/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-06-25T00:13:45.322641Z","times_seen":752924,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/pop5b/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-06-25T00:13:45.322641Z","times_seen":752924,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/pop5b/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-06-25T00:13:45.322641Z","times_seen":752924,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/6445880a-ba17-4298-8d06-731badeaa727","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"","is_inline":false,"md5":"b23314d76d6ef77dad0b00eda85ed7e1","sha1":"8a4a99487f2cd3299d181141a0aeb4b47d814a59","sha256":"db2031f6a8cef1def057c7dd9e4545328ff5009cb6670f944dd40322078c09aa","sha512":"8c0d663288d4959ce3c329d8732c1dcde3e3616f935c6aec0db06a31ca4ef2cbbc12e5bb24523e186f1f5849f4eca694765181e9b01fe81173489fd2ad064e14","ssdeep":"","tlshash":"ccd0cd093d71d60886e211337c7f7521d1a16264650d53445735def9cb5069f2514f54","size":291,"data":"","first_seen":"2026-06-16T09:40:41.569162Z","last_seen":"2026-06-25T00:31:17.646573Z","times_seen":3133,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"join-xrpfi.xyz/?__cf_chl_rt_tk=1qB4QJSwoQl6KPDg2Zms3S0YcJdeBFWlEfdknJt3Bmc-1781798472-1.0.1.1-mLCjWBCrDHs8J3pcf5FAcPoJqx2ikaBbmmjyzzW90Vg","fqdn":"join-xrpfi.xyz","domain":"join-xrpfi.xyz","tld":"xyz"},"ip":{"addr":"172.67.202.7","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-06-25T00:13:45.322641Z","times_seen":752924,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"join-xrpfi.xyz/","fqdn":"join-xrpfi.xyz","domain":"join-xrpfi.xyz","tld":"xyz"},"ip":{"addr":"172.67.202.7","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"d6b30b9c004b2a88c3b4be9d91325653","sha1":"be3233d120aed9ef5ac4450f8c26435c6c88c935","sha256":"8471b370aebbde0eea8df84303a51e5556e03caf713b4841fa4433ad1486f1b1","sha512":"1e2a0ae4abdd0e6be5456047167eb7443b6ad336e404a847b2eff8486c3b3630a8329fcfde9782602917918f780985515f17d3a00e7f0350e4992980e3d32bd5","ssdeep":"3:N/BKL1X/TlcRW:eL1PTlcw","tlshash":"715504d0544034741510dc30d1d0143550054500541d0401f05d04d5373005011d0dc0","size":1337359,"data":"","first_seen":"2026-06-18T16:02:55.901559Z","last_seen":"2026-06-18T16:02:55.901559Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/pop5b/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"fadefaee4558279749a7ab153ef3f1c9","sha1":"ced56017fd2ad3004b7ee4b368fd0e8b1b08b00c","sha256":"fbc136d5bbfd81c1584b9157901a019acb344ba93a96af2a3f3676a1c85fcdc6","sha512":"faea1f7233f63068edaee1192151b88933d31697527e203f0f4c236f78bac4281493b14be7dbc4db9192037f04d6fb1239d5e8afd97ffc256b278d2063967d7a","ssdeep":"3:N/BKL1X/TiBR:eL1PT4R","tlshash":"415504c05c4074741510dc10d150155d5005551014150501f07d04d5373004000d05c0","size":1337359,"data":"","first_seen":"2026-06-18T16:02:55.90362Z","last_seen":"2026-06-18T16:02:55.90362Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/pop5b/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-06-25T00:13:45.322641Z","times_seen":752924,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/6445880a-ba17-4298-8d06-731badeaa727","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"","is_inline":false,"md5":"b23314d76d6ef77dad0b00eda85ed7e1","sha1":"8a4a99487f2cd3299d181141a0aeb4b47d814a59","sha256":"db2031f6a8cef1def057c7dd9e4545328ff5009cb6670f944dd40322078c09aa","sha512":"8c0d663288d4959ce3c329d8732c1dcde3e3616f935c6aec0db06a31ca4ef2cbbc12e5bb24523e186f1f5849f4eca694765181e9b01fe81173489fd2ad064e14","ssdeep":"","tlshash":"ccd0cd093d71d60886e211337c7f7521d1a16264650d53445735def9cb5069f2514f54","size":291,"data":"","first_seen":"2026-06-16T09:40:41.569162Z","last_seen":"2026-06-25T00:31:17.646573Z","times_seen":3133,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"join-xrpfi.xyz/","fqdn":"join-xrpfi.xyz","domain":"join-xrpfi.xyz","tld":"xyz"},"ip":{"addr":"172.67.202.7","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"0c096b25c99b70fb77e2242c1bfd996d","sha1":"7f33dcc130bddb19063152fe7f256f3afa0da5b8","sha256":"a7e6ba33ddadddb8fbaf3222666542da11ceef6554a7f696396520a38bb95a59","sha512":"8e25e135b0f001f36e279a0aae8f74dedf31a29bb6c59357775efda36078a17d428d4e8e2e81b926be64c4135130369fe4f7a9bdb5ef8cd98242c095e8667338","ssdeep":"","tlshash":"2dc02b883bc4e024c64131351c6f42c6f638df600c582013e042414db6b0b50039ff4f","size":137,"data":"","first_seen":"2026-06-16T09:40:41.561727Z","last_seen":"2026-06-25T00:31:17.644395Z","times_seen":3234,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/pop5b/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-06-25T00:13:45.322641Z","times_seen":752924,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/pop5b/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-06-25T00:13:45.322641Z","times_seen":752924,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/pop5b/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-06-25T00:13:45.322641Z","times_seen":752924,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/pop5b/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-06-25T00:13:45.322641Z","times_seen":752924,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"join-xrpfi.xyz/","fqdn":"join-xrpfi.xyz","domain":"join-xrpfi.xyz","tld":"xyz"},"ip":{"addr":"172.67.202.7","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"398bae40dee6328c3dea6f02dad06e99","sha1":"3476868500be6e6dc6bc8f509f4e2c3890bdfaad","sha256":"a64ef44bb6dc67067eeb41d036c6815e62bc48e30e6d6dbd5742bea0187bdc6e","sha512":"7eedb9b04ef7a5dfd9c0866ed12c52dd77ac6d653a74ca51d5d97ad391ed48895d4212adce17246dfb11e8b2203887ad84b04faf352c42de1083e581dc024054","ssdeep":"3:N/BKL1X/TgIn:eL1PTZ","tlshash":"195504c4544034741510dc50d1541415511d450010150401f05d0dd5373404040d05c1","size":1337359,"data":"","first_seen":"2026-06-18T16:02:55.909544Z","last_seen":"2026-06-18T16:02:55.909544Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/pop5b/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-06-25T00:13:45.322641Z","times_seen":752924,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/pop5b/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-06-25T00:13:45.322641Z","times_seen":752924,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/pop5b/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-06-25T00:13:45.322641Z","times_seen":752924,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"join-xrpfi.xyz/","fqdn":"join-xrpfi.xyz","domain":"join-xrpfi.xyz","tld":"xyz"},"ip":{"addr":"172.67.202.7","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"5e07a83efeb308980f4fe054ec4c9c7e","sha1":"7acb02c17611feed3b78b2366e86cc3e489efae6","sha256":"c4e49126d2ea4bc50b8848557c18bf79100c0ea6a007a98503f3d7b04d44a175","sha512":"9ebeb8d82add7c0598c8d74d0871b4994423de6a4d6f37179f2f02265b3b25f638045d941d9fd6e10aa517014191d4a359362a186af4d97807bb9d0c87ed496a","ssdeep":"3:N/BKL1X/ThXWn:eL1PThG","tlshash":"f05504c0744034741510dc10d15014155c054500101d0441f05f14d577300d001d0540","size":1337359,"data":"","first_seen":"2026-06-18T16:02:55.91232Z","last_seen":"2026-06-18T16:02:55.91232Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"join-xrpfi.xyz/","fqdn":"join-xrpfi.xyz","domain":"join-xrpfi.xyz","tld":"xyz"},"ip":{"addr":"172.67.202.7","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"5c2eeee2037d420020ebc8a575ad067b","sha1":"be77594dcf414417de178ab54d452e5e28456e17","sha256":"f10948e9ffb9de1303283689b28b28378adf65e7e954410a9453785df7fda397","sha512":"6001321944665ff2fd19c4473c5a8438531d464000b0bcae45538ec505ad64a4026a1fcad1eb0a4018ef912cbc1a052655b3a7b84b144a381b7be4e6e15b26a7","ssdeep":"3:N/BKL1X/Tuc:eL1PTr","tlshash":"ed5504d054403c741510dc14d15054155005454010550401f05d04d5373005000d0555","size":1337359,"data":"","first_seen":"2026-06-18T16:02:55.914124Z","last_seen":"2026-06-18T16:02:55.914124Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/pop5b/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-06-25T00:13:45.322641Z","times_seen":752924,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/pop5b/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-06-25T00:13:45.322641Z","times_seen":752924,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"join-xrpfi.xyz/assets/asynctablehouse.js","fqdn":"join-xrpfi.xyz","domain":"join-xrpfi.xyz","tld":"xyz"},"ip":{"addr":"172.67.202.7","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"35fc69e37bc256c31992e5c8e9faa52d","sha1":"e6ac2a37306adec0de5f5866e72b27d9ff932b50","sha256":"c8a12eafcf7f02c66a5ef63469a022794d2446545006f0b707e0784ba03d66d7","sha512":"c7607b79137f408abda7488b20216af6d6b7897f21914a4e8ac0ebb6de7e21e414cbc9ebd7561411b5f8a3aba48d111a939a6c0c394e923cc3d688ab34702dc3","ssdeep":"6144:HwM5iZ56iPvUgSn2QrIfVi+ByZNYgbxQmQ52MZoNiMbgrF9Qyl2f2jtVi+By/FZo:Hw/Ma1VV9xMu","tlshash":"a4a574fb03a55e3e80bbe944dd716c5c50f987a14e6e5149bd23a98bd74cba80b0c78c","size":2128988,"data":"","first_seen":"2026-06-18T16:02:55.915959Z","last_seen":"2026-06-18T16:02:55.915959Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"join-xrpfi.xyz/","fqdn":"join-xrpfi.xyz","domain":"join-xrpfi.xyz","tld":"xyz"},"ip":{"addr":"172.67.202.7","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-06-25T00:13:45.322641Z","times_seen":752924,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/pop5b/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-06-25T00:13:45.322641Z","times_seen":752924,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/pop5b/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-06-25T00:13:45.322641Z","times_seen":752924,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/pop5b/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"f62a17e1a7424b89b3ffed1526bb38a1","sha1":"eb03af553a5b3f8afbacb9c323adfaf91a0a08a4","sha256":"445d522df7c7fcdf11f8a5825b6cfd95fbbbc7e1e7196779f6a570507f435a68","sha512":"ae8f316f7e2b3ddfe70828ab9bb390ac0ca56c4fb5c7c2d2101d52118a9848057be231d1d4c19d6f21947e3dd7b4466bf77eee008a4f7e09710e93cd2b63e720","ssdeep":"3:N/BKL1X/ThRv:eL1PThl","tlshash":"ba5504c0544034741510dd70d550151554454500103d0401f45d14d5373004001d05c0","size":1337359,"data":"","first_seen":"2026-06-18T16:02:55.91753Z","last_seen":"2026-06-18T16:02:55.91753Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"theajack.github.io/disable-devtool/404.html?h=join-xrpfi.xyz","fqdn":"theajack.github.io","domain":"theajack.github.io","tld":"github.io"},"ip":{"addr":"185.199.109.153","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"faa6920f9f868c77b68832cf33cf4a8b","sha1":"66f04a7c944bfd3e43abff14a701238e46d5c45c","sha256":"4f92a833075632e17676f264a5052fea4d17833e7920c3ef5995ad6765046b4d","sha512":"3391b5c511d4bbd428d6c0cdd349db4020466496011f1e081c0395108cd80c1f76eb98a26bbb1c400f57df047ee954cce774eb9ae86cfead29466972bc30550f","ssdeep":"","tlshash":"0df061855493c0a86877747d898ea26c30738453290dcf107d2c6c009fa1efe417c3d8","size":508,"data":"","first_seen":"2026-06-09T16:23:38.425899Z","last_seen":"2026-06-24T22:18:06.423113Z","times_seen":53,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/pop5b/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"0c096b25c99b70fb77e2242c1bfd996d","sha1":"7f33dcc130bddb19063152fe7f256f3afa0da5b8","sha256":"a7e6ba33ddadddb8fbaf3222666542da11ceef6554a7f696396520a38bb95a59","sha512":"8e25e135b0f001f36e279a0aae8f74dedf31a29bb6c59357775efda36078a17d428d4e8e2e81b926be64c4135130369fe4f7a9bdb5ef8cd98242c095e8667338","ssdeep":"","tlshash":"2dc02b883bc4e024c64131351c6f42c6f638df600c582013e042414db6b0b50039ff4f","size":137,"data":"","first_seen":"2026-06-16T09:40:41.561727Z","last_seen":"2026-06-25T00:31:17.644395Z","times_seen":3234,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/pop5b/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-06-25T00:13:45.322641Z","times_seen":752924,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/27f946d6-c90b-403a-9604-470112b3beb3","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"","is_inline":false,"md5":"b23314d76d6ef77dad0b00eda85ed7e1","sha1":"8a4a99487f2cd3299d181141a0aeb4b47d814a59","sha256":"db2031f6a8cef1def057c7dd9e4545328ff5009cb6670f944dd40322078c09aa","sha512":"8c0d663288d4959ce3c329d8732c1dcde3e3616f935c6aec0db06a31ca4ef2cbbc12e5bb24523e186f1f5849f4eca694765181e9b01fe81173489fd2ad064e14","ssdeep":"","tlshash":"ccd0cd093d71d60886e211337c7f7521d1a16264650d53445735def9cb5069f2514f54","size":291,"data":"","first_seen":"2026-06-16T09:40:41.569162Z","last_seen":"2026-06-25T00:31:17.646573Z","times_seen":3133,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/pop5b/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-06-25T00:13:45.322641Z","times_seen":752924,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/pop5b/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-06-25T00:13:45.322641Z","times_seen":752924,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/pop5b/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"06b42d0b63d3587c345abff12585d32d","sha1":"bc222ef25e5535824ad32238cf21b1e414aaa1e2","sha256":"61b36e86b80ad8c19d2f32973808e48f49088a45dcfc6cb33e6615a46cc1a74f","sha512":"5b809470c35319e9a9d6be9377369da27891278de3e110f8a1b1981edd3bf6acbcb3052797979288c45cf9d623a57d6e6699b9650a434350f9a8325a834f6fdc","ssdeep":"3:N/BKL1X/TuE:eL1PTX","tlshash":"b45504f0545074741510dc10d1501415700f450010151401f05d04dd373004000d0545","size":1337359,"data":"","first_seen":"2026-06-18T16:02:55.920276Z","last_seen":"2026-06-18T16:02:55.920276Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"join-xrpfi.xyz/","fqdn":"join-xrpfi.xyz","domain":"join-xrpfi.xyz","tld":"xyz"},"ip":{"addr":"172.67.202.7","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"8addaf12126654161d765db878343ef9","sha1":"660b9cdb87894158361fb3562712c132f1b5aa5a","sha256":"a54e5db3b959cb3d2bc9f6427146d97959ae9c019687c8cd5b0cb5db4a6aead7","sha512":"f9cd6bac6ef0060944142adf15fdf5f3d67471680e2f80435b7ace1882f7f02b27f0a68edd2c7dc2babbcf6eb4fd1d7e1950798283eec3aeb2e145ebc10eaf15","ssdeep":"3:N/BKL1X/TuWn:eL1PTd","tlshash":"9f5504f05c4034741510dc10f15014157005450014150401f05d04dd373004000d1545","size":1337359,"data":"","first_seen":"2026-06-18T16:02:55.922542Z","last_seen":"2026-06-18T16:02:55.922542Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"join-xrpfi.xyz/","fqdn":"join-xrpfi.xyz","domain":"join-xrpfi.xyz","tld":"xyz"},"ip":{"addr":"172.67.202.7","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"6180ef8cd0e0858e2c1afbb879c84e54","sha1":"5fda537512412fc2c2d35da0f86c39ca32ff2eae","sha256":"3b458e7939f073f243700a84692f03921183de0bd1faad89dfb7ed03edc68d97","sha512":"e30858cb20532d1f3d491adc351983fe08579b637a5ebac8332b05999fd9172fbc1348b6023cfd7908f2fc7962f17bc6d2084c509235ee666067e9e647345029","ssdeep":"6144:YNtXiZ56iPvUgSn2QrIfVi+ByZNYgbxQmQ52MZoNiMbgrF9Qyl2f2jtVi+By/FZo:YNAMeXVJ9HaI","tlshash":"9285d4fb93aa1e3e88b72619dc3a6e1c54b64cb20a5ee05efd277544c57c2d12b5032c","size":1855963,"data":"","first_seen":"2026-06-18T16:02:55.925457Z","last_seen":"2026-06-18T16:02:55.925457Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"join-xrpfi.xyz/cdn-cgi/challenge-platform/h/b/orchestrate/chl_page/v1?ray=a0db82e8095856a8","fqdn":"join-xrpfi.xyz","domain":"join-xrpfi.xyz","tld":"xyz"},"ip":{"addr":"172.67.202.7","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"34998cbd5540bb158e839c51cda9432f","sha1":"d19b073a23aca8eed8fca9b385f2c935d50e9968","sha256":"c1fd86fe0fa29ddc192b1bf764ca49b123c40d7786e1139d4c732ab99d687c31","sha512":"8565ee9ba634cd677b13c693871eab3008ad045eb4ce7b5cf6cf21c318180edf61fed1cefcdf3874928269a7379258fc083b21a3d3c9c6222a7c01426dd7bfa0","ssdeep":"3072:VSC/vok2C5VroEc8VtDoz7HlIlsDbJz/Rpr8eB/94ol:VSC/vok2aVbtDGlIl8Nzb8eB/+y","tlshash":"9a04f8cd3bc5704a0382ab7902b77bd9713a5cc0012b283de441a5d4fdb2ba6a95f5dd","size":189813,"data":"","first_seen":"2026-06-18T16:02:55.738172Z","last_seen":"2026-06-18T16:02:55.738172Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"join-xrpfi.xyz/","fqdn":"join-xrpfi.xyz","domain":"join-xrpfi.xyz","tld":"xyz"},"ip":{"addr":"172.67.202.7","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"c8f3d9ff49a2dd22e2686be6dc482c96","sha1":"98f098df9fc50463bc068dc522fbbc756270e375","sha256":"620e3ad0f18626a7d9824560d830683a8e3f7ddcf49cf1ec27e4ccbffa97face","sha512":"3d8c0da71c30d2df47bce394f692e7d6c865f3be1cba358b44cfafdb97a1e8d93a09d7a27acafcc097c7c3aad9f776e76e1ee91137106fe18952a748d23692ee","ssdeep":"3:N/BKL1X/TlWTd:eL1PTlWR","tlshash":"fa5504d0544034fc1530dc10d150141550054540101d0401f05d04d5373004010d0d40","size":1337359,"data":"","first_seen":"2026-06-18T16:02:55.927579Z","last_seen":"2026-06-18T16:02:55.927579Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/pop5b/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-06-25T00:13:45.322641Z","times_seen":752924,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/pop5b/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"94081036cbf595a3dac383955367903b","sha1":"4c78fee58d05c79857142f6a1823b584e693d678","sha256":"a3c4f20a8b17293aceca90edf64056d45c645f5adc2d5c853448063f6fa56a8b","sha512":"99084ac603dabfdbf3736d9064ab97c259689afaf02fe04dccc45f4ed0dbb4be9af01b5e797fa80f5f6881c3f1f245f4b0d79fa6472f1eb8e2aa07f5404e5e69","ssdeep":"","tlshash":"64600000000000000000000cc00300003cc0003300cc0300c30c003000cc3cc0000000","size":13,"data":"","first_seen":"2026-04-23T17:24:48.314042Z","last_seen":"2026-06-25T00:17:21.592379Z","times_seen":54539,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/pop5b/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-06-25T00:13:45.322641Z","times_seen":752924,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"join-xrpfi.xyz/afd62231-8c1f-4d29-8be8-57cc2dfd5f81","fqdn":"join-xrpfi.xyz","domain":"join-xrpfi.xyz","tld":"xyz"},"ip":{"addr":"172.67.202.7","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"","is_inline":false,"md5":"b23314d76d6ef77dad0b00eda85ed7e1","sha1":"8a4a99487f2cd3299d181141a0aeb4b47d814a59","sha256":"db2031f6a8cef1def057c7dd9e4545328ff5009cb6670f944dd40322078c09aa","sha512":"8c0d663288d4959ce3c329d8732c1dcde3e3616f935c6aec0db06a31ca4ef2cbbc12e5bb24523e186f1f5849f4eca694765181e9b01fe81173489fd2ad064e14","ssdeep":"","tlshash":"ccd0cd093d71d60886e211337c7f7521d1a16264650d53445735def9cb5069f2514f54","size":291,"data":"","first_seen":"2026-06-16T09:40:41.569162Z","last_seen":"2026-06-25T00:31:17.646573Z","times_seen":3133,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/pop5b/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"5e7c751aaaeb37fc7999a59a5a9e96bf","sha1":"ab511e4cf762e35bfa24cf97cad7d6e518672597","sha256":"9c73a20e2f2403b510a100efe7758a7b281aa8e760cfcb976352a20e346dc991","sha512":"0ae4ec4ddf13986ddbbd0448885b2cd14bc3f4abaf37237e8a0d5b50d5a8b881fda1c8d52c6a4e81646d62a254827716a7f0e728fa363637187077a008d00b23","ssdeep":"3:N/BKL1X/TjdXS:eL1PTjVS","tlshash":"185504c0544034753510dc11f3501415d005450010153401f05f0cd5377004001d0540","size":1337359,"data":"","first_seen":"2026-06-18T16:02:55.937233Z","last_seen":"2026-06-18T16:02:55.937233Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/pop5b/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-06-25T00:13:45.322641Z","times_seen":752924,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/pop5b/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-06-25T00:13:45.322641Z","times_seen":752924,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/pop5b/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-06-25T00:13:45.322641Z","times_seen":752924,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/pop5b/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"93e354e833ee7b4feead7057a3f33168","sha1":"4025c763f11cdc2eef6318108989528620fef9e7","sha256":"80b90237b40178e74c34d6652d95b3918d01b603ba83f9dce47ba6b19343c245","sha512":"2b37a9bb6f2c3e2ad3624228638881eaeb961c98a31e60a424d9c6146f002a852cec318a17772a5be5015fd197ad4582b007eb0b15335ba6d25412b27b576c13","ssdeep":"","tlshash":"19600000c0303003000f0000f00000033cc000f0cccc0003030c00f000c000c0cc000c","size":13,"data":"","first_seen":"2026-04-23T17:24:48.301435Z","last_seen":"2026-06-25T00:17:21.565389Z","times_seen":54698,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/pop5b/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-06-25T00:13:45.322641Z","times_seen":752924,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/pop5b/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"cb5eacb9e68a2c30d2411c05bcb06343","sha1":"989e202865d46df0b8cd40c6e82b3c67657aeec6","sha256":"9ac4e06ffff4999a3ada141183a1e87fea9dd88edc3cdea8f834752298469567","sha512":"39b5cc6e6ae0cb1b9c87e8dd42f71bcd557cb8e543434d7ac988ca28170395bebd9adb590f822b946bfa51132014d7426d7dcd358717ea1ec9745af14d46f110","ssdeep":"3:N/BKL1X/TvUWV:eL1PTvUWV","tlshash":"2c5504c0544034743d10dc10d1501415f70d450010150401f05d44d737300c001d0540","size":1337359,"data":"","first_seen":"2026-06-18T16:02:55.939783Z","last_seen":"2026-06-18T16:02:55.939783Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"join-xrpfi.xyz/","fqdn":"join-xrpfi.xyz","domain":"join-xrpfi.xyz","tld":"xyz"},"ip":{"addr":"172.67.202.7","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"87d009c12700188ca356b560a266c543","sha1":"5d268fc97d13c91d370295583111a8f1ae2fc6bb","sha256":"5172c0be22348379f756715f123e721db2ddaf3c11452202f81dd65707516b86","sha512":"1b4fd67e5e8b2aaa913561b847bdc434810bd5bc0b9e58fdfb3a381ee8d9c756ee7b6a67046287b3dbb0265389f78ec156687c6e470241106cff80a3ef3fcc5b","ssdeep":"","tlshash":"ac80002200aa80a088a0228a0802220020ac00080a033be2200023280fa0e382320200","size":28,"data":"","first_seen":"2026-06-18T16:02:55.941437Z","last_seen":"2026-06-18T16:02:55.941437Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"log","text":"The next request for the Private Access Token challenge may return a 401 and show a warning in console.","filename":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/pop5b/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","line_number":0,"column_number":0},{"level":"debug","text":"","filename":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/pop5b/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","line_number":0,"column_number":0},{"level":"log","text":"map[actor:server1.conn0.watcher16.process8//obj177 class:RegExp displayString:/.*.*=.*/ extensible:true frozen:false isError:false ownPropertyLength:2 sealed:false type:object]","filename":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/pop5b/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","line_number":0,"column_number":0},{"level":"log","text":"map[actor:server1.conn0.watcher16.process8//obj180 class:BoundFunctionObject extensible:true frozen:false isError:false ownPropertyLength:3 preview:map[kind:Object ownProperties:map[toString:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher16.process8//obj181 class:BoundFunctionObject extensible:true frozen:false isError:false ownPropertyLength:2 sealed:false type:object] writable:true]] ownPropertiesLength:3] sealed:false type:object]","filename":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/pop5b/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","line_number":0,"column_number":0},{"level":"log","text":"map[actor:server1.conn0.watcher16.process8//obj184 class:HTMLAnchorElement contentDomReference:map[browsingContextId:1.5032385538e+10 id:0.1407270583077076] extensible:true frozen:false isError:false ownPropertyLength:1 preview:map[attributes:map[] attributesLength:0 isConnected:false kind:DOMNode nodeName:a nodeType:1] sealed:false type:object]","filename":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/pop5b/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","line_number":0,"column_number":0},{"level":"log","text":"map[actor:server1.conn0.watcher16.process8//obj179 class:RegExp displayString:/.*.*=.*/ extensible:true frozen:false isError:false ownPropertyLength:2 sealed:false type:object]","filename":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/pop5b/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","line_number":0,"column_number":0},{"level":"log","text":"map[actor:server1.conn0.watcher16.process8//obj182 class:BoundFunctionObject extensible:true frozen:false isError:false ownPropertyLength:3 preview:map[kind:Object ownProperties:map[toString:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher16.process8//obj183 class:BoundFunctionObject extensible:true frozen:false isError:false ownPropertyLength:2 sealed:false type:object] writable:true]] ownPropertiesLength:3] sealed:false type:object]","filename":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/pop5b/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","line_number":0,"column_number":0},{"level":"log","text":"map[actor:server1.conn0.watcher16.process8//obj185 class:HTMLAnchorElement contentDomReference:map[browsingContextId:1.5032385538e+10 id:0.1407270583077076] extensible:true frozen:false isError:false ownPropertyLength:1 preview:map[attributes:map[] attributesLength:0 isConnected:false kind:DOMNode nodeName:a nodeType:1] sealed:false type:object]","filename":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/pop5b/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","line_number":0,"column_number":0},{"level":"debug","text":"0","filename":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/pop5b/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","line_number":0,"column_number":0},{"level":"error","text":"0","filename":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/pop5b/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","line_number":0,"column_number":0},{"level":"info","text":"0","filename":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/pop5b/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","line_number":0,"column_number":0},{"level":"log","text":"0","filename":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/pop5b/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","line_number":0,"column_number":0},{"level":"warn","text":"0","filename":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/pop5b/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","line_number":0,"column_number":0},{"level":"debug","text":"0","filename":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/pop5b/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","line_number":0,"column_number":0},{"level":"error","text":"0","filename":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/pop5b/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","line_number":0,"column_number":0},{"level":"info","text":"0","filename":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/pop5b/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","line_number":0,"column_number":0},{"level":"log","text":"0","filename":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/pop5b/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","line_number":0,"column_number":0},{"level":"warn","text":"0","filename":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/pop5b/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","line_number":0,"column_number":0},{"level":"debug","text":"","filename":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/pop5b/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","line_number":0,"column_number":0},{"level":"log","text":"[ EL CE ] : ok","filename":"https://noteworthy-lox.xyz/64878V0t5P2V7DK8mVG87.js line 20 \u003e Function","line_number":0,"column_number":0},{"level":"log","text":"[ EL ] : Installation started","filename":"https://noteworthy-lox.xyz/64878V0t5P2V7DK8mVG87.js line 20 \u003e Function","line_number":0,"column_number":0},{"level":"log","text":"[ EL ] : Finished loading","filename":"https://noteworthy-lox.xyz/64878V0t5P2V7DK8mVG87.js line 20 \u003e Function","line_number":0,"column_number":0},{"level":"log","text":"map[actor:server1.conn0.watcher16.process9//obj35 class:HTMLDivElement contentDomReference:map[browsingContextId:13 id:0.7997119368865451] extensible:true frozen:false isError:false ownPropertyLength:1 preview:map[attributes:map[] attributesLength:0 isConnected:false kind:DOMNode nodeName:div nodeType:1] sealed:false type:object]","filename":"https://esm.sh/disable-devtool@0.3.9/es2022/disable-devtool.mjs","line_number":0,"column_number":0},{"level":"log","text":"map[actor:server1.conn0.watcher16.process9//obj36 class:Date extensible:true frozen:false isError:false ownPropertyLength:1 preview:map[timestamp:1.781798487121e+12] sealed:false type:object]","filename":"https://esm.sh/disable-devtool@0.3.9/es2022/disable-devtool.mjs","line_number":0,"column_number":0},{"level":"log","text":"map[actor:server1.conn0.watcher16.process9//obj37 class:Function displayName:me\u003c/\u003c/value/this.func extensible:true frozen:false isAsync:false isClassConstructor:false isError:false isGenerator:false location:map[column:11976 line:3 url:https://esm.sh/disable-devtool@0.3.9/es2022/disable-devtool.mjs] ownPropertyLength:4 parameterNames:[] sealed:false type:object]","filename":"https://esm.sh/disable-devtool@0.3.9/es2022/disable-devtool.mjs","line_number":0,"column_number":0},{"level":"log","text":"map[actor:server1.conn0.watcher16.process9//obj99 class:Array extensible:true frozen:false isError:false ownPropertyLength:51 preview:map[items:[map[actor:server1.conn0.watcher16.process9//obj100 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher16.process9//obj101 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher16.process9//obj102 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher16.process9//obj103 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher16.process9//obj104 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher16.process9//obj105 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher16.process9//obj106 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher16.process9//obj107 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher16.process9//obj108 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher16.process9//obj109 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object]] kind:ArrayLike length:50] sealed:false type:object]","filename":"https://esm.sh/disable-devtool@0.3.9/es2022/disable-devtool.mjs","line_number":0,"column_number":0},{"level":"log","text":"map[actor:server1.conn0.watcher16.process9//obj171 class:Array extensible:true frozen:false isError:false ownPropertyLength:51 preview:map[items:[map[actor:server1.conn0.watcher16.process9//obj172 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher16.process9//obj173 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher16.process9//obj174 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher16.process9//obj175 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher16.process9//obj176 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher16.process9//obj177 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher16.process9//obj178 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher16.process9//obj179 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher16.process9//obj180 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher16.process9//obj181 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object]] kind:ArrayLike length:50] sealed:false type:object]","filename":"https://esm.sh/disable-devtool@0.3.9/es2022/disable-devtool.mjs","line_number":0,"column_number":0},{"level":"log","text":"map[actor:server1.conn0.watcher16.process9//obj243 class:Array extensible:true frozen:false isError:false ownPropertyLength:51 preview:map[items:[map[actor:server1.conn0.watcher16.process9//obj244 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher16.process9//obj245 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher16.process9//obj246 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher16.process9//obj247 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher16.process9//obj248 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher16.process9//obj249 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher16.process9//obj250 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher16.process9//obj251 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher16.process9//obj252 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher16.process9//obj253 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object]] kind:ArrayLike length:50] sealed:false type:object]","filename":"https://esm.sh/disable-devtool@0.3.9/es2022/disable-devtool.mjs","line_number":0,"column_number":0},{"level":"warn","text":"You don't have permission to use DEVTOOL!【type = 6】","filename":"https://esm.sh/disable-devtool@0.3.9/es2022/disable-devtool.mjs","line_number":0,"column_number":0},{"level":"log","text":"map[actor:server1.conn0.watcher16.process9//obj254 class:HTMLDivElement contentDomReference:map[browsingContextId:13 id:0.7997119368865451] extensible:true frozen:false isError:false ownPropertyLength:1 preview:map[attributes:map[] attributesLength:0 isConnected:false kind:DOMNode nodeName:div nodeType:1] sealed:false type:object]","filename":"https://esm.sh/disable-devtool@0.3.9/es2022/disable-devtool.mjs","line_number":0,"column_number":0},{"level":"log","text":"map[actor:server1.conn0.watcher16.process9//obj255 class:Date extensible:true frozen:false isError:false ownPropertyLength:1 preview:map[timestamp:1.781798487121e+12] sealed:false type:object]","filename":"https://esm.sh/disable-devtool@0.3.9/es2022/disable-devtool.mjs","line_number":0,"column_number":0},{"level":"log","text":"map[actor:server1.conn0.watcher16.process9//obj256 class:Function displayName:me\u003c/\u003c/value/this.func extensible:true frozen:false isAsync:false isClassConstructor:false isError:false isGenerator:false location:map[column:11976 line:3 url:https://esm.sh/disable-devtool@0.3.9/es2022/disable-devtool.mjs] ownPropertyLength:4 parameterNames:[] sealed:false type:object]","filename":"https://esm.sh/disable-devtool@0.3.9/es2022/disable-devtool.mjs","line_number":0,"column_number":0},{"level":"log","text":"map[actor:server1.conn0.watcher16.process9//obj318 class:Array extensible:true frozen:false isError:false ownPropertyLength:51 preview:map[items:[map[actor:server1.conn0.watcher16.process9//obj319 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher16.process9//obj320 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher16.process9//obj321 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher16.process9//obj322 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher16.process9//obj323 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher16.process9//obj324 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher16.process9//obj325 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher16.process9//obj326 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher16.process9//obj327 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher16.process9//obj328 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object]] kind:ArrayLike length:50] sealed:false type:object]","filename":"https://esm.sh/disable-devtool@0.3.9/es2022/disable-devtool.mjs","line_number":0,"column_number":0},{"level":"warn","text":"You don't have permission to use DEVTOOL!【type = 6】","filename":"https://esm.sh/disable-devtool@0.3.9/es2022/disable-devtool.mjs","line_number":0,"column_number":0},{"level":"log","text":"map[actor:server1.conn0.watcher16.process9//obj329 class:HTMLDivElement contentDomReference:map[browsingContextId:13 id:0.7997119368865451] extensible:true frozen:false isError:false ownPropertyLength:1 preview:map[attributes:map[] attributesLength:0 isConnected:false kind:DOMNode nodeName:div nodeType:1] sealed:false type:object]","filename":"https://esm.sh/disable-devtool@0.3.9/es2022/disable-devtool.mjs","line_number":0,"column_number":0},{"level":"log","text":"map[actor:server1.conn0.watcher16.process9//obj330 class:Date extensible:true frozen:false isError:false ownPropertyLength:1 preview:map[timestamp:1.781798487121e+12] sealed:false type:object]","filename":"https://esm.sh/disable-devtool@0.3.9/es2022/disable-devtool.mjs","line_number":0,"column_number":0},{"level":"log","text":"map[actor:server1.conn0.watcher16.process9//obj331 class:Function displayName:me\u003c/\u003c/value/this.func extensible:true frozen:false isAsync:false isClassConstructor:false isError:false isGenerator:false location:map[column:11976 line:3 url:https://esm.sh/disable-devtool@0.3.9/es2022/disable-devtool.mjs] ownPropertyLength:4 parameterNames:[] sealed:false type:object]","filename":"https://esm.sh/disable-devtool@0.3.9/es2022/disable-devtool.mjs","line_number":0,"column_number":0},{"level":"log","text":"map[actor:server1.conn0.watcher16.process9//obj393 class:Array extensible:true frozen:false isError:false ownPropertyLength:51 preview:map[items:[map[actor:server1.conn0.watcher16.process9//obj394 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher16.process9//obj395 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher16.process9//obj396 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher16.process9//obj397 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher16.process9//obj398 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher16.process9//obj399 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher16.process9//obj400 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher16.process9//obj401 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher16.process9//obj402 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher16.process9//obj403 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object]] kind:ArrayLike length:50] sealed:false type:object]","filename":"https://esm.sh/disable-devtool@0.3.9/es2022/disable-devtool.mjs","line_number":0,"column_number":0},{"level":"warn","text":"You don't have permission to use DEVTOOL!【type = 6】","filename":"https://esm.sh/disable-devtool@0.3.9/es2022/disable-devtool.mjs","line_number":0,"column_number":0}]},"http":[{"url":{"schema":"https","addr":"join-xrpfi.xyz/favicon.ico","fqdn":"join-xrpfi.xyz","domain":"join-xrpfi.xyz","tld":"xyz"},"ip":{"addr":"172.67.202.7","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://join-xrpfi.xyz/","date":"2026-06-18T16:01:24.708Z","timestamp":1781798484708,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"join-xrpfi.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Jun 2026 22:20:30 GMT","end":"Mon, 07 Sep 2026 23:18:55 GMT"},"fingerprint":{"sha1":"BD:76:DB:17:19:68:29:BF:5D:8F:84:8A:F4:BC:DC:4F:63:81:CE:5A","sha256":"7A:F8:07:B7:03:C9:82:FD:B6:4F:E8:06:FA:66:A4:93:D8:74:F5:5C:00:DD:5B:A6:8B:52:C4:61:EA:68:C1:D4"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: join-xrpfi.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://join-xrpfi.xyz/\r\nCookie: cf_clearance=3sQx4O48cjL3MFPGKWSZ61gbAJ0Fsb19CV5Td5ovrfs-1781798479-1.2.1.1-6InG6zHSWZQ9klTR0SWrkCCd2amThW3ZvgBV9QX.YygxniZ2gero7Sv0k_PQyL_pw4b46hxD4mkmSOyphsEoHzbXHXfFOOQs.7TR0_V0LJaZHtTwFhzQoJfxt3ekxBzXv3GW2lfXX18wX5JtUEGQs_uPdClhd0gEnyuawbiC4ZvF.yis7gd0CMoixQzWLguFvYW35guV28_t3b0VHPoaNB1pvLiuIPvfAR.LBgS4tMLTpQ7cvnZyYUpgwznXJdLv51P17bJB4V1UgefdTcvYTBtsln1W6WbJQ3YD6IcexX65CeKH04k92ALfOTwXTrQmnbi48XXvC8qmg0jBdlKn1_mEzvupFWiHx0PPaIei6u2f14bt_5seBIYbd4GWWFhHxz9asbtFuh6MuYlyQwJ7vQJvOleaURzAiWPjl2sq6c7Keyh2CXDT.UnjdlME5nTFJJxlJjcG_UV162r4Hmj5EbldbS3j2YEbB8.z1CY8gAouDRomY2Pmc87xzeTOewza\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: image/x-icon\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QwvDC9OdDHAw03FzhfwEXFZV1roZf6kIpcA0zvphIZBW2OkWN4klcGOgSmq3Rmvs0McP01LQSRai1VJOrlWMppfoBORTshOVSQ1NCE7Ji2LoNofcnuLqVmsfKE8w0qe65g%3D%3D\"}]}\r\nlast-modified: Tue, 09 Jun 2026 23:23:59 GMT\r\ndate: Thu, 18 Jun 2026 16:01:24 GMT\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 10\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\netag: W/\"dc270172d1648eb90a7ac9e496aaa7ec\"\r\npriority: u=6,i=?0\r\ncf-ray: a0db83317bb956a8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15406,"size_decoded":3479,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 3 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel","md5":"dc270172d1648eb90a7ac9e496aaa7ec","sha1":"4c6c6b1d4815a5022e215fe4667fe55ff908b13f","sha256":"d4e950e20f2728c5addc06853e7802699855c3ff9166375bea74da43e214d99b","sha512":"829338b30e6435447174ad43e0ff80659a93bd50aa00f135ac739203efb8e6b471864222250f2180af429b8396201611fdfbf75a6a2c252ef45a93a4f692640f","ssdeep":"192:l8WBBBBBB3vjlZXBbxEB+///////////7AFMCpQ:jbrXXEcd","tlshash":"bc62795166299107f9ab803ab34adb6af27ffec5e91b15261b407129103e09270fdf17","first_seen":"2026-01-21T22:11:30.922214Z","last_seen":"2026-06-24T22:01:51.066722Z","times_seen":120,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"join-xrpfi.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"join-xrpfi.xyz/close.svg","fqdn":"join-xrpfi.xyz","domain":"join-xrpfi.xyz","tld":"xyz"},"ip":{"addr":"172.67.202.7","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://join-xrpfi.xyz/","date":"2026-06-18T16:01:20.334Z","timestamp":1781798480334,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"join-xrpfi.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Jun 2026 22:20:30 GMT","end":"Mon, 07 Sep 2026 23:18:55 GMT"},"fingerprint":{"sha1":"BD:76:DB:17:19:68:29:BF:5D:8F:84:8A:F4:BC:DC:4F:63:81:CE:5A","sha256":"7A:F8:07:B7:03:C9:82:FD:B6:4F:E8:06:FA:66:A4:93:D8:74:F5:5C:00:DD:5B:A6:8B:52:C4:61:EA:68:C1:D4"}}},"request":{"raw":"GET /close.svg HTTP/1.1\r\nHost: join-xrpfi.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://join-xrpfi.xyz/\r\nCookie: cf_clearance=3sQx4O48cjL3MFPGKWSZ61gbAJ0Fsb19CV5Td5ovrfs-1781798479-1.2.1.1-6InG6zHSWZQ9klTR0SWrkCCd2amThW3ZvgBV9QX.YygxniZ2gero7Sv0k_PQyL_pw4b46hxD4mkmSOyphsEoHzbXHXfFOOQs.7TR0_V0LJaZHtTwFhzQoJfxt3ekxBzXv3GW2lfXX18wX5JtUEGQs_uPdClhd0gEnyuawbiC4ZvF.yis7gd0CMoixQzWLguFvYW35guV28_t3b0VHPoaNB1pvLiuIPvfAR.LBgS4tMLTpQ7cvnZyYUpgwznXJdLv51P17bJB4V1UgefdTcvYTBtsln1W6WbJQ3YD6IcexX65CeKH04k92ALfOTwXTrQmnbi48XXvC8qmg0jBdlKn1_mEzvupFWiHx0PPaIei6u2f14bt_5seBIYbd4GWWFhHxz9asbtFuh6MuYlyQwJ7vQJvOleaURzAiWPjl2sq6c7Keyh2CXDT.UnjdlME5nTFJJxlJjcG_UV162r4Hmj5EbldbS3j2YEbB8.z1CY8gAouDRomY2Pmc87xzeTOewza\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: image/svg+xml\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Tue, 09 Jun 2026 23:23:59 GMT\r\ndate: Thu, 18 Jun 2026 16:01:20 GMT\r\nserver: cloudflare\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uwEEAFMSFygzx3pdQ%2BbjGdok437gxU0Xb%2BpUNodQLN%2FGA9HAIUhb69BSrgg5oMgEdCtNpqDBHmddnDwjOqiwcjp3oX9DdWUrgpdDNwwg8wCdyv3GJGy1WrYoW7PMwruNig%3D%3D\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\netag: W/\"463a29230026f25d47804e96c507f787\"\r\ncf-ray: a0db83161ae256a8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1345,"size_decoded":1378,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"463a29230026f25d47804e96c507f787","sha1":"f50e0eac87bb8f5cff8f7d8ccb5d72aedda7e78d","sha256":"a049e1abe441835a2bcf35258936072189a0a52d0000c4ed2094e59d2afd189b","sha512":"83f065b7b10e906ef8bf40dd907da4f0eb0f4c28ee2d8b44e418b15f1c06884a579957b2bc27418fac5759825d394819ff0ac48d784b9f05564b8edab25d9426","ssdeep":"","tlshash":"2c21e5fc520853f49d587e98a8623077954514bbbf9db8c8928c847788c53dd4ec8d58","first_seen":"2023-04-17T01:45:40Z","last_seen":"2026-06-25T00:24:33.48973Z","times_seen":61157,"resource_available":false,"data":null}},"time_used":219,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":219,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"join-xrpfi.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"join-xrpfi.xyz/home_providers_desktop.mov","fqdn":"join-xrpfi.xyz","domain":"join-xrpfi.xyz","tld":"xyz"},"ip":{"addr":"172.67.202.7","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://join-xrpfi.xyz/","date":"2026-06-18T16:01:20.539Z","timestamp":1781798480539,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"join-xrpfi.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Jun 2026 22:20:30 GMT","end":"Mon, 07 Sep 2026 23:18:55 GMT"},"fingerprint":{"sha1":"BD:76:DB:17:19:68:29:BF:5D:8F:84:8A:F4:BC:DC:4F:63:81:CE:5A","sha256":"7A:F8:07:B7:03:C9:82:FD:B6:4F:E8:06:FA:66:A4:93:D8:74:F5:5C:00:DD:5B:A6:8B:52:C4:61:EA:68:C1:D4"}}},"request":{"raw":"GET /home_providers_desktop.mov HTTP/1.1\r\nHost: join-xrpfi.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nRange: bytes=0-\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://join-xrpfi.xyz/\r\nCookie: cf_clearance=3sQx4O48cjL3MFPGKWSZ61gbAJ0Fsb19CV5Td5ovrfs-1781798479-1.2.1.1-6InG6zHSWZQ9klTR0SWrkCCd2amThW3ZvgBV9QX.YygxniZ2gero7Sv0k_PQyL_pw4b46hxD4mkmSOyphsEoHzbXHXfFOOQs.7TR0_V0LJaZHtTwFhzQoJfxt3ekxBzXv3GW2lfXX18wX5JtUEGQs_uPdClhd0gEnyuawbiC4ZvF.yis7gd0CMoixQzWLguFvYW35guV28_t3b0VHPoaNB1pvLiuIPvfAR.LBgS4tMLTpQ7cvnZyYUpgwznXJdLv51P17bJB4V1UgefdTcvYTBtsln1W6WbJQ3YD6IcexX65CeKH04k92ALfOTwXTrQmnbi48XXvC8qmg0jBdlKn1_mEzvupFWiHx0PPaIei6u2f14bt_5seBIYbd4GWWFhHxz9asbtFuh6MuYlyQwJ7vQJvOleaURzAiWPjl2sq6c7Keyh2CXDT.UnjdlME5nTFJJxlJjcG_UV162r4Hmj5EbldbS3j2YEbB8.z1CY8gAouDRomY2Pmc87xzeTOewza\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\ndate: Thu, 18 Jun 2026 16:01:20 GMT\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=B9WJXyyzbN0fTmhuETzV9qg5xDEL4qI%2FmrMn2n8Dz67GF2WYFBx%2FkE06aZ%2FdmvKg%2FxKHQt3hAKctAcYOk%2FizdJBqHccPnYZ3%2BoAVmMedsQrCdxkLtkCYQGPtGvFhdElQog%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a0db83176aef56a8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":534,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-25T00:14:26.040585Z","times_seen":16694613,"resource_available":true,"data":null}},"time_used":307,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":307,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"join-xrpfi.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"flare.network/_next/image?url=%2Fapi%2Fmedia%2Ffile%2FLayerZero_Logo_Full%25201.png\u0026w=256\u0026q=75","fqdn":"flare.network","domain":"flare.network","tld":"network"},"ip":{"addr":"104.18.2.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://join-xrpfi.xyz/","date":"2026-06-18T16:01:20.872Z","timestamp":1781798480872,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flare.network","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 30 May 2026 18:03:39 GMT","end":"Fri, 28 Aug 2026 19:03:19 GMT"},"fingerprint":{"sha1":"47:88:73:1C:C5:8C:7F:72:48:F5:86:52:5D:5A:F4:70:B0:E8:E7:E2","sha256":"5B:48:88:E3:A7:53:7C:1D:13:74:99:9E:60:33:D3:CC:4F:2C:01:E6:E6:72:E1:B9:AD:AE:1E:BF:FD:2B:82:93"}}},"request":{"raw":"GET /_next/image?url=%2Fapi%2Fmedia%2Ffile%2FLayerZero_Logo_Full%25201.png\u0026w=256\u0026q=75 HTTP/1.1\r\nHost: flare.network\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://join-xrpfi.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Thu, 18 Jun 2026 16:01:20 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1208\r\ncache-control: public, max-age=604800\r\nstrict-transport-security: max-age=15552000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: no-referrer-when-downgrade\r\npermissions-policy: geolocation=(), microphone=(), camera=()\r\naccept-ch: Sec-CH-Prefers-Color-Scheme\r\nvary: Accept\r\ncritical-ch: Sec-CH-Prefers-Color-Scheme\r\nx-powered-by: Next.js, Payload\r\netag: WX3Dz4sij4FgxSfCx2XaEGgkDvWSo0dyJ1GA6oh9bTs\r\ncontent-disposition: attachment; filename=\"LayerZero_Logo_Full%201.webp\"; filename*=UTF-8''LayerZero_Logo_Full%25201.webp\r\ncontent-security-policy: script-src 'none'; frame-src 'none'; sandbox;\r\nx-nextjs-cache: HIT\r\nvia: 1.1 google\r\naccept-ranges: bytes\r\nset-cookie: __cf_bm=c5VXeHNN1hFDQOOGZqorWmqKhizpITiWBSR1lD0bnD0-1781798480.9044428-1.0.1.1-VYdR8s_mrzIP3BtWuS1CGP3RUXF6cc3GMqQ1h1I7KuSeWqFdswetPATQG6QcMwOFC364fa.taabbJhfHy3QWj8uhqRX.49Zc3fxkcFLCl9vd0_o2WRvV58ae4PUg8Oce; HttpOnly; SameSite=None; Secure; Path=/; Domain=flare.network; Expires=Thu, 18 Jun 2026 16:31:20 GMT\r\nage: 112358\r\nexpires: Thu, 25 Jun 2026 16:01:20 GMT\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\ncf-ray: a0db8319afd056c5-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Webpack","description":"Webpack is an open-source JavaScript module bundler.","website":"https://webpack.js.org/","common_platform_enumeration":"","icon":"Webpack.svg","categories":["Miscellaneous"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Next.js","description":"Next.js is a React framework for developing single page Javascript applications.","website":"https://nextjs.org","common_platform_enumeration":"cpe:2.3:a:zeit:next.js:*:*:*:*:*:*:*:*","icon":"Next.js.svg","categories":["JavaScript frameworks","Web frameworks"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"React","description":"React is an open-source JavaScript library for building user interfaces or UI components.","website":"https://reactjs.org","common_platform_enumeration":"cpe:2.3:a:facebook:react:*:*:*:*:*:*:*:*","icon":"React.svg","categories":["JavaScript frameworks"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":1208,"size_decoded":2515,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"57a6e0ccc397ea7b740a6e0405bba3b5","sha1":"3cbac7d5fa1419b3c61f66c311b3eee7b9eff85f","sha256":"597dc3cf8b228f8160c527c2c765da1068240ef592a34772275180ea887d6d3b","sha512":"61719d11d2ddf9c20278344f009366debeeba583705f33c9fb1b95c9b627ee62c33a662c261180173bfdae490d645c623029c801b9f96db288612a43d9326ae3","ssdeep":"","tlshash":"5021b45503021db0c8dcffe059c2685fa17be5f91300ac195740b0a82ad41bee4ff82e","first_seen":"2025-08-11T21:39:04.775323Z","last_seen":"2026-06-19T07:14:12.362774Z","times_seen":30,"resource_available":false,"data":null}},"time_used":57,"timings":{"blocked":-1,"dns":7,"connect":2,"send":0,"wait":30,"receive":0,"ssl":17},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"join-xrpfi.xyz/d5170cc3037aa5ea.css","fqdn":"join-xrpfi.xyz","domain":"join-xrpfi.xyz","tld":"xyz"},"ip":{"addr":"172.67.202.7","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://join-xrpfi.xyz/","date":"2026-06-18T16:01:20.265Z","timestamp":1781798480265,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"join-xrpfi.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Jun 2026 22:20:30 GMT","end":"Mon, 07 Sep 2026 23:18:55 GMT"},"fingerprint":{"sha1":"BD:76:DB:17:19:68:29:BF:5D:8F:84:8A:F4:BC:DC:4F:63:81:CE:5A","sha256":"7A:F8:07:B7:03:C9:82:FD:B6:4F:E8:06:FA:66:A4:93:D8:74:F5:5C:00:DD:5B:A6:8B:52:C4:61:EA:68:C1:D4"}}},"request":{"raw":"GET /d5170cc3037aa5ea.css HTTP/1.1\r\nHost: join-xrpfi.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://join-xrpfi.xyz/\r\nCookie: cf_clearance=3sQx4O48cjL3MFPGKWSZ61gbAJ0Fsb19CV5Td5ovrfs-1781798479-1.2.1.1-6InG6zHSWZQ9klTR0SWrkCCd2amThW3ZvgBV9QX.YygxniZ2gero7Sv0k_PQyL_pw4b46hxD4mkmSOyphsEoHzbXHXfFOOQs.7TR0_V0LJaZHtTwFhzQoJfxt3ekxBzXv3GW2lfXX18wX5JtUEGQs_uPdClhd0gEnyuawbiC4ZvF.yis7gd0CMoixQzWLguFvYW35guV28_t3b0VHPoaNB1pvLiuIPvfAR.LBgS4tMLTpQ7cvnZyYUpgwznXJdLv51P17bJB4V1UgefdTcvYTBtsln1W6WbJQ3YD6IcexX65CeKH04k92ALfOTwXTrQmnbi48XXvC8qmg0jBdlKn1_mEzvupFWiHx0PPaIei6u2f14bt_5seBIYbd4GWWFhHxz9asbtFuh6MuYlyQwJ7vQJvOleaURzAiWPjl2sq6c7Keyh2CXDT.UnjdlME5nTFJJxlJjcG_UV162r4Hmj5EbldbS3j2YEbB8.z1CY8gAouDRomY2Pmc87xzeTOewza\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/css;charset=utf-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Tue, 09 Jun 2026 23:23:59 GMT\r\ndate: Thu, 18 Jun 2026 16:01:20 GMT\r\nserver: cloudflare\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7bSBGodr%2BIfeKHtEkae0hxC6XXOvBAlgRRfJge6oVXkPD84%2BMoaGKwRn%2BO2OjYFpRNZCSNwouls2Z0V8%2F%2BhP7DDqxlR1MOqeB1ai0Iqfp6go5mF6Lh%2B1%2B51eUqBo4ZzIfg%3D%3D\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\netag: W/\"476e8950a1e70e093e13ef6cc4d9b5cb\"\r\ncf-ray: a0db8315aad756a8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3737,"size_decoded":1737,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (3736)","md5":"476e8950a1e70e093e13ef6cc4d9b5cb","sha1":"1032f7332b6bbd9ab2f40a9b6b6c9f25c95948e0","sha256":"544a2d4c3c7dd9d002fbc661ad37e3bea8e4e2a8726a3157eb6041a3660bd0df","sha512":"38690ab286c3973e363a3ad99f94b05656251fe92ef482cf614ca233f23695b9587bc0c3d76ed0474f920ffdff97db2cedab032fae5e4d1a2f05f12b6b325452","ssdeep":"","tlshash":"ab71bf73ea35e028f2268d573782755e17089876649787b5ee33ed0dc8e37b31212b08","first_seen":"2026-04-24T15:23:41.471553Z","last_seen":"2026-06-19T07:14:12.326289Z","times_seen":20,"resource_available":false,"data":null}},"time_used":169,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":169,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"join-xrpfi.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"join-xrpfi.xyz/home-page-landing-big-5.webp","fqdn":"join-xrpfi.xyz","domain":"join-xrpfi.xyz","tld":"xyz"},"ip":{"addr":"172.67.202.7","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://join-xrpfi.xyz/","date":"2026-06-18T16:01:20.868Z","timestamp":1781798480868,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"join-xrpfi.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Jun 2026 22:20:30 GMT","end":"Mon, 07 Sep 2026 23:18:55 GMT"},"fingerprint":{"sha1":"BD:76:DB:17:19:68:29:BF:5D:8F:84:8A:F4:BC:DC:4F:63:81:CE:5A","sha256":"7A:F8:07:B7:03:C9:82:FD:B6:4F:E8:06:FA:66:A4:93:D8:74:F5:5C:00:DD:5B:A6:8B:52:C4:61:EA:68:C1:D4"}}},"request":{"raw":"GET /home-page-landing-big-5.webp HTTP/1.1\r\nHost: join-xrpfi.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://join-xrpfi.xyz/\r\nCookie: cf_clearance=3sQx4O48cjL3MFPGKWSZ61gbAJ0Fsb19CV5Td5ovrfs-1781798479-1.2.1.1-6InG6zHSWZQ9klTR0SWrkCCd2amThW3ZvgBV9QX.YygxniZ2gero7Sv0k_PQyL_pw4b46hxD4mkmSOyphsEoHzbXHXfFOOQs.7TR0_V0LJaZHtTwFhzQoJfxt3ekxBzXv3GW2lfXX18wX5JtUEGQs_uPdClhd0gEnyuawbiC4ZvF.yis7gd0CMoixQzWLguFvYW35guV28_t3b0VHPoaNB1pvLiuIPvfAR.LBgS4tMLTpQ7cvnZyYUpgwznXJdLv51P17bJB4V1UgefdTcvYTBtsln1W6WbJQ3YD6IcexX65CeKH04k92ALfOTwXTrQmnbi48XXvC8qmg0jBdlKn1_mEzvupFWiHx0PPaIei6u2f14bt_5seBIYbd4GWWFhHxz9asbtFuh6MuYlyQwJ7vQJvOleaURzAiWPjl2sq6c7Keyh2CXDT.UnjdlME5nTFJJxlJjcG_UV162r4Hmj5EbldbS3j2YEbB8.z1CY8gAouDRomY2Pmc87xzeTOewza\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: image/webp\r\netag: \"381eb073afaa8b27620d005c6765f4c0\"\r\nlast-modified: Tue, 09 Jun 2026 23:24:00 GMT\r\ndate: Thu, 18 Jun 2026 16:01:21 GMT\r\nserver: cloudflare\r\npriority: u=5,i\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=M8xrQaGiBj5i%2FyU6k3fDEaBND6K3w2bm%2Bmlrz8sRNHHFGcm15Ou2dk4bQUt3LRBnBSYeeD7BTZw45pj2hQASexOCXLjEHXSn5i7W%2BYwQb6g5lnmQs5hJ0zdm555B6a9t2w%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a0db83197aff56a8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":247196,"size_decoded":247862,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"381eb073afaa8b27620d005c6765f4c0","sha1":"1e43306454ffff3774fb6cc01e5daac43061746d","sha256":"bda8027aa589340dc634d185006f96ba5fdf8bf5c9b9bd5f176a4b6f0242f8ae","sha512":"f36780edf69b8e4065f80585f3c1eca76a96347ce21c1586d4a2ead2fb5aeaacff6cc6880891663d2dbdcbb07b3f4ae1c61a79bf399f2c3a6c99c580fbfff2fe","ssdeep":"6144:Q35zd75lysY/PjTcB1ToAnF2q1/pXuFiT6WQ:C95lypfUpoAnF2q7uFiT6WQ","tlshash":"be341349fbeda594567f7e313fe3e0576d8da54302c369746339813b00a85a6fe0a2c8","first_seen":"2026-04-24T15:23:41.476188Z","last_seen":"2026-06-19T07:14:12.384833Z","times_seen":38,"resource_available":false,"data":null}},"time_used":612,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":262,"receive":350,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"join-xrpfi.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"theajack.github.io/disable-devtool/404.html?h=join-xrpfi.xyz","fqdn":"theajack.github.io","domain":"theajack.github.io","tld":"github.io"},"ip":{"addr":"185.199.109.153","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-06-18T16:01:28.624Z","timestamp":1781798488624,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.github.io","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 06 Apr 2026 23:32:36 GMT","end":"Sun, 05 Jul 2026 23:32:35 GMT"},"fingerprint":{"sha1":"18:DE:96:E8:3D:99:B2:8A:0C:D1:0C:48:78:BD:6A:14:6A:05:25:60","sha256":"EA:69:BC:71:1C:B9:D4:56:98:D2:FD:AA:48:54:D7:DC:08:6A:CD:3A:9C:35:01:64:90:9B:68:8A:C7:C0:63:1F"}}},"request":{"raw":"GET /disable-devtool/404.html?h=join-xrpfi.xyz HTTP/1.1\r\nHost: theajack.github.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://join-xrpfi.xyz/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: GitHub.com\r\ncontent-type: text/html; charset=utf-8\r\nlast-modified: Sat, 17 Jan 2026 15:12:08 GMT\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=31556952\r\netag: W/\"696ba6c8-484c\"\r\nexpires: Sat, 06 Jun 2026 06:48:45 GMT\r\ncache-control: max-age=600\r\ncontent-encoding: gzip\r\nx-proxy-cache: MISS\r\nx-github-request-id: 72CE:32F72F:CD8A0:E3BFB:6A23C074\r\naccept-ranges: bytes\r\nage: 94\r\ndate: Thu, 18 Jun 2026 16:01:28 GMT\r\nvia: 1.1 varnish\r\nx-served-by: cache-bma-essb1270065-BMA\r\nx-cache: HIT\r\nx-cache-hits: 0\r\nx-timer: S1781798489.671609,VS0,VE1\r\nvary: Accept-Encoding\r\nx-fastly-request-id: 34af8ecaaa1c4e01f05d87d23ee5270473636424\r\ncontent-length: 4027\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"GitHub Pages","description":"GitHub Pages is a static site hosting service.","website":"https://pages.github.com/","common_platform_enumeration":"","icon":"GitHub.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Fastly","description":"Fastly is a cloud computing services provider. Fastly's cloud platform provides a content delivery network, Internet security services, load balancing, and video \u0026 streaming services.","website":"https://www.fastly.com","common_platform_enumeration":"","icon":"Fastly.svg","categories":["CDN"]}],"data":{"size":18508,"size_decoded":4740,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"ba7bc124e45b5de4dabe17461eb604e4","sha1":"02aa053b950ee36fc8b02ff640904f4146726f66","sha256":"0bcecb09e566fdc81d31246835830ce9a732df9a4d6f6c1c88b54c63e253e5e0","sha512":"4ddb53e2423489fe17d133bdb9a71a233c44da3cd03b1641b958d715d02453a8cda55171ae1b9c9e70cd0de0e29f8176ab5c11db71116a7b11208e4f9b1b0dd4","ssdeep":"192:QniKZyNy339QQbxzAH1d6+clwnEoUSH0MWqeKgl4uoPYrekgCjc:Qnn9CVRH0WRr","tlshash":"0e823156231d683ef9150291e7d53ab1163e0233962c7368b23d0075eb1d7bf24bbae9","first_seen":"2025-04-28T12:19:47.400768Z","last_seen":"2026-06-24T22:18:06.366265Z","times_seen":95,"resource_available":true,"data":null}},"time_used":52,"timings":{"blocked":-1,"dns":5,"connect":9,"send":0,"wait":11,"receive":0,"ssl":26},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"theajack.github.io","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"arbitrum.meowrpc.com/","fqdn":"arbitrum.meowrpc.com","domain":"meowrpc.com","tld":"com"},"ip":{"addr":"104.26.10.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://join-xrpfi.xyz/","date":"2026-06-18T16:01:25.042Z","timestamp":1781798485042,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"meowrpc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 17:34:32 GMT","end":"Tue, 01 Sep 2026 18:34:19 GMT"},"fingerprint":{"sha1":"78:4A:BA:FF:8C:0B:6A:C6:ED:79:41:C4:76:F9:F8:BF:73:62:59:82","sha256":"B7:3B:89:BB:B9:D1:2E:D6:73:1E:CD:1B:A5:D3:D9:21:43:F6:C5:57:71:93:11:42:0E:54:A9:E7:B4:CB:08:47"}}},"request":{"raw":"POST / HTTP/1.1\r\nHost: arbitrum.meowrpc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://join-xrpfi.xyz/\r\nContent-Type: application/json\r\nContent-Length: 136\r\nOrigin: https://join-xrpfi.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 \r\ndate: Thu, 18 Jun 2026 16:01:25 GMT\r\ncontent-type: application/json\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: origin, access-control-request-method, access-control-request-headers\r\naccess-control-allow-origin: *\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ONBRibp%2B3tUa3GW0oW7sR%2BsiNKmmti3ekXbh7EIW%2BUF3m56WcxFrNFhiZ%2FDvScdQKYjf8z7NnrA9LXgUybcJlAVOhQuOACnedi30Rf0GE%2B6NXagcFHqPOYBfVEWKU0V0CmkHZ0X4\"}]}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: a0db8333dccaa0f0-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":98,"size_decoded":720,"mime_type":"application/json","magic":"JSON text data","md5":"e46902157aa64abcdc41f29ace8b171a","sha1":"b959cf3eceb9eee47817435a4c36f0792aa15811","sha256":"36edf520b814be5fc0d5360dc0f6ae1e9ed28f47bcc63fe6ede8285bfe2ce982","sha512":"49d1d832b1949ee103d35f061172658ef17bc4970391dca16e61aabfce51f02db86daa7cbe9d7657265e1ebf17916c347233226eedfe065aacadabc4409ce6c5","ssdeep":"","tlshash":"c5b01220514e2b30715a49067e0d394d57f099f104507f031c0c8a09250951790c2130","first_seen":"2026-02-05T07:43:22.648531Z","last_seen":"2026-06-24T22:13:01.582037Z","times_seen":150,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"join-xrpfi.xyz/cdn-cgi/challenge-platform/h/b/orchestrate/chl_page/v1?ray=a0db82e8095856a8","fqdn":"join-xrpfi.xyz","domain":"join-xrpfi.xyz","tld":"xyz"},"ip":{"addr":"172.67.202.7","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://join-xrpfi.xyz/","date":"2026-06-18T16:01:13.242Z","timestamp":1781798473242,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"join-xrpfi.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Jun 2026 22:20:30 GMT","end":"Mon, 07 Sep 2026 23:18:55 GMT"},"fingerprint":{"sha1":"BD:76:DB:17:19:68:29:BF:5D:8F:84:8A:F4:BC:DC:4F:63:81:CE:5A","sha256":"7A:F8:07:B7:03:C9:82:FD:B6:4F:E8:06:FA:66:A4:93:D8:74:F5:5C:00:DD:5B:A6:8B:52:C4:61:EA:68:C1:D4"}}},"request":{"raw":"GET /cdn-cgi/challenge-platform/h/b/orchestrate/chl_page/v1?ray=a0db82e8095856a8 HTTP/1.1\r\nHost: join-xrpfi.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://join-xrpfi.xyz/?__cf_chl_rt_tk=1qB4QJSwoQl6KPDg2Zms3S0YcJdeBFWlEfdknJt3Bmc-1781798472-1.0.1.1-mLCjWBCrDHs8J3pcf5FAcPoJqx2ikaBbmmjyzzW90Vg\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: application/javascript; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\ncontent-encoding: zstd\r\ndate: Thu, 18 Jun 2026 16:01:13 GMT\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncf-ray: a0db82e9c97056a8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":189813,"size_decoded":71786,"mime_type":"application/javascript; charset=UTF-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"34998cbd5540bb158e839c51cda9432f","sha1":"d19b073a23aca8eed8fca9b385f2c935d50e9968","sha256":"c1fd86fe0fa29ddc192b1bf764ca49b123c40d7786e1139d4c732ab99d687c31","sha512":"8565ee9ba634cd677b13c693871eab3008ad045eb4ce7b5cf6cf21c318180edf61fed1cefcdf3874928269a7379258fc083b21a3d3c9c6222a7c01426dd7bfa0","ssdeep":"3072:VSC/vok2C5VroEc8VtDoz7HlIlsDbJz/Rpr8eB/94ol:VSC/vok2aVbtDGlIl8Nzb8eB/+y","tlshash":"9a04f8cd3bc5704a0382ab7902b77bd9713a5cc0012b283de441a5d4fdb2ba6a95f5dd","first_seen":"2026-06-18T16:02:55.738172Z","last_seen":"2026-06-18T16:02:55.738172Z","times_seen":1,"resource_available":true,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"join-xrpfi.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"join-xrpfi.xyz/newsletter_nav_widget.webp","fqdn":"join-xrpfi.xyz","domain":"join-xrpfi.xyz","tld":"xyz"},"ip":{"addr":"172.67.202.7","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://join-xrpfi.xyz/","date":"2026-06-18T16:01:20.475Z","timestamp":1781798480475,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"join-xrpfi.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Jun 2026 22:20:30 GMT","end":"Mon, 07 Sep 2026 23:18:55 GMT"},"fingerprint":{"sha1":"BD:76:DB:17:19:68:29:BF:5D:8F:84:8A:F4:BC:DC:4F:63:81:CE:5A","sha256":"7A:F8:07:B7:03:C9:82:FD:B6:4F:E8:06:FA:66:A4:93:D8:74:F5:5C:00:DD:5B:A6:8B:52:C4:61:EA:68:C1:D4"}}},"request":{"raw":"GET /newsletter_nav_widget.webp HTTP/1.1\r\nHost: join-xrpfi.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://join-xrpfi.xyz/\r\nCookie: cf_clearance=3sQx4O48cjL3MFPGKWSZ61gbAJ0Fsb19CV5Td5ovrfs-1781798479-1.2.1.1-6InG6zHSWZQ9klTR0SWrkCCd2amThW3ZvgBV9QX.YygxniZ2gero7Sv0k_PQyL_pw4b46hxD4mkmSOyphsEoHzbXHXfFOOQs.7TR0_V0LJaZHtTwFhzQoJfxt3ekxBzXv3GW2lfXX18wX5JtUEGQs_uPdClhd0gEnyuawbiC4ZvF.yis7gd0CMoixQzWLguFvYW35guV28_t3b0VHPoaNB1pvLiuIPvfAR.LBgS4tMLTpQ7cvnZyYUpgwznXJdLv51P17bJB4V1UgefdTcvYTBtsln1W6WbJQ3YD6IcexX65CeKH04k92ALfOTwXTrQmnbi48XXvC8qmg0jBdlKn1_mEzvupFWiHx0PPaIei6u2f14bt_5seBIYbd4GWWFhHxz9asbtFuh6MuYlyQwJ7vQJvOleaURzAiWPjl2sq6c7Keyh2CXDT.UnjdlME5nTFJJxlJjcG_UV162r4Hmj5EbldbS3j2YEbB8.z1CY8gAouDRomY2Pmc87xzeTOewza\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: image/webp\r\netag: \"7fcfa9b2d46f276f007908d1eb643223\"\r\nlast-modified: Tue, 09 Jun 2026 23:24:00 GMT\r\ndate: Thu, 18 Jun 2026 16:01:20 GMT\r\nserver: cloudflare\r\npriority: u=5,i\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BRVzegFpn%2B5AGto%2B%2FNj8nr3pWU6%2BTicHb%2Ffu2BhbJiONe6BUnRZhS098suehYL702bxmHC5jL1Wl1%2B%2FrKIIT8mkU5pLx8MI2PjKXsaNHiZSDd4NzZu8tn%2FBQkTJ5SM3wiw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a0db8316fae956a8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":39390,"size_decoded":40066,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"7fcfa9b2d46f276f007908d1eb643223","sha1":"0060950df385fee6dd2b9cc45cba3dbbb780cb84","sha256":"a9ec7624b82cc2f299e25d60e73e76eb0e3ff8de981fead18779d080193e8190","sha512":"201085eb88672b3c7fe0f8237c343dcdd07785510fd8e00a4d8021dfb8c128cfe60b8691e605fa84a0c435e21ec315a940467c1cc5a9120bb2966bf57ab6611e","ssdeep":"768:XMOzRFTm6vBXbH0iVvc8z/hI+jOFlz//Z/2JAokDCgHv3XQUJ20omLLvT:XTnm6vBXAgc8rhvSl7hQAokD9vA9m7","tlshash":"4903f2131987814a7ccd309953548a09a9715dd8c4532d7128cabff386e6c8a1debffc","first_seen":"2026-04-24T15:23:41.45609Z","last_seen":"2026-06-19T07:14:12.362005Z","times_seen":30,"resource_available":false,"data":null}},"time_used":388,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":242,"receive":146,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"join-xrpfi.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"join-xrpfi.xyz/poweredbtcky.svg","fqdn":"join-xrpfi.xyz","domain":"join-xrpfi.xyz","tld":"xyz"},"ip":{"addr":"172.67.202.7","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://join-xrpfi.xyz/","date":"2026-06-18T16:01:20.335Z","timestamp":1781798480335,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"join-xrpfi.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Jun 2026 22:20:30 GMT","end":"Mon, 07 Sep 2026 23:18:55 GMT"},"fingerprint":{"sha1":"BD:76:DB:17:19:68:29:BF:5D:8F:84:8A:F4:BC:DC:4F:63:81:CE:5A","sha256":"7A:F8:07:B7:03:C9:82:FD:B6:4F:E8:06:FA:66:A4:93:D8:74:F5:5C:00:DD:5B:A6:8B:52:C4:61:EA:68:C1:D4"}}},"request":{"raw":"GET /poweredbtcky.svg HTTP/1.1\r\nHost: join-xrpfi.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://join-xrpfi.xyz/\r\nCookie: cf_clearance=3sQx4O48cjL3MFPGKWSZ61gbAJ0Fsb19CV5Td5ovrfs-1781798479-1.2.1.1-6InG6zHSWZQ9klTR0SWrkCCd2amThW3ZvgBV9QX.YygxniZ2gero7Sv0k_PQyL_pw4b46hxD4mkmSOyphsEoHzbXHXfFOOQs.7TR0_V0LJaZHtTwFhzQoJfxt3ekxBzXv3GW2lfXX18wX5JtUEGQs_uPdClhd0gEnyuawbiC4ZvF.yis7gd0CMoixQzWLguFvYW35guV28_t3b0VHPoaNB1pvLiuIPvfAR.LBgS4tMLTpQ7cvnZyYUpgwznXJdLv51P17bJB4V1UgefdTcvYTBtsln1W6WbJQ3YD6IcexX65CeKH04k92ALfOTwXTrQmnbi48XXvC8qmg0jBdlKn1_mEzvupFWiHx0PPaIei6u2f14bt_5seBIYbd4GWWFhHxz9asbtFuh6MuYlyQwJ7vQJvOleaURzAiWPjl2sq6c7Keyh2CXDT.UnjdlME5nTFJJxlJjcG_UV162r4Hmj5EbldbS3j2YEbB8.z1CY8gAouDRomY2Pmc87xzeTOewza\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: image/svg+xml\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Tue, 09 Jun 2026 23:23:59 GMT\r\ndate: Thu, 18 Jun 2026 16:01:25 GMT\r\nserver: cloudflare\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wLIiKspjsx86311nkhUJKlIpl%2BRPusuH1OkgHLIvu%2BxtpLgj0qsivo9hG47yhb8jMgqGZH7xtv77QnXbM%2FKeBtiXKFWxxb%2F7iy4QTvW7C2XNpomcNLIaueRYoqftFArpoA%3D%3D\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\netag: W/\"2e4df113ede6d5ce8de2dc1338a3890e\"\r\ncf-ray: a0db83161ae356a8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3762,"size_decoded":2051,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"2e4df113ede6d5ce8de2dc1338a3890e","sha1":"3af1721ca29f4ada0cd422206c253cf8ee52781a","sha256":"911f58b8d14bd6f73a83fd774e44bec97e896317c7093dc83e96921e64f1fbd5","sha512":"12c975049692f337fced697963359f535b7d08b4b230447cba37b6e5c8c1fd31e8f26329a315454c83e51ca41787737428e3932979156e205cf0feaadde8fb97","ssdeep":"","tlshash":"967195cb36ec61e0f9006f78db2b20654dae34f666d1d3d59540fd9564a2e9f464ccc0","first_seen":"2023-04-17T01:45:40Z","last_seen":"2026-06-25T00:24:33.527728Z","times_seen":30626,"resource_available":false,"data":null}},"time_used":5403,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":5403,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"join-xrpfi.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"join-xrpfi.xyz/Flare.svg","fqdn":"join-xrpfi.xyz","domain":"join-xrpfi.xyz","tld":"xyz"},"ip":{"addr":"172.67.202.7","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://join-xrpfi.xyz/","date":"2026-06-18T16:01:20.427Z","timestamp":1781798480427,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"join-xrpfi.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Jun 2026 22:20:30 GMT","end":"Mon, 07 Sep 2026 23:18:55 GMT"},"fingerprint":{"sha1":"BD:76:DB:17:19:68:29:BF:5D:8F:84:8A:F4:BC:DC:4F:63:81:CE:5A","sha256":"7A:F8:07:B7:03:C9:82:FD:B6:4F:E8:06:FA:66:A4:93:D8:74:F5:5C:00:DD:5B:A6:8B:52:C4:61:EA:68:C1:D4"}}},"request":{"raw":"GET /Flare.svg HTTP/1.1\r\nHost: join-xrpfi.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://join-xrpfi.xyz/\r\nCookie: cf_clearance=3sQx4O48cjL3MFPGKWSZ61gbAJ0Fsb19CV5Td5ovrfs-1781798479-1.2.1.1-6InG6zHSWZQ9klTR0SWrkCCd2amThW3ZvgBV9QX.YygxniZ2gero7Sv0k_PQyL_pw4b46hxD4mkmSOyphsEoHzbXHXfFOOQs.7TR0_V0LJaZHtTwFhzQoJfxt3ekxBzXv3GW2lfXX18wX5JtUEGQs_uPdClhd0gEnyuawbiC4ZvF.yis7gd0CMoixQzWLguFvYW35guV28_t3b0VHPoaNB1pvLiuIPvfAR.LBgS4tMLTpQ7cvnZyYUpgwznXJdLv51P17bJB4V1UgefdTcvYTBtsln1W6WbJQ3YD6IcexX65CeKH04k92ALfOTwXTrQmnbi48XXvC8qmg0jBdlKn1_mEzvupFWiHx0PPaIei6u2f14bt_5seBIYbd4GWWFhHxz9asbtFuh6MuYlyQwJ7vQJvOleaURzAiWPjl2sq6c7Keyh2CXDT.UnjdlME5nTFJJxlJjcG_UV162r4Hmj5EbldbS3j2YEbB8.z1CY8gAouDRomY2Pmc87xzeTOewza\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tc5kxU%2Bn%2BLcgdsAO0N54KJ3uDLo3DwYqXQHL2G6VNOZVnnvpbk%2FK6iffy67c8S93f%2BvVkB1%2F4Kl6O%2F%2BV6EZiifJfnSQtXxwsi6baGQmNI%2BDBrvYHZESUr%2BfPm3z4vOjbcg%3D%3D\"}]}\r\nlast-modified: Tue, 09 Jun 2026 23:23:59 GMT\r\ndate: Thu, 18 Jun 2026 16:01:20 GMT\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\netag: W/\"595f973187a90d91245e6adbd03e6f78\"\r\ncf-ray: a0db8316bae856a8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":892,"size_decoded":1170,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"595f973187a90d91245e6adbd03e6f78","sha1":"84cf19963d52368852d083a4377e2359d57f5db7","sha256":"b32962a5e4467193bb585ce81d604de083405dba639e7a32154dc39958b50cf1","sha512":"1507e4cc3a19a71943ae16bb68b5cd34a8522f1e2712c770b9f3ddd7a52ae6c42788f9450cfad59fa9b741cbccf15592e5f248f56df154614600dc7e0219c57f","ssdeep":"","tlshash":"bb1100e423ad82c4f906d3300aab787321873dfb49534b98e0812d14d60b46edc35f48","first_seen":"2025-08-11T21:39:04.753608Z","last_seen":"2026-06-19T07:14:12.372347Z","times_seen":35,"resource_available":false,"data":null}},"time_used":324,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":324,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"join-xrpfi.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"join-xrpfi.xyz/579c7f5cb4a415ce.css","fqdn":"join-xrpfi.xyz","domain":"join-xrpfi.xyz","tld":"xyz"},"ip":{"addr":"172.67.202.7","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://join-xrpfi.xyz/","date":"2026-06-18T16:01:20.268Z","timestamp":1781798480268,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"join-xrpfi.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Jun 2026 22:20:30 GMT","end":"Mon, 07 Sep 2026 23:18:55 GMT"},"fingerprint":{"sha1":"BD:76:DB:17:19:68:29:BF:5D:8F:84:8A:F4:BC:DC:4F:63:81:CE:5A","sha256":"7A:F8:07:B7:03:C9:82:FD:B6:4F:E8:06:FA:66:A4:93:D8:74:F5:5C:00:DD:5B:A6:8B:52:C4:61:EA:68:C1:D4"}}},"request":{"raw":"GET /579c7f5cb4a415ce.css HTTP/1.1\r\nHost: join-xrpfi.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://join-xrpfi.xyz/\r\nCookie: cf_clearance=3sQx4O48cjL3MFPGKWSZ61gbAJ0Fsb19CV5Td5ovrfs-1781798479-1.2.1.1-6InG6zHSWZQ9klTR0SWrkCCd2amThW3ZvgBV9QX.YygxniZ2gero7Sv0k_PQyL_pw4b46hxD4mkmSOyphsEoHzbXHXfFOOQs.7TR0_V0LJaZHtTwFhzQoJfxt3ekxBzXv3GW2lfXX18wX5JtUEGQs_uPdClhd0gEnyuawbiC4ZvF.yis7gd0CMoixQzWLguFvYW35guV28_t3b0VHPoaNB1pvLiuIPvfAR.LBgS4tMLTpQ7cvnZyYUpgwznXJdLv51P17bJB4V1UgefdTcvYTBtsln1W6WbJQ3YD6IcexX65CeKH04k92ALfOTwXTrQmnbi48XXvC8qmg0jBdlKn1_mEzvupFWiHx0PPaIei6u2f14bt_5seBIYbd4GWWFhHxz9asbtFuh6MuYlyQwJ7vQJvOleaURzAiWPjl2sq6c7Keyh2CXDT.UnjdlME5nTFJJxlJjcG_UV162r4Hmj5EbldbS3j2YEbB8.z1CY8gAouDRomY2Pmc87xzeTOewza\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/css;charset=utf-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Tue, 09 Jun 2026 23:23:59 GMT\r\ndate: Thu, 18 Jun 2026 16:01:20 GMT\r\nserver: cloudflare\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fT4o8jJ807S%2F%2BUDn9N%2FgNiOPJwoBOqNuvyMOE%2FwaZjZRVypvEQmUAiaDZF0SlC%2BJjskBe%2FD69aOVATvhFNEUTwP43%2FTSHTbvyAZwaUxYIMBc6HpGMFgMypk5w9e3UuC%2Bcg%3D%3D\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\netag: W/\"c986ad8c9796cbae33d49deb8538ba5b\"\r\ncf-ray: a0db8315bad856a8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":30481,"size_decoded":4456,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (10182)","md5":"c986ad8c9796cbae33d49deb8538ba5b","sha1":"357407f751a8b8e02ff98621312e6d58f84c3baf","sha256":"e35b0fea230c68bbdfeaccd85bec05ae7f46dc53114cccce2a7533826c6ce385","sha512":"d078e7a477b22f951c3e29fff59bc5af1e34ac2b137ff8b2501d8104d62e06eb08fa9ca6b177cbf40a8c46766e53c71e31dad4698eac7633d459ee60c912dae3","ssdeep":"384:G9PqbwLV0qxkaEHS+0f1x9gMcHe+MFBohb+GsWNrChqkALVb8xMqlhiqKyj0xntA:2acx6CKN2T","tlshash":"ddd2ad43e2f4173f605e1186f9828948dfc464faa1968fd0290ecce594da7b27af1b47","first_seen":"2026-04-24T15:23:41.461599Z","last_seen":"2026-06-19T07:14:12.378609Z","times_seen":20,"resource_available":false,"data":null}},"time_used":531,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":485,"receive":46,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"join-xrpfi.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"join-xrpfi.xyz/FTSO%20(1).svg","fqdn":"join-xrpfi.xyz","domain":"join-xrpfi.xyz","tld":"xyz"},"ip":{"addr":"172.67.202.7","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://join-xrpfi.xyz/","date":"2026-06-18T16:01:21.121Z","timestamp":1781798481121,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"join-xrpfi.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Jun 2026 22:20:30 GMT","end":"Mon, 07 Sep 2026 23:18:55 GMT"},"fingerprint":{"sha1":"BD:76:DB:17:19:68:29:BF:5D:8F:84:8A:F4:BC:DC:4F:63:81:CE:5A","sha256":"7A:F8:07:B7:03:C9:82:FD:B6:4F:E8:06:FA:66:A4:93:D8:74:F5:5C:00:DD:5B:A6:8B:52:C4:61:EA:68:C1:D4"}}},"request":{"raw":"GET /FTSO%20(1).svg HTTP/1.1\r\nHost: join-xrpfi.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://join-xrpfi.xyz/\r\nCookie: cf_clearance=3sQx4O48cjL3MFPGKWSZ61gbAJ0Fsb19CV5Td5ovrfs-1781798479-1.2.1.1-6InG6zHSWZQ9klTR0SWrkCCd2amThW3ZvgBV9QX.YygxniZ2gero7Sv0k_PQyL_pw4b46hxD4mkmSOyphsEoHzbXHXfFOOQs.7TR0_V0LJaZHtTwFhzQoJfxt3ekxBzXv3GW2lfXX18wX5JtUEGQs_uPdClhd0gEnyuawbiC4ZvF.yis7gd0CMoixQzWLguFvYW35guV28_t3b0VHPoaNB1pvLiuIPvfAR.LBgS4tMLTpQ7cvnZyYUpgwznXJdLv51P17bJB4V1UgefdTcvYTBtsln1W6WbJQ3YD6IcexX65CeKH04k92ALfOTwXTrQmnbi48XXvC8qmg0jBdlKn1_mEzvupFWiHx0PPaIei6u2f14bt_5seBIYbd4GWWFhHxz9asbtFuh6MuYlyQwJ7vQJvOleaURzAiWPjl2sq6c7Keyh2CXDT.UnjdlME5nTFJJxlJjcG_UV162r4Hmj5EbldbS3j2YEbB8.z1CY8gAouDRomY2Pmc87xzeTOewza\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: image/svg+xml\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Tue, 09 Jun 2026 23:23:59 GMT\r\ndate: Thu, 18 Jun 2026 16:01:21 GMT\r\nserver: cloudflare\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DqsrubYXhLsQA%2FTkYcS6190ighxfzaqSHB0Zj3C6fyJ736LDUrZMQh%2FB4J8MgPkkfXo%2Fr%2BJ18LAVhEkB%2BFmFr%2B%2BFHrD5WMTttRpei0yuv8dpsuGsOZDCAd03or%2FyLar8aA%3D%3D\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\netag: W/\"9d1dd18b48faa5466ba63382d58efad0\"\r\ncf-ray: a0db831b0b1556a8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6626,"size_decoded":3304,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"9d1dd18b48faa5466ba63382d58efad0","sha1":"49366978ff355f0d6f58276650de503790fb4e24","sha256":"6259c9c51012ebf41be96343e10515eca91da527134d921930b6e2a60a0da29b","sha512":"9553827d6b889ef992b19906c622c7056a4481bc135a6a8c5645cc2f19e5b5ff923bfd7f3466146723d83ab4f2d8093fe8064ec5aa851041849a0a74878bfcb9","ssdeep":"96:Zg9WazFF26KqFxskLxPFwcrhp2w3PszfL33IBG2zwPEM4HcyfZ35wfNCBc1rTSE3:KMdVMFqsp2UPgsI28hgHHw2KNavP0","tlshash":"39d194c033a8d2b4b841e7b6835ea8312a1775dab15488c8dbd5af01ee8556f0decdd2","first_seen":"2025-08-11T21:39:04.766203Z","last_seen":"2026-06-19T07:14:12.331808Z","times_seen":26,"resource_available":false,"data":null}},"time_used":235,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":235,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"join-xrpfi.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"join-xrpfi.xyz/favicon.ico","fqdn":"join-xrpfi.xyz","domain":"join-xrpfi.xyz","tld":"xyz"},"ip":{"addr":"172.67.202.7","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://join-xrpfi.xyz/","date":"2026-06-18T16:01:13.577Z","timestamp":1781798473577,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"join-xrpfi.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Jun 2026 22:20:30 GMT","end":"Mon, 07 Sep 2026 23:18:55 GMT"},"fingerprint":{"sha1":"BD:76:DB:17:19:68:29:BF:5D:8F:84:8A:F4:BC:DC:4F:63:81:CE:5A","sha256":"7A:F8:07:B7:03:C9:82:FD:B6:4F:E8:06:FA:66:A4:93:D8:74:F5:5C:00:DD:5B:A6:8B:52:C4:61:EA:68:C1:D4"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: join-xrpfi.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://join-xrpfi.xyz/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: image/x-icon\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ovoYn7CErDgONO6u6GIyjEyl6%2FtfRT88TcZ%2FGb3THALSdup3L50IoUa2QBtVEl9QTn%2Frbj6Pmll%2FcNkSRdvwY1NDWnEFLvDT029j690K%2BPGJr6JE0Rqa0gsxvWN8H%2FGq5Q%3D%3D\"}]}\r\nlast-modified: Tue, 09 Jun 2026 23:23:59 GMT\r\ndate: Thu, 18 Jun 2026 16:01:13 GMT\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\netag: W/\"dc270172d1648eb90a7ac9e496aaa7ec\"\r\npriority: u=4,i\r\ncf-ray: a0db82ebd98a56a8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15406,"size_decoded":3513,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 3 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel","md5":"dc270172d1648eb90a7ac9e496aaa7ec","sha1":"4c6c6b1d4815a5022e215fe4667fe55ff908b13f","sha256":"d4e950e20f2728c5addc06853e7802699855c3ff9166375bea74da43e214d99b","sha512":"829338b30e6435447174ad43e0ff80659a93bd50aa00f135ac739203efb8e6b471864222250f2180af429b8396201611fdfbf75a6a2c252ef45a93a4f692640f","ssdeep":"192:l8WBBBBBB3vjlZXBbxEB+///////////7AFMCpQ:jbrXXEcd","tlshash":"bc62795166299107f9ab803ab34adb6af27ffec5e91b15261b407129103e09270fdf17","first_seen":"2026-01-21T22:11:30.922214Z","last_seen":"2026-06-24T22:01:51.066722Z","times_seen":120,"resource_available":false,"data":null}},"time_used":216,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":147,"receive":69,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"join-xrpfi.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/flow/ov1/888930064:1781795229:ULXbcCJinkVtfIv0XYZz-roMXsa3oLUICDmOblEQ1Qs/a0db82ec5b77dfec/EvW9ExeaN2.SCjWV0HuO6seZRTZA3Y1MXLHzN3L1hUE-1781798473-1.2.1.1-qnwdQYnnVb9zYEkHMPlfotRLx8mPdzIynAh.VdfiqNNA7ayODTDgkozCs45IpB2D","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/pop5b/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","date":"2026-06-18T16:01:16.307Z","timestamp":1781798476307,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"challenges.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 16 Jun 2026 20:15:28 GMT","end":"Mon, 14 Sep 2026 21:15:13 GMT"},"fingerprint":{"sha1":"77:27:72:42:CF:51:E8:8C:7C:3E:8C:4C:A1:F0:9A:86:96:B9:0A:16","sha256":"ED:7C:F7:38:B3:0F:00:86:32:D1:14:CE:C0:FF:CA:0E:7C:86:EE:49:51:EF:A4:4B:AA:5C:B6:7C:00:B5:3D:F3"}}},"request":{"raw":"POST /cdn-cgi/challenge-platform/h/b/flow/ov1/888930064:1781795229:ULXbcCJinkVtfIv0XYZz-roMXsa3oLUICDmOblEQ1Qs/a0db82ec5b77dfec/EvW9ExeaN2.SCjWV0HuO6seZRTZA3Y1MXLHzN3L1hUE-1781798473-1.2.1.1-qnwdQYnnVb9zYEkHMPlfotRLx8mPdzIynAh.VdfiqNNA7ayODTDgkozCs45IpB2D HTTP/1.1\r\nHost: challenges.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/pop5b/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto\r\ncf-chl: EvW9ExeaN2.SCjWV0HuO6seZRTZA3Y1MXLHzN3L1hUE-1781798473-1.2.1.1-qnwdQYnnVb9zYEkHMPlfotRLx8mPdzIynAh.VdfiqNNA7ayODTDgkozCs45IpB2D\r\ncf-chl-ra: 0\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 87820\r\nOrigin: https://challenges.cloudflare.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 18 Jun 2026 16:01:16 GMT\r\ncontent-type: text/plain; charset=UTF-8\r\ncf-chl-gen: 51lJW3hDBbpqZi9Psq01t9xln8LlXe9lfxIWNsGfOyOsSucb/M7t+ni1LJ/lBIoi$QwRq2XWC7C1YblYTWQVXmA==\r\ntiming-allow-origin: https://challenges.cloudflare.com\r\npriority: u=3,i=?0\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: a0db82fcecc4dfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":38716,"size_decoded":29531,"mime_type":"text/plain; charset=UTF-8","magic":"ASCII text, with very long lines (38716), with no line terminators","md5":"d0131bdd3b2643cfa6bc9b7bfcbbc43c","sha1":"f16f804644f843bdf398d5b1d93d680f3bd7fd47","sha256":"499e06149695e10ba1b3e6a45cd64e56d0b64714734c570778aeb91f047cb4ca","sha512":"f45c373f5dd103e2c68cf374adc8a1ab88dc4a5ee9e894f2e8562e19cea5bca6cd0cae7f9f1137bc421f4264f7b0e1ed12e249047c94a4b8d3450dcf5a18a6be","ssdeep":"768:dUnqgEj1/bO1xyOQCru2BnXQWS4Z1gOWpoLWhv9V0Q6ezllST3JGcMJvgf54aj:d6xRQGu2dgWbZCO9LWhbrzllSbs7IfC4","tlshash":"7803f1e419aa4d0c46da122ee3959df7a0678e5d8c0bf39741b2a84b7c0d48d8c9e4de","first_seen":"2026-06-18T16:02:55.744252Z","last_seen":"2026-06-18T16:02:55.744252Z","times_seen":1,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":30,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"join-xrpfi.xyz/mute-subtitle.vtt","fqdn":"join-xrpfi.xyz","domain":"join-xrpfi.xyz","tld":"xyz"},"ip":{"addr":"172.67.202.7","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://join-xrpfi.xyz/","date":"2026-06-18T16:01:20.545Z","timestamp":1781798480545,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"join-xrpfi.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Jun 2026 22:20:30 GMT","end":"Mon, 07 Sep 2026 23:18:55 GMT"},"fingerprint":{"sha1":"BD:76:DB:17:19:68:29:BF:5D:8F:84:8A:F4:BC:DC:4F:63:81:CE:5A","sha256":"7A:F8:07:B7:03:C9:82:FD:B6:4F:E8:06:FA:66:A4:93:D8:74:F5:5C:00:DD:5B:A6:8B:52:C4:61:EA:68:C1:D4"}}},"request":{"raw":"GET /mute-subtitle.vtt HTTP/1.1\r\nHost: join-xrpfi.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: cf_clearance=3sQx4O48cjL3MFPGKWSZ61gbAJ0Fsb19CV5Td5ovrfs-1781798479-1.2.1.1-6InG6zHSWZQ9klTR0SWrkCCd2amThW3ZvgBV9QX.YygxniZ2gero7Sv0k_PQyL_pw4b46hxD4mkmSOyphsEoHzbXHXfFOOQs.7TR0_V0LJaZHtTwFhzQoJfxt3ekxBzXv3GW2lfXX18wX5JtUEGQs_uPdClhd0gEnyuawbiC4ZvF.yis7gd0CMoixQzWLguFvYW35guV28_t3b0VHPoaNB1pvLiuIPvfAR.LBgS4tMLTpQ7cvnZyYUpgwznXJdLv51P17bJB4V1UgefdTcvYTBtsln1W6WbJQ3YD6IcexX65CeKH04k92ALfOTwXTrQmnbi48XXvC8qmg0jBdlKn1_mEzvupFWiHx0PPaIei6u2f14bt_5seBIYbd4GWWFhHxz9asbtFuh6MuYlyQwJ7vQJvOleaURzAiWPjl2sq6c7Keyh2CXDT.UnjdlME5nTFJJxlJjcG_UV162r4Hmj5EbldbS3j2YEbB8.z1CY8gAouDRomY2Pmc87xzeTOewza\r\nSec-Fetch-Dest: track\r\nSec-Fetch-Mode: same-origin\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/vtt\r\netag: \"53142af388215162f1a72eaad5603c77\"\r\nlast-modified: Tue, 09 Jun 2026 23:23:59 GMT\r\ndate: Thu, 18 Jun 2026 16:01:20 GMT\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=al4WK0%2BAnWIv99B%2BjU3vaOjZpDAdXB%2FrdKG%2BPimgUbKD9QmdIi%2Fy4AABDgxR7cOQlr20QAoHr%2BwLKm%2FwPflxqFY8uu6vGnaNz2bMLc5OL1WRCBrau9ioVdtKOZiuJIsMYA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-length: 86\r\ncf-ray: a0db83176af256a8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":86,"size_decoded":754,"mime_type":"text/vtt","magic":"WebVTT subtitles, ASCII text","md5":"53142af388215162f1a72eaad5603c77","sha1":"ca6e246c84ef9ce3519c5aee9f7d3a4f6064b4fe","sha256":"f946cef18bf33db28bc29c3320c2cbd0ea84e0c3831bf5ed3cdc7f19f4eb98ce","sha512":"7c2da6b49086ff51b75a8e6571a4667e4958026beb592f940fca100118796776204024a0951e51c0eb415a46db40e286a1f8b608e8e1c317c9e2b8edde273b5c","ssdeep":"","tlshash":"22a012804b744840d110920c2162bb03a188dc4e11c00c5e226830cdfc4e004c048042","first_seen":"2026-04-24T15:23:41.467209Z","last_seen":"2026-06-19T07:14:12.325618Z","times_seen":16,"resource_available":false,"data":null}},"time_used":300,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":300,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"join-xrpfi.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"join-xrpfi.xyz/home_fast_desktop.webm","fqdn":"join-xrpfi.xyz","domain":"join-xrpfi.xyz","tld":"xyz"},"ip":{"addr":"172.67.202.7","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://join-xrpfi.xyz/","date":"2026-06-18T16:01:20.725Z","timestamp":1781798480725,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"join-xrpfi.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Jun 2026 22:20:30 GMT","end":"Mon, 07 Sep 2026 23:18:55 GMT"},"fingerprint":{"sha1":"BD:76:DB:17:19:68:29:BF:5D:8F:84:8A:F4:BC:DC:4F:63:81:CE:5A","sha256":"7A:F8:07:B7:03:C9:82:FD:B6:4F:E8:06:FA:66:A4:93:D8:74:F5:5C:00:DD:5B:A6:8B:52:C4:61:EA:68:C1:D4"}}},"request":{"raw":"GET /home_fast_desktop.webm HTTP/1.1\r\nHost: join-xrpfi.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nRange: bytes=0-\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://join-xrpfi.xyz/\r\nCookie: cf_clearance=3sQx4O48cjL3MFPGKWSZ61gbAJ0Fsb19CV5Td5ovrfs-1781798479-1.2.1.1-6InG6zHSWZQ9klTR0SWrkCCd2amThW3ZvgBV9QX.YygxniZ2gero7Sv0k_PQyL_pw4b46hxD4mkmSOyphsEoHzbXHXfFOOQs.7TR0_V0LJaZHtTwFhzQoJfxt3ekxBzXv3GW2lfXX18wX5JtUEGQs_uPdClhd0gEnyuawbiC4ZvF.yis7gd0CMoixQzWLguFvYW35guV28_t3b0VHPoaNB1pvLiuIPvfAR.LBgS4tMLTpQ7cvnZyYUpgwznXJdLv51P17bJB4V1UgefdTcvYTBtsln1W6WbJQ3YD6IcexX65CeKH04k92ALfOTwXTrQmnbi48XXvC8qmg0jBdlKn1_mEzvupFWiHx0PPaIei6u2f14bt_5seBIYbd4GWWFhHxz9asbtFuh6MuYlyQwJ7vQJvOleaURzAiWPjl2sq6c7Keyh2CXDT.UnjdlME5nTFJJxlJjcG_UV162r4Hmj5EbldbS3j2YEbB8.z1CY8gAouDRomY2Pmc87xzeTOewza\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: video/webm\r\netag: \"93f55c45880ded591da9582c8da247b2\"\r\nlast-modified: Tue, 09 Jun 2026 23:24:00 GMT\r\ndate: Thu, 18 Jun 2026 16:01:20 GMT\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WCUgjoYU9NrXNZDo1skQbshzQnc%2BKKsSlftftXDToxECZgwSvxPmTDNY0gHum%2Fdzbcb9SYLv14iDRwhAYlZuA18WfBbS1NG2IP9ommpU5bE2Y1Z%2BAjexiIhDPhJC35ITOw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a0db83188af856a8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1378641,"size_decoded":1379310,"mime_type":"video/webm","magic":"WebM","md5":"9a5fba883369cf25fcd3de86facd08b1","sha1":"0aa0f6141f01d5a4bf827532aab3e029a30f2ed9","sha256":"c10dcb1ac941eb67789e362664821756ad38f30107d147897daa06deee62c45d","sha512":"5c514cb7b02b4f4aae4939f44af686286fb7e1470e4339c60da0a269857ff3f9fe143e8f6cf4763bd8710ac22ec30d776337a4c718c5b428ae6e39c6efe6002e","ssdeep":"24576:3p/jOrSWT9ihDPOxGvbRNI/86ocsvDBIylxy2+6LL+:3pbOmj5uGvbRPcsvzxy1V","tlshash":"f925332e2abc2c906fa5d17ef1b95c257d7be221687de42a3c1931c791094fac1143ab","first_seen":"2025-08-11T21:39:04.776649Z","last_seen":"2026-06-19T07:14:12.3829Z","times_seen":28,"resource_available":false,"data":null}},"time_used":551,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":244,"receive":307,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"join-xrpfi.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"join-xrpfi.xyz/hypernative-1.webp","fqdn":"join-xrpfi.xyz","domain":"join-xrpfi.xyz","tld":"xyz"},"ip":{"addr":"172.67.202.7","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://join-xrpfi.xyz/","date":"2026-06-18T16:01:20.873Z","timestamp":1781798480873,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"join-xrpfi.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Jun 2026 22:20:30 GMT","end":"Mon, 07 Sep 2026 23:18:55 GMT"},"fingerprint":{"sha1":"BD:76:DB:17:19:68:29:BF:5D:8F:84:8A:F4:BC:DC:4F:63:81:CE:5A","sha256":"7A:F8:07:B7:03:C9:82:FD:B6:4F:E8:06:FA:66:A4:93:D8:74:F5:5C:00:DD:5B:A6:8B:52:C4:61:EA:68:C1:D4"}}},"request":{"raw":"GET /hypernative-1.webp HTTP/1.1\r\nHost: join-xrpfi.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://join-xrpfi.xyz/\r\nCookie: cf_clearance=3sQx4O48cjL3MFPGKWSZ61gbAJ0Fsb19CV5Td5ovrfs-1781798479-1.2.1.1-6InG6zHSWZQ9klTR0SWrkCCd2amThW3ZvgBV9QX.YygxniZ2gero7Sv0k_PQyL_pw4b46hxD4mkmSOyphsEoHzbXHXfFOOQs.7TR0_V0LJaZHtTwFhzQoJfxt3ekxBzXv3GW2lfXX18wX5JtUEGQs_uPdClhd0gEnyuawbiC4ZvF.yis7gd0CMoixQzWLguFvYW35guV28_t3b0VHPoaNB1pvLiuIPvfAR.LBgS4tMLTpQ7cvnZyYUpgwznXJdLv51P17bJB4V1UgefdTcvYTBtsln1W6WbJQ3YD6IcexX65CeKH04k92ALfOTwXTrQmnbi48XXvC8qmg0jBdlKn1_mEzvupFWiHx0PPaIei6u2f14bt_5seBIYbd4GWWFhHxz9asbtFuh6MuYlyQwJ7vQJvOleaURzAiWPjl2sq6c7Keyh2CXDT.UnjdlME5nTFJJxlJjcG_UV162r4Hmj5EbldbS3j2YEbB8.z1CY8gAouDRomY2Pmc87xzeTOewza\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: image/webp\r\netag: \"bd032d84e7dd874f19808839ca4b8a7c\"\r\nlast-modified: Tue, 09 Jun 2026 23:23:59 GMT\r\ndate: Thu, 18 Jun 2026 16:01:21 GMT\r\nserver: cloudflare\r\npriority: u=5,i\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4szbC3OKzU2NIBVXuz8eYKpCrHZjaWtUne0%2BvwrRquYsEbDGeZp2%2FQeWxhkatyL9VR5ZzwzHRB99iMEtHKMdfkBjE3Pas395w71TFDBLBtIJjH3KvTJZrQ5qfflIZfuIXA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-length: 1766\r\ncf-ray: a0db83197b0156a8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1766,"size_decoded":2474,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"bd032d84e7dd874f19808839ca4b8a7c","sha1":"422e8c55fb35beb88b1da5b147a0f21e61fe6dee","sha256":"945cceaf66a6e82c7cf3bf882d876efa306a4c3d2ea0d7bf01702f46c0531be2","sha512":"3eddf98f194370872df01fcad21a1b337402c158d44ff1e6a950b905112db3336faa4db5370e4473362e62eaaab583f692f3d7f30ce81199d9d97741f416538d","ssdeep":"","tlshash":"43314dd284704388ae184625d37bdd48701c9e57747f8b3167e110444718f67b29f33b","first_seen":"2025-08-11T21:39:04.764994Z","last_seen":"2026-06-19T07:14:12.381287Z","times_seen":34,"resource_available":false,"data":null}},"time_used":255,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":255,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"join-xrpfi.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"join-xrpfi.xyz/","fqdn":"join-xrpfi.xyz","domain":"join-xrpfi.xyz","tld":"xyz"},"ip":{"addr":"172.67.202.7","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-06-18T16:01:12.872Z","timestamp":1781798472872,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"join-xrpfi.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Jun 2026 22:20:30 GMT","end":"Mon, 07 Sep 2026 23:18:55 GMT"},"fingerprint":{"sha1":"BD:76:DB:17:19:68:29:BF:5D:8F:84:8A:F4:BC:DC:4F:63:81:CE:5A","sha256":"7A:F8:07:B7:03:C9:82:FD:B6:4F:E8:06:FA:66:A4:93:D8:74:F5:5C:00:DD:5B:A6:8B:52:C4:61:EA:68:C1:D4"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: join-xrpfi.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 403 \r\naccept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA\r\ncf-mitigated: challenge\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-security-policy: default-src 'none'; script-src 'nonce-dUn75Ir4XOzq2XPJHtMqqQ' 'unsafe-eval' https://challenges.cloudflare.com; script-src-attr 'none'; style-src 'unsafe-inline'; img-src 'self' https://challenges.cloudflare.com; connect-src 'self' https://challenges.cloudflare.com; frame-src 'self' https://challenges.cloudflare.com blob:; child-src 'self' https://challenges.cloudflare.com blob:; worker-src blob:; form-action http: https:; base-uri 'self'\r\nserver: cloudflare\r\ncritical-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA\r\ncross-origin-embedder-policy: require-corp\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: same-origin\r\norigin-agent-cluster: ?1\r\npermissions-policy: accelerometer=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=(),xr-spatial-tracking=*\r\nreferrer-policy: same-origin\r\nserver-timing: chlray;desc=\"a0db82e8095856a8\", cfExtPri\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YMoIMCxLoH8uEjFpWvb0IMZSJloUrbAEFaJ1W7gZygQZCN8HfM6sFtvqpXrp8754bIJJvigYIrdcWCJEXXn6x91mY4YVYjCtgUSk%2BJB9Zh8aQTKx3gfoPvI4OHO0j7Cktg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Thu, 18 Jun 2026 16:01:12 GMT\r\npriority: u=0,i\r\ncontent-encoding: zstd\r\ncf-ray: a0db82e8095856a8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5575,"size_decoded":5537,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (5575), with no line terminators","md5":"229cb8661ce87a5ee570ae7965e4a0b1","sha1":"80700f4fb9cfa9a34232db7bd0d7e2da06c19fbb","sha256":"e5866a70d33484306bbf205009a95abb5dbb79cb2c99add7aea793c825d31b59","sha512":"da2a0f810fed10b2fc3532d9cbae4735a282958aaeac2c40b50509b6dfc20c93772ef65824f9eb7db7e186dc3f8d476fcc749d5f38c0941b2ca88c0c7dab7599","ssdeep":"96:PNymtoXZzIEb0EaW872/sOhbs1BRBOhJA8wTEDP7iqggV3FpaaNJSTsaHofk/h8u:PNvtkCB2jsP74qTEDjiv6T7PaHB/hFy2","tlshash":"95b13ae3ac335122e7e27fe660f373585220b293be015085e751db3e12edf4e8184a89","first_seen":"2026-06-18T16:02:55.747577Z","last_seen":"2026-06-18T16:02:55.747577Z","times_seen":1,"resource_available":true,"data":null}},"time_used":102,"timings":{"blocked":-1,"dns":62,"connect":26,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"join-xrpfi.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"join-xrpfi.xyz/6cdcfbcc140e7bef.css","fqdn":"join-xrpfi.xyz","domain":"join-xrpfi.xyz","tld":"xyz"},"ip":{"addr":"172.67.202.7","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://join-xrpfi.xyz/","date":"2026-06-18T16:01:20.256Z","timestamp":1781798480256,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"join-xrpfi.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Jun 2026 22:20:30 GMT","end":"Mon, 07 Sep 2026 23:18:55 GMT"},"fingerprint":{"sha1":"BD:76:DB:17:19:68:29:BF:5D:8F:84:8A:F4:BC:DC:4F:63:81:CE:5A","sha256":"7A:F8:07:B7:03:C9:82:FD:B6:4F:E8:06:FA:66:A4:93:D8:74:F5:5C:00:DD:5B:A6:8B:52:C4:61:EA:68:C1:D4"}}},"request":{"raw":"GET /6cdcfbcc140e7bef.css HTTP/1.1\r\nHost: join-xrpfi.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://join-xrpfi.xyz/\r\nCookie: cf_clearance=3sQx4O48cjL3MFPGKWSZ61gbAJ0Fsb19CV5Td5ovrfs-1781798479-1.2.1.1-6InG6zHSWZQ9klTR0SWrkCCd2amThW3ZvgBV9QX.YygxniZ2gero7Sv0k_PQyL_pw4b46hxD4mkmSOyphsEoHzbXHXfFOOQs.7TR0_V0LJaZHtTwFhzQoJfxt3ekxBzXv3GW2lfXX18wX5JtUEGQs_uPdClhd0gEnyuawbiC4ZvF.yis7gd0CMoixQzWLguFvYW35guV28_t3b0VHPoaNB1pvLiuIPvfAR.LBgS4tMLTpQ7cvnZyYUpgwznXJdLv51P17bJB4V1UgefdTcvYTBtsln1W6WbJQ3YD6IcexX65CeKH04k92ALfOTwXTrQmnbi48XXvC8qmg0jBdlKn1_mEzvupFWiHx0PPaIei6u2f14bt_5seBIYbd4GWWFhHxz9asbtFuh6MuYlyQwJ7vQJvOleaURzAiWPjl2sq6c7Keyh2CXDT.UnjdlME5nTFJJxlJjcG_UV162r4Hmj5EbldbS3j2YEbB8.z1CY8gAouDRomY2Pmc87xzeTOewza\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/css;charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VgFzKKeErlhxNU41Ze4ya5wi2eCxJXUvek8jCPgCetoZGkAXB4LDLce9wHE%2BWE7x8HH9czZmfwbvmieLKN8xvZdq3XltAcvsgJ0TbFXElpepnSgZs4EXt3374d3czYRXzA%3D%3D\"}]}\r\nlast-modified: Tue, 09 Jun 2026 23:24:00 GMT\r\ndate: Thu, 18 Jun 2026 16:01:20 GMT\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\netag: W/\"9e03833ab9c10d491a04b6dae234ef09\"\r\npriority: u=2,i=?0\r\ncf-ray: a0db83159ad456a8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":120415,"size_decoded":15475,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (11939)","md5":"9e03833ab9c10d491a04b6dae234ef09","sha1":"69fb24e452ef965718a0d642cb5b82cdbb00d1e6","sha256":"9ce5d79c8b23756bbfb0929f53cd795e5328d3b92f13b78f0cb0873c3e6015aa","sha512":"43d0131d1c76623eabfbe78b300fde4a1e9db2c841220dd06fd7cf4dead24941a0d11fd42958c94cd481f2e6e12bbfa8f4dc86e56211c4421919db74cdd0b47a","ssdeep":"384:S1nJibNBbTA8orrhvUHQ1SS7GK40MAEQgzROuxTf3C5d2PgiKPVID8JXF44pivra:aZovqqlGoBB1c58rmsWNf","tlshash":"ecc31f43e9f4133fa05d2106f9d16808efc0a4ebf59b4fe0580edde54489aa66af2747","first_seen":"2026-04-24T15:23:41.464721Z","last_seen":"2026-06-19T07:14:12.371028Z","times_seen":19,"resource_available":false,"data":null}},"time_used":743,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":290,"receive":453,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"join-xrpfi.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"join-xrpfi.xyz/Satoshi_Variable-s.p.fc536e90.woff2","fqdn":"join-xrpfi.xyz","domain":"join-xrpfi.xyz","tld":"xyz"},"ip":{"addr":"172.67.202.7","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://join-xrpfi.xyz/","date":"2026-06-18T16:01:21.110Z","timestamp":1781798481110,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"join-xrpfi.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Jun 2026 22:20:30 GMT","end":"Mon, 07 Sep 2026 23:18:55 GMT"},"fingerprint":{"sha1":"BD:76:DB:17:19:68:29:BF:5D:8F:84:8A:F4:BC:DC:4F:63:81:CE:5A","sha256":"7A:F8:07:B7:03:C9:82:FD:B6:4F:E8:06:FA:66:A4:93:D8:74:F5:5C:00:DD:5B:A6:8B:52:C4:61:EA:68:C1:D4"}}},"request":{"raw":"GET /Satoshi_Variable-s.p.fc536e90.woff2 HTTP/1.1\r\nHost: join-xrpfi.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://join-xrpfi.xyz/6cdcfbcc140e7bef.css\r\nCookie: cf_clearance=3sQx4O48cjL3MFPGKWSZ61gbAJ0Fsb19CV5Td5ovrfs-1781798479-1.2.1.1-6InG6zHSWZQ9klTR0SWrkCCd2amThW3ZvgBV9QX.YygxniZ2gero7Sv0k_PQyL_pw4b46hxD4mkmSOyphsEoHzbXHXfFOOQs.7TR0_V0LJaZHtTwFhzQoJfxt3ekxBzXv3GW2lfXX18wX5JtUEGQs_uPdClhd0gEnyuawbiC4ZvF.yis7gd0CMoixQzWLguFvYW35guV28_t3b0VHPoaNB1pvLiuIPvfAR.LBgS4tMLTpQ7cvnZyYUpgwznXJdLv51P17bJB4V1UgefdTcvYTBtsln1W6WbJQ3YD6IcexX65CeKH04k92ALfOTwXTrQmnbi48XXvC8qmg0jBdlKn1_mEzvupFWiHx0PPaIei6u2f14bt_5seBIYbd4GWWFhHxz9asbtFuh6MuYlyQwJ7vQJvOleaURzAiWPjl2sq6c7Keyh2CXDT.UnjdlME5nTFJJxlJjcG_UV162r4Hmj5EbldbS3j2YEbB8.z1CY8gAouDRomY2Pmc87xzeTOewza\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: font/woff2\r\netag: \"70880e42f07b0386e261974cd14820a1\"\r\nlast-modified: Tue, 09 Jun 2026 23:24:00 GMT\r\ndate: Thu, 18 Jun 2026 16:01:25 GMT\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6TP9z4G16T1Vw6HiMuxYnUF8usD24Nl8YL7sU44zfmDnVjQxU%2Bq0dYiZaA3cdBM1XUiKM9VTSOOpmhebkaTil%2Bmd4A7ZOWAS83g6APyACgAEUaD%2FLyEnoAH8PhYT1BpG3Q%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a0db831afb1156a8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":42588,"size_decoded":43257,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 42588, version 1.0","md5":"70880e42f07b0386e261974cd14820a1","sha1":"2d34d398b398a7fd88d21fae7642cdca908bf3ee","sha256":"e739aff9b4d02c264341d6d4872edcda28e79373aeda936f659566a1cd3eb47f","sha512":"6a5cb0cbee5f49a4b96df82bc37f3f2aa7abbc8fdb304962a3f492c7f63772b81e753a86e01da2a7a74785cf3196795408065e0bf30695166311e324d813d83c","ssdeep":"768:LRuvvUK4d5TnqQ8Wd3PDjhbDERazTlYv2zypgb0Sj0a7OpBUroBTy1gvK2jbx:9ukK4rzn3PPeRElO6ZVj0a7O/3g1IZx","tlshash":"d313013c8972d7b2bddb203b7cc0b6652494576962b0b2bec096093c80a467db18f733","first_seen":"2023-06-27T05:49:32Z","last_seen":"2026-06-24T21:43:06.254717Z","times_seen":2252,"resource_available":false,"data":null}},"time_used":5086,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4844,"receive":242,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"join-xrpfi.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"arbitrum.drpc.org/","fqdn":"arbitrum.drpc.org","domain":"drpc.org","tld":"org"},"ip":{"addr":"104.18.11.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://join-xrpfi.xyz/","date":"2026-06-18T16:01:25.049Z","timestamp":1781798485049,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"drpc.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 14 Jun 2026 23:01:08 GMT","end":"Sun, 13 Sep 2026 00:00:59 GMT"},"fingerprint":{"sha1":"7F:E5:3C:EC:15:AC:2B:17:FE:8B:3B:16:E4:25:9A:40:37:43:63:45","sha256":"DF:D3:75:05:E3:1C:E5:C2:B8:D6:2A:66:75:39:9A:D3:91:D6:86:E7:7B:11:D6:84:3E:A1:0F:FF:79:47:06:19"}}},"request":{"raw":"OPTIONS / HTTP/1.1\r\nHost: arbitrum.drpc.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://join-xrpfi.xyz/\r\nOrigin: https://join-xrpfi.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 204 \r\ndate: Thu, 18 Jun 2026 16:01:25 GMT\r\naccess-control-allow-headers: content-type\r\naccess-control-allow-methods: POST\r\naccess-control-allow-origin: https://join-xrpfi.xyz\r\ncontent-encoding: gzip\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\ncf-ray: a0db8333ae0c8be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":447,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-25T00:14:26.040585Z","times_seen":16694613,"resource_available":true,"data":null}},"time_used":83,"timings":{"blocked":-1,"dns":0,"connect":13,"send":0,"wait":70,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"arbitrum.gateway.tenderly.co/","fqdn":"arbitrum.gateway.tenderly.co","domain":"tenderly.co","tld":"co"},"ip":{"addr":"35.227.193.242","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://join-xrpfi.xyz/","date":"2026-06-18T16:01:25.051Z","timestamp":1781798485051,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gateway.tenderly.co","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 15 Jun 2026 18:01:31 GMT","end":"Sun, 13 Sep 2026 18:01:30 GMT"},"fingerprint":{"sha1":"9A:41:E5:34:79:91:EC:A6:18:2C:A5:9B:64:A2:94:81:A0:74:A3:57","sha256":"DD:73:B2:F2:0C:93:E6:AC:22:8B:33:E7:18:12:2F:78:95:14:EF:D9:E1:B3:D5:59:5A:73:0E:1B:07:B3:90:E9"}}},"request":{"raw":"OPTIONS / HTTP/1.1\r\nHost: arbitrum.gateway.tenderly.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://join-xrpfi.xyz/\r\nOrigin: https://join-xrpfi.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-headers: Content-Type\r\naccess-control-allow-methods: POST\r\naccess-control-allow-origin: *\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\ndate: Thu, 18 Jun 2026 16:01:25 GMT\r\ncontent-length: 0\r\nx-envoy-upstream-service-time: 0\r\nserver: envoy\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":0,"size_decoded":378,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-25T00:14:26.040585Z","times_seen":16694613,"resource_available":true,"data":null}},"time_used":80,"timings":{"blocked":-1,"dns":0,"connect":12,"send":0,"wait":49,"receive":0,"ssl":18},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/pop5b/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://join-xrpfi.xyz/","date":"2026-06-18T16:01:13.649Z","timestamp":1781798473649,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"challenges.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 16 Jun 2026 20:15:28 GMT","end":"Mon, 14 Sep 2026 21:15:13 GMT"},"fingerprint":{"sha1":"77:27:72:42:CF:51:E8:8C:7C:3E:8C:4C:A1:F0:9A:86:96:B9:0A:16","sha256":"ED:7C:F7:38:B3:0F:00:86:32:D1:14:CE:C0:FF:CA:0E:7C:86:EE:49:51:EF:A4:4B:AA:5C:B6:7C:00:B5:3D:F3"}}},"request":{"raw":"GET /cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/pop5b/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto HTTP/1.1\r\nHost: challenges.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 18 Jun 2026 16:01:13 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\npermissions-policy: accelerometer=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=(),xr-spatial-tracking=*\r\ncontent-security-policy: default-src 'none'; script-src 'nonce-DMh62SxP9i0fcOiCPGCnVG' 'unsafe-eval'; script-src-attr 'none'; worker-src blob:; style-src 'unsafe-inline'; img-src 'self'; connect-src 'self'; frame-src 'self' blob:; child-src 'self' blob:; form-action 'none'; base-uri 'self'; trusted-types JkfH9 default; require-trusted-types-for 'script'; sandbox allow-same-origin allow-scripts allow-popups allow-forms\r\ncross-origin-embedder-policy: require-corp\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: cross-origin\r\norigin-agent-cluster: ?1\r\naccept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA\r\ncritical-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA\r\nreferrer-policy: same-origin\r\ndocument-policy: js-profiling\r\npriority: u=6,i=?0\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: a0db82ec5b77dfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: aeenxvmw;dur=227801, cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":227801,"size_decoded":91412,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (65536), with no line terminators","md5":"9a5e7317440256b78c83b6bd138be0df","sha1":"c3f9ad62bead7fc237b57c17f176f2fe94e84bf3","sha256":"758fa01861b87226aa072d0c03b766d697b2643111cc0c040e07a82b8eeff822","sha512":"ee3d7e00efc7a8087d4708cb8715911b1ea3e001a2062f026bdeaa28774d0f3899204e29c492130333f250542ea69910b88e3e3f2f3f9cecdd28da4be4746744","ssdeep":"3072:eD1DVgVvi9VKkBmMaMlgBQg2AeljgAByeTcTEQM3:eD5Vt9lkMaSoEAelsAYTvM3","tlshash":"68242c893aca715b02f61bb40077f9cab23b5ca41036152cd60179e0fcb676d76b7a9c","first_seen":"2026-06-18T16:02:55.766061Z","last_seen":"2026-06-18T16:02:55.766061Z","times_seen":1,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":13,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"join-xrpfi.xyz/city_ori.webm","fqdn":"join-xrpfi.xyz","domain":"join-xrpfi.xyz","tld":"xyz"},"ip":{"addr":"172.67.202.7","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://join-xrpfi.xyz/","date":"2026-06-18T16:01:20.521Z","timestamp":1781798480521,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"join-xrpfi.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Jun 2026 22:20:30 GMT","end":"Mon, 07 Sep 2026 23:18:55 GMT"},"fingerprint":{"sha1":"BD:76:DB:17:19:68:29:BF:5D:8F:84:8A:F4:BC:DC:4F:63:81:CE:5A","sha256":"7A:F8:07:B7:03:C9:82:FD:B6:4F:E8:06:FA:66:A4:93:D8:74:F5:5C:00:DD:5B:A6:8B:52:C4:61:EA:68:C1:D4"}}},"request":{"raw":"GET /city_ori.webm HTTP/1.1\r\nHost: join-xrpfi.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nRange: bytes=0-\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://join-xrpfi.xyz/\r\nCookie: cf_clearance=3sQx4O48cjL3MFPGKWSZ61gbAJ0Fsb19CV5Td5ovrfs-1781798479-1.2.1.1-6InG6zHSWZQ9klTR0SWrkCCd2amThW3ZvgBV9QX.YygxniZ2gero7Sv0k_PQyL_pw4b46hxD4mkmSOyphsEoHzbXHXfFOOQs.7TR0_V0LJaZHtTwFhzQoJfxt3ekxBzXv3GW2lfXX18wX5JtUEGQs_uPdClhd0gEnyuawbiC4ZvF.yis7gd0CMoixQzWLguFvYW35guV28_t3b0VHPoaNB1pvLiuIPvfAR.LBgS4tMLTpQ7cvnZyYUpgwznXJdLv51P17bJB4V1UgefdTcvYTBtsln1W6WbJQ3YD6IcexX65CeKH04k92ALfOTwXTrQmnbi48XXvC8qmg0jBdlKn1_mEzvupFWiHx0PPaIei6u2f14bt_5seBIYbd4GWWFhHxz9asbtFuh6MuYlyQwJ7vQJvOleaURzAiWPjl2sq6c7Keyh2CXDT.UnjdlME5nTFJJxlJjcG_UV162r4Hmj5EbldbS3j2YEbB8.z1CY8gAouDRomY2Pmc87xzeTOewza\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: video/webm\r\netag: \"a51f5d83c91adbd04ed54a6b5479ea81\"\r\nlast-modified: Tue, 09 Jun 2026 23:24:00 GMT\r\ndate: Thu, 18 Jun 2026 16:01:20 GMT\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9rmIxx0htPXHyLG3OU1KCfXdfVBRP9cUf7Xkjhy0RHy%2BQ9o%2BvD6QUWH8LEg8C0EJYqzXNxbYUsSYzN9qijKo1eBT44FbuiGbB%2B0zra6PU9GxnATD1F%2BCHWqKhi9gR8DXJw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a0db83174aec56a8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":262032,"size_decoded":262703,"mime_type":"video/webm","magic":"WebM","md5":"a51f5d83c91adbd04ed54a6b5479ea81","sha1":"bbc60e6eaa15ec3083c4e7dfddddfc52927d6be2","sha256":"63210defbb886035555e53410789cdc204909047a1aa139ccd2abfb78d20b0ba","sha512":"bba08f3a88d355eeaa622bb29f864057f71b6b16034f84d3acb4efde3b8fefc7491eb6f20777f8bc651709ac494f0423820f2dcf4210dbab68a7522d7d83e35d","ssdeep":"6144:rd9H6MksUSF1qtWswBcgN4+F/McVr7yZVArUdBMLbi4Acq:r3aMsSOQswjN/RMWHBrEBEbbHq","tlshash":"ce441211ccd6fa67d84c92f1b23e065e8494805fa523d3452db7f01ee67ab8de90a4b3","first_seen":"2025-10-21T19:21:03.381512Z","last_seen":"2026-06-19T07:14:12.38773Z","times_seen":26,"resource_available":false,"data":null}},"time_used":662,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":308,"receive":354,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"join-xrpfi.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"join-xrpfi.xyz/cdn-cgi/challenge-platform/h/b/flow/ov1/3410790414:1781795227:ChO0fcuzUFOZzQEiojKphWQ8yM5nVezOVMpGYDd_bv0/a0db82e8095856a8/TEop._dwwpBjz58Y6bTvlV7N48i8NKo2.Q3rA2jCBQ4-1781798472-1.2.1.1-bN8LjfGa93rxRtGszM_8n_IgJJlYhSePQmSVMakTZrf2uuAkW3QhbvsixY0BQHuo","fqdn":"join-xrpfi.xyz","domain":"join-xrpfi.xyz","tld":"xyz"},"ip":{"addr":"172.67.202.7","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://join-xrpfi.xyz/","date":"2026-06-18T16:01:13.575Z","timestamp":1781798473575,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"join-xrpfi.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Jun 2026 22:20:30 GMT","end":"Mon, 07 Sep 2026 23:18:55 GMT"},"fingerprint":{"sha1":"BD:76:DB:17:19:68:29:BF:5D:8F:84:8A:F4:BC:DC:4F:63:81:CE:5A","sha256":"7A:F8:07:B7:03:C9:82:FD:B6:4F:E8:06:FA:66:A4:93:D8:74:F5:5C:00:DD:5B:A6:8B:52:C4:61:EA:68:C1:D4"}}},"request":{"raw":"POST /cdn-cgi/challenge-platform/h/b/flow/ov1/3410790414:1781795227:ChO0fcuzUFOZzQEiojKphWQ8yM5nVezOVMpGYDd_bv0/a0db82e8095856a8/TEop._dwwpBjz58Y6bTvlV7N48i8NKo2.Q3rA2jCBQ4-1781798472-1.2.1.1-bN8LjfGa93rxRtGszM_8n_IgJJlYhSePQmSVMakTZrf2uuAkW3QhbvsixY0BQHuo HTTP/1.1\r\nHost: join-xrpfi.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://join-xrpfi.xyz/\r\ncf-chl: TEop._dwwpBjz58Y6bTvlV7N48i8NKo2.Q3rA2jCBQ4-1781798472-1.2.1.1-bN8LjfGa93rxRtGszM_8n_IgJJlYhSePQmSVMakTZrf2uuAkW3QhbvsixY0BQHuo\r\ncf-chl-ra: 0\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 2252\r\nOrigin: https://join-xrpfi.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/plain; charset=UTF-8\r\ncf-chl-gen: Ozna8vXUCiqSopSPAVAIZyS3ypLUWqBvZ1LZOUthJGE=$5XvZwKoWno9GnGdHVgrZ6Q==\r\ntiming-allow-origin: https://join-xrpfi.xyz\r\ncontent-encoding: zstd\r\ndate: Thu, 18 Jun 2026 16:01:13 GMT\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncf-ray: a0db82ebd98856a8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":22072,"size_decoded":17004,"mime_type":"text/plain; charset=UTF-8","magic":"ASCII text, with very long lines (22072), with no line terminators","md5":"8b7bf7075d1cdf4673ab1470a6ed6eb8","sha1":"049532dd5ef8e9aeca01f13337c499cd75c8beca","sha256":"67786a80ca471c3666d1590007e92ac9cdbc5dffd869605f0bad2a2a66fef453","sha512":"0898fc951f99ff98ca95ed5ca71cfccb28cdedcc66e414e267b12ac6a17bb94b84b11cffa12465f6444b178a0189bfcce2521907f21af74178880be92a814923","ssdeep":"384:TrrVugcU8qzt41HHpneDZiavSXCL5PiFgdZOi1falHTuU8vvY2VFIoLM+hc3FBTJ:/RuLU8y41HEZmX0BZhfalzz848ygzhlY","tlshash":"9ba2d0490c8657ee9bb22ecfc77c9f12df90a7a56044a86073ca71b84b9fe99c1503d4","first_seen":"2026-06-18T16:02:55.770799Z","last_seen":"2026-06-18T16:02:55.770799Z","times_seen":1,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"join-xrpfi.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"join-xrpfi.xyz/quicknode%2520logo.webp","fqdn":"join-xrpfi.xyz","domain":"join-xrpfi.xyz","tld":"xyz"},"ip":{"addr":"172.67.202.7","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://join-xrpfi.xyz/","date":"2026-06-18T16:01:20.882Z","timestamp":1781798480882,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"join-xrpfi.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Jun 2026 22:20:30 GMT","end":"Mon, 07 Sep 2026 23:18:55 GMT"},"fingerprint":{"sha1":"BD:76:DB:17:19:68:29:BF:5D:8F:84:8A:F4:BC:DC:4F:63:81:CE:5A","sha256":"7A:F8:07:B7:03:C9:82:FD:B6:4F:E8:06:FA:66:A4:93:D8:74:F5:5C:00:DD:5B:A6:8B:52:C4:61:EA:68:C1:D4"}}},"request":{"raw":"GET /quicknode%2520logo.webp HTTP/1.1\r\nHost: join-xrpfi.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://join-xrpfi.xyz/\r\nCookie: cf_clearance=3sQx4O48cjL3MFPGKWSZ61gbAJ0Fsb19CV5Td5ovrfs-1781798479-1.2.1.1-6InG6zHSWZQ9klTR0SWrkCCd2amThW3ZvgBV9QX.YygxniZ2gero7Sv0k_PQyL_pw4b46hxD4mkmSOyphsEoHzbXHXfFOOQs.7TR0_V0LJaZHtTwFhzQoJfxt3ekxBzXv3GW2lfXX18wX5JtUEGQs_uPdClhd0gEnyuawbiC4ZvF.yis7gd0CMoixQzWLguFvYW35guV28_t3b0VHPoaNB1pvLiuIPvfAR.LBgS4tMLTpQ7cvnZyYUpgwznXJdLv51P17bJB4V1UgefdTcvYTBtsln1W6WbJQ3YD6IcexX65CeKH04k92ALfOTwXTrQmnbi48XXvC8qmg0jBdlKn1_mEzvupFWiHx0PPaIei6u2f14bt_5seBIYbd4GWWFhHxz9asbtFuh6MuYlyQwJ7vQJvOleaURzAiWPjl2sq6c7Keyh2CXDT.UnjdlME5nTFJJxlJjcG_UV162r4Hmj5EbldbS3j2YEbB8.z1CY8gAouDRomY2Pmc87xzeTOewza\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\ndate: Thu, 18 Jun 2026 16:01:21 GMT\r\nserver: cloudflare\r\npriority: u=5,i\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MeBmKwMczw9E%2F0Kwz20%2FVWrIxJYFxj2NboEiSRhUeR549ALhayIcHk%2Be9sBnmvp0caNarmmM2fnrr%2B6LGH6rLOG8VuvjbcqG%2F4Xg9ySKiWg9zvNVRbQUOYPui7WhIDKDcg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a0db83198b0556a8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":556,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-25T00:14:26.040585Z","times_seen":16694613,"resource_available":true,"data":null}},"time_used":275,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":275,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"join-xrpfi.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"arb1.arbitrum.io/rpc","fqdn":"arb1.arbitrum.io","domain":"arbitrum.io","tld":"io"},"ip":{"addr":"104.20.39.96","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://join-xrpfi.xyz/","date":"2026-06-18T16:01:25.024Z","timestamp":1781798485024,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"arbitrum.io","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 05 May 2026 15:12:06 GMT","end":"Mon, 03 Aug 2026 15:12:05 GMT"},"fingerprint":{"sha1":"D3:54:F9:E1:4F:A1:F9:48:7A:90:AD:25:77:28:AC:8B:25:9F:8A:9B","sha256":"68:2B:C8:BC:79:16:DB:47:A5:AC:06:03:88:EF:7E:35:91:D6:08:8C:3A:52:2B:59:54:D3:FD:A9:7C:A4:61:06"}}},"request":{"raw":"OPTIONS /rpc HTTP/1.1\r\nHost: arb1.arbitrum.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://join-xrpfi.xyz/\r\nOrigin: https://join-xrpfi.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 \r\ndate: Thu, 18 Jun 2026 16:01:25 GMT\r\naccess-control-allow-headers: content-type\r\naccess-control-allow-methods: POST\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 600\r\ncontent-encoding: gzip\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nx-envoy-upstream-service-time: 1\r\nserver: cloudflare\r\ncf-cache-status: DYNAMIC\r\ncf-ray: a0db8333985375ab-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":0,"size_decoded":424,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-25T00:14:26.040585Z","times_seen":16694613,"resource_available":true,"data":null}},"time_used":194,"timings":{"blocked":-1,"dns":0,"connect":2,"send":0,"wait":170,"receive":0,"ssl":22},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/cmg/1","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/pop5b/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","date":"2026-06-18T16:01:13.766Z","timestamp":1781798473766,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"challenges.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 16 Jun 2026 20:15:28 GMT","end":"Mon, 14 Sep 2026 21:15:13 GMT"},"fingerprint":{"sha1":"77:27:72:42:CF:51:E8:8C:7C:3E:8C:4C:A1:F0:9A:86:96:B9:0A:16","sha256":"ED:7C:F7:38:B3:0F:00:86:32:D1:14:CE:C0:FF:CA:0E:7C:86:EE:49:51:EF:A4:4B:AA:5C:B6:7C:00:B5:3D:F3"}}},"request":{"raw":"GET /cdn-cgi/challenge-platform/h/b/cmg/1 HTTP/1.1\r\nHost: challenges.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/pop5b/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 18 Jun 2026 16:01:13 GMT\r\ncontent-type: image/png\r\ncontent-length: 86\r\npriority: u=6,i\r\nserver: cloudflare\r\ncf-ray: a0db82ed6fb7dfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":86,"size_decoded":305,"mime_type":"image/png","magic":"PNG image data, 2 x 2, 8-bit grayscale, non-interlaced","md5":"d654ec0411ea7d846f00c6e227f80b3f","sha1":"6a42c6bf46ae77fe4d783ddbf090d6fbe2c53bc3","sha256":"c9f705badfdefd57dbd394427afc9907c4ad37a00a20c80fbe4b30ef5f5e270b","sha512":"a3a9e67728009ec81e0f8466305a30901576d40ed479fae3c8207f3cf07a37538025e6725eee180b47e42944c1e10a09a1723af50a2c45cab28e29b1b62d0db9","ssdeep":"","tlshash":"f9a012c97180bd26c64903b6c1600224f8301057110347300447e8220462e04c2d4b02","first_seen":"2026-06-16T11:15:27.716156Z","last_seen":"2026-06-19T12:21:13.29913Z","times_seen":58,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"join-xrpfi.xyz/mute-subtitle.vtt","fqdn":"join-xrpfi.xyz","domain":"join-xrpfi.xyz","tld":"xyz"},"ip":{"addr":"172.67.202.7","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://join-xrpfi.xyz/","date":"2026-06-18T16:01:20.546Z","timestamp":1781798480546,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"join-xrpfi.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Jun 2026 22:20:30 GMT","end":"Mon, 07 Sep 2026 23:18:55 GMT"},"fingerprint":{"sha1":"BD:76:DB:17:19:68:29:BF:5D:8F:84:8A:F4:BC:DC:4F:63:81:CE:5A","sha256":"7A:F8:07:B7:03:C9:82:FD:B6:4F:E8:06:FA:66:A4:93:D8:74:F5:5C:00:DD:5B:A6:8B:52:C4:61:EA:68:C1:D4"}}},"request":{"raw":"GET /mute-subtitle.vtt HTTP/1.1\r\nHost: join-xrpfi.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: cf_clearance=3sQx4O48cjL3MFPGKWSZ61gbAJ0Fsb19CV5Td5ovrfs-1781798479-1.2.1.1-6InG6zHSWZQ9klTR0SWrkCCd2amThW3ZvgBV9QX.YygxniZ2gero7Sv0k_PQyL_pw4b46hxD4mkmSOyphsEoHzbXHXfFOOQs.7TR0_V0LJaZHtTwFhzQoJfxt3ekxBzXv3GW2lfXX18wX5JtUEGQs_uPdClhd0gEnyuawbiC4ZvF.yis7gd0CMoixQzWLguFvYW35guV28_t3b0VHPoaNB1pvLiuIPvfAR.LBgS4tMLTpQ7cvnZyYUpgwznXJdLv51P17bJB4V1UgefdTcvYTBtsln1W6WbJQ3YD6IcexX65CeKH04k92ALfOTwXTrQmnbi48XXvC8qmg0jBdlKn1_mEzvupFWiHx0PPaIei6u2f14bt_5seBIYbd4GWWFhHxz9asbtFuh6MuYlyQwJ7vQJvOleaURzAiWPjl2sq6c7Keyh2CXDT.UnjdlME5nTFJJxlJjcG_UV162r4Hmj5EbldbS3j2YEbB8.z1CY8gAouDRomY2Pmc87xzeTOewza\r\nSec-Fetch-Dest: track\r\nSec-Fetch-Mode: same-origin\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/vtt\r\netag: \"53142af388215162f1a72eaad5603c77\"\r\nlast-modified: Tue, 09 Jun 2026 23:23:59 GMT\r\ndate: Thu, 18 Jun 2026 16:01:20 GMT\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WIqW6wKVB%2FOGYqKA6q08TBiIOI7%2FqjqBxj4Dr%2FNhambLxBmhJecF2ej7XoE27iYYUVsHR%2BJevAt3qh%2F3W876MLcBohjApRpzV8mWD98340L17%2FhxGQJOfiqZ%2Fme8%2BYORnQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-length: 86\r\ncf-ray: a0db83176af356a8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/vtt","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-25T00:14:26.040585Z","times_seen":16694613,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"join-xrpfi.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"join-xrpfi.xyz/?__cf_chl_tk=1qB4QJSwoQl6KPDg2Zms3S0YcJdeBFWlEfdknJt3Bmc-1781798472-1.0.1.1-mLCjWBCrDHs8J3pcf5FAcPoJqx2ikaBbmmjyzzW90Vg","fqdn":"join-xrpfi.xyz","domain":"join-xrpfi.xyz","tld":"xyz"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-06-18T16:01:28.583Z","timestamp":1781798488583,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"join-xrpfi.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Jun 2026 22:20:30 GMT","end":"Mon, 07 Sep 2026 23:18:55 GMT"},"fingerprint":{"sha1":"BD:76:DB:17:19:68:29:BF:5D:8F:84:8A:F4:BC:DC:4F:63:81:CE:5A","sha256":"7A:F8:07:B7:03:C9:82:FD:B6:4F:E8:06:FA:66:A4:93:D8:74:F5:5C:00:DD:5B:A6:8B:52:C4:61:EA:68:C1:D4"}}},"request":{"raw":"GET /?__cf_chl_tk=1qB4QJSwoQl6KPDg2Zms3S0YcJdeBFWlEfdknJt3Bmc-1781798472-1.0.1.1-mLCjWBCrDHs8J3pcf5FAcPoJqx2ikaBbmmjyzzW90Vg HTTP/1.1\r\nHost: join-xrpfi.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: cf_clearance=3sQx4O48cjL3MFPGKWSZ61gbAJ0Fsb19CV5Td5ovrfs-1781798479-1.2.1.1-6InG6zHSWZQ9klTR0SWrkCCd2amThW3ZvgBV9QX.YygxniZ2gero7Sv0k_PQyL_pw4b46hxD4mkmSOyphsEoHzbXHXfFOOQs.7TR0_V0LJaZHtTwFhzQoJfxt3ekxBzXv3GW2lfXX18wX5JtUEGQs_uPdClhd0gEnyuawbiC4ZvF.yis7gd0CMoixQzWLguFvYW35guV28_t3b0VHPoaNB1pvLiuIPvfAR.LBgS4tMLTpQ7cvnZyYUpgwznXJdLv51P17bJB4V1UgefdTcvYTBtsln1W6WbJQ3YD6IcexX65CeKH04k92ALfOTwXTrQmnbi48XXvC8qmg0jBdlKn1_mEzvupFWiHx0PPaIei6u2f14bt_5seBIYbd4GWWFhHxz9asbtFuh6MuYlyQwJ7vQJvOleaURzAiWPjl2sq6c7Keyh2CXDT.UnjdlME5nTFJJxlJjcG_UV162r4Hmj5EbldbS3j2YEbB8.z1CY8gAouDRomY2Pmc87xzeTOewza\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-25T00:14:26.040585Z","times_seen":16694613,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"join-xrpfi.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/pat/a0db82ec5b77dfec/1781798474086/032c6647b41ab42203316b2256b4337120a13292297521b7b992c96059bdae38/91hklv0np83JsPG","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/pop5b/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","date":"2026-06-18T16:01:15.913Z","timestamp":1781798475913,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"challenges.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 16 Jun 2026 20:15:28 GMT","end":"Mon, 14 Sep 2026 21:15:13 GMT"},"fingerprint":{"sha1":"77:27:72:42:CF:51:E8:8C:7C:3E:8C:4C:A1:F0:9A:86:96:B9:0A:16","sha256":"ED:7C:F7:38:B3:0F:00:86:32:D1:14:CE:C0:FF:CA:0E:7C:86:EE:49:51:EF:A4:4B:AA:5C:B6:7C:00:B5:3D:F3"}}},"request":{"raw":"GET /cdn-cgi/challenge-platform/h/b/pat/a0db82ec5b77dfec/1781798474086/032c6647b41ab42203316b2256b4337120a13292297521b7b992c96059bdae38/91hklv0np83JsPG HTTP/1.1\r\nHost: challenges.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/pop5b/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 401 \r\ndate: Thu, 18 Jun 2026 16:01:15 GMT\r\ncontent-type: text/plain; charset=utf-8\r\ncontent-length: 1\r\nwww-authenticate: PrivateToken challenge=\"AAIAGXBhdC1pc3N1ZXIuY2xvdWRmbGFyZS5jb20gAyxmR7QatCIDMWsiVrQzcSChMpIpdSG3uZLJYFm9rjgAGWNoYWxsZW5nZXMuY2xvdWRmbGFyZS5jb20=\", token-key=\"MIIBUjA9BgkqhkiG9w0BAQowMKANMAsGCWCGSAFlAwQCAqEaMBgGCSqGSIb3DQEBCDALBglghkgBZQMEAgKiAwIBMAOCAQ8AMIIBCgKCAQEAyBHLF-lucvyi9hjdYkuqs8rq9jDD7W73LexEOXNJLcqHRltJlI0qi-wEaKJox3O8FpL8L2tGOsB8-7D8OhU-VC8suumBQK2IwNs8jRYCQD1KSFgwv7BBStOxYCxbAKpN9Ypo3e5aG-pzMZzRNUMMLYs6C8zon0bqWg7Zlg-4kZiTPXKGTcwAVrMkY-MltNfg2tgCls55BhqL7JRgwKLowvZx4xWBzqXuqt1g3nr7gR5-WK7ODigltYPagj_HAMrUAsomf0WIdz4pFfM98Icbiw_-HQiLuHKbA0dJ9M2KKrZzGuE0NrNabvwJgGXq39wNnSg6JpV8plrO5z9UMboztwIDAQAB\", max-age=20, PrivateToken challenge=\"AAIAHXNhdC5wYXQtaXNzdWVyLmNsb3VkZmxhcmUuY29tIAMsZke0GrQiAzFrIla0M3EgoTKSKXUht7mSyWBZva44ABljaGFsbGVuZ2VzLmNsb3VkZmxhcmUuY29t\", token-key=\"MIIBUjA9BgkqhkiG9w0BAQowMKANMAsGCWCGSAFlAwQCAqEaMBgGCSqGSIb3DQEBCDALBglghkgBZQMEAgKiAwIBMAOCAQ8AMIIBCgKCAQEAn5A3z69BM2tpdtMiEi2FJN8rdQPZY_W0518bUO3Z-m5RQN3lwSoA_FaQ-G_LK49f6fkTjz3VsQyKxJd--2ZTy34zma1svuR9y0N60ZfXaK-WajSDpNN_VFiY3Q6hZ46lswsS3krxEWjOB7AItiy1pnUdNLka7Xan1f6oHjTR1HlWzUOMa4uYZHQ7D3zu3XjaM3Z7_jxcZeDnUC5boysrhtLG38U0x_g0pBtgnulTV4xhqrG9hQS4ebALfEtbh_9_wIUAv4BbxEsZKRuXEgdv1gjoJOqesnfi5AzG5dEFxTGZUCPIO1_Iagu_2yPzPSJIrjS2wjyOzIP_7Eu2I3-gXQIDAQAB\", max-age=20, PrivateToken challenge=\"AAIALHBwLWlzc3Vlci1wcm9kdWN0aW9uLnJlc2VhcmNoLmNsb3VkZmxhcmUuY29tIAMsZke0GrQiAzFrIla0M3EgoTKSKXUht7mSyWBZva44ABljaGFsbGVuZ2VzLmNsb3VkZmxhcmUuY29t\", token-key=\"MIIBUjA9BgkqhkiG9w0BAQowMKANMAsGCWCGSAFlAwQCAqEaMBgGCSqGSIb3DQEBCDALBglghkgBZQMEAgKiAwIBMAOCAQ8AMIIBCgKCAQEAsxviSI6sjMo3EYekYTf-dIPsJKZ5cD3xsEmHYx664Sbocwxx4OVFCyBfqccoQRmEX0XWSEj0hYyxpSGEz2i9yhmVRSjkqknoFfuOjUc0KcblcHhVGtTIWERy01RB1YmfcngH9Znt-Z--XyaRArOXumCFBV41ZLC7--LANYHBuhSz34fCGCIFKJsbk8ggBIemExpY3f1t2OZNs4mYLHE-7DhMSYP3Yd171ZcDGvSvtW59KNqQwgCwNcjSY6crHCr8mc-vyzSJFS62lUdla7lPGnm51ne0hJTiFcfY2rDXKUBERMhEYaNuHy1itCEsHOinnQKV89W6SPZmavtQU2h-QwIDAQAB\", max-age=20\r\npriority: u=6,i=?0\r\nserver: cloudflare\r\ncf-ray: a0db82fa7b82dfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"401","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1,"size_decoded":2171,"mime_type":"text/plain; charset=utf-8","magic":"very short file (no magic)","md5":"ff44570aca8241914870afbc310cdb85","sha1":"58668e7669fd564d99db5d581fcdb6a5618440b5","sha256":"6da43b944e494e885e69af021f93c6d9331c78aa228084711429160a5bbd15b5","sha512":"3c266c0035de59eab2a0dd31b3dcb4a9dd157b310289e5db9ab4f8c2fddb7433466d48f25da7ad735a1cb8f2935aa612ad1f62f0efcece3933ba9979082e2304","ssdeep":"","tlshash":"c700000000000003c00000300000003000000000000000000003000000000000000000","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-25T00:06:13.419268Z","times_seen":467854,"resource_available":true,"data":null}},"time_used":5,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"join-xrpfi.xyz/Elliptic-1.webp","fqdn":"join-xrpfi.xyz","domain":"join-xrpfi.xyz","tld":"xyz"},"ip":{"addr":"172.67.202.7","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://join-xrpfi.xyz/","date":"2026-06-18T16:01:20.870Z","timestamp":1781798480870,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"join-xrpfi.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Jun 2026 22:20:30 GMT","end":"Mon, 07 Sep 2026 23:18:55 GMT"},"fingerprint":{"sha1":"BD:76:DB:17:19:68:29:BF:5D:8F:84:8A:F4:BC:DC:4F:63:81:CE:5A","sha256":"7A:F8:07:B7:03:C9:82:FD:B6:4F:E8:06:FA:66:A4:93:D8:74:F5:5C:00:DD:5B:A6:8B:52:C4:61:EA:68:C1:D4"}}},"request":{"raw":"GET /Elliptic-1.webp HTTP/1.1\r\nHost: join-xrpfi.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://join-xrpfi.xyz/\r\nCookie: cf_clearance=3sQx4O48cjL3MFPGKWSZ61gbAJ0Fsb19CV5Td5ovrfs-1781798479-1.2.1.1-6InG6zHSWZQ9klTR0SWrkCCd2amThW3ZvgBV9QX.YygxniZ2gero7Sv0k_PQyL_pw4b46hxD4mkmSOyphsEoHzbXHXfFOOQs.7TR0_V0LJaZHtTwFhzQoJfxt3ekxBzXv3GW2lfXX18wX5JtUEGQs_uPdClhd0gEnyuawbiC4ZvF.yis7gd0CMoixQzWLguFvYW35guV28_t3b0VHPoaNB1pvLiuIPvfAR.LBgS4tMLTpQ7cvnZyYUpgwznXJdLv51P17bJB4V1UgefdTcvYTBtsln1W6WbJQ3YD6IcexX65CeKH04k92ALfOTwXTrQmnbi48XXvC8qmg0jBdlKn1_mEzvupFWiHx0PPaIei6u2f14bt_5seBIYbd4GWWFhHxz9asbtFuh6MuYlyQwJ7vQJvOleaURzAiWPjl2sq6c7Keyh2CXDT.UnjdlME5nTFJJxlJjcG_UV162r4Hmj5EbldbS3j2YEbB8.z1CY8gAouDRomY2Pmc87xzeTOewza\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: image/webp\r\netag: \"418e8ca779ee89f651aaa9add5c78c90\"\r\nlast-modified: Tue, 09 Jun 2026 23:23:59 GMT\r\ndate: Thu, 18 Jun 2026 16:01:25 GMT\r\nserver: cloudflare\r\npriority: u=5,i\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dEvbtMIHo2PMM3%2F5pji1USNBkNqvoY8AqhiPoC5AWR%2Fh4OhdZEDNBhKkjBENmUERYsIXGp1ort12QIAq33cTpgqDGSyloO%2Fx7nlTY4HDAhEWiJzQWbJ%2BaIn7hlaOa9CP9Q%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-length: 526\r\ncf-ray: a0db83197b0056a8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":526,"size_decoded":1237,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"418e8ca779ee89f651aaa9add5c78c90","sha1":"e0af31da3df7bd0c0957796905616e771db98715","sha256":"85fc06aee2ce609ce0b14ec5ff91fc24d44246613ebf59017da1435e2e61983f","sha512":"90b49903acdd17f9b0882732ceaef0207c6d6147c8673ad2e9404432ac4ee4837ecad27ff17bd656d76b33afdd6e4e8142195ad3c669ae299c54897aeb0f34bb","ssdeep":"","tlshash":"83f07544b23004ebdaacfa3201ec2e891955c10ebf301921124ee9d21785babf433ed0","first_seen":"2025-08-11T21:39:04.774047Z","last_seen":"2026-06-19T07:14:12.322658Z","times_seen":34,"resource_available":false,"data":null}},"time_used":5070,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5070,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"join-xrpfi.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"arb1.arbitrum.io/rpc","fqdn":"arb1.arbitrum.io","domain":"arbitrum.io","tld":"io"},"ip":{"addr":"104.20.39.96","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://join-xrpfi.xyz/","date":"2026-06-18T16:01:25.020Z","timestamp":1781798485020,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"arbitrum.io","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 05 May 2026 15:12:06 GMT","end":"Mon, 03 Aug 2026 15:12:05 GMT"},"fingerprint":{"sha1":"D3:54:F9:E1:4F:A1:F9:48:7A:90:AD:25:77:28:AC:8B:25:9F:8A:9B","sha256":"68:2B:C8:BC:79:16:DB:47:A5:AC:06:03:88:EF:7E:35:91:D6:08:8C:3A:52:2B:59:54:D3:FD:A9:7C:A4:61:06"}}},"request":{"raw":"POST /rpc HTTP/1.1\r\nHost: arb1.arbitrum.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://join-xrpfi.xyz/\r\nContent-Type: application/json\r\nContent-Length: 136\r\nOrigin: https://join-xrpfi.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 \r\ndate: Thu, 18 Jun 2026 16:01:25 GMT\r\ncontent-type: application/json\r\ncontent-length: 201\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nvary: Origin, accept-encoding\r\nx-envoy-upstream-service-time: 2\r\nserver: cloudflare\r\ncf-cache-status: DYNAMIC\r\ncf-ray: a0db83350a0975ab-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":423,"size_decoded":523,"mime_type":"application/json","magic":"JSON text data","md5":"32b434d34e1e0c5754f81d0d13f55df3","sha1":"0bc7dcd4c11a26525880be40f6f42d516f856ddf","sha256":"8e3dee8a53880b424b5fab4180224ae8e075f18d1196f6ec1cd451e3506635ed","sha512":"e03b2561b26d0c8ce861fdbb92bfb98b98cf7de05e2a64f7a46b486e3a0b80ede2d5a082d41e1c6e1640eee80348a64bd0db43625d9e654da8cb4db410fb9365","ssdeep":"","tlshash":"c7e02bd04c885641d64f0d4a664a798692783926eed40a8b088828182be51abab1d694","first_seen":"2026-06-18T16:02:55.801493Z","last_seen":"2026-06-18T16:02:55.801493Z","times_seen":1,"resource_available":false,"data":null}},"time_used":201,"timings":{"blocked":53,"dns":0,"connect":0,"send":0,"wait":148,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"arbitrum-one.publicnode.com/","fqdn":"arbitrum-one.publicnode.com","domain":"publicnode.com","tld":"com"},"ip":{"addr":"172.66.150.162","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://join-xrpfi.xyz/","date":"2026-06-18T16:01:25.030Z","timestamp":1781798485030,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"publicnode.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Jun 2026 01:05:04 GMT","end":"Mon, 07 Sep 2026 02:05:00 GMT"},"fingerprint":{"sha1":"39:B4:D5:B4:26:71:60:64:13:47:CC:54:ED:BC:AD:E1:33:77:19:00","sha256":"65:A9:40:31:FB:2A:25:C7:3B:B6:B3:F0:4E:96:B9:08:CE:FC:27:5A:F6:DB:32:E8:7E:64:C7:51:34:DA:93:85"}}},"request":{"raw":"POST / HTTP/1.1\r\nHost: arbitrum-one.publicnode.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://join-xrpfi.xyz/\r\nContent-Type: application/json\r\nContent-Length: 136\r\nOrigin: https://join-xrpfi.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 \r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 1728000\r\ncontent-type: application/json\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, accept-encoding\r\ndate: Thu, 18 Jun 2026 16:01:25 GMT\r\npriority: u=4,i=?0\r\nx-envoy-upstream-service-time: 1\r\nserver: cloudflare\r\ncf-cache-status: DYNAMIC\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\ncf-ray: a0db83340a565689-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":423,"size_decoded":705,"mime_type":"application/json","magic":"JSON text data","md5":"32b434d34e1e0c5754f81d0d13f55df3","sha1":"0bc7dcd4c11a26525880be40f6f42d516f856ddf","sha256":"8e3dee8a53880b424b5fab4180224ae8e075f18d1196f6ec1cd451e3506635ed","sha512":"e03b2561b26d0c8ce861fdbb92bfb98b98cf7de05e2a64f7a46b486e3a0b80ede2d5a082d41e1c6e1640eee80348a64bd0db43625d9e654da8cb4db410fb9365","ssdeep":"","tlshash":"c7e02bd04c885641d64f0d4a664a798692783926eed40a8b088828182be51abab1d694","first_seen":"2026-06-18T16:02:55.801493Z","last_seen":"2026-06-18T16:02:55.801493Z","times_seen":1,"resource_available":false,"data":null}},"time_used":93,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":93,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"arbitrum.meowrpc.com/","fqdn":"arbitrum.meowrpc.com","domain":"meowrpc.com","tld":"com"},"ip":{"addr":"104.26.10.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://join-xrpfi.xyz/","date":"2026-06-18T16:01:25.052Z","timestamp":1781798485052,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"meowrpc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 17:34:32 GMT","end":"Tue, 01 Sep 2026 18:34:19 GMT"},"fingerprint":{"sha1":"78:4A:BA:FF:8C:0B:6A:C6:ED:79:41:C4:76:F9:F8:BF:73:62:59:82","sha256":"B7:3B:89:BB:B9:D1:2E:D6:73:1E:CD:1B:A5:D3:D9:21:43:F6:C5:57:71:93:11:42:0E:54:A9:E7:B4:CB:08:47"}}},"request":{"raw":"OPTIONS / HTTP/1.1\r\nHost: arbitrum.meowrpc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://join-xrpfi.xyz/\r\nOrigin: https://join-xrpfi.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 \r\ndate: Thu, 18 Jun 2026 16:01:25 GMT\r\ncontent-length: 0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: origin, access-control-request-method, access-control-request-headers\r\naccess-control-allow-methods: GET,POST,OPTIONS\r\naccess-control-allow-headers: authorization,content-type,dnt,keep-alive,user-agent,x-requested-with,if-modified-since,cache-control,range,x-api-key\r\naccess-control-allow-origin: *\r\nallow: POST\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RacVNpaUfNHUJdBbNQup7I8FoOIBXD3cwmZwqW4GYseOOrSPQbyLs0OU7a9af5%2F3FOcvQIRn4LqlxNJtHGXjdu8EuCGk6a05mXjAcxUyRun1dcnQqFlyLXcS%2FGcy25NnAHyLl%2Fb1\"}]}\r\nserver: cloudflare\r\ncf-ray: a0db8333abdea0f0-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":811,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-25T00:14:26.040585Z","times_seen":16694613,"resource_available":true,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":0,"connect":1,"send":0,"wait":27,"receive":0,"ssl":11},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/flow/ov1/888930064:1781795229:ULXbcCJinkVtfIv0XYZz-roMXsa3oLUICDmOblEQ1Qs/a0db82ec5b77dfec/EvW9ExeaN2.SCjWV0HuO6seZRTZA3Y1MXLHzN3L1hUE-1781798473-1.2.1.1-qnwdQYnnVb9zYEkHMPlfotRLx8mPdzIynAh.VdfiqNNA7ayODTDgkozCs45IpB2D","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/pop5b/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","date":"2026-06-18T16:01:14.077Z","timestamp":1781798474077,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"challenges.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 16 Jun 2026 20:15:28 GMT","end":"Mon, 14 Sep 2026 21:15:13 GMT"},"fingerprint":{"sha1":"77:27:72:42:CF:51:E8:8C:7C:3E:8C:4C:A1:F0:9A:86:96:B9:0A:16","sha256":"ED:7C:F7:38:B3:0F:00:86:32:D1:14:CE:C0:FF:CA:0E:7C:86:EE:49:51:EF:A4:4B:AA:5C:B6:7C:00:B5:3D:F3"}}},"request":{"raw":"POST /cdn-cgi/challenge-platform/h/b/flow/ov1/888930064:1781795229:ULXbcCJinkVtfIv0XYZz-roMXsa3oLUICDmOblEQ1Qs/a0db82ec5b77dfec/EvW9ExeaN2.SCjWV0HuO6seZRTZA3Y1MXLHzN3L1hUE-1781798473-1.2.1.1-qnwdQYnnVb9zYEkHMPlfotRLx8mPdzIynAh.VdfiqNNA7ayODTDgkozCs45IpB2D HTTP/1.1\r\nHost: challenges.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/pop5b/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto\r\ncf-chl: EvW9ExeaN2.SCjWV0HuO6seZRTZA3Y1MXLHzN3L1hUE-1781798473-1.2.1.1-qnwdQYnnVb9zYEkHMPlfotRLx8mPdzIynAh.VdfiqNNA7ayODTDgkozCs45IpB2D\r\ncf-chl-ra: 0\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 4674\r\nOrigin: https://challenges.cloudflare.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 18 Jun 2026 16:01:14 GMT\r\ncontent-type: text/plain; charset=UTF-8\r\ncf-chl-gen: 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$OxdWqZDUd9RaZw8ar/3geg==\r\ntiming-allow-origin: https://challenges.cloudflare.com\r\npriority: u=3,i=?0\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: a0db82ef0d87dfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":446736,"size_decoded":336360,"mime_type":"text/plain; charset=UTF-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"ac9b4518e6bbeb438dca287325c698a2","sha1":"04402b58a47d80bb3b9b5d5e425c8b4667b0a87d","sha256":"9c5e5dd66d131452793c8284936065e3e92db23988a270c66fbde7b30191d231","sha512":"eb3afad57727a328dc943d2a99e0eddb34ec780c5eb2b30c0c1801cad140113cad3bab8abb12b6f39f7381cfd35fec287177fcf2e11ffde6cf5be2aa145ec828","ssdeep":"12288:h5fgtCMJJBLS8XqZe5PODyyF8tv8SQyuGtnXYv:h65BStZe52DyVqreXYv","tlshash":"e79423bb5eeb3fad4e14402e72776a0b49912f6a1435a7d4abe916c7c04fc881c30a5d","first_seen":"2026-06-18T16:02:55.808823Z","last_seen":"2026-06-18T16:02:55.808823Z","times_seen":1,"resource_available":false,"data":null}},"time_used":81,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":74,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"join-xrpfi.xyz/banner_main-5.webp","fqdn":"join-xrpfi.xyz","domain":"join-xrpfi.xyz","tld":"xyz"},"ip":{"addr":"172.67.202.7","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://join-xrpfi.xyz/","date":"2026-06-18T16:01:20.864Z","timestamp":1781798480864,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"join-xrpfi.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Jun 2026 22:20:30 GMT","end":"Mon, 07 Sep 2026 23:18:55 GMT"},"fingerprint":{"sha1":"BD:76:DB:17:19:68:29:BF:5D:8F:84:8A:F4:BC:DC:4F:63:81:CE:5A","sha256":"7A:F8:07:B7:03:C9:82:FD:B6:4F:E8:06:FA:66:A4:93:D8:74:F5:5C:00:DD:5B:A6:8B:52:C4:61:EA:68:C1:D4"}}},"request":{"raw":"GET /banner_main-5.webp HTTP/1.1\r\nHost: join-xrpfi.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://join-xrpfi.xyz/\r\nCookie: cf_clearance=3sQx4O48cjL3MFPGKWSZ61gbAJ0Fsb19CV5Td5ovrfs-1781798479-1.2.1.1-6InG6zHSWZQ9klTR0SWrkCCd2amThW3ZvgBV9QX.YygxniZ2gero7Sv0k_PQyL_pw4b46hxD4mkmSOyphsEoHzbXHXfFOOQs.7TR0_V0LJaZHtTwFhzQoJfxt3ekxBzXv3GW2lfXX18wX5JtUEGQs_uPdClhd0gEnyuawbiC4ZvF.yis7gd0CMoixQzWLguFvYW35guV28_t3b0VHPoaNB1pvLiuIPvfAR.LBgS4tMLTpQ7cvnZyYUpgwznXJdLv51P17bJB4V1UgefdTcvYTBtsln1W6WbJQ3YD6IcexX65CeKH04k92ALfOTwXTrQmnbi48XXvC8qmg0jBdlKn1_mEzvupFWiHx0PPaIei6u2f14bt_5seBIYbd4GWWFhHxz9asbtFuh6MuYlyQwJ7vQJvOleaURzAiWPjl2sq6c7Keyh2CXDT.UnjdlME5nTFJJxlJjcG_UV162r4Hmj5EbldbS3j2YEbB8.z1CY8gAouDRomY2Pmc87xzeTOewza\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: image/webp\r\netag: \"ff4cef6f77c80d86a3f7c2d73ad39f2f\"\r\nlast-modified: Tue, 09 Jun 2026 23:23:59 GMT\r\ndate: Thu, 18 Jun 2026 16:01:21 GMT\r\nserver: cloudflare\r\npriority: u=5,i\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Uc%2BfWzd0ogfoOD1az04iRIBsX633Ebuu0neK%2F6f52%2F6PWnW0MYw%2ByDy10QQxm5o%2Brha%2BgPZtr9SQ%2FDHGCZgsZj%2FnX%2FPj%2BDKzeIWR9FpK08hSG7maSJnu6zKb8DOgG5TtzA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a0db83196afd56a8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":20492,"size_decoded":21172,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1920x173, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"ff4cef6f77c80d86a3f7c2d73ad39f2f","sha1":"cff4989c30b3b46480f0e10cab01bb47e6ff8377","sha256":"fde9fd86ecbec2f137dfaa12270dfc5f63f35109669616629ca452bca6576f05","sha512":"63b338afe19096a78c5d49c4f0596cd67e5c77a66cfd4967e44f859ea32f1c59f61db0f1eaecd22036d4904a9db51e8612f7accfe548943b6673ecc3945fca70","ssdeep":"384:hOJiUHQHGe1qLqH1kBxC1LuaHiDcyd0aDPKxb+FXrqzFV2AvqsMX:hgiUHR2VsCxuMiDTLKxb+Bqb0ss","tlshash":"5c92d04f440ad2f6f101aed547bcd9165feab8ecba770250708d747801b60a52d937bd","first_seen":"2026-05-16T18:13:37.170366Z","last_seen":"2026-06-19T07:14:12.370264Z","times_seen":26,"resource_available":false,"data":null}},"time_used":346,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":265,"receive":81,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"join-xrpfi.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/d/a0db82ec5b77dfec/1781798474085/w495D_JsPctuCEf","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/pop5b/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","date":"2026-06-18T16:01:15.761Z","timestamp":1781798475761,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"challenges.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 16 Jun 2026 20:15:28 GMT","end":"Mon, 14 Sep 2026 21:15:13 GMT"},"fingerprint":{"sha1":"77:27:72:42:CF:51:E8:8C:7C:3E:8C:4C:A1:F0:9A:86:96:B9:0A:16","sha256":"ED:7C:F7:38:B3:0F:00:86:32:D1:14:CE:C0:FF:CA:0E:7C:86:EE:49:51:EF:A4:4B:AA:5C:B6:7C:00:B5:3D:F3"}}},"request":{"raw":"GET /cdn-cgi/challenge-platform/h/b/d/a0db82ec5b77dfec/1781798474085/w495D_JsPctuCEf HTTP/1.1\r\nHost: challenges.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/pop5b/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 18 Jun 2026 16:01:15 GMT\r\ncontent-type: image/png\r\ncontent-length: 1640\r\npriority: u=6,i\r\nserver: cloudflare\r\ncf-ray: a0db82f98fc0dfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1640,"size_decoded":1861,"mime_type":"image/png","magic":"PNG image data, 51 x 30, 8-bit grayscale, non-interlaced","md5":"fa2e8a7c786ed4f6b75696f37cff8ddf","sha1":"2ba60afb8e4a8ddf62dc09ae375a3362768c98e1","sha256":"f73d30b256e653c0612fd061cd38ff0a26b4ee5739f8e7bed57512ac9f959793","sha512":"411928656b535d7b5cfbfe189907b88aefb82f195f2833c353b02c7fd88a7fc7c5c5144d2f67249627cb6045590405c868a61da138165a2ed7968d232a9abf0a","ssdeep":"","tlshash":"5c3112dbd18568b9c1470136433c1100c81001020011610504e78c3ad44a828c7a4b01","first_seen":"2026-06-18T16:02:55.814119Z","last_seen":"2026-06-18T16:02:55.814119Z","times_seen":1,"resource_available":false,"data":null}},"time_used":5,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"join-xrpfi.xyz/","fqdn":"join-xrpfi.xyz","domain":"join-xrpfi.xyz","tld":"xyz"},"ip":{"addr":"172.67.202.7","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-06-18T16:01:19.921Z","timestamp":1781798479921,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"join-xrpfi.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Jun 2026 22:20:30 GMT","end":"Mon, 07 Sep 2026 23:18:55 GMT"},"fingerprint":{"sha1":"BD:76:DB:17:19:68:29:BF:5D:8F:84:8A:F4:BC:DC:4F:63:81:CE:5A","sha256":"7A:F8:07:B7:03:C9:82:FD:B6:4F:E8:06:FA:66:A4:93:D8:74:F5:5C:00:DD:5B:A6:8B:52:C4:61:EA:68:C1:D4"}}},"request":{"raw":"POST / HTTP/1.1\r\nHost: join-xrpfi.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://join-xrpfi.xyz/?__cf_chl_tk=1qB4QJSwoQl6KPDg2Zms3S0YcJdeBFWlEfdknJt3Bmc-1781798472-1.0.1.1-mLCjWBCrDHs8J3pcf5FAcPoJqx2ikaBbmmjyzzW90Vg\r\nContent-Type: application/x-www-form-urlencoded\r\nContent-Length: 2093\r\nOrigin: https://join-xrpfi.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: cf_clearance=3sQx4O48cjL3MFPGKWSZ61gbAJ0Fsb19CV5Td5ovrfs-1781798479-1.2.1.1-6InG6zHSWZQ9klTR0SWrkCCd2amThW3ZvgBV9QX.YygxniZ2gero7Sv0k_PQyL_pw4b46hxD4mkmSOyphsEoHzbXHXfFOOQs.7TR0_V0LJaZHtTwFhzQoJfxt3ekxBzXv3GW2lfXX18wX5JtUEGQs_uPdClhd0gEnyuawbiC4ZvF.yis7gd0CMoixQzWLguFvYW35guV28_t3b0VHPoaNB1pvLiuIPvfAR.LBgS4tMLTpQ7cvnZyYUpgwznXJdLv51P17bJB4V1UgefdTcvYTBtsln1W6WbJQ3YD6IcexX65CeKH04k92ALfOTwXTrQmnbi48XXvC8qmg0jBdlKn1_mEzvupFWiHx0PPaIei6u2f14bt_5seBIYbd4GWWFhHxz9asbtFuh6MuYlyQwJ7vQJvOleaURzAiWPjl2sq6c7Keyh2CXDT.UnjdlME5nTFJJxlJjcG_UV162r4Hmj5EbldbS3j2YEbB8.z1CY8gAouDRomY2Pmc87xzeTOewza\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nSec-Fetch-User: ?1\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/html;charset=utf-8\r\npriority: u=0,i\r\nlast-modified: Tue, 09 Jun 2026 23:24:00 GMT\r\ndate: Thu, 18 Jun 2026 16:01:20 GMT\r\nserver: cloudflare\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=juYXsFrRCOE%2FE7e5MYd2udpHchBt%2Fk8ckV%2F4zJXMxDebKAfXk7BY1NQFAnhRHdejHNQ%2BB7zJeNrALw0FVQlI49W71n1TxsuF8KfheHOZhSRBCpGVxH%2FbJ1XZ8dz1RcRNGQ%3D%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: zstd\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a0db83138ac656a8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":377488,"size_decoded":54102,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (5915)","md5":"884123492ae7900d018c0b68e1c33944","sha1":"3112abb2b34b3ba4db2518a73d015d9afa7994d0","sha256":"bec8ff10394f6cc9b66fb40020b63c27d3276ec7c4302ff83e5f6462301ab125","sha512":"9493366de36066d1402ab4508885becf86158c665af5d5ba0e94933df7e2c0006c8aa57e5e4ddd65ace0c21dba27c9e995194fa2cec8a81b853f05eefcec8463","ssdeep":"1536:1XEnhvo5sRTwECJG41icdCRej8CJy1icGC5YLLSHgxJn2RGa4bLPjoMyQHkeSFe3:18vo5scGebXS454nxG","tlshash":"4f84d9a2f3f112e7401e43e8e9765506efd060f7d1468e8c729c6af85f46c9c68d268e","first_seen":"2026-06-18T16:02:55.820107Z","last_seen":"2026-06-18T16:02:55.820107Z","times_seen":1,"resource_available":true,"data":null}},"time_used":587,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":222,"receive":365,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"join-xrpfi.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"join-xrpfi.xyz/64cb809db4dcd785.css","fqdn":"join-xrpfi.xyz","domain":"join-xrpfi.xyz","tld":"xyz"},"ip":{"addr":"172.67.202.7","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://join-xrpfi.xyz/","date":"2026-06-18T16:01:20.270Z","timestamp":1781798480270,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"join-xrpfi.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Jun 2026 22:20:30 GMT","end":"Mon, 07 Sep 2026 23:18:55 GMT"},"fingerprint":{"sha1":"BD:76:DB:17:19:68:29:BF:5D:8F:84:8A:F4:BC:DC:4F:63:81:CE:5A","sha256":"7A:F8:07:B7:03:C9:82:FD:B6:4F:E8:06:FA:66:A4:93:D8:74:F5:5C:00:DD:5B:A6:8B:52:C4:61:EA:68:C1:D4"}}},"request":{"raw":"GET /64cb809db4dcd785.css HTTP/1.1\r\nHost: join-xrpfi.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://join-xrpfi.xyz/\r\nCookie: cf_clearance=3sQx4O48cjL3MFPGKWSZ61gbAJ0Fsb19CV5Td5ovrfs-1781798479-1.2.1.1-6InG6zHSWZQ9klTR0SWrkCCd2amThW3ZvgBV9QX.YygxniZ2gero7Sv0k_PQyL_pw4b46hxD4mkmSOyphsEoHzbXHXfFOOQs.7TR0_V0LJaZHtTwFhzQoJfxt3ekxBzXv3GW2lfXX18wX5JtUEGQs_uPdClhd0gEnyuawbiC4ZvF.yis7gd0CMoixQzWLguFvYW35guV28_t3b0VHPoaNB1pvLiuIPvfAR.LBgS4tMLTpQ7cvnZyYUpgwznXJdLv51P17bJB4V1UgefdTcvYTBtsln1W6WbJQ3YD6IcexX65CeKH04k92ALfOTwXTrQmnbi48XXvC8qmg0jBdlKn1_mEzvupFWiHx0PPaIei6u2f14bt_5seBIYbd4GWWFhHxz9asbtFuh6MuYlyQwJ7vQJvOleaURzAiWPjl2sq6c7Keyh2CXDT.UnjdlME5nTFJJxlJjcG_UV162r4Hmj5EbldbS3j2YEbB8.z1CY8gAouDRomY2Pmc87xzeTOewza\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/css;charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mJCYhUcsooZZ%2FnMea6Vm7FEtiFwyALudThiHg%2FoO092tVBpjEEEblRp9K0FSQnwEVm1GMfrFRFJqmuPw6Luiesx1ZMvIfPJwkthCtC8vSI3abO%2FPv%2FjEQ5hY5lC8yKmbyQ%3D%3D\"}]}\r\nlast-modified: Tue, 09 Jun 2026 23:23:59 GMT\r\ndate: Thu, 18 Jun 2026 16:01:20 GMT\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\netag: W/\"f12ef104c3b25c730865f7ed5789c322\"\r\npriority: u=2,i=?0\r\ncf-ray: a0db8315bad956a8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16973,"size_decoded":3998,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (4867)","md5":"f12ef104c3b25c730865f7ed5789c322","sha1":"ba19c7054add04f0bf0e992a881527141eec062e","sha256":"0571062658eaf4268d877c454446432d81fb44585bc7efe0ebf01d4c8369601f","sha512":"6218a6e159f9a86b93a4512c4c4081e8f47d83ea4d5f96eae247ee578b0174a04ab1a4eb15fa30d8a84f7088ca2f9e4437a1ee6dc83304e5c5ae265a99ea6232","ssdeep":"384:SY6Rh6yXjZQmtVAYJQK1h/+SG5JZnWwrf7AZnp:OftpJVTDSJZWwrzAZnp","tlshash":"ed7235856360192793170e3297a18bb4eaa458c14bc3dff990c1edd4c2f6db913af296","first_seen":"2026-04-24T15:23:41.465528Z","last_seen":"2026-06-19T07:14:12.355281Z","times_seen":20,"resource_available":false,"data":null}},"time_used":544,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":439,"receive":105,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"join-xrpfi.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"join-xrpfi.xyz/mute-subtitle.vtt","fqdn":"join-xrpfi.xyz","domain":"join-xrpfi.xyz","tld":"xyz"},"ip":{"addr":"172.67.202.7","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://join-xrpfi.xyz/","date":"2026-06-18T16:01:20.543Z","timestamp":1781798480543,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"join-xrpfi.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Jun 2026 22:20:30 GMT","end":"Mon, 07 Sep 2026 23:18:55 GMT"},"fingerprint":{"sha1":"BD:76:DB:17:19:68:29:BF:5D:8F:84:8A:F4:BC:DC:4F:63:81:CE:5A","sha256":"7A:F8:07:B7:03:C9:82:FD:B6:4F:E8:06:FA:66:A4:93:D8:74:F5:5C:00:DD:5B:A6:8B:52:C4:61:EA:68:C1:D4"}}},"request":{"raw":"GET /mute-subtitle.vtt HTTP/1.1\r\nHost: join-xrpfi.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: cf_clearance=3sQx4O48cjL3MFPGKWSZ61gbAJ0Fsb19CV5Td5ovrfs-1781798479-1.2.1.1-6InG6zHSWZQ9klTR0SWrkCCd2amThW3ZvgBV9QX.YygxniZ2gero7Sv0k_PQyL_pw4b46hxD4mkmSOyphsEoHzbXHXfFOOQs.7TR0_V0LJaZHtTwFhzQoJfxt3ekxBzXv3GW2lfXX18wX5JtUEGQs_uPdClhd0gEnyuawbiC4ZvF.yis7gd0CMoixQzWLguFvYW35guV28_t3b0VHPoaNB1pvLiuIPvfAR.LBgS4tMLTpQ7cvnZyYUpgwznXJdLv51P17bJB4V1UgefdTcvYTBtsln1W6WbJQ3YD6IcexX65CeKH04k92ALfOTwXTrQmnbi48XXvC8qmg0jBdlKn1_mEzvupFWiHx0PPaIei6u2f14bt_5seBIYbd4GWWFhHxz9asbtFuh6MuYlyQwJ7vQJvOleaURzAiWPjl2sq6c7Keyh2CXDT.UnjdlME5nTFJJxlJjcG_UV162r4Hmj5EbldbS3j2YEbB8.z1CY8gAouDRomY2Pmc87xzeTOewza\r\nSec-Fetch-Dest: track\r\nSec-Fetch-Mode: same-origin\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/vtt\r\netag: \"53142af388215162f1a72eaad5603c77\"\r\nlast-modified: Tue, 09 Jun 2026 23:23:59 GMT\r\ndate: Thu, 18 Jun 2026 16:01:20 GMT\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EgdlA2y1S4ib4YH8R3%2B%2BlT3RUa1NerWclwVd07xCcJdg%2FieeypSq36ib%2BDt%2F%2FewMX0IWP7c8jsXMgR%2Fl3iuzEgDsexjtplxTQQ%2FV%2FATIcX9F9vrtJlNDDxgLgC2G7Uyx4g%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-length: 86\r\ncf-ray: a0db83176af156a8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/vtt","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-25T00:14:26.040585Z","times_seen":16694613,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"join-xrpfi.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"arbitrum.llamarpc.com/","fqdn":"arbitrum.llamarpc.com","domain":"llamarpc.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://join-xrpfi.xyz/","date":"2026-06-18T16:01:25.034Z","timestamp":1781798485034,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"OPTIONS / HTTP/1.1\r\nHost: arbitrum.llamarpc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://join-xrpfi.xyz/\r\nOrigin: https://join-xrpfi.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-25T00:14:26.040585Z","times_seen":16694613,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"join-xrpfi.xyz/mute-subtitle.vtt","fqdn":"join-xrpfi.xyz","domain":"join-xrpfi.xyz","tld":"xyz"},"ip":{"addr":"172.67.202.7","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://join-xrpfi.xyz/","date":"2026-06-18T16:01:20.535Z","timestamp":1781798480535,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"join-xrpfi.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Jun 2026 22:20:30 GMT","end":"Mon, 07 Sep 2026 23:18:55 GMT"},"fingerprint":{"sha1":"BD:76:DB:17:19:68:29:BF:5D:8F:84:8A:F4:BC:DC:4F:63:81:CE:5A","sha256":"7A:F8:07:B7:03:C9:82:FD:B6:4F:E8:06:FA:66:A4:93:D8:74:F5:5C:00:DD:5B:A6:8B:52:C4:61:EA:68:C1:D4"}}},"request":{"raw":"GET /mute-subtitle.vtt HTTP/1.1\r\nHost: join-xrpfi.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: cf_clearance=3sQx4O48cjL3MFPGKWSZ61gbAJ0Fsb19CV5Td5ovrfs-1781798479-1.2.1.1-6InG6zHSWZQ9klTR0SWrkCCd2amThW3ZvgBV9QX.YygxniZ2gero7Sv0k_PQyL_pw4b46hxD4mkmSOyphsEoHzbXHXfFOOQs.7TR0_V0LJaZHtTwFhzQoJfxt3ekxBzXv3GW2lfXX18wX5JtUEGQs_uPdClhd0gEnyuawbiC4ZvF.yis7gd0CMoixQzWLguFvYW35guV28_t3b0VHPoaNB1pvLiuIPvfAR.LBgS4tMLTpQ7cvnZyYUpgwznXJdLv51P17bJB4V1UgefdTcvYTBtsln1W6WbJQ3YD6IcexX65CeKH04k92ALfOTwXTrQmnbi48XXvC8qmg0jBdlKn1_mEzvupFWiHx0PPaIei6u2f14bt_5seBIYbd4GWWFhHxz9asbtFuh6MuYlyQwJ7vQJvOleaURzAiWPjl2sq6c7Keyh2CXDT.UnjdlME5nTFJJxlJjcG_UV162r4Hmj5EbldbS3j2YEbB8.z1CY8gAouDRomY2Pmc87xzeTOewza\r\nSec-Fetch-Dest: track\r\nSec-Fetch-Mode: same-origin\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/vtt\r\netag: \"53142af388215162f1a72eaad5603c77\"\r\nlast-modified: Tue, 09 Jun 2026 23:23:59 GMT\r\ndate: Thu, 18 Jun 2026 16:01:20 GMT\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pIDoIZ5ve8d%2Fqkv0sKrwHYD1xuDr1UPxrRbUSb8B35eHzxPvoUys4KJ5iw0SbUmUm1EIJe9st3Wsj85l%2B9%2B4%2B4zFP2q218l4zFfEQ%2FiBLZzkKxFpjwMZyTQjUtE0WVyPcg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-length: 86\r\ncf-ray: a0db83175aed56a8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":86,"size_decoded":750,"mime_type":"text/vtt","magic":"WebVTT subtitles, ASCII text","md5":"53142af388215162f1a72eaad5603c77","sha1":"ca6e246c84ef9ce3519c5aee9f7d3a4f6064b4fe","sha256":"f946cef18bf33db28bc29c3320c2cbd0ea84e0c3831bf5ed3cdc7f19f4eb98ce","sha512":"7c2da6b49086ff51b75a8e6571a4667e4958026beb592f940fca100118796776204024a0951e51c0eb415a46db40e286a1f8b608e8e1c317c9e2b8edde273b5c","ssdeep":"","tlshash":"22a012804b744840d110920c2162bb03a188dc4e11c00c5e226830cdfc4e004c048042","first_seen":"2026-04-24T15:23:41.467209Z","last_seen":"2026-06-19T07:14:12.325618Z","times_seen":16,"resource_available":false,"data":null}},"time_used":377,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":377,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"join-xrpfi.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"join-xrpfi.xyz/home_secure_desktop.mov","fqdn":"join-xrpfi.xyz","domain":"join-xrpfi.xyz","tld":"xyz"},"ip":{"addr":"172.67.202.7","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://join-xrpfi.xyz/","date":"2026-06-18T16:01:20.541Z","timestamp":1781798480541,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"join-xrpfi.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Jun 2026 22:20:30 GMT","end":"Mon, 07 Sep 2026 23:18:55 GMT"},"fingerprint":{"sha1":"BD:76:DB:17:19:68:29:BF:5D:8F:84:8A:F4:BC:DC:4F:63:81:CE:5A","sha256":"7A:F8:07:B7:03:C9:82:FD:B6:4F:E8:06:FA:66:A4:93:D8:74:F5:5C:00:DD:5B:A6:8B:52:C4:61:EA:68:C1:D4"}}},"request":{"raw":"GET /home_secure_desktop.mov HTTP/1.1\r\nHost: join-xrpfi.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nRange: bytes=0-\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://join-xrpfi.xyz/\r\nCookie: cf_clearance=3sQx4O48cjL3MFPGKWSZ61gbAJ0Fsb19CV5Td5ovrfs-1781798479-1.2.1.1-6InG6zHSWZQ9klTR0SWrkCCd2amThW3ZvgBV9QX.YygxniZ2gero7Sv0k_PQyL_pw4b46hxD4mkmSOyphsEoHzbXHXfFOOQs.7TR0_V0LJaZHtTwFhzQoJfxt3ekxBzXv3GW2lfXX18wX5JtUEGQs_uPdClhd0gEnyuawbiC4ZvF.yis7gd0CMoixQzWLguFvYW35guV28_t3b0VHPoaNB1pvLiuIPvfAR.LBgS4tMLTpQ7cvnZyYUpgwznXJdLv51P17bJB4V1UgefdTcvYTBtsln1W6WbJQ3YD6IcexX65CeKH04k92ALfOTwXTrQmnbi48XXvC8qmg0jBdlKn1_mEzvupFWiHx0PPaIei6u2f14bt_5seBIYbd4GWWFhHxz9asbtFuh6MuYlyQwJ7vQJvOleaURzAiWPjl2sq6c7Keyh2CXDT.UnjdlME5nTFJJxlJjcG_UV162r4Hmj5EbldbS3j2YEbB8.z1CY8gAouDRomY2Pmc87xzeTOewza\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\ndate: Thu, 18 Jun 2026 16:01:20 GMT\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rQOlIuQcGZoVbOepxWY6ptIJy%2FBhP%2BC2q2SizQKdakbjcO780%2F58X9lmLesO%2FdS7iqd%2FsWF7BAHAZ2mEhsrFsIOLn%2BqSNUfzsW7Yde9cTKWiLnxRoFnyApAxrO%2BMj%2FSNGA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a0db83176af056a8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":538,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-25T00:14:26.040585Z","times_seen":16694613,"resource_available":true,"data":null}},"time_used":305,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":305,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"join-xrpfi.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"noteworthy-lox.xyz/64878V0t5P2V7DK8mVG87.js","fqdn":"noteworthy-lox.xyz","domain":"noteworthy-lox.xyz","tld":"xyz"},"ip":{"addr":"104.21.11.153","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://join-xrpfi.xyz/","date":"2026-06-18T16:01:25.249Z","timestamp":1781798485249,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"noteworthy-lox.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Jun 2026 06:57:49 GMT","end":"Sun, 06 Sep 2026 07:56:39 GMT"},"fingerprint":{"sha1":"DB:74:6F:94:75:02:7C:E6:BC:B0:7B:9C:CC:4B:65:10:1D:D4:2E:21","sha256":"11:DE:20:78:C9:21:8B:67:CD:B9:F4:8A:20:C6:EA:C6:D2:35:95:87:2C:61:16:18:B8:AF:BF:91:52:7A:4E:50"}}},"request":{"raw":"GET /64878V0t5P2V7DK8mVG87.js HTTP/1.1\r\nHost: noteworthy-lox.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://join-xrpfi.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://join-xrpfi.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/javascript;charset=utf-8\r\naccess-control-allow-methods: GET\r\nlast-modified: Thu, 18 Jun 2026 16:00:17 GMT\r\ndate: Thu, 18 Jun 2026 16:01:25 GMT\r\nserver: cloudflare\r\naccess-control-allow-origin: *\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\netag: W/\"6500e54a5c0edfa70806a25985de1392\"\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Df%2B%2FGZdiEOsf5Ne6VoM0pZlGI7nsfpwyDCddoDvhqjO5mO3eM2lWeyk6MThi5uDdcMqQCC4MT4tMxFyQPRjN%2Fvyby1NBAH4dJBvRqFC%2FrmSTz9vgMhwjSMpN0aFC0KRE%2FXsC0IY%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a0db833528a95697-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4579907,"size_decoded":751849,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"27d4c8aaf96366bbf3e1ba2ec30e38f0","sha1":"4fe3a6e53a6e92fd15a58b9f68d6fcf8cd9bef62","sha256":"75b9b6a859e0a66ce870a02e909822bd55a6b0ff8f73779001c8daca5ce89fab","sha512":"9bbe6c8c6237f9894b04823b2f3f30c316e5d07c51179d687de92d5e14b840e77382b75d31376f8911b0a3aa3cc9be2814bbc1783c2737217b4f1c37eb03f375","ssdeep":"12288:XrvuPfvxkUKxSZz84nDqQYozDJyPThbj3jHDnLszOzS3HgIt8Q2d:XrviZkUKxSZhOcHJyLhbj3j3sYiPt8QU","tlshash":"7c351aaf23606063436950958c36358cf178da884c85c06ef7b8ecfffe59854a5a7b36","first_seen":"2026-06-18T16:02:55.824615Z","last_seen":"2026-06-18T16:02:55.824615Z","times_seen":1,"resource_available":false,"data":null}},"time_used":920,"timings":{"blocked":39,"dns":2,"connect":16,"send":0,"wait":433,"receive":429,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"noteworthy-lox.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"noteworthy-lox.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"theajack.github.io/favicon.ico","fqdn":"theajack.github.io","domain":"theajack.github.io","tld":"github.io"},"ip":{"addr":"185.199.109.153","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://theajack.github.io/disable-devtool/404.html?h=join-xrpfi.xyz","date":"2026-06-18T16:01:28.934Z","timestamp":1781798488934,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.github.io","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 06 Apr 2026 23:32:36 GMT","end":"Sun, 05 Jul 2026 23:32:35 GMT"},"fingerprint":{"sha1":"18:DE:96:E8:3D:99:B2:8A:0C:D1:0C:48:78:BD:6A:14:6A:05:25:60","sha256":"EA:69:BC:71:1C:B9:D4:56:98:D2:FD:AA:48:54:D7:DC:08:6A:CD:3A:9C:35:01:64:90:9B:68:8A:C7:C0:63:1F"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: theajack.github.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://theajack.github.io/disable-devtool/404.html?h=join-xrpfi.xyz\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 \r\nserver: GitHub.com\r\ncontent-type: text/html; charset=utf-8\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=31556952\r\netag: W/\"673d3167-267a\"\r\ncontent-encoding: gzip\r\nx-proxy-cache: MISS\r\nx-github-request-id: 78D4:2C2D2B:19272A:1BA3A7:6A340CC2\r\naccept-ranges: bytes\r\nage: 2454\r\ndate: Thu, 18 Jun 2026 16:01:28 GMT\r\nvia: 1.1 varnish\r\nx-served-by: cache-bma-essb1270065-BMA\r\nx-cache: HIT\r\nx-cache-hits: 0\r\nx-timer: S1781798489.939829,VS0,VE1\r\nvary: Accept-Encoding\r\nx-fastly-request-id: 3e31bc16270b3f4e1038303538203547d281cc14\r\ncontent-length: 3133\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":[{"name":"Fastly","description":"Fastly is a cloud computing services provider. Fastly's cloud platform provides a content delivery network, Internet security services, load balancing, and video \u0026 streaming services.","website":"https://www.fastly.com","common_platform_enumeration":"","icon":"Fastly.svg","categories":["CDN"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Hexo:6.2.0","description":"Hexo is a blog framework powered by Node.js.","website":"https://hexo.io","common_platform_enumeration":"","icon":"Hexo.png","categories":["Static site generator"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"GitHub Pages","description":"GitHub Pages is a static site hosting service.","website":"https://pages.github.com/","common_platform_enumeration":"","icon":"GitHub.svg","categories":["PaaS"]}],"data":{"size":9850,"size_decoded":3736,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (3839)","md5":"506d03c3ea58a6a54558f626707bd20b","sha1":"c12a5c64b3c488616bc0d880023fcad5229f6bed","sha256":"32a3ff5e29957de51e210199ae7e48cbb1c820c11583cb14c5422f391faad058","sha512":"e1e6b6bfcc6cd0e8d76aa1cd8e39be676757c776fd5c8edbb3471c9f295d2de021f2822c37a4175ddc7617f3acccb737fc2fe290940ed1eba7911df652b43816","ssdeep":"192:W9WBl2KLbxqvzyC/j9DlCqWrYWDHaoapa+iD5cM+SfS5SkSES5SiN+SfS5SkSESx:pBl2KLFqLyiNW7VqGwde2Ldi6q","tlshash":"1f1286b25860583b432355edb6aff36eb2b2a02bd6131d14b7bc43850fc5f94cda5a42","first_seen":"2025-04-28T12:19:47.398696Z","last_seen":"2026-06-24T22:18:06.388573Z","times_seen":94,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"theajack.github.io","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"join-xrpfi.xyz/FDC-1.svg","fqdn":"join-xrpfi.xyz","domain":"join-xrpfi.xyz","tld":"xyz"},"ip":{"addr":"172.67.202.7","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://join-xrpfi.xyz/","date":"2026-06-18T16:01:21.118Z","timestamp":1781798481118,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"join-xrpfi.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Jun 2026 22:20:30 GMT","end":"Mon, 07 Sep 2026 23:18:55 GMT"},"fingerprint":{"sha1":"BD:76:DB:17:19:68:29:BF:5D:8F:84:8A:F4:BC:DC:4F:63:81:CE:5A","sha256":"7A:F8:07:B7:03:C9:82:FD:B6:4F:E8:06:FA:66:A4:93:D8:74:F5:5C:00:DD:5B:A6:8B:52:C4:61:EA:68:C1:D4"}}},"request":{"raw":"GET /FDC-1.svg HTTP/1.1\r\nHost: join-xrpfi.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://join-xrpfi.xyz/\r\nCookie: cf_clearance=3sQx4O48cjL3MFPGKWSZ61gbAJ0Fsb19CV5Td5ovrfs-1781798479-1.2.1.1-6InG6zHSWZQ9klTR0SWrkCCd2amThW3ZvgBV9QX.YygxniZ2gero7Sv0k_PQyL_pw4b46hxD4mkmSOyphsEoHzbXHXfFOOQs.7TR0_V0LJaZHtTwFhzQoJfxt3ekxBzXv3GW2lfXX18wX5JtUEGQs_uPdClhd0gEnyuawbiC4ZvF.yis7gd0CMoixQzWLguFvYW35guV28_t3b0VHPoaNB1pvLiuIPvfAR.LBgS4tMLTpQ7cvnZyYUpgwznXJdLv51P17bJB4V1UgefdTcvYTBtsln1W6WbJQ3YD6IcexX65CeKH04k92ALfOTwXTrQmnbi48XXvC8qmg0jBdlKn1_mEzvupFWiHx0PPaIei6u2f14bt_5seBIYbd4GWWFhHxz9asbtFuh6MuYlyQwJ7vQJvOleaURzAiWPjl2sq6c7Keyh2CXDT.UnjdlME5nTFJJxlJjcG_UV162r4Hmj5EbldbS3j2YEbB8.z1CY8gAouDRomY2Pmc87xzeTOewza\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uiE0d5nAhKRmz%2BPeN9wX5%2FwQkNVxQPehV0v4OoH3%2BJN5AiMM%2BlNIvQpweQTF9xpEQrd4UAknOBtmVRroM8NyZ%2BCueB63ZV856vG5Sb7MnXylVhRHUfK1DWbOu7g2zIbtvg%3D%3D\"}]}\r\nlast-modified: Tue, 09 Jun 2026 23:23:59 GMT\r\ndate: Thu, 18 Jun 2026 16:01:25 GMT\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\netag: W/\"ef5cce942cb6a6ce5cc385d777e743db\"\r\npriority: u=5,i\r\ncf-ray: a0db831b0b1456a8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6621,"size_decoded":3384,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"ef5cce942cb6a6ce5cc385d777e743db","sha1":"26dea5d3314a5cde9c4a7d0ac7418578d8536d89","sha256":"1f9f4bc9071c159a6a3e58fcafee08caf55861f295b1a8af0a76941be15b3970","sha512":"2babf9cd06ce7005f8cb66da1875b492532e6030394eca5ec9db70a95eca761179f766cfb05ed80596219ad7e5eaa04a87f1628e1b218e4b0a92d631640b4a3e","ssdeep":"96:RaQb8scbzGrg4hnNG2E9z3pCfuVPK8NltmFVy14mta9YEy9e3C38/mlOaTIb1Vdg:Rpws4GrgANOnVPK8FC0haJygCWQWi","tlshash":"90d177c0736cc3f8b484e378079e603a682b54e8b65554d0cad22f4567856ef2ce9fe2","first_seen":"2025-08-11T21:39:04.755564Z","last_seen":"2026-06-19T07:14:12.364289Z","times_seen":27,"resource_available":false,"data":null}},"time_used":4778,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4778,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"join-xrpfi.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/turnstile/v0/b/7c8a194018aa/api.js?onload=VnAqC4\u0026render=explicit","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://join-xrpfi.xyz/","date":"2026-06-18T16:01:13.557Z","timestamp":1781798473557,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"challenges.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 16 Jun 2026 20:15:28 GMT","end":"Mon, 14 Sep 2026 21:15:13 GMT"},"fingerprint":{"sha1":"77:27:72:42:CF:51:E8:8C:7C:3E:8C:4C:A1:F0:9A:86:96:B9:0A:16","sha256":"ED:7C:F7:38:B3:0F:00:86:32:D1:14:CE:C0:FF:CA:0E:7C:86:EE:49:51:EF:A4:4B:AA:5C:B6:7C:00:B5:3D:F3"}}},"request":{"raw":"GET /turnstile/v0/b/7c8a194018aa/api.js?onload=VnAqC4\u0026render=explicit HTTP/1.1\r\nHost: challenges.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://join-xrpfi.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 18 Jun 2026 16:01:13 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nlast-modified: Mon, 15 Jun 2026 14:57:09 GMT\r\ncache-control: max-age=31536000, stale-if-error=10800, stale-while-revalidate=31536000, public\r\naccess-control-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: https://join-xrpfi.xyz\r\npriority: u=3,i=?0\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: a0db82ebdbdc4c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":65582,"size_decoded":21860,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"37b007a08b4c6fddc9310bb5a711cfac","sha1":"5cccd9c1619c77aff109562386761342ebb169b8","sha256":"761743e95d8ebe80041c9679afd18599df86a9afb053d6dbba3452d27dbd79f4","sha512":"d46e0c44e8799bd3b283a3d92cf2d06988e998c6f9332ecb9ccac074370fce2e71719bc42f3d8380073e4dbfadf5ca8f0b45e90d40b223f3e00c0536631df595","ssdeep":"1536:A+RDl35kVfhRMGKHD+LxgnmeBDHYOo8LDgS9:rbSVfYEGmeBD7n9","tlshash":"a7532c987196787313d980f0a17b6743732a7d3aa94cc850d827d865367ce8a9233f7e","first_seen":"2026-06-16T09:36:41.625096Z","last_seen":"2026-06-23T15:16:14.513724Z","times_seen":4703,"resource_available":true,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":3,"connect":11,"send":0,"wait":9,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"join-xrpfi.xyz/home_fast_desktop.mov","fqdn":"join-xrpfi.xyz","domain":"join-xrpfi.xyz","tld":"xyz"},"ip":{"addr":"172.67.202.7","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://join-xrpfi.xyz/","date":"2026-06-18T16:01:20.538Z","timestamp":1781798480538,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"join-xrpfi.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Jun 2026 22:20:30 GMT","end":"Mon, 07 Sep 2026 23:18:55 GMT"},"fingerprint":{"sha1":"BD:76:DB:17:19:68:29:BF:5D:8F:84:8A:F4:BC:DC:4F:63:81:CE:5A","sha256":"7A:F8:07:B7:03:C9:82:FD:B6:4F:E8:06:FA:66:A4:93:D8:74:F5:5C:00:DD:5B:A6:8B:52:C4:61:EA:68:C1:D4"}}},"request":{"raw":"GET /home_fast_desktop.mov HTTP/1.1\r\nHost: join-xrpfi.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nRange: bytes=0-\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://join-xrpfi.xyz/\r\nCookie: cf_clearance=3sQx4O48cjL3MFPGKWSZ61gbAJ0Fsb19CV5Td5ovrfs-1781798479-1.2.1.1-6InG6zHSWZQ9klTR0SWrkCCd2amThW3ZvgBV9QX.YygxniZ2gero7Sv0k_PQyL_pw4b46hxD4mkmSOyphsEoHzbXHXfFOOQs.7TR0_V0LJaZHtTwFhzQoJfxt3ekxBzXv3GW2lfXX18wX5JtUEGQs_uPdClhd0gEnyuawbiC4ZvF.yis7gd0CMoixQzWLguFvYW35guV28_t3b0VHPoaNB1pvLiuIPvfAR.LBgS4tMLTpQ7cvnZyYUpgwznXJdLv51P17bJB4V1UgefdTcvYTBtsln1W6WbJQ3YD6IcexX65CeKH04k92ALfOTwXTrQmnbi48XXvC8qmg0jBdlKn1_mEzvupFWiHx0PPaIei6u2f14bt_5seBIYbd4GWWFhHxz9asbtFuh6MuYlyQwJ7vQJvOleaURzAiWPjl2sq6c7Keyh2CXDT.UnjdlME5nTFJJxlJjcG_UV162r4Hmj5EbldbS3j2YEbB8.z1CY8gAouDRomY2Pmc87xzeTOewza\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\ndate: Thu, 18 Jun 2026 16:01:20 GMT\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sBLOnDW0MSSxYlAU3tAzP3FhkGB1cL7YAua3ECLnCOxONZrbiH85ZkMrQnDCd2oXmXghus0Oo20WJVYDSjHWktUEVgHAEZ7tuz04OyYVn2apdJt5zr%2FcwK2M3oyfBTnIUQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a0db83176aee56a8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":524,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-25T00:14:26.040585Z","times_seen":16694613,"resource_available":true,"data":null}},"time_used":180,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":180,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"join-xrpfi.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"join-xrpfi.xyz/home_secure_desktop.webm","fqdn":"join-xrpfi.xyz","domain":"join-xrpfi.xyz","tld":"xyz"},"ip":{"addr":"172.67.202.7","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://join-xrpfi.xyz/","date":"2026-06-18T16:01:20.890Z","timestamp":1781798480890,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"join-xrpfi.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Jun 2026 22:20:30 GMT","end":"Mon, 07 Sep 2026 23:18:55 GMT"},"fingerprint":{"sha1":"BD:76:DB:17:19:68:29:BF:5D:8F:84:8A:F4:BC:DC:4F:63:81:CE:5A","sha256":"7A:F8:07:B7:03:C9:82:FD:B6:4F:E8:06:FA:66:A4:93:D8:74:F5:5C:00:DD:5B:A6:8B:52:C4:61:EA:68:C1:D4"}}},"request":{"raw":"GET /home_secure_desktop.webm HTTP/1.1\r\nHost: join-xrpfi.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nRange: bytes=0-\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://join-xrpfi.xyz/\r\nCookie: cf_clearance=3sQx4O48cjL3MFPGKWSZ61gbAJ0Fsb19CV5Td5ovrfs-1781798479-1.2.1.1-6InG6zHSWZQ9klTR0SWrkCCd2amThW3ZvgBV9QX.YygxniZ2gero7Sv0k_PQyL_pw4b46hxD4mkmSOyphsEoHzbXHXfFOOQs.7TR0_V0LJaZHtTwFhzQoJfxt3ekxBzXv3GW2lfXX18wX5JtUEGQs_uPdClhd0gEnyuawbiC4ZvF.yis7gd0CMoixQzWLguFvYW35guV28_t3b0VHPoaNB1pvLiuIPvfAR.LBgS4tMLTpQ7cvnZyYUpgwznXJdLv51P17bJB4V1UgefdTcvYTBtsln1W6WbJQ3YD6IcexX65CeKH04k92ALfOTwXTrQmnbi48XXvC8qmg0jBdlKn1_mEzvupFWiHx0PPaIei6u2f14bt_5seBIYbd4GWWFhHxz9asbtFuh6MuYlyQwJ7vQJvOleaURzAiWPjl2sq6c7Keyh2CXDT.UnjdlME5nTFJJxlJjcG_UV162r4Hmj5EbldbS3j2YEbB8.z1CY8gAouDRomY2Pmc87xzeTOewza\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\ndate: Thu, 18 Jun 2026 16:01:21 GMT\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZrTZkroTYicNDK4e%2F4oXdKpDZH4%2Bncnh0q9xx4RNgWP%2FlIcJ4FMPYJhrxEWNAAQDtOg5PcDj92Q7Gj0x6ct93vcz2sZVwkX3qi5c1zVCl0SyEzjsBFW7nmSyGDY2QnpHEQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a0db83199b0756a8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":555,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-25T00:14:26.040585Z","times_seen":16694613,"resource_available":true,"data":null}},"time_used":265,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":265,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"join-xrpfi.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"arbitrum-one.publicnode.com/","fqdn":"arbitrum-one.publicnode.com","domain":"publicnode.com","tld":"com"},"ip":{"addr":"172.66.150.162","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://join-xrpfi.xyz/","date":"2026-06-18T16:01:25.036Z","timestamp":1781798485036,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"publicnode.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Jun 2026 01:05:04 GMT","end":"Mon, 07 Sep 2026 02:05:00 GMT"},"fingerprint":{"sha1":"39:B4:D5:B4:26:71:60:64:13:47:CC:54:ED:BC:AD:E1:33:77:19:00","sha256":"65:A9:40:31:FB:2A:25:C7:3B:B6:B3:F0:4E:96:B9:08:CE:FC:27:5A:F6:DB:32:E8:7E:64:C7:51:34:DA:93:85"}}},"request":{"raw":"OPTIONS / HTTP/1.1\r\nHost: arbitrum-one.publicnode.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://join-xrpfi.xyz/\r\nOrigin: https://join-xrpfi.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 204 \r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: content-type\r\naccess-control-allow-methods: GET,HEAD,OPTIONS,POST\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 172800\r\nallow: OPTIONS, POST\r\nvary: Origin,Access-Control-Request-Method,Access-Control-Request-Headers\r\ndate: Thu, 18 Jun 2026 16:01:25 GMT\r\nx-envoy-upstream-service-time: 0\r\nserver: cloudflare\r\ncf-cache-status: DYNAMIC\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\npriority: u=4,i=?0\r\nx-content-type-options: nosniff\r\ncf-ray: a0db83339a4e5689-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":641,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-25T00:14:26.040585Z","times_seen":16694613,"resource_available":true,"data":null}},"time_used":59,"timings":{"blocked":-1,"dns":2,"connect":13,"send":0,"wait":43,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"join-xrpfi.xyz/b85a5d1553cdf244.css","fqdn":"join-xrpfi.xyz","domain":"join-xrpfi.xyz","tld":"xyz"},"ip":{"addr":"172.67.202.7","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://join-xrpfi.xyz/","date":"2026-06-18T16:01:20.262Z","timestamp":1781798480262,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"join-xrpfi.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Jun 2026 22:20:30 GMT","end":"Mon, 07 Sep 2026 23:18:55 GMT"},"fingerprint":{"sha1":"BD:76:DB:17:19:68:29:BF:5D:8F:84:8A:F4:BC:DC:4F:63:81:CE:5A","sha256":"7A:F8:07:B7:03:C9:82:FD:B6:4F:E8:06:FA:66:A4:93:D8:74:F5:5C:00:DD:5B:A6:8B:52:C4:61:EA:68:C1:D4"}}},"request":{"raw":"GET /b85a5d1553cdf244.css HTTP/1.1\r\nHost: join-xrpfi.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://join-xrpfi.xyz/\r\nCookie: cf_clearance=3sQx4O48cjL3MFPGKWSZ61gbAJ0Fsb19CV5Td5ovrfs-1781798479-1.2.1.1-6InG6zHSWZQ9klTR0SWrkCCd2amThW3ZvgBV9QX.YygxniZ2gero7Sv0k_PQyL_pw4b46hxD4mkmSOyphsEoHzbXHXfFOOQs.7TR0_V0LJaZHtTwFhzQoJfxt3ekxBzXv3GW2lfXX18wX5JtUEGQs_uPdClhd0gEnyuawbiC4ZvF.yis7gd0CMoixQzWLguFvYW35guV28_t3b0VHPoaNB1pvLiuIPvfAR.LBgS4tMLTpQ7cvnZyYUpgwznXJdLv51P17bJB4V1UgefdTcvYTBtsln1W6WbJQ3YD6IcexX65CeKH04k92ALfOTwXTrQmnbi48XXvC8qmg0jBdlKn1_mEzvupFWiHx0PPaIei6u2f14bt_5seBIYbd4GWWFhHxz9asbtFuh6MuYlyQwJ7vQJvOleaURzAiWPjl2sq6c7Keyh2CXDT.UnjdlME5nTFJJxlJjcG_UV162r4Hmj5EbldbS3j2YEbB8.z1CY8gAouDRomY2Pmc87xzeTOewza\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/css;charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uoOrp%2BdTTgqAYE%2FzmB4%2FFlcWLTaPFN61P2N1PNFw3PTufDvpZFJzRSZq8NptL8pJfZPtI58YhvMdtiRH9iEbwZqIHyyBwbt2i%2Fb2jzpLLYeHvBTOCwfCq0NTdQCRBwhkvg%3D%3D\"}]}\r\nlast-modified: Tue, 09 Jun 2026 23:24:00 GMT\r\ndate: Thu, 18 Jun 2026 16:01:20 GMT\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\netag: W/\"0544206cae8203dbe2bddff0ed234f11\"\r\npriority: u=2,i=?0\r\ncf-ray: a0db8315aad656a8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":78271,"size_decoded":10947,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (11983)","md5":"0544206cae8203dbe2bddff0ed234f11","sha1":"eada2197163e4de60dbb7f5900849c8540544d62","sha256":"7a79c352410f825d5b1cd1b60d0611257038a32dd280fc5b13869edaaf097e05","sha512":"fe89823d5122a5be72cd040028d0f9d3217d3ff4a6649eb067d4ae9fab81dd0410155d0d67866e3422edff832985bb3e27c8462e995e01384d45f568b2531228","ssdeep":"384:XeUw08ZHQlDjjNQDdUgLpOy5vIdSJaCaJCrm74FW9BDkKcKphgyoUhDcJH+GldYg:QZwlDjjODJ5gcrq4+p/CGMUxG","tlshash":"0a73fe57b5f1132fd02e2052f1c25c48dfc4b0dbf1899fd0650e9dea429aab266f1b86","first_seen":"2026-06-18T15:59:02.817561Z","last_seen":"2026-06-19T07:14:12.319059Z","times_seen":13,"resource_available":false,"data":null}},"time_used":611,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":489,"receive":122,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"join-xrpfi.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"join-xrpfi.xyz/assets/asynctablehouse.js","fqdn":"join-xrpfi.xyz","domain":"join-xrpfi.xyz","tld":"xyz"},"ip":{"addr":"172.67.202.7","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://join-xrpfi.xyz/","date":"2026-06-18T16:01:20.331Z","timestamp":1781798480331,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"join-xrpfi.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Jun 2026 22:20:30 GMT","end":"Mon, 07 Sep 2026 23:18:55 GMT"},"fingerprint":{"sha1":"BD:76:DB:17:19:68:29:BF:5D:8F:84:8A:F4:BC:DC:4F:63:81:CE:5A","sha256":"7A:F8:07:B7:03:C9:82:FD:B6:4F:E8:06:FA:66:A4:93:D8:74:F5:5C:00:DD:5B:A6:8B:52:C4:61:EA:68:C1:D4"}}},"request":{"raw":"GET /assets/asynctablehouse.js HTTP/1.1\r\nHost: join-xrpfi.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://join-xrpfi.xyz/\r\nCookie: cf_clearance=3sQx4O48cjL3MFPGKWSZ61gbAJ0Fsb19CV5Td5ovrfs-1781798479-1.2.1.1-6InG6zHSWZQ9klTR0SWrkCCd2amThW3ZvgBV9QX.YygxniZ2gero7Sv0k_PQyL_pw4b46hxD4mkmSOyphsEoHzbXHXfFOOQs.7TR0_V0LJaZHtTwFhzQoJfxt3ekxBzXv3GW2lfXX18wX5JtUEGQs_uPdClhd0gEnyuawbiC4ZvF.yis7gd0CMoixQzWLguFvYW35guV28_t3b0VHPoaNB1pvLiuIPvfAR.LBgS4tMLTpQ7cvnZyYUpgwznXJdLv51P17bJB4V1UgefdTcvYTBtsln1W6WbJQ3YD6IcexX65CeKH04k92ALfOTwXTrQmnbi48XXvC8qmg0jBdlKn1_mEzvupFWiHx0PPaIei6u2f14bt_5seBIYbd4GWWFhHxz9asbtFuh6MuYlyQwJ7vQJvOleaURzAiWPjl2sq6c7Keyh2CXDT.UnjdlME5nTFJJxlJjcG_UV162r4Hmj5EbldbS3j2YEbB8.z1CY8gAouDRomY2Pmc87xzeTOewza\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/javascript;charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xmpt%2FjgNxxca8YN7MOKHp5j1PWIo0eFAehGjey55IsoS1KjC2NbHvAji7kND1QItZgY4CBSilLxQVRzVuyW7Z%2BbYRk%2FPtDgmRccGPcHgc2fBo6pO%2FpPbiIBDbo%2FEacCCMw%3D%3D\"}]}\r\nlast-modified: Tue, 09 Jun 2026 23:24:00 GMT\r\ndate: Thu, 18 Jun 2026 16:01:20 GMT\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\netag: W/\"bf3d6d7cdb2bb96d2922b4bbbead30c8\"\r\npriority: u=3,i=?0\r\ncf-ray: a0db83161ae156a8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2129266,"size_decoded":427559,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (42394), with no line terminators","md5":"0015238aaa5f868b99de5b6fbeea181b","sha1":"9e0e4327fd142a4cabdf58d223ef5826c569dc96","sha256":"ab603719a7d0b7413476b0698243ec3d3390f7a6f01748f0f086b75a57839b7f","sha512":"1b4f9404469775613fb3c7550874c41dd9c77ab990d4427c17e5008d2df84c51b899a9c0b04978bece443c2045c5e4df8152caab723cd67cc20310fcc75957fd","ssdeep":"384:TJnUUtTTxL5Z0YHuYIx72/u7cdY2H8n2IJcwcJ3p1WJ3PoEUD30C0bgmj3S4gqw7:TJnUUtTTxL5ZdZIPc2U8n2Utnxiz","tlshash":"cf3523fb07a44e2e80bbe984dd355c5c50f987a14e6e5159bd33a98bd74cba80b0c78c","first_seen":"2026-06-18T16:02:55.838181Z","last_seen":"2026-06-18T16:02:55.838181Z","times_seen":1,"resource_available":false,"data":null}},"time_used":851,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":216,"receive":635,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"join-xrpfi.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"join-xrpfi.xyz/thatthatnewpixelfamilytest_square-s.p.5c25c1e8.woff2","fqdn":"join-xrpfi.xyz","domain":"join-xrpfi.xyz","tld":"xyz"},"ip":{"addr":"172.67.202.7","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://join-xrpfi.xyz/","date":"2026-06-18T16:01:21.056Z","timestamp":1781798481056,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"join-xrpfi.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Jun 2026 22:20:30 GMT","end":"Mon, 07 Sep 2026 23:18:55 GMT"},"fingerprint":{"sha1":"BD:76:DB:17:19:68:29:BF:5D:8F:84:8A:F4:BC:DC:4F:63:81:CE:5A","sha256":"7A:F8:07:B7:03:C9:82:FD:B6:4F:E8:06:FA:66:A4:93:D8:74:F5:5C:00:DD:5B:A6:8B:52:C4:61:EA:68:C1:D4"}}},"request":{"raw":"GET /thatthatnewpixelfamilytest_square-s.p.5c25c1e8.woff2 HTTP/1.1\r\nHost: join-xrpfi.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://join-xrpfi.xyz/6cdcfbcc140e7bef.css\r\nCookie: cf_clearance=3sQx4O48cjL3MFPGKWSZ61gbAJ0Fsb19CV5Td5ovrfs-1781798479-1.2.1.1-6InG6zHSWZQ9klTR0SWrkCCd2amThW3ZvgBV9QX.YygxniZ2gero7Sv0k_PQyL_pw4b46hxD4mkmSOyphsEoHzbXHXfFOOQs.7TR0_V0LJaZHtTwFhzQoJfxt3ekxBzXv3GW2lfXX18wX5JtUEGQs_uPdClhd0gEnyuawbiC4ZvF.yis7gd0CMoixQzWLguFvYW35guV28_t3b0VHPoaNB1pvLiuIPvfAR.LBgS4tMLTpQ7cvnZyYUpgwznXJdLv51P17bJB4V1UgefdTcvYTBtsln1W6WbJQ3YD6IcexX65CeKH04k92ALfOTwXTrQmnbi48XXvC8qmg0jBdlKn1_mEzvupFWiHx0PPaIei6u2f14bt_5seBIYbd4GWWFhHxz9asbtFuh6MuYlyQwJ7vQJvOleaURzAiWPjl2sq6c7Keyh2CXDT.UnjdlME5nTFJJxlJjcG_UV162r4Hmj5EbldbS3j2YEbB8.z1CY8gAouDRomY2Pmc87xzeTOewza\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: font/woff2\r\netag: \"7526fa8e83a73a9f694eba8223795de5\"\r\nlast-modified: Tue, 09 Jun 2026 23:23:59 GMT\r\ndate: Thu, 18 Jun 2026 16:01:21 GMT\r\nserver: cloudflare\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=R61s6%2BXv0CgN3uUe1gajGxafwmL5eTKlccVIkv9IG1f8LHgSmGJGHCIGOBnXtKrEVXVfAHEH0U%2FAW1nVK%2BCaIfCaCGBVuTmr6rxFS%2BWtGQE8Z9IrT3NGpfm9a5PYaqVbcQ%3D%3D\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a0db831a9b0c56a8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5516,"size_decoded":6187,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 5516, version 1.0","md5":"7526fa8e83a73a9f694eba8223795de5","sha1":"6f7b482dc8ce577c3ca11df24997c7bd54959de9","sha256":"4f889410a75a15c856b6b317d13204a6cac75be1035dc10658933cec9f7684e4","sha512":"66eaa1cf4bcdc0597604b08a4cf334a93af88f877f8a4b06ed73bc8e332b3b5d3ae5d756e13b031c007346722091d51638bfe27650e46aa779a2f76970e70cb5","ssdeep":"96:C+mKG30pLRQgPNbGMrYRXoj/oL17R7z/JUyOoJcpeqOVSOXsXV3DWgupbVnlG35X:CPEpLRfNBrYVA/oL1pO3oJcYNgO+Wtpe","tlshash":"0cb1b08dfd826fd6f64600b5ced78491478cd70b91f93c5c66ab932e1e8e4086049474","first_seen":"2026-04-24T15:23:41.456915Z","last_seen":"2026-06-19T07:14:12.37969Z","times_seen":18,"resource_available":false,"data":null}},"time_used":231,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":231,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"join-xrpfi.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"join-xrpfi.xyz/Arkham-1.webp","fqdn":"join-xrpfi.xyz","domain":"join-xrpfi.xyz","tld":"xyz"},"ip":{"addr":"172.67.202.7","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://join-xrpfi.xyz/","date":"2026-06-18T16:01:20.878Z","timestamp":1781798480878,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"join-xrpfi.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Jun 2026 22:20:30 GMT","end":"Mon, 07 Sep 2026 23:18:55 GMT"},"fingerprint":{"sha1":"BD:76:DB:17:19:68:29:BF:5D:8F:84:8A:F4:BC:DC:4F:63:81:CE:5A","sha256":"7A:F8:07:B7:03:C9:82:FD:B6:4F:E8:06:FA:66:A4:93:D8:74:F5:5C:00:DD:5B:A6:8B:52:C4:61:EA:68:C1:D4"}}},"request":{"raw":"GET /Arkham-1.webp HTTP/1.1\r\nHost: join-xrpfi.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://join-xrpfi.xyz/\r\nCookie: cf_clearance=3sQx4O48cjL3MFPGKWSZ61gbAJ0Fsb19CV5Td5ovrfs-1781798479-1.2.1.1-6InG6zHSWZQ9klTR0SWrkCCd2amThW3ZvgBV9QX.YygxniZ2gero7Sv0k_PQyL_pw4b46hxD4mkmSOyphsEoHzbXHXfFOOQs.7TR0_V0LJaZHtTwFhzQoJfxt3ekxBzXv3GW2lfXX18wX5JtUEGQs_uPdClhd0gEnyuawbiC4ZvF.yis7gd0CMoixQzWLguFvYW35guV28_t3b0VHPoaNB1pvLiuIPvfAR.LBgS4tMLTpQ7cvnZyYUpgwznXJdLv51P17bJB4V1UgefdTcvYTBtsln1W6WbJQ3YD6IcexX65CeKH04k92ALfOTwXTrQmnbi48XXvC8qmg0jBdlKn1_mEzvupFWiHx0PPaIei6u2f14bt_5seBIYbd4GWWFhHxz9asbtFuh6MuYlyQwJ7vQJvOleaURzAiWPjl2sq6c7Keyh2CXDT.UnjdlME5nTFJJxlJjcG_UV162r4Hmj5EbldbS3j2YEbB8.z1CY8gAouDRomY2Pmc87xzeTOewza\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: image/webp\r\netag: \"5f931f5036e2902f0ea2ed199ceb772e\"\r\nlast-modified: Tue, 09 Jun 2026 23:23:59 GMT\r\ndate: Thu, 18 Jun 2026 16:01:21 GMT\r\nserver: cloudflare\r\npriority: u=5,i\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=w5nLPv0STuemLriL%2Bi7SofhkleGBsQCSi9%2BTfQDf%2B2Xer9dxOe9uj8fvg0AMrZhjiCpc5iqEcejOs3V2f%2FadJj3WZ2qosgcHk%2FIA3eEnxJ2LMWoHxgHnlrCqWR4iCNOd9w%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-length: 1652\r\ncf-ray: a0db83198b0356a8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1652,"size_decoded":2366,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"5f931f5036e2902f0ea2ed199ceb772e","sha1":"40a5df06dc1fbf155dbbd95f3193dbefb3c70ed2","sha256":"2b99ad22545742a421f1ab0bf14700111ec6c3e0d75898d9fa13827aaa415613","sha512":"4d7f2ab2d84effea446962fb5e101d3c3e49dc8f19ebb3b81b616e84111b620b3454448cc083229427f324bed6929b2a2887f7bf6d203ba4d7cd14c58798ecfe","ssdeep":"","tlshash":"0731180a4532aaab916b910a8938118980caf1792b212a5b2d372298c90eeea57d3058","first_seen":"2025-08-11T21:39:04.762048Z","last_seen":"2026-06-19T07:14:12.363583Z","times_seen":35,"resource_available":false,"data":null}},"time_used":332,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":332,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"join-xrpfi.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"join-xrpfi.xyz/XRPtoken-1.webp","fqdn":"join-xrpfi.xyz","domain":"join-xrpfi.xyz","tld":"xyz"},"ip":{"addr":"172.67.202.7","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://join-xrpfi.xyz/","date":"2026-06-18T16:01:20.866Z","timestamp":1781798480866,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"join-xrpfi.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Jun 2026 22:20:30 GMT","end":"Mon, 07 Sep 2026 23:18:55 GMT"},"fingerprint":{"sha1":"BD:76:DB:17:19:68:29:BF:5D:8F:84:8A:F4:BC:DC:4F:63:81:CE:5A","sha256":"7A:F8:07:B7:03:C9:82:FD:B6:4F:E8:06:FA:66:A4:93:D8:74:F5:5C:00:DD:5B:A6:8B:52:C4:61:EA:68:C1:D4"}}},"request":{"raw":"GET /XRPtoken-1.webp HTTP/1.1\r\nHost: join-xrpfi.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://join-xrpfi.xyz/\r\nCookie: cf_clearance=3sQx4O48cjL3MFPGKWSZ61gbAJ0Fsb19CV5Td5ovrfs-1781798479-1.2.1.1-6InG6zHSWZQ9klTR0SWrkCCd2amThW3ZvgBV9QX.YygxniZ2gero7Sv0k_PQyL_pw4b46hxD4mkmSOyphsEoHzbXHXfFOOQs.7TR0_V0LJaZHtTwFhzQoJfxt3ekxBzXv3GW2lfXX18wX5JtUEGQs_uPdClhd0gEnyuawbiC4ZvF.yis7gd0CMoixQzWLguFvYW35guV28_t3b0VHPoaNB1pvLiuIPvfAR.LBgS4tMLTpQ7cvnZyYUpgwznXJdLv51P17bJB4V1UgefdTcvYTBtsln1W6WbJQ3YD6IcexX65CeKH04k92ALfOTwXTrQmnbi48XXvC8qmg0jBdlKn1_mEzvupFWiHx0PPaIei6u2f14bt_5seBIYbd4GWWFhHxz9asbtFuh6MuYlyQwJ7vQJvOleaURzAiWPjl2sq6c7Keyh2CXDT.UnjdlME5nTFJJxlJjcG_UV162r4Hmj5EbldbS3j2YEbB8.z1CY8gAouDRomY2Pmc87xzeTOewza\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: image/webp\r\netag: \"92d6dc10eacb6ed595bde9d339411440\"\r\nlast-modified: Tue, 09 Jun 2026 23:23:59 GMT\r\ndate: Thu, 18 Jun 2026 16:01:21 GMT\r\nserver: cloudflare\r\npriority: u=5,i\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UAjZFNaCrNUxhP1ytojMiaPp8XmEgrCiYEvSzbkTLFQOCSLukQ2IaRaUFDjrBNJd2%2FAOseywFDfxNKNVMqdD%2BwZS4phWqewYqAFU5RehkCbZfIE4MQpJ8%2BN%2BuV45MYnnOg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-length: 770\r\ncf-ray: a0db83197afe56a8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":770,"size_decoded":1481,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"92d6dc10eacb6ed595bde9d339411440","sha1":"b48cf9e7539432a267da5f2114c40d664a01a057","sha256":"f83d42e9b60e17ae4196b83256f08c986190602da2f3bc1744a6f5fbc5462f08","sha512":"a93bca4f8c6b5ad30d568a5c644e2fbba8aadebb169044943da32b65506c99984a6d6f4e9921f92b4dac1c27242c000906e72a6a086751efaf8afa69312fe690","ssdeep":"","tlshash":"f901b5668114991f4e481e1cb334b6a6f3474ac94a2178b8cda92a48a42d24c6067fa6","first_seen":"2026-04-24T15:23:41.472889Z","last_seen":"2026-06-19T07:14:12.380547Z","times_seen":18,"resource_available":false,"data":null}},"time_used":263,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":263,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"join-xrpfi.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"join-xrpfi.xyz/home_providers_desktop.webm","fqdn":"join-xrpfi.xyz","domain":"join-xrpfi.xyz","tld":"xyz"},"ip":{"addr":"172.67.202.7","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://join-xrpfi.xyz/","date":"2026-06-18T16:01:20.888Z","timestamp":1781798480888,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"join-xrpfi.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Jun 2026 22:20:30 GMT","end":"Mon, 07 Sep 2026 23:18:55 GMT"},"fingerprint":{"sha1":"BD:76:DB:17:19:68:29:BF:5D:8F:84:8A:F4:BC:DC:4F:63:81:CE:5A","sha256":"7A:F8:07:B7:03:C9:82:FD:B6:4F:E8:06:FA:66:A4:93:D8:74:F5:5C:00:DD:5B:A6:8B:52:C4:61:EA:68:C1:D4"}}},"request":{"raw":"GET /home_providers_desktop.webm HTTP/1.1\r\nHost: join-xrpfi.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nRange: bytes=0-\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://join-xrpfi.xyz/\r\nCookie: cf_clearance=3sQx4O48cjL3MFPGKWSZ61gbAJ0Fsb19CV5Td5ovrfs-1781798479-1.2.1.1-6InG6zHSWZQ9klTR0SWrkCCd2amThW3ZvgBV9QX.YygxniZ2gero7Sv0k_PQyL_pw4b46hxD4mkmSOyphsEoHzbXHXfFOOQs.7TR0_V0LJaZHtTwFhzQoJfxt3ekxBzXv3GW2lfXX18wX5JtUEGQs_uPdClhd0gEnyuawbiC4ZvF.yis7gd0CMoixQzWLguFvYW35guV28_t3b0VHPoaNB1pvLiuIPvfAR.LBgS4tMLTpQ7cvnZyYUpgwznXJdLv51P17bJB4V1UgefdTcvYTBtsln1W6WbJQ3YD6IcexX65CeKH04k92ALfOTwXTrQmnbi48XXvC8qmg0jBdlKn1_mEzvupFWiHx0PPaIei6u2f14bt_5seBIYbd4GWWFhHxz9asbtFuh6MuYlyQwJ7vQJvOleaURzAiWPjl2sq6c7Keyh2CXDT.UnjdlME5nTFJJxlJjcG_UV162r4Hmj5EbldbS3j2YEbB8.z1CY8gAouDRomY2Pmc87xzeTOewza\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: video/webm\r\netag: \"df30dbcd8600113637cff696c21b2b82\"\r\nlast-modified: Tue, 09 Jun 2026 23:24:00 GMT\r\ndate: Thu, 18 Jun 2026 16:01:21 GMT\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ltpmmHx%2F2vucWmNSgpcQeIsl3fi3CCtCpfKYcaq0daQ%2Brpa0R15W%2B8w5TFd4id9POQpA9nZLPcOG4epiaxd9CEkugfIbXcoMYJt6je9YQYNpP2hwlNbAKxI6jsDoeUr6Bw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a0db83199b0656a8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1267259,"size_decoded":1267928,"mime_type":"video/webm","magic":"WebM","md5":"ee2f09b30522d734be219fea9eb6b652","sha1":"6b2d4a6f78be14a1c1ea569c5c160396ad19fcd1","sha256":"802018a8d524b7c30540a7897c55ae1efa17f6ccd142e02d799c8480721e8449","sha512":"14b541f6615eea0028ecae7f55241185ce41b94a11f484602ae5b1934da1d3b8bb3960caf46ed1b8a65c9053444b70c00d7c1c5c6c1e59dd468ee60ea950b6ca","ssdeep":"24576:5JJ1VbEOGs0BDMeeobFxHYENSOAMma9tj9/e5gbIjpjMqZ:5JJkLs0CkbveOHNjogu","tlshash":"6925339d4ccaad43f09d84f9ad2442cb0a510b9193c684bad5bd334fc5b32eeb6751b2","first_seen":"2025-08-11T21:39:04.769941Z","last_seen":"2026-06-19T07:14:12.374444Z","times_seen":33,"resource_available":false,"data":null}},"time_used":812,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":273,"receive":539,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"join-xrpfi.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"join-xrpfi.xyz/ankr-1-1.webp","fqdn":"join-xrpfi.xyz","domain":"join-xrpfi.xyz","tld":"xyz"},"ip":{"addr":"172.67.202.7","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://join-xrpfi.xyz/","date":"2026-06-18T16:01:20.876Z","timestamp":1781798480876,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"join-xrpfi.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Jun 2026 22:20:30 GMT","end":"Mon, 07 Sep 2026 23:18:55 GMT"},"fingerprint":{"sha1":"BD:76:DB:17:19:68:29:BF:5D:8F:84:8A:F4:BC:DC:4F:63:81:CE:5A","sha256":"7A:F8:07:B7:03:C9:82:FD:B6:4F:E8:06:FA:66:A4:93:D8:74:F5:5C:00:DD:5B:A6:8B:52:C4:61:EA:68:C1:D4"}}},"request":{"raw":"GET /ankr-1-1.webp HTTP/1.1\r\nHost: join-xrpfi.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://join-xrpfi.xyz/\r\nCookie: cf_clearance=3sQx4O48cjL3MFPGKWSZ61gbAJ0Fsb19CV5Td5ovrfs-1781798479-1.2.1.1-6InG6zHSWZQ9klTR0SWrkCCd2amThW3ZvgBV9QX.YygxniZ2gero7Sv0k_PQyL_pw4b46hxD4mkmSOyphsEoHzbXHXfFOOQs.7TR0_V0LJaZHtTwFhzQoJfxt3ekxBzXv3GW2lfXX18wX5JtUEGQs_uPdClhd0gEnyuawbiC4ZvF.yis7gd0CMoixQzWLguFvYW35guV28_t3b0VHPoaNB1pvLiuIPvfAR.LBgS4tMLTpQ7cvnZyYUpgwznXJdLv51P17bJB4V1UgefdTcvYTBtsln1W6WbJQ3YD6IcexX65CeKH04k92ALfOTwXTrQmnbi48XXvC8qmg0jBdlKn1_mEzvupFWiHx0PPaIei6u2f14bt_5seBIYbd4GWWFhHxz9asbtFuh6MuYlyQwJ7vQJvOleaURzAiWPjl2sq6c7Keyh2CXDT.UnjdlME5nTFJJxlJjcG_UV162r4Hmj5EbldbS3j2YEbB8.z1CY8gAouDRomY2Pmc87xzeTOewza\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: image/webp\r\netag: \"74a99529b73a19efaf2d7e028cda1c9b\"\r\nlast-modified: Tue, 09 Jun 2026 23:23:59 GMT\r\ndate: Thu, 18 Jun 2026 16:01:21 GMT\r\nserver: cloudflare\r\npriority: u=5,i\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=klIvgPAQRNLYCIvnutguYj%2BN4T%2FFvZrpJkqrbcDpmA1lqTnbZ%2FVGKZucj%2BvBvJYsODWK834BvH7CTALocA9r75FoqcYkSkQ0RUWY82cUhHc7lFbY%2Fq27skQIyCuIfqVREQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-length: 1504\r\ncf-ray: a0db83197b0256a8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1504,"size_decoded":2218,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"74a99529b73a19efaf2d7e028cda1c9b","sha1":"87f011fee23c56de730cb79b6ddf36a7f5ed92be","sha256":"794f63b21ecf0941b26436e18d536c830abcbf5332832baaa53821f95c5b87d8","sha512":"8c7a72c51cd3b350d1e0e8ca3de82da58be817b6603c47f6f5d62acefefa894dd69176cbd2f0179e8d1266bc40b7e4c0fdaf6ae0166f193449241f29856a779b","ssdeep":"","tlshash":"c331d78a3b637026e10c053831cc1122622048143a29bc23593fb4f80420691e5badab","first_seen":"2025-08-11T21:39:04.736165Z","last_seen":"2026-06-19T07:14:12.327763Z","times_seen":34,"resource_available":false,"data":null}},"time_used":261,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":261,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"join-xrpfi.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"join-xrpfi.xyz/favicon.ico","fqdn":"join-xrpfi.xyz","domain":"join-xrpfi.xyz","tld":"xyz"},"ip":{"addr":"172.67.202.7","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://join-xrpfi.xyz/","date":"2026-06-18T16:01:13.272Z","timestamp":1781798473272,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"join-xrpfi.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Jun 2026 22:20:30 GMT","end":"Mon, 07 Sep 2026 23:18:55 GMT"},"fingerprint":{"sha1":"BD:76:DB:17:19:68:29:BF:5D:8F:84:8A:F4:BC:DC:4F:63:81:CE:5A","sha256":"7A:F8:07:B7:03:C9:82:FD:B6:4F:E8:06:FA:66:A4:93:D8:74:F5:5C:00:DD:5B:A6:8B:52:C4:61:EA:68:C1:D4"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: join-xrpfi.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://join-xrpfi.xyz/?__cf_chl_rt_tk=1qB4QJSwoQl6KPDg2Zms3S0YcJdeBFWlEfdknJt3Bmc-1781798472-1.0.1.1-mLCjWBCrDHs8J3pcf5FAcPoJqx2ikaBbmmjyzzW90Vg\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: image/x-icon\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mv4SJnP9IsC4Pg5U3bz8ouXOGzcZSgXjnF8rDaSsu41qj%2F7%2FRb1N56FLwJ6f2kncyNF%2BlPYmNDsfGw2HaT%2F%2F4qC54xcsbK0LCc9n%2Fn8H8kUQmn5eXu9O%2FZEcFOzerQO1Xw%3D%3D\"}]}\r\nlast-modified: Tue, 09 Jun 2026 23:23:59 GMT\r\ndate: Thu, 18 Jun 2026 16:01:13 GMT\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\netag: W/\"dc270172d1648eb90a7ac9e496aaa7ec\"\r\npriority: u=6,i=?0\r\ncf-ray: a0db82e9f97256a8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15406,"size_decoded":3511,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 3 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel","md5":"dc270172d1648eb90a7ac9e496aaa7ec","sha1":"4c6c6b1d4815a5022e215fe4667fe55ff908b13f","sha256":"d4e950e20f2728c5addc06853e7802699855c3ff9166375bea74da43e214d99b","sha512":"829338b30e6435447174ad43e0ff80659a93bd50aa00f135ac739203efb8e6b471864222250f2180af429b8396201611fdfbf75a6a2c252ef45a93a4f692640f","ssdeep":"192:l8WBBBBBB3vjlZXBbxEB+///////////7AFMCpQ:jbrXXEcd","tlshash":"bc62795166299107f9ab803ab34adb6af27ffec5e91b15261b407129103e09270fdf17","first_seen":"2026-01-21T22:11:30.922214Z","last_seen":"2026-06-24T22:01:51.066722Z","times_seen":120,"resource_available":false,"data":null}},"time_used":521,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":452,"receive":69,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"join-xrpfi.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"join-xrpfi.xyz/HexTrust-1.webp","fqdn":"join-xrpfi.xyz","domain":"join-xrpfi.xyz","tld":"xyz"},"ip":{"addr":"172.67.202.7","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://join-xrpfi.xyz/","date":"2026-06-18T16:01:20.880Z","timestamp":1781798480880,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"join-xrpfi.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Jun 2026 22:20:30 GMT","end":"Mon, 07 Sep 2026 23:18:55 GMT"},"fingerprint":{"sha1":"BD:76:DB:17:19:68:29:BF:5D:8F:84:8A:F4:BC:DC:4F:63:81:CE:5A","sha256":"7A:F8:07:B7:03:C9:82:FD:B6:4F:E8:06:FA:66:A4:93:D8:74:F5:5C:00:DD:5B:A6:8B:52:C4:61:EA:68:C1:D4"}}},"request":{"raw":"GET /HexTrust-1.webp HTTP/1.1\r\nHost: join-xrpfi.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://join-xrpfi.xyz/\r\nCookie: cf_clearance=3sQx4O48cjL3MFPGKWSZ61gbAJ0Fsb19CV5Td5ovrfs-1781798479-1.2.1.1-6InG6zHSWZQ9klTR0SWrkCCd2amThW3ZvgBV9QX.YygxniZ2gero7Sv0k_PQyL_pw4b46hxD4mkmSOyphsEoHzbXHXfFOOQs.7TR0_V0LJaZHtTwFhzQoJfxt3ekxBzXv3GW2lfXX18wX5JtUEGQs_uPdClhd0gEnyuawbiC4ZvF.yis7gd0CMoixQzWLguFvYW35guV28_t3b0VHPoaNB1pvLiuIPvfAR.LBgS4tMLTpQ7cvnZyYUpgwznXJdLv51P17bJB4V1UgefdTcvYTBtsln1W6WbJQ3YD6IcexX65CeKH04k92ALfOTwXTrQmnbi48XXvC8qmg0jBdlKn1_mEzvupFWiHx0PPaIei6u2f14bt_5seBIYbd4GWWFhHxz9asbtFuh6MuYlyQwJ7vQJvOleaURzAiWPjl2sq6c7Keyh2CXDT.UnjdlME5nTFJJxlJjcG_UV162r4Hmj5EbldbS3j2YEbB8.z1CY8gAouDRomY2Pmc87xzeTOewza\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: image/webp\r\netag: \"3978f7542bed8e61360ecae12e999a7c\"\r\nlast-modified: Tue, 09 Jun 2026 23:23:59 GMT\r\ndate: Thu, 18 Jun 2026 16:01:21 GMT\r\nserver: cloudflare\r\npriority: u=5,i\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2GIsL4sIwYwSgExr6EQ9ormATdr70zcCA59SNcvlWcD7VINU6uFPbu%2B0DF27IfUjZtc8yiCKqtqWCmVU6r%2FQtKz5EfkrnBKKSLEK6zqd%2Fn0kNeXtoR9%2BqFBwDLmtysJeDw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-length: 1832\r\ncf-ray: a0db83198b0456a8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1832,"size_decoded":2544,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 210x64, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"3978f7542bed8e61360ecae12e999a7c","sha1":"69e859543324898cd73c6246d558293b93497248","sha256":"6afbe97b7becfb2b0008dfcc0f04267755bb64fcc00c16b7e875287f19c5ca79","sha512":"ab2c7958e052736ddff1931a1b744db235463d89f31bbe957c984954f31b26a506ceec47c5825926d0012da93bdab526b1565b7cd0f4bf5bdb951a2d5aa3ae0b","ssdeep":"","tlshash":"5a31eb01d636ff5d3fffd0a20a1796c7d4da71822e15170420702d2696cd0ac98ee57a","first_seen":"2025-08-11T21:39:04.746858Z","last_seen":"2026-06-19T07:14:12.388544Z","times_seen":33,"resource_available":false,"data":null}},"time_used":246,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":246,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"join-xrpfi.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"join-xrpfi.xyz/ibm_plex_mono_v20_latin_regular-s.p.e1d6b3bf.woff2","fqdn":"join-xrpfi.xyz","domain":"join-xrpfi.xyz","tld":"xyz"},"ip":{"addr":"172.67.202.7","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://join-xrpfi.xyz/","date":"2026-06-18T16:01:21.112Z","timestamp":1781798481112,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"join-xrpfi.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Jun 2026 22:20:30 GMT","end":"Mon, 07 Sep 2026 23:18:55 GMT"},"fingerprint":{"sha1":"BD:76:DB:17:19:68:29:BF:5D:8F:84:8A:F4:BC:DC:4F:63:81:CE:5A","sha256":"7A:F8:07:B7:03:C9:82:FD:B6:4F:E8:06:FA:66:A4:93:D8:74:F5:5C:00:DD:5B:A6:8B:52:C4:61:EA:68:C1:D4"}}},"request":{"raw":"GET /ibm_plex_mono_v20_latin_regular-s.p.e1d6b3bf.woff2 HTTP/1.1\r\nHost: join-xrpfi.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://join-xrpfi.xyz/6cdcfbcc140e7bef.css\r\nCookie: cf_clearance=3sQx4O48cjL3MFPGKWSZ61gbAJ0Fsb19CV5Td5ovrfs-1781798479-1.2.1.1-6InG6zHSWZQ9klTR0SWrkCCd2amThW3ZvgBV9QX.YygxniZ2gero7Sv0k_PQyL_pw4b46hxD4mkmSOyphsEoHzbXHXfFOOQs.7TR0_V0LJaZHtTwFhzQoJfxt3ekxBzXv3GW2lfXX18wX5JtUEGQs_uPdClhd0gEnyuawbiC4ZvF.yis7gd0CMoixQzWLguFvYW35guV28_t3b0VHPoaNB1pvLiuIPvfAR.LBgS4tMLTpQ7cvnZyYUpgwznXJdLv51P17bJB4V1UgefdTcvYTBtsln1W6WbJQ3YD6IcexX65CeKH04k92ALfOTwXTrQmnbi48XXvC8qmg0jBdlKn1_mEzvupFWiHx0PPaIei6u2f14bt_5seBIYbd4GWWFhHxz9asbtFuh6MuYlyQwJ7vQJvOleaURzAiWPjl2sq6c7Keyh2CXDT.UnjdlME5nTFJJxlJjcG_UV162r4Hmj5EbldbS3j2YEbB8.z1CY8gAouDRomY2Pmc87xzeTOewza\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: font/woff2\r\netag: \"79936b18df9f734fb6b0a256b20d36b4\"\r\nlast-modified: Tue, 09 Jun 2026 23:24:00 GMT\r\ndate: Thu, 18 Jun 2026 16:01:21 GMT\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uVFfgx1vcThFQ9YX2a%2BYQGelho6AzscRbxLr74gq8TCum9USfWVBTLUBSeJovejL2F95mM5azROJcrTJLV9dmX8fJ9mc06%2BrtNWtUhdUDClviVrItCKsI6egz2FhSL%2F8sQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a0db831afb1256a8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14708,"size_decoded":15377,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 14708, version 1.0","md5":"79936b18df9f734fb6b0a256b20d36b4","sha1":"bb87500e3204a3a7c65d6633c79c5c840c3be8d3","sha256":"08949f728dc52d528e69b1667d15c89a5686a4ee9a296ff90983985f99c380f7","sha512":"d5b9ed102916ebc2e1ddfe322a5dee1302329de23c0c7895639106766a52906b8ec2b9bf3ac7884dbdce6166e27d315808128d35d9609e45841e3c8c2818031a","ssdeep":"384:i54PnCNUhrlC/trZov44r9cmuyWPCZpMbyKdlm+:i2P0mrlC/cv46VuyVZSFdl","tlshash":"c962b073691e2539e1c2afb0c6c81f6c50f8d70b5ba5c6109378a063b7615ae361e9b1","first_seen":"2025-09-19T06:27:38.321624Z","last_seen":"2026-06-25T00:13:42.259418Z","times_seen":2325,"resource_available":false,"data":null}},"time_used":331,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":242,"receive":89,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"join-xrpfi.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"join-xrpfi.xyz/FAssets%20(1).svg","fqdn":"join-xrpfi.xyz","domain":"join-xrpfi.xyz","tld":"xyz"},"ip":{"addr":"172.67.202.7","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://join-xrpfi.xyz/","date":"2026-06-18T16:01:21.117Z","timestamp":1781798481117,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"join-xrpfi.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Jun 2026 22:20:30 GMT","end":"Mon, 07 Sep 2026 23:18:55 GMT"},"fingerprint":{"sha1":"BD:76:DB:17:19:68:29:BF:5D:8F:84:8A:F4:BC:DC:4F:63:81:CE:5A","sha256":"7A:F8:07:B7:03:C9:82:FD:B6:4F:E8:06:FA:66:A4:93:D8:74:F5:5C:00:DD:5B:A6:8B:52:C4:61:EA:68:C1:D4"}}},"request":{"raw":"GET /FAssets%20(1).svg HTTP/1.1\r\nHost: join-xrpfi.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://join-xrpfi.xyz/\r\nCookie: cf_clearance=3sQx4O48cjL3MFPGKWSZ61gbAJ0Fsb19CV5Td5ovrfs-1781798479-1.2.1.1-6InG6zHSWZQ9klTR0SWrkCCd2amThW3ZvgBV9QX.YygxniZ2gero7Sv0k_PQyL_pw4b46hxD4mkmSOyphsEoHzbXHXfFOOQs.7TR0_V0LJaZHtTwFhzQoJfxt3ekxBzXv3GW2lfXX18wX5JtUEGQs_uPdClhd0gEnyuawbiC4ZvF.yis7gd0CMoixQzWLguFvYW35guV28_t3b0VHPoaNB1pvLiuIPvfAR.LBgS4tMLTpQ7cvnZyYUpgwznXJdLv51P17bJB4V1UgefdTcvYTBtsln1W6WbJQ3YD6IcexX65CeKH04k92ALfOTwXTrQmnbi48XXvC8qmg0jBdlKn1_mEzvupFWiHx0PPaIei6u2f14bt_5seBIYbd4GWWFhHxz9asbtFuh6MuYlyQwJ7vQJvOleaURzAiWPjl2sq6c7Keyh2CXDT.UnjdlME5nTFJJxlJjcG_UV162r4Hmj5EbldbS3j2YEbB8.z1CY8gAouDRomY2Pmc87xzeTOewza\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: image/svg+xml\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Tue, 09 Jun 2026 23:23:59 GMT\r\ndate: Thu, 18 Jun 2026 16:01:21 GMT\r\nserver: cloudflare\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4SuyWnMXaAmZM012WClUPj%2FVamzlXpbf%2FgW2kGvoSYIEJ2TDY8pD2e9HpW1JbA38je7WHvIDhJycuvaNX1dfpoNnD6djdmX9X3Y12ycmA91eBhpittNaNrd5cZGEEHqlGA%3D%3D\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\netag: W/\"791afcd30e640797223cddb9e71c4b02\"\r\ncf-ray: a0db831afb1356a8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5973,"size_decoded":2968,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"791afcd30e640797223cddb9e71c4b02","sha1":"311cfb7ed5c7befab02b7d82af94d4e1459e790c","sha256":"b6d60256961e6c438cf6722481961f3936cfaa0cdba7345c83d7dc1e91d9b935","sha512":"752352c2bf83d59d448219e4e91b6964688f8a843a233ca385707280e9c6b496c9cb140ad287d8116d25508816cd7e2288a3ed34929d86feca03c32dc61cbdaf","ssdeep":"96:P9KSr0KTT9M+P3qpna3TU/Awbq1N5HmCcfZ+HbJm4q+REFy8C1fhY63k:VUKTTOeaFlovNLcfQHw4zmCNhYQk","tlshash":"70c16380337c93b5b841e3761b4ea039787764e4ba044880d6e63f05b689a9f5dacbd3","first_seen":"2025-08-11T21:39:04.7375Z","last_seen":"2026-06-19T07:14:12.373245Z","times_seen":32,"resource_available":false,"data":null}},"time_used":239,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":239,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"join-xrpfi.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"arbitrum.drpc.org/","fqdn":"arbitrum.drpc.org","domain":"drpc.org","tld":"org"},"ip":{"addr":"104.18.11.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://join-xrpfi.xyz/","date":"2026-06-18T16:01:25.037Z","timestamp":1781798485037,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"drpc.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 14 Jun 2026 23:01:08 GMT","end":"Sun, 13 Sep 2026 00:00:59 GMT"},"fingerprint":{"sha1":"7F:E5:3C:EC:15:AC:2B:17:FE:8B:3B:16:E4:25:9A:40:37:43:63:45","sha256":"DF:D3:75:05:E3:1C:E5:C2:B8:D6:2A:66:75:39:9A:D3:91:D6:86:E7:7B:11:D6:84:3E:A1:0F:FF:79:47:06:19"}}},"request":{"raw":"POST / HTTP/1.1\r\nHost: arbitrum.drpc.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://join-xrpfi.xyz/\r\nContent-Type: application/json\r\nContent-Length: 136\r\nOrigin: https://join-xrpfi.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 18 Jun 2026 16:01:25 GMT\r\ncontent-type: application/json\r\naccess-control-allow-origin: *\r\nvary: Accept-Encoding\r\nx-drpc-owner-id: cb501251-31a8-4028-8b0a-54679f15c385\r\nx-drpc-owner-tier: free\r\nx-drpc-provider-id: drpc-public-multiregion\r\nx-drpc-trace-id: 73f56ea353f5cf529f14ed17d2157480\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\ncontent-encoding: zstd\r\nserver: cloudflare\r\ncf-ray: a0db83350a788be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":422,"size_decoded":743,"mime_type":"application/json","magic":"JSON text data","md5":"516a914bfd7e00d30b209746f47d6358","sha1":"9ded33493aac1d673633e7c61ab116d9423a5a9c","sha256":"429c74030776d505aa963c229c778e2499982a388b613dd6b7bccc167246dfb1","sha512":"f5f586b90ec4e5c7215d848c4cde80c5efb0eacb9d6d6b3c801bd6f13b26c3504943e086568b6a5a93553b06c0561537646ad93c625e003661b8ddf615cd8593","ssdeep":"","tlshash":"83e02bd04c885681d74f0d4a6a4a7996917c3626ead40a8b088828182ae51abab1d684","first_seen":"2026-06-18T16:02:55.851595Z","last_seen":"2026-06-18T16:02:55.851595Z","times_seen":1,"resource_available":false,"data":null}},"time_used":439,"timings":{"blocked":98,"dns":0,"connect":0,"send":0,"wait":341,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"arbitrum.gateway.tenderly.co/","fqdn":"arbitrum.gateway.tenderly.co","domain":"tenderly.co","tld":"co"},"ip":{"addr":"35.227.193.242","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://join-xrpfi.xyz/","date":"2026-06-18T16:01:25.040Z","timestamp":1781798485040,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gateway.tenderly.co","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 15 Jun 2026 18:01:31 GMT","end":"Sun, 13 Sep 2026 18:01:30 GMT"},"fingerprint":{"sha1":"9A:41:E5:34:79:91:EC:A6:18:2C:A5:9B:64:A2:94:81:A0:74:A3:57","sha256":"DD:73:B2:F2:0C:93:E6:AC:22:8B:33:E7:18:12:2F:78:95:14:EF:D9:E1:B3:D5:59:5A:73:0E:1B:07:B3:90:E9"}}},"request":{"raw":"POST / HTTP/1.1\r\nHost: arbitrum.gateway.tenderly.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://join-xrpfi.xyz/\r\nContent-Type: application/json\r\nContent-Length: 136\r\nOrigin: https://join-xrpfi.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\ncontent-type: application/json; charset=utf-8\r\nvary: Origin\r\nx-tdly-limit: 20\r\nx-tdly-remaining: 16\r\nx-tdly-reset-timestamp: 1781798486243\r\ndate: Thu, 18 Jun 2026 16:01:25 GMT\r\ncontent-length: 422\r\nx-envoy-upstream-service-time: 4\r\nserver: envoy\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":422,"size_decoded":785,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"516a914bfd7e00d30b209746f47d6358","sha1":"9ded33493aac1d673633e7c61ab116d9423a5a9c","sha256":"429c74030776d505aa963c229c778e2499982a388b613dd6b7bccc167246dfb1","sha512":"f5f586b90ec4e5c7215d848c4cde80c5efb0eacb9d6d6b3c801bd6f13b26c3504943e086568b6a5a93553b06c0561537646ad93c625e003661b8ddf615cd8593","ssdeep":"","tlshash":"83e02bd04c885681d74f0d4a6a4a7996917c3626ead40a8b088828182ae51abab1d684","first_seen":"2026-06-18T16:02:55.851595Z","last_seen":"2026-06-18T16:02:55.851595Z","times_seen":1,"resource_available":false,"data":null}},"time_used":94,"timings":{"blocked":31,"dns":0,"connect":0,"send":0,"wait":63,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rpc.ankr.com/arbitrum","fqdn":"rpc.ankr.com","domain":"ankr.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://join-xrpfi.xyz/","date":"2026-06-18T16:01:25.044Z","timestamp":1781798485044,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"OPTIONS /arbitrum HTTP/1.1\r\nHost: rpc.ankr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://join-xrpfi.xyz/\r\nOrigin: https://join-xrpfi.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-25T00:14:26.040585Z","times_seen":16694613,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"join-xrpfi.xyz/29d75789b264c294.css","fqdn":"join-xrpfi.xyz","domain":"join-xrpfi.xyz","tld":"xyz"},"ip":{"addr":"172.67.202.7","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://join-xrpfi.xyz/","date":"2026-06-18T16:01:20.259Z","timestamp":1781798480259,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"join-xrpfi.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Jun 2026 22:20:30 GMT","end":"Mon, 07 Sep 2026 23:18:55 GMT"},"fingerprint":{"sha1":"BD:76:DB:17:19:68:29:BF:5D:8F:84:8A:F4:BC:DC:4F:63:81:CE:5A","sha256":"7A:F8:07:B7:03:C9:82:FD:B6:4F:E8:06:FA:66:A4:93:D8:74:F5:5C:00:DD:5B:A6:8B:52:C4:61:EA:68:C1:D4"}}},"request":{"raw":"GET /29d75789b264c294.css HTTP/1.1\r\nHost: join-xrpfi.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://join-xrpfi.xyz/\r\nCookie: cf_clearance=3sQx4O48cjL3MFPGKWSZ61gbAJ0Fsb19CV5Td5ovrfs-1781798479-1.2.1.1-6InG6zHSWZQ9klTR0SWrkCCd2amThW3ZvgBV9QX.YygxniZ2gero7Sv0k_PQyL_pw4b46hxD4mkmSOyphsEoHzbXHXfFOOQs.7TR0_V0LJaZHtTwFhzQoJfxt3ekxBzXv3GW2lfXX18wX5JtUEGQs_uPdClhd0gEnyuawbiC4ZvF.yis7gd0CMoixQzWLguFvYW35guV28_t3b0VHPoaNB1pvLiuIPvfAR.LBgS4tMLTpQ7cvnZyYUpgwznXJdLv51P17bJB4V1UgefdTcvYTBtsln1W6WbJQ3YD6IcexX65CeKH04k92ALfOTwXTrQmnbi48XXvC8qmg0jBdlKn1_mEzvupFWiHx0PPaIei6u2f14bt_5seBIYbd4GWWFhHxz9asbtFuh6MuYlyQwJ7vQJvOleaURzAiWPjl2sq6c7Keyh2CXDT.UnjdlME5nTFJJxlJjcG_UV162r4Hmj5EbldbS3j2YEbB8.z1CY8gAouDRomY2Pmc87xzeTOewza\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/css;charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BsVAdC8Zk8TqkqlmIDzdXUMtglcMGFW0T48ta5NR54VYaK5tF0iu4l5T%2BZ0nShbzQA7PGhLd5s1lI2WKSVSuTiIvvVd9j%2BkCATOvpZ5WXrmXVHEhdNVlTciICwDXrsKArg%3D%3D\"}]}\r\nlast-modified: Tue, 09 Jun 2026 23:24:00 GMT\r\ndate: Thu, 18 Jun 2026 16:01:20 GMT\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\netag: W/\"1d3620097efe3fa54b3134ec2dfd8bb9\"\r\npriority: u=2,i=?0\r\ncf-ray: a0db8315aad556a8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":111154,"size_decoded":14353,"mime_type":"text/css; charset=utf-8","magic":"Unicode text, UTF-8 text, with very long lines (16853)","md5":"1d3620097efe3fa54b3134ec2dfd8bb9","sha1":"889505bb1e1035b9eb4f939b3a447507fc6f5d3a","sha256":"70fe002679e725bb0c0a3b935f68ac7a20378ab2a67c72860caf951dfe04d5d8","sha512":"ca395ebfdbb9425e8bb03cc442667fe8319f04490ce3c98e38ffcd2c34ee9214eac8441071c8110811b65032f405ef97e7e78d3c2ef0df2e0482afe3e6af459a","ssdeep":"768:KWeCQlBkIapPd6GvZbpyFV7vYyafVcVVyN1HQtlmsbmHDmxHC8hjg+8eItV25uXn:KbliIapPd6GvrtfVccids","tlshash":"56b30e13b6f5137fa05d244af6915804efd074ebf2ca9fe0940edce588899a226f174b","first_seen":"2026-06-18T15:59:02.815377Z","last_seen":"2026-06-19T07:14:12.316256Z","times_seen":13,"resource_available":false,"data":null}},"time_used":519,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":269,"receive":250,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"join-xrpfi.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}}]}