{"report_id":"d9b4bb90-3b76-4ff5-aac4-736fc26c471a","version":6,"status":"done","tags":[],"date":"2026-01-07T00:20:21Z","url":{"schema":"http","addr":"pass-ligther.xyz","fqdn":"pass-ligther.xyz","domain":"pass-ligther.xyz","tld":"xyz"},"ip":{"addr":"172.67.155.122","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"pass-ligther.xyz/","fqdn":"pass-ligther.xyz","domain":"pass-ligther.xyz","tld":"xyz"},"title":"Lighter","dom":{"size":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"pass-ligther.xyz","fqdn":"pass-ligther.xyz","domain":"pass-ligther.xyz","tld":"xyz"},"ip":{"addr":"172.67.155.122","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-02-11T00:20:21Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"pass-ligther.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null},"summary":[{"fqdn":"framerusercontent.com","ip":{"addr":"52.84.50.29","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2019-04-29","domain_rank":18507,"first_seen":"2019-05-01T19:48:10Z","last_seen":"2026-01-05T14:39:06.399543Z","alert_count":0,"request_count":6,"received_data":94543,"sent_data":3001,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]},{"fqdn":"1.1.1.1","ip":{"addr":"1.1.1.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2012-05-30T07:40:31Z","last_seen":"2019-03-28T08:40:04Z","alert_count":0,"request_count":1,"received_data":585,"sent_data":440,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"pass-ligther.xyz","ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-12-30","domain_rank":0,"first_seen":"2026-01-07T00:20:24.203437Z","last_seen":"2026-01-07T00:20:24.203437Z","alert_count":7,"request_count":7,"received_data":3936864,"sent_data":2992,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Framer Sites","description":"Framer is a no-code web design platform for designing and publishing responsive websites.","website":"https://www.framer.com","common_platform_enumeration":"","icon":"Framer Sites.svg","categories":["CMS","Page builders"]},{"name":"React","description":"React is an open-source JavaScript library for building user interfaces or UI components.","website":"https://reactjs.org","common_platform_enumeration":"cpe:2.3:a:facebook:react:*:*:*:*:*:*:*:*","icon":"React.svg","categories":["JavaScript frameworks"]}]},{"fqdn":"cdn.jsdelivr.net","ip":{"addr":"151.101.1.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2012-05-16","domain_rank":1678,"first_seen":"2012-09-30T00:15:09Z","last_seen":"2026-01-04T22:27:18.120727Z","alert_count":0,"request_count":1,"received_data":760964,"sent_data":445,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-01-04T22:14:09.841371Z","alert_count":0,"request_count":3,"received_data":96609,"sent_data":1611,"comment":"","tags":null,"fingerprints":null},{"fqdn":"d1h2wpc6xyxa4i.cloudfront.net","ip":{"addr":"54.230.241.4","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2008-04-25","domain_rank":0,"first_seen":"2025-11-20T11:15:04.731807Z","last_seen":"2026-01-05T22:56:12.544976Z","alert_count":0,"request_count":4,"received_data":9950598,"sent_data":2000,"comment":"","tags":null,"fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"pass-ligther.xyz/","fqdn":"pass-ligther.xyz","domain":"pass-ligther.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"d5a732364910d40fd64ad18ff342c69e","sha1":"36395ee1988b648922a082fc2edb05cd0eeea517","sha256":"71d6d8f54e51c7c5b54787e385b1a3b38777fbcfed13b7c1a9cbc57d867a8711","sha512":"5b1ffda80993ce4aa75ee1add86e86c760469362eae9ecc6f8bae66b022fbd6d01e3f834becaa60128102d26a7a777195e61be24a48f75451bf11bfc88335a18","ssdeep":"","tlshash":"05b0128d92661c67456b2c45a9ce10010677904eaa3f0e0391612f40242b694019be2c","size":101,"data":"","first_seen":"2025-12-28T20:42:25.267662Z","last_seen":"2026-03-28T01:16:36.056854Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pass-ligther.xyz/","fqdn":"pass-ligther.xyz","domain":"pass-ligther.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"29c2672120bb2e9638c7e672efbeca70","sha1":"9fc07ae210d7bc82cd83520d3d857ebf4d9453e0","sha256":"b6486431a68778720f675b9b281ff4c4d71c02982951ad58333c1368d0dfd8cb","sha512":"2af2d2c5eb8f5c1a9bd112d79590d843ff1ba750d0390c64f9a18e38cd1bd46401ced4c25de0e10ac638347f1c361fb9d9e4c819b438867642540859b9289f54","ssdeep":"3072:XWzCgtM54lEt3n2k51748ztQQDAEMxQM1j4ytIVmMsOqGErxzFakiyuM6CQUAaC7:XGWp/nQI6t0","tlshash":"7124f26426c5e4edb7604dec171ca0a46476f732cecf2ca967906187f2f9b1231e62d8","size":222651,"data":"","first_seen":"2026-01-07T00:20:28.345439Z","last_seen":"2026-01-07T00:20:28.345439Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pass-ligther.xyz/main.js","fqdn":"pass-ligther.xyz","domain":"pass-ligther.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"7dceda5d7c38bc6cbeecdc564b456689","sha1":"7567cc2b386f5f27df4cd4c9f682dafcf56724a8","sha256":"ca617f7f11ea02202d7bf8e5da7a22c20ae0a741042be03bb0631de6de099ac8","sha512":"d7f034424d2a8d8c41361d68a3a68f10d39db6fe81db3a11281f9ef885f09ace8e1b1972add47ba618318c84b96695ecb469a99b86194914f68cd30482a98ad2","ssdeep":"3072:aazA8tM54lEt3n2k51748ztQQDAEut7LHAS6AsLytIVmMsOqGwrxzFa4iyuG6CQ7:aK5d6XlntVUrk","tlshash":"d224f35426c5e4edb7604dec172caca46475f732cecf2ca86790a187f2f9b2121e52d8","size":226680,"data":"","first_seen":"2026-01-07T00:20:28.342936Z","last_seen":"2026-01-07T00:20:28.342936Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/ethers@5.7.2/dist/ethers.umd.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.1.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"71f8c498e792c6179d4e2840228f777a","sha1":"b651545587f6257345dc3de9ddaa444b10dedf3e","sha256":"a66293a6a2bb4dee061a68612be0be3c5c0ab7e4068ab8d98a4a357baf664c73","sha512":"14371563e83bbdce425c035bad34a0d4ae6a2f2ae20ac183602134d8b8b5b5711874d40fbcb3c7344fab4f63237a2f0dedf65b7b458b870dbb8f64ab191a5d32","ssdeep":"12288:TfamYTKkkAJs8P+H8Xb2F/nNuwEYtnob6qQr:TfjkhPaNnN9EYtwo","tlshash":"35f43b80b3b1b0b583c729a4143f6046f63af46a505840a8f659faf279f9d4c957bb3c","size":760171,"data":"","first_seen":"2023-03-13T00:48:53Z","last_seen":"2026-07-23T05:25:55.400593Z","times_seen":3707,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pass-ligther.xyz/modals.js","fqdn":"pass-ligther.xyz","domain":"pass-ligther.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ecbc5043a1e25f2bd5bbd6e3c3be49f0","sha1":"d66eb695679871221c52958d94029c6358b7613d","sha256":"6d0c2c8d032982e9a86a1bed14f709911058b6b693abb5d46335a0106c12c411","sha512":"38b9aedf74859ade1e5445634b338f560c4d0520ab126de202ad98942bc0f34e740b93c7123a3bc53dcdded31944c174ad06bf1ca006e137cb4e06a949e86088","ssdeep":"768:ywjvL/eQ0ae2vBKRDpoKvTQv4n59+Y44U7kFlaoGHv5:ywz2n59J4inM5","tlshash":"943311071cbe31361daf0fa3b7cc1a1b4e2eb351e612aaee71bd1446438bd74c5a5618","size":52833,"data":"","first_seen":"2025-07-20T10:23:41.460008Z","last_seen":"2026-07-10T23:25:47.367285Z","times_seen":743,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pass-ligther.xyz/fpbundle.js","fqdn":"pass-ligther.xyz","domain":"pass-ligther.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"1c59909ad8d56060bf239a34a275da3d","sha1":"1164057a0631f6b5dd80387a1c3a9e332fb00bb4","sha256":"126a8b465ef8734b4d7a289781e0535cd283ccf24394e08c44f23ae300be3a5a","sha512":"39d33737c908bf2a1430f157990f931a0644471a0cf20de61721596e1330fe5867108db7e47d1869576710a72f886ef42e7492a2c0ed05fde2644f6d338e3eac","ssdeep":"768:v8UXI0Nc5VArhXDh1bnUsAq1++umYUT15+2gT/RcKrNcFV3BT/Vo:vN/NcnArV7f5+9cxT6","tlshash":"a413c7a873c67139a217b0719dcf4845b67d6d182289884dca2ec4a4b879d3dc77ecec","size":45503,"data":"","first_seen":"2025-07-11T11:18:53.943693Z","last_seen":"2026-07-10T23:25:47.376334Z","times_seen":741,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pass-ligther.xyz/bundle.js","fqdn":"pass-ligther.xyz","domain":"pass-ligther.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"29681f25e1e25a870bd6656b8d48646f","sha1":"7b8c8d1c3af639b6ec50c84660a9e9f0a3a2d3a3","sha256":"969be4f64afdeaca0568779c3b0f7291bc9a7185cc983a5104fbd90e4f901039","sha512":"69c94d52b83c5cfc9b4d86e042cf6b99ab9d00c1b9f417ed35f789a41b2d21a92606bef9e1a7a02e64622e31feecb9cdb451ed23f8fa7a69392a0575944867e9","ssdeep":"49152:LRIMXDbdUW4HlHZg+dY3yBgS6cUKZJNrl4G1SE0BuuJpxHiRo6r3XOWxYrowVpaz:Qg+wyBgSxUKZTRbUajO9U7","tlshash":"abc56d907395a46c03b352d458771101f339684aa40d80ecf7ecd9e7afb998a897bf39","size":2510372,"data":"","first_seen":"2025-07-20T10:23:41.470184Z","last_seen":"2026-07-10T23:25:47.381877Z","times_seen":709,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"fonts.gstatic.com/s/geistmono/v4/or3nQ6H-1_WfwkMZI_qYFrcdmg.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://pass-ligther.xyz/","date":"2026-01-07T00:19:56.455Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:53:13 GMT","end":"Wed, 25 Feb 2026 15:53:12 GMT"},"fingerprint":{"sha1":"5A:E3:E3:B6:18:F9:10:0B:5B:11:FA:CB:BF:0C:9B:5C:0E:34:70:78","sha256":"FC:46:B0:C1:1E:B2:21:60:D9:7E:6A:ED:42:56:B2:CF:2A:E4:D2:F1:1C:63:63:98:2B:A3:0F:6C:4A:98:74:D6"}}},"request":{"raw":"GET /s/geistmono/v4/or3nQ6H-1_WfwkMZI_qYFrcdmg.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://pass-ligther.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pass-ligther.xyz/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 31368\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 02 Jan 2026 19:17:50 GMT\r\nexpires: Sat, 02 Jan 2027 19:17:50 GMT\r\ncache-control: public, max-age=31536000\r\nage: 363726\r\nlast-modified: Mon, 15 Sep 2025 17:01:43 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":31368,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 31368, version 1.0","md5":"bd0693c1a36d67b859220908f04f47bd","sha1":"0d05a98b4df75e88c0d9998d332a7c8b6cd95111","sha256":"e9fb088eeacced307860d82ceedb0ae9ad2ebfa07a7c0a7279c8c961dd9d5fd3","sha512":"2bf2c76a5b99a3b0f73d15120ba60a9c4c6868be77dc53003701d8d29a39d91d5098e7526c2e9640a6426677b57becc881f9fad81d34270257347c02d0bc6330","ssdeep":"768:ZMkC731Q6Oy5ZSvLLz+FjirLXI/bUg2jLIqy8O:7CHOy5CdmNcvy8O","tlshash":"3ce2e161b10bf445c8a44795477efff0af0d0c72296b3051d44ea895beee963b287427","first_seen":"2025-04-29T17:08:33.422864Z","last_seen":"2026-07-17T05:59:25.785673Z","times_seen":185,"resource_available":false,"data":null}},"time_used":220,"timings":{"blocked":88,"dns":1,"connect":20,"send":0,"wait":21,"receive":22,"ssl":65},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"d1h2wpc6xyxa4i.cloudfront.net/hero.webm","fqdn":"d1h2wpc6xyxa4i.cloudfront.net","domain":"d1h2wpc6xyxa4i.cloudfront.net","tld":"cloudfront.net"},"ip":{"addr":"54.230.241.4","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://pass-ligther.xyz/","date":"2026-01-07T00:19:56.675Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cloudfront.net","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Mon, 05 May 2025 00:00:00 GMT","end":"Thu, 23 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"8F:00:F1:34:A7:1E:27:1C:CF:CD:A6:53:8B:C4:82:B0:68:BC:C8:72","sha256":"60:38:9D:24:9E:41:8F:23:AC:D9:14:5C:A3:47:7E:AF:07:DB:9F:2D:6A:8C:0D:08:E9:24:8A:8E:49:A9:4D:28"}}},"request":{"raw":"GET /hero.webm HTTP/1.1\r\nHost: d1h2wpc6xyxa4i.cloudfront.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pass-ligther.xyz/\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 206 Partial Content\r\ncontent-type: video/webm\r\ncontent-length: 3829654\r\ndate: Tue, 06 Jan 2026 04:33:27 GMT\r\nlast-modified: Wed, 01 Oct 2025 14:21:45 GMT\r\netag: \"da92ebad5794f4c1f44a5aaad1e3cce8\"\r\nx-amz-server-side-encryption: AES256\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\ncontent-range: bytes 0-3829653/3829654\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 60929bddfcfe8b3a510a9502ad6d8742.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P1\r\nx-amz-cf-id: VFj3o9eDNwycKad91MyKuD63uxXhmvo5nN6TLxq6SdUPd6YfV9JPJA==\r\nage: 71190\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":3829654,"size_decoded":0,"mime_type":"video/webm","magic":"WebM","md5":"ee463ee327a8fa1d709d139dba80303c","sha1":"bf4f98e2e766d8a4704d8159e8dbc2d3c0c2ef9f","sha256":"b7d093bf8b553e6d345db3ce80c1a3bb67236d5c3acd1809056825c2a35314e0","sha512":"9b1bf57e12688a18ba76b56a5721494474be6a026f03ed541432b3f08b1f0b03fec3e96b9299cded1cf5a00679ff2a954dbc839d395f429e99c14f7b6946f394","ssdeep":"24576:W8o9hpRYaYRd95Nhkc9E4OfTgQ7tCVw1fZyKyE7ftfpbmmOLwYBB:WjhpRxW95NhXOfTRtQ2ymXSLDB","tlshash":"c52523d6f829b5c7d264cd7dce231c04565a868a38a07e58f8db9b52c4be206dfce407","first_seen":"2025-11-27T21:37:46.556819Z","last_seen":"2026-03-28T01:16:36.050203Z","times_seen":42,"resource_available":false,"data":null}},"time_used":599,"timings":{"blocked":27,"dns":3,"connect":1,"send":0,"wait":6,"receive":537,"ssl":19},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"framerusercontent.com/images/Zo886XiD1XYr0RbkjdJiQYOPW4.png","fqdn":"framerusercontent.com","domain":"framerusercontent.com","tld":"com"},"ip":{"addr":"52.84.50.29","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://pass-ligther.xyz/","date":"2026-01-07T00:19:56.684Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"framerusercontent.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Thu, 16 Oct 2025 00:00:00 GMT","end":"Fri, 13 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:EF:AE:14:9A:1C:B7:8C:AB:DF:01:C0:39:9E:AE:49:90:E5:84:94","sha256":"B7:E9:B0:B0:73:ED:29:A4:09:64:FA:77:EF:60:53:32:51:10:08:95:FD:7B:4A:69:60:51:6D:9F:AF:31:9D:5E"}}},"request":{"raw":"GET /images/Zo886XiD1XYr0RbkjdJiQYOPW4.png HTTP/1.1\r\nHost: framerusercontent.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pass-ligther.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: CloudFront\r\ncontent-type: image/avif\r\nage: 8432732\r\ntiming-allow-origin: *\r\ndate: Wed, 01 Oct 2025 09:54:24 GMT\r\ncross-origin-resource-policy: cross-origin\r\nx-amzn-trace-id: Root=1-68dcfa4d-142166790df1f06968026073;Sampled=1;Lineage=1:f456f256:0\r\nx-amzn-requestid: 82db5e87-9dce-45cf-a15e-498979ccce1d\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-xss-protection: 0\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: deny\r\ncontent-security-policy: default-src 'none'; script-src 'none'; img-src 'self'; media-src 'self'; report-uri https://framer.report-uri.com/r/t/csp/enforce;\r\ncache-control: public, max-age=31536000, stale-while-revalidate=31536000\r\nx-content-type-options: nosniff\r\netag: \"4d314264c45ce8d53b85a064c14a6f34\"\r\nvary: Accept\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 fd72662d19f1605cb71a8fd4814daf52.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cdn-cache-hit,cdn-pop;desc=\"OSL50-P3\",cdn-hit-layer;desc=\"EDGE\",cdn-rid;desc=\"K8nV8B0TBv6wbGUEK43bpOWUCvk24sJUiYCcXbLMWjyLiDZyaA9fIg==\",cdn-downstream-fbl;dur=4\r\nx-amz-cf-id: K8nV8B0TBv6wbGUEK43bpOWUCvk24sJUiYCcXbLMWjyLiDZyaA9fIg==\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":31592,"size_decoded":0,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"4d314264c45ce8d53b85a064c14a6f34","sha1":"c55f4b99c76122ab7dca223fe9e741bea847d585","sha256":"34b3de42b5b31f45a8f2ba93a120fb09fc4b6c4155bba907b58cb54307211bbb","sha512":"f92659e5225efc38466b96ddbc8d3db5dfad2f895186cd851de3cc412f05b3612847f7eff94c09ad13a69f142cc22c863ce4b9f2eb4bddda6d8b43e421f4ff3f","ssdeep":"768:RGMb/26uKpGE4dUpByHQ3DtDBEh2nBlzTSBy27bAJz1U2wXC0VPt/:RGMbbrp34dcrFOsBlW7nA42wS0VPt/","tlshash":"70e2f18ead3acf34c61a367049ea644973e4d993a45285f1f320ff08d8f51b0a8d1ad6","first_seen":"2025-11-20T11:15:14.63237Z","last_seen":"2026-03-28T01:16:36.050689Z","times_seen":20,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1.1.1.1/cdn-cgi/trace","fqdn":"1.1.1.1","domain":"1.1.1.1","tld":""},"ip":{"addr":"1.1.1.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://pass-ligther.xyz/","date":"2026-01-07T00:19:58.456Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cloudflare-dns.com","organization":"Cloudflare, Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 02 Jan 2025 00:00:00 GMT","end":"Wed, 21 Jan 2026 23:59:59 GMT"},"fingerprint":{"sha1":"3B:A7:E9:F8:06:EB:30:D2:F4:E3:F9:05:E5:3F:07:E9:AC:F0:8E:1E","sha256":"73:B8:ED:5B:EC:F1:BA:64:93:D2:E2:21:5A:42:DF:DC:78:77:E9:1E:31:1F:F5:E5:9F:B4:3D:09:48:71:E6:99"}}},"request":{"raw":"GET /cdn-cgi/trace HTTP/1.1\r\nHost: 1.1.1.1\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://pass-ligther.xyz/\r\nOrigin: https://pass-ligther.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 07 Jan 2026 00:19:58 GMT\r\ncontent-type: text/plain\r\naccess-control-allow-origin: *\r\nserver: cloudflare\r\ncf-ray: 9b9f49626e6156b1-OSL\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\ncache-control: no-cache\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":258,"size_decoded":0,"mime_type":"text/plain","magic":"ASCII text","md5":"6787fa605c7a5164c81b73eef2d64e64","sha1":"062b3c67d03e6188e5a2a22d5ed04d4eb4fb1c0a","sha256":"7c897df496d70f16388fbb4d260503558b2b506b284ff7359b779468ec4d31cc","sha512":"af87480ff9acaffddef13e8813ef3f729fd1941a8988f56a3c744f714181c9cb3877d1a9c2b7c6408f1c2e536b83d246795acb4400622e95a57e1f4c8199d8d1","ssdeep":"","tlshash":"a2d02bd7921f002c282c5445026b6241c7a14527c97b6920ede54504ae492eb14ddde0","first_seen":"2026-01-07T00:20:28.329604Z","last_seen":"2026-01-07T00:20:28.329604Z","times_seen":1,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":12,"dns":1,"connect":1,"send":0,"wait":3,"receive":0,"ssl":8},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pass-ligther.xyz/","fqdn":"pass-ligther.xyz","domain":"pass-ligther.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://pass-ligther.xyz/","date":"2026-01-07T00:19:58.464Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pass-ligther.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Dec 2025 05:12:49 GMT","end":"Mon, 30 Mar 2026 06:11:25 GMT"},"fingerprint":{"sha1":"24:32:CB:97:0E:0A:35:B2:35:E6:C4:6C:88:41:EA:AC:EE:18:47:16","sha256":"09:7D:C0:63:38:CE:86:D4:C4:AE:F4:7E:DF:39:C2:FB:A7:1B:14:F9:7F:A8:67:DE:5D:52:C0:FA:87:14:B2:DC"}}},"request":{"raw":"HEAD / HTTP/1.1\r\nHost: pass-ligther.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://pass-ligther.xyz/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"HEAD"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 07 Jan 2026 00:19:58 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Tue, 30 Dec 2025 05:43:56 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nage: 2\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xLGRJXW%2FXmoIW0IOBkgMNPIDYV%2F0JyOjhVKj378OdkqTtCq440h4sJIUxmNnT1djOwyFT3Fm2trfGkbvgco9s6UIHagczjeeQ%2F4Xg0Kb\"}]}\r\ncontent-encoding: br\r\ncf-ray: 9b9f4962688a56a5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-24T17:51:03.946765Z","times_seen":17508756,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":2,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"pass-ligther.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"framerusercontent.com/images/k22lnUP5Ao1xIheAoknaPGmdjXk.svg?width=14\u0026height=26","fqdn":"framerusercontent.com","domain":"framerusercontent.com","tld":"com"},"ip":{"addr":"52.84.50.29","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://pass-ligther.xyz/","date":"2026-01-07T00:19:55.866Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"framerusercontent.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Thu, 16 Oct 2025 00:00:00 GMT","end":"Fri, 13 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:EF:AE:14:9A:1C:B7:8C:AB:DF:01:C0:39:9E:AE:49:90:E5:84:94","sha256":"B7:E9:B0:B0:73:ED:29:A4:09:64:FA:77:EF:60:53:32:51:10:08:95:FD:7B:4A:69:60:51:6D:9F:AF:31:9D:5E"}}},"request":{"raw":"GET /images/k22lnUP5Ao1xIheAoknaPGmdjXk.svg?width=14\u0026height=26 HTTP/1.1\r\nHost: framerusercontent.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pass-ligther.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: CloudFront\r\ncontent-type: image/svg+xml\r\ndate: Wed, 01 Oct 2025 09:55:17 GMT\r\ncross-origin-resource-policy: cross-origin\r\nx-amzn-trace-id: Root=1-68dcfa85-2d31b3816d44ad6e5d6d1ebf;Parent=0938632ca3386f04;Sampled=0;Lineage=1:f456f256:0\r\nx-amzn-requestid: abf728ac-9f87-41a8-834a-812a71e4c923\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-xss-protection: 0\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: deny\r\ncontent-security-policy: default-src 'none'; script-src 'none'; img-src 'self'; media-src 'self'; report-uri https://framer.report-uri.com/r/t/csp/enforce;\r\ncache-control: public, max-age=31536000, stale-while-revalidate=31536000\r\nx-content-type-options: nosniff\r\netag: \"2004f556befdbc68ea6555b4c33b9e03\"\r\nvary: Accept\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 ca50152ab306323e16b02f717a5cb212.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-amz-cf-id: 0VCcDehq34D6ZhlvAOtruKN2GG4u7JhUEe3Hj8uYyU8WGSi3RBVz-w==\r\nage: 8432677\r\ntiming-allow-origin: *\r\nserver-timing: cdn-cache-hit,cdn-pop;desc=\"OSL50-P3\",cdn-rid;desc=\"0VCcDehq34D6ZhlvAOtruKN2GG4u7JhUEe3Hj8uYyU8WGSi3RBVz-w==\",cdn-hit-layer;desc=\"EDGE\",cdn-downstream-fbl;dur=3\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":497,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"2004f556befdbc68ea6555b4c33b9e03","sha1":"936da59d43f9028d71221780a249da3c699d8d79","sha256":"82053f8420224ea019b5b01dd0b810b813aba8eb31b77f55699c7e9a54fa7abe","sha512":"f042948875296bb486c2f77b5f955f4b7b37b64bd2332d7dfcabe80d7763ce2bbae7775fe67068debaa560cab8f39b6ca1a0c0e2ef5e18a3f33b36b8ba325156","ssdeep":"","tlshash":"80f0e2f2a1f4d20a0f9443986b7c72ca0032308e514e06ddb0c8336ca95e36a2a41721","first_seen":"2025-11-20T11:15:14.622252Z","last_seen":"2026-03-28T01:16:36.048607Z","times_seen":50,"resource_available":false,"data":null}},"time_used":58,"timings":{"blocked":24,"dns":21,"connect":1,"send":0,"wait":4,"receive":0,"ssl":6},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/geistmono/v4/or3nQ6H-1_WfwkMZI_qYFrcdmg.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://pass-ligther.xyz/","date":"2026-01-07T00:19:56.480Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:53:13 GMT","end":"Wed, 25 Feb 2026 15:53:12 GMT"},"fingerprint":{"sha1":"5A:E3:E3:B6:18:F9:10:0B:5B:11:FA:CB:BF:0C:9B:5C:0E:34:70:78","sha256":"FC:46:B0:C1:1E:B2:21:60:D9:7E:6A:ED:42:56:B2:CF:2A:E4:D2:F1:1C:63:63:98:2B:A3:0F:6C:4A:98:74:D6"}}},"request":{"raw":"GET /s/geistmono/v4/or3nQ6H-1_WfwkMZI_qYFrcdmg.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://pass-ligther.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pass-ligther.xyz/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 31368\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 02 Jan 2026 19:17:50 GMT\r\nexpires: Sat, 02 Jan 2027 19:17:50 GMT\r\ncache-control: public, max-age=31536000\r\nage: 363726\r\nlast-modified: Mon, 15 Sep 2025 17:01:43 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":31368,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 31368, version 1.0","md5":"bd0693c1a36d67b859220908f04f47bd","sha1":"0d05a98b4df75e88c0d9998d332a7c8b6cd95111","sha256":"e9fb088eeacced307860d82ceedb0ae9ad2ebfa07a7c0a7279c8c961dd9d5fd3","sha512":"2bf2c76a5b99a3b0f73d15120ba60a9c4c6868be77dc53003701d8d29a39d91d5098e7526c2e9640a6426677b57becc881f9fad81d34270257347c02d0bc6330","ssdeep":"768:ZMkC731Q6Oy5ZSvLLz+FjirLXI/bUg2jLIqy8O:7CHOy5CdmNcvy8O","tlshash":"3ce2e161b10bf445c8a44795477efff0af0d0c72296b3051d44ea895beee963b287427","first_seen":"2025-04-29T17:08:33.422864Z","last_seen":"2026-07-17T05:59:25.785673Z","times_seen":185,"resource_available":false,"data":null}},"time_used":269,"timings":{"blocked":119,"dns":1,"connect":7,"send":0,"wait":21,"receive":10,"ssl":108},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"d1h2wpc6xyxa4i.cloudfront.net/footerLogo.webm","fqdn":"d1h2wpc6xyxa4i.cloudfront.net","domain":"d1h2wpc6xyxa4i.cloudfront.net","tld":"cloudfront.net"},"ip":{"addr":"54.230.241.4","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://pass-ligther.xyz/","date":"2026-01-07T00:19:56.679Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cloudfront.net","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Mon, 05 May 2025 00:00:00 GMT","end":"Thu, 23 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"8F:00:F1:34:A7:1E:27:1C:CF:CD:A6:53:8B:C4:82:B0:68:BC:C8:72","sha256":"60:38:9D:24:9E:41:8F:23:AC:D9:14:5C:A3:47:7E:AF:07:DB:9F:2D:6A:8C:0D:08:E9:24:8A:8E:49:A9:4D:28"}}},"request":{"raw":"GET /footerLogo.webm HTTP/1.1\r\nHost: d1h2wpc6xyxa4i.cloudfront.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pass-ligther.xyz/\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 206 Partial Content\r\ncontent-type: video/webm\r\ncontent-length: 2154567\r\ndate: Tue, 06 Jan 2026 03:46:59 GMT\r\nlast-modified: Wed, 01 Oct 2025 14:21:17 GMT\r\netag: \"142c52fbfc7ec5546ea11b9a756fe9e4\"\r\nx-amz-server-side-encryption: AES256\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\ncontent-range: bytes 0-2154566/2154567\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 60929bddfcfe8b3a510a9502ad6d8742.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P1\r\nx-amz-cf-id: 9ex8sLMpnyVeBKjistsKTnxKXteYfvtW6juuvydj1cxrCsZPZymYYw==\r\nage: 73977\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":2154567,"size_decoded":0,"mime_type":"video/webm","magic":"WebM","md5":"368212d5f394f598c7358f1b373d1554","sha1":"e023623d10c39bd1623c02d0d0d8572f8c957531","sha256":"08720b0a7249f932e9a8bdbafc9f9b3f6b51afb21fcba40b1a7e0c7854ac1289","sha512":"bca68761307c09e7320faf1f0405273db51bf084fcfdd91937783ddc14222f8a09ead1dbc1650b80c5e0ceed37678c63682f0ef87b0b59bd5fe80473a4d02ac0","ssdeep":"24576:WLd71zYrjJntH0+OJABtDW42/TdegBpsfmN9xEKSq/RFhG:WLdZzYrjfHPjXDJ2/CfmNXdpG","tlshash":"b72523909204a4dadb868fbeed4ac38a72e603e19dfb30146775c5b5bc2356ed4160f3","first_seen":"2025-12-28T20:42:25.258659Z","last_seen":"2026-03-28T01:16:36.056298Z","times_seen":20,"resource_available":false,"data":null}},"time_used":421,"timings":{"blocked":55,"dns":2,"connect":6,"send":0,"wait":40,"receive":266,"ssl":17},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/ethers@5.7.2/dist/ethers.umd.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.1.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://pass-ligther.xyz/","date":"2026-01-07T00:19:57.144Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 02 Jun 2025 15:43:52 GMT","end":"Sat, 04 Jul 2026 15:43:51 GMT"},"fingerprint":{"sha1":"21:17:81:78:41:C6:8F:86:D6:CF:8D:98:CC:74:A8:F1:03:F8:C9:D4","sha256":"D0:E6:8D:08:11:05:7E:0C:2A:0D:C7:E0:ED:AE:9E:18:C8:74:32:12:3D:56:43:98:62:CD:A2:08:6F:64:5B:B0"}}},"request":{"raw":"GET /npm/ethers@5.7.2/dist/ethers.umd.min.js HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pass-ligther.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: application/javascript; charset=utf-8\r\nx-jsd-version: 5.7.2\r\nx-jsd-version-type: version\r\netag: W/\"b996b-tlFUVYf2JXNF3D3p3apESxDe3z4\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\ndate: Wed, 07 Jan 2026 00:19:57 GMT\r\nage: 1806479\r\nx-served-by: cache-fra-etou8220026-FRA, cache-hel1410031-HEL\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 168432\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":760171,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"71f8c498e792c6179d4e2840228f777a","sha1":"b651545587f6257345dc3de9ddaa444b10dedf3e","sha256":"a66293a6a2bb4dee061a68612be0be3c5c0ab7e4068ab8d98a4a357baf664c73","sha512":"14371563e83bbdce425c035bad34a0d4ae6a2f2ae20ac183602134d8b8b5b5711874d40fbcb3c7344fab4f63237a2f0dedf65b7b458b870dbb8f64ab191a5d32","ssdeep":"12288:TfamYTKkkAJs8P+H8Xb2F/nNuwEYtnob6qQr:TfjkhPaNnN9EYtwo","tlshash":"35f43b80b3b1b0b583c729a4143f6046f63af46a505840a8f659faf279f9d4c957bb3c","first_seen":"2023-03-13T00:48:53Z","last_seen":"2026-07-23T05:25:55.400593Z","times_seen":3707,"resource_available":true,"data":null}},"time_used":224,"timings":{"blocked":137,"dns":5,"connect":13,"send":0,"wait":13,"receive":36,"ssl":18},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"framerusercontent.com/assets/GrgcKwrN6d3Uz8EwcLHZxwEfC4.woff2","fqdn":"framerusercontent.com","domain":"framerusercontent.com","tld":"com"},"ip":{"addr":"52.84.50.29","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://pass-ligther.xyz/","date":"2026-01-07T00:19:56.462Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"framerusercontent.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Thu, 16 Oct 2025 00:00:00 GMT","end":"Fri, 13 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:EF:AE:14:9A:1C:B7:8C:AB:DF:01:C0:39:9E:AE:49:90:E5:84:94","sha256":"B7:E9:B0:B0:73:ED:29:A4:09:64:FA:77:EF:60:53:32:51:10:08:95:FD:7B:4A:69:60:51:6D:9F:AF:31:9D:5E"}}},"request":{"raw":"GET /assets/GrgcKwrN6d3Uz8EwcLHZxwEfC4.woff2 HTTP/1.1\r\nHost: framerusercontent.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://pass-ligther.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pass-ligther.xyz/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: CloudFront\r\ncontent-type: font/woff2\r\ncontent-length: 27380\r\ntiming-allow-origin: *\r\ndate: Thu, 04 Sep 2025 10:53:00 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, HEAD\r\naccess-control-max-age: 3000\r\nlast-modified: Tue, 12 Aug 2025 12:29:40 GMT\r\netag: \"509c9e2f344ef936dcfd0c2415c6ddb7\"\r\naccept-ranges: bytes\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nx-frame-options: deny\r\nx-xss-protection: 0\r\ncross-origin-resource-policy: cross-origin\r\ncache-control: public, max-age=31536000, immutable\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 fd72662d19f1605cb71a8fd4814daf52.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cdn-cache-hit,cdn-pop;desc=\"OSL50-P3\",cdn-hit-layer;desc=\"EDGE\",cdn-rid;desc=\"y0VZ3x06a2foqZXTRYV3LemVuGSEVn1D0GPAYVpKGzGJM5qwciEc1Q==\",cdn-downstream-fbl;dur=2\r\nage: 10762017\r\nx-amz-cf-id: y0VZ3x06a2foqZXTRYV3LemVuGSEVn1D0GPAYVpKGzGJM5qwciEc1Q==\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":27380,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 27380, version 4.0","md5":"e092f17f85b5a6e5a73296c5819acee5","sha1":"1ab81cfcac2b37a777533f04c1c2c7671c047c2e","sha256":"362b168da82d69bc67d2a358fa20c59151cb4ceac8a5506be6baef5e6827fa42","sha512":"37756285b8dc6d24f04f40b3733ce2e3414f1242b0cf4715ad1a1082901d81caf10582dbcd2060ac8886902aa33d4fc2b1bd717215802f933aea929d181cc5c9","ssdeep":"768:uVmFXapd3t+i2J0dlFlL9baVrL0c8yMErCOtRPCM:uGXabqJsl5urL0xErT9CM","tlshash":"e0c2f1e694653af9ed0d707b065af62b539068bc436e807d9cf960b077a3bd1020f496","first_seen":"2025-08-12T17:14:20.779189Z","last_seen":"2026-07-24T17:00:40.987889Z","times_seen":3696,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/geistmono/v4/or3nQ6H-1_WfwkMZI_qYFrcdmg.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://pass-ligther.xyz/","date":"2026-01-07T00:19:56.497Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:53:13 GMT","end":"Wed, 25 Feb 2026 15:53:12 GMT"},"fingerprint":{"sha1":"5A:E3:E3:B6:18:F9:10:0B:5B:11:FA:CB:BF:0C:9B:5C:0E:34:70:78","sha256":"FC:46:B0:C1:1E:B2:21:60:D9:7E:6A:ED:42:56:B2:CF:2A:E4:D2:F1:1C:63:63:98:2B:A3:0F:6C:4A:98:74:D6"}}},"request":{"raw":"GET /s/geistmono/v4/or3nQ6H-1_WfwkMZI_qYFrcdmg.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://pass-ligther.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pass-ligther.xyz/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 31368\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 02 Jan 2026 19:17:50 GMT\r\nexpires: Sat, 02 Jan 2027 19:17:50 GMT\r\ncache-control: public, max-age=31536000\r\nage: 363726\r\nlast-modified: Mon, 15 Sep 2025 17:01:43 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":31368,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 31368, version 1.0","md5":"bd0693c1a36d67b859220908f04f47bd","sha1":"0d05a98b4df75e88c0d9998d332a7c8b6cd95111","sha256":"e9fb088eeacced307860d82ceedb0ae9ad2ebfa07a7c0a7279c8c961dd9d5fd3","sha512":"2bf2c76a5b99a3b0f73d15120ba60a9c4c6868be77dc53003701d8d29a39d91d5098e7526c2e9640a6426677b57becc881f9fad81d34270257347c02d0bc6330","ssdeep":"768:ZMkC731Q6Oy5ZSvLLz+FjirLXI/bUg2jLIqy8O:7CHOy5CdmNcvy8O","tlshash":"3ce2e161b10bf445c8a44795477efff0af0d0c72296b3051d44ea895beee963b287427","first_seen":"2025-04-29T17:08:33.422864Z","last_seen":"2026-07-17T05:59:25.785673Z","times_seen":185,"resource_available":false,"data":null}},"time_used":161,"timings":{"blocked":61,"dns":1,"connect":7,"send":0,"wait":29,"receive":10,"ssl":50},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pass-ligther.xyz/modals.js","fqdn":"pass-ligther.xyz","domain":"pass-ligther.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://pass-ligther.xyz/","date":"2026-01-07T00:19:57.147Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pass-ligther.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Dec 2025 05:12:49 GMT","end":"Mon, 30 Mar 2026 06:11:25 GMT"},"fingerprint":{"sha1":"24:32:CB:97:0E:0A:35:B2:35:E6:C4:6C:88:41:EA:AC:EE:18:47:16","sha256":"09:7D:C0:63:38:CE:86:D4:C4:AE:F4:7E:DF:39:C2:FB:A7:1B:14:F9:7F:A8:67:DE:5D:52:C0:FA:87:14:B2:DC"}}},"request":{"raw":"GET /modals.js HTTP/1.1\r\nHost: pass-ligther.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pass-ligther.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 07 Jan 2026 00:19:57 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Tue, 30 Dec 2025 05:43:55 GMT\r\netag: W/\"6953669b-ce61\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=l9wjT7QpCjexoUjt5%2Fpt40PqL6BrSBx72nAlKLEK%2Fnx6%2F0P%2Fw0teqW1Bu%2BVjyTbTE6wClJAaPrlCq%2F5MlIu173U5lE7Kb%2BzNKvx2naCl\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b9f495acd1f56a5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":52833,"size_decoded":0,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text, with very long lines (52831), with no line terminators","md5":"ecbc5043a1e25f2bd5bbd6e3c3be49f0","sha1":"d66eb695679871221c52958d94029c6358b7613d","sha256":"6d0c2c8d032982e9a86a1bed14f709911058b6b693abb5d46335a0106c12c411","sha512":"38b9aedf74859ade1e5445634b338f560c4d0520ab126de202ad98942bc0f34e740b93c7123a3bc53dcdded31944c174ad06bf1ca006e137cb4e06a949e86088","ssdeep":"768:ywjvL/eQ0ae2vBKRDpoKvTQv4n59+Y44U7kFlaoGHv5:ywz2n59J4inM5","tlshash":"943311071cbe31361daf0fa3b7cc1a1b4e2eb351e612aaee71bd1446438bd74c5a5618","first_seen":"2025-07-20T10:23:41.460008Z","last_seen":"2026-07-10T23:25:47.367285Z","times_seen":743,"resource_available":true,"data":null}},"time_used":373,"timings":{"blocked":99,"dns":0,"connect":0,"send":0,"wait":274,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"pass-ligther.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pass-ligther.xyz/","fqdn":"pass-ligther.xyz","domain":"pass-ligther.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-01-07T00:19:55.398Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pass-ligther.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Dec 2025 05:12:49 GMT","end":"Mon, 30 Mar 2026 06:11:25 GMT"},"fingerprint":{"sha1":"24:32:CB:97:0E:0A:35:B2:35:E6:C4:6C:88:41:EA:AC:EE:18:47:16","sha256":"09:7D:C0:63:38:CE:86:D4:C4:AE:F4:7E:DF:39:C2:FB:A7:1B:14:F9:7F:A8:67:DE:5D:52:C0:FA:87:14:B2:DC"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: pass-ligther.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 07 Jan 2026 00:19:55 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Tue, 30 Dec 2025 05:43:56 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vrBxzlBJVyZ73pS8uwrIjoikW5t4VUmpSqYnCQ%2BEt25fPMMCmHWyG1cAnwno2ANF435lSHT5ns7CCY3nGDhWt5fe3vY5OSEmP6Kt%2F8sB6m8%3D\"}]}\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncf-ray: 9b9f494f8dc72efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Framer Sites","description":"Framer is a no-code web design platform for designing and publishing responsive websites.","website":"https://www.framer.com","common_platform_enumeration":"","icon":"Framer Sites.svg","categories":["CMS","Page builders"]},{"name":"React","description":"React is an open-source JavaScript library for building user interfaces or UI components.","website":"https://reactjs.org","common_platform_enumeration":"cpe:2.3:a:facebook:react:*:*:*:*:*:*:*:*","icon":"React.svg","categories":["JavaScript frameworks"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":772521,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (43848), with CRLF line terminators","md5":"b3569c2ab9dc68c0b0521c74731e5a45","sha1":"01b5a458ed59d57a039088f5a307657ec6198e41","sha256":"6da1bc066fa3ec390b5b8540af32ffa8b816fc5f7fb0c52411a398c2299c60c8","sha512":"d92862fb96dbe5aa5faacd3571782b4e55c3a1118dc1e8566cb2e6681b1cfaefc6acce2be082b4a136e440ab6ac4afdbd2caf0e4389a334492d5454b6d883d64","ssdeep":"1536:DieeZcRyHkXExVAMHWnY7gYgavCHMp++CYqF14EfWUvLZVYkyVaR71mpirN3/Cbm:2952/SmIDhnk1OGi6MJk","tlshash":"b8f4bb36a2c2133e14cb41d9f190da8d33be9b0adb23454ab7b63075b78cee599645cc","first_seen":"2026-01-07T00:20:28.33626Z","last_seen":"2026-01-07T00:20:28.33626Z","times_seen":1,"resource_available":false,"data":null}},"time_used":370,"timings":{"blocked":55,"dns":37,"connect":1,"send":0,"wait":260,"receive":0,"ssl":15},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"pass-ligther.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pass-ligther.xyz/assets/desktop.css","fqdn":"pass-ligther.xyz","domain":"pass-ligther.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://pass-ligther.xyz/","date":"2026-01-07T00:19:55.863Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pass-ligther.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Dec 2025 05:12:49 GMT","end":"Mon, 30 Mar 2026 06:11:25 GMT"},"fingerprint":{"sha1":"24:32:CB:97:0E:0A:35:B2:35:E6:C4:6C:88:41:EA:AC:EE:18:47:16","sha256":"09:7D:C0:63:38:CE:86:D4:C4:AE:F4:7E:DF:39:C2:FB:A7:1B:14:F9:7F:A8:67:DE:5D:52:C0:FA:87:14:B2:DC"}}},"request":{"raw":"GET /assets/desktop.css HTTP/1.1\r\nHost: pass-ligther.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pass-ligther.xyz/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 07 Jan 2026 00:19:56 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Tue, 30 Dec 2025 05:43:55 GMT\r\netag: W/\"6953669b-4ec62\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KSSvTg4p4WzlkZwgDAe9z60UJ0UNj%2FqMUDloBwHRU5iDr3%2FayW5j6%2FmBoz%2Fg4LJiIIaNu5UeSUktAxFRY%2FBKb9YJ1FO4rVDGOFJ%2FTx5k\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b9f4952192656a5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":322658,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (55506), with CRLF line terminators","md5":"55a18afc87ad80b083f1c5cc1531d1c1","sha1":"8aea4ffd6c07224a5374c9a0665cba1b4ce8664e","sha256":"65ae6e4d10ad6f3c1c9b35776c5ea26943f526dfd9e37093e3a0737010d8162a","sha512":"5ed0b597cd26ba1a60e49c796bc3145fd84e57737d0507d9f363bffc5a5b12a4f80126c9303997f5fdde3e3b2f0ec584bc2706ff2acb5f8f0905e74d3fcd795c","ssdeep":"1536:0zVJVMaj5eHCe+FVHeckVJV4aL9VFaTVhVk9VCwR5wnm5n5Z5j5VoX0JDI1KQHTV:exq5R5n5Z5j5Vo4VdatzH4dm","tlshash":"416452238b10e0696deea53ff649550c341c6013ff3281ad6929f56fa0c6ae23575bbc","first_seen":"2025-12-28T20:42:25.259484Z","last_seen":"2026-03-28T01:16:36.051225Z","times_seen":12,"resource_available":false,"data":null}},"time_used":394,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":326,"receive":68,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"pass-ligther.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"framerusercontent.com/assets/bHYNJqzTyl2lqvmMiRRS6Y16Es.woff2","fqdn":"framerusercontent.com","domain":"framerusercontent.com","tld":"com"},"ip":{"addr":"52.84.50.29","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://pass-ligther.xyz/","date":"2026-01-07T00:19:56.460Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"framerusercontent.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Thu, 16 Oct 2025 00:00:00 GMT","end":"Fri, 13 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:EF:AE:14:9A:1C:B7:8C:AB:DF:01:C0:39:9E:AE:49:90:E5:84:94","sha256":"B7:E9:B0:B0:73:ED:29:A4:09:64:FA:77:EF:60:53:32:51:10:08:95:FD:7B:4A:69:60:51:6D:9F:AF:31:9D:5E"}}},"request":{"raw":"GET /assets/bHYNJqzTyl2lqvmMiRRS6Y16Es.woff2 HTTP/1.1\r\nHost: framerusercontent.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://pass-ligther.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pass-ligther.xyz/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: CloudFront\r\ncontent-type: font/woff2\r\ncontent-length: 26588\r\ntiming-allow-origin: *\r\ndate: Mon, 13 Oct 2025 11:47:25 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, HEAD\r\naccess-control-max-age: 3000\r\nlast-modified: Tue, 12 Aug 2025 12:47:52 GMT\r\netag: \"ed808fc28d4461bab9b6a57a6ff28b85\"\r\naccept-ranges: bytes\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nx-frame-options: deny\r\nx-xss-protection: 0\r\ncross-origin-resource-policy: cross-origin\r\ncache-control: public, max-age=31536000, immutable\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 fd72662d19f1605cb71a8fd4814daf52.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cdn-cache-hit,cdn-pop;desc=\"OSL50-P3\",cdn-hit-layer;desc=\"EDGE\",cdn-rid;desc=\"cx0c0FTTsNJEgMeWvvrcSha9M0nXApt0ALmhV6Ew0t2Cyu92I1pf_A==\",cdn-downstream-fbl;dur=2\r\nage: 7389151\r\nx-amz-cf-id: cx0c0FTTsNJEgMeWvvrcSha9M0nXApt0ALmhV6Ew0t2Cyu92I1pf_A==\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":26588,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 26588, version 4.0","md5":"5ec39af341bf1da2b96d84178afc3cf4","sha1":"6c760d26acd3ca5da5aaffe63224514ba635e84b","sha256":"b68a1d9dd28ee2271e335f0641317ae656016451ccac2a6eb30abf74009cef4c","sha512":"874787d3ad800113541224ab5a9f2ad645ccb2644d4e9c543c2b925c28f7efd80d8e80395e18ab6b24add206e6e3c550e2525acda689f405103935bc5a7fb4c4","ssdeep":"768:+vdRIjKRd/BS5njhBD/mkc76qWHEWSekWrgCOejUn8ONbL:jKROVZOkcGHmekCNQ8ON","tlshash":"4ec2f145c3ca9407db163530c1dfe231bf32a7c8cba89ccb76996a7d260552db2443b8","first_seen":"2025-09-04T17:15:58.142383Z","last_seen":"2026-07-21T23:16:06.087865Z","times_seen":224,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":5,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"d1h2wpc6xyxa4i.cloudfront.net/lighter-image.avif","fqdn":"d1h2wpc6xyxa4i.cloudfront.net","domain":"d1h2wpc6xyxa4i.cloudfront.net","tld":"cloudfront.net"},"ip":{"addr":"54.230.241.4","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://pass-ligther.xyz/","date":"2026-01-07T00:19:56.673Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cloudfront.net","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Mon, 05 May 2025 00:00:00 GMT","end":"Thu, 23 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"8F:00:F1:34:A7:1E:27:1C:CF:CD:A6:53:8B:C4:82:B0:68:BC:C8:72","sha256":"60:38:9D:24:9E:41:8F:23:AC:D9:14:5C:A3:47:7E:AF:07:DB:9F:2D:6A:8C:0D:08:E9:24:8A:8E:49:A9:4D:28"}}},"request":{"raw":"GET /lighter-image.avif HTTP/1.1\r\nHost: d1h2wpc6xyxa4i.cloudfront.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pass-ligther.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/avif\r\ncontent-length: 134569\r\ndate: Tue, 06 Jan 2026 11:43:51 GMT\r\nlast-modified: Thu, 02 Oct 2025 11:54:19 GMT\r\netag: \"b44f2e4ec5f212f70320fc918a7e9220\"\r\nx-amz-server-side-encryption: AES256\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 60929bddfcfe8b3a510a9502ad6d8742.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P1\r\nx-amz-cf-id: LOZqgNS9rvUE7ukVjtYNUSFBTIqngjfUoU0sldH1n2E6ArRAwupvvQ==\r\nage: 45366\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":134569,"size_decoded":0,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"b44f2e4ec5f212f70320fc918a7e9220","sha1":"f53885a52861e781bb593c3a5b454aa850a87de7","sha256":"4f600e3a6a0b69d403bb0c60e923154e2eb744a58bd74204d1c81eb5c8e797c0","sha512":"a4a74740bf80f07336a19e5a20df890a05f2fc2a3fd9eca7fd3d509e7687791a9db62126040b1bdfefb901e5d12ff5f58d37212220451d8c968a1be6f2f89fa0","ssdeep":"3072:w7n5uYqCO71tgS287RibulkkstsoKGQkRPc4LZeyxpLE9sG:w7n5uYqCOTd7BkvQidZeyxpLE9t","tlshash":"8dd313cc3a2a7ca1c62c26fa191f9ff5f67ea858b105ffc5161e50abe64d05220de113","first_seen":"2025-11-20T11:15:14.642339Z","last_seen":"2026-03-28T01:16:36.053035Z","times_seen":48,"resource_available":false,"data":null}},"time_used":115,"timings":{"blocked":20,"dns":62,"connect":1,"send":0,"wait":3,"receive":4,"ssl":22},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"d1h2wpc6xyxa4i.cloudfront.net/hero.webm","fqdn":"d1h2wpc6xyxa4i.cloudfront.net","domain":"d1h2wpc6xyxa4i.cloudfront.net","tld":"cloudfront.net"},"ip":{"addr":"54.230.241.4","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://pass-ligther.xyz/","date":"2026-01-07T00:19:56.677Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cloudfront.net","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Mon, 05 May 2025 00:00:00 GMT","end":"Thu, 23 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"8F:00:F1:34:A7:1E:27:1C:CF:CD:A6:53:8B:C4:82:B0:68:BC:C8:72","sha256":"60:38:9D:24:9E:41:8F:23:AC:D9:14:5C:A3:47:7E:AF:07:DB:9F:2D:6A:8C:0D:08:E9:24:8A:8E:49:A9:4D:28"}}},"request":{"raw":"GET /hero.webm HTTP/1.1\r\nHost: d1h2wpc6xyxa4i.cloudfront.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pass-ligther.xyz/\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 206 Partial Content\r\ncontent-type: video/webm\r\ncontent-length: 3829654\r\ndate: Tue, 06 Jan 2026 04:33:27 GMT\r\nlast-modified: Wed, 01 Oct 2025 14:21:45 GMT\r\netag: \"da92ebad5794f4c1f44a5aaad1e3cce8\"\r\nx-amz-server-side-encryption: AES256\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\ncontent-range: bytes 0-3829653/3829654\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 60929bddfcfe8b3a510a9502ad6d8742.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P1\r\nx-amz-cf-id: 02DDUvwHcOQmB3ikTHd5q08PX0747u9szgTTU46CtTZGMASbDbgdFg==\r\nage: 71190\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":3829654,"size_decoded":0,"mime_type":"video/webm","magic":"WebM","md5":"ee463ee327a8fa1d709d139dba80303c","sha1":"bf4f98e2e766d8a4704d8159e8dbc2d3c0c2ef9f","sha256":"b7d093bf8b553e6d345db3ce80c1a3bb67236d5c3acd1809056825c2a35314e0","sha512":"9b1bf57e12688a18ba76b56a5721494474be6a026f03ed541432b3f08b1f0b03fec3e96b9299cded1cf5a00679ff2a954dbc839d395f429e99c14f7b6946f394","ssdeep":"24576:W8o9hpRYaYRd95Nhkc9E4OfTgQ7tCVw1fZyKyE7ftfpbmmOLwYBB:WjhpRxW95NhXOfTRtQ2ymXSLDB","tlshash":"c52523d6f829b5c7d264cd7dce231c04565a868a38a07e58f8db9b52c4be206dfce407","first_seen":"2025-11-27T21:37:46.556819Z","last_seen":"2026-03-28T01:16:36.050203Z","times_seen":42,"resource_available":false,"data":null}},"time_used":517,"timings":{"blocked":23,"dns":1,"connect":0,"send":0,"wait":4,"receive":463,"ssl":19},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"framerusercontent.com/images/uTdLWjhUvfSiBaN37kYNLsUu4.png","fqdn":"framerusercontent.com","domain":"framerusercontent.com","tld":"com"},"ip":{"addr":"52.84.50.29","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://pass-ligther.xyz/","date":"2026-01-07T00:19:56.682Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"framerusercontent.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Thu, 16 Oct 2025 00:00:00 GMT","end":"Fri, 13 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:EF:AE:14:9A:1C:B7:8C:AB:DF:01:C0:39:9E:AE:49:90:E5:84:94","sha256":"B7:E9:B0:B0:73:ED:29:A4:09:64:FA:77:EF:60:53:32:51:10:08:95:FD:7B:4A:69:60:51:6D:9F:AF:31:9D:5E"}}},"request":{"raw":"GET /images/uTdLWjhUvfSiBaN37kYNLsUu4.png HTTP/1.1\r\nHost: framerusercontent.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pass-ligther.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: CloudFront\r\ncontent-type: image/avif\r\nage: 8420860\r\ntiming-allow-origin: *\r\ndate: Wed, 01 Oct 2025 13:12:16 GMT\r\ncross-origin-resource-policy: cross-origin\r\nx-amzn-trace-id: Root=1-68dd28b0-62e0a1a1342a986e652a28d7;Sampled=1;Lineage=1:f456f256:0\r\nx-amzn-requestid: 21115cf1-c19c-4e70-90dc-a595e0a004f1\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-xss-protection: 0\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: deny\r\ncontent-security-policy: default-src 'none'; script-src 'none'; img-src 'self'; media-src 'self'; report-uri https://framer.report-uri.com/r/t/csp/enforce;\r\ncache-control: public, max-age=31536000, stale-while-revalidate=31536000\r\nx-content-type-options: nosniff\r\netag: \"c182ac1f5cdf0192cb7bb079c7356f8a\"\r\nvary: Accept\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 fd72662d19f1605cb71a8fd4814daf52.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cdn-cache-hit,cdn-pop;desc=\"OSL50-P3\",cdn-hit-layer;desc=\"EDGE\",cdn-rid;desc=\"RsNzgnNP12cJPWqM8_uNaJe-LS7WQH7idgoaLu9ReBd3YlHeNwB6Rg==\",cdn-downstream-fbl;dur=3\r\nx-amz-cf-id: RsNzgnNP12cJPWqM8_uNaJe-LS7WQH7idgoaLu9ReBd3YlHeNwB6Rg==\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":1020,"size_decoded":0,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"c182ac1f5cdf0192cb7bb079c7356f8a","sha1":"88706efb94753d716db16ccae4980c95737dd2a9","sha256":"6c9699573ae3fab005156c397a4cb972448af28ba81140d77df6f9c237eeb212","sha512":"87e4ff082c2bc88d87f9034b9e0338797f7a7471cd850a97c237bbc54812230615be145de379546778091ce29fb2d3531e398780d981cb858401d7913754ece1","ssdeep":"","tlshash":"c911b7a427181cc3e44e023205576b3b3b326970460b33b3eec3f128ccad63ad628c54","first_seen":"2025-11-20T11:15:14.633381Z","last_seen":"2026-03-28T01:16:36.053747Z","times_seen":37,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pass-ligther.xyz/fpbundle.js","fqdn":"pass-ligther.xyz","domain":"pass-ligther.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://pass-ligther.xyz/","date":"2026-01-07T00:19:57.148Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pass-ligther.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Dec 2025 05:12:49 GMT","end":"Mon, 30 Mar 2026 06:11:25 GMT"},"fingerprint":{"sha1":"24:32:CB:97:0E:0A:35:B2:35:E6:C4:6C:88:41:EA:AC:EE:18:47:16","sha256":"09:7D:C0:63:38:CE:86:D4:C4:AE:F4:7E:DF:39:C2:FB:A7:1B:14:F9:7F:A8:67:DE:5D:52:C0:FA:87:14:B2:DC"}}},"request":{"raw":"GET /fpbundle.js HTTP/1.1\r\nHost: pass-ligther.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pass-ligther.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 07 Jan 2026 00:19:57 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Tue, 30 Dec 2025 05:43:56 GMT\r\netag: W/\"6953669c-b1bf\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pkToBn8A86TumLG3xrGzo9npoF6ParmAlEYtdN6OD%2FuwbFBbV%2BxVB%2Bmm3cIs2GvCF%2FANlLoBMNE3g7r7uyL3bIIkM8Udb8i%2B4LsJkycg\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b9f495acd2056a5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":45503,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (44961), with CRLF line terminators","md5":"1c59909ad8d56060bf239a34a275da3d","sha1":"1164057a0631f6b5dd80387a1c3a9e332fb00bb4","sha256":"126a8b465ef8734b4d7a289781e0535cd283ccf24394e08c44f23ae300be3a5a","sha512":"39d33737c908bf2a1430f157990f931a0644471a0cf20de61721596e1330fe5867108db7e47d1869576710a72f886ef42e7492a2c0ed05fde2644f6d338e3eac","ssdeep":"768:v8UXI0Nc5VArhXDh1bnUsAq1++umYUT15+2gT/RcKrNcFV3BT/Vo:vN/NcnArV7f5+9cxT6","tlshash":"a413c7a873c67139a217b0719dcf4845b67d6d182289884dca2ec4a4b879d3dc77ecec","first_seen":"2025-07-11T11:18:53.943693Z","last_seen":"2026-07-10T23:25:47.376334Z","times_seen":741,"resource_available":true,"data":null}},"time_used":394,"timings":{"blocked":98,"dns":0,"connect":0,"send":0,"wait":294,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"pass-ligther.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pass-ligther.xyz/bundle.js","fqdn":"pass-ligther.xyz","domain":"pass-ligther.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://pass-ligther.xyz/","date":"2026-01-07T00:19:57.145Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pass-ligther.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Dec 2025 05:12:49 GMT","end":"Mon, 30 Mar 2026 06:11:25 GMT"},"fingerprint":{"sha1":"24:32:CB:97:0E:0A:35:B2:35:E6:C4:6C:88:41:EA:AC:EE:18:47:16","sha256":"09:7D:C0:63:38:CE:86:D4:C4:AE:F4:7E:DF:39:C2:FB:A7:1B:14:F9:7F:A8:67:DE:5D:52:C0:FA:87:14:B2:DC"}}},"request":{"raw":"GET /bundle.js HTTP/1.1\r\nHost: pass-ligther.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pass-ligther.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 07 Jan 2026 00:19:57 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Tue, 30 Dec 2025 05:43:56 GMT\r\netag: W/\"6953669c-264e24\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Ys01t0hP5LQeo1QTnJ50Yw68coMExb3DjJiUGhbYgwbuCt7OIoaDUswA1q%2FMNTKGHCducx1xa%2FUfJMD%2FyQ36vnoAU%2FuKBIht4%2BSFD%2F9y\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b9f495acd1e56a5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2510372,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (11784), with CRLF line terminators","md5":"a579f43be016af96b1d14b0be3ab2239","sha1":"eb0403b0e34d6943a3242206f9845843fab6d225","sha256":"9b2c009690d8d43f3a351bc36362316b6474ce1fc03c24fdd1cf2ce2da5b2509","sha512":"64befe664a2fbf04844b475a8b918dd5feed48a9c77110963a9f589be8e19e04d3a98233a44ae343b1efe20fafe18770dc18dc10e39402e822bf37c63d081619","ssdeep":"24576:LREHMe8DbdUW4HlHZg+dY3yBgS6cUKZd3NlNUQ4G1SE0Byz5o:LRIMXDbdUW4HlHZg+dY3yBgS6cUKZJNW","tlshash":"60254c9072a6f07603a755d864761101f2385854700d90ecfafc9debbfa988a867ff39","first_seen":"2025-07-26T22:48:52.272458Z","last_seen":"2026-07-10T23:25:47.366161Z","times_seen":671,"resource_available":false,"data":null}},"time_used":663,"timings":{"blocked":100,"dns":0,"connect":0,"send":0,"wait":307,"receive":256,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"pass-ligther.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pass-ligther.xyz/main.js","fqdn":"pass-ligther.xyz","domain":"pass-ligther.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://pass-ligther.xyz/","date":"2026-01-07T00:19:55.865Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pass-ligther.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Dec 2025 05:12:49 GMT","end":"Mon, 30 Mar 2026 06:11:25 GMT"},"fingerprint":{"sha1":"24:32:CB:97:0E:0A:35:B2:35:E6:C4:6C:88:41:EA:AC:EE:18:47:16","sha256":"09:7D:C0:63:38:CE:86:D4:C4:AE:F4:7E:DF:39:C2:FB:A7:1B:14:F9:7F:A8:67:DE:5D:52:C0:FA:87:14:B2:DC"}}},"request":{"raw":"GET /main.js HTTP/1.1\r\nHost: pass-ligther.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pass-ligther.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 07 Jan 2026 00:19:56 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Tue, 30 Dec 2025 05:43:56 GMT\r\netag: W/\"6953669c-37578\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=51nXWTULfxOYvk1nSRpc7xvIjV%2FId7PqmTUxLxML8CcqGmYKx4LDv55wGmUXLzhZ9qcKQGaSsaKxzXp6jdZXm5PMZiUc5LFYUkf%2B7XnQ\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b9f4952192956a5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":226680,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"7dceda5d7c38bc6cbeecdc564b456689","sha1":"7567cc2b386f5f27df4cd4c9f682dafcf56724a8","sha256":"ca617f7f11ea02202d7bf8e5da7a22c20ae0a741042be03bb0631de6de099ac8","sha512":"d7f034424d2a8d8c41361d68a3a68f10d39db6fe81db3a11281f9ef885f09ace8e1b1972add47ba618318c84b96695ecb469a99b86194914f68cd30482a98ad2","ssdeep":"3072:aazA8tM54lEt3n2k51748ztQQDAEut7LHAS6AsLytIVmMsOqGwrxzFa4iyuG6CQ7:aK5d6XlntVUrk","tlshash":"d224f35426c5e4edb7604dec172caca46475f732cecf2ca86790a187f2f9b2121e52d8","first_seen":"2026-01-07T00:20:28.342936Z","last_seen":"2026-01-07T00:20:28.342936Z","times_seen":1,"resource_available":true,"data":null}},"time_used":347,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":263,"receive":84,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"pass-ligther.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"framerusercontent.com/images/zkZcqLYKrbf3IcoLGmkQF4odXvY.svg?width=126\u0026height=126","fqdn":"framerusercontent.com","domain":"framerusercontent.com","tld":"com"},"ip":{"addr":"52.84.50.29","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://pass-ligther.xyz/","date":"2026-01-07T00:19:56.410Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"framerusercontent.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Thu, 16 Oct 2025 00:00:00 GMT","end":"Fri, 13 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:EF:AE:14:9A:1C:B7:8C:AB:DF:01:C0:39:9E:AE:49:90:E5:84:94","sha256":"B7:E9:B0:B0:73:ED:29:A4:09:64:FA:77:EF:60:53:32:51:10:08:95:FD:7B:4A:69:60:51:6D:9F:AF:31:9D:5E"}}},"request":{"raw":"GET /images/zkZcqLYKrbf3IcoLGmkQF4odXvY.svg?width=126\u0026height=126 HTTP/1.1\r\nHost: framerusercontent.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pass-ligther.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: CloudFront\r\ncontent-type: image/svg+xml\r\nage: 11891135\r\ntiming-allow-origin: *\r\ndate: Fri, 22 Aug 2025 09:14:21 GMT\r\ncross-origin-resource-policy: cross-origin\r\nx-amzn-trace-id: Root=1-68a834ed-25ad787d4078660a5de0b748;Parent=2eb69661170e620f;Sampled=0;Lineage=1:f456f256:0\r\nx-amzn-requestid: abee9072-993f-48da-a6f3-fd81f10fb083\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-xss-protection: 0\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: deny\r\ncontent-security-policy: default-src 'none'; script-src 'none'; img-src 'self'; media-src 'self'; report-uri https://framer.report-uri.com/r/t/csp/enforce;\r\ncache-control: public, max-age=31536000, stale-while-revalidate=31536000\r\nx-content-type-options: nosniff\r\netag: \"99a94a88141573d428d82cc50c430003\"\r\nvary: Accept\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 fd72662d19f1605cb71a8fd4814daf52.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cdn-cache-hit,cdn-pop;desc=\"OSL50-P3\",cdn-hit-layer;desc=\"EDGE\",cdn-rid;desc=\"iQ5bUDSFucHspHdI7vKV7SenYkbSDDZtuyxQsQduMwSc1k8QUY_FWQ==\",cdn-downstream-fbl;dur=3\r\nx-amz-cf-id: iQ5bUDSFucHspHdI7vKV7SenYkbSDDZtuyxQsQduMwSc1k8QUY_FWQ==\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":244,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"99a94a88141573d428d82cc50c430003","sha1":"ce465ca8b60aadb7f721ca0b1a6910178a1d5ef6","sha256":"27a7910c07049dcccee58bae0dba917b8a0ab814ca7d2a6090eff76c80dd14e0","sha512":"7104c6954fafcca14c97ca8910d2ae7002878290fb9b28edc6059a485fd62a7b1c923ecfac27e13a3213a91501ebd57da1111fed291a1bc300cdabe0659d61e8","ssdeep":"","tlshash":"9bd09568415c040455118360dfec37e4705ff017c205116cb146683c530945f3c26959","first_seen":"2025-11-20T11:15:14.640883Z","last_seen":"2026-07-18T21:09:12.466667Z","times_seen":65,"resource_available":false,"data":null}},"time_used":5,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}