{"report_id":"f6602f02-d9a7-4c1b-8f10-f33d47cdb314","version":0,"status":"done","tags":[],"date":"2026-09-25T05:37:30Z","url":{"schema":"http","addr":"firelight.run/","fqdn":"firelight.run","domain":"firelight.run","tld":"run"},"ip":{"addr":"104.21.13.148","port":0,"asn":13335,"as":"Cloudflare, Inc.","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"firelight.run/","fqdn":"firelight.run","domain":"firelight.run","tld":"run"},"title":"Firelight – The Protection Layer for Digital Assets","dom":{"size":484972,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1572)","md5":"1cf9e62cb20c16a995d30d6988b43e02","sha1":"ab3c8919b6afa313f01dae4a4df3ec65b99a0904","sha256":"d331dfffb4ceaf3d92bac323fccbd9f79ec85c46191c3bed8afbad0b45d900e8","sha512":"fcdba3441cd83f72d6f0c288cddf588c479a3a78b4ed41cd03d26bbe2c11b1f539b9c126159fa014b2538b8b3a1c484ab49357e84373c846a419380a65a28a33","ssdeep":"3072:5iuTSYcLGIJ1e+BY9mxe6z5evVt94foO0WcAfYtI4fzM0WcEfyl:5iu0H4AE6z4bpl","tlshash":"6ea4d7236224d0385dc729bdf7c9ba1c351c9202fb3386ea62f9516fd5c9de412a279c","dom_hash":"domhashb21b4d7fbe33265a9772da26f31479c5","first_seen":"2026-09-25T05:38:00.032372Z","last_seen":"2026-09-25T05:38:00.032372Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"firelight.run/","fqdn":"firelight.run","domain":"firelight.run","tld":"run"},"ip":{"addr":"104.21.13.148","port":0,"asn":13335,"as":"Cloudflare, Inc.","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-30T05:37:30Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"31pu2ilhjrkmwpf"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":181}},"detection":{"ids":null,"analyzer":[{"sensor_name":"infosec_yara","sensor_type":"yara","title":"Nextron YARA rules","description":"Public Nextron YARA rules","scan_date":"2026-09-25","alert":"PHP webshell obfuscated by encoding of mixed hex and dec","trigger":"firelight.run/assets/core_27d1859f63.php?req=ping","verdict":"malware","severity":"medium","comment":"","link":"https://github.com/Neo23x0/signature-base","meta":{"author":"Arnim Rupp","date":"2021/04/18","description":"PHP webshell obfuscated by encoding of mixed hex and dec","license":"Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE","rule":"webshell_php_obfuscated_encoding_mixed_dec_and_hex"}},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-25","alert":"Phishing Block","trigger":"firelight.run","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"firelight.run","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"firelight.run","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"arbitrum.gateway.tenderly.co","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"fd7xqs6fnkfawh6qvkmjuuwvub4cbuycyxx3q3romqtbcbt6o4kq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"fd7xqs6fnkfawh6qvkmjuuwvub4cbuycyxx3q3romqtbcbt6o4kq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"fd7xqs6fnkfawh6qvkmjuuwvub4cbuycyxx3q3romqtbcbt6o4kq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"rahqtny5jec73ifzc2gg5x3d5s6bznpxhj4g3ky25pp5g2l7y7pq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"rahqtny5jec73ifzc2gg5x3d5s6bznpxhj4g3ky25pp5g2l7y7pq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"rahqtny5jec73ifzc2gg5x3d5s6bznpxhj4g3ky25pp5g2l7y7pq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"ipzqcmr26hbzpnzybg3ewzxzuu26ypvig3lp4irbfe643kmo3g5a.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"ipzqcmr26hbzpnzybg3ewzxzuu26ypvig3lp4irbfe643kmo3g5a.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"ipzqcmr26hbzpnzybg3ewzxzuu26ypvig3lp4irbfe643kmo3g5a.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"lipjimvtizvuyifeddgmjfapysx6npsrkjjwfy5zxmvkhkoal6ea.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"lipjimvtizvuyifeddgmjfapysx6npsrkjjwfy5zxmvkhkoal6ea.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"lipjimvtizvuyifeddgmjfapysx6npsrkjjwfy5zxmvkhkoal6ea.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"muyovc3b2336fg4hlwg73n6w7lve6xi5wwagbq3mkm34hz3fufcq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"muyovc3b2336fg4hlwg73n6w7lve6xi5wwagbq3mkm34hz3fufcq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"muyovc3b2336fg4hlwg73n6w7lve6xi5wwagbq3mkm34hz3fufcq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"abnsx7str6j5sa3pdbm5r66xojf3es2dyofcb7tsun2spudnhioq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"abnsx7str6j5sa3pdbm5r66xojf3es2dyofcb7tsun2spudnhioq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"abnsx7str6j5sa3pdbm5r66xojf3es2dyofcb7tsun2spudnhioq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"zxdcgrwdlct5d5hkzf5ikt35hpxjgyetcpfzrvlhwzw2f6fnevbq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"zxdcgrwdlct5d5hkzf5ikt35hpxjgyetcpfzrvlhwzw2f6fnevbq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"zxdcgrwdlct5d5hkzf5ikt35hpxjgyetcpfzrvlhwzw2f6fnevbq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"qyxbba7uefsmigd4oki3zm3hcmilt5fjudhha7n37oeygwrgdcua.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"qyxbba7uefsmigd4oki3zm3hcmilt5fjudhha7n37oeygwrgdcua.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"qyxbba7uefsmigd4oki3zm3hcmilt5fjudhha7n37oeygwrgdcua.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"wqfquz32a4lzecqogmqyxh4zeqpie2ndhtrq2liju6ygvivvaykq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"wqfquz32a4lzecqogmqyxh4zeqpie2ndhtrq2liju6ygvivvaykq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"wqfquz32a4lzecqogmqyxh4zeqpie2ndhtrq2liju6ygvivvaykq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"jfrwbu3xjectzwr6zpvpvbewqkwb3tvpr7kikhkfa7gcmzugoycq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"jfrwbu3xjectzwr6zpvpvbewqkwb3tvpr7kikhkfa7gcmzugoycq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"jfrwbu3xjectzwr6zpvpvbewqkwb3tvpr7kikhkfa7gcmzugoycq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"h5mmvwl7o3g5kseh6ibvzgyebxak4j4qgqqczbevmgdtkhvbbhaq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"h5mmvwl7o3g5kseh6ibvzgyebxak4j4qgqqczbevmgdtkhvbbhaq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"h5mmvwl7o3g5kseh6ibvzgyebxak4j4qgqqczbevmgdtkhvbbhaq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"sxkbzjsq65wh654do6f2fcn4t5phs2iozxkrihpxbz4jaqr3fuaq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"sxkbzjsq65wh654do6f2fcn4t5phs2iozxkrihpxbz4jaqr3fuaq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"sxkbzjsq65wh654do6f2fcn4t5phs2iozxkrihpxbz4jaqr3fuaq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"3piw7lupog56srrpctt46tuuiroz3dh47v2vjdtocircg3f7u4za.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"3piw7lupog56srrpctt46tuuiroz3dh47v2vjdtocircg3f7u4za.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"3piw7lupog56srrpctt46tuuiroz3dh47v2vjdtocircg3f7u4za.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"elliptical-rabbit.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"elliptical-rabbit.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"lqm65l4rsie7lcqzwyygqd4xmycpt6vpx7jqzqhlj6x4xnaxvvva.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"lqm65l4rsie7lcqzwyygqd4xmycpt6vpx7jqzqhlj6x4xnaxvvva.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"lqm65l4rsie7lcqzwyygqd4xmycpt6vpx7jqzqhlj6x4xnaxvvva.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"ch75ckxualkloc7t5fsfem56e5odt55sl7lel66ksibigpvzxsda.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"ch75ckxualkloc7t5fsfem56e5odt55sl7lel66ksibigpvzxsda.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"ch75ckxualkloc7t5fsfem56e5odt55sl7lel66ksibigpvzxsda.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"ickanb5psbhquhnys6hyxxn5kcs7k75kvqwlajid5qycvq2ijgra.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"ickanb5psbhquhnys6hyxxn5kcs7k75kvqwlajid5qycvq2ijgra.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"ickanb5psbhquhnys6hyxxn5kcs7k75kvqwlajid5qycvq2ijgra.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"3zda2p33cro63eoev6gcult7nzm6vegrll7kg6cknocqfq4tavva.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"3zda2p33cro63eoev6gcult7nzm6vegrll7kg6cknocqfq4tavva.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"3zda2p33cro63eoev6gcult7nzm6vegrll7kg6cknocqfq4tavva.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"65anjlffv6f37wsp5aoj34ltgjeakkozcoaujzb6feeub2bhg67a.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"65anjlffv6f37wsp5aoj34ltgjeakkozcoaujzb6feeub2bhg67a.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"65anjlffv6f37wsp5aoj34ltgjeakkozcoaujzb6feeub2bhg67a.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"4xy5hycubobxyykm63sfnbkjznatsbung7ttetuoehkqf7ozquma.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"4xy5hycubobxyykm63sfnbkjznatsbung7ttetuoehkqf7ozquma.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"4xy5hycubobxyykm63sfnbkjznatsbung7ttetuoehkqf7ozquma.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"7ohnisscwweqylohacphls5cmyhfuuworva4o7nypw42xdl6i63a.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"7ohnisscwweqylohacphls5cmyhfuuworva4o7nypw42xdl6i63a.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"7ohnisscwweqylohacphls5cmyhfuuworva4o7nypw42xdl6i63a.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"ukhvzo2rrxh7wozvlpmgie2zqeaaaquohhrc7a6usunqtlubkr7a.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"ukhvzo2rrxh7wozvlpmgie2zqeaaaquohhrc7a6usunqtlubkr7a.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"ukhvzo2rrxh7wozvlpmgie2zqeaaaquohhrc7a6usunqtlubkr7a.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"iv4gcnkpfdnodp3rm73df3m6vnf4ucnpjwdlcsrtmns4li5aljfq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"iv4gcnkpfdnodp3rm73df3m6vnf4ucnpjwdlcsrtmns4li5aljfq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"iv4gcnkpfdnodp3rm73df3m6vnf4ucnpjwdlcsrtmns4li5aljfq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"re3ropp2geh4d5qidoozfesfsagireabcedh4j6agvkzpc463fcq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"re3ropp2geh4d5qidoozfesfsagireabcedh4j6agvkzpc463fcq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"re3ropp2geh4d5qidoozfesfsagireabcedh4j6agvkzpc463fcq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"qofpup6nmdjajko4dxgkt5mq2htvoe4uqxfbycxyrybfw7p5to7a.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"qofpup6nmdjajko4dxgkt5mq2htvoe4uqxfbycxyrybfw7p5to7a.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"qofpup6nmdjajko4dxgkt5mq2htvoe4uqxfbycxyrybfw7p5to7a.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"e5pt46sfryibvjq4hrrz5src2xmfrc7jvtiolpsp3jzjl4eyeaga.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"e5pt46sfryibvjq4hrrz5src2xmfrc7jvtiolpsp3jzjl4eyeaga.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"e5pt46sfryibvjq4hrrz5src2xmfrc7jvtiolpsp3jzjl4eyeaga.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"2qmxub74calbyr5e4vgvxb6tbvyem7xps23rhcmptoozpppemsga.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"2qmxub74calbyr5e4vgvxb6tbvyem7xps23rhcmptoozpppemsga.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"2qmxub74calbyr5e4vgvxb6tbvyem7xps23rhcmptoozpppemsga.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"4zbpk6lzsya26tazaje3yw7d6st53o23iriglps2sp2bnpqb6e7q.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"4zbpk6lzsya26tazaje3yw7d6st53o23iriglps2sp2bnpqb6e7q.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"4zbpk6lzsya26tazaje3yw7d6st53o23iriglps2sp2bnpqb6e7q.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"tuahnjjbd4ptq2z3dq73mmxdcdpdxt5sjs4uwfluwoxw2i3zrv4q.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"tuahnjjbd4ptq2z3dq73mmxdcdpdxt5sjs4uwfluwoxw2i3zrv4q.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"tuahnjjbd4ptq2z3dq73mmxdcdpdxt5sjs4uwfluwoxw2i3zrv4q.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"pinky-goat.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"lzqmfxcfxzkmtpb2kkhciww2krq6nbxvcrakzllef64mn2325ugq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"lzqmfxcfxzkmtpb2kkhciww2krq6nbxvcrakzllef64mn2325ugq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"lzqmfxcfxzkmtpb2kkhciww2krq6nbxvcrakzllef64mn2325ugq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"b6ktecz7yjy6fzgzlivivwfm4xtjvavuqbddceaslq46lxbuw2wq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"b6ktecz7yjy6fzgzlivivwfm4xtjvavuqbddceaslq46lxbuw2wq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"b6ktecz7yjy6fzgzlivivwfm4xtjvavuqbddceaslq46lxbuw2wq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"enr4cxf3dl3xz57mcmmg6wlxvi7gda2w5xdradzypkaigsdonhma.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"enr4cxf3dl3xz57mcmmg6wlxvi7gda2w5xdradzypkaigsdonhma.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"enr4cxf3dl3xz57mcmmg6wlxvi7gda2w5xdradzypkaigsdonhma.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"sabtndk46ts7f2qr7ndhhfdkgivlnbtawgrzpqlfgsuv3vrcx3ra.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"sabtndk46ts7f2qr7ndhhfdkgivlnbtawgrzpqlfgsuv3vrcx3ra.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"sabtndk46ts7f2qr7ndhhfdkgivlnbtawgrzpqlfgsuv3vrcx3ra.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"g2akedaejpemffcb3k3tbk3zmsdzsgpvw3zsqilmev3jh4ywcf4q.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"g2akedaejpemffcb3k3tbk3zmsdzsgpvw3zsqilmev3jh4ywcf4q.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"g2akedaejpemffcb3k3tbk3zmsdzsgpvw3zsqilmev3jh4ywcf4q.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"f6xwz3lwcfil7qwaikhvuopkgolm7x4zdfqegfkqcoceimvb65bq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"f6xwz3lwcfil7qwaikhvuopkgolm7x4zdfqegfkqcoceimvb65bq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"f6xwz3lwcfil7qwaikhvuopkgolm7x4zdfqegfkqcoceimvb65bq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"zkrzh37fj2r5lngihbn6q4tvv2yw6qsa2oykho7r7ofhoutwmbiq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"zkrzh37fj2r5lngihbn6q4tvv2yw6qsa2oykho7r7ofhoutwmbiq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"zkrzh37fj2r5lngihbn6q4tvv2yw6qsa2oykho7r7ofhoutwmbiq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"6sab273b7nl3rcdustvjejsgxkwzkkibobj56v5dumz7i6xdbltq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"6sab273b7nl3rcdustvjejsgxkwzkkibobj56v5dumz7i6xdbltq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"6sab273b7nl3rcdustvjejsgxkwzkkibobj56v5dumz7i6xdbltq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"crwj4ebgvb7k4zcwmmxrnzxbs2gaegjyku7rc4eqjkvdnsvrehsa.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"crwj4ebgvb7k4zcwmmxrnzxbs2gaegjyku7rc4eqjkvdnsvrehsa.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"crwj4ebgvb7k4zcwmmxrnzxbs2gaegjyku7rc4eqjkvdnsvrehsa.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"t73giqqwtpkhhdyyeszo2vv4sqyyuafuk7y2deshpm3xftc7jg7q.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"t73giqqwtpkhhdyyeszo2vv4sqyyuafuk7y2deshpm3xftc7jg7q.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"t73giqqwtpkhhdyyeszo2vv4sqyyuafuk7y2deshpm3xftc7jg7q.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"buutf2tmltbd5uchhy32zl6l6dichmeqmkfy746sru4cutui7g3q.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"buutf2tmltbd5uchhy32zl6l6dichmeqmkfy746sru4cutui7g3q.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"buutf2tmltbd5uchhy32zl6l6dichmeqmkfy746sru4cutui7g3q.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"egp3uffvpgr2wpafcervpo3f64y2lpvikbnscmfvn3udttq77joq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"egp3uffvpgr2wpafcervpo3f64y2lpvikbnscmfvn3udttq77joq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"egp3uffvpgr2wpafcervpo3f64y2lpvikbnscmfvn3udttq77joq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"aa5xkwqvefm3tszfisosqh6wdakhahxso3jyl5d5wsibuczex6ma.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"aa5xkwqvefm3tszfisosqh6wdakhahxso3jyl5d5wsibuczex6ma.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"aa5xkwqvefm3tszfisosqh6wdakhahxso3jyl5d5wsibuczex6ma.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"kezjuikcsaiyqvsd2w32dhijntrtnjkh4vwendcd35dw34hhszna.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"kezjuikcsaiyqvsd2w32dhijntrtnjkh4vwendcd35dw34hhszna.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"kezjuikcsaiyqvsd2w32dhijntrtnjkh4vwendcd35dw34hhszna.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"nr37cg543n2zbiykifsgbtzl3tuysa2xn3ymy57xhyrvm3g2j2nq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"nr37cg543n2zbiykifsgbtzl3tuysa2xn3ymy57xhyrvm3g2j2nq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"nr37cg543n2zbiykifsgbtzl3tuysa2xn3ymy57xhyrvm3g2j2nq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"l2kourp7xt2ar7nw3fpgqmxu3mvfli4qxvsvx3cacditkaifq6rq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"l2kourp7xt2ar7nw3fpgqmxu3mvfli4qxvsvx3cacditkaifq6rq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"l2kourp7xt2ar7nw3fpgqmxu3mvfli4qxvsvx3cacditkaifq6rq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"fynfue6gizxdkcyib7qzqxl6yplic3utnguuvmr3vhltij4lrsha.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"fynfue6gizxdkcyib7qzqxl6yplic3utnguuvmr3vhltij4lrsha.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"fynfue6gizxdkcyib7qzqxl6yplic3utnguuvmr3vhltij4lrsha.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"5jrjgp2nl37gpefz75hgo6idl2q2frezh2ewvezllzssodeldc3a.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"5jrjgp2nl37gpefz75hgo6idl2q2frezh2ewvezllzssodeldc3a.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"5jrjgp2nl37gpefz75hgo6idl2q2frezh2ewvezllzssodeldc3a.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"zunczd3cinnovpzh2w3sv4yyf4ycdzgcmlyvoo2eu3edqrvshgvq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"zunczd3cinnovpzh2w3sv4yyf4ycdzgcmlyvoo2eu3edqrvshgvq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"zunczd3cinnovpzh2w3sv4yyf4ycdzgcmlyvoo2eu3edqrvshgvq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"6b5g7comjyz3c4cgalgs5qvnmcfq4arqkx6d2np6kdxclsrmnc6a.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"6b5g7comjyz3c4cgalgs5qvnmcfq4arqkx6d2np6kdxclsrmnc6a.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"6b5g7comjyz3c4cgalgs5qvnmcfq4arqkx6d2np6kdxclsrmnc6a.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"43zhqeb6vzldlqwzbqdiamkbmmrohzz5bvua563j7rbvxnd5u5fq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"43zhqeb6vzldlqwzbqdiamkbmmrohzz5bvua563j7rbvxnd5u5fq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"43zhqeb6vzldlqwzbqdiamkbmmrohzz5bvua563j7rbvxnd5u5fq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"hxjnnbfgmzureusmhjgltavcqubaut2yzqx23rrlalgrwm4nynga.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"hxjnnbfgmzureusmhjgltavcqubaut2yzqx23rrlalgrwm4nynga.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"hxjnnbfgmzureusmhjgltavcqubaut2yzqx23rrlalgrwm4nynga.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"hkmjhyubcmyt55tyslqmyt4arfmczeuf7xtrysanzghe6n5ezduq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"hkmjhyubcmyt55tyslqmyt4arfmczeuf7xtrysanzghe6n5ezduq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"hkmjhyubcmyt55tyslqmyt4arfmczeuf7xtrysanzghe6n5ezduq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"v57bhor75skl3yh2fasy5zibmxu374hc564a5oiidpjj3yk5qoua.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"v57bhor75skl3yh2fasy5zibmxu374hc564a5oiidpjj3yk5qoua.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"v57bhor75skl3yh2fasy5zibmxu374hc564a5oiidpjj3yk5qoua.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"zzcs2m5lomlcptku6ihjjgjt3gz7ni5ok2jfwmd7eiwlz2a5giaq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"zzcs2m5lomlcptku6ihjjgjt3gz7ni5ok2jfwmd7eiwlz2a5giaq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"zzcs2m5lomlcptku6ihjjgjt3gz7ni5ok2jfwmd7eiwlz2a5giaq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"ipgv6k3cx6mftzzxhfhhzv64ydqttwwd4p6dtqjffey5ckd47buq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"ipgv6k3cx6mftzzxhfhhzv64ydqttwwd4p6dtqjffey5ckd47buq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"ipgv6k3cx6mftzzxhfhhzv64ydqttwwd4p6dtqjffey5ckd47buq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"api.firelight.run","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-25","alert":"Phishing Block","trigger":"api.firelight.run","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"y2me6bz5xzrin5vis76bc53hqcyzeg6ccrbutd74zgrtsncobg6q.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"y2me6bz5xzrin5vis76bc53hqcyzeg6ccrbutd74zgrtsncobg6q.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"y2me6bz5xzrin5vis76bc53hqcyzeg6ccrbutd74zgrtsncobg6q.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"el2hrgbroeyi4qgvgvj2lqoggwyiygesvezu3i5thvntgjewgylq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"el2hrgbroeyi4qgvgvj2lqoggwyiygesvezu3i5thvntgjewgylq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"el2hrgbroeyi4qgvgvj2lqoggwyiygesvezu3i5thvntgjewgylq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"7hle7g76hwhzkcgcytuleelhk7lwp5k2ivnywsyp5umgak26bktq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"7hle7g76hwhzkcgcytuleelhk7lwp5k2ivnywsyp5umgak26bktq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"7hle7g76hwhzkcgcytuleelhk7lwp5k2ivnywsyp5umgak26bktq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null},"summary":[{"fqdn":"e5pt46sfryibvjq4hrrz5src2xmfrc7jvtiolpsp3jzjl4eyeaga.mainnet-1.datasprite-cdn.com","ip":{"addr":"104.21.15.158","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-04-02","domain_rank":0,"first_seen":"2026-06-13T04:41:16.529093Z","last_seen":"2026-09-22T20:46:13.751785Z","alert_count":3,"request_count":1,"received_data":3031,"sent_data":606,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"kezjuikcsaiyqvsd2w32dhijntrtnjkh4vwendcd35dw34hhszna.mainnet-1.datasprite-cdn.com","ip":{"addr":"104.21.15.158","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-04-02","domain_rank":0,"first_seen":"2026-06-11T07:30:18.271691Z","last_seen":"2026-08-13T23:41:12.494118Z","alert_count":3,"request_count":1,"received_data":1922,"sent_data":606,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"fynfue6gizxdkcyib7qzqxl6yplic3utnguuvmr3vhltij4lrsha.mainnet-1.datasprite-cdn.com","ip":{"addr":"104.21.15.158","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-04-02","domain_rank":0,"first_seen":"2026-06-11T07:30:17.33794Z","last_seen":"2026-09-22T20:45:53.42414Z","alert_count":3,"request_count":1,"received_data":2294,"sent_data":606,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"zunczd3cinnovpzh2w3sv4yyf4ycdzgcmlyvoo2eu3edqrvshgvq.mainnet-1.datasprite-cdn.com","ip":{"addr":"104.21.15.158","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-04-02","domain_rank":0,"first_seen":"2026-06-13T04:41:16.549772Z","last_seen":"2026-08-13T23:41:11.575864Z","alert_count":3,"request_count":1,"received_data":1782,"sent_data":606,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"zzcs2m5lomlcptku6ihjjgjt3gz7ni5ok2jfwmd7eiwlz2a5giaq.mainnet-1.datasprite-cdn.com","ip":{"addr":"104.21.15.158","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-04-02","domain_rank":0,"first_seen":"2026-06-11T07:30:21.665153Z","last_seen":"2026-08-13T23:41:15.823044Z","alert_count":3,"request_count":1,"received_data":2606,"sent_data":606,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"firelight.run","ip":{"addr":"104.21.13.148","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":76,"request_count":25,"received_data":9097204,"sent_data":12859,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"React","description":"React is an open-source JavaScript library for building user interfaces or UI components.","website":"https://reactjs.org","common_platform_enumeration":"cpe:2.3:a:facebook:react:*:*:*:*:*:*:*:*","icon":"React.svg","categories":["JavaScript frameworks"]},{"name":"Framer Sites","description":"Framer is a no-code web design platform for designing and publishing responsive websites.","website":"https://www.framer.com","common_platform_enumeration":"","icon":"Framer Sites.svg","categories":["CMS","Page builders"]}]},{"fqdn":"arbitrum.gateway.tenderly.co","ip":{"addr":"35.227.193.242","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"domain_registered":"2020-05-11","domain_rank":0,"first_seen":"2025-08-03T10:23:07.270939Z","last_seen":"2026-09-13T05:29:36.387499Z","alert_count":2,"request_count":2,"received_data":1309,"sent_data":1075,"comment":"","tags":null,"fingerprints":[{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}]},{"fqdn":"lipjimvtizvuyifeddgmjfapysx6npsrkjjwfy5zxmvkhkoal6ea.mainnet-1.datasprite-cdn.com","ip":{"addr":"172.67.163.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-04-02","domain_rank":0,"first_seen":"2026-06-11T07:30:17.285132Z","last_seen":"2026-08-13T23:41:13.351669Z","alert_count":3,"request_count":1,"received_data":3754,"sent_data":606,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"elliptical-rabbit.icu","ip":{"addr":"172.67.175.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-03-29","domain_rank":0,"first_seen":"2026-04-26T14:03:04.881914Z","last_seen":"2026-09-21T14:15:54.322673Z","alert_count":12,"request_count":6,"received_data":10045,"sent_data":3129,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"4xy5hycubobxyykm63sfnbkjznatsbung7ttetuoehkqf7ozquma.mainnet-1.datasprite-cdn.com","ip":{"addr":"104.21.15.158","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-04-02","domain_rank":0,"first_seen":"2026-06-11T07:30:17.107648Z","last_seen":"2026-08-13T23:41:11.157922Z","alert_count":3,"request_count":1,"received_data":3402,"sent_data":606,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"arbitrum.meowrpc.com","ip":{"addr":"104.26.11.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2023-05-04","domain_rank":2819481,"first_seen":"2025-08-16T04:05:13.25434Z","last_seen":"2026-09-11T09:44:25.858045Z","alert_count":0,"request_count":2,"received_data":1549,"sent_data":1059,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"l2kourp7xt2ar7nw3fpgqmxu3mvfli4qxvsvx3cacditkaifq6rq.mainnet-1.datasprite-cdn.com","ip":{"addr":"104.21.15.158","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-04-02","domain_rank":0,"first_seen":"2026-06-11T07:30:14.508579Z","last_seen":"2026-08-13T23:41:16.15563Z","alert_count":3,"request_count":1,"received_data":2772,"sent_data":606,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"hxjnnbfgmzureusmhjgltavcqubaut2yzqx23rrlalgrwm4nynga.mainnet-1.datasprite-cdn.com","ip":{"addr":"172.67.163.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-04-02","domain_rank":0,"first_seen":"2026-06-11T07:30:19.209311Z","last_seen":"2026-08-13T23:41:10.716855Z","alert_count":3,"request_count":1,"received_data":2284,"sent_data":606,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"arbitrum.drpc.org","ip":{"addr":"104.18.11.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2005-01-09","domain_rank":1951970,"first_seen":"2024-10-14T17:26:29.664661Z","last_seen":"2026-09-22T20:43:14.084195Z","alert_count":0,"request_count":2,"received_data":1417,"sent_data":1053,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"qofpup6nmdjajko4dxgkt5mq2htvoe4uqxfbycxyrybfw7p5to7a.mainnet-1.datasprite-cdn.com","ip":{"addr":"104.21.15.158","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-04-02","domain_rank":0,"first_seen":"2026-06-11T07:30:22.138569Z","last_seen":"2026-08-13T23:41:17.07609Z","alert_count":3,"request_count":1,"received_data":2096,"sent_data":606,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"t73giqqwtpkhhdyyeszo2vv4sqyyuafuk7y2deshpm3xftc7jg7q.mainnet-1.datasprite-cdn.com","ip":{"addr":"104.21.15.158","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-04-02","domain_rank":0,"first_seen":"2026-06-11T07:30:19.791287Z","last_seen":"2026-08-13T23:41:10.902034Z","alert_count":3,"request_count":1,"received_data":1282,"sent_data":606,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"5jrjgp2nl37gpefz75hgo6idl2q2frezh2ewvezllzssodeldc3a.mainnet-1.datasprite-cdn.com","ip":{"addr":"172.67.163.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-04-02","domain_rank":0,"first_seen":"2026-06-11T07:30:21.123145Z","last_seen":"2026-08-13T23:41:14.187329Z","alert_count":3,"request_count":1,"received_data":143029,"sent_data":606,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"api.firelight.run","ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":2,"request_count":1,"received_data":0,"sent_data":464,"comment":"","tags":null,"fingerprints":null},{"fqdn":"y2me6bz5xzrin5vis76bc53hqcyzeg6ccrbutd74zgrtsncobg6q.mainnet-1.datasprite-cdn.com","ip":{"addr":"172.67.163.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-04-02","domain_rank":0,"first_seen":"2026-06-11T07:30:18.453427Z","last_seen":"2026-08-13T23:41:16.856369Z","alert_count":3,"request_count":1,"received_data":3908,"sent_data":606,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"wqfquz32a4lzecqogmqyxh4zeqpie2ndhtrq2liju6ygvivvaykq.mainnet-1.datasprite-cdn.com","ip":{"addr":"104.21.15.158","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-04-02","domain_rank":0,"first_seen":"2026-06-11T07:30:19.1075Z","last_seen":"2026-08-13T23:41:12.532775Z","alert_count":3,"request_count":1,"received_data":2278,"sent_data":606,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"abnsx7str6j5sa3pdbm5r66xojf3es2dyofcb7tsun2spudnhioq.mainnet-1.datasprite-cdn.com","ip":{"addr":"172.67.163.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-04-02","domain_rank":0,"first_seen":"2026-06-11T07:30:20.160193Z","last_seen":"2026-08-13T23:41:18.887715Z","alert_count":3,"request_count":1,"received_data":2138,"sent_data":606,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"el2hrgbroeyi4qgvgvj2lqoggwyiygesvezu3i5thvntgjewgylq.mainnet-1.datasprite-cdn.com","ip":{"addr":"104.21.15.158","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-04-02","domain_rank":0,"first_seen":"2026-06-11T07:30:22.091142Z","last_seen":"2026-08-13T23:41:19.000505Z","alert_count":3,"request_count":1,"received_data":2504,"sent_data":606,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"7hle7g76hwhzkcgcytuleelhk7lwp5k2ivnywsyp5umgak26bktq.mainnet-1.datasprite-cdn.com","ip":{"addr":"104.21.15.158","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-04-02","domain_rank":0,"first_seen":"2026-06-11T07:30:14.50592Z","last_seen":"2026-08-13T23:41:10.857551Z","alert_count":3,"request_count":1,"received_data":2902,"sent_data":606,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"sxkbzjsq65wh654do6f2fcn4t5phs2iozxkrihpxbz4jaqr3fuaq.mainnet-1.datasprite-cdn.com","ip":{"addr":"104.21.15.158","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-04-02","domain_rank":0,"first_seen":"2026-06-11T07:30:17.372315Z","last_seen":"2026-08-13T23:41:16.437557Z","alert_count":3,"request_count":1,"received_data":3242,"sent_data":606,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"3zda2p33cro63eoev6gcult7nzm6vegrll7kg6cknocqfq4tavva.mainnet-1.datasprite-cdn.com","ip":{"addr":"104.21.15.158","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-04-02","domain_rank":0,"first_seen":"2026-06-11T07:30:14.508965Z","last_seen":"2026-08-13T23:41:17.495366Z","alert_count":3,"request_count":1,"received_data":2516,"sent_data":606,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-09-20T22:43:34.841753Z","alert_count":0,"request_count":1,"received_data":10792,"sent_data":529,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"2qmxub74calbyr5e4vgvxb6tbvyem7xps23rhcmptoozpppemsga.mainnet-1.datasprite-cdn.com","ip":{"addr":"104.21.15.158","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-04-02","domain_rank":0,"first_seen":"2026-06-11T07:30:16.986881Z","last_seen":"2026-08-13T23:41:11.352493Z","alert_count":3,"request_count":1,"received_data":5722,"sent_data":606,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"public-bsc.nownodes.io","ip":{"addr":"104.20.35.2","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2019-05-20","domain_rank":0,"first_seen":"2025-10-14T19:44:58.496919Z","last_seen":"2026-09-21T14:15:55.404576Z","alert_count":0,"request_count":2,"received_data":1663,"sent_data":1063,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"ipzqcmr26hbzpnzybg3ewzxzuu26ypvig3lp4irbfe643kmo3g5a.mainnet-1.datasprite-cdn.com","ip":{"addr":"172.67.163.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-04-02","domain_rank":0,"first_seen":"2026-06-11T07:30:18.148619Z","last_seen":"2026-08-13T23:41:11.06138Z","alert_count":3,"request_count":1,"received_data":3372,"sent_data":606,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"4zbpk6lzsya26tazaje3yw7d6st53o23iriglps2sp2bnpqb6e7q.mainnet-1.datasprite-cdn.com","ip":{"addr":"172.67.163.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-04-02","domain_rank":0,"first_seen":"2026-06-11T07:30:17.356019Z","last_seen":"2026-08-13T23:41:13.399494Z","alert_count":3,"request_count":1,"received_data":1944,"sent_data":606,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"sabtndk46ts7f2qr7ndhhfdkgivlnbtawgrzpqlfgsuv3vrcx3ra.mainnet-1.datasprite-cdn.com","ip":{"addr":"104.21.15.158","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-04-02","domain_rank":0,"first_seen":"2026-06-11T07:30:19.237113Z","last_seen":"2026-08-13T23:41:16.850899Z","alert_count":3,"request_count":1,"received_data":2840,"sent_data":606,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"g2akedaejpemffcb3k3tbk3zmsdzsgpvw3zsqilmev3jh4ywcf4q.mainnet-1.datasprite-cdn.com","ip":{"addr":"172.67.163.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-04-02","domain_rank":0,"first_seen":"2026-06-11T07:30:19.990078Z","last_seen":"2026-08-13T23:41:10.856105Z","alert_count":3,"request_count":1,"received_data":3948,"sent_data":606,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"buutf2tmltbd5uchhy32zl6l6dichmeqmkfy746sru4cutui7g3q.mainnet-1.datasprite-cdn.com","ip":{"addr":"104.21.15.158","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-04-02","domain_rank":0,"first_seen":"2026-06-11T07:30:15.397557Z","last_seen":"2026-08-13T23:41:18.713222Z","alert_count":3,"request_count":1,"received_data":2147,"sent_data":605,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"43zhqeb6vzldlqwzbqdiamkbmmrohzz5bvua563j7rbvxnd5u5fq.mainnet-1.datasprite-cdn.com","ip":{"addr":"172.67.163.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-04-02","domain_rank":0,"first_seen":"2026-06-11T07:30:15.423894Z","last_seen":"2026-08-13T23:41:11.861596Z","alert_count":3,"request_count":1,"received_data":2864,"sent_data":606,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"v57bhor75skl3yh2fasy5zibmxu374hc564a5oiidpjj3yk5qoua.mainnet-1.datasprite-cdn.com","ip":{"addr":"104.21.15.158","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-04-02","domain_rank":0,"first_seen":"2026-06-11T07:30:16.300482Z","last_seen":"2026-08-13T23:41:16.856533Z","alert_count":3,"request_count":1,"received_data":2132,"sent_data":606,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"binance.llamarpc.com","ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2022-02-07","domain_rank":2101135,"first_seen":"2023-09-18T00:31:06Z","last_seen":"2026-09-11T20:55:01.062576Z","alert_count":0,"request_count":1,"received_data":0,"sent_data":546,"comment":"","tags":null,"fingerprints":null},{"fqdn":"crwj4ebgvb7k4zcwmmxrnzxbs2gaegjyku7rc4eqjkvdnsvrehsa.mainnet-1.datasprite-cdn.com","ip":{"addr":"104.21.15.158","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-04-02","domain_rank":0,"first_seen":"2026-06-14T13:17:43.117422Z","last_seen":"2026-08-13T23:41:13.680143Z","alert_count":3,"request_count":1,"received_data":2102,"sent_data":606,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"nr37cg543n2zbiykifsgbtzl3tuysa2xn3ymy57xhyrvm3g2j2nq.mainnet-1.datasprite-cdn.com","ip":{"addr":"104.21.15.158","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-04-02","domain_rank":0,"first_seen":"2026-06-11T07:30:14.51194Z","last_seen":"2026-08-13T23:41:18.895319Z","alert_count":3,"request_count":1,"received_data":2130,"sent_data":606,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"ipgv6k3cx6mftzzxhfhhzv64ydqttwwd4p6dtqjffey5ckd47buq.mainnet-1.datasprite-cdn.com","ip":{"addr":"104.21.15.158","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-04-02","domain_rank":0,"first_seen":"2026-06-11T07:30:15.954615Z","last_seen":"2026-08-13T23:41:11.701472Z","alert_count":3,"request_count":1,"received_data":1862,"sent_data":606,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"arbitrum.llamarpc.com","ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2022-02-07","domain_rank":3027975,"first_seen":"2023-12-02T14:30:00Z","last_seen":"2026-09-22T20:50:15.741963Z","alert_count":0,"request_count":1,"received_data":0,"sent_data":547,"comment":"","tags":null,"fingerprints":null},{"fqdn":"ukhvzo2rrxh7wozvlpmgie2zqeaaaquohhrc7a6usunqtlubkr7a.mainnet-1.datasprite-cdn.com","ip":{"addr":"104.21.15.158","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-04-02","domain_rank":0,"first_seen":"2026-06-11T07:30:17.159815Z","last_seen":"2026-08-13T23:41:10.598035Z","alert_count":3,"request_count":1,"received_data":1847,"sent_data":606,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"iv4gcnkpfdnodp3rm73df3m6vnf4ucnpjwdlcsrtmns4li5aljfq.mainnet-1.datasprite-cdn.com","ip":{"addr":"104.21.15.158","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-04-02","domain_rank":0,"first_seen":"2026-06-11T07:30:14.504231Z","last_seen":"2026-08-13T23:41:09.978939Z","alert_count":3,"request_count":1,"received_data":1664,"sent_data":606,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"arbitrum-one.publicnode.com","ip":{"addr":"172.66.150.162","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2016-08-16","domain_rank":3618652,"first_seen":"2023-07-09T07:25:43Z","last_seen":"2026-09-14T04:21:36.921972Z","alert_count":0,"request_count":2,"received_data":1597,"sent_data":1073,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}]},{"fqdn":"bsc.drpc.org","ip":{"addr":"104.18.11.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2005-01-09","domain_rank":2964008,"first_seen":"2023-11-21T22:39:48Z","last_seen":"2026-09-15T14:17:12.573347Z","alert_count":0,"request_count":2,"received_data":993,"sent_data":1043,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"fd7xqs6fnkfawh6qvkmjuuwvub4cbuycyxx3q3romqtbcbt6o4kq.mainnet-1.datasprite-cdn.com","ip":{"addr":"104.21.15.158","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-04-02","domain_rank":0,"first_seen":"2026-06-11T07:30:21.92935Z","last_seen":"2026-08-13T23:41:14.192346Z","alert_count":3,"request_count":1,"received_data":4206,"sent_data":606,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"muyovc3b2336fg4hlwg73n6w7lve6xi5wwagbq3mkm34hz3fufcq.mainnet-1.datasprite-cdn.com","ip":{"addr":"172.67.163.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-04-02","domain_rank":0,"first_seen":"2026-06-11T07:30:18.248141Z","last_seen":"2026-08-13T23:41:09.334025Z","alert_count":3,"request_count":1,"received_data":2334,"sent_data":606,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"qyxbba7uefsmigd4oki3zm3hcmilt5fjudhha7n37oeygwrgdcua.mainnet-1.datasprite-cdn.com","ip":{"addr":"172.67.163.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-04-02","domain_rank":0,"first_seen":"2026-06-11T07:30:16.433983Z","last_seen":"2026-08-13T23:41:09.026773Z","alert_count":3,"request_count":1,"received_data":2160,"sent_data":606,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"h5mmvwl7o3g5kseh6ibvzgyebxak4j4qgqqczbevmgdtkhvbbhaq.mainnet-1.datasprite-cdn.com","ip":{"addr":"172.67.163.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-04-02","domain_rank":0,"first_seen":"2026-06-11T07:30:19.347276Z","last_seen":"2026-08-13T23:41:15.06385Z","alert_count":3,"request_count":1,"received_data":1256,"sent_data":606,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"esm.sh","ip":{"addr":"104.26.15.209","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2020-09-06","domain_rank":47501,"first_seen":"2020-09-23T23:39:41Z","last_seen":"2026-09-23T23:42:35.564928Z","alert_count":0,"request_count":2,"received_data":19573,"sent_data":938,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"f6xwz3lwcfil7qwaikhvuopkgolm7x4zdfqegfkqcoceimvb65bq.mainnet-1.datasprite-cdn.com","ip":{"addr":"104.21.15.158","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-04-02","domain_rank":0,"first_seen":"2026-06-11T07:30:19.714098Z","last_seen":"2026-08-31T08:34:04.283689Z","alert_count":3,"request_count":1,"received_data":1852,"sent_data":606,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"zkrzh37fj2r5lngihbn6q4tvv2yw6qsa2oykho7r7ofhoutwmbiq.mainnet-1.datasprite-cdn.com","ip":{"addr":"104.21.15.158","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-04-02","domain_rank":0,"first_seen":"2026-06-11T07:30:14.510149Z","last_seen":"2026-08-13T23:41:17.42209Z","alert_count":3,"request_count":1,"received_data":2190,"sent_data":606,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"framerusercontent.com","ip":{"addr":"143.204.238.34","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2019-04-29","domain_rank":18507,"first_seen":"2019-05-01T19:48:10Z","last_seen":"2026-09-18T14:55:54.203489Z","alert_count":0,"request_count":1,"received_data":6150,"sent_data":568,"comment":"","tags":null,"fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"gateway.irys.xyz","ip":{"addr":"172.66.167.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2023-03-25","domain_rank":2119884,"first_seen":"2023-11-30T18:58:13Z","last_seen":"2026-09-01T19:50:14.100535Z","alert_count":0,"request_count":57,"received_data":30493,"sent_data":32602,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"vote.88mph.app","ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":3,"received_data":592858,"sent_data":1488,"comment":"","tags":null,"fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}]},{"fqdn":"3piw7lupog56srrpctt46tuuiroz3dh47v2vjdtocircg3f7u4za.mainnet-1.datasprite-cdn.com","ip":{"addr":"104.21.15.158","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-04-02","domain_rank":0,"first_seen":"2026-06-11T07:30:21.213765Z","last_seen":"2026-08-13T23:41:11.396196Z","alert_count":3,"request_count":1,"received_data":3338,"sent_data":606,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"re3ropp2geh4d5qidoozfesfsagireabcedh4j6agvkzpc463fcq.mainnet-1.datasprite-cdn.com","ip":{"addr":"104.21.15.158","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-04-02","domain_rank":0,"first_seen":"2026-06-11T07:30:22.220629Z","last_seen":"2026-08-13T23:41:10.814565Z","alert_count":3,"request_count":1,"received_data":1818,"sent_data":606,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"bsc-rpc.publicnode.com","ip":{"addr":"172.66.150.162","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2016-08-16","domain_rank":2142410,"first_seen":"2024-05-08T23:22:55Z","last_seen":"2026-09-15T13:51:04.516484Z","alert_count":0,"request_count":2,"received_data":1981,"sent_data":1063,"comment":"","tags":null,"fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"cdn.jsdelivr.net","ip":{"addr":"151.101.65.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2012-05-16","domain_rank":1678,"first_seen":"2012-09-30T00:15:09Z","last_seen":"2026-09-20T23:17:00.144243Z","alert_count":0,"request_count":1,"received_data":23375,"sent_data":502,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"WebAssembly","description":"WebAssembly (abbreviated Wasm) is a binary instruction format for a stack-based virtual machine. Wasm is designed as a portable compilation target for programming languages, enabling deployment on the web for client and server applications.","website":"https://webassembly.org/","common_platform_enumeration":"","icon":"WebAssembly.svg","categories":["Programming languages"]}]},{"fqdn":"egp3uffvpgr2wpafcervpo3f64y2lpvikbnscmfvn3udttq77joq.mainnet-1.datasprite-cdn.com","ip":{"addr":"172.67.163.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-04-02","domain_rank":0,"first_seen":"2026-06-11T07:30:20.987253Z","last_seen":"2026-09-22T20:43:03.766743Z","alert_count":3,"request_count":1,"received_data":2852,"sent_data":606,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"arb1.arbitrum.io","ip":{"addr":"172.66.171.45","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2018-01-03","domain_rank":513999,"first_seen":"2021-05-28T20:40:01Z","last_seen":"2026-09-13T05:29:37.657442Z","alert_count":0,"request_count":2,"received_data":1219,"sent_data":1057,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}]},{"fqdn":"6sab273b7nl3rcdustvjejsgxkwzkkibobj56v5dumz7i6xdbltq.mainnet-1.datasprite-cdn.com","ip":{"addr":"104.21.15.158","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-04-02","domain_rank":0,"first_seen":"2026-06-11T07:30:14.507258Z","last_seen":"2026-08-13T23:41:09.846478Z","alert_count":3,"request_count":1,"received_data":2318,"sent_data":606,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"hkmjhyubcmyt55tyslqmyt4arfmczeuf7xtrysanzghe6n5ezduq.mainnet-1.datasprite-cdn.com","ip":{"addr":"104.21.15.158","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-04-02","domain_rank":0,"first_seen":"2026-06-11T07:30:14.514043Z","last_seen":"2026-08-13T23:41:14.415603Z","alert_count":3,"request_count":1,"received_data":1634,"sent_data":606,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-09-20T22:43:37.149177Z","alert_count":0,"request_count":1,"received_data":49345,"sent_data":572,"comment":"","tags":null,"fingerprints":null},{"fqdn":"bsc-dataseed.bnbchain.org","ip":{"addr":"54.247.133.244","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"domain_registered":"2020-01-13","domain_rank":2077582,"first_seen":"2023-08-03T06:51:11Z","last_seen":"2026-08-31T18:38:47.642874Z","alert_count":0,"request_count":2,"received_data":1863,"sent_data":1069,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"enr4cxf3dl3xz57mcmmg6wlxvi7gda2w5xdradzypkaigsdonhma.mainnet-1.datasprite-cdn.com","ip":{"addr":"104.21.15.158","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-04-02","domain_rank":0,"first_seen":"2026-06-11T07:30:20.285114Z","last_seen":"2026-08-31T08:40:19.245747Z","alert_count":3,"request_count":1,"received_data":2038,"sent_data":606,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"6b5g7comjyz3c4cgalgs5qvnmcfq4arqkx6d2np6kdxclsrmnc6a.mainnet-1.datasprite-cdn.com","ip":{"addr":"104.21.15.158","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-04-02","domain_rank":0,"first_seen":"2026-06-11T07:30:19.219188Z","last_seen":"2026-08-13T23:41:14.014371Z","alert_count":3,"request_count":1,"received_data":1624,"sent_data":606,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"ch75ckxualkloc7t5fsfem56e5odt55sl7lel66ksibigpvzxsda.mainnet-1.datasprite-cdn.com","ip":{"addr":"104.21.15.158","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-04-02","domain_rank":0,"first_seen":"2026-06-11T07:30:20.202753Z","last_seen":"2026-08-13T23:41:09.124781Z","alert_count":3,"request_count":1,"received_data":2026,"sent_data":606,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"ickanb5psbhquhnys6hyxxn5kcs7k75kvqwlajid5qycvq2ijgra.mainnet-1.datasprite-cdn.com","ip":{"addr":"104.21.15.158","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-04-02","domain_rank":0,"first_seen":"2026-06-11T07:30:19.12039Z","last_seen":"2026-08-13T23:41:16.891648Z","alert_count":3,"request_count":1,"received_data":2334,"sent_data":606,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"7ohnisscwweqylohacphls5cmyhfuuworva4o7nypw42xdl6i63a.mainnet-1.datasprite-cdn.com","ip":{"addr":"104.21.15.158","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-04-02","domain_rank":0,"first_seen":"2026-06-11T07:30:22.495466Z","last_seen":"2026-08-13T23:41:15.415102Z","alert_count":3,"request_count":1,"received_data":3056,"sent_data":606,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"tuahnjjbd4ptq2z3dq73mmxdcdpdxt5sjs4uwfluwoxw2i3zrv4q.mainnet-1.datasprite-cdn.com","ip":{"addr":"172.67.163.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-04-02","domain_rank":0,"first_seen":"2026-06-11T07:30:14.511071Z","last_seen":"2026-08-13T23:41:13.931136Z","alert_count":3,"request_count":1,"received_data":2736,"sent_data":606,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"rpc.ankr.com","ip":{"addr":"152.236.9.75","port":443,"asn":7738,"as":"V tal","country":"Brazil","country_code":"BR"},"domain_registered":"2007-04-23","domain_rank":541361,"first_seen":"2021-10-24T12:41:06Z","last_seen":"2026-09-18T18:40:22.463723Z","alert_count":0,"request_count":4,"received_data":3250,"sent_data":2108,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"zxdcgrwdlct5d5hkzf5ikt35hpxjgyetcpfzrvlhwzw2f6fnevbq.mainnet-1.datasprite-cdn.com","ip":{"addr":"104.21.15.158","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-04-02","domain_rank":0,"first_seen":"2026-06-11T07:30:19.915588Z","last_seen":"2026-08-13T23:41:14.380115Z","alert_count":3,"request_count":1,"received_data":1722,"sent_data":606,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"jfrwbu3xjectzwr6zpvpvbewqkwb3tvpr7kikhkfa7gcmzugoycq.mainnet-1.datasprite-cdn.com","ip":{"addr":"104.21.15.158","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-04-02","domain_rank":0,"first_seen":"2026-06-11T07:30:22.683703Z","last_seen":"2026-09-22T20:45:15.469104Z","alert_count":3,"request_count":1,"received_data":2336,"sent_data":606,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"bsc.publicnode.com","ip":{"addr":"172.66.150.162","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2016-08-16","domain_rank":3431031,"first_seen":"2023-04-05T12:56:41Z","last_seen":"2026-09-18T18:40:24.09497Z","alert_count":0,"request_count":2,"received_data":1981,"sent_data":1055,"comment":"","tags":null,"fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"pinky-goat.digital","ip":{"addr":"172.67.178.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-07-28T16:44:53.164795Z","last_seen":"2026-09-14T13:18:52.422124Z","alert_count":1,"request_count":1,"received_data":5316626,"sent_data":467,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"lzqmfxcfxzkmtpb2kkhciww2krq6nbxvcrakzllef64mn2325ugq.mainnet-1.datasprite-cdn.com","ip":{"addr":"172.67.163.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-04-02","domain_rank":0,"first_seen":"2026-06-11T07:30:17.165286Z","last_seen":"2026-08-31T08:37:13.328176Z","alert_count":3,"request_count":1,"received_data":2530,"sent_data":606,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"b6ktecz7yjy6fzgzlivivwfm4xtjvavuqbddceaslq46lxbuw2wq.mainnet-1.datasprite-cdn.com","ip":{"addr":"104.21.15.158","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-04-02","domain_rank":0,"first_seen":"2026-06-11T07:30:16.415795Z","last_seen":"2026-08-13T23:41:17.365981Z","alert_count":3,"request_count":1,"received_data":1972,"sent_data":606,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"aa5xkwqvefm3tszfisosqh6wdakhahxso3jyl5d5wsibuczex6ma.mainnet-1.datasprite-cdn.com","ip":{"addr":"104.21.15.158","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-04-02","domain_rank":0,"first_seen":"2026-06-11T07:30:16.930397Z","last_seen":"2026-09-22T20:45:10.668363Z","alert_count":3,"request_count":1,"received_data":3458,"sent_data":605,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"rahqtny5jec73ifzc2gg5x3d5s6bznpxhj4g3ky25pp5g2l7y7pq.mainnet-1.datasprite-cdn.com","ip":{"addr":"172.67.163.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-04-02","domain_rank":0,"first_seen":"2026-06-11T07:30:21.819472Z","last_seen":"2026-08-13T23:41:14.689513Z","alert_count":3,"request_count":1,"received_data":2274,"sent_data":606,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"lqm65l4rsie7lcqzwyygqd4xmycpt6vpx7jqzqhlj6x4xnaxvvva.mainnet-1.datasprite-cdn.com","ip":{"addr":"104.21.15.158","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-04-02","domain_rank":0,"first_seen":"2026-06-11T07:30:15.472116Z","last_seen":"2026-08-13T23:41:13.337186Z","alert_count":3,"request_count":1,"received_data":2752,"sent_data":606,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"65anjlffv6f37wsp5aoj34ltgjeakkozcoaujzb6feeub2bhg67a.mainnet-1.datasprite-cdn.com","ip":{"addr":"104.21.15.158","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-04-02","domain_rank":0,"first_seen":"2026-06-11T07:30:14.502245Z","last_seen":"2026-08-13T23:41:14.736804Z","alert_count":3,"request_count":1,"received_data":1839,"sent_data":606,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"firelight.run/","fqdn":"firelight.run","domain":"firelight.run","tld":"run"},"ip":{"addr":"104.21.13.148","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"af9a8d0c3e1a82d9bd75e1948f57771f","sha1":"1ef74ab8ad42ea405ae85eafe976eadb4910a646","sha256":"34ce2a229b4139028e57381170b7d41cbbf7f54ea562f72913ad311bb72d13da","sha512":"142184ef90fb557244e5bd7e7935a50648e2fc4064603a2d3c14bdd8cb936af8da6ca376b4acb2523d2d614975e0fc469f32b1c7375f8b24e444cd9dc369115b","ssdeep":"6144:s2AWwzYspp5dhWPIpBz4qclU16j6pdS3cRT5r:sfWwvpKPIpBUlKg2T5r","tlshash":"5be504fb96be1e3eccb3551cdc356e0c98b504a60a2ee05efa277488c57d69513a032d","size":3214491,"data":"","first_seen":"2026-09-25T05:38:00.143392Z","last_seen":"2026-09-25T06:10:52.738597Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"firelight.run/af25db88-797f-4748-b4e9-62fda1562092","fqdn":"firelight.run","domain":"firelight.run","tld":"run"},"ip":{"addr":"104.21.13.148","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"","is_inline":false,"md5":"fe8234cbd1cdd5966074b3037cada479","sha1":"b14ac475b831cc60c9da81068952475258c1e67c","sha256":"31dd9f4ece4c6a0d7855391ebe01e3c21bfb6f7748b825e30b3223a43b69078e","sha512":"0e5d7a91b427121bda2e1119c5fbe92db55bf53f045f492dda47e16786c5b14938d337591a9d5d392a5d69c8db7e6c277c5a6b5e9daafa1dccfd9c11b8a14096","ssdeep":"","tlshash":"4a517250b734a5ae0792cac778f63263a5244b283d6ed811d1af8e4337970d205dbf38","size":2995,"data":"","first_seen":"2026-06-10T00:36:37.858875Z","last_seen":"2026-09-25T06:10:52.733919Z","times_seen":214,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vote.88mph.app/VmMCJGSn0d3iF4K.js?v=3","fqdn":"vote.88mph.app","domain":"88mph.app","tld":"app"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"e7db85be86b63b0a80b101f162451357","sha1":"6a3d44c90d262d8c573e85302c496813dac5c75e","sha256":"a09d895f3902eeee47c2d1d34d1f3139154874c11d5be50211b2d20dbf76bcde","sha512":"5ca33c2e2f2f25e715eadf8513b70910c76efda39446227ba54f87602e7e65f1eccaa290433ef76aca518d9d485f1fb471482daa404a9bc5951e2186aceb38bd","ssdeep":"3072:VqiVnv40OFTikYdji2RmGO8gBwi2RmGO8SHY+NcByLNNYpNntaIIbVEzmxbvvy0e:rGliHdoIWEK1vPXi4s49GiUlLFGZo","tlshash":"dfc42a95b3b4b022839d65a5482b2045f33af96d580a002cf668fcfb7da5544ab7ff70","size":582087,"data":"","first_seen":"2026-09-22T20:45:22.597306Z","last_seen":"2026-09-25T06:10:52.716031Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"firelight.run/","fqdn":"firelight.run","domain":"firelight.run","tld":"run"},"ip":{"addr":"104.21.13.148","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"ab90d2a9817cf95d5f8fcbc8ff00d142","sha1":"772dd8d36f9c71258caeb7bc061eaf637503a284","sha256":"b66d182b7ba37ae5a14f86e40b59af61cc324f4c17578a3cf92f8673e6876a73","sha512":"ad31a90297706dcf3eae91f6968bdd1ba0ef199a73a3c7d8906bef0f9ca854b17b5f035f3e33edc7893468a6ad525e8f4be68aca8d05748d0447bd21fa81f1e3","ssdeep":"98304:n9FM29B0k9kMNd2c19Gx1CJxHn2x5tOgdsTQJnMkxWtgwEe:n9FM29B0k9kMNd2c19GxCxHn2x5tOgd4","tlshash":"6b269dd20908f672d1b8d0d6bb4320f75f4a966d16b20a7d5a72f72899fde13eee1004","size":4510030,"data":"","first_seen":"2026-09-25T05:38:00.146246Z","last_seen":"2026-09-25T06:10:52.721897Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"esm.sh/disable-devtool","fqdn":"esm.sh","domain":"esm.sh","tld":"sh"},"ip":{"addr":"104.26.15.209","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"97c69ddec5a41bfd71d4e46f03aa3a66","sha1":"6632a0a55d48d322450a0a0147526f0e91b4cc0b","sha256":"bbd0cbecbc43488ec920e0660e7a0b903af3d9fcd3114421a7620f55ffa98792","sha512":"80e5b974e51b127e2b9c0f227c6cc0b302351806ae1947f0691cb18a67d3743f4390cfe8d0d45f57ab6f5ba899eae8775fdd776edcdb2c0c733997bb38abd90b","ssdeep":"","tlshash":"66c08c10c033f0382a308cb832b4eaefe3a302c6d20c52b88e04022c93cf100d22cba4","size":181,"data":"","first_seen":"2026-05-26T18:42:46.141539Z","last_seen":"2026-09-25T06:10:52.663801Z","times_seen":151,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"esm.sh/disable-devtool@0.3.9/es2022/disable-devtool.mjs","fqdn":"esm.sh","domain":"esm.sh","tld":"sh"},"ip":{"addr":"104.26.15.209","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"6f134aa0a4c14df6fe081e2a6643f4bf","sha1":"61989a9857651a3e6e67a4f56bd65a0ac61e1faf","sha256":"f24cb4d56e23c43c0f5927a4ab308c23741e40fbb13e3996e3c42679982559a9","sha512":"b2b21f9c85678b62e77b009768a4ce7fcd1332410817c76f1fc8bff5595edf99fa48b353886413d0952504c7d1629fd4983751c8361bff9edf79d5bec6db839f","ssdeep":"384:XTkAes3CkB0YatnIE3EmI/N62D7LI2fU6HFvQxCN:P3Ck5ibEPt7bU6lvECN","tlshash":"b982c5dcf55770706bb2b9b4403f450ab2367856908c8440e669c8e06eb856fe27bf3e","size":18401,"data":"","first_seen":"2026-05-26T18:42:46.16671Z","last_seen":"2026-09-25T06:10:52.679921Z","times_seen":131,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"firelight.run/assets/alpha-cacheplus.js","fqdn":"firelight.run","domain":"firelight.run","tld":"run"},"ip":{"addr":"104.21.13.148","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"e58753549c6ba131096c4689bb9535b3","sha1":"0a87317622152c91432e9d6cccf6f8849c1384ec","sha256":"d79e1792b519fc10ea361344289d90880bbe195e0180bafce744daee77304742","sha512":"c534a05b157498f742ba2475ed3dfbf8b78e98575efa01c722ad7206f21437431b9125ca41753a023615d463bc9abf11c1612cf7757b98998b99be98c7c4ebee","ssdeep":"6144:auS6ez70ibf9PPiJIBjz4qWlU56j6pdS3cRH5L:aJ6ezjb8JIBjulIg2H5L","tlshash":"19f5b2f717a98a3ec0bfec49dd356c0c91b4ca940e1e5156fd23a95bcb8caa8435874c","size":3562979,"data":"","first_seen":"2026-09-25T05:38:00.148291Z","last_seen":"2026-09-25T06:10:52.733026Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pinky-goat.digital/xTq1G4zCETaHmvGJzFPgG.js","fqdn":"pinky-goat.digital","domain":"pinky-goat.digital","tld":"digital"},"ip":{"addr":"172.67.178.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"e5458f7414fc4c5379f41c71438531b5","sha1":"4447b0352d566d066c991aafb1568f2c109bcad2","sha256":"1ebd081006c1d6a9d20bb48b863ee6f5c3aa68b7f6b2dd38dcd17be6ed8c7baf","sha512":"46bdab92548c235cafd21459311199bccc27555e1165f1389f38133edd67713339b8638eb52074e853ed6571b59cef578ac6c2f07d57eb2ec7ecde32a8a333c9","ssdeep":"98304:SFEUyYHhc2990k9kiNd2c19a1HaJl9n8x5tOed4HIJnMkxEN4wOo:0EUyYHhc2990k9kiNd2c19a1Al9n8x5W","tlshash":"6336efd31908f672d1b8d0d6ab4320f66f4a966d1672063d5a72fb2d99fce13eee1010","size":5315824,"data":"","first_seen":"2026-09-25T05:38:00.150052Z","last_seen":"2026-09-25T06:10:52.743605Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vote.88mph.app/LjjKLFLseByZ8Sz.js?v=3","fqdn":"vote.88mph.app","domain":"88mph.app","tld":"app"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"fe2718948e75a18f006312971787a278","sha1":"35edbae2538948c2936749e4339cf7d130bca214","sha256":"5e86eba892ccf44a9c898eb57ca739ae0e91027eb9d76ea729e359325786b751","sha512":"d63cf2cd07bf4feedebaa14a79186b8f8097006ad3f67ae481e3f0d979034c18d696f6daa02c7bd15d464202a7422d39a4efe1b178fca74d49c184711a0a4660","ssdeep":"192:uZERENIJLi4BYVuSNdJt8cyWAcLoxYYp0t:uGREKJ2GYVnfJt8cyWXeot","tlshash":"cdf184d9f3d1b0a513a70a34357f6646f13b6191560d10208399d8f23ef7dab8927f88","size":7878,"data":"","first_seen":"2026-09-22T20:45:22.605281Z","last_seen":"2026-09-25T06:10:52.703535Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"error","text":"Error while calling actor 'source's method 'source'Could not load the source for wasm:https://pinky-goat.digital/xTq1G4zCETaHmvGJzFPgG.js%20line%2021%20%3E%20WebAssembly.compile.\nError: WebAssembly binary source is not available\nStack: _getSourceText@resource://devtools/server/actors/source.js:241:20\nsource@resource://devtools/server/actors/source.js:541:51\nhandler@resource://devtools/shared/protocol/Actor.js:228:37\nonPacket@resource://devtools/server/devtools-server-connection.js:371:58\n_onMessage@resource://devtools/shared/transport/worker-transport.js:104:18\nLine: 241, column: 20","filename":"resource://devtools/shared/protocol/Actor.js","line_number":112,"column_number":13},{"level":"error","text":"Could not load the source for wasm:https://pinky-goat.digital/xTq1G4zCETaHmvGJzFPgG.js%20line%2021%20%3E%20WebAssembly.compile.\nError: WebAssembly binary source is not available\nStack: _getSourceText@resource://devtools/server/actors/source.js:241:20\nsource@resource://devtools/server/actors/source.js:541:51\nhandler@resource://devtools/shared/protocol/Actor.js:228:37\nonPacket@resource://devtools/server/devtools-server-connection.js:371:58\n_onMessage@resource://devtools/shared/transport/worker-transport.js:104:18\nLine: 241, column: 20","filename":"resource://devtools/shared/protocol/Actor.js","line_number":119,"column_number":15},{"level":"error","text":"Error while calling actor 'source's method 'source'Could not load the source for wasm:https://pinky-goat.digital/xTq1G4zCETaHmvGJzFPgG.js%20line%2021%20%3E%20WebAssembly.compile.\nError: WebAssembly binary source is not available\nStack: _getSourceText@resource://devtools/server/actors/source.js:241:20\nsource@resource://devtools/server/actors/source.js:541:51\nhandler@resource://devtools/shared/protocol/Actor.js:228:37\nonPacket@resource://devtools/server/devtools-server-connection.js:371:58\n_onMessage@resource://devtools/shared/transport/worker-transport.js:104:18\nLine: 241, column: 20","filename":"resource://devtools/shared/protocol/Actor.js","line_number":112,"column_number":13},{"level":"error","text":"Could not load the source for wasm:https://pinky-goat.digital/xTq1G4zCETaHmvGJzFPgG.js%20line%2021%20%3E%20WebAssembly.compile.\nError: WebAssembly binary source is not available\nStack: _getSourceText@resource://devtools/server/actors/source.js:241:20\nsource@resource://devtools/server/actors/source.js:541:51\nhandler@resource://devtools/shared/protocol/Actor.js:228:37\nonPacket@resource://devtools/server/devtools-server-connection.js:371:58\n_onMessage@resource://devtools/shared/transport/worker-transport.js:104:18\nLine: 241, column: 20","filename":"resource://devtools/shared/protocol/Actor.js","line_number":119,"column_number":15}]},"http":[{"url":{"schema":"https","addr":"firelight.run/37ff3688bc9e5c4ce51a0deb73d5ac807a3b2a52.svg","fqdn":"firelight.run","domain":"firelight.run","tld":"run"},"ip":{"addr":"104.21.13.148","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://firelight.run/","date":"2026-09-25T05:36:49.851Z","timestamp":1790314609851,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"firelight.run","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 24 Sep 2026 11:54:24 GMT","end":"Wed, 23 Dec 2026 11:54:23 GMT"},"fingerprint":{"sha1":"02:54:09:B5:1A:C4:80:FE:25:D5:90:D5:C2:96:72:47:EA:08:E4:AE","sha256":"3B:A7:9F:77:5F:07:1D:DF:C1:4E:DC:82:26:78:98:F9:C7:9C:E6:6F:08:FA:7C:0D:00:C0:A7:B5:72:83:E1:45"}}},"request":{"raw":"GET /37ff3688bc9e5c4ce51a0deb73d5ac807a3b2a52.svg HTTP/1.1\r\nHost: firelight.run\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://firelight.run/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 25 Sep 2026 05:36:49 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1e%2FrtHymCPnk%2BGrcprecJ5xgu736YM9UkOR4p5uum4sogtb2KbDWjseVvIiUhD0qwmbhI1Ft1u6NOloboBMt9uR6%2FA4ND7grfAk3ICIDfj%2Fc7UPmA%2FEaPnklZ%2BWEg%2F87\"}]}\r\nlast-modified: Tue, 21 Apr 2026 11:39:44 GMT\r\npriority: u=4,i\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"69e76200-f27\"\r\nage: 3\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a407ac679e522efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3879,"size_decoded":2063,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"d52d6a01e6c96b24719b6988fe5e7b97","sha1":"37ff3688bc9e5c4ce51a0deb73d5ac807a3b2a52","sha256":"2243915c6eddc18a5dded6f2221560e7d2629743bc797b691817543b22cd8d2a","sha512":"0067e9b7b9e0d5eadbb8ec8bdfab711c0a24e5de633aa6bfabee210da9c0eeacb8098b4d2554d9d809fe9a9bc771b6f9b586eb8790326dd0bc87ac32df9f8870","ssdeep":"","tlshash":"ac81c0ffff2427be6469a3daf613109a7c85f8a826818e81c18cdd8556e1c8d95cd8c1","first_seen":"2026-04-24T15:23:09.431445Z","last_seen":"2026-09-25T05:38:01.301201Z","times_seen":18,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-25","alert":"Phishing Block","trigger":"firelight.run","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"firelight.run","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"firelight.run","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"arbitrum.gateway.tenderly.co/","fqdn":"arbitrum.gateway.tenderly.co","domain":"tenderly.co","tld":"co"},"ip":{"addr":"35.227.193.242","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://firelight.run/","date":"2026-09-25T05:36:50.402Z","timestamp":1790314610402,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gateway.tenderly.co","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 14 Aug 2026 17:05:13 GMT","end":"Thu, 12 Nov 2026 17:05:12 GMT"},"fingerprint":{"sha1":"3C:49:6B:54:E6:90:83:A7:6D:1D:85:6C:CE:96:95:BA:4F:5E:55:23","sha256":"0B:F3:1B:F3:1C:34:BF:C5:3C:C4:C5:D7:82:EE:73:AB:76:EB:51:11:1B:89:CD:E6:C6:FA:42:22:5A:3F:7C:AE"}}},"request":{"raw":"POST / HTTP/1.1\r\nHost: arbitrum.gateway.tenderly.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://firelight.run/\r\nContent-Type: application/json\r\nContent-Length: 136\r\nOrigin: https://firelight.run\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":136,"data":"{\"jsonrpc\":\"2.0\",\"method\":\"eth_call\",\"params\":[{\"to\":\"0x967530969F5e5c94E0dC7247e9355e62e0ED65B2\",\"data\":\"0x3bc5de30\"},\"latest\"],\"id\":1}"}},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\ncontent-type: application/json; charset=utf-8\r\nvary: Origin\r\nx-tdly-egress-limit: 1000000000\r\nx-tdly-egress-remaining: 999999578\r\nx-tdly-egress-reset-timestamp: 1790401007258\r\nx-tdly-limit: 20\r\nx-tdly-remaining: 16\r\nx-tdly-reset-timestamp: 1790314611578\r\ndate: Fri, 25 Sep 2026 05:36:50 GMT\r\ncontent-length: 422\r\nx-envoy-upstream-service-time: 4\r\nserver: envoy\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":422,"size_decoded":925,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"ab9dc584493aebbfb8a6a6fe74350054","sha1":"25a2423d85a9ef75b3843031964ffe55e9e54799","sha256":"8a6c77dc23706086bed48ede4f90d407fa6f2d47a7513fedad72e46913172ecc","sha512":"76b72ca7ca88f9f58f799ad536fbd7a8070fa3a97ae18d65163467b654bfe72375f5b20e07a2d678e0eed750671c0b22349447f901f55b7f22405dc550f1fb08","ssdeep":"","tlshash":"18e02bd0f9849c61e5c49f19b3007a88792837558dc40b83085c450a29a9b19bf0ca89","first_seen":"2026-09-25T05:38:00.03517Z","last_seen":"2026-09-25T06:10:52.658678Z","times_seen":9,"resource_available":true,"data":null}},"time_used":46,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":46,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"arbitrum.gateway.tenderly.co","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"framerusercontent.com/images/Xl0qRJRthxbLyXf5wUwVv5npiIQ.png","fqdn":"framerusercontent.com","domain":"framerusercontent.com","tld":"com"},"ip":{"addr":"143.204.238.34","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://firelight.run/","date":"2026-09-25T05:36:50.738Z","timestamp":1790314610738,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"framerusercontent.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Tue, 15 Sep 2026 00:00:00 GMT","end":"Wed, 31 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"3B:A6:0F:A5:97:7E:1D:DF:B7:B6:87:60:B7:8C:F7:57:14:93:9C:5A","sha256":"D2:A0:3E:5C:B8:C4:2B:5F:20:14:16:A5:5E:DB:4A:88:8E:B5:8E:CA:C6:4F:EE:76:16:02:F2:BB:70:89:93:09"}}},"request":{"raw":"GET /images/Xl0qRJRthxbLyXf5wUwVv5npiIQ.png HTTP/1.1\r\nHost: framerusercontent.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://firelight.run/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: CloudFront\r\ncontent-type: image/avif\r\nserver-timing: cdn-cache-hit,cdn-pop;desc=\"ARN53-P4\",cdn-hit-layer;desc=\"EDGE\",cdn-rid;desc=\"VH4xIFIajVKXGriU4NnUNxiK6EbfyTdqofh1vYfYiWevWUe3dF4Hiw==\",cdn-downstream-fbl;dur=4\r\nage: 9220711\r\ndate: Wed, 10 Jun 2026 12:18:18 GMT\r\nx-amzn-trace-id: Root=1-6a295609-17939d143800372839e05901;Sampled=1;Lineage=1:f456f256:0\r\nx-amzn-requestid: ac0cb730-5312-4c15-89a5-20125af0b799\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-xss-protection: 0\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: deny\r\ncontent-security-policy: default-src 'none'; script-src 'none'; img-src 'self'; media-src 'self'; report-uri https://framer.report-uri.com/r/t/csp/enforce;\r\ncache-control: public, max-age=31536000, stale-while-revalidate=31536000\r\nx-content-type-options: nosniff\r\netag: \"195cd0def800c3ff71bb6ff9c79a7746\"\r\ncross-origin-resource-policy: cross-origin\r\nvary: Accept\r\nx-cache: Hit from cloudfront\r\nx-amz-cf-id: VH4xIFIajVKXGriU4NnUNxiK6EbfyTdqofh1vYfYiWevWUe3dF4Hiw==\r\nvia: 1.1 b682a022c770adab7986c6e1902d95ae.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P4\r\ntiming-allow-origin: *\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4902,"size_decoded":6150,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"195cd0def800c3ff71bb6ff9c79a7746","sha1":"46f1d6d74900cb5b7ab3e2fc6553fdfd5fc1e86a","sha256":"abfc6337ee7126202262b8183429e80be853b4fba8b5d043accd4e165e4233ba","sha512":"ab975aca9981f6db98385a51ff3cc3dab2d0aee8568a86ecbcf99e35b7eeab23f46904129e0776cd9ae262c26f487819ccfd35aca27e05e96ababcef44199832","ssdeep":"96:rGgbisyRqYHRd1RX6Q/127lc6MGICr8WQIimmTCPmJ+u+Y:rGSiKYHV/Q7lQ5I3Q6mTirTY","tlshash":"eda15d45dfb05e00dead5eb8810c473e3364d2e48a3a9eb358823140af857ada959b7d","first_seen":"2026-04-24T15:23:09.426942Z","last_seen":"2026-09-25T05:38:01.302534Z","times_seen":26,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":3,"connect":16,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gateway.irys.xyz/7ND2SiYwsfvAPwL9K4ZdpbAi3iABc5jpoJqvVdppHRsY","fqdn":"gateway.irys.xyz","domain":"irys.xyz","tld":"xyz"},"ip":{"addr":"172.66.167.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://firelight.run/","date":"2026-09-25T05:36:51.369Z","timestamp":1790314611369,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gateway.irys.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 20 Sep 2026 11:49:06 GMT","end":"Sat, 19 Dec 2026 11:49:05 GMT"},"fingerprint":{"sha1":"1B:75:8F:42:C3:0D:D3:04:72:4A:4F:BC:B0:44:35:11:BD:B0:C1:3A","sha256":"5D:7C:E7:8F:C7:B7:35:6E:0D:92:E6:E6:6C:71:F4:0D:D9:DE:7D:74:E5:56:33:7F:8D:2C:15:B1:80:E9:5D:E0"}}},"request":{"raw":"GET /7ND2SiYwsfvAPwL9K4ZdpbAi3iABc5jpoJqvVdppHRsY HTTP/1.1\r\nHost: gateway.irys.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://firelight.run/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 \r\ndate: Fri, 25 Sep 2026 05:36:51 GMT\r\ncontent-length: 0\r\nlocation: https://l2kourp7xt2ar7nw3fpgqmxu3mvfli4qxvsvx3cacditkaifq6rq.mainnet-1.datasprite-cdn.com/7ND2SiYwsfvAPwL9K4ZdpbAi3iABc5jpoJqvVdppHRsY/\r\nserver: cloudflare\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-credentials: true\r\ncache-control: no-store\r\naccess-control-expose-headers: location, cache-control\r\nx-cache-status: BYPASS\r\ncf-cache-status: BYPASS\r\ncf-ray: a407ac711de55687-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/webp","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-25T12:27:37.283953Z","times_seen":18651356,"resource_available":true,"data":null}},"time_used":162,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":162,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bsc.drpc.org/","fqdn":"bsc.drpc.org","domain":"drpc.org","tld":"org"},"ip":{"addr":"104.18.11.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://firelight.run/","date":"2026-09-25T05:36:51.639Z","timestamp":1790314611639,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"drpc.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 13 Aug 2026 01:49:22 GMT","end":"Wed, 11 Nov 2026 02:49:11 GMT"},"fingerprint":{"sha1":"1D:AA:98:9C:F7:ED:CA:BA:5E:92:74:4B:18:3B:83:D6:0C:A4:D7:3C","sha256":"71:EB:00:B8:D0:6F:B9:E3:E0:9D:2C:E5:6B:57:0E:BA:4D:41:8C:64:EB:3E:B0:D8:8E:54:49:8D:2D:50:A2:65"}}},"request":{"raw":"POST / HTTP/1.1\r\nHost: bsc.drpc.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://firelight.run/\r\nContent-Type: application/json\r\nContent-Length: 136\r\nOrigin: https://firelight.run\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":136,"data":"{\"jsonrpc\":\"2.0\",\"method\":\"eth_call\",\"params\":[{\"to\":\"0x6981E9EA7023a8407E4B08ad97f186A5CBDaFCf5\",\"data\":\"0x3bc5de30\"},\"latest\"],\"id\":1}"}},"response":{"raw":"HTTP/3 429 \r\ndate: Fri, 25 Sep 2026 05:36:52 GMT\r\ncontent-type: application/json\r\naccess-control-allow-origin: *\r\nvary: Accept-Encoding\r\nx-drpc-provider-id: \r\nx-drpc-trace-id: 925f10203a2f1859ae9ebd467ec0a62f\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\ncf-ray: a407ac749f7d56ca-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"429","status_text":"Too Many Requests","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":124,"size_decoded":551,"mime_type":"application/json","magic":"JSON text data","md5":"51aa7b6299f3a1b34565c5f51c4c77a7","sha1":"aaa951b258f94d7e824dbbceeb80c77b13a7f721","sha256":"2e181fd7ef06029befd3261469703795f1192e8fedcf64991a998df72b4b7c2b","sha512":"1dcb1dac9a3ef089790a53db0b5e9cef8e97423653d941c3d73445303c042670e9193fb2df2031914759121fca13bdc9ac498215aee809cad66f72d9007abd92","ssdeep":"","tlshash":"ddb092f0519f0eb68b0b4943b90da1a6bc6adec047901f4a098c8668658915eca5b26a","first_seen":"2026-07-30T05:56:29.757796Z","last_seen":"2026-09-25T06:10:52.68894Z","times_seen":6,"resource_available":true,"data":null}},"time_used":164,"timings":{"blocked":65,"dns":0,"connect":0,"send":0,"wait":99,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"public-bsc.nownodes.io/","fqdn":"public-bsc.nownodes.io","domain":"nownodes.io","tld":"io"},"ip":{"addr":"104.20.35.2","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://firelight.run/","date":"2026-09-25T05:36:51.645Z","timestamp":1790314611645,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nownodes.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 05 Sep 2026 07:43:33 GMT","end":"Fri, 04 Dec 2026 08:43:22 GMT"},"fingerprint":{"sha1":"71:29:AE:AD:E1:8E:3D:33:85:27:FC:0B:61:59:DF:56:DD:53:53:4C","sha256":"57:6C:66:02:2E:5E:D3:E3:78:20:F0:AB:75:A0:F1:8B:0B:E9:4F:BB:AD:BC:F0:67:25:93:6E:FC:E3:05:EC:88"}}},"request":{"raw":"OPTIONS / HTTP/1.1\r\nHost: public-bsc.nownodes.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://firelight.run/\r\nOrigin: https://firelight.run\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 \r\ndate: Fri, 25 Sep 2026 05:36:51 GMT\r\ncontent-type: text/plain; charset=utf-8\r\nserver: cloudflare\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Authorization,DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,api-key\r\naccess-control-max-age: 1728000\r\ncf-cache-status: DYNAMIC\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncf-ray: a407ac72e80d56a9-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":504,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-25T12:27:37.283953Z","times_seen":18651356,"resource_available":true,"data":null}},"time_used":68,"timings":{"blocked":-1,"dns":2,"connect":1,"send":0,"wait":46,"receive":0,"ssl":17},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fd7xqs6fnkfawh6qvkmjuuwvub4cbuycyxx3q3romqtbcbt6o4kq.mainnet-1.datasprite-cdn.com/3m3FKCoECFJAoQovnGLen1UBqXpwQHgYWfhkuFUywtxc/","fqdn":"fd7xqs6fnkfawh6qvkmjuuwvub4cbuycyxx3q3romqtbcbt6o4kq.mainnet-1.datasprite-cdn.com","domain":"datasprite-cdn.com","tld":"com"},"ip":{"addr":"104.21.15.158","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://firelight.run/","date":"2026-09-25T05:36:51.758Z","timestamp":1790314611758,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"datasprite-cdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 01 Sep 2026 16:12:35 GMT","end":"Mon, 30 Nov 2026 17:12:28 GMT"},"fingerprint":{"sha1":"A7:49:1F:BA:09:CF:9C:E9:55:85:E1:3E:6A:46:2B:56:1A:DD:E7:32","sha256":"57:8A:D0:59:59:01:19:C2:80:F0:3E:E8:83:04:E6:8C:0B:A5:94:44:42:21:A0:F5:48:2D:7F:8D:19:15:08:52"}}},"request":{"raw":"GET /3m3FKCoECFJAoQovnGLen1UBqXpwQHgYWfhkuFUywtxc/ HTTP/1.1\r\nHost: fd7xqs6fnkfawh6qvkmjuuwvub4cbuycyxx3q3romqtbcbt6o4kq.mainnet-1.datasprite-cdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://firelight.run/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 25 Sep 2026 05:36:51 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\npriority: u=5,i\r\nvary: Origin\r\nx-irys-item-id: 3m3FKCoECFJAoQovnGLen1UBqXpwQHgYWfhkuFUywtxc\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-content-type: image/webp\r\nx-content-length: 3334\r\ncache-control: max-age=2592000\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AW8KkE8h4nRiJf%2FMrcCFYABKUIdCZxHCs929KhsRiDNCzZSTlP7PRQ6hvFFAZTeW2vY2cOO91e1hBqJFuaAMIY5BkmTTXAWQZJiW5KKSKgX8b0abc%2B01VsVO07RWO6Q43JP7cRQaG1pZdK9jRFi37LxKcftAj9xI3x6hU8OEGKnaO0kO1S2ierQzxoRJOENtAoFRPTlhULPGQs5i8up4E3piFGk%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a407ac73cdadb509-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 3334\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3334,"size_decoded":4206,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"adb282163d619a97ec44427f12df5d43","sha1":"a1c10417ed604229709795569d570036980334ae","sha256":"1fbbb4ff9c79d6a4c0d0545c410149d1b69fb38eeb25c787af7a91cc385701de","sha512":"cba016d4aa33a2753e9635ac97245e16d05965403d948a7996528f0514645f34b759b5978c4add2fe7adae5b32c7ce6e7ba50bd76cdda04a8f66108ed350b776","ssdeep":"","tlshash":"53614bdb0b0ea0a5147534360548fc1a315b87f07ba4faae2382cc689ea81f5da7c1d4","first_seen":"2024-07-08T23:13:45Z","last_seen":"2026-09-25T08:46:09.960113Z","times_seen":571,"resource_available":false,"data":null}},"time_used":208,"timings":{"blocked":-1,"dns":14,"connect":0,"send":0,"wait":194,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"fd7xqs6fnkfawh6qvkmjuuwvub4cbuycyxx3q3romqtbcbt6o4kq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"fd7xqs6fnkfawh6qvkmjuuwvub4cbuycyxx3q3romqtbcbt6o4kq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"fd7xqs6fnkfawh6qvkmjuuwvub4cbuycyxx3q3romqtbcbt6o4kq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rahqtny5jec73ifzc2gg5x3d5s6bznpxhj4g3ky25pp5g2l7y7pq.mainnet-1.datasprite-cdn.com/AA7kJLwyTxzxHDmpsHigApQXVPexXwmEAK6K939kfcX8/","fqdn":"rahqtny5jec73ifzc2gg5x3d5s6bznpxhj4g3ky25pp5g2l7y7pq.mainnet-1.datasprite-cdn.com","domain":"datasprite-cdn.com","tld":"com"},"ip":{"addr":"172.67.163.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://firelight.run/","date":"2026-09-25T05:36:51.812Z","timestamp":1790314611812,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"datasprite-cdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 01 Sep 2026 16:12:35 GMT","end":"Mon, 30 Nov 2026 17:12:28 GMT"},"fingerprint":{"sha1":"A7:49:1F:BA:09:CF:9C:E9:55:85:E1:3E:6A:46:2B:56:1A:DD:E7:32","sha256":"57:8A:D0:59:59:01:19:C2:80:F0:3E:E8:83:04:E6:8C:0B:A5:94:44:42:21:A0:F5:48:2D:7F:8D:19:15:08:52"}}},"request":{"raw":"GET /AA7kJLwyTxzxHDmpsHigApQXVPexXwmEAK6K939kfcX8/ HTTP/1.1\r\nHost: rahqtny5jec73ifzc2gg5x3d5s6bznpxhj4g3ky25pp5g2l7y7pq.mainnet-1.datasprite-cdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://firelight.run/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 25 Sep 2026 05:36:52 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1420\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin\r\nx-irys-item-id: AA7kJLwyTxzxHDmpsHigApQXVPexXwmEAK6K939kfcX8\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-content-type: image/webp\r\nx-content-length: 1420\r\ncache-control: max-age=2592000\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cgViu7XCSgPJGPOYmswogcApD92hSj4hT5GLJI4wFlEwgt7vyLHrCEFmuk5yeVFc61lgmD5ibEcGRKrHgOkOVhJndYdmaRuvHtut1aLrL7iFR%2BOYO%2FJw%2FfkOaPSgvVALRsTj3i85WuOCepvCPCsuuhvcfzJL6hHfFvmIJAt4arjRqRAsqnxF8R1CumMeyI4IUceI8yd%2FyyaoIBVd01qJEuIv5IA%3D\"}]}\r\ncf-ray: a407ac758eb1120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1420,"size_decoded":2274,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 120x120, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"4cc86f8a6321c0d1bc7c8e6b69518857","sha1":"45d314a09a486669bfc809dbcfae28f820566429","sha256":"e8a9d0ed202eae37d485eaa6703840fd0661261e2802731020c7c1268adafa47","sha512":"c53c08b8b033bfbfdf598970fa5a0417e25aefac1fea6812ad29e3a27f8fd478882eefb06a0f5f969d0066f66e9cc68b230cdce354c44337532a3959525b2bfa","ssdeep":"","tlshash":"93213bf99caf4219b702f4a9e811f4de6e58bc10ff09044280b0e6f314780e119ed4d3","first_seen":"2024-06-14T10:37:34Z","last_seen":"2026-09-25T08:46:09.996722Z","times_seen":4448,"resource_available":false,"data":null}},"time_used":672,"timings":{"blocked":233,"dns":11,"connect":10,"send":0,"wait":180,"receive":0,"ssl":78},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"rahqtny5jec73ifzc2gg5x3d5s6bznpxhj4g3ky25pp5g2l7y7pq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"rahqtny5jec73ifzc2gg5x3d5s6bznpxhj4g3ky25pp5g2l7y7pq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"rahqtny5jec73ifzc2gg5x3d5s6bznpxhj4g3ky25pp5g2l7y7pq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"arb1.arbitrum.io/rpc","fqdn":"arb1.arbitrum.io","domain":"arbitrum.io","tld":"io"},"ip":{"addr":"172.66.171.45","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://firelight.run/","date":"2026-09-25T05:36:50.390Z","timestamp":1790314610390,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"arbitrum.io","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 31 Aug 2026 14:06:40 GMT","end":"Sun, 29 Nov 2026 14:06:39 GMT"},"fingerprint":{"sha1":"2E:54:50:59:0F:7E:56:CE:77:95:05:FA:A3:BB:06:E3:41:72:5F:2C","sha256":"8E:29:DE:F8:49:2E:C5:53:C1:DF:97:71:F7:FC:7B:49:B2:AF:01:67:17:63:F8:F8:82:10:8E:7A:A8:9D:B2:ED"}}},"request":{"raw":"OPTIONS /rpc HTTP/1.1\r\nHost: arb1.arbitrum.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://firelight.run/\r\nOrigin: https://firelight.run\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 \r\ndate: Fri, 25 Sep 2026 05:36:50 GMT\r\naccess-control-allow-headers: content-type\r\naccess-control-allow-methods: POST\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 600\r\ncontent-encoding: gzip\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nx-envoy-upstream-service-time: 1\r\ncache-control: no-cache\r\nserver: cloudflare\r\ncf-cache-status: DYNAMIC\r\ncf-ray: a407ac6b0ac55a0f-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":0,"size_decoded":449,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-25T12:27:37.283953Z","times_seen":18651356,"resource_available":true,"data":null}},"time_used":152,"timings":{"blocked":-1,"dns":0,"connect":1,"send":0,"wait":136,"receive":0,"ssl":15},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rpc.ankr.com/arbitrum","fqdn":"rpc.ankr.com","domain":"ankr.com","tld":"com"},"ip":{"addr":"152.236.9.75","port":443,"asn":7738,"as":"V tal","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://firelight.run/","date":"2026-09-25T05:36:50.400Z","timestamp":1790314610400,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"shark.multi-rpc.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Tue, 15 Sep 2026 09:08:08 GMT","end":"Mon, 14 Dec 2026 09:08:07 GMT"},"fingerprint":{"sha1":"5C:21:BA:98:E5:D9:20:AF:E9:BB:74:C7:96:5E:67:7E:0E:35:B7:9F","sha256":"89:8F:A0:D2:17:79:FA:35:38:5E:B2:D1:CC:B9:4B:77:BF:21:D2:BE:7A:9D:22:4E:7B:BE:FD:24:35:91:B9:D4"}}},"request":{"raw":"POST /arbitrum HTTP/1.1\r\nHost: rpc.ankr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://firelight.run/\r\nContent-Type: application/json\r\nContent-Length: 136\r\nOrigin: https://firelight.run\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":136,"data":"{\"jsonrpc\":\"2.0\",\"method\":\"eth_call\",\"params\":[{\"to\":\"0x967530969F5e5c94E0dC7247e9355e62e0ED65B2\",\"data\":\"0x3bc5de30\"},\"latest\"],\"id\":1}"}},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 25 Sep 2026 05:36:50 GMT\r\ncontent-type: application/json\r\ncontent-length: 229\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, PUT, POST, DELETE, PATCH, OPTIONS\r\naccess-control-allow-headers: DNT,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization,solana-client,client-sdk-version,client-sdk-type,client-target-api-version,x-ton-client-version,x-client-name,x-client-version,Accept-Token-Tier,Rpc-Compress,Rpc-Decode\r\naccess-control-expose-headers: Token-Tier\r\naccess-control-max-age: 1728000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":229,"size_decoded":944,"mime_type":"application/json","magic":"JSON text data","md5":"42e136a22281d105bd21fa496816706c","sha1":"bc02950079004b0d4f4bea3888dfd4517cddeeff","sha256":"ede226c79ae326ce9e4b099e9f4dbb4e3d7807da2b793bdfadfafeeb84d7175a","sha512":"a41403da8b9e698eb2823bbe0925160b68682c55d4c64e5c8b27193f8fd8bf4fd118179d26eadb446ed41c2c9c12d46523b6f5094caadaae8a03ba3c1d6bade5","ssdeep":"","tlshash":"33d02313c6470537e34f4633371567c4f559705071105f1b4e1c0315024f97b0255351","first_seen":"2025-04-07T11:34:31.00119Z","last_seen":"2026-09-25T12:44:27.626953Z","times_seen":3148,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ipzqcmr26hbzpnzybg3ewzxzuu26ypvig3lp4irbfe643kmo3g5a.mainnet-1.datasprite-cdn.com/5aFEMn7GceUbCyMFsKjcw8DJY9c9PzWNeJv7ragvUWTT/","fqdn":"ipzqcmr26hbzpnzybg3ewzxzuu26ypvig3lp4irbfe643kmo3g5a.mainnet-1.datasprite-cdn.com","domain":"datasprite-cdn.com","tld":"com"},"ip":{"addr":"172.67.163.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://firelight.run/","date":"2026-09-25T05:36:51.821Z","timestamp":1790314611821,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"datasprite-cdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 01 Sep 2026 16:12:35 GMT","end":"Mon, 30 Nov 2026 17:12:28 GMT"},"fingerprint":{"sha1":"A7:49:1F:BA:09:CF:9C:E9:55:85:E1:3E:6A:46:2B:56:1A:DD:E7:32","sha256":"57:8A:D0:59:59:01:19:C2:80:F0:3E:E8:83:04:E6:8C:0B:A5:94:44:42:21:A0:F5:48:2D:7F:8D:19:15:08:52"}}},"request":{"raw":"GET /5aFEMn7GceUbCyMFsKjcw8DJY9c9PzWNeJv7ragvUWTT/ HTTP/1.1\r\nHost: ipzqcmr26hbzpnzybg3ewzxzuu26ypvig3lp4irbfe643kmo3g5a.mainnet-1.datasprite-cdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://firelight.run/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 25 Sep 2026 05:36:52 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin\r\nx-irys-item-id: 5aFEMn7GceUbCyMFsKjcw8DJY9c9PzWNeJv7ragvUWTT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BJWbCQcBg%2Bwi5CYCb46c%2FZXSslHxzd%2FP1GRfWzZUQxEaOV5WVOhR1xvjZLsuJHlRkS46%2BR%2BKDsuI05o8bBMa2pHch7Jk6bGyjmygMvGnDQz4ElM2UEsLTyyIJztHL2CfCLMOHHzdKAB9DaqZeMEm4qIZHoxXE3nEo3CNh2kBEu9XwWHrY%2Brx5UVBQlTs4Gd%2BpXCc%2FKu2SveqOcmv2e9knyWxuos%3D\"}]}\r\nx-content-type-options: nosniff\r\nx-content-type: image/svg+xml\r\nx-content-length: 2524\r\ncache-control: max-age=2592000\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: zstd\r\ncf-ray: a407ac759ee7120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2524,"size_decoded":1966,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"76f68d848a2ee54aa90236af5bf82583","sha1":"59bc5aca5c3f80a8e736f67aea193d18f45e95ee","sha256":"28e225b36f393cec73b9e2c434e2f491db66c77a7e64fab84be61a213063e3a6","sha512":"048912e9132f414cc34b667ed2a6edabeb1e2c86b501ac687accfb39cbb79709a0e97020bab41b298589a5d8d7c8156cdb6a3ed30a24844f06f8a133fe9d1ac5","ssdeep":"","tlshash":"50514148376c97eda80097f92f15c82af45730d7d195e9a6c2a02f36748a1be0deddc1","first_seen":"2025-04-09T12:00:28.868199Z","last_seen":"2026-09-25T06:10:52.650447Z","times_seen":110,"resource_available":false,"data":null}},"time_used":552,"timings":{"blocked":240,"dns":0,"connect":0,"send":0,"wait":312,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"ipzqcmr26hbzpnzybg3ewzxzuu26ypvig3lp4irbfe643kmo3g5a.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"ipzqcmr26hbzpnzybg3ewzxzuu26ypvig3lp4irbfe643kmo3g5a.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"ipzqcmr26hbzpnzybg3ewzxzuu26ypvig3lp4irbfe643kmo3g5a.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lipjimvtizvuyifeddgmjfapysx6npsrkjjwfy5zxmvkhkoal6ea.mainnet-1.datasprite-cdn.com/74njk3B4UNqUutfcYrw4BdPfvw2YHdMC7oXCH4ywgNiK/","fqdn":"lipjimvtizvuyifeddgmjfapysx6npsrkjjwfy5zxmvkhkoal6ea.mainnet-1.datasprite-cdn.com","domain":"datasprite-cdn.com","tld":"com"},"ip":{"addr":"172.67.163.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://firelight.run/","date":"2026-09-25T05:36:51.825Z","timestamp":1790314611825,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"datasprite-cdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 01 Sep 2026 16:12:35 GMT","end":"Mon, 30 Nov 2026 17:12:28 GMT"},"fingerprint":{"sha1":"A7:49:1F:BA:09:CF:9C:E9:55:85:E1:3E:6A:46:2B:56:1A:DD:E7:32","sha256":"57:8A:D0:59:59:01:19:C2:80:F0:3E:E8:83:04:E6:8C:0B:A5:94:44:42:21:A0:F5:48:2D:7F:8D:19:15:08:52"}}},"request":{"raw":"GET /74njk3B4UNqUutfcYrw4BdPfvw2YHdMC7oXCH4ywgNiK/ HTTP/1.1\r\nHost: lipjimvtizvuyifeddgmjfapysx6npsrkjjwfy5zxmvkhkoal6ea.mainnet-1.datasprite-cdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://firelight.run/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 25 Sep 2026 05:36:52 GMT\r\ncontent-type: image/webp\r\ncontent-length: 2882\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin\r\nx-irys-item-id: 74njk3B4UNqUutfcYrw4BdPfvw2YHdMC7oXCH4ywgNiK\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-content-type: image/webp\r\nx-content-length: 2882\r\ncache-control: max-age=2592000\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Y3PoAXeXvxx6VDjvvdS6GYNbJlNHTnoFZfIH%2BF%2BYeKKJuTlu9JhWFd1o9%2FFjOJ%2FYX2a5CRZTnXdeEZdABCWJ1UHs086fM%2FLK%2FrJz6truremVlktCKwDlqE6b%2Fvci%2Fo3kNZxGiqxM%2BBBooBDR6e4JhGzIejsMRpSA7%2BStggVwls0%2BEyDTHmS9%2BznFLRBt0SQQUyaEejYXWTJqFIaBznYvi7Wy%2Fkw%3D\"}]}\r\ncf-ray: a407ac759ecc120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2882,"size_decoded":3754,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"d8b61c033324d78182bfd7d640196678","sha1":"484f398b8e08e21ba4cf698558e96b279a487f51","sha256":"d6bf599dbff0049dec8d4f08beeb28803a974148c8feeace8345a5237ea6eb40","sha512":"0555bd45dd355a4ce34385e434f1f9c4cfd5eb911a5618166474db77cc9779a376b033149b2945359e78c034d515054cb16aee05141f5698de6c42a690acb31e","ssdeep":"","tlshash":"5d514b3d5ee7c49ac312cdcb342618cb20f9484702815a818c6203fb33b985efd6b8a4","first_seen":"2026-06-10T18:04:23.895397Z","last_seen":"2026-09-25T06:10:52.695026Z","times_seen":47,"resource_available":false,"data":null}},"time_used":539,"timings":{"blocked":233,"dns":0,"connect":0,"send":0,"wait":306,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"lipjimvtizvuyifeddgmjfapysx6npsrkjjwfy5zxmvkhkoal6ea.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"lipjimvtizvuyifeddgmjfapysx6npsrkjjwfy5zxmvkhkoal6ea.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"lipjimvtizvuyifeddgmjfapysx6npsrkjjwfy5zxmvkhkoal6ea.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"muyovc3b2336fg4hlwg73n6w7lve6xi5wwagbq3mkm34hz3fufcq.mainnet-1.datasprite-cdn.com/7p1SUU8Rx3sQFLVxhjXboi5nVLFjCRR1Qn2pbpyBnrXn/","fqdn":"muyovc3b2336fg4hlwg73n6w7lve6xi5wwagbq3mkm34hz3fufcq.mainnet-1.datasprite-cdn.com","domain":"datasprite-cdn.com","tld":"com"},"ip":{"addr":"172.67.163.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://firelight.run/","date":"2026-09-25T05:36:51.826Z","timestamp":1790314611826,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"datasprite-cdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 01 Sep 2026 16:12:35 GMT","end":"Mon, 30 Nov 2026 17:12:28 GMT"},"fingerprint":{"sha1":"A7:49:1F:BA:09:CF:9C:E9:55:85:E1:3E:6A:46:2B:56:1A:DD:E7:32","sha256":"57:8A:D0:59:59:01:19:C2:80:F0:3E:E8:83:04:E6:8C:0B:A5:94:44:42:21:A0:F5:48:2D:7F:8D:19:15:08:52"}}},"request":{"raw":"GET /7p1SUU8Rx3sQFLVxhjXboi5nVLFjCRR1Qn2pbpyBnrXn/ HTTP/1.1\r\nHost: muyovc3b2336fg4hlwg73n6w7lve6xi5wwagbq3mkm34hz3fufcq.mainnet-1.datasprite-cdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://firelight.run/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 25 Sep 2026 05:36:52 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1482\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin\r\nx-irys-item-id: 7p1SUU8Rx3sQFLVxhjXboi5nVLFjCRR1Qn2pbpyBnrXn\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-content-type: image/webp\r\nx-content-length: 1482\r\ncache-control: max-age=2592000\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tUrtLuFINwuYljB0lM5y0oKAh7wamO34G0RMb7Ol2Yip1sX5EJ6X16Zlo5b52WVeDyNnD%2FOEiq4cFZHrMRl7UKV%2F%2Fvs1gJVP3q5Lb8uSVMZkbHBiLTJRL4Kpsom39Tts7Yy5PLZ4fGhgUgdthsfIqfyod2azZ7H5WvWk9gVjijwKHcDlSiqC6eKuL679YtH2NGLXQytZpnur3UhaKpVeyL6Th1I%3D\"}]}\r\ncf-ray: a407ac759ecf120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1482,"size_decoded":2334,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"3752db8f6ed5f7153e767cfa8f3ba14c","sha1":"665ca86662e8f0a28840c7ccaece339887215f00","sha256":"f543811888187e1eeeda76a831f73c8f33661070354c2b10eb874899c41786c5","sha512":"2381b754052fae6facb7a3395184a0b82fb4f909aef66ba35a9927e4d1970a56e23402df3872b4cc255f6e4e59678f85d98eec12de20eb61ca01179189f2b0d1","ssdeep":"","tlshash":"8731c72e2c13bcfde8556a04a55ade176c0cabc8a9acc4896c4cd5be19645114534dc5","first_seen":"2025-01-22T14:57:40.414388Z","last_seen":"2026-09-25T06:10:52.700829Z","times_seen":143,"resource_available":false,"data":null}},"time_used":539,"timings":{"blocked":233,"dns":0,"connect":0,"send":0,"wait":306,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"muyovc3b2336fg4hlwg73n6w7lve6xi5wwagbq3mkm34hz3fufcq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"muyovc3b2336fg4hlwg73n6w7lve6xi5wwagbq3mkm34hz3fufcq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"muyovc3b2336fg4hlwg73n6w7lve6xi5wwagbq3mkm34hz3fufcq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vote.88mph.app/LjjKLFLseByZ8Sz.js?v=3","fqdn":"vote.88mph.app","domain":"88mph.app","tld":"app"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://vote.88mph.app/home.html","date":"2026-09-25T05:36:55.742Z","timestamp":1790314615742,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vote.88mph.app","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 24 Sep 2026 19:03:28 GMT","end":"Wed, 23 Dec 2026 19:03:27 GMT"},"fingerprint":{"sha1":"D4:FD:D9:29:2F:72:43:12:FD:D6:7C:0C:B0:5E:3D:43:DD:22:DF:A1","sha256":"F1:01:33:39:ED:39:48:AD:00:10:0B:36:60:6A:32:34:2A:D3:46:5D:2D:D7:FD:89:49:2B:93:F6:23:74:2E:78"}}},"request":{"raw":"GET /LjjKLFLseByZ8Sz.js?v=3 HTTP/1.1\r\nHost: vote.88mph.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://vote.88mph.app/home.html\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 25 Sep 2026 05:36:55 GMT\r\ncontent-type: application/javascript\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 6620487\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=2592000\r\ncontent-encoding: zstd\r\netag: \"6ab02801-1ec6\"\r\nlast-modified: Sun, 20 Sep 2026 18:37:53 GMT\r\ncdn-storageserver: DE-660\r\ncdn-fileserver: 1467\r\ncdn-proxyver: 1.70\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 09/25/2026 05:36:55\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 648f26f5cf298f1f993e5b61861c842f\r\ncdn-cache: MISS\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":7878,"size_decoded":4339,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (7878), with no line terminators","md5":"fe2718948e75a18f006312971787a278","sha1":"35edbae2538948c2936749e4339cf7d130bca214","sha256":"5e86eba892ccf44a9c898eb57ca739ae0e91027eb9d76ea729e359325786b751","sha512":"d63cf2cd07bf4feedebaa14a79186b8f8097006ad3f67ae481e3f0d979034c18d696f6daa02c7bd15d464202a7422d39a4efe1b178fca74d49c184711a0a4660","ssdeep":"192:uZERENIJLi4BYVuSNdJt8cyWAcLoxYYp0t:uGREKJ2GYVnfJt8cyWXeot","tlshash":"cdf184d9f3d1b0a513a70a34357f6646f13b6191560d10208399d8f23ef7dab8927f88","first_seen":"2026-09-22T20:45:22.605281Z","last_seen":"2026-09-25T06:10:52.703535Z","times_seen":10,"resource_available":true,"data":null}},"time_used":84,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":83,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gateway.irys.xyz/HeB3Cq7j5UgGvECfes722J2hB6d3zFNAX8qrtvdaebbj","fqdn":"gateway.irys.xyz","domain":"irys.xyz","tld":"xyz"},"ip":{"addr":"172.66.167.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://firelight.run/","date":"2026-09-25T05:36:51.273Z","timestamp":1790314611273,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gateway.irys.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 20 Sep 2026 11:49:06 GMT","end":"Sat, 19 Dec 2026 11:49:05 GMT"},"fingerprint":{"sha1":"1B:75:8F:42:C3:0D:D3:04:72:4A:4F:BC:B0:44:35:11:BD:B0:C1:3A","sha256":"5D:7C:E7:8F:C7:B7:35:6E:0D:92:E6:E6:6C:71:F4:0D:D9:DE:7D:74:E5:56:33:7F:8D:2C:15:B1:80:E9:5D:E0"}}},"request":{"raw":"GET /HeB3Cq7j5UgGvECfes722J2hB6d3zFNAX8qrtvdaebbj HTTP/1.1\r\nHost: gateway.irys.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://firelight.run/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 \r\ndate: Fri, 25 Sep 2026 05:36:51 GMT\r\ncontent-length: 0\r\nlocation: https://65anjlffv6f37wsp5aoj34ltgjeakkozcoaujzb6feeub2bhg67a.mainnet-1.datasprite-cdn.com/HeB3Cq7j5UgGvECfes722J2hB6d3zFNAX8qrtvdaebbj/\r\nserver: cloudflare\r\naccess-control-allow-credentials: true\r\ncache-control: no-store\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-expose-headers: cache-control, location\r\nx-cache-status: BYPASS\r\ncf-cache-status: BYPASS\r\ncf-ray: a407ac70fd945687-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/svg+xml","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-25T12:27:37.283953Z","times_seen":18651356,"resource_available":true,"data":null}},"time_used":203,"timings":{"blocked":47,"dns":0,"connect":0,"send":0,"wait":156,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"abnsx7str6j5sa3pdbm5r66xojf3es2dyofcb7tsun2spudnhioq.mainnet-1.datasprite-cdn.com/12PdhtpXedXaMXrbokFcSkznJ5dABUVrBGffsHKjVWbN/","fqdn":"abnsx7str6j5sa3pdbm5r66xojf3es2dyofcb7tsun2spudnhioq.mainnet-1.datasprite-cdn.com","domain":"datasprite-cdn.com","tld":"com"},"ip":{"addr":"172.67.163.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://firelight.run/","date":"2026-09-25T05:36:51.814Z","timestamp":1790314611814,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"datasprite-cdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 01 Sep 2026 16:12:35 GMT","end":"Mon, 30 Nov 2026 17:12:28 GMT"},"fingerprint":{"sha1":"A7:49:1F:BA:09:CF:9C:E9:55:85:E1:3E:6A:46:2B:56:1A:DD:E7:32","sha256":"57:8A:D0:59:59:01:19:C2:80:F0:3E:E8:83:04:E6:8C:0B:A5:94:44:42:21:A0:F5:48:2D:7F:8D:19:15:08:52"}}},"request":{"raw":"GET /12PdhtpXedXaMXrbokFcSkznJ5dABUVrBGffsHKjVWbN/ HTTP/1.1\r\nHost: abnsx7str6j5sa3pdbm5r66xojf3es2dyofcb7tsun2spudnhioq.mainnet-1.datasprite-cdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://firelight.run/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 25 Sep 2026 05:36:52 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1286\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin\r\nx-irys-item-id: 12PdhtpXedXaMXrbokFcSkznJ5dABUVrBGffsHKjVWbN\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-content-type: image/webp\r\nx-content-length: 1286\r\ncache-control: max-age=2592000\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7MrvPpJjIKsA8QYq8EHP8zG8HCXQb110LREoIedJoknai9KlsURGYgVv9htZitGTWGSqHwO4JYOwh2BDKdOVmaGeKgzHBsMyBofvgOBuuRT9mD2U70atGZ2R6dRQ%2Fj2AwYMTvdVKjsj2O%2FZfSaijulhXNL0v18VmC9QKECm2HHotaj9XaBB95zIsJEd8jrDXrGRZu2IfNlHavXAioYlKBE%2FkEVc%3D\"}]}\r\ncf-ray: a407ac75df82120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1286,"size_decoded":2138,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 120x120, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"394cc1979b87058aae23ec953a289527","sha1":"ba63ad16dc17c8100c09092ff69bd6d515795a92","sha256":"9dbe42b89ea8a6a69c457e26a5456cd86e44e3f3aa839d10422a214cee7cb1fe","sha512":"fdf49d3ea66e078ec9944aa697db3213ea3b6c2d55ec8b065f1ebc513977df1f9d01c1528bc0ebb8c89f307923243deb480e6ec1cfb4c3e596d22dcddce2da93","ssdeep":"","tlshash":"e121c8e2c8b8259de223cc07626798a1dca11b3317d62996db20ea35f45a240956d0e2","first_seen":"2026-06-11T07:30:29.744458Z","last_seen":"2026-09-25T06:10:52.695751Z","times_seen":42,"resource_available":false,"data":null}},"time_used":569,"timings":{"blocked":279,"dns":0,"connect":0,"send":0,"wait":290,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"abnsx7str6j5sa3pdbm5r66xojf3es2dyofcb7tsun2spudnhioq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"abnsx7str6j5sa3pdbm5r66xojf3es2dyofcb7tsun2spudnhioq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"abnsx7str6j5sa3pdbm5r66xojf3es2dyofcb7tsun2spudnhioq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"firelight.run/8e018b889c4e12ffe9715f78d2fd0f6a42ac7881.svg","fqdn":"firelight.run","domain":"firelight.run","tld":"run"},"ip":{"addr":"104.21.13.148","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://firelight.run/","date":"2026-09-25T05:36:49.850Z","timestamp":1790314609850,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"firelight.run","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 24 Sep 2026 11:54:24 GMT","end":"Wed, 23 Dec 2026 11:54:23 GMT"},"fingerprint":{"sha1":"02:54:09:B5:1A:C4:80:FE:25:D5:90:D5:C2:96:72:47:EA:08:E4:AE","sha256":"3B:A7:9F:77:5F:07:1D:DF:C1:4E:DC:82:26:78:98:F9:C7:9C:E6:6F:08:FA:7C:0D:00:C0:A7:B5:72:83:E1:45"}}},"request":{"raw":"GET /8e018b889c4e12ffe9715f78d2fd0f6a42ac7881.svg HTTP/1.1\r\nHost: firelight.run\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://firelight.run/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 25 Sep 2026 05:36:49 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0m%2FBKJ6KWrsAXnosoRkL9kizJL9eqxoTAfBjO2i5fQ6%2B%2BUiZBtxfoaobds%2FlBNMbOz79QEVOsBtVig75aAxtccrQtFOc4AukLY1EirCjXuu7AHws14FzRSJQwqBTtNoY\"}]}\r\nlast-modified: Tue, 21 Apr 2026 11:39:44 GMT\r\npriority: u=4,i\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"69e76200-138b\"\r\nage: 3\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a407ac679e502efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5003,"size_decoded":2435,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"cf7a1b121dc1d99915e6b1122b271e43","sha1":"8e018b889c4e12ffe9715f78d2fd0f6a42ac7881","sha256":"007e4ec9317dacf6b970caf775ba67b5b6d8a80127b27f5971e645c13cc90ac4","sha512":"e1446e5425a8db2f62ad69cfe3a42350c325b4db251320db3419677ee8ca44dd9180e2a326f0b9a74842cdd72bddcff0757399a066e590ca9f832ab346b61a60","ssdeep":"96:+OUArTSZHwUn+hyo6JluvfkMhe8CPUt/Qiv9lCjQVLETTHGpU2Y+8oYqt:nFc3MD+WgNPUtDlcUVoXmSo/t","tlshash":"c8a101eefbfc22b8d0d8a7a2f223014f399fb4652f42cf53c17d8e8d6405818a6a5445","first_seen":"2026-04-24T15:23:09.419836Z","last_seen":"2026-09-25T05:38:01.281771Z","times_seen":18,"resource_available":false,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"firelight.run","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-25","alert":"Phishing Block","trigger":"firelight.run","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"firelight.run","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gateway.irys.xyz/7MQuBTrRdm5iYhmrHxm5x4SbttL9dZTrssQBRhuxrYEg","fqdn":"gateway.irys.xyz","domain":"irys.xyz","tld":"xyz"},"ip":{"addr":"172.66.167.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://firelight.run/","date":"2026-09-25T05:36:51.313Z","timestamp":1790314611313,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gateway.irys.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 20 Sep 2026 11:49:06 GMT","end":"Sat, 19 Dec 2026 11:49:05 GMT"},"fingerprint":{"sha1":"1B:75:8F:42:C3:0D:D3:04:72:4A:4F:BC:B0:44:35:11:BD:B0:C1:3A","sha256":"5D:7C:E7:8F:C7:B7:35:6E:0D:92:E6:E6:6C:71:F4:0D:D9:DE:7D:74:E5:56:33:7F:8D:2C:15:B1:80:E9:5D:E0"}}},"request":{"raw":"GET /7MQuBTrRdm5iYhmrHxm5x4SbttL9dZTrssQBRhuxrYEg HTTP/1.1\r\nHost: gateway.irys.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://firelight.run/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 \r\ndate: Fri, 25 Sep 2026 05:36:51 GMT\r\ncontent-length: 0\r\nlocation: https://lzqmfxcfxzkmtpb2kkhciww2krq6nbxvcrakzllef64mn2325ugq.mainnet-1.datasprite-cdn.com/7MQuBTrRdm5iYhmrHxm5x4SbttL9dZTrssQBRhuxrYEg/\r\nserver: cloudflare\r\ncache-control: no-store\r\naccess-control-expose-headers: location, cache-control\r\naccess-control-allow-credentials: true\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nx-cache-status: BYPASS\r\ncf-cache-status: BYPASS\r\ncf-ray: a407ac710db35687-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/webp","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-25T12:27:37.283953Z","times_seen":18651356,"resource_available":true,"data":null}},"time_used":156,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":156,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gateway.irys.xyz/3MT5FBCpHxMz8SpzNZQUrhWmpXbjFb5jKMxSKUbk2HJe","fqdn":"gateway.irys.xyz","domain":"irys.xyz","tld":"xyz"},"ip":{"addr":"172.66.167.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://firelight.run/","date":"2026-09-25T05:36:51.345Z","timestamp":1790314611345,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gateway.irys.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 20 Sep 2026 11:49:06 GMT","end":"Sat, 19 Dec 2026 11:49:05 GMT"},"fingerprint":{"sha1":"1B:75:8F:42:C3:0D:D3:04:72:4A:4F:BC:B0:44:35:11:BD:B0:C1:3A","sha256":"5D:7C:E7:8F:C7:B7:35:6E:0D:92:E6:E6:6C:71:F4:0D:D9:DE:7D:74:E5:56:33:7F:8D:2C:15:B1:80:E9:5D:E0"}}},"request":{"raw":"GET /3MT5FBCpHxMz8SpzNZQUrhWmpXbjFb5jKMxSKUbk2HJe HTTP/1.1\r\nHost: gateway.irys.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://firelight.run/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 \r\ndate: Fri, 25 Sep 2026 05:36:51 GMT\r\ncontent-length: 0\r\nlocation: https://el2hrgbroeyi4qgvgvj2lqoggwyiygesvezu3i5thvntgjewgylq.mainnet-1.datasprite-cdn.com/3MT5FBCpHxMz8SpzNZQUrhWmpXbjFb5jKMxSKUbk2HJe/\r\nserver: cloudflare\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-credentials: true\r\ncache-control: no-store\r\naccess-control-expose-headers: cache-control, location\r\nx-cache-status: BYPASS\r\ncf-cache-status: BYPASS\r\ncf-ray: a407ac711dcd5687-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/webp","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-25T12:27:37.283953Z","times_seen":18651356,"resource_available":true,"data":null}},"time_used":171,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":171,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gateway.irys.xyz/12PdhtpXedXaMXrbokFcSkznJ5dABUVrBGffsHKjVWbN","fqdn":"gateway.irys.xyz","domain":"irys.xyz","tld":"xyz"},"ip":{"addr":"172.66.167.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://firelight.run/","date":"2026-09-25T05:36:51.371Z","timestamp":1790314611371,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gateway.irys.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 20 Sep 2026 11:49:06 GMT","end":"Sat, 19 Dec 2026 11:49:05 GMT"},"fingerprint":{"sha1":"1B:75:8F:42:C3:0D:D3:04:72:4A:4F:BC:B0:44:35:11:BD:B0:C1:3A","sha256":"5D:7C:E7:8F:C7:B7:35:6E:0D:92:E6:E6:6C:71:F4:0D:D9:DE:7D:74:E5:56:33:7F:8D:2C:15:B1:80:E9:5D:E0"}}},"request":{"raw":"GET /12PdhtpXedXaMXrbokFcSkznJ5dABUVrBGffsHKjVWbN HTTP/1.1\r\nHost: gateway.irys.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://firelight.run/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 \r\ndate: Fri, 25 Sep 2026 05:36:51 GMT\r\ncontent-length: 0\r\nlocation: https://abnsx7str6j5sa3pdbm5r66xojf3es2dyofcb7tsun2spudnhioq.mainnet-1.datasprite-cdn.com/12PdhtpXedXaMXrbokFcSkznJ5dABUVrBGffsHKjVWbN/\r\nserver: cloudflare\r\naccess-control-allow-credentials: true\r\ncache-control: no-store\r\naccess-control-expose-headers: cache-control, location\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nx-cache-status: BYPASS\r\ncf-cache-status: BYPASS\r\ncf-ray: a407ac711de65687-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/webp","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-25T12:27:37.283953Z","times_seen":18651356,"resource_available":true,"data":null}},"time_used":169,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":169,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zxdcgrwdlct5d5hkzf5ikt35hpxjgyetcpfzrvlhwzw2f6fnevbq.mainnet-1.datasprite-cdn.com/ErFp6xHQkocPcwKe4eVa6afbKPpCdjzp1bvBARDXwsuc/","fqdn":"zxdcgrwdlct5d5hkzf5ikt35hpxjgyetcpfzrvlhwzw2f6fnevbq.mainnet-1.datasprite-cdn.com","domain":"datasprite-cdn.com","tld":"com"},"ip":{"addr":"104.21.15.158","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://firelight.run/","date":"2026-09-25T05:36:51.736Z","timestamp":1790314611736,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"datasprite-cdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 01 Sep 2026 16:12:35 GMT","end":"Mon, 30 Nov 2026 17:12:28 GMT"},"fingerprint":{"sha1":"A7:49:1F:BA:09:CF:9C:E9:55:85:E1:3E:6A:46:2B:56:1A:DD:E7:32","sha256":"57:8A:D0:59:59:01:19:C2:80:F0:3E:E8:83:04:E6:8C:0B:A5:94:44:42:21:A0:F5:48:2D:7F:8D:19:15:08:52"}}},"request":{"raw":"GET /ErFp6xHQkocPcwKe4eVa6afbKPpCdjzp1bvBARDXwsuc/ HTTP/1.1\r\nHost: zxdcgrwdlct5d5hkzf5ikt35hpxjgyetcpfzrvlhwzw2f6fnevbq.mainnet-1.datasprite-cdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://firelight.run/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 25 Sep 2026 05:36:52 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\npriority: u=5,i\r\nvary: Origin\r\nx-irys-item-id: ErFp6xHQkocPcwKe4eVa6afbKPpCdjzp1bvBARDXwsuc\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-content-type: image/webp\r\nx-content-length: 832\r\ncache-control: max-age=2592000\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EI8R8B%2Fom6T%2FW76jG%2B9QxTJYvtp6UPHK9udJ6QqHTQYJYM%2BU9RgYyUJ4yn7cx%2BXkG4IQ9yItniY%2F3vkTJzfVT9zrJIDZ3S9x4ys4k%2Bra%2FgEUaLSsqbDL%2BQuty0Yx4t%2BSyAkip0JZmLq2s%2B%2BElF2cYO644SI26LuII5ztkI6jq97l0UQTWZLfI5GEG8C6KMDFoe3Poi1FV50o4SDmnenESkeQotc%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a407ac737da7b509-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 832\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":832,"size_decoded":1722,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 120x120, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"771a036a39eee67730f70216f4a0de6e","sha1":"10e65a6b6410dd038c4f397faaa0f7f32bf69995","sha256":"68a9030633e1b50dc003b84cfcdbf0447f663722e1cc8aebb8b59e33c2609455","sha512":"81c674b05b7835a2c771065722fc77f06fb56b40ab349ef08f58a273ab54d611fdfcf9bd9cf4ddbc6d9e42d4e8e1e2a4ecb42a9ed7113f6a8f08ed85739a5b25","ssdeep":"","tlshash":"e00186f6ac17ca14c2293457d9e4faa2499cb4246807102afd9d1eb419cc2829ec991a","first_seen":"2026-02-10T08:05:59.375119Z","last_seen":"2026-09-25T06:10:52.674547Z","times_seen":49,"resource_available":false,"data":null}},"time_used":315,"timings":{"blocked":-1,"dns":8,"connect":0,"send":0,"wait":307,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"zxdcgrwdlct5d5hkzf5ikt35hpxjgyetcpfzrvlhwzw2f6fnevbq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"zxdcgrwdlct5d5hkzf5ikt35hpxjgyetcpfzrvlhwzw2f6fnevbq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"zxdcgrwdlct5d5hkzf5ikt35hpxjgyetcpfzrvlhwzw2f6fnevbq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qyxbba7uefsmigd4oki3zm3hcmilt5fjudhha7n37oeygwrgdcua.mainnet-1.datasprite-cdn.com/A2nNXgUMwV5nKhUomHb1gTsdg7PQh8kY6o5Xd5fjAGN3/","fqdn":"qyxbba7uefsmigd4oki3zm3hcmilt5fjudhha7n37oeygwrgdcua.mainnet-1.datasprite-cdn.com","domain":"datasprite-cdn.com","tld":"com"},"ip":{"addr":"172.67.163.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://firelight.run/","date":"2026-09-25T05:36:51.753Z","timestamp":1790314611753,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"datasprite-cdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 01 Sep 2026 16:12:35 GMT","end":"Mon, 30 Nov 2026 17:12:28 GMT"},"fingerprint":{"sha1":"A7:49:1F:BA:09:CF:9C:E9:55:85:E1:3E:6A:46:2B:56:1A:DD:E7:32","sha256":"57:8A:D0:59:59:01:19:C2:80:F0:3E:E8:83:04:E6:8C:0B:A5:94:44:42:21:A0:F5:48:2D:7F:8D:19:15:08:52"}}},"request":{"raw":"GET /A2nNXgUMwV5nKhUomHb1gTsdg7PQh8kY6o5Xd5fjAGN3/ HTTP/1.1\r\nHost: qyxbba7uefsmigd4oki3zm3hcmilt5fjudhha7n37oeygwrgdcua.mainnet-1.datasprite-cdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://firelight.run/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 25 Sep 2026 05:36:52 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1306\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin\r\nx-irys-item-id: A2nNXgUMwV5nKhUomHb1gTsdg7PQh8kY6o5Xd5fjAGN3\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-content-type: image/webp\r\nx-content-length: 1306\r\ncache-control: max-age=2592000\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=63BI5deTFMmy322xzExNFHlq1JyavaPb89l15HYoZuQUkvDLgQ8M%2B5baXfzkS%2Bj3DMfhX7KJeRpVoPKr0dmK3MhadsSGX0CGB3MDosmtYHkNERButiame165EC9MrhVdX9hj5aapVYDcsvko%2BSi3U6rgPiA9zxrYVoXZNncILsP8olqmp8%2B8NpQgxUYCjMv0jV2NVg7O0YZqfEazsdNxqQe2swo%3D\"}]}\r\ncf-ray: a407ac74ab38b4f4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1306,"size_decoded":2160,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"73bc41599dcb8fba90c3f7216b60f320","sha1":"40494127caf63b4f9d056043418d1d82774676ca","sha256":"05c44a451efb7ac86bb3a921d8b6dea43e6f18f8a9f0d1297c3d956cfee964e8","sha512":"b6b4cda242f5835e75c17fe935eecc520dcd00d69babe0322f7426fc5385e4440f73c17a34fcd2ccbe1ad7ad14da33ecc63d63733216543ac8e1a23b38a6c054","ssdeep":"","tlshash":"1321f8ee61b744d1d3429cb5f9c3544510252cc207880c1cadf40aecae332e36e215f3","first_seen":"2025-09-09T19:24:39.818069Z","last_seen":"2026-09-25T06:10:52.69948Z","times_seen":44,"resource_available":false,"data":null}},"time_used":502,"timings":{"blocked":108,"dns":4,"connect":5,"send":0,"wait":303,"receive":0,"ssl":57},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"qyxbba7uefsmigd4oki3zm3hcmilt5fjudhha7n37oeygwrgdcua.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"qyxbba7uefsmigd4oki3zm3hcmilt5fjudhha7n37oeygwrgdcua.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"qyxbba7uefsmigd4oki3zm3hcmilt5fjudhha7n37oeygwrgdcua.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"firelight.run/ZjjD2npqa8VUNiqb38BoGSHE70-1.png","fqdn":"firelight.run","domain":"firelight.run","tld":"run"},"ip":{"addr":"104.21.13.148","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://firelight.run/","date":"2026-09-25T05:36:49.799Z","timestamp":1790314609799,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"firelight.run","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 24 Sep 2026 11:54:24 GMT","end":"Wed, 23 Dec 2026 11:54:23 GMT"},"fingerprint":{"sha1":"02:54:09:B5:1A:C4:80:FE:25:D5:90:D5:C2:96:72:47:EA:08:E4:AE","sha256":"3B:A7:9F:77:5F:07:1D:DF:C1:4E:DC:82:26:78:98:F9:C7:9C:E6:6F:08:FA:7C:0D:00:C0:A7:B5:72:83:E1:45"}}},"request":{"raw":"GET /ZjjD2npqa8VUNiqb38BoGSHE70-1.png HTTP/1.1\r\nHost: firelight.run\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://firelight.run/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 25 Sep 2026 05:36:49 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 21 Apr 2026 11:39:44 GMT\r\npriority: u=5,i\r\netag: \"69e76200-2330\"\r\naccept-ranges: bytes\r\nage: 3\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xHxPqDqGWhRDJqCHp%2BvSEk92AUSdpZOu8HZNNloJGwk2rUMmnyQJCJd5S5UTkRvTX%2BislMKtWFfjSFJSOuNyCprq5zYXoZ07MYX3SXD38k2xKY0vqxKODBFMPipkpBra\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a407ac674e2a2efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 9008\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9008,"size_decoded":9695,"mime_type":"image/png","magic":"PNG image data, 2048 x 1152, 8-bit colormap, non-interlaced","md5":"50a4c82f0093ecbd8d78f85b691f591d","sha1":"855afc4d65243f4a81932d17b614a80e3270d184","sha256":"7e426939ff92655448b8ae69c852ad986d124ed81ba25b6f180fbdfd9b1db640","sha512":"57acfe3ff3627a24d832f37be249880a7e4f3b423db50812a73339da0b0bebef3483ab4d91ab809461a26695f93aec520080f8dca37dabf82177651f3d2ee2a4","ssdeep":"192:9SM17Kd8K44+ZsqcCmf1z4XtnOJBEHWhK:8E7Kdd44+zcCk5+pOJBEHWhK","tlshash":"cf029eccd55684afc10e2c31568cded7c66eb145122982db7716a8b383fc061b5322a3","first_seen":"2026-04-24T15:23:09.418012Z","last_seen":"2026-09-25T05:38:01.290166Z","times_seen":20,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"firelight.run","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"firelight.run","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-25","alert":"Phishing Block","trigger":"firelight.run","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"firelight.run/aqiiD4LUKkKzXdjGL5UzHq8bo5w.woff2","fqdn":"firelight.run","domain":"firelight.run","tld":"run"},"ip":{"addr":"104.21.13.148","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://firelight.run/","date":"2026-09-25T05:36:49.868Z","timestamp":1790314609868,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"firelight.run","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 24 Sep 2026 11:54:24 GMT","end":"Wed, 23 Dec 2026 11:54:23 GMT"},"fingerprint":{"sha1":"02:54:09:B5:1A:C4:80:FE:25:D5:90:D5:C2:96:72:47:EA:08:E4:AE","sha256":"3B:A7:9F:77:5F:07:1D:DF:C1:4E:DC:82:26:78:98:F9:C7:9C:E6:6F:08:FA:7C:0D:00:C0:A7:B5:72:83:E1:45"}}},"request":{"raw":"GET /aqiiD4LUKkKzXdjGL5UzHq8bo5w.woff2 HTTP/1.1\r\nHost: firelight.run\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://firelight.run/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 25 Sep 2026 05:36:49 GMT\r\ncontent-type: font/woff2\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 21 Apr 2026 11:39:44 GMT\r\npriority: u=3,i=?0\r\netag: \"69e76200-6c1c\"\r\naccept-ranges: bytes\r\nage: 3\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yzJhXmis%2BzKlRNbq9v%2Fk49%2B2TR9vKD6awyYoUHZFJq%2BwUctclrX9GYo3O1SS%2FVgglplZjMzDbsFnmerr2%2BCh6fFjjLl0kvYrKXxgRS9Ot%2BVhaIvoVkXyTNVxnT5P6Od%2F\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a407ac67ae592efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 27676\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":27676,"size_decoded":28380,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 27676, version 4.0","md5":"f5284a3495917f6a44f26fb5dd1d8afd","sha1":"6aa8a20f82d42a42b35dd8c62f95331eaf1ba39c","sha256":"6aba565c1cc33eb1275f69fe270a717b21a9b2cebbfa3cd109e862f2187a0f49","sha512":"63dfe3cf3aff75ab6a25de7bfaff4f8731d31c98a85b04aa3555b62111c10b48738e9de3624b31b61e0881e995eba8c1ce65aeec39e9aa65922dd67e51c42e2c","ssdeep":"768:fr+UfEvrHN8aHZhqjJvkL1WTWYwHTwyHXhJOFY/H+:6KEvjN8a50ds1W6YwHT9RMY/+","tlshash":"27c2e1fe0439d63cc8558f1edd91b98c0b872f9cd9868a1001edbef4497f8f4620a44a","first_seen":"2025-08-23T14:43:00.600022Z","last_seen":"2026-09-25T05:38:01.309115Z","times_seen":306,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-25","alert":"Phishing Block","trigger":"firelight.run","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"firelight.run","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"firelight.run","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"arbitrum.llamarpc.com/","fqdn":"arbitrum.llamarpc.com","domain":"llamarpc.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://firelight.run/","date":"2026-09-25T05:36:50.413Z","timestamp":1790314610413,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"OPTIONS / HTTP/1.1\r\nHost: arbitrum.llamarpc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://firelight.run/\r\nOrigin: https://firelight.run\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-25T12:27:37.283953Z","times_seen":18651356,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gateway.irys.xyz/4fknCk58W1hxsN2yyfLGwPmgrvjRZwGoMCtrY6DtfWPA","fqdn":"gateway.irys.xyz","domain":"irys.xyz","tld":"xyz"},"ip":{"addr":"172.66.167.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://firelight.run/","date":"2026-09-25T05:36:51.292Z","timestamp":1790314611292,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gateway.irys.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 20 Sep 2026 11:49:06 GMT","end":"Sat, 19 Dec 2026 11:49:05 GMT"},"fingerprint":{"sha1":"1B:75:8F:42:C3:0D:D3:04:72:4A:4F:BC:B0:44:35:11:BD:B0:C1:3A","sha256":"5D:7C:E7:8F:C7:B7:35:6E:0D:92:E6:E6:6C:71:F4:0D:D9:DE:7D:74:E5:56:33:7F:8D:2C:15:B1:80:E9:5D:E0"}}},"request":{"raw":"GET /4fknCk58W1hxsN2yyfLGwPmgrvjRZwGoMCtrY6DtfWPA HTTP/1.1\r\nHost: gateway.irys.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://firelight.run/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 \r\ndate: Fri, 25 Sep 2026 05:36:51 GMT\r\ncontent-length: 0\r\nlocation: https://g2akedaejpemffcb3k3tbk3zmsdzsgpvw3zsqilmev3jh4ywcf4q.mainnet-1.datasprite-cdn.com/4fknCk58W1hxsN2yyfLGwPmgrvjRZwGoMCtrY6DtfWPA/\r\nserver: cloudflare\r\ncache-control: no-store\r\naccess-control-expose-headers: location, cache-control\r\naccess-control-allow-credentials: true\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nx-cache-status: BYPASS\r\ncf-cache-status: BYPASS\r\ncf-ray: a407ac70fd9f5687-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/webp","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-25T12:27:37.283953Z","times_seen":18651356,"resource_available":true,"data":null}},"time_used":212,"timings":{"blocked":6,"dns":0,"connect":0,"send":0,"wait":206,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gateway.irys.xyz/A2nNXgUMwV5nKhUomHb1gTsdg7PQh8kY6o5Xd5fjAGN3","fqdn":"gateway.irys.xyz","domain":"irys.xyz","tld":"xyz"},"ip":{"addr":"172.66.167.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://firelight.run/","date":"2026-09-25T05:36:51.326Z","timestamp":1790314611326,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gateway.irys.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 20 Sep 2026 11:49:06 GMT","end":"Sat, 19 Dec 2026 11:49:05 GMT"},"fingerprint":{"sha1":"1B:75:8F:42:C3:0D:D3:04:72:4A:4F:BC:B0:44:35:11:BD:B0:C1:3A","sha256":"5D:7C:E7:8F:C7:B7:35:6E:0D:92:E6:E6:6C:71:F4:0D:D9:DE:7D:74:E5:56:33:7F:8D:2C:15:B1:80:E9:5D:E0"}}},"request":{"raw":"GET /A2nNXgUMwV5nKhUomHb1gTsdg7PQh8kY6o5Xd5fjAGN3 HTTP/1.1\r\nHost: gateway.irys.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://firelight.run/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 \r\ndate: Fri, 25 Sep 2026 05:36:51 GMT\r\ncontent-length: 0\r\nlocation: https://qyxbba7uefsmigd4oki3zm3hcmilt5fjudhha7n37oeygwrgdcua.mainnet-1.datasprite-cdn.com/A2nNXgUMwV5nKhUomHb1gTsdg7PQh8kY6o5Xd5fjAGN3/\r\nserver: cloudflare\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\ncache-control: no-store\r\naccess-control-allow-credentials: true\r\naccess-control-expose-headers: cache-control, location\r\nx-cache-status: BYPASS\r\ncf-cache-status: BYPASS\r\ncf-ray: a407ac710dc35687-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/webp","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-25T12:27:37.283953Z","times_seen":18651356,"resource_available":true,"data":null}},"time_used":162,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":162,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wqfquz32a4lzecqogmqyxh4zeqpie2ndhtrq2liju6ygvivvaykq.mainnet-1.datasprite-cdn.com/D7p9hb5EEeuut3VvifV1UNAiPEfnuNCrK6ubse1dWiwE/","fqdn":"wqfquz32a4lzecqogmqyxh4zeqpie2ndhtrq2liju6ygvivvaykq.mainnet-1.datasprite-cdn.com","domain":"datasprite-cdn.com","tld":"com"},"ip":{"addr":"104.21.15.158","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://firelight.run/","date":"2026-09-25T05:36:51.741Z","timestamp":1790314611741,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"datasprite-cdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 01 Sep 2026 16:12:35 GMT","end":"Mon, 30 Nov 2026 17:12:28 GMT"},"fingerprint":{"sha1":"A7:49:1F:BA:09:CF:9C:E9:55:85:E1:3E:6A:46:2B:56:1A:DD:E7:32","sha256":"57:8A:D0:59:59:01:19:C2:80:F0:3E:E8:83:04:E6:8C:0B:A5:94:44:42:21:A0:F5:48:2D:7F:8D:19:15:08:52"}}},"request":{"raw":"GET /D7p9hb5EEeuut3VvifV1UNAiPEfnuNCrK6ubse1dWiwE/ HTTP/1.1\r\nHost: wqfquz32a4lzecqogmqyxh4zeqpie2ndhtrq2liju6ygvivvaykq.mainnet-1.datasprite-cdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://firelight.run/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 25 Sep 2026 05:36:52 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\npriority: u=5,i\r\nvary: Origin\r\nx-irys-item-id: D7p9hb5EEeuut3VvifV1UNAiPEfnuNCrK6ubse1dWiwE\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-content-type: image/webp\r\nx-content-length: 1406\r\ncache-control: max-age=2592000\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MioF7ThPsSislpw5u0znDdSWfY%2FEtxufpekSTvGCFUDntvhccXHe0ePZgrGJpmdhpboPonZUeXPtn6a0d7FbjmffeSCPwercRsnTWodVrAaFf3K8JleN6NF9fqWAjGZEL0M%2BmHXJUjdWKio7gteCFlkDb9mahtOto2W6SwTSvzrLmg2vUoXnpYvukcvRjhy90YGUb9uM3vMEo6rkrImRDFXXgdI%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a407ac746dbab509-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1406\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1406,"size_decoded":2278,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"a580f24cad130966ffcbd2e5d418af8b","sha1":"c342b3da358fec2cab72adb2ab4a0e89d480ba85","sha256":"368962fa0e2ffe5791b6e3abc5a8c01650c5fa77ad108cae356782bff6e6e02b","sha512":"eab7045c6d44b4a6d712cad0a7fe31bb7de1d742d6a138b360276f71336e505adcd9e163210ced17d596a738300a1f3afa82f3bbfd3117cd1661a30e9d214720","ssdeep":"","tlshash":"4021e939ec5437f1192982716652c7ccf3051a164620a710e74fe2dd08e5c1b668a7f0","first_seen":"2024-08-13T01:00:15Z","last_seen":"2026-09-25T06:10:52.697742Z","times_seen":264,"resource_available":false,"data":null}},"time_used":259,"timings":{"blocked":70,"dns":4,"connect":0,"send":0,"wait":185,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"wqfquz32a4lzecqogmqyxh4zeqpie2ndhtrq2liju6ygvivvaykq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"wqfquz32a4lzecqogmqyxh4zeqpie2ndhtrq2liju6ygvivvaykq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"wqfquz32a4lzecqogmqyxh4zeqpie2ndhtrq2liju6ygvivvaykq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"jfrwbu3xjectzwr6zpvpvbewqkwb3tvpr7kikhkfa7gcmzugoycq.mainnet-1.datasprite-cdn.com/5wUerABHQTtos15xuLUSaGKLdHRysPmt8cLkhr169WEp/","fqdn":"jfrwbu3xjectzwr6zpvpvbewqkwb3tvpr7kikhkfa7gcmzugoycq.mainnet-1.datasprite-cdn.com","domain":"datasprite-cdn.com","tld":"com"},"ip":{"addr":"104.21.15.158","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://firelight.run/","date":"2026-09-25T05:36:51.744Z","timestamp":1790314611744,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"datasprite-cdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 01 Sep 2026 16:12:35 GMT","end":"Mon, 30 Nov 2026 17:12:28 GMT"},"fingerprint":{"sha1":"A7:49:1F:BA:09:CF:9C:E9:55:85:E1:3E:6A:46:2B:56:1A:DD:E7:32","sha256":"57:8A:D0:59:59:01:19:C2:80:F0:3E:E8:83:04:E6:8C:0B:A5:94:44:42:21:A0:F5:48:2D:7F:8D:19:15:08:52"}}},"request":{"raw":"GET /5wUerABHQTtos15xuLUSaGKLdHRysPmt8cLkhr169WEp/ HTTP/1.1\r\nHost: jfrwbu3xjectzwr6zpvpvbewqkwb3tvpr7kikhkfa7gcmzugoycq.mainnet-1.datasprite-cdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://firelight.run/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 25 Sep 2026 05:36:52 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\npriority: u=5,i\r\nvary: Origin\r\nx-irys-item-id: 5wUerABHQTtos15xuLUSaGKLdHRysPmt8cLkhr169WEp\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-content-type: image/webp\r\nx-content-length: 1450\r\ncache-control: max-age=2592000\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YsS%2BFeUD937B%2FOCWX%2BkORfzMDgfFhGOPzEOEn%2FmWPZikwhGfdJLY3PUHl228KEy4%2FBttx835bkfEqOahz4hdjijqQ1MXbP7QyAX4QQSApYRiOZCdrqSpX%2Bjdb0io7wyFeXww5M%2BwOAm5LMrrLPYDfgCd0xyS2uSLudDO1yZRGJCgM2bUEginxkVW5KhcTD3qK%2FDFgHfG4%2BG0ZmkJZY0Zm5bZ6lc%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a407ac747dbdb509-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1450\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1450,"size_decoded":2336,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 120x120, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"0ff24c3bb8a4c2a4c7bcdfab82cadb6f","sha1":"28391d2dad420b9b2b65a1c2e9cc98526569d7dc","sha256":"bd068e47a57725a022e129b2342fd0cfbce3252fbcf393512e423cd56d96bf27","sha512":"f97bbaa8741b0ffed644c2a9d769c3f12dc5aad425abc49f490eed7f9b88babb9363ce7b68d8a961bd4fdf3b55de4a94b912fab619a54640fe79d3ac74287114","ssdeep":"","tlshash":"a131e957be99053fc71b134f4c290e6ccd5a6694fc015ba5cc1666429a8c541e328dd2","first_seen":"2024-07-08T23:13:45Z","last_seen":"2026-09-25T06:10:52.669462Z","times_seen":57,"resource_available":false,"data":null}},"time_used":272,"timings":{"blocked":84,"dns":8,"connect":0,"send":0,"wait":180,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"jfrwbu3xjectzwr6zpvpvbewqkwb3tvpr7kikhkfa7gcmzugoycq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"jfrwbu3xjectzwr6zpvpvbewqkwb3tvpr7kikhkfa7gcmzugoycq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"jfrwbu3xjectzwr6zpvpvbewqkwb3tvpr7kikhkfa7gcmzugoycq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5mmvwl7o3g5kseh6ibvzgyebxak4j4qgqqczbevmgdtkhvbbhaq.mainnet-1.datasprite-cdn.com/5GHDNrA7AEgG9NmMQKVL78E5F3oMjEvyd59Ls5SEk6JC/","fqdn":"h5mmvwl7o3g5kseh6ibvzgyebxak4j4qgqqczbevmgdtkhvbbhaq.mainnet-1.datasprite-cdn.com","domain":"datasprite-cdn.com","tld":"com"},"ip":{"addr":"172.67.163.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://firelight.run/","date":"2026-09-25T05:36:51.771Z","timestamp":1790314611771,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"datasprite-cdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 01 Sep 2026 16:12:35 GMT","end":"Mon, 30 Nov 2026 17:12:28 GMT"},"fingerprint":{"sha1":"A7:49:1F:BA:09:CF:9C:E9:55:85:E1:3E:6A:46:2B:56:1A:DD:E7:32","sha256":"57:8A:D0:59:59:01:19:C2:80:F0:3E:E8:83:04:E6:8C:0B:A5:94:44:42:21:A0:F5:48:2D:7F:8D:19:15:08:52"}}},"request":{"raw":"GET /5GHDNrA7AEgG9NmMQKVL78E5F3oMjEvyd59Ls5SEk6JC/ HTTP/1.1\r\nHost: h5mmvwl7o3g5kseh6ibvzgyebxak4j4qgqqczbevmgdtkhvbbhaq.mainnet-1.datasprite-cdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://firelight.run/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 25 Sep 2026 05:36:52 GMT\r\ncontent-type: image/webp\r\ncontent-length: 402\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin\r\nx-irys-item-id: 5GHDNrA7AEgG9NmMQKVL78E5F3oMjEvyd59Ls5SEk6JC\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-content-type: image/webp\r\nx-content-length: 402\r\ncache-control: max-age=2592000\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hsPi4X0s9mxLgS4SFHXcqeDSL9Agg185QnG8VHbuil0kKizEtCJAem7rFOpK2g8DoqzfNnVptVsQIaK79gJFdBuIL9Y4o7GVUswbcbRD0h9xfu8VVlqribkwyLan7UvrOyw8%2FaLVX3M%2Bzy%2FHAGYegwFtnO6wBSgOsBIU05e1Dh26vLSN%2Bbry%2F5Pazam6mgHLOUIRpoXpJ1R9TjUF48MfjWokc44%3D\"}]}\r\ncf-ray: a407ac74ae85723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":402,"size_decoded":1256,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 120x120, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"9c92052674d8ce6f4b8cf7211ec7df17","sha1":"0623973405fbb6a1691b10861c1a344891c1346a","sha256":"289e6b92e606744e74f6fdc9ee5db6f4c936b7686aa9a691f30c16f4968daa4d","sha512":"a48b860972c1070bd39831b8ff9b94e49fef38387aa9d448c0727a7500430cc06b648b00a528e7e14f17fd8b38e4b32fe10c502e05ff4808dce64464f2915a30","ssdeep":"","tlshash":"8ce0f177e5221a69c44177d6b8c1c50a77804aa3f504d702809bce94c3839e2ad054c1","first_seen":"2025-09-09T19:24:39.814892Z","last_seen":"2026-09-25T06:10:52.713114Z","times_seen":51,"resource_available":false,"data":null}},"time_used":362,"timings":{"blocked":98,"dns":4,"connect":4,"send":0,"wait":175,"receive":0,"ssl":65},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"h5mmvwl7o3g5kseh6ibvzgyebxak4j4qgqqczbevmgdtkhvbbhaq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"h5mmvwl7o3g5kseh6ibvzgyebxak4j4qgqqczbevmgdtkhvbbhaq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"h5mmvwl7o3g5kseh6ibvzgyebxak4j4qgqqczbevmgdtkhvbbhaq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gateway.irys.xyz/HTRnUQQDU47XpwWJMzeSSqzX7y5GMLuXnowdYk183S2i","fqdn":"gateway.irys.xyz","domain":"irys.xyz","tld":"xyz"},"ip":{"addr":"172.66.167.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://firelight.run/","date":"2026-09-25T05:36:51.316Z","timestamp":1790314611316,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gateway.irys.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 20 Sep 2026 11:49:06 GMT","end":"Sat, 19 Dec 2026 11:49:05 GMT"},"fingerprint":{"sha1":"1B:75:8F:42:C3:0D:D3:04:72:4A:4F:BC:B0:44:35:11:BD:B0:C1:3A","sha256":"5D:7C:E7:8F:C7:B7:35:6E:0D:92:E6:E6:6C:71:F4:0D:D9:DE:7D:74:E5:56:33:7F:8D:2C:15:B1:80:E9:5D:E0"}}},"request":{"raw":"GET /HTRnUQQDU47XpwWJMzeSSqzX7y5GMLuXnowdYk183S2i HTTP/1.1\r\nHost: gateway.irys.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://firelight.run/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 \r\ndate: Fri, 25 Sep 2026 05:36:51 GMT\r\ncontent-length: 0\r\nlocation: https://6sab273b7nl3rcdustvjejsgxkwzkkibobj56v5dumz7i6xdbltq.mainnet-1.datasprite-cdn.com/HTRnUQQDU47XpwWJMzeSSqzX7y5GMLuXnowdYk183S2i/\r\nserver: cloudflare\r\ncache-control: no-store\r\naccess-control-expose-headers: location, cache-control\r\naccess-control-allow-credentials: true\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nx-cache-status: BYPASS\r\ncf-cache-status: BYPASS\r\ncf-ray: a407ac710db75687-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/webp","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-25T12:27:37.283953Z","times_seen":18651356,"resource_available":true,"data":null}},"time_used":177,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":177,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gateway.irys.xyz/3m3FKCoECFJAoQovnGLen1UBqXpwQHgYWfhkuFUywtxc","fqdn":"gateway.irys.xyz","domain":"irys.xyz","tld":"xyz"},"ip":{"addr":"172.66.167.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://firelight.run/","date":"2026-09-25T05:36:51.326Z","timestamp":1790314611326,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gateway.irys.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 20 Sep 2026 11:49:06 GMT","end":"Sat, 19 Dec 2026 11:49:05 GMT"},"fingerprint":{"sha1":"1B:75:8F:42:C3:0D:D3:04:72:4A:4F:BC:B0:44:35:11:BD:B0:C1:3A","sha256":"5D:7C:E7:8F:C7:B7:35:6E:0D:92:E6:E6:6C:71:F4:0D:D9:DE:7D:74:E5:56:33:7F:8D:2C:15:B1:80:E9:5D:E0"}}},"request":{"raw":"GET /3m3FKCoECFJAoQovnGLen1UBqXpwQHgYWfhkuFUywtxc HTTP/1.1\r\nHost: gateway.irys.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://firelight.run/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 \r\ndate: Fri, 25 Sep 2026 05:36:51 GMT\r\ncontent-length: 0\r\nlocation: https://fd7xqs6fnkfawh6qvkmjuuwvub4cbuycyxx3q3romqtbcbt6o4kq.mainnet-1.datasprite-cdn.com/3m3FKCoECFJAoQovnGLen1UBqXpwQHgYWfhkuFUywtxc/\r\nserver: cloudflare\r\ncache-control: no-store\r\naccess-control-expose-headers: location, cache-control\r\naccess-control-allow-credentials: true\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nx-cache-status: BYPASS\r\ncf-cache-status: BYPASS\r\ncf-ray: a407ac710dc55687-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/webp","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-25T12:27:37.283953Z","times_seen":18651356,"resource_available":true,"data":null}},"time_used":162,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":162,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rpc.ankr.com/bsc","fqdn":"rpc.ankr.com","domain":"ankr.com","tld":"com"},"ip":{"addr":"152.236.9.75","port":443,"asn":7738,"as":"V tal","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://firelight.run/","date":"2026-09-25T05:36:51.646Z","timestamp":1790314611646,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"shark.multi-rpc.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Tue, 15 Sep 2026 09:08:08 GMT","end":"Mon, 14 Dec 2026 09:08:07 GMT"},"fingerprint":{"sha1":"5C:21:BA:98:E5:D9:20:AF:E9:BB:74:C7:96:5E:67:7E:0E:35:B7:9F","sha256":"89:8F:A0:D2:17:79:FA:35:38:5E:B2:D1:CC:B9:4B:77:BF:21:D2:BE:7A:9D:22:4E:7B:BE:FD:24:35:91:B9:D4"}}},"request":{"raw":"OPTIONS /bsc HTTP/1.1\r\nHost: rpc.ankr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://firelight.run/\r\nOrigin: https://firelight.run\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 \r\ndate: Fri, 25 Sep 2026 05:36:51 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, PUT, POST, DELETE, PATCH, OPTIONS\r\naccess-control-allow-headers: DNT,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization,solana-client,client-sdk-version,client-sdk-type,client-target-api-version,x-ton-client-version,x-client-name,x-client-version,Accept-Token-Tier,Rpc-Compress,Rpc-Decode\r\naccess-control-expose-headers: Token-Tier\r\naccess-control-max-age: 1728000\r\ncontent-length: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":681,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-25T12:27:37.283953Z","times_seen":18651356,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sxkbzjsq65wh654do6f2fcn4t5phs2iozxkrihpxbz4jaqr3fuaq.mainnet-1.datasprite-cdn.com/B5sLi9Stwf8xRFrbJ6Bm6wZojhuyzkGcWowZenqKD4fz/","fqdn":"sxkbzjsq65wh654do6f2fcn4t5phs2iozxkrihpxbz4jaqr3fuaq.mainnet-1.datasprite-cdn.com","domain":"datasprite-cdn.com","tld":"com"},"ip":{"addr":"104.21.15.158","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://firelight.run/","date":"2026-09-25T05:36:51.728Z","timestamp":1790314611728,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"datasprite-cdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 01 Sep 2026 16:12:35 GMT","end":"Mon, 30 Nov 2026 17:12:28 GMT"},"fingerprint":{"sha1":"A7:49:1F:BA:09:CF:9C:E9:55:85:E1:3E:6A:46:2B:56:1A:DD:E7:32","sha256":"57:8A:D0:59:59:01:19:C2:80:F0:3E:E8:83:04:E6:8C:0B:A5:94:44:42:21:A0:F5:48:2D:7F:8D:19:15:08:52"}}},"request":{"raw":"GET /B5sLi9Stwf8xRFrbJ6Bm6wZojhuyzkGcWowZenqKD4fz/ HTTP/1.1\r\nHost: sxkbzjsq65wh654do6f2fcn4t5phs2iozxkrihpxbz4jaqr3fuaq.mainnet-1.datasprite-cdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://firelight.run/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 25 Sep 2026 05:36:52 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\npriority: u=5,i\r\nvary: Origin\r\nx-irys-item-id: B5sLi9Stwf8xRFrbJ6Bm6wZojhuyzkGcWowZenqKD4fz\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-content-type: image/webp\r\nx-content-length: 2356\r\ncache-control: max-age=2592000\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=C2aqo1uuwl8MgudIGaPxFEji%2B%2BwNPzBALW3z5ewoS2pZNWLFaTS7DUOnmq%2FI%2BuFP%2FGe0PAeEptdctYU5LMbMdsOiy9s9AWShx0rd0XfZIeXRVNosGkuQnr3BvyJ%2B%2FqWsrRLSf5k0bA3W5G3gO%2FROyiDEUDWH09Fq3H3EL7FuvG2nu%2BAcpvWknFMcQVIsmEv5EWZmmb9EFe7qmDJykeAeEJJb0B4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a407ac736da5b509-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 2356\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2356,"size_decoded":3242,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 120x120, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"bd6e008d46c0a066bc6c0aac19afbbe5","sha1":"07e1119604e23a43c48944d63195c32b9abea690","sha256":"73e949222e63cad11d0161f059a896dd90a45de74ae22684f8fa4753252e1097","sha512":"db29c6a4b440bf07f9e15f8e32cd1f33de1dd94f5ec1a22ec4b1365429b5e56d02ef833b1c3c9f8734920f09f9ed43e89a47c2daf80370d736dbe91a67498b25","ssdeep":"","tlshash":"fe411ae60c992803a6840e1fac51982808527b683a879cd7bf3066129b9fc6173d71cc","first_seen":"2024-06-14T10:37:34Z","last_seen":"2026-09-25T06:10:52.662159Z","times_seen":4192,"resource_available":false,"data":null}},"time_used":332,"timings":{"blocked":-1,"dns":8,"connect":0,"send":0,"wait":324,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"sxkbzjsq65wh654do6f2fcn4t5phs2iozxkrihpxbz4jaqr3fuaq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"sxkbzjsq65wh654do6f2fcn4t5phs2iozxkrihpxbz4jaqr3fuaq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"sxkbzjsq65wh654do6f2fcn4t5phs2iozxkrihpxbz4jaqr3fuaq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"3piw7lupog56srrpctt46tuuiroz3dh47v2vjdtocircg3f7u4za.mainnet-1.datasprite-cdn.com/Fo5WiNNZWKWpLsBjTE9UVq9c5h2Y9DKF9BCyMd9f4p4H/","fqdn":"3piw7lupog56srrpctt46tuuiroz3dh47v2vjdtocircg3f7u4za.mainnet-1.datasprite-cdn.com","domain":"datasprite-cdn.com","tld":"com"},"ip":{"addr":"104.21.15.158","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://firelight.run/","date":"2026-09-25T05:36:51.805Z","timestamp":1790314611805,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"datasprite-cdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 01 Sep 2026 16:12:35 GMT","end":"Mon, 30 Nov 2026 17:12:28 GMT"},"fingerprint":{"sha1":"A7:49:1F:BA:09:CF:9C:E9:55:85:E1:3E:6A:46:2B:56:1A:DD:E7:32","sha256":"57:8A:D0:59:59:01:19:C2:80:F0:3E:E8:83:04:E6:8C:0B:A5:94:44:42:21:A0:F5:48:2D:7F:8D:19:15:08:52"}}},"request":{"raw":"GET /Fo5WiNNZWKWpLsBjTE9UVq9c5h2Y9DKF9BCyMd9f4p4H/ HTTP/1.1\r\nHost: 3piw7lupog56srrpctt46tuuiroz3dh47v2vjdtocircg3f7u4za.mainnet-1.datasprite-cdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://firelight.run/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 25 Sep 2026 05:36:52 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\npriority: u=5,i\r\nvary: Origin\r\nx-irys-item-id: Fo5WiNNZWKWpLsBjTE9UVq9c5h2Y9DKF9BCyMd9f4p4H\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-content-type: image/png\r\nx-content-length: 2470\r\ncache-control: max-age=2592000\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=spYns5tJaOrO80n9uLV29kIcn%2Bwg55O6N6l20yfhTPZ3RgJmajYLmyKmR0GDJmV7p0RSAV7W1Ao6Nzim3tqJfHkGFAV9cPKOM9oFcNmvXLE3OChgUXHmqeHnsEkuw21GU6vswppPFsH1hm7G7gxePs8rOpeoh7walWywZbSm7yzaRkcbbcfr50PUtPJwh7LS2OSuWvf7txV7uOe4b4Gx9JWG0Ro%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a407ac740db4b509-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 2470\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2470,"size_decoded":3338,"mime_type":"image/png","magic":"PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced","md5":"4355d3f289b817968cd2b1f249ba51b5","sha1":"477353c1a6a88d3d79647d85af54eccdde58b182","sha256":"3f2a414142b4b1afc8d993da729eaef92ff5d0fe00106794c4e2e0e4bc1a146f","sha512":"d832eabfa8fea1aef11fbdba8460614ad29991aae9ab3b260d9b01c267c2a338c5f1d9c50eaa599b916442a3b96617e47a8ea7f849d2401b14cd03d2e34b2d88","ssdeep":"","tlshash":"b6513b71b53df5f288802ad7318b6995368db17a8225e1c9944a42a4f2a59af700cb03","first_seen":"2026-06-11T07:30:29.726152Z","last_seen":"2026-09-25T06:10:52.697104Z","times_seen":40,"resource_available":false,"data":null}},"time_used":196,"timings":{"blocked":-1,"dns":7,"connect":0,"send":0,"wait":189,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"3piw7lupog56srrpctt46tuuiroz3dh47v2vjdtocircg3f7u4za.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"3piw7lupog56srrpctt46tuuiroz3dh47v2vjdtocircg3f7u4za.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"3piw7lupog56srrpctt46tuuiroz3dh47v2vjdtocircg3f7u4za.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"elliptical-rabbit.icu/api/cap/redeem","fqdn":"elliptical-rabbit.icu","domain":"elliptical-rabbit.icu","tld":"icu"},"ip":{"addr":"172.67.175.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://firelight.run/","date":"2026-09-25T05:36:53.512Z","timestamp":1790314613512,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"elliptical-rabbit.icu","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 24 Sep 2026 03:48:05 GMT","end":"Wed, 23 Dec 2026 03:48:04 GMT"},"fingerprint":{"sha1":"AD:2B:26:5C:52:6E:8A:37:7A:A9:99:10:86:6F:5A:9E:A9:32:7E:E0","sha256":"54:29:B2:09:23:E1:46:70:31:71:D4:37:47:D6:45:84:C0:8E:33:39:75:8D:75:36:6C:3B:4F:C8:9F:60:CB:93"}}},"request":{"raw":"OPTIONS /api/cap/redeem HTTP/1.1\r\nHost: elliptical-rabbit.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://firelight.run/\r\nOrigin: https://firelight.run\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 \r\ndate: Fri, 25 Sep 2026 05:36:53 GMT\r\naccess-control-allow-headers: Content-Type, Authorization\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-origin: *\r\nvary: Accept-Encoding\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zOs%2FAorHG%2BIouLzDMBY33e1bivmU4FjooSciS2DTNUSooY0Kdpo6t5xEPAmjrRRBekIeBabN7%2BYyWsDh9DsjVs6MFmO6hGMsbNLorQTCv8B8W1pI%2F9Er3aJ2X2P894VMqEmx%2BCrl1BY%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: a407ac7e7d44b51b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":677,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-25T12:27:37.283953Z","times_seen":18651356,"resource_available":true,"data":null}},"time_used":148,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":148,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"elliptical-rabbit.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"elliptical-rabbit.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"firelight.run/9ZOkG0aCgT86xGuT3RCAx4DQ.png","fqdn":"firelight.run","domain":"firelight.run","tld":"run"},"ip":{"addr":"104.21.13.148","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://firelight.run/","date":"2026-09-25T05:36:49.791Z","timestamp":1790314609791,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"firelight.run","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 24 Sep 2026 11:54:24 GMT","end":"Wed, 23 Dec 2026 11:54:23 GMT"},"fingerprint":{"sha1":"02:54:09:B5:1A:C4:80:FE:25:D5:90:D5:C2:96:72:47:EA:08:E4:AE","sha256":"3B:A7:9F:77:5F:07:1D:DF:C1:4E:DC:82:26:78:98:F9:C7:9C:E6:6F:08:FA:7C:0D:00:C0:A7:B5:72:83:E1:45"}}},"request":{"raw":"GET /9ZOkG0aCgT86xGuT3RCAx4DQ.png HTTP/1.1\r\nHost: firelight.run\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://firelight.run/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 25 Sep 2026 05:36:49 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 21 Apr 2026 11:39:44 GMT\r\npriority: u=5,i\r\netag: \"69e76200-2559\"\r\naccept-ranges: bytes\r\nage: 3\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Ibyt2Wqhy35TAY%2BNitYpsK3ubhyK5AiAGyRneTLHsgCuZJK805Vgqv9eK2Evddk0Q54%2BXZgu%2BwbMsyyv6kgA%2BS6qks1Aq8W%2FcTRob5PxeM30sz8O5APjaOWsYrK%2BERUA\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a407ac673e222efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 9561\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9561,"size_decoded":10256,"mime_type":"image/png","magic":"PNG image data, 512 x 330, 8-bit colormap, non-interlaced","md5":"325c005cc1e45972382827f49da0ea96","sha1":"21f62e23c13dade325e4c67f7120144d8c1b000f","sha256":"28a269ed570eb9464988f5f1f95f0ad058af621737c019168764e7ff9729db5e","sha512":"c7a86a6b652478b09fd68683da1c1aa291c52bdb6dcf90f92c1c1876b41e183827e46a4957273291708f691d769268355a175b5cfed0c9107da5ee3b878ddb42","ssdeep":"192:UN57AmbeVJVa3qiQXLS/w78IuvOu1U1MOb9ndxMCYdEyGsSTtY:ituVpiy76vOuW3N9zTtY","tlshash":"ee12c0517a4fa87f5687233802aa639154426de4eee9dc2f07737e3c98281b172586cf","first_seen":"2026-04-24T15:23:09.435668Z","last_seen":"2026-09-25T05:38:01.270607Z","times_seen":21,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"firelight.run","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-25","alert":"Phishing Block","trigger":"firelight.run","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"firelight.run","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"firelight.run/2aAyxpp1aqvc4jyKnEdJKRLT8Lw-1.png","fqdn":"firelight.run","domain":"firelight.run","tld":"run"},"ip":{"addr":"104.21.13.148","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://firelight.run/","date":"2026-09-25T05:36:49.795Z","timestamp":1790314609795,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"firelight.run","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 24 Sep 2026 11:54:24 GMT","end":"Wed, 23 Dec 2026 11:54:23 GMT"},"fingerprint":{"sha1":"02:54:09:B5:1A:C4:80:FE:25:D5:90:D5:C2:96:72:47:EA:08:E4:AE","sha256":"3B:A7:9F:77:5F:07:1D:DF:C1:4E:DC:82:26:78:98:F9:C7:9C:E6:6F:08:FA:7C:0D:00:C0:A7:B5:72:83:E1:45"}}},"request":{"raw":"GET /2aAyxpp1aqvc4jyKnEdJKRLT8Lw-1.png HTTP/1.1\r\nHost: firelight.run\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://firelight.run/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 25 Sep 2026 05:36:49 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 21 Apr 2026 11:39:44 GMT\r\npriority: u=5,i\r\netag: \"69e76200-2930\"\r\naccept-ranges: bytes\r\nage: 3\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PswSjeFCLMgzxfAq%2Bw73c%2BGERUUrrkUpItSYPC09vHNkdgXtksrJlb8YKItnoZNUqXtNeZWtryoAx%2BtmxxxB7xJGjq7NLAdkDK%2FvdzH1fYSjFQiAc5%2FAZcsf4rX%2FxYl7\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a407ac673e262efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 10544\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10544,"size_decoded":11240,"mime_type":"image/png","magic":"PNG image data, 512 x 384, 8-bit colormap, non-interlaced","md5":"ad0389142192fa77d4655eeac3875267","sha1":"ed37fffbc9143807f4b38ff004f1c693a7fb982f","sha256":"91ac80610f3a72ee41bb54531bcf11d3b88b301d2c9b5cf3f2a5d571fdc73fbe","sha512":"197cb672765fbdf1dcd4acc495c6f785c67cc043394dcc23e95527842db794ee75cfac47f605bf20d8f7971b6fbb9067ea150e73f7f6c9dfffeff4316d851d72","ssdeep":"192:2gZ+WDdyPCmBDMecRJiGDQx02F0bQO3YpEdJCnGmOMqBAZb0sVsXJ:KWDdOJDM7QxFF0TIpEOPqB0Na5","tlshash":"55229f1a9bc737014d22bd3b29c43167a3b3e79205374aee7468daf1eac9441b569318","first_seen":"2026-04-29T09:31:56.2608Z","last_seen":"2026-09-25T05:38:01.3006Z","times_seen":21,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-25","alert":"Phishing Block","trigger":"firelight.run","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"firelight.run","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"firelight.run","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gateway.irys.xyz/3GFibxLTiHvi7DucnoGZGgHbWb3eA9cXG3E85dEnjRsi","fqdn":"gateway.irys.xyz","domain":"irys.xyz","tld":"xyz"},"ip":{"addr":"172.66.167.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://firelight.run/","date":"2026-09-25T05:36:51.256Z","timestamp":1790314611256,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gateway.irys.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 20 Sep 2026 11:49:06 GMT","end":"Sat, 19 Dec 2026 11:49:05 GMT"},"fingerprint":{"sha1":"1B:75:8F:42:C3:0D:D3:04:72:4A:4F:BC:B0:44:35:11:BD:B0:C1:3A","sha256":"5D:7C:E7:8F:C7:B7:35:6E:0D:92:E6:E6:6C:71:F4:0D:D9:DE:7D:74:E5:56:33:7F:8D:2C:15:B1:80:E9:5D:E0"}}},"request":{"raw":"GET /3GFibxLTiHvi7DucnoGZGgHbWb3eA9cXG3E85dEnjRsi HTTP/1.1\r\nHost: gateway.irys.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://firelight.run/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 \r\ndate: Fri, 25 Sep 2026 05:36:51 GMT\r\ncontent-length: 0\r\nlocation: https://egp3uffvpgr2wpafcervpo3f64y2lpvikbnscmfvn3udttq77joq.mainnet-1.datasprite-cdn.com/3GFibxLTiHvi7DucnoGZGgHbWb3eA9cXG3E85dEnjRsi/\r\nserver: cloudflare\r\naccess-control-allow-credentials: true\r\ncache-control: no-store\r\naccess-control-expose-headers: cache-control, location\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nx-cache-status: BYPASS\r\ncf-cache-status: BYPASS\r\ncf-ray: a407ac711dd35687-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/webp","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-25T12:27:37.283953Z","times_seen":18651356,"resource_available":true,"data":null}},"time_used":265,"timings":{"blocked":35,"dns":0,"connect":1,"send":0,"wait":173,"receive":0,"ssl":40},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"firelight.run/vQyevYAyHtARFwPqUzQGpnDs.woff2","fqdn":"firelight.run","domain":"firelight.run","tld":"run"},"ip":{"addr":"104.21.13.148","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://firelight.run/","date":"2026-09-25T05:36:51.396Z","timestamp":1790314611396,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"firelight.run","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 24 Sep 2026 11:54:24 GMT","end":"Wed, 23 Dec 2026 11:54:23 GMT"},"fingerprint":{"sha1":"02:54:09:B5:1A:C4:80:FE:25:D5:90:D5:C2:96:72:47:EA:08:E4:AE","sha256":"3B:A7:9F:77:5F:07:1D:DF:C1:4E:DC:82:26:78:98:F9:C7:9C:E6:6F:08:FA:7C:0D:00:C0:A7:B5:72:83:E1:45"}}},"request":{"raw":"GET /vQyevYAyHtARFwPqUzQGpnDs.woff2 HTTP/1.1\r\nHost: firelight.run\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://firelight.run/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 25 Sep 2026 05:36:51 GMT\r\ncontent-type: text/html\r\nlast-modified: Sun, 20 Sep 2026 09:00:48 GMT\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SUO%2B7cG%2FdNZPBooZVKxwI4p6rkl8QkEy%2FZeQVRxdPs46TTgDQpAOtd%2FppSyDsfPkeWlLRNT3Xio93dJEMqpKZ0d%2FR%2BhGkjRgItcRsBC%2FUpUvj%2FXBF%2FfrlwKjNIqWQtFD\"}]}\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a407ac7138752efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"React","description":"React is an open-source JavaScript library for building user interfaces or UI components.","website":"https://reactjs.org","common_platform_enumeration":"cpe:2.3:a:facebook:react:*:*:*:*:*:*:*:*","icon":"React.svg","categories":["JavaScript frameworks"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Framer Sites","description":"Framer is a no-code web design platform for designing and publishing responsive websites.","website":"https://www.framer.com","common_platform_enumeration":"","icon":"Framer Sites.svg","categories":["CMS","Page builders"]}],"data":{"size":440375,"size_decoded":52412,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1572)","md5":"3f70015e33a9796b21ed3d3fe64025ee","sha1":"e6c9d1dd0bcff690b51db55680049b4f989c17c8","sha256":"5ee2b7ec29a1dcf6772a4fae51caa8a7e74265ef0f5f14c73ecf7af616baccae","sha512":"f4c181ce1424bf53ba597590435d61a4ceb712219a1bdde0445bd11d2d4b8b0342daab4fc9e8beabe1a2983b5a96a9f0c374baff17922b2817f024693b69976d","ssdeep":"3072:yNuTSYcLGIJ1e+BY9mxeh5evVt94foO0WcAfYtI4fzM0WcEfD:yNu0H4AEh4bA","tlshash":"4b94c6136214d0385dc729bdf7d9ba1c251ca201fb3286ea62fd426f95c9ef412a27dc","first_seen":"2026-09-25T05:38:00.053396Z","last_seen":"2026-09-25T05:38:01.265667Z","times_seen":2,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"firelight.run","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"firelight.run","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-25","alert":"Phishing Block","trigger":"firelight.run","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lqm65l4rsie7lcqzwyygqd4xmycpt6vpx7jqzqhlj6x4xnaxvvva.mainnet-1.datasprite-cdn.com/7CXSgx8jsxLxjzMCMaadAm2zy2HXnfgpYFs2sF6C1kEV/","fqdn":"lqm65l4rsie7lcqzwyygqd4xmycpt6vpx7jqzqhlj6x4xnaxvvva.mainnet-1.datasprite-cdn.com","domain":"datasprite-cdn.com","tld":"com"},"ip":{"addr":"104.21.15.158","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://firelight.run/","date":"2026-09-25T05:36:51.738Z","timestamp":1790314611738,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"datasprite-cdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 01 Sep 2026 16:12:35 GMT","end":"Mon, 30 Nov 2026 17:12:28 GMT"},"fingerprint":{"sha1":"A7:49:1F:BA:09:CF:9C:E9:55:85:E1:3E:6A:46:2B:56:1A:DD:E7:32","sha256":"57:8A:D0:59:59:01:19:C2:80:F0:3E:E8:83:04:E6:8C:0B:A5:94:44:42:21:A0:F5:48:2D:7F:8D:19:15:08:52"}}},"request":{"raw":"GET /7CXSgx8jsxLxjzMCMaadAm2zy2HXnfgpYFs2sF6C1kEV/ HTTP/1.1\r\nHost: lqm65l4rsie7lcqzwyygqd4xmycpt6vpx7jqzqhlj6x4xnaxvvva.mainnet-1.datasprite-cdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://firelight.run/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 25 Sep 2026 05:36:52 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\npriority: u=5,i\r\nvary: Origin\r\nx-irys-item-id: 7CXSgx8jsxLxjzMCMaadAm2zy2HXnfgpYFs2sF6C1kEV\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-content-type: image/webp\r\nx-content-length: 1872\r\ncache-control: max-age=2592000\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6wdP4MoCcucnMya8jr03GGQexyU4GTZRdbWpbybUibLZPAmat7pFGpP2Z57drk9uGE0PcTaO4nCZOT%2F%2BE6%2FMSNNz9Sgq1FPkqim4TTjpulebyy0gXkKaZ6Vx0zJkdPDv%2Bad4LygBhSd6BySp9DfGnIo2HWeGScTH5qccmNrFkc%2F6UJ8RfXn3IQrdfp%2FZuXQFjXpW2lYPGWpsxl4fTvXkltla9Mw%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a407ac737da8b509-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1872\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1872,"size_decoded":2752,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 120x120, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"fa48538b8c0947b346de80dc1db8f9e2","sha1":"96276e1d6db34abd142a0ed483565490254f7f40","sha256":"1524f9642a2f1a5bec991fce624446c42edc2dadd25423bbf62a6cc274907d6d","sha512":"6a0188ae528eb3ab059e6aa4e6c3411c476baaabdad34099c10e60b27bd5aaa82c27df35caeb1edfb62b07763b71e2e4ea83cb419e7a427df38a8a0fc4fdca24","ssdeep":"","tlshash":"20315d5ea4bf54f928c1b41b948392e4e021e121c058b27cc9f1bb7c18f511243a8667","first_seen":"2026-06-10T18:04:23.905993Z","last_seen":"2026-09-25T06:10:52.70219Z","times_seen":45,"resource_available":false,"data":null}},"time_used":340,"timings":{"blocked":-1,"dns":8,"connect":0,"send":0,"wait":332,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"lqm65l4rsie7lcqzwyygqd4xmycpt6vpx7jqzqhlj6x4xnaxvvva.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"lqm65l4rsie7lcqzwyygqd4xmycpt6vpx7jqzqhlj6x4xnaxvvva.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"lqm65l4rsie7lcqzwyygqd4xmycpt6vpx7jqzqhlj6x4xnaxvvva.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ch75ckxualkloc7t5fsfem56e5odt55sl7lel66ksibigpvzxsda.mainnet-1.datasprite-cdn.com/2DGBFeacTMVeEKeuYdJgdXZMjMhUFdxygmQLNcvBR3iu/","fqdn":"ch75ckxualkloc7t5fsfem56e5odt55sl7lel66ksibigpvzxsda.mainnet-1.datasprite-cdn.com","domain":"datasprite-cdn.com","tld":"com"},"ip":{"addr":"104.21.15.158","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://firelight.run/","date":"2026-09-25T05:36:51.750Z","timestamp":1790314611750,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"datasprite-cdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 01 Sep 2026 16:12:35 GMT","end":"Mon, 30 Nov 2026 17:12:28 GMT"},"fingerprint":{"sha1":"A7:49:1F:BA:09:CF:9C:E9:55:85:E1:3E:6A:46:2B:56:1A:DD:E7:32","sha256":"57:8A:D0:59:59:01:19:C2:80:F0:3E:E8:83:04:E6:8C:0B:A5:94:44:42:21:A0:F5:48:2D:7F:8D:19:15:08:52"}}},"request":{"raw":"GET /2DGBFeacTMVeEKeuYdJgdXZMjMhUFdxygmQLNcvBR3iu/ HTTP/1.1\r\nHost: ch75ckxualkloc7t5fsfem56e5odt55sl7lel66ksibigpvzxsda.mainnet-1.datasprite-cdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://firelight.run/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 25 Sep 2026 05:36:52 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\npriority: u=5,i\r\nvary: Origin\r\nx-irys-item-id: 2DGBFeacTMVeEKeuYdJgdXZMjMhUFdxygmQLNcvBR3iu\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-content-type: image/webp\r\nx-content-length: 1140\r\ncache-control: max-age=2592000\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NgN0voDA5gqSRJoFjXwLazoSD6hEPFNCHKtkmG8fsWGkdBJ%2FSbIeI%2BnqDV4U8M3nzHSZ0Oe7Ndyja7rnCFEgqIGtlS6F%2FbYZLzI%2BRwjoTsBLMYuf4wKOJXZr4hApKb84FI4q2Lup10Kj7sYkmiqeXFFzwAR3OlZUc8XA98obdT%2FmQCXF%2FUTMdW7ybKC%2B4oJoZKwQpBgRs2CTEn%2FY7vMEd7H%2B7wg%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a407ac747dbcb509-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1140\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1140,"size_decoded":2026,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 120x120, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"38199112def1eae2fe5fc00974d1d026","sha1":"d70d4dd4ea783a3dced58500831af409a2e39f6d","sha256":"58e137e626c100f7c0833a85cbcec7d41d366f3467372c333bf2cbf093329915","sha512":"c37eabb11ba6027c77f3ddbdeaf7dd1a24cfafee67ffdb62c354c60ef51eeb9b6ccb7ebdc866601ce090c54bb24eb736955eb5b74b905addf734b54da3d049b3","ssdeep":"","tlshash":"1d21a386ec313f278f2a52a66eb351492a9cd038fba2b9b1662908c0493c69dc895024","first_seen":"2024-07-08T23:13:44Z","last_seen":"2026-09-25T06:10:52.65248Z","times_seen":126,"resource_available":false,"data":null}},"time_used":271,"timings":{"blocked":83,"dns":8,"connect":0,"send":0,"wait":180,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"ch75ckxualkloc7t5fsfem56e5odt55sl7lel66ksibigpvzxsda.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"ch75ckxualkloc7t5fsfem56e5odt55sl7lel66ksibigpvzxsda.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"ch75ckxualkloc7t5fsfem56e5odt55sl7lel66ksibigpvzxsda.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ickanb5psbhquhnys6hyxxn5kcs7k75kvqwlajid5qycvq2ijgra.mainnet-1.datasprite-cdn.com/5M61R7ETnvpQLgBp7a6DRVWm759u5Ls8PB1FWJv52rx1/","fqdn":"ickanb5psbhquhnys6hyxxn5kcs7k75kvqwlajid5qycvq2ijgra.mainnet-1.datasprite-cdn.com","domain":"datasprite-cdn.com","tld":"com"},"ip":{"addr":"104.21.15.158","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://firelight.run/","date":"2026-09-25T05:36:51.779Z","timestamp":1790314611779,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"datasprite-cdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 01 Sep 2026 16:12:35 GMT","end":"Mon, 30 Nov 2026 17:12:28 GMT"},"fingerprint":{"sha1":"A7:49:1F:BA:09:CF:9C:E9:55:85:E1:3E:6A:46:2B:56:1A:DD:E7:32","sha256":"57:8A:D0:59:59:01:19:C2:80:F0:3E:E8:83:04:E6:8C:0B:A5:94:44:42:21:A0:F5:48:2D:7F:8D:19:15:08:52"}}},"request":{"raw":"GET /5M61R7ETnvpQLgBp7a6DRVWm759u5Ls8PB1FWJv52rx1/ HTTP/1.1\r\nHost: ickanb5psbhquhnys6hyxxn5kcs7k75kvqwlajid5qycvq2ijgra.mainnet-1.datasprite-cdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://firelight.run/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 25 Sep 2026 05:36:51 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\npriority: u=5,i\r\nvary: Origin\r\nx-irys-item-id: 5M61R7ETnvpQLgBp7a6DRVWm759u5Ls8PB1FWJv52rx1\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-content-type: image/webp\r\nx-content-length: 1452\r\ncache-control: max-age=2592000\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lNCvW3W0vn6Xt03oVz3JPTqf3krVklhBQEWPFxMhFUvTcTcBcaihHbQDmPuSpl961XsUqfHWpfkrqmYgUvgzLj50Sok8IKILRzQ1OsxbSstJ94R1A7b%2F2Dx7EUATRvU%2FtI2mVyZfVUU7%2B%2B%2B2%2Fhdh66b15HwyWMsClp98HGN1ikMkhmoL7DTeMSK0hJsBnwaiKn9Rass8AObw4%2FJJDKkXPJ29DNY%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a407ac73cdb0b509-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1452\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1452,"size_decoded":2334,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 120x120, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"d81c49695819f693444e4bd4092faff5","sha1":"74ebd3a7b2767141113e39f665a9a62263b9f9c8","sha256":"da70c65bcaa3eb9055680c90a554a442d877b60792e78ba9f028bcbfe90481cf","sha512":"7281103bddc9ce3820382949e7e1132c4ec542e1594649134676474facaa4d2bec1a7668b16380f39d2a46cc78fb9f47170acc006b8387e12c9c8806014ecd1b","ssdeep":"","tlshash":"ac311cdb657b0030a35b442579301afb2370788ca9ea512e41152a7a1e930d3e2d04d3","first_seen":"2026-02-10T08:05:59.361585Z","last_seen":"2026-09-25T06:10:52.678754Z","times_seen":59,"resource_available":false,"data":null}},"time_used":199,"timings":{"blocked":-1,"dns":5,"connect":0,"send":0,"wait":194,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"ickanb5psbhquhnys6hyxxn5kcs7k75kvqwlajid5qycvq2ijgra.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"ickanb5psbhquhnys6hyxxn5kcs7k75kvqwlajid5qycvq2ijgra.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"ickanb5psbhquhnys6hyxxn5kcs7k75kvqwlajid5qycvq2ijgra.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"3zda2p33cro63eoev6gcult7nzm6vegrll7kg6cknocqfq4tavva.mainnet-1.datasprite-cdn.com/FxfTrcshALLke9qQSKxpTpvZHc6wdnzk3EmjMb9bbith/","fqdn":"3zda2p33cro63eoev6gcult7nzm6vegrll7kg6cknocqfq4tavva.mainnet-1.datasprite-cdn.com","domain":"datasprite-cdn.com","tld":"com"},"ip":{"addr":"104.21.15.158","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://firelight.run/","date":"2026-09-25T05:36:51.802Z","timestamp":1790314611802,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"datasprite-cdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 01 Sep 2026 16:12:35 GMT","end":"Mon, 30 Nov 2026 17:12:28 GMT"},"fingerprint":{"sha1":"A7:49:1F:BA:09:CF:9C:E9:55:85:E1:3E:6A:46:2B:56:1A:DD:E7:32","sha256":"57:8A:D0:59:59:01:19:C2:80:F0:3E:E8:83:04:E6:8C:0B:A5:94:44:42:21:A0:F5:48:2D:7F:8D:19:15:08:52"}}},"request":{"raw":"GET /FxfTrcshALLke9qQSKxpTpvZHc6wdnzk3EmjMb9bbith/ HTTP/1.1\r\nHost: 3zda2p33cro63eoev6gcult7nzm6vegrll7kg6cknocqfq4tavva.mainnet-1.datasprite-cdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://firelight.run/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 25 Sep 2026 05:36:52 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\npriority: u=5,i\r\nvary: Origin\r\nx-irys-item-id: FxfTrcshALLke9qQSKxpTpvZHc6wdnzk3EmjMb9bbith\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-content-type: image/webp\r\nx-content-length: 1636\r\ncache-control: max-age=2592000\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VfTmKBiF9rnfZ%2BSWbvFU2kTP%2BYkqo1fXJQJkD3DjQUw8I0fE3FjA%2Bb6i7S8xaIqL1NPuutYI30ArsSOrkMEcFxYnhdOqVq0t6WDaX5fWjpjAqJvVNDYVFxZldoxpObSfyEN%2BPbPaMSzfqeVlIPpksqyyJR%2B4qod9Y7cGAOYpJAaOdPoMaynKy22DrS3Mte%2BP33Dfozpr2gbrF5NWRYYmpNBtruc%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a407ac758b1f56ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1636\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1636,"size_decoded":2516,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"c1d9f166e96ca6643813a52ce800dd61","sha1":"5cb193c0fe42838abb076f604e16ff3eb995778c","sha256":"1f1e6c2ea43ebcbe3c2a532a611017834889b00ca6f5f2063fea04759410d303","sha512":"1ae26ef23cb7529560df4937cc45ad657977b7e92866991bc3a3d1dc1ab71bd32db52b30ded6fa2eb2041b770363782986391f7ab0fbc1043ab35da773069ed0","ssdeep":"","tlshash":"bb310a81a13a98a7e1fbfb534f8c366f68cca0a63f040d2909c025a080c03c488a5b93","first_seen":"2025-06-28T22:12:19.740047Z","last_seen":"2026-09-25T08:46:09.901646Z","times_seen":334,"resource_available":false,"data":null}},"time_used":419,"timings":{"blocked":229,"dns":20,"connect":0,"send":0,"wait":170,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"3zda2p33cro63eoev6gcult7nzm6vegrll7kg6cknocqfq4tavva.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"3zda2p33cro63eoev6gcult7nzm6vegrll7kg6cknocqfq4tavva.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"3zda2p33cro63eoev6gcult7nzm6vegrll7kg6cknocqfq4tavva.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"firelight.run/fOruntY6VgYrkBEYdsidSFOtUg-1.png","fqdn":"firelight.run","domain":"firelight.run","tld":"run"},"ip":{"addr":"104.21.13.148","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://firelight.run/","date":"2026-09-25T05:36:49.794Z","timestamp":1790314609794,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"firelight.run","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 24 Sep 2026 11:54:24 GMT","end":"Wed, 23 Dec 2026 11:54:23 GMT"},"fingerprint":{"sha1":"02:54:09:B5:1A:C4:80:FE:25:D5:90:D5:C2:96:72:47:EA:08:E4:AE","sha256":"3B:A7:9F:77:5F:07:1D:DF:C1:4E:DC:82:26:78:98:F9:C7:9C:E6:6F:08:FA:7C:0D:00:C0:A7:B5:72:83:E1:45"}}},"request":{"raw":"GET /fOruntY6VgYrkBEYdsidSFOtUg-1.png HTTP/1.1\r\nHost: firelight.run\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://firelight.run/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 25 Sep 2026 05:36:49 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 21 Apr 2026 11:39:44 GMT\r\npriority: u=5,i\r\netag: \"69e76200-247e\"\r\naccept-ranges: bytes\r\nage: 3\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xRZa4Pzt90C75WvMDcJw1wBu5WVoS7wqCJpcKXqz%2Bk6qeOPuxlCMZjE69jlNKUh9iZrFhI36K2jBvs9DxjoW3DT7MgqiUNsiPsr82YJyZbzgrnaqOUllebng0rC8jqr9\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a407ac673e252efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 9342\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9342,"size_decoded":10027,"mime_type":"image/png","magic":"PNG image data, 512 x 384, 8-bit colormap, non-interlaced","md5":"46f91da4dfa69727c3e5bae072b02e01","sha1":"fce5de906e797a1cb5706ff97ad17ccd1a83706a","sha256":"070197793e20ccfd87737c8113c2926f251c8a98a7e697f369fa54b2c92ac7c4","sha512":"9dda62e51b554abc588734254c7da9039d4ec2dae4fd29ace3677e18df4bfb82063b80d00740a4f3f690c50bb94bb9dd14a941a6a17b78391130abff0608faaf","ssdeep":"192:trYYNyE1elD5GjyZ2PxQwhtNtEjbUWZpUDSvdpG6SPimnVllzjGE:hBNyE1cD5XZi5yjZpUgp4imRnZ","tlshash":"be12afca5a59d8d68b34b904d8c5349d79254b9f12fe5e930703203929cb3c8c6ef7b0","first_seen":"2026-04-29T09:31:56.271822Z","last_seen":"2026-09-25T05:38:01.279516Z","times_seen":21,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"firelight.run","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"firelight.run","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-25","alert":"Phishing Block","trigger":"firelight.run","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"firelight.run/wFuhhmjuX0KkPkMLBStHTRbS81M.mp4","fqdn":"firelight.run","domain":"firelight.run","tld":"run"},"ip":{"addr":"104.21.13.148","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://firelight.run/","date":"2026-09-25T05:36:49.891Z","timestamp":1790314609891,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"firelight.run","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 24 Sep 2026 11:54:24 GMT","end":"Wed, 23 Dec 2026 11:54:23 GMT"},"fingerprint":{"sha1":"02:54:09:B5:1A:C4:80:FE:25:D5:90:D5:C2:96:72:47:EA:08:E4:AE","sha256":"3B:A7:9F:77:5F:07:1D:DF:C1:4E:DC:82:26:78:98:F9:C7:9C:E6:6F:08:FA:7C:0D:00:C0:A7:B5:72:83:E1:45"}}},"request":{"raw":"GET /wFuhhmjuX0KkPkMLBStHTRbS81M.mp4 HTTP/1.1\r\nHost: firelight.run\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nRange: bytes=0-\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://firelight.run/\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 25 Sep 2026 05:36:49 GMT\r\ncontent-type: text/html\r\nlast-modified: Sun, 20 Sep 2026 09:00:48 GMT\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HVdCJpKasCBWB%2Bq1nt3c80GNMbjn14mfubzW2ZuRHxg3hvIKnYwBa%2FsJQfCqk8k95kmErI4ikrcPpfzvIwK34CiVVF0isxBv1jzPWhNIfv%2Bh7auQ5Nu3lnwiRFEDN4%2Fx\"}]}\r\nage: 3\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncf-ray: a407ac67de5f2efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-25T12:27:37.283953Z","times_seen":18651356,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-25","alert":"Phishing Block","trigger":"firelight.run","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"firelight.run","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"firelight.run","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"65anjlffv6f37wsp5aoj34ltgjeakkozcoaujzb6feeub2bhg67a.mainnet-1.datasprite-cdn.com/HeB3Cq7j5UgGvECfes722J2hB6d3zFNAX8qrtvdaebbj/","fqdn":"65anjlffv6f37wsp5aoj34ltgjeakkozcoaujzb6feeub2bhg67a.mainnet-1.datasprite-cdn.com","domain":"datasprite-cdn.com","tld":"com"},"ip":{"addr":"104.21.15.158","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://firelight.run/","date":"2026-09-25T05:36:51.698Z","timestamp":1790314611698,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"datasprite-cdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 01 Sep 2026 16:12:35 GMT","end":"Mon, 30 Nov 2026 17:12:28 GMT"},"fingerprint":{"sha1":"A7:49:1F:BA:09:CF:9C:E9:55:85:E1:3E:6A:46:2B:56:1A:DD:E7:32","sha256":"57:8A:D0:59:59:01:19:C2:80:F0:3E:E8:83:04:E6:8C:0B:A5:94:44:42:21:A0:F5:48:2D:7F:8D:19:15:08:52"}}},"request":{"raw":"GET /HeB3Cq7j5UgGvECfes722J2hB6d3zFNAX8qrtvdaebbj/ HTTP/1.1\r\nHost: 65anjlffv6f37wsp5aoj34ltgjeakkozcoaujzb6feeub2bhg67a.mainnet-1.datasprite-cdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://firelight.run/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 25 Sep 2026 05:36:52 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oQ2UzD2cPXuKoCuVguX37y6wCE7%2FzP8oIZyAtsZvgiZHP%2FPVK2%2BpXJRg63fsUT1EWlybXx5ZWd5keOTUd7jooc0tW5EW6tLk8S6rQyHqYmKWGderCd%2Fpk1S0rB%2F%2BuXS9zveS6IdZlHEtRHypgNJ20GgdEz9hf%2F0i8NezbtXs6ClFWLbq6CV6pcf7I3HZv4Sdc1OAaaTV8OBOB6lWkezf0RzTq64%3D\"}]}\r\npriority: u=5,i\r\nvary: Origin\r\nx-irys-item-id: HeB3Cq7j5UgGvECfes722J2hB6d3zFNAX8qrtvdaebbj\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-content-type-options: nosniff\r\nx-content-type: image/svg+xml\r\nx-content-length: 972\r\ncache-control: max-age=2592000\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: zstd\r\ncf-ray: a407ac735a483181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":972,"size_decoded":1318,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"5ee2e1d04f03d836343ea2639b31cf08","sha1":"34095d7db2b98e0422516f11bf00c95454269dde","sha256":"f6c14eed27159bc82e0f0296ef81c645198119d155e9046a7625ab0fe0efd872","sha512":"43eb52d58fd2c852c3b566680af27143169625e37b2593019b7c09f28b6cb89f3a3d0735d92012e58bb94581e6efebf2d3aa0138714e947b61538bbe41c5bc26","ssdeep":"","tlshash":"8911edf7226e5ec5811c333e925903f9b16226d860f34641aea62e23951829ecca06dc","first_seen":"2026-06-11T07:30:29.753159Z","last_seen":"2026-09-25T06:10:52.704091Z","times_seen":43,"resource_available":false,"data":null}},"time_used":366,"timings":{"blocked":-1,"dns":3,"connect":28,"send":0,"wait":330,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"65anjlffv6f37wsp5aoj34ltgjeakkozcoaujzb6feeub2bhg67a.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"65anjlffv6f37wsp5aoj34ltgjeakkozcoaujzb6feeub2bhg67a.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"65anjlffv6f37wsp5aoj34ltgjeakkozcoaujzb6feeub2bhg67a.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"4xy5hycubobxyykm63sfnbkjznatsbung7ttetuoehkqf7ozquma.mainnet-1.datasprite-cdn.com/GUcEiBVePo1UyG8J3tBaNDDHn3k2isozZHErCoS64QLf/","fqdn":"4xy5hycubobxyykm63sfnbkjznatsbung7ttetuoehkqf7ozquma.mainnet-1.datasprite-cdn.com","domain":"datasprite-cdn.com","tld":"com"},"ip":{"addr":"104.21.15.158","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://firelight.run/","date":"2026-09-25T05:36:51.757Z","timestamp":1790314611757,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"datasprite-cdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 01 Sep 2026 16:12:35 GMT","end":"Mon, 30 Nov 2026 17:12:28 GMT"},"fingerprint":{"sha1":"A7:49:1F:BA:09:CF:9C:E9:55:85:E1:3E:6A:46:2B:56:1A:DD:E7:32","sha256":"57:8A:D0:59:59:01:19:C2:80:F0:3E:E8:83:04:E6:8C:0B:A5:94:44:42:21:A0:F5:48:2D:7F:8D:19:15:08:52"}}},"request":{"raw":"GET /GUcEiBVePo1UyG8J3tBaNDDHn3k2isozZHErCoS64QLf/ HTTP/1.1\r\nHost: 4xy5hycubobxyykm63sfnbkjznatsbung7ttetuoehkqf7ozquma.mainnet-1.datasprite-cdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://firelight.run/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 25 Sep 2026 05:36:52 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\npriority: u=5,i\r\nvary: Origin\r\nx-irys-item-id: GUcEiBVePo1UyG8J3tBaNDDHn3k2isozZHErCoS64QLf\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-content-type: image/webp\r\nx-content-length: 2526\r\ncache-control: max-age=2592000\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=d9mAwUC%2FVUEbBQkHTm37VlXCJ8QOxURh74JN9irM%2Fs2BpKQE9bj1j7Jby%2Fe4OJYZQCvMKvCXu6zFBqjeZ1CyNaEcU0YFN0H4QOJ0M6dEmvjgcvAArlQfnh3zWn5J13DpS41fHGC64mIv6XrNvYvRXIhIkuqc7TLuZ%2BNHLPcMcHEMCV8z2HOuozIDE2YH2TABnNwuhO1qt9X5RSGeAl7w6QrWQnA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a407ac73cdacb509-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 2526\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2526,"size_decoded":3402,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"34a4929f26a305bd1a8ea7fc9d0dc5b8","sha1":"b7bcdaee70176b8002e5f8573f97b543ca3afada","sha256":"10685e6d4638ee21f86f918ceb78a3e03eb6d392b6d64a99210e1eaf9341abf3","sha512":"3009b184219cf11e09493a9e0c00c1bf053dd8d6b63e0298126ba7f8f8dab504829f8622644a9771a915fa6d022a1103f70951f7c8797ed71af572c309bdc629","ssdeep":"","tlshash":"3a51396a23df013dd8a07ca3e64184a1ea5687fc3a8d56810f89e81296f60607006bfc","first_seen":"2026-06-11T07:30:29.743241Z","last_seen":"2026-09-25T08:46:10.001905Z","times_seen":258,"resource_available":false,"data":null}},"time_used":326,"timings":{"blocked":-1,"dns":13,"connect":0,"send":0,"wait":313,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"4xy5hycubobxyykm63sfnbkjznatsbung7ttetuoehkqf7ozquma.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"4xy5hycubobxyykm63sfnbkjznatsbung7ttetuoehkqf7ozquma.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"4xy5hycubobxyykm63sfnbkjznatsbung7ttetuoehkqf7ozquma.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"elliptical-rabbit.icu/api/fp","fqdn":"elliptical-rabbit.icu","domain":"elliptical-rabbit.icu","tld":"icu"},"ip":{"addr":"172.67.175.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://firelight.run/","date":"2026-09-25T05:36:54.023Z","timestamp":1790314614023,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"elliptical-rabbit.icu","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 24 Sep 2026 03:48:05 GMT","end":"Wed, 23 Dec 2026 03:48:04 GMT"},"fingerprint":{"sha1":"AD:2B:26:5C:52:6E:8A:37:7A:A9:99:10:86:6F:5A:9E:A9:32:7E:E0","sha256":"54:29:B2:09:23:E1:46:70:31:71:D4:37:47:D6:45:84:C0:8E:33:39:75:8D:75:36:6C:3B:4F:C8:9F:60:CB:93"}}},"request":{"raw":"OPTIONS /api/fp HTTP/1.1\r\nHost: elliptical-rabbit.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://firelight.run/\r\nOrigin: https://firelight.run\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 \r\ndate: Fri, 25 Sep 2026 05:36:54 GMT\r\naccess-control-allow-headers: Content-Type, Authorization\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-origin: *\r\nvary: Accept-Encoding\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ePKs1b7YnE%2FInDCbGkPVw0QSqlbOnmEQpyKOteI5V%2BnPvWnXu9dpmEnJc7Y99P3HF23n%2FlheOntcW0eex0Gs5SJrtuHLI8Qh3%2FUCo%2FK5Ql5mN4gXDHc6BsdTgkt081nNOy7n%2BONis30%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: a407ac81a86ab51b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":679,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-25T12:27:37.283953Z","times_seen":18651356,"resource_available":true,"data":null}},"time_used":147,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":147,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"elliptical-rabbit.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"elliptical-rabbit.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"firelight.run/0cb1894f50a5c2ade690c461347c7d8631faf0a4.svg","fqdn":"firelight.run","domain":"firelight.run","tld":"run"},"ip":{"addr":"104.21.13.148","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://firelight.run/","date":"2026-09-25T05:36:49.849Z","timestamp":1790314609849,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"firelight.run","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 24 Sep 2026 11:54:24 GMT","end":"Wed, 23 Dec 2026 11:54:23 GMT"},"fingerprint":{"sha1":"02:54:09:B5:1A:C4:80:FE:25:D5:90:D5:C2:96:72:47:EA:08:E4:AE","sha256":"3B:A7:9F:77:5F:07:1D:DF:C1:4E:DC:82:26:78:98:F9:C7:9C:E6:6F:08:FA:7C:0D:00:C0:A7:B5:72:83:E1:45"}}},"request":{"raw":"GET /0cb1894f50a5c2ade690c461347c7d8631faf0a4.svg HTTP/1.1\r\nHost: firelight.run\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://firelight.run/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 25 Sep 2026 05:36:49 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=v1HtZ92knhT8JkcCHWppXjq%2Biul%2Bi%2BLuICnsjqsJv%2Bbp3PfJij0hhMCvdXJDaZKuZQmD8grUffmlqSH1qlobLQlLmjbGRE%2FMREdLt41hc%2BcRhYcGJ%2F%2FYiDbN0ssvoHbh\"}]}\r\nlast-modified: Tue, 21 Apr 2026 11:39:44 GMT\r\npriority: u=4,i\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"69e76200-1c21\"\r\nage: 3\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a407ac678e4f2efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7201,"size_decoded":3448,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"24cbbbebe06d4a5850ad67e6068f79f6","sha1":"0cb1894f50a5c2ade690c461347c7d8631faf0a4","sha256":"7bd532e3a4ebced01358408339f03d015d9edb8e0156da8919cf386de05e1c5c","sha512":"9f2b4c383ed8f74a51f6617a1cb2a51d923e3a1a5c9589993e05414343b19d7f1f8fb2eef19b8f16124eccd4e301bc80a35d029ab3cd389aa59f643bbbad1ca9","ssdeep":"192:xleT+7MERwQO/fmJEbvqtIxiFbZ3pEKkF9b:6JSKfJl2bZG3b","tlshash":"ece165edef7c2a7cf4c8a7eaf323106c7b0aeca01915ce5ac65d4d5a588284c9915cc3","first_seen":"2026-04-24T15:23:09.438265Z","last_seen":"2026-09-25T05:38:01.274064Z","times_seen":18,"resource_available":false,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"firelight.run","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"firelight.run","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-25","alert":"Phishing Block","trigger":"firelight.run","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bsc.publicnode.com/","fqdn":"bsc.publicnode.com","domain":"publicnode.com","tld":"com"},"ip":{"addr":"172.66.150.162","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://firelight.run/","date":"2026-09-25T05:36:51.634Z","timestamp":1790314611634,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"publicnode.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 07 Aug 2026 02:01:04 GMT","end":"Thu, 05 Nov 2026 03:00:51 GMT"},"fingerprint":{"sha1":"94:5F:9F:32:64:19:A5:50:59:22:7E:16:22:E5:6B:9B:1C:65:F3:ED","sha256":"7D:67:31:E8:80:74:FB:3E:3C:A4:1B:9F:F0:BE:71:56:CE:95:31:97:BD:28:75:B6:47:AA:02:45:08:74:76:65"}}},"request":{"raw":"POST / HTTP/1.1\r\nHost: bsc.publicnode.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://firelight.run/\r\nContent-Type: application/json\r\nContent-Length: 136\r\nOrigin: https://firelight.run\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":136,"data":"{\"jsonrpc\":\"2.0\",\"method\":\"eth_call\",\"params\":[{\"to\":\"0x6981E9EA7023a8407E4B08ad97f186A5CBDaFCf5\",\"data\":\"0x3bc5de30\"},\"latest\"],\"id\":1}"}},"response":{"raw":"HTTP/3 200 \r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 1728000\r\ncontent-type: application/json\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, accept-encoding\r\ndate: Fri, 25 Sep 2026 05:36:51 GMT\r\nx-content-type-options: nosniff\r\nx-envoy-upstream-service-time: 3\r\nserver: cloudflare\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\ncontent-encoding: br\r\ncf-ray: a407ac738ff4c272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":807,"size_decoded":705,"mime_type":"application/json","magic":"JSON text data","md5":"c98f1747016b12280ffd84c27a2afab3","sha1":"3ee585c411a12b22edc33d9ffd7d4b33728ef5ef","sha256":"d8ec030792568e53b3742bf19e2a417c131a5b2eb689f1f272878c9778bb3aad","sha512":"5a5a5a0a51cf21db623b6543d250f9376b55bf7bd68cca0f7cd8fa6c7b73170fbb07c9f542e62e7fdde179d338984ce884020d4b1f654fd1780a43c36a841187","ssdeep":"","tlshash":"ca011df5415fce91d0fd988c14547a5523173c676cde2f419d4cddc4206c6427379235","first_seen":"2026-04-26T14:03:09.543803Z","last_seen":"2026-09-25T06:10:52.659753Z","times_seen":41,"resource_available":true,"data":null}},"time_used":52,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":52,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://firelight.run/","date":"2026-09-25T05:36:51.662Z","timestamp":1790314611662,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Sep 2026 19:23:28 GMT","end":"Thu, 03 Dec 2026 19:23:27 GMT"},"fingerprint":{"sha1":"99:42:CC:AA:D1:36:35:7D:FF:39:32:44:00:41:07:B9:D3:00:EE:31","sha256":"48:CD:EE:73:11:77:6B:F0:EE:10:C6:1D:DF:58:7C:4B:88:0D:95:F3:9C:64:15:44:E2:93:5B:17:4F:6A:8E:6E"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://firelight.run\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 21 Sep 2026 15:55:16 GMT\r\nexpires: Tue, 21 Sep 2027 15:55:16 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nage: 308495\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48532,"size_decoded":49345,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-09-25T12:29:14.415525Z","times_seen":297403,"resource_available":false,"data":null}},"time_used":131,"timings":{"blocked":1,"dns":2,"connect":62,"send":0,"wait":34,"receive":30,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"7ohnisscwweqylohacphls5cmyhfuuworva4o7nypw42xdl6i63a.mainnet-1.datasprite-cdn.com/HvyemAESJHULoAKmn8NDZwnCL6NodeAUeqwxbtjumDgH/","fqdn":"7ohnisscwweqylohacphls5cmyhfuuworva4o7nypw42xdl6i63a.mainnet-1.datasprite-cdn.com","domain":"datasprite-cdn.com","tld":"com"},"ip":{"addr":"104.21.15.158","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://firelight.run/","date":"2026-09-25T05:36:51.746Z","timestamp":1790314611746,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"datasprite-cdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 01 Sep 2026 16:12:35 GMT","end":"Mon, 30 Nov 2026 17:12:28 GMT"},"fingerprint":{"sha1":"A7:49:1F:BA:09:CF:9C:E9:55:85:E1:3E:6A:46:2B:56:1A:DD:E7:32","sha256":"57:8A:D0:59:59:01:19:C2:80:F0:3E:E8:83:04:E6:8C:0B:A5:94:44:42:21:A0:F5:48:2D:7F:8D:19:15:08:52"}}},"request":{"raw":"GET /HvyemAESJHULoAKmn8NDZwnCL6NodeAUeqwxbtjumDgH/ HTTP/1.1\r\nHost: 7ohnisscwweqylohacphls5cmyhfuuworva4o7nypw42xdl6i63a.mainnet-1.datasprite-cdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://firelight.run/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 25 Sep 2026 05:36:52 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\npriority: u=5,i\r\nvary: Origin\r\nx-irys-item-id: HvyemAESJHULoAKmn8NDZwnCL6NodeAUeqwxbtjumDgH\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-content-type: image/webp\r\nx-content-length: 2174\r\ncache-control: max-age=2592000\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9Kz3PjNwgSlP0yGKKX%2BufnN3M4XoBYk51hMyPJvoXvhBclQl5ntPvVVMSKshdwsX9WQGJoHOHmL4LbwDrgJtsPFpjLP0DsuchZbVrsFMtFfsd9Udo4rLvi2qpd230jma1uAOFT3YOrqv2y%2FxNyMG2niaci21IIvnnYENcQAlp%2B%2BB%2FptgG7oKlgpauspMp3fpng9Yq%2FkYsShUhIJbgy4nFtoR%2Bn4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a407ac747dbeb509-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 2174\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2174,"size_decoded":3056,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"71fa9982918cdc0d965432847e883312","sha1":"c70649ee620af5cc4620d021c667ae39e1892a04","sha256":"44a6c66fbd56b55dfe9d1206fe2dbb343419ce26c43ebf4e16755592d9c854c8","sha512":"15fd6068bb2d607fb2850d35ba40e8cb9d78d65a35270e76f72a1bf4b3627a7ff02e393c96ba458d9f005f4f840add8d55b570d525ee24a334449a4abb14d38c","ssdeep":"","tlshash":"dd413c9ebaf60492fa9335cb7445dfd63c592cb6b2363e50ad18c0334ae59ee1210589","first_seen":"2025-09-09T19:24:39.772114Z","last_seen":"2026-09-25T06:10:52.708798Z","times_seen":43,"resource_available":false,"data":null}},"time_used":293,"timings":{"blocked":84,"dns":9,"connect":0,"send":0,"wait":200,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"7ohnisscwweqylohacphls5cmyhfuuworva4o7nypw42xdl6i63a.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"7ohnisscwweqylohacphls5cmyhfuuworva4o7nypw42xdl6i63a.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"7ohnisscwweqylohacphls5cmyhfuuworva4o7nypw42xdl6i63a.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ukhvzo2rrxh7wozvlpmgie2zqeaaaquohhrc7a6usunqtlubkr7a.mainnet-1.datasprite-cdn.com/BwZqZkoJjgvs5QoobRe8CysTNUs155FJAKg6xngJ4yXj/","fqdn":"ukhvzo2rrxh7wozvlpmgie2zqeaaaquohhrc7a6usunqtlubkr7a.mainnet-1.datasprite-cdn.com","domain":"datasprite-cdn.com","tld":"com"},"ip":{"addr":"104.21.15.158","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://firelight.run/","date":"2026-09-25T05:36:51.799Z","timestamp":1790314611799,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"datasprite-cdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 01 Sep 2026 16:12:35 GMT","end":"Mon, 30 Nov 2026 17:12:28 GMT"},"fingerprint":{"sha1":"A7:49:1F:BA:09:CF:9C:E9:55:85:E1:3E:6A:46:2B:56:1A:DD:E7:32","sha256":"57:8A:D0:59:59:01:19:C2:80:F0:3E:E8:83:04:E6:8C:0B:A5:94:44:42:21:A0:F5:48:2D:7F:8D:19:15:08:52"}}},"request":{"raw":"GET /BwZqZkoJjgvs5QoobRe8CysTNUs155FJAKg6xngJ4yXj/ HTTP/1.1\r\nHost: ukhvzo2rrxh7wozvlpmgie2zqeaaaquohhrc7a6usunqtlubkr7a.mainnet-1.datasprite-cdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://firelight.run/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 25 Sep 2026 05:36:52 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\npriority: u=5,i\r\nvary: Origin\r\nx-irys-item-id: BwZqZkoJjgvs5QoobRe8CysTNUs155FJAKg6xngJ4yXj\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-content-type: image/png\r\nx-content-length: 975\r\ncache-control: max-age=2592000\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=u2OrcMAFtcWcoeZi0lKdFPChO4QnkKCLlpilAF9UX9T%2BhacriVod08KrE42dmZn6WxgRL8%2FMbY9KJ2IMYAPRRMZsjEHL7YgUqG7QMQ8R8DjXHIia1NiBBqXxWAah0dOvSfSdgnCBSNlwyybFEFhNG9IYiT%2BeEEfmBMLkzrmJyq0apnyXW58ZbcTbmSn0NVOQbi9zoq2799C1FR%2F1asOJZdPYaPs%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a407ac753b1756ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 975\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":975,"size_decoded":1847,"mime_type":"image/png","magic":"PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced","md5":"be1fd7e59dbdcff26653cc5d6a17bc48","sha1":"365bcd0db2ade8ab922df68fc7b129a170158b22","sha256":"b2e99bec178a2843c207212a163252fb1c1c685ae9bd521a6b5b4f2e5c4757a0","sha512":"51f5e3bc9a9f65638154e7f8b41c36ece5962ce2dc6ddad0a09f5fdb519848133b21f4031a876162d7cff472b505b7d3e4721f92162d48b6fc1b07aaee75c4a4","ssdeep":"","tlshash":"411194df9b2d20320a915439da148794e36b9780ad2a5370895612d42f47b0c5baaafc","first_seen":"2026-06-11T07:30:29.74825Z","last_seen":"2026-09-25T06:10:52.71256Z","times_seen":44,"resource_available":false,"data":null}},"time_used":396,"timings":{"blocked":186,"dns":35,"connect":0,"send":0,"wait":175,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"ukhvzo2rrxh7wozvlpmgie2zqeaaaquohhrc7a6usunqtlubkr7a.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"ukhvzo2rrxh7wozvlpmgie2zqeaaaquohhrc7a6usunqtlubkr7a.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"ukhvzo2rrxh7wozvlpmgie2zqeaaaquohhrc7a6usunqtlubkr7a.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"arbitrum.drpc.org/","fqdn":"arbitrum.drpc.org","domain":"drpc.org","tld":"org"},"ip":{"addr":"104.18.11.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://firelight.run/","date":"2026-09-25T05:36:50.401Z","timestamp":1790314610401,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"drpc.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 13 Aug 2026 01:49:22 GMT","end":"Wed, 11 Nov 2026 02:49:11 GMT"},"fingerprint":{"sha1":"1D:AA:98:9C:F7:ED:CA:BA:5E:92:74:4B:18:3B:83:D6:0C:A4:D7:3C","sha256":"71:EB:00:B8:D0:6F:B9:E3:E0:9D:2C:E5:6B:57:0E:BA:4D:41:8C:64:EB:3E:B0:D8:8E:54:49:8D:2D:50:A2:65"}}},"request":{"raw":"POST / HTTP/1.1\r\nHost: arbitrum.drpc.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://firelight.run/\r\nContent-Type: application/json\r\nContent-Length: 136\r\nOrigin: https://firelight.run\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":136,"data":"{\"jsonrpc\":\"2.0\",\"method\":\"eth_call\",\"params\":[{\"to\":\"0x967530969F5e5c94E0dC7247e9355e62e0ED65B2\",\"data\":\"0x3bc5de30\"},\"latest\"],\"id\":1}"}},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 25 Sep 2026 05:36:50 GMT\r\ncontent-type: application/json\r\naccess-control-allow-origin: *\r\nvary: Origin, Accept-Encoding\r\nx-drpc-owner-id: cb501251-31a8-4028-8b0a-54679f15c385\r\nx-drpc-owner-tier: free\r\nx-drpc-provider-id: drpc-core-free\r\nx-drpc-trace-id: 580cd7876ba4472c85822ff2d14fa326\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\ncontent-encoding: zstd\r\nserver: cloudflare\r\ncf-ray: a407ac6c892b56ca-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":422,"size_decoded":746,"mime_type":"application/json","magic":"JSON text data","md5":"ab9dc584493aebbfb8a6a6fe74350054","sha1":"25a2423d85a9ef75b3843031964ffe55e9e54799","sha256":"8a6c77dc23706086bed48ede4f90d407fa6f2d47a7513fedad72e46913172ecc","sha512":"76b72ca7ca88f9f58f799ad536fbd7a8070fa3a97ae18d65163467b654bfe72375f5b20e07a2d678e0eed750671c0b22349447f901f55b7f22405dc550f1fb08","ssdeep":"","tlshash":"18e02bd0f9849c61e5c49f19b3007a88792837558dc40b83085c450a29a9b19bf0ca89","first_seen":"2026-09-25T05:38:00.03517Z","last_seen":"2026-09-25T06:10:52.658678Z","times_seen":9,"resource_available":true,"data":null}},"time_used":94,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":94,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Inter:wght@400;500;600;700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://firelight.run/","date":"2026-09-25T05:36:51.228Z","timestamp":1790314611228,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Sep 2026 19:23:29 GMT","end":"Thu, 03 Dec 2026 19:23:28 GMT"},"fingerprint":{"sha1":"6C:5B:26:B8:8E:09:56:23:73:54:AC:B4:B3:91:75:07:31:24:4F:2D","sha256":"83:FB:4A:3F:88:06:C6:06:CC:A5:92:12:C8:C2:89:BD:56:6A:F9:0D:8F:49:3D:A0:83:3B:7E:53:A1:2C:69:05"}}},"request":{"raw":"GET /css2?family=Inter:wght@400;500;600;700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://firelight.run/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Fri, 25 Sep 2026 05:36:51 GMT\r\ndate: Fri, 25 Sep 2026 05:36:51 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10108,"size_decoded":1447,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"e85517dadd43448782d60d7f207fddce","sha1":"6cd31f870727ba8090fac9602b42524b4139a619","sha256":"88fbd0b95222be288587a149c324189ecbd8de0d6f0c94f528ec53857e52b66c","sha512":"5edc78df5bb062a9a2e1ea6724c14dd7eb80d77ea0fa9572de4bb0d52bbd0d163815b08a1ae77084f99fbefbb07715da1c61f0bb36fb498710c91387792955f8","ssdeep":"192:9NNIxO34OxDENOPCO3/Nx8NNryfO3iExlONEhYO3RrxGx:vXuM0p2+4","tlshash":"04227792002ba400ab971dc233cf7f3aaece50896085d1b95ffd0dc59cead66436876d","first_seen":"2025-09-10T18:13:11.065101Z","last_seen":"2026-09-25T12:34:51.756286Z","times_seen":47209,"resource_available":true,"data":null}},"time_used":84,"timings":{"blocked":0,"dns":1,"connect":15,"send":0,"wait":34,"receive":0,"ssl":34},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gateway.irys.xyz/8JR7J4bybYjEWs8Ep7tqRFEpqwftdhxQghx2a5EQUaCr","fqdn":"gateway.irys.xyz","domain":"irys.xyz","tld":"xyz"},"ip":{"addr":"172.66.167.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://firelight.run/","date":"2026-09-25T05:36:51.318Z","timestamp":1790314611318,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gateway.irys.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 20 Sep 2026 11:49:06 GMT","end":"Sat, 19 Dec 2026 11:49:05 GMT"},"fingerprint":{"sha1":"1B:75:8F:42:C3:0D:D3:04:72:4A:4F:BC:B0:44:35:11:BD:B0:C1:3A","sha256":"5D:7C:E7:8F:C7:B7:35:6E:0D:92:E6:E6:6C:71:F4:0D:D9:DE:7D:74:E5:56:33:7F:8D:2C:15:B1:80:E9:5D:E0"}}},"request":{"raw":"GET /8JR7J4bybYjEWs8Ep7tqRFEpqwftdhxQghx2a5EQUaCr HTTP/1.1\r\nHost: gateway.irys.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://firelight.run/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 \r\ndate: Fri, 25 Sep 2026 05:36:51 GMT\r\ncontent-length: 0\r\nlocation: https://nr37cg543n2zbiykifsgbtzl3tuysa2xn3ymy57xhyrvm3g2j2nq.mainnet-1.datasprite-cdn.com/8JR7J4bybYjEWs8Ep7tqRFEpqwftdhxQghx2a5EQUaCr/\r\nserver: cloudflare\r\ncache-control: no-store\r\naccess-control-expose-headers: cache-control, location\r\naccess-control-allow-credentials: true\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nx-cache-status: BYPASS\r\ncf-cache-status: BYPASS\r\ncf-ray: a407ac710dbb5687-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/webp","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-25T12:27:37.283953Z","times_seen":18651356,"resource_available":true,"data":null}},"time_used":171,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":171,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gateway.irys.xyz/GmwajjdnKm9Mst1txGwAqi6bxVzqhg6ysJGdzGgPF6uB","fqdn":"gateway.irys.xyz","domain":"irys.xyz","tld":"xyz"},"ip":{"addr":"172.66.167.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://firelight.run/","date":"2026-09-25T05:36:51.397Z","timestamp":1790314611397,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gateway.irys.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 20 Sep 2026 11:49:06 GMT","end":"Sat, 19 Dec 2026 11:49:05 GMT"},"fingerprint":{"sha1":"1B:75:8F:42:C3:0D:D3:04:72:4A:4F:BC:B0:44:35:11:BD:B0:C1:3A","sha256":"5D:7C:E7:8F:C7:B7:35:6E:0D:92:E6:E6:6C:71:F4:0D:D9:DE:7D:74:E5:56:33:7F:8D:2C:15:B1:80:E9:5D:E0"}}},"request":{"raw":"GET /GmwajjdnKm9Mst1txGwAqi6bxVzqhg6ysJGdzGgPF6uB HTTP/1.1\r\nHost: gateway.irys.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://firelight.run/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 \r\ndate: Fri, 25 Sep 2026 05:36:51 GMT\r\ncontent-length: 0\r\nlocation: https://5jrjgp2nl37gpefz75hgo6idl2q2frezh2ewvezllzssodeldc3a.mainnet-1.datasprite-cdn.com/GmwajjdnKm9Mst1txGwAqi6bxVzqhg6ysJGdzGgPF6uB/\r\nserver: cloudflare\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-credentials: true\r\ncache-control: no-store\r\naccess-control-expose-headers: cache-control, location\r\nx-cache-status: BYPASS\r\ncf-cache-status: BYPASS\r\ncf-ray: a407ac713e045687-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/png","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-25T12:27:37.283953Z","times_seen":18651356,"resource_available":true,"data":null}},"time_used":166,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":166,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"binance.llamarpc.com/","fqdn":"binance.llamarpc.com","domain":"llamarpc.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://firelight.run/","date":"2026-09-25T05:36:51.642Z","timestamp":1790314611642,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"OPTIONS / HTTP/1.1\r\nHost: binance.llamarpc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://firelight.run/\r\nOrigin: https://firelight.run\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-25T12:27:37.283953Z","times_seen":18651356,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"iv4gcnkpfdnodp3rm73df3m6vnf4ucnpjwdlcsrtmns4li5aljfq.mainnet-1.datasprite-cdn.com/5gBbYXnATXAj3B6zmP8CaV88YB5uB9m8PZrfKJ7WjwUv/","fqdn":"iv4gcnkpfdnodp3rm73df3m6vnf4ucnpjwdlcsrtmns4li5aljfq.mainnet-1.datasprite-cdn.com","domain":"datasprite-cdn.com","tld":"com"},"ip":{"addr":"104.21.15.158","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://firelight.run/","date":"2026-09-25T05:36:51.807Z","timestamp":1790314611807,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"datasprite-cdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 01 Sep 2026 16:12:35 GMT","end":"Mon, 30 Nov 2026 17:12:28 GMT"},"fingerprint":{"sha1":"A7:49:1F:BA:09:CF:9C:E9:55:85:E1:3E:6A:46:2B:56:1A:DD:E7:32","sha256":"57:8A:D0:59:59:01:19:C2:80:F0:3E:E8:83:04:E6:8C:0B:A5:94:44:42:21:A0:F5:48:2D:7F:8D:19:15:08:52"}}},"request":{"raw":"GET /5gBbYXnATXAj3B6zmP8CaV88YB5uB9m8PZrfKJ7WjwUv/ HTTP/1.1\r\nHost: iv4gcnkpfdnodp3rm73df3m6vnf4ucnpjwdlcsrtmns4li5aljfq.mainnet-1.datasprite-cdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://firelight.run/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 25 Sep 2026 05:36:52 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\npriority: u=5,i\r\nvary: Origin\r\nx-irys-item-id: 5gBbYXnATXAj3B6zmP8CaV88YB5uB9m8PZrfKJ7WjwUv\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-content-type: image/webp\r\nx-content-length: 780\r\ncache-control: max-age=2592000\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zrn7cT2IOi8l7S0QBQ75CJGURZeN92o%2BrlMSbBl7KmFdFE7%2FlF1Hz3IM3QUcDJ7%2BrD5ydu4NAeau%2Fjo8d5MLqlzkap1DseMI7h6Iim%2Blz2QOSYvttTjZIajXl%2FP2sn2jtZuA2P7Fux3B9QchqGhkCuuGoVEovZ%2F8Hi%2FOOQ6Rmvou0aDLv2veJkFSNnSQBS6BYPKlFr1MpDB7r08JIEoDJqEXe%2F4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a407ac758b1c56ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 780\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":780,"size_decoded":1664,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"4218175ca4fe632ea2d78b3a7846cbe9","sha1":"ae04346af3e236a8afa61cb9ba0c83cb20529ebc","sha256":"f48029d1829129f662e23bfac26e75d741f74f826e9f845c125d46207fff8396","sha512":"be21ea3f13f795c0dce4e6e9d458606837717f343fe78e378a3f3509e88ba7c163a25f1d591cc84824f777fae6ccdd24356a16dab6178bdbbff62aeb06f9829b","ssdeep":"","tlshash":"3b0175e9c2dc42fee24626b664177634b852eb9d53f090145eb50388131825b2de64c3","first_seen":"2024-06-14T00:48:21Z","last_seen":"2026-09-25T06:10:52.661167Z","times_seen":442,"resource_available":false,"data":null}},"time_used":420,"timings":{"blocked":228,"dns":19,"connect":0,"send":0,"wait":173,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"iv4gcnkpfdnodp3rm73df3m6vnf4ucnpjwdlcsrtmns4li5aljfq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"iv4gcnkpfdnodp3rm73df3m6vnf4ucnpjwdlcsrtmns4li5aljfq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"iv4gcnkpfdnodp3rm73df3m6vnf4ucnpjwdlcsrtmns4li5aljfq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gateway.irys.xyz/1uax15bZQNN9id5YyXCs7XPHXgsx2XaS5z93YrdvjDH","fqdn":"gateway.irys.xyz","domain":"irys.xyz","tld":"xyz"},"ip":{"addr":"172.66.167.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://firelight.run/","date":"2026-09-25T05:36:51.277Z","timestamp":1790314611277,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gateway.irys.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 20 Sep 2026 11:49:06 GMT","end":"Sat, 19 Dec 2026 11:49:05 GMT"},"fingerprint":{"sha1":"1B:75:8F:42:C3:0D:D3:04:72:4A:4F:BC:B0:44:35:11:BD:B0:C1:3A","sha256":"5D:7C:E7:8F:C7:B7:35:6E:0D:92:E6:E6:6C:71:F4:0D:D9:DE:7D:74:E5:56:33:7F:8D:2C:15:B1:80:E9:5D:E0"}}},"request":{"raw":"GET /1uax15bZQNN9id5YyXCs7XPHXgsx2XaS5z93YrdvjDH HTTP/1.1\r\nHost: gateway.irys.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://firelight.run/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 \r\ndate: Fri, 25 Sep 2026 05:36:51 GMT\r\ncontent-length: 0\r\nlocation: https://aa5xkwqvefm3tszfisosqh6wdakhahxso3jyl5d5wsibuczex6ma.mainnet-1.datasprite-cdn.com/1uax15bZQNN9id5YyXCs7XPHXgsx2XaS5z93YrdvjDH/\r\nserver: cloudflare\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\ncache-control: no-store\r\naccess-control-allow-credentials: true\r\naccess-control-expose-headers: cache-control, location\r\nx-cache-status: BYPASS\r\ncf-cache-status: BYPASS\r\ncf-ray: a407ac70fd935687-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/png","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-25T12:27:37.283953Z","times_seen":18651356,"resource_available":true,"data":null}},"time_used":193,"timings":{"blocked":38,"dns":0,"connect":0,"send":0,"wait":155,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gateway.irys.xyz/5ZfwxdeiMwp91zkMTo5ABo4XYBcStqopPe52LZRVUSwr","fqdn":"gateway.irys.xyz","domain":"irys.xyz","tld":"xyz"},"ip":{"addr":"172.66.167.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://firelight.run/","date":"2026-09-25T05:36:51.309Z","timestamp":1790314611309,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gateway.irys.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 20 Sep 2026 11:49:06 GMT","end":"Sat, 19 Dec 2026 11:49:05 GMT"},"fingerprint":{"sha1":"1B:75:8F:42:C3:0D:D3:04:72:4A:4F:BC:B0:44:35:11:BD:B0:C1:3A","sha256":"5D:7C:E7:8F:C7:B7:35:6E:0D:92:E6:E6:6C:71:F4:0D:D9:DE:7D:74:E5:56:33:7F:8D:2C:15:B1:80:E9:5D:E0"}}},"request":{"raw":"GET /5ZfwxdeiMwp91zkMTo5ABo4XYBcStqopPe52LZRVUSwr HTTP/1.1\r\nHost: gateway.irys.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://firelight.run/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 \r\ndate: Fri, 25 Sep 2026 05:36:51 GMT\r\ncontent-length: 0\r\nlocation: https://ipgv6k3cx6mftzzxhfhhzv64ydqttwwd4p6dtqjffey5ckd47buq.mainnet-1.datasprite-cdn.com/5ZfwxdeiMwp91zkMTo5ABo4XYBcStqopPe52LZRVUSwr/\r\nserver: cloudflare\r\naccess-control-expose-headers: cache-control, location\r\naccess-control-allow-credentials: true\r\ncache-control: no-store\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nx-cache-status: BYPASS\r\ncf-cache-status: BYPASS\r\ncf-ray: a407ac710daa5687-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/webp","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-25T12:27:37.283953Z","times_seen":18651356,"resource_available":true,"data":null}},"time_used":177,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":177,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"re3ropp2geh4d5qidoozfesfsagireabcedh4j6agvkzpc463fcq.mainnet-1.datasprite-cdn.com/AEdaUbAHJH6uu1qeTC5sgQUzocwS61ZW7xEYJMCzuuq6/","fqdn":"re3ropp2geh4d5qidoozfesfsagireabcedh4j6agvkzpc463fcq.mainnet-1.datasprite-cdn.com","domain":"datasprite-cdn.com","tld":"com"},"ip":{"addr":"104.21.15.158","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://firelight.run/","date":"2026-09-25T05:36:51.760Z","timestamp":1790314611760,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"datasprite-cdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 01 Sep 2026 16:12:35 GMT","end":"Mon, 30 Nov 2026 17:12:28 GMT"},"fingerprint":{"sha1":"A7:49:1F:BA:09:CF:9C:E9:55:85:E1:3E:6A:46:2B:56:1A:DD:E7:32","sha256":"57:8A:D0:59:59:01:19:C2:80:F0:3E:E8:83:04:E6:8C:0B:A5:94:44:42:21:A0:F5:48:2D:7F:8D:19:15:08:52"}}},"request":{"raw":"GET /AEdaUbAHJH6uu1qeTC5sgQUzocwS61ZW7xEYJMCzuuq6/ HTTP/1.1\r\nHost: re3ropp2geh4d5qidoozfesfsagireabcedh4j6agvkzpc463fcq.mainnet-1.datasprite-cdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://firelight.run/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 25 Sep 2026 05:36:52 GMT\r\ncontent-type: image/webp\r\ncontent-length: 954\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin\r\nx-irys-item-id: AEdaUbAHJH6uu1qeTC5sgQUzocwS61ZW7xEYJMCzuuq6\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-content-type: image/webp\r\nx-content-length: 954\r\ncache-control: max-age=2592000\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=18mQ%2BX6D%2BQs2HG7UKKRWq55Y4q0y82zChPccj3lbR3QX8aHWLmohQN1h%2Br9pSNWaweXh77sq%2FuqV8SH2w7uI8RtxgYW66dum0VcUwcJRawkOHYoG2bItYYnBcyx2t90fVH7rlKXuJcsPN%2Fph3ZzJINYAPZo2ui54wZAYDIqLH7REYzShMSV6lSYVX%2FoepiQ%2Ft%2BzY9JzMj%2FjeP0mVVGa%2BRpmmm4o%3D\"}]}\r\ncf-ray: a407ac74ab6356a5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":954,"size_decoded":1818,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 120x120, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"813eff22688096bcf23b96cdad86aada","sha1":"8ead6b927bb8c767eeaf017fd49122cbb22c61d2","sha256":"d3c289f9f99d1b80374afeaf3e7da4b1f46f1efbae526f388f7a2fbbaf0dd121","sha512":"5a26032f16dd583ab22af7bda9d9d8e171d24c43b4acd9a378c6f5944eaacab7765903eab75d72282c699eed3af391d06bb7669c65e78ad6f08ebc70285f4487","ssdeep":"","tlshash":"d111c87fb529b4e1f097b3724d724282fcfaa9671c759840c280b6e108dc3d1498ea5e","first_seen":"2026-02-10T08:05:59.391831Z","last_seen":"2026-09-25T06:10:52.698413Z","times_seen":63,"resource_available":false,"data":null}},"time_used":481,"timings":{"blocked":106,"dns":4,"connect":5,"send":0,"wait":285,"receive":0,"ssl":59},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"re3ropp2geh4d5qidoozfesfsagireabcedh4j6agvkzpc463fcq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"re3ropp2geh4d5qidoozfesfsagireabcedh4j6agvkzpc463fcq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"re3ropp2geh4d5qidoozfesfsagireabcedh4j6agvkzpc463fcq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qofpup6nmdjajko4dxgkt5mq2htvoe4uqxfbycxyrybfw7p5to7a.mainnet-1.datasprite-cdn.com/9rVKcKYLPvNfTyUKrT2QXE8XwqyHgTdHF5TY6zV8pNSR/","fqdn":"qofpup6nmdjajko4dxgkt5mq2htvoe4uqxfbycxyrybfw7p5to7a.mainnet-1.datasprite-cdn.com","domain":"datasprite-cdn.com","tld":"com"},"ip":{"addr":"104.21.15.158","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://firelight.run/","date":"2026-09-25T05:36:51.764Z","timestamp":1790314611764,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"datasprite-cdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 01 Sep 2026 16:12:35 GMT","end":"Mon, 30 Nov 2026 17:12:28 GMT"},"fingerprint":{"sha1":"A7:49:1F:BA:09:CF:9C:E9:55:85:E1:3E:6A:46:2B:56:1A:DD:E7:32","sha256":"57:8A:D0:59:59:01:19:C2:80:F0:3E:E8:83:04:E6:8C:0B:A5:94:44:42:21:A0:F5:48:2D:7F:8D:19:15:08:52"}}},"request":{"raw":"GET /9rVKcKYLPvNfTyUKrT2QXE8XwqyHgTdHF5TY6zV8pNSR/ HTTP/1.1\r\nHost: qofpup6nmdjajko4dxgkt5mq2htvoe4uqxfbycxyrybfw7p5to7a.mainnet-1.datasprite-cdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://firelight.run/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 25 Sep 2026 05:36:52 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1234\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin\r\nx-irys-item-id: 9rVKcKYLPvNfTyUKrT2QXE8XwqyHgTdHF5TY6zV8pNSR\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-content-type: image/webp\r\nx-content-length: 1234\r\ncache-control: max-age=2592000\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cK0ffsr4I0vtIsv8w3PP75deU3Kmqf43KUE5%2FTqdTCubiEYi8PdiB%2FskVz2ih6of0UWICbVVW0j0V5%2FEtHoLu9ntjzEgvN5PzkiunqkX6iabVGVq1BZ28Y1r%2Bu74N%2BGCB18Ro0C9FKBrANhiDGf2sA3z4%2Blq%2FvBA2LDpyicyH%2BwdrfsigkopSXAKtkx1TN6A5apY1iEu5zfHbpXQYxLFOAOldys%3D\"}]}\r\ncf-ray: a407ac74ac3c0b49-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1234,"size_decoded":2096,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 120x120, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"b07941a2a35c7c99f9a709f1b10e206e","sha1":"7eeb8bf328d900e1b22b1b8eb07bd5d57de1a871","sha256":"a6a233ae5fe5bbe28f46b8c335d6fb6119818c61c948a8d35b304788002659ed","sha512":"08f3c93e6dc72977cb8c41d78811df5eb3cc3e1fc8e7cbdfa98ab91b03ce8339dd336450134b7090c1ba76015de00292f9e35f978a133f2f52d7ac1bf962c6f9","ssdeep":"","tlshash":"8921b7b1131788519aafaf32d879c59b2f3458393b700464f42c371dd60ce1a6e8a007","first_seen":"2026-06-11T07:30:29.71469Z","last_seen":"2026-09-25T06:10:52.705086Z","times_seen":44,"resource_available":false,"data":null}},"time_used":365,"timings":{"blocked":98,"dns":4,"connect":5,"send":0,"wait":178,"receive":0,"ssl":63},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"qofpup6nmdjajko4dxgkt5mq2htvoe4uqxfbycxyrybfw7p5to7a.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"qofpup6nmdjajko4dxgkt5mq2htvoe4uqxfbycxyrybfw7p5to7a.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"qofpup6nmdjajko4dxgkt5mq2htvoe4uqxfbycxyrybfw7p5to7a.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"e5pt46sfryibvjq4hrrz5src2xmfrc7jvtiolpsp3jzjl4eyeaga.mainnet-1.datasprite-cdn.com/3eh8oadBGXTp7k1PY4iYeiBbyhE1u2zmMMaMm9nBanHq/","fqdn":"e5pt46sfryibvjq4hrrz5src2xmfrc7jvtiolpsp3jzjl4eyeaga.mainnet-1.datasprite-cdn.com","domain":"datasprite-cdn.com","tld":"com"},"ip":{"addr":"104.21.15.158","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://firelight.run/","date":"2026-09-25T05:36:51.776Z","timestamp":1790314611776,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"datasprite-cdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 01 Sep 2026 16:12:35 GMT","end":"Mon, 30 Nov 2026 17:12:28 GMT"},"fingerprint":{"sha1":"A7:49:1F:BA:09:CF:9C:E9:55:85:E1:3E:6A:46:2B:56:1A:DD:E7:32","sha256":"57:8A:D0:59:59:01:19:C2:80:F0:3E:E8:83:04:E6:8C:0B:A5:94:44:42:21:A0:F5:48:2D:7F:8D:19:15:08:52"}}},"request":{"raw":"GET /3eh8oadBGXTp7k1PY4iYeiBbyhE1u2zmMMaMm9nBanHq/ HTTP/1.1\r\nHost: e5pt46sfryibvjq4hrrz5src2xmfrc7jvtiolpsp3jzjl4eyeaga.mainnet-1.datasprite-cdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://firelight.run/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 25 Sep 2026 05:36:52 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\npriority: u=5,i\r\nvary: Origin\r\nx-irys-item-id: 3eh8oadBGXTp7k1PY4iYeiBbyhE1u2zmMMaMm9nBanHq\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-content-type: image/png\r\nx-content-length: 2157\r\ncache-control: max-age=2592000\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vkyzoN7WrK4woFJckAET7Hv0NJ2aNFLCNAF0asRnH%2F5yh0kZ7VCmv7ZMRrk1OX613ZkRtbZI8zyXCe%2FibqHqO7D6yqs4jVLfspYKp6Elw0cvOz7aVUc1ciHopzyy246QXeb51pefLBM64%2FybkjPRdtei07yCmKAOUsbuyR%2F87eHGsTte7EHulw3ZHvWlnerEjCAcC6JnNVMAEmfz7PDLDEvCuiQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a407ac74edc4b509-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 2157\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2157,"size_decoded":3031,"mime_type":"image/png","magic":"PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced","md5":"44d876b6ac55ee75b4efd8c5dce8dba8","sha1":"5ebd26b6260acacb6566675e9135c44aab60637b","sha256":"32bb49f3160ee341add14dcfbc9519de1e4c7b0d7faa825d683afa5d94b7f4af","sha512":"0879effae94d31ef94a067af5a6821d23ea6504e9c800a5f8d04ac97c2e6085516157b85269c269820b58f39d69a1ce32da6453580c0f82526de8db0416c533c","ssdeep":"","tlshash":"0a4109ae8c874e24c67740b15ebd11660592157f975973c6e4a7ac362c5335c0eac868","first_seen":"2026-06-11T07:30:29.691869Z","last_seen":"2026-09-25T06:10:52.649189Z","times_seen":41,"resource_available":false,"data":null}},"time_used":320,"timings":{"blocked":141,"dns":3,"connect":0,"send":0,"wait":176,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"e5pt46sfryibvjq4hrrz5src2xmfrc7jvtiolpsp3jzjl4eyeaga.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"e5pt46sfryibvjq4hrrz5src2xmfrc7jvtiolpsp3jzjl4eyeaga.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"e5pt46sfryibvjq4hrrz5src2xmfrc7jvtiolpsp3jzjl4eyeaga.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gateway.irys.xyz/Ee22Pv7cBH8BUouBujgDbWKxMkbCCZGKJUPot9ZNpLsi","fqdn":"gateway.irys.xyz","domain":"irys.xyz","tld":"xyz"},"ip":{"addr":"172.66.167.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://firelight.run/","date":"2026-09-25T05:36:51.244Z","timestamp":1790314611244,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gateway.irys.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 20 Sep 2026 11:49:06 GMT","end":"Sat, 19 Dec 2026 11:49:05 GMT"},"fingerprint":{"sha1":"1B:75:8F:42:C3:0D:D3:04:72:4A:4F:BC:B0:44:35:11:BD:B0:C1:3A","sha256":"5D:7C:E7:8F:C7:B7:35:6E:0D:92:E6:E6:6C:71:F4:0D:D9:DE:7D:74:E5:56:33:7F:8D:2C:15:B1:80:E9:5D:E0"}}},"request":{"raw":"GET /Ee22Pv7cBH8BUouBujgDbWKxMkbCCZGKJUPot9ZNpLsi HTTP/1.1\r\nHost: gateway.irys.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://firelight.run/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 \r\ndate: Fri, 25 Sep 2026 05:36:51 GMT\r\ncontent-length: 0\r\nlocation: https://zkrzh37fj2r5lngihbn6q4tvv2yw6qsa2oykho7r7ofhoutwmbiq.mainnet-1.datasprite-cdn.com/Ee22Pv7cBH8BUouBujgDbWKxMkbCCZGKJUPot9ZNpLsi/\r\nserver: cloudflare\r\naccess-control-expose-headers: cache-control, location\r\naccess-control-allow-credentials: true\r\ncache-control: no-store\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nx-cache-status: BYPASS\r\ncf-cache-status: BYPASS\r\ncf-ray: a407ac711ddd5687-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/webp","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-25T12:27:37.283953Z","times_seen":18651356,"resource_available":true,"data":null}},"time_used":281,"timings":{"blocked":61,"dns":0,"connect":4,"send":0,"wait":162,"receive":0,"ssl":40},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gateway.irys.xyz/EtCAcusz6dRAmAEjLhg5caTZC47eQwZ31wgKWofrPc4g","fqdn":"gateway.irys.xyz","domain":"irys.xyz","tld":"xyz"},"ip":{"addr":"172.66.167.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://firelight.run/","date":"2026-09-25T05:36:51.281Z","timestamp":1790314611281,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gateway.irys.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 20 Sep 2026 11:49:06 GMT","end":"Sat, 19 Dec 2026 11:49:05 GMT"},"fingerprint":{"sha1":"1B:75:8F:42:C3:0D:D3:04:72:4A:4F:BC:B0:44:35:11:BD:B0:C1:3A","sha256":"5D:7C:E7:8F:C7:B7:35:6E:0D:92:E6:E6:6C:71:F4:0D:D9:DE:7D:74:E5:56:33:7F:8D:2C:15:B1:80:E9:5D:E0"}}},"request":{"raw":"GET /EtCAcusz6dRAmAEjLhg5caTZC47eQwZ31wgKWofrPc4g HTTP/1.1\r\nHost: gateway.irys.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://firelight.run/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 \r\ndate: Fri, 25 Sep 2026 05:36:51 GMT\r\ncontent-length: 0\r\nlocation: https://zzcs2m5lomlcptku6ihjjgjt3gz7ni5ok2jfwmd7eiwlz2a5giaq.mainnet-1.datasprite-cdn.com/EtCAcusz6dRAmAEjLhg5caTZC47eQwZ31wgKWofrPc4g/\r\nserver: cloudflare\r\ncache-control: no-store\r\naccess-control-expose-headers: location, cache-control\r\naccess-control-allow-credentials: true\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nx-cache-status: BYPASS\r\ncf-cache-status: BYPASS\r\ncf-ray: a407ac70fd985687-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/webp","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-25T12:27:37.283953Z","times_seen":18651356,"resource_available":true,"data":null}},"time_used":194,"timings":{"blocked":35,"dns":0,"connect":0,"send":0,"wait":159,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"2qmxub74calbyr5e4vgvxb6tbvyem7xps23rhcmptoozpppemsga.mainnet-1.datasprite-cdn.com/FGwxtfb99CU7ZWrkGJ1tKhV8vxUmhrTjs6zgp62ko6W7/","fqdn":"2qmxub74calbyr5e4vgvxb6tbvyem7xps23rhcmptoozpppemsga.mainnet-1.datasprite-cdn.com","domain":"datasprite-cdn.com","tld":"com"},"ip":{"addr":"104.21.15.158","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://firelight.run/","date":"2026-09-25T05:36:51.730Z","timestamp":1790314611730,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"datasprite-cdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 01 Sep 2026 16:12:35 GMT","end":"Mon, 30 Nov 2026 17:12:28 GMT"},"fingerprint":{"sha1":"A7:49:1F:BA:09:CF:9C:E9:55:85:E1:3E:6A:46:2B:56:1A:DD:E7:32","sha256":"57:8A:D0:59:59:01:19:C2:80:F0:3E:E8:83:04:E6:8C:0B:A5:94:44:42:21:A0:F5:48:2D:7F:8D:19:15:08:52"}}},"request":{"raw":"GET /FGwxtfb99CU7ZWrkGJ1tKhV8vxUmhrTjs6zgp62ko6W7/ HTTP/1.1\r\nHost: 2qmxub74calbyr5e4vgvxb6tbvyem7xps23rhcmptoozpppemsga.mainnet-1.datasprite-cdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://firelight.run/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 25 Sep 2026 05:36:52 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\npriority: u=5,i\r\nvary: Origin\r\nx-irys-item-id: FGwxtfb99CU7ZWrkGJ1tKhV8vxUmhrTjs6zgp62ko6W7\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-content-type: image/webp\r\nx-content-length: 4844\r\ncache-control: max-age=2592000\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wuKJL6IkWSY0P4r%2BHwafCNjWxIPMqV7Nu2lIaXTp5gtpOMmOK2k87kMImVKgwGa3915%2F4n6hnf26f2xrU8tToWIgqLroDzRRdZHkWsfY0GS33fvHiJlFRm1ZeKNwUuBCTqcy0qxdCS5SjJORjzHFiKZqDzy%2BSC7QbEAsB7vyH5KR8%2FpAQtLgiylq2rU5ilUdLd%2BwPtaplrjMbs5ubByAUz9TL5s%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a407ac737da9b509-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 4844\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4844,"size_decoded":5722,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"fede23a3362cc6ad2d14390d8dc13767","sha1":"b05217c63e6573c9c272ab9948eff228e3de4cb7","sha256":"a93378956b2085e9cc71239b969063e26489c396fdeec7aab8428149f292608f","sha512":"46b8ed4bc99a69d8d9124a65d2423fcb316f1c3319b033119870988e73b3893947358069d0196c1b9c89ac89aee34fea6fa2ea2fc45b69b75a62910b2bf6c7eb","ssdeep":"96:Fv73oiQWckPHE1kJyks8HBmsG46hlasbX41OBoj6vF1:97kWck/E8u8H/Gvl7gOZvF1","tlshash":"2ca18eb746666bc0d2f8454229466363c9d90ca72fa6cdc7724b6406d0ddf918df8fb0","first_seen":"2026-06-10T18:04:23.898247Z","last_seen":"2026-09-25T06:10:52.707566Z","times_seen":44,"resource_available":false,"data":null}},"time_used":314,"timings":{"blocked":-1,"dns":6,"connect":0,"send":0,"wait":308,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"2qmxub74calbyr5e4vgvxb6tbvyem7xps23rhcmptoozpppemsga.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"2qmxub74calbyr5e4vgvxb6tbvyem7xps23rhcmptoozpppemsga.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"2qmxub74calbyr5e4vgvxb6tbvyem7xps23rhcmptoozpppemsga.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"firelight.run/FbRzuHg3Dl9qrQsGHegXsQJMVU.woff2","fqdn":"firelight.run","domain":"firelight.run","tld":"run"},"ip":{"addr":"104.21.13.148","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://firelight.run/","date":"2026-09-25T05:36:49.867Z","timestamp":1790314609867,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"firelight.run","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 24 Sep 2026 11:54:24 GMT","end":"Wed, 23 Dec 2026 11:54:23 GMT"},"fingerprint":{"sha1":"02:54:09:B5:1A:C4:80:FE:25:D5:90:D5:C2:96:72:47:EA:08:E4:AE","sha256":"3B:A7:9F:77:5F:07:1D:DF:C1:4E:DC:82:26:78:98:F9:C7:9C:E6:6F:08:FA:7C:0D:00:C0:A7:B5:72:83:E1:45"}}},"request":{"raw":"GET /FbRzuHg3Dl9qrQsGHegXsQJMVU.woff2 HTTP/1.1\r\nHost: firelight.run\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://firelight.run/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 25 Sep 2026 05:36:49 GMT\r\ncontent-type: font/woff2\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 21 Apr 2026 11:39:44 GMT\r\npriority: u=3,i=?0\r\netag: \"69e76200-14d4\"\r\naccept-ranges: bytes\r\nage: 3\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BoWaUYN9Q9sDK9Atw5HKk4w9WRDXgbDjMMCLY0ckkHgzbdWMpFD8RdPXvv86QWjbn9WntkOVBahf52x1KHPGDXg7o%2FWe1x92MUP1Y0fYCh6VRjfU0d2eqm7j2bOzunE4\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a407ac67ae582efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 5332\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5332,"size_decoded":6021,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), CFF, length 5332, version 1.0","md5":"115dc5b24361b570908f74beeb867280","sha1":"15b473b878370e5f6aad0b061defe05ec4093155","sha256":"d39f873f016a48c20bedfca5c6cfd69acde4076069c4a866764cda95e08d59d3","sha512":"1d560800fefa03170659d46bcbd53b6f7316b11ac105f971f122dd82185aed3781b8e626b43527b20e5adda7e62245b093f3342b68ff0a8cd3cc7c23006ca038","ssdeep":"96:saZE6k9dCffoOPCI4LvmVt3NvfBeClG7V9t5TH065jfiNVC2o7e0vQvI1z2lbsU:s06goOqDgJTVI/tdU61qNRo7e0viPH","tlshash":"91b18d04c425a51ff6594876b4a65df38ba12959c404a3cf3d0987ce92fa22883e9ba1","first_seen":"2026-02-16T14:56:50.16867Z","last_seen":"2026-09-25T05:38:01.277775Z","times_seen":25,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"firelight.run","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"firelight.run","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-25","alert":"Phishing Block","trigger":"firelight.run","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gateway.irys.xyz/Cp3rKQhcxnwLeryCXo65zSv8dYFvXn4b47fC9GiYbXu9","fqdn":"gateway.irys.xyz","domain":"irys.xyz","tld":"xyz"},"ip":{"addr":"172.66.167.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://firelight.run/","date":"2026-09-25T05:36:51.295Z","timestamp":1790314611295,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gateway.irys.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 20 Sep 2026 11:49:06 GMT","end":"Sat, 19 Dec 2026 11:49:05 GMT"},"fingerprint":{"sha1":"1B:75:8F:42:C3:0D:D3:04:72:4A:4F:BC:B0:44:35:11:BD:B0:C1:3A","sha256":"5D:7C:E7:8F:C7:B7:35:6E:0D:92:E6:E6:6C:71:F4:0D:D9:DE:7D:74:E5:56:33:7F:8D:2C:15:B1:80:E9:5D:E0"}}},"request":{"raw":"GET /Cp3rKQhcxnwLeryCXo65zSv8dYFvXn4b47fC9GiYbXu9 HTTP/1.1\r\nHost: gateway.irys.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://firelight.run/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 \r\ndate: Fri, 25 Sep 2026 05:36:51 GMT\r\ncontent-length: 0\r\nlocation: https://v57bhor75skl3yh2fasy5zibmxu374hc564a5oiidpjj3yk5qoua.mainnet-1.datasprite-cdn.com/Cp3rKQhcxnwLeryCXo65zSv8dYFvXn4b47fC9GiYbXu9/\r\nserver: cloudflare\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\ncache-control: no-store\r\naccess-control-allow-credentials: true\r\naccess-control-expose-headers: location, cache-control\r\nx-cache-status: BYPASS\r\ncf-cache-status: BYPASS\r\ncf-ray: a407ac70fda05687-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/webp","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-25T12:27:37.283953Z","times_seen":18651356,"resource_available":true,"data":null}},"time_used":185,"timings":{"blocked":2,"dns":0,"connect":0,"send":0,"wait":183,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rpc.ankr.com/bsc","fqdn":"rpc.ankr.com","domain":"ankr.com","tld":"com"},"ip":{"addr":"152.236.9.75","port":443,"asn":7738,"as":"V tal","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://firelight.run/","date":"2026-09-25T05:36:51.636Z","timestamp":1790314611636,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"shark.multi-rpc.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Tue, 15 Sep 2026 09:08:08 GMT","end":"Mon, 14 Dec 2026 09:08:07 GMT"},"fingerprint":{"sha1":"5C:21:BA:98:E5:D9:20:AF:E9:BB:74:C7:96:5E:67:7E:0E:35:B7:9F","sha256":"89:8F:A0:D2:17:79:FA:35:38:5E:B2:D1:CC:B9:4B:77:BF:21:D2:BE:7A:9D:22:4E:7B:BE:FD:24:35:91:B9:D4"}}},"request":{"raw":"POST /bsc HTTP/1.1\r\nHost: rpc.ankr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://firelight.run/\r\nContent-Type: application/json\r\nContent-Length: 136\r\nOrigin: https://firelight.run\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":136,"data":"{\"jsonrpc\":\"2.0\",\"method\":\"eth_call\",\"params\":[{\"to\":\"0x6981E9EA7023a8407E4B08ad97f186A5CBDaFCf5\",\"data\":\"0x3bc5de30\"},\"latest\"],\"id\":1}"}},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 25 Sep 2026 05:36:51 GMT\r\ncontent-type: application/json\r\ncontent-length: 229\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, PUT, POST, DELETE, PATCH, OPTIONS\r\naccess-control-allow-headers: DNT,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization,solana-client,client-sdk-version,client-sdk-type,client-target-api-version,x-ton-client-version,x-client-name,x-client-version,Accept-Token-Tier,Rpc-Compress,Rpc-Decode\r\naccess-control-expose-headers: Token-Tier\r\naccess-control-max-age: 1728000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":229,"size_decoded":944,"mime_type":"application/json","magic":"JSON text data","md5":"42e136a22281d105bd21fa496816706c","sha1":"bc02950079004b0d4f4bea3888dfd4517cddeeff","sha256":"ede226c79ae326ce9e4b099e9f4dbb4e3d7807da2b793bdfadfafeeb84d7175a","sha512":"a41403da8b9e698eb2823bbe0925160b68682c55d4c64e5c8b27193f8fd8bf4fd118179d26eadb446ed41c2c9c12d46523b6f5094caadaae8a03ba3c1d6bade5","ssdeep":"","tlshash":"33d02313c6470537e34f4633371567c4f559705071105f1b4e1c0315024f97b0255351","first_seen":"2025-04-07T11:34:31.00119Z","last_seen":"2026-09-25T12:44:27.626953Z","times_seen":3148,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"4zbpk6lzsya26tazaje3yw7d6st53o23iriglps2sp2bnpqb6e7q.mainnet-1.datasprite-cdn.com/GVqzNswLTwAnCD7CtTZw67VCMbChaqBxjezVsqQAqUzS/","fqdn":"4zbpk6lzsya26tazaje3yw7d6st53o23iriglps2sp2bnpqb6e7q.mainnet-1.datasprite-cdn.com","domain":"datasprite-cdn.com","tld":"com"},"ip":{"addr":"172.67.163.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://firelight.run/","date":"2026-09-25T05:36:51.754Z","timestamp":1790314611754,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"datasprite-cdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 01 Sep 2026 16:12:35 GMT","end":"Mon, 30 Nov 2026 17:12:28 GMT"},"fingerprint":{"sha1":"A7:49:1F:BA:09:CF:9C:E9:55:85:E1:3E:6A:46:2B:56:1A:DD:E7:32","sha256":"57:8A:D0:59:59:01:19:C2:80:F0:3E:E8:83:04:E6:8C:0B:A5:94:44:42:21:A0:F5:48:2D:7F:8D:19:15:08:52"}}},"request":{"raw":"GET /GVqzNswLTwAnCD7CtTZw67VCMbChaqBxjezVsqQAqUzS/ HTTP/1.1\r\nHost: 4zbpk6lzsya26tazaje3yw7d6st53o23iriglps2sp2bnpqb6e7q.mainnet-1.datasprite-cdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://firelight.run/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 25 Sep 2026 05:36:52 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1088\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin\r\nx-irys-item-id: GVqzNswLTwAnCD7CtTZw67VCMbChaqBxjezVsqQAqUzS\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-content-type: image/webp\r\nx-content-length: 1088\r\ncache-control: max-age=2592000\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BsGapkFfCgeC5My1yOKTf2RIX8h9WZJFbtGxQbmZSWJPc4oHOnef2Cx0sB0bSQXk2wUOTMyoXPFb8hxKQ7a7e0e6n9vTc9YcsHt171Q8e%2FeBKNHIFS69vp73jTUnZ62wcIl3Qi9hAZTOPdDtoopvUpzDkk2n%2B7%2BbjvPo3wWtWgEghgD4HVCEHYmLZkQMyizACo76s%2Bpw%2Fc1IhvJfCOVk5TjxI6k%3D\"}]}\r\ncf-ray: a407ac74aaf55699-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1088,"size_decoded":1944,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"83b2e6eb3f40be6945e2112c98329b70","sha1":"b341a325a03dd650a117551cfa8b85d0dc92e017","sha256":"6aea9bb753ec96aa7dfca4129ed0fa434f44076efe1a6201470d87f2dc472114","sha512":"58906704666d6ff8441f9d30c52bd971e6dc7c36e22e3e996c91b2c8692597474077890d43f82269f2405512681c920873b67b57b670201d1aabb100e476d43f","ssdeep":"","tlshash":"c111e9be75434472944b64f6cccb83cce1e3060469eddf26816219cd9c1c8c2790354f","first_seen":"2026-01-04T09:33:32.414513Z","last_seen":"2026-09-25T06:10:52.647911Z","times_seen":63,"resource_available":false,"data":null}},"time_used":384,"timings":{"blocked":108,"dns":4,"connect":5,"send":0,"wait":185,"receive":0,"ssl":58},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"4zbpk6lzsya26tazaje3yw7d6st53o23iriglps2sp2bnpqb6e7q.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"4zbpk6lzsya26tazaje3yw7d6st53o23iriglps2sp2bnpqb6e7q.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"4zbpk6lzsya26tazaje3yw7d6st53o23iriglps2sp2bnpqb6e7q.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tuahnjjbd4ptq2z3dq73mmxdcdpdxt5sjs4uwfluwoxw2i3zrv4q.mainnet-1.datasprite-cdn.com/BZsRGcBURQnewjAfV98ZUziy45VCmwCQHch8hcGU64wz/","fqdn":"tuahnjjbd4ptq2z3dq73mmxdcdpdxt5sjs4uwfluwoxw2i3zrv4q.mainnet-1.datasprite-cdn.com","domain":"datasprite-cdn.com","tld":"com"},"ip":{"addr":"172.67.163.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://firelight.run/","date":"2026-09-25T05:36:51.766Z","timestamp":1790314611766,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"datasprite-cdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 01 Sep 2026 16:12:35 GMT","end":"Mon, 30 Nov 2026 17:12:28 GMT"},"fingerprint":{"sha1":"A7:49:1F:BA:09:CF:9C:E9:55:85:E1:3E:6A:46:2B:56:1A:DD:E7:32","sha256":"57:8A:D0:59:59:01:19:C2:80:F0:3E:E8:83:04:E6:8C:0B:A5:94:44:42:21:A0:F5:48:2D:7F:8D:19:15:08:52"}}},"request":{"raw":"GET /BZsRGcBURQnewjAfV98ZUziy45VCmwCQHch8hcGU64wz/ HTTP/1.1\r\nHost: tuahnjjbd4ptq2z3dq73mmxdcdpdxt5sjs4uwfluwoxw2i3zrv4q.mainnet-1.datasprite-cdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://firelight.run/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 25 Sep 2026 05:36:52 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1878\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin\r\nx-irys-item-id: BZsRGcBURQnewjAfV98ZUziy45VCmwCQHch8hcGU64wz\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-content-type: image/webp\r\nx-content-length: 1878\r\ncache-control: max-age=2592000\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=l7VwUJPnKxfCT%2FHEmpygHGKDcKMTMi78PBCYlWrjXWmJX5Zjmh3iqLzvcyhitmPKSssgr8p74%2BJ%2Beh6BzG9p6AoE2sB4TeCh03U9oPRLv4fBKc8li9j9vk1rLzQ%2FBBxGaKvlEL0EiCYAcEnA5YRr%2BNvj0P1j24E3LtgXjIK4eP83MIaLAkRDRA8fftGbDo7CFPrlmjB67vU%2BZ7Cj26m2qvjuzA4%3D\"}]}\r\ncf-ray: a407ac74a857b4eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1878,"size_decoded":2736,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 120x120, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"5c08d5d7c5a8030437630a683f3592e8","sha1":"e13d5394ee2c8f68a8e428b79dcfd3eabd494797","sha256":"fbbb918fb6d655669ac630ad4bf78f24bf49b750235bd9721cf39b470c1c283a","sha512":"fa7f66ee600e3a2f961061efd0f81290b3946673942332f8587f54effbb14d5cf30036605eb77fcfa0f8d01269cf8c15d4b7c2f70b82d5b17158a8f2e8073c9d","ssdeep":"","tlshash":"9041f729c672167aee6f5c14d1a0308df62ef8850690bd4579e3de63e0283db74588b4","first_seen":"2025-09-09T19:24:39.883139Z","last_seen":"2026-09-25T06:10:52.710521Z","times_seen":47,"resource_available":false,"data":null}},"time_used":377,"timings":{"blocked":98,"dns":4,"connect":5,"send":0,"wait":189,"receive":0,"ssl":62},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"tuahnjjbd4ptq2z3dq73mmxdcdpdxt5sjs4uwfluwoxw2i3zrv4q.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"tuahnjjbd4ptq2z3dq73mmxdcdpdxt5sjs4uwfluwoxw2i3zrv4q.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"tuahnjjbd4ptq2z3dq73mmxdcdpdxt5sjs4uwfluwoxw2i3zrv4q.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pinky-goat.digital/xTq1G4zCETaHmvGJzFPgG.js","fqdn":"pinky-goat.digital","domain":"pinky-goat.digital","tld":"digital"},"ip":{"addr":"172.67.178.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://firelight.run/","date":"2026-09-25T05:36:50.575Z","timestamp":1790314610575,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pinky-goat.digital","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Jul 2026 04:58:28 GMT","end":"Mon, 26 Oct 2026 05:57:16 GMT"},"fingerprint":{"sha1":"4C:97:93:44:24:0D:2B:4D:5F:33:84:08:44:C5:BA:8B:98:D5:8B:8F","sha256":"01:0B:52:1B:F5:E6:D5:44:CD:5E:0B:D9:F6:54:1E:36:3D:60:96:7C:68:8E:60:00:B9:46:46:FF:4A:94:82:85"}}},"request":{"raw":"GET /xTq1G4zCETaHmvGJzFPgG.js HTTP/1.1\r\nHost: pinky-goat.digital\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://firelight.run\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://firelight.run/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/javascript;charset=utf-8\r\ndate: Fri, 25 Sep 2026 05:36:50 GMT\r\naccess-control-allow-origin: *\r\nlast-modified: Fri, 25 Sep 2026 00:01:15 GMT\r\nserver: cloudflare\r\naccess-control-allow-methods: GET\r\nage: 2\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\netag: W/\"76158b6030e533034a20fc7b1552c98d-2\"\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gRIaFQEuv2qeVJc%2FTBgN%2BoCHD%2BchFdLjlZ9ei0ITLCKbDemf9r7jrsKdA%2FDePfXvI5Z0lmPGei%2B%2FozKifBkTFZqXPOMEnu83BuqByCVLPhwLdU5IRBpE77cy%2FU%2BhElY4ITRjJyk%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a407ac6c3dfc56c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5315824,"size_decoded":870240,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (19575)","md5":"f2e6647cb4b615ecd06f760c5582a0ae","sha1":"9e48ab42f166588659c6c6710c0788ad6b04580b","sha256":"dba94253bc193cf46e91bfd9e0314d2e3a1572f4bfaead80bea634c32dcecb7c","sha512":"2af3e763a85c42cae80bae140d547b8dbd1b783108fc8f95c2529135172badce73ef8d2ad5f7b38541bebcfc83c955910c76a8b3ccc3e0e92ad81f8da8adc12d","ssdeep":"12288:1vBqhYuPRgTUZYGhcnVAgBb8SWGHl9ItpyaK1:xwhYEEUZYG+nSgUPbfK1","tlshash":"79355bd72364b86293af51d14817244ae37afd9c4805043df265ecfa7dada80b6b6f30","first_seen":"2026-09-25T05:38:00.087962Z","last_seen":"2026-09-25T05:38:00.087962Z","times_seen":1,"resource_available":true,"data":null}},"time_used":88,"timings":{"blocked":0,"dns":3,"connect":13,"send":0,"wait":34,"receive":38,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"pinky-goat.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gateway.irys.xyz/74njk3B4UNqUutfcYrw4BdPfvw2YHdMC7oXCH4ywgNiK","fqdn":"gateway.irys.xyz","domain":"irys.xyz","tld":"xyz"},"ip":{"addr":"172.66.167.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://firelight.run/","date":"2026-09-25T05:36:51.324Z","timestamp":1790314611324,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gateway.irys.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 20 Sep 2026 11:49:06 GMT","end":"Sat, 19 Dec 2026 11:49:05 GMT"},"fingerprint":{"sha1":"1B:75:8F:42:C3:0D:D3:04:72:4A:4F:BC:B0:44:35:11:BD:B0:C1:3A","sha256":"5D:7C:E7:8F:C7:B7:35:6E:0D:92:E6:E6:6C:71:F4:0D:D9:DE:7D:74:E5:56:33:7F:8D:2C:15:B1:80:E9:5D:E0"}}},"request":{"raw":"GET /74njk3B4UNqUutfcYrw4BdPfvw2YHdMC7oXCH4ywgNiK HTTP/1.1\r\nHost: gateway.irys.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://firelight.run/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 \r\ndate: Fri, 25 Sep 2026 05:36:51 GMT\r\ncontent-length: 0\r\nlocation: https://lipjimvtizvuyifeddgmjfapysx6npsrkjjwfy5zxmvkhkoal6ea.mainnet-1.datasprite-cdn.com/74njk3B4UNqUutfcYrw4BdPfvw2YHdMC7oXCH4ywgNiK/\r\nserver: cloudflare\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-credentials: true\r\ncache-control: no-store\r\naccess-control-expose-headers: cache-control, location\r\nx-cache-status: BYPASS\r\ncf-cache-status: BYPASS\r\ncf-ray: a407ac710dc15687-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/webp","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-25T12:27:37.283953Z","times_seen":18651356,"resource_available":true,"data":null}},"time_used":182,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":182,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bsc-dataseed.bnbchain.org/","fqdn":"bsc-dataseed.bnbchain.org","domain":"bnbchain.org","tld":"org"},"ip":{"addr":"54.247.133.244","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://firelight.run/","date":"2026-09-25T05:36:51.641Z","timestamp":1790314611641,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"bnbchain.org","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Thu, 10 Sep 2026 00:00:00 GMT","end":"Fri, 26 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"7A:85:67:66:4A:8D:DF:FE:36:B0:5B:3A:03:EB:87:D2:2B:24:8A:BE","sha256":"9A:E8:86:0C:00:4D:16:23:9D:C5:55:32:6C:46:50:5D:1F:CD:28:89:E7:25:A3:8E:88:2A:63:D3:FC:3B:11:67"}}},"request":{"raw":"OPTIONS / HTTP/1.1\r\nHost: bsc-dataseed.bnbchain.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://firelight.run/\r\nOrigin: https://firelight.run\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 \r\ndate: Fri, 25 Sep 2026 05:36:51 GMT\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: POST, GET, OPTIONS\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 600\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubdomains\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":458,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-25T12:27:37.283953Z","times_seen":18651356,"resource_available":true,"data":null}},"time_used":158,"timings":{"blocked":-1,"dns":0,"connect":32,"send":0,"wait":36,"receive":0,"ssl":83},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bsc-rpc.publicnode.com/","fqdn":"bsc-rpc.publicnode.com","domain":"publicnode.com","tld":"com"},"ip":{"addr":"172.66.150.162","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://firelight.run/","date":"2026-09-25T05:36:51.647Z","timestamp":1790314611647,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"publicnode.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 07 Aug 2026 02:01:04 GMT","end":"Thu, 05 Nov 2026 03:00:51 GMT"},"fingerprint":{"sha1":"94:5F:9F:32:64:19:A5:50:59:22:7E:16:22:E5:6B:9B:1C:65:F3:ED","sha256":"7D:67:31:E8:80:74:FB:3E:3C:A4:1B:9F:F0:BE:71:56:CE:95:31:97:BD:28:75:B6:47:AA:02:45:08:74:76:65"}}},"request":{"raw":"OPTIONS / HTTP/1.1\r\nHost: bsc-rpc.publicnode.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://firelight.run/\r\nOrigin: https://firelight.run\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 204 \r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: content-type\r\naccess-control-allow-methods: GET,HEAD,OPTIONS,POST\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 172800\r\nallow: OPTIONS, POST\r\nvary: Origin,Access-Control-Request-Method,Access-Control-Request-Headers\r\ndate: Fri, 25 Sep 2026 05:36:51 GMT\r\nx-envoy-upstream-service-time: 0\r\nserver: cloudflare\r\ncf-cache-status: DYNAMIC\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\npriority: u=4,i=?0\r\nx-content-type-options: nosniff\r\ncf-ray: a407ac72cfe1c272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":641,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-25T12:27:37.283953Z","times_seen":18651356,"resource_available":true,"data":null}},"time_used":45,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":45,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"arbitrum.meowrpc.com/","fqdn":"arbitrum.meowrpc.com","domain":"meowrpc.com","tld":"com"},"ip":{"addr":"104.26.11.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://firelight.run/","date":"2026-09-25T05:36:50.404Z","timestamp":1790314610404,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"meowrpc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 01 Aug 2026 19:10:47 GMT","end":"Fri, 30 Oct 2026 20:10:26 GMT"},"fingerprint":{"sha1":"65:9E:5B:37:AA:2A:91:88:11:63:39:DB:E3:F4:41:EA:0A:7F:A0:5C","sha256":"66:8F:BC:54:1F:00:37:2E:B2:39:A3:49:95:4A:E2:63:A2:FF:86:76:7C:89:DD:92:9D:F0:13:61:42:2D:CE:64"}}},"request":{"raw":"POST / HTTP/1.1\r\nHost: arbitrum.meowrpc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://firelight.run/\r\nContent-Type: application/json\r\nContent-Length: 136\r\nOrigin: https://firelight.run\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":136,"data":"{\"jsonrpc\":\"2.0\",\"method\":\"eth_call\",\"params\":[{\"to\":\"0x967530969F5e5c94E0dC7247e9355e62e0ED65B2\",\"data\":\"0x3bc5de30\"},\"latest\"],\"id\":1}"}},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 25 Sep 2026 05:36:50 GMT\r\ncontent-type: application/json\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: origin, access-control-request-method, access-control-request-headers\r\naccess-control-allow-origin: *\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zQTQFXmYKLdfnNFPr1MdhBqCvSTtUwrDHMBE9e8xeYZKgvhTdzjYnYfALOopp7n8aGSQ1pRz3W3JZBLNFPa2JVzWG7ECtmlG%2F%2BuwR2sJOVhQU8NKT%2BsnFCrhI2xL8VLvzgthyayG\"}]}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: a407ac6b6c47568a-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":98,"size_decoded":716,"mime_type":"application/json","magic":"JSON text data","md5":"e46902157aa64abcdc41f29ace8b171a","sha1":"b959cf3eceb9eee47817435a4c36f0792aa15811","sha256":"36edf520b814be5fc0d5360dc0f6ae1e9ed28f47bcc63fe6ede8285bfe2ce982","sha512":"49d1d832b1949ee103d35f061172658ef17bc4970391dca16e61aabfce51f02db86daa7cbe9d7657265e1ebf17916c347233226eedfe065aacadabc4409ce6c5","ssdeep":"","tlshash":"c5b01220514e2b30715a49067e0d394d57f099f104507f031c0c8a09250951790c2130","first_seen":"2026-02-05T07:43:22.648531Z","last_seen":"2026-09-25T06:10:52.684225Z","times_seen":374,"resource_available":true,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"arbitrum.meowrpc.com/","fqdn":"arbitrum.meowrpc.com","domain":"meowrpc.com","tld":"com"},"ip":{"addr":"104.26.11.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://firelight.run/","date":"2026-09-25T05:36:50.417Z","timestamp":1790314610417,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"meowrpc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 01 Aug 2026 19:10:47 GMT","end":"Fri, 30 Oct 2026 20:10:26 GMT"},"fingerprint":{"sha1":"65:9E:5B:37:AA:2A:91:88:11:63:39:DB:E3:F4:41:EA:0A:7F:A0:5C","sha256":"66:8F:BC:54:1F:00:37:2E:B2:39:A3:49:95:4A:E2:63:A2:FF:86:76:7C:89:DD:92:9D:F0:13:61:42:2D:CE:64"}}},"request":{"raw":"OPTIONS / HTTP/1.1\r\nHost: arbitrum.meowrpc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://firelight.run/\r\nOrigin: https://firelight.run\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 25 Sep 2026 05:36:50 GMT\r\ncontent-length: 0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: origin, access-control-request-method, access-control-request-headers\r\naccess-control-allow-methods: GET,POST,OPTIONS\r\naccess-control-allow-headers: authorization,content-type,dnt,keep-alive,user-agent,x-requested-with,if-modified-since,cache-control,range,x-api-key\r\naccess-control-allow-origin: *\r\nallow: POST\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HuYcREgjoQYT41zvRozJyev8QR0B5T%2FNCeAeMhkRQ3Hc4pC1Rsa15HtAN8jCKBl2zl835rEfH%2FzjKEcExTNSPdpo5b0SN0tHnrON8FltxvQqB6lYMnbF%2FkbIlL%2FH9GhSdt%2BpKPSf\"}]}\r\nserver: cloudflare\r\ncf-ray: a407ac6b3c1d568a-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":815,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-25T12:27:37.283953Z","times_seen":18651356,"resource_available":true,"data":null}},"time_used":48,"timings":{"blocked":-1,"dns":1,"connect":1,"send":0,"wait":30,"receive":0,"ssl":15},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gateway.irys.xyz/5aFEMn7GceUbCyMFsKjcw8DJY9c9PzWNeJv7ragvUWTT","fqdn":"gateway.irys.xyz","domain":"irys.xyz","tld":"xyz"},"ip":{"addr":"172.66.167.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://firelight.run/","date":"2026-09-25T05:36:51.271Z","timestamp":1790314611271,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gateway.irys.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 20 Sep 2026 11:49:06 GMT","end":"Sat, 19 Dec 2026 11:49:05 GMT"},"fingerprint":{"sha1":"1B:75:8F:42:C3:0D:D3:04:72:4A:4F:BC:B0:44:35:11:BD:B0:C1:3A","sha256":"5D:7C:E7:8F:C7:B7:35:6E:0D:92:E6:E6:6C:71:F4:0D:D9:DE:7D:74:E5:56:33:7F:8D:2C:15:B1:80:E9:5D:E0"}}},"request":{"raw":"GET /5aFEMn7GceUbCyMFsKjcw8DJY9c9PzWNeJv7ragvUWTT HTTP/1.1\r\nHost: gateway.irys.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://firelight.run/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 \r\ndate: Fri, 25 Sep 2026 05:36:51 GMT\r\ncontent-length: 0\r\nlocation: https://ipzqcmr26hbzpnzybg3ewzxzuu26ypvig3lp4irbfe643kmo3g5a.mainnet-1.datasprite-cdn.com/5aFEMn7GceUbCyMFsKjcw8DJY9c9PzWNeJv7ragvUWTT/\r\nserver: cloudflare\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\ncache-control: no-store\r\naccess-control-allow-credentials: true\r\naccess-control-expose-headers: cache-control, location\r\nx-cache-status: BYPASS\r\ncf-cache-status: BYPASS\r\ncf-ray: a407ac70fd955687-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/svg+xml","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-25T12:27:37.283953Z","times_seen":18651356,"resource_available":true,"data":null}},"time_used":236,"timings":{"blocked":48,"dns":0,"connect":0,"send":0,"wait":188,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gateway.irys.xyz/tNjir8swBoPJcDaSUy49m7YW8n9rjjUNZzKpeJzjGhC","fqdn":"gateway.irys.xyz","domain":"irys.xyz","tld":"xyz"},"ip":{"addr":"172.66.167.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://firelight.run/","date":"2026-09-25T05:36:51.299Z","timestamp":1790314611299,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gateway.irys.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 20 Sep 2026 11:49:06 GMT","end":"Sat, 19 Dec 2026 11:49:05 GMT"},"fingerprint":{"sha1":"1B:75:8F:42:C3:0D:D3:04:72:4A:4F:BC:B0:44:35:11:BD:B0:C1:3A","sha256":"5D:7C:E7:8F:C7:B7:35:6E:0D:92:E6:E6:6C:71:F4:0D:D9:DE:7D:74:E5:56:33:7F:8D:2C:15:B1:80:E9:5D:E0"}}},"request":{"raw":"GET /tNjir8swBoPJcDaSUy49m7YW8n9rjjUNZzKpeJzjGhC HTTP/1.1\r\nHost: gateway.irys.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://firelight.run/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 \r\ndate: Fri, 25 Sep 2026 05:36:51 GMT\r\ncontent-length: 0\r\nlocation: https://buutf2tmltbd5uchhy32zl6l6dichmeqmkfy746sru4cutui7g3q.mainnet-1.datasprite-cdn.com/tNjir8swBoPJcDaSUy49m7YW8n9rjjUNZzKpeJzjGhC/\r\nserver: cloudflare\r\naccess-control-expose-headers: location, cache-control\r\ncache-control: no-store\r\naccess-control-allow-credentials: true\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nx-cache-status: BYPASS\r\ncf-cache-status: BYPASS\r\ncf-ray: a407ac70fda25687-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/webp","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-25T12:27:37.283953Z","times_seen":18651356,"resource_available":true,"data":null}},"time_used":160,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":160,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gateway.irys.xyz/BmRja2B3uNcEnmSf4spQwbDhyXoU8SpESENkTyQBN6Wr","fqdn":"gateway.irys.xyz","domain":"irys.xyz","tld":"xyz"},"ip":{"addr":"172.66.167.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://firelight.run/","date":"2026-09-25T05:36:51.314Z","timestamp":1790314611314,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gateway.irys.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 20 Sep 2026 11:49:06 GMT","end":"Sat, 19 Dec 2026 11:49:05 GMT"},"fingerprint":{"sha1":"1B:75:8F:42:C3:0D:D3:04:72:4A:4F:BC:B0:44:35:11:BD:B0:C1:3A","sha256":"5D:7C:E7:8F:C7:B7:35:6E:0D:92:E6:E6:6C:71:F4:0D:D9:DE:7D:74:E5:56:33:7F:8D:2C:15:B1:80:E9:5D:E0"}}},"request":{"raw":"GET /BmRja2B3uNcEnmSf4spQwbDhyXoU8SpESENkTyQBN6Wr HTTP/1.1\r\nHost: gateway.irys.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://firelight.run/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 \r\ndate: Fri, 25 Sep 2026 05:36:51 GMT\r\ncontent-length: 0\r\nlocation: https://t73giqqwtpkhhdyyeszo2vv4sqyyuafuk7y2deshpm3xftc7jg7q.mainnet-1.datasprite-cdn.com/BmRja2B3uNcEnmSf4spQwbDhyXoU8SpESENkTyQBN6Wr/\r\nserver: cloudflare\r\naccess-control-allow-credentials: true\r\ncache-control: no-store\r\naccess-control-expose-headers: cache-control, location\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nx-cache-status: BYPASS\r\ncf-cache-status: BYPASS\r\ncf-ray: a407ac711dd95687-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/webp","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-25T12:27:37.283953Z","times_seen":18651356,"resource_available":true,"data":null}},"time_used":228,"timings":{"blocked":-1,"dns":0,"connect":1,"send":0,"wait":170,"receive":0,"ssl":40},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lzqmfxcfxzkmtpb2kkhciww2krq6nbxvcrakzllef64mn2325ugq.mainnet-1.datasprite-cdn.com/7MQuBTrRdm5iYhmrHxm5x4SbttL9dZTrssQBRhuxrYEg/","fqdn":"lzqmfxcfxzkmtpb2kkhciww2krq6nbxvcrakzllef64mn2325ugq.mainnet-1.datasprite-cdn.com","domain":"datasprite-cdn.com","tld":"com"},"ip":{"addr":"172.67.163.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://firelight.run/","date":"2026-09-25T05:36:51.703Z","timestamp":1790314611703,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"datasprite-cdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 01 Sep 2026 16:12:35 GMT","end":"Mon, 30 Nov 2026 17:12:28 GMT"},"fingerprint":{"sha1":"A7:49:1F:BA:09:CF:9C:E9:55:85:E1:3E:6A:46:2B:56:1A:DD:E7:32","sha256":"57:8A:D0:59:59:01:19:C2:80:F0:3E:E8:83:04:E6:8C:0B:A5:94:44:42:21:A0:F5:48:2D:7F:8D:19:15:08:52"}}},"request":{"raw":"GET /7MQuBTrRdm5iYhmrHxm5x4SbttL9dZTrssQBRhuxrYEg/ HTTP/1.1\r\nHost: lzqmfxcfxzkmtpb2kkhciww2krq6nbxvcrakzllef64mn2325ugq.mainnet-1.datasprite-cdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://firelight.run/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 25 Sep 2026 05:36:52 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\npriority: u=5,i\r\nvary: Origin\r\nx-irys-item-id: 7MQuBTrRdm5iYhmrHxm5x4SbttL9dZTrssQBRhuxrYEg\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-content-type: image/webp\r\nx-content-length: 1652\r\ncache-control: max-age=2592000\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=77TK6PFUuxu3rWdBZavQq7pRIZGv7w1PeRDP0gsOvRRNiltPPwLg4z8yVy%2BCv7MsAIcKYL75YlTgx8ekhLrbfMezGfWNv9w%2FYWUY1wWVmL0TXODU6Li1uRuNXSnuUv33caJi0xSSotlWkiZUY0bAri0NBTXDqlJNQa8G8h%2B1gKUMeVlx2jdsLx%2FZBdvGzEC25h6HzXBU%2FceNcLEa2eZiR9kAnXw%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a407ac738b3256b7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1652\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1652,"size_decoded":2530,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 120x120, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"a549fff44eb302764c78ee0ccd01e062","sha1":"73e06130b3e2cd9145c4de30d7e44dd0c23a8e06","sha256":"d1bca0a7b38f3021f68467357b841e6d867e22f27951c0faae2535585a4634db","sha512":"e3ca1f88f0646f47959b5cea1768b5226b45f62e63c3591c0b35cf0c29a809dc0cd292a591bced3432debdd6783c6391913f94a1a62b2107e22df83bbf4e55ef","ssdeep":"","tlshash":"9b310c310b1550b24428731ee835e67df00dc8cdb30a5692d45cca4c12be36b6fe7361","first_seen":"2025-08-09T16:24:38.721025Z","last_seen":"2026-09-25T06:10:52.667948Z","times_seen":67,"resource_available":false,"data":null}},"time_used":361,"timings":{"blocked":-1,"dns":3,"connect":38,"send":0,"wait":311,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"lzqmfxcfxzkmtpb2kkhciww2krq6nbxvcrakzllef64mn2325ugq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"lzqmfxcfxzkmtpb2kkhciww2krq6nbxvcrakzllef64mn2325ugq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"lzqmfxcfxzkmtpb2kkhciww2krq6nbxvcrakzllef64mn2325ugq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"elliptical-rabbit.icu/api/cap/challenge","fqdn":"elliptical-rabbit.icu","domain":"elliptical-rabbit.icu","tld":"icu"},"ip":{"addr":"172.67.175.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://firelight.run/","date":"2026-09-25T05:36:52.469Z","timestamp":1790314612469,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"elliptical-rabbit.icu","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 24 Sep 2026 03:48:05 GMT","end":"Wed, 23 Dec 2026 03:48:04 GMT"},"fingerprint":{"sha1":"AD:2B:26:5C:52:6E:8A:37:7A:A9:99:10:86:6F:5A:9E:A9:32:7E:E0","sha256":"54:29:B2:09:23:E1:46:70:31:71:D4:37:47:D6:45:84:C0:8E:33:39:75:8D:75:36:6C:3B:4F:C8:9F:60:CB:93"}}},"request":{"raw":"POST /api/cap/challenge HTTP/1.1\r\nHost: elliptical-rabbit.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://firelight.run/\r\nOrigin: https://firelight.run\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 25 Sep 2026 05:36:52 GMT\r\ncontent-type: application/json; charset=utf-8\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nvary: Accept-Encoding\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SfNkz7favCoDjR9li3I8y8A51FXjTL4Pha3S9D9%2BOJnzn4QCBlGTjOtw9CMNtr6WXvJQppA%2FNbpH5ErJoU2kzlCSEj1qbCj2ns3iFlpER2YalvySGdODUzRkfB1%2FqifWO4Gs2ObXNK0%3D\"}]}\r\nserver: cloudflare\r\ncf-ray: a407ac780e60b51b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4592,"size_decoded":4148,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"38c922efa1fa118e0f5dbdb9adda79bb","sha1":"f8d46aaddfac5d804e90d5fbc1748d773b9c77b7","sha256":"c989c59578d05e050ddfe18e9de19faa4b9749b4b7b3c3abf6159324c4203efd","sha512":"600d06170026b6504c66b5c6dc230e9f321cd913f8c30665847ae4d94f447c0960698ea1a2f0bc6d375008db2b50b8b1b6dfab50ee5f5d412ed6dda78dc74c27","ssdeep":"96:cr63u1mxdIQH3BeUnhUa8mUivg2jcvSbgHuofDtbGLSClb+Nl+K:n3dDIQkUnhUKUmg2Av/H5bGLSg+3","tlshash":"e2919eaf17d2e23933436335097f5887e990b686b062445d4513fb03fefc28a4159aac","first_seen":"2026-09-25T05:38:00.091637Z","last_seen":"2026-09-25T05:38:00.091637Z","times_seen":1,"resource_available":true,"data":null}},"time_used":219,"timings":{"blocked":-1,"dns":0,"connect":1,"send":0,"wait":206,"receive":0,"ssl":11},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"elliptical-rabbit.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"elliptical-rabbit.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"elliptical-rabbit.icu/api/cap/redeem","fqdn":"elliptical-rabbit.icu","domain":"elliptical-rabbit.icu","tld":"icu"},"ip":{"addr":"172.67.175.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://firelight.run/","date":"2026-09-25T05:36:53.508Z","timestamp":1790314613508,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"elliptical-rabbit.icu","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 24 Sep 2026 03:48:05 GMT","end":"Wed, 23 Dec 2026 03:48:04 GMT"},"fingerprint":{"sha1":"AD:2B:26:5C:52:6E:8A:37:7A:A9:99:10:86:6F:5A:9E:A9:32:7E:E0","sha256":"54:29:B2:09:23:E1:46:70:31:71:D4:37:47:D6:45:84:C0:8E:33:39:75:8D:75:36:6C:3B:4F:C8:9F:60:CB:93"}}},"request":{"raw":"POST /api/cap/redeem HTTP/1.1\r\nHost: elliptical-rabbit.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://firelight.run/\r\nContent-Type: application/json\r\nContent-Length: 1466\r\nOrigin: https://firelight.run\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":1466,"data":"{\"token\":\"eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.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.LeTSEJI0xDHnlEAQhatTZHVEt6OTZ47qo37Pu6upSQU\",\"solutions\":[61484,81176,41059,48493,34220,10656,64621,19574,33600,130267,51967,74,84870,173366,65828,208329,16499,62069,55550,7467,14501,37274,37560,57294,15022,112871,219687,10017,14533,19806,37051,5873,228853,48709,19468,25449,25953,63125,33011,243425,100230,67351,21825,41482,20579,62609,103569,37788,13815,3726,111775,43865,70014,115541,67128,5034,16935,148082,9047,19884,5392,73263,2056,23409,3492,32341,142510,24153,10686,7078,31645,120214,62202,69226,3905,83665,5026,17029,30661,66616,73145,36776,5222,45404,65664,5762,56167,128972,189686,60657,54823,7059,47568,50703,198492,127174,101951,4072,169459,44435],\"instr\":{\"i\":\"9b533d0f828fd13ca4ef01984c12c929\",\"state\":{\"wbjcwncae822\":817282,\"eo8f3l2ba4ki\":293997,\"oxvv9hu4j0hp\":511768,\"b7uddepi7u2a\":204188},\"ts\":1790314613500}}"}},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 25 Sep 2026 05:36:53 GMT\r\ncontent-type: application/json; charset=utf-8\r\naccess-control-allow-origin: *\r\nvary: Accept-Encoding\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kRUSjA6T5jzfBOQ4G5YJR0cHyc4VuvuQOybNfoMIfwGfwIXQLZGzI2yJKaxy2rVjC8XfsiXsAqXOeNN%2BRJtKLQVTL79PIb92DlJwtIALuGNSd3Zi5FZ4PaorPy0qWRfuX%2BAi6rKf7yQ%3D\"}]}\r\ncontent-encoding: zstd\r\nserver: cloudflare\r\ncf-ray: a407ac7f6e23b51b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":226,"size_decoded":798,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"2ea35eb15ce91734092c0b19b83bd410","sha1":"8b7de2595753009637ed7b8685af2fc964471ba3","sha256":"be1cc2f335ba7ce1e2fa4e3d63ebc0ea696dc2866ea7bd1e6fe2e8898e42aee9","sha512":"5ab5d66836c66997fe53798af9085174fd292f3f2b9422e74cb37102d0a754b49ae667abb7692af65a9db13dc2792c0cb8eadd2e688bec77b4e4908d03580522","ssdeep":"","tlshash":"53d0a79db01e10a545979b02a9ab2ea9264949b3a9404419d9eacb0848a442663c2686","first_seen":"2026-09-25T05:38:00.093399Z","last_seen":"2026-09-25T05:38:00.093399Z","times_seen":1,"resource_available":true,"data":null}},"time_used":336,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":336,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"elliptical-rabbit.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"elliptical-rabbit.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"firelight.run/","fqdn":"firelight.run","domain":"firelight.run","tld":"run"},"ip":{"addr":"104.21.13.148","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-25T05:36:49.507Z","timestamp":1790314609507,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"firelight.run","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 24 Sep 2026 11:54:24 GMT","end":"Wed, 23 Dec 2026 11:54:23 GMT"},"fingerprint":{"sha1":"02:54:09:B5:1A:C4:80:FE:25:D5:90:D5:C2:96:72:47:EA:08:E4:AE","sha256":"3B:A7:9F:77:5F:07:1D:DF:C1:4E:DC:82:26:78:98:F9:C7:9C:E6:6F:08:FA:7C:0D:00:C0:A7:B5:72:83:E1:45"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: firelight.run\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 25 Sep 2026 05:36:49 GMT\r\ncontent-type: text/html\r\nlast-modified: Sun, 20 Sep 2026 09:00:48 GMT\r\nvary: accept-encoding\r\npriority: u=0,i\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nyCUeQ1ztlZ3xngFPFDIQQgjL%2BZwH7l0iAsfrt1jLEYhmDpbGnWbhbUlXpJ1uymhbT1lbSf5%2BxkGMmlblATsrD4hmYthkBsjU5HRitN5nmdT1lOGYiI5LCbEeLqIvTGD\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: zstd\r\ncf-ray: a407ac659dca2efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Framer Sites","description":"Framer is a no-code web design platform for designing and publishing responsive websites.","website":"https://www.framer.com","common_platform_enumeration":"","icon":"Framer Sites.svg","categories":["CMS","Page builders"]},{"name":"React","description":"React is an open-source JavaScript library for building user interfaces or UI components.","website":"https://reactjs.org","common_platform_enumeration":"cpe:2.3:a:facebook:react:*:*:*:*:*:*:*:*","icon":"React.svg","categories":["JavaScript frameworks"]}],"data":{"size":440375,"size_decoded":52213,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1572)","md5":"3f70015e33a9796b21ed3d3fe64025ee","sha1":"e6c9d1dd0bcff690b51db55680049b4f989c17c8","sha256":"5ee2b7ec29a1dcf6772a4fae51caa8a7e74265ef0f5f14c73ecf7af616baccae","sha512":"f4c181ce1424bf53ba597590435d61a4ceb712219a1bdde0445bd11d2d4b8b0342daab4fc9e8beabe1a2983b5a96a9f0c374baff17922b2817f024693b69976d","ssdeep":"3072:yNuTSYcLGIJ1e+BY9mxeh5evVt94foO0WcAfYtI4fzM0WcEfD:yNu0H4AEh4bA","tlshash":"4b94c6136214d0385dc729bdf7d9ba1c251ca201fb3286ea62fd426f95c9ef412a27dc","first_seen":"2026-09-25T05:38:00.053396Z","last_seen":"2026-09-25T05:38:01.265667Z","times_seen":2,"resource_available":true,"data":null}},"time_used":147,"timings":{"blocked":-1,"dns":6,"connect":13,"send":0,"wait":58,"receive":70,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"firelight.run","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-25","alert":"Phishing Block","trigger":"firelight.run","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"firelight.run","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"firelight.run/g8LJmKUz0WtDHSj1fupWDp8M4-1.png","fqdn":"firelight.run","domain":"firelight.run","tld":"run"},"ip":{"addr":"104.21.13.148","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://firelight.run/","date":"2026-09-25T05:36:49.792Z","timestamp":1790314609792,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"firelight.run","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 24 Sep 2026 11:54:24 GMT","end":"Wed, 23 Dec 2026 11:54:23 GMT"},"fingerprint":{"sha1":"02:54:09:B5:1A:C4:80:FE:25:D5:90:D5:C2:96:72:47:EA:08:E4:AE","sha256":"3B:A7:9F:77:5F:07:1D:DF:C1:4E:DC:82:26:78:98:F9:C7:9C:E6:6F:08:FA:7C:0D:00:C0:A7:B5:72:83:E1:45"}}},"request":{"raw":"GET /g8LJmKUz0WtDHSj1fupWDp8M4-1.png HTTP/1.1\r\nHost: firelight.run\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://firelight.run/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 25 Sep 2026 05:36:49 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 21 Apr 2026 11:39:44 GMT\r\npriority: u=5,i\r\netag: \"69e76200-240c\"\r\naccept-ranges: bytes\r\nage: 3\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SoVEttha1aK%2B8pVzmzqOAeGBBAKCXD9ToTzuq5B%2BFjDJJa7d6C%2FcnUtgHhituL1CkgxS4XJglBdN0QowNJtS0cuFs7cxy9gZnf%2BueAxoz71JIht78Lgkq%2FlBQyHmijvk\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a407ac673e232efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 9228\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9228,"size_decoded":9921,"mime_type":"image/png","magic":"PNG image data, 512 x 384, 8-bit colormap, non-interlaced","md5":"458971cf7b04c53fc2e69b96a2f4d537","sha1":"d213a58fb04b95e7468571d12402b6fde176f172","sha256":"6998349bcd9fff3c7d51d5c589fa7e613916870e0cab65fbd439c8f6f0eee16d","sha512":"187240c70c2be4b21b2a37e41a59bcb8468fecc99d21e3a6a2e86c9df6fa201cce8563169f3e3e6efdb9fe2266529961068a2c3011b6d500b00a32d07d8d5a04","ssdeep":"192:JeKZ9FUyh3ax7fR8QvoWe6h77EE1Ym2VYp3Rz8SXJLR3xfkTX:JeKZnh3a5fFvoWe631Y5VYb8gJRxfGX","tlshash":"af12bf680606954e80c706bde7649e38e358a90bd3aad153b837db654c355b8ec9c8fc","first_seen":"2026-04-29T09:31:56.252985Z","last_seen":"2026-09-25T05:38:01.250655Z","times_seen":21,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"firelight.run","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"firelight.run","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-25","alert":"Phishing Block","trigger":"firelight.run","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"firelight.run/d9b6c81a600dfbb3fa4c740e56247ad8ce4fc393.svg","fqdn":"firelight.run","domain":"firelight.run","tld":"run"},"ip":{"addr":"104.21.13.148","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://firelight.run/","date":"2026-09-25T05:36:49.854Z","timestamp":1790314609854,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"firelight.run","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 24 Sep 2026 11:54:24 GMT","end":"Wed, 23 Dec 2026 11:54:23 GMT"},"fingerprint":{"sha1":"02:54:09:B5:1A:C4:80:FE:25:D5:90:D5:C2:96:72:47:EA:08:E4:AE","sha256":"3B:A7:9F:77:5F:07:1D:DF:C1:4E:DC:82:26:78:98:F9:C7:9C:E6:6F:08:FA:7C:0D:00:C0:A7:B5:72:83:E1:45"}}},"request":{"raw":"GET /d9b6c81a600dfbb3fa4c740e56247ad8ce4fc393.svg HTTP/1.1\r\nHost: firelight.run\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://firelight.run/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 25 Sep 2026 05:36:49 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aKUd7BfVQQZsEiwN5Eg9HPfpeA5pYHKbkmDFpKbNUDRkeJ1RzvrmV0pIxkSnQNHM2NXleuInBwCjloW%2Fjx3xwybV6yFEXX2s2KuZvVBLzZlk2JANt6QdfW4Ic%2FWDDmv9\"}]}\r\nlast-modified: Tue, 21 Apr 2026 11:39:44 GMT\r\npriority: u=4,i\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"69e76200-f25\"\r\nage: 3\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a407ac679e562efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3877,"size_decoded":2266,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"80fd4d380001d7ba50f3289bc01fd1b7","sha1":"d9b6c81a600dfbb3fa4c740e56247ad8ce4fc393","sha256":"44338ccd50646a9c9f8acf3f0540ba1137f5a8ceb2385e445db4281c8a0865f1","sha512":"0ddc190dce986075259952e547cef6e22d0d1849c5063930dfae18c37381512666d03b790c40a3553dee62766c10cb6c98d447b502a700a4a9fb15b00d6ac59b","ssdeep":"","tlshash":"9381f2feef7853d8a4c9b7f6f7221528740fa4f096e58e62c65c1c0a589785ce954c80","first_seen":"2026-04-24T15:23:09.440933Z","last_seen":"2026-09-25T05:38:01.280137Z","times_seen":16,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-25","alert":"Phishing Block","trigger":"firelight.run","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"firelight.run","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"firelight.run","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"arbitrum.gateway.tenderly.co/","fqdn":"arbitrum.gateway.tenderly.co","domain":"tenderly.co","tld":"co"},"ip":{"addr":"35.227.193.242","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://firelight.run/","date":"2026-09-25T05:36:50.417Z","timestamp":1790314610417,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gateway.tenderly.co","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 14 Aug 2026 17:05:13 GMT","end":"Thu, 12 Nov 2026 17:05:12 GMT"},"fingerprint":{"sha1":"3C:49:6B:54:E6:90:83:A7:6D:1D:85:6C:CE:96:95:BA:4F:5E:55:23","sha256":"0B:F3:1B:F3:1C:34:BF:C5:3C:C4:C5:D7:82:EE:73:AB:76:EB:51:11:1B:89:CD:E6:C6:FA:42:22:5A:3F:7C:AE"}}},"request":{"raw":"OPTIONS / HTTP/1.1\r\nHost: arbitrum.gateway.tenderly.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://firelight.run/\r\nOrigin: https://firelight.run\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 \r\naccess-control-allow-headers: content-type\r\naccess-control-allow-methods: POST\r\naccess-control-allow-origin: *\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\ndate: Fri, 25 Sep 2026 05:36:50 GMT\r\nx-envoy-upstream-service-time: 0\r\nserver: envoy\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":0,"size_decoded":384,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-25T12:27:37.283953Z","times_seen":18651356,"resource_available":true,"data":null}},"time_used":133,"timings":{"blocked":-1,"dns":63,"connect":11,"send":0,"wait":42,"receive":0,"ssl":17},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"arbitrum.gateway.tenderly.co","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"b6ktecz7yjy6fzgzlivivwfm4xtjvavuqbddceaslq46lxbuw2wq.mainnet-1.datasprite-cdn.com/23q4kgVKA71hmzEKL9qhRwSTESeYhDZ84LUNc1HJ8XX2/","fqdn":"b6ktecz7yjy6fzgzlivivwfm4xtjvavuqbddceaslq46lxbuw2wq.mainnet-1.datasprite-cdn.com","domain":"datasprite-cdn.com","tld":"com"},"ip":{"addr":"104.21.15.158","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://firelight.run/","date":"2026-09-25T05:36:51.691Z","timestamp":1790314611691,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"datasprite-cdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 01 Sep 2026 16:12:35 GMT","end":"Mon, 30 Nov 2026 17:12:28 GMT"},"fingerprint":{"sha1":"A7:49:1F:BA:09:CF:9C:E9:55:85:E1:3E:6A:46:2B:56:1A:DD:E7:32","sha256":"57:8A:D0:59:59:01:19:C2:80:F0:3E:E8:83:04:E6:8C:0B:A5:94:44:42:21:A0:F5:48:2D:7F:8D:19:15:08:52"}}},"request":{"raw":"GET /23q4kgVKA71hmzEKL9qhRwSTESeYhDZ84LUNc1HJ8XX2/ HTTP/1.1\r\nHost: b6ktecz7yjy6fzgzlivivwfm4xtjvavuqbddceaslq46lxbuw2wq.mainnet-1.datasprite-cdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://firelight.run/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 25 Sep 2026 05:36:52 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\npriority: u=5,i\r\nvary: Origin\r\nx-irys-item-id: 23q4kgVKA71hmzEKL9qhRwSTESeYhDZ84LUNc1HJ8XX2\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-content-type: image/webp\r\nx-content-length: 1096\r\ncache-control: max-age=2592000\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4G0aF88p5ns0NALloZ6urM%2BNuFA6H00hmOhWI8%2FS2tbVahqxUQl7iPDVb7OpUftupaMOd3wN21Hewv6svzKzv0a2pRyNdwZltqVJVc6wxobdNNxQZNUw8WrepyjIdb0LCZGb4fYqDpzDRQ4RXGoTtiYTEAOl%2Bz8iujH0PC3F4vLEunRMIYsCz4ptrHzE7hc%2BVMOyKMycHRthZONXZHWOV9mPu8Y%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a407ac734da2b509-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1096\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1096,"size_decoded":1972,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"d1dbbb93d3b934f5af157234adfb688a","sha1":"a0d0976bcd5b4ad1bab1b86b381148e51c1b8457","sha256":"7f497eafd0585f420a2023adefc4e497c9588a598c4fced1c6eb1b9bcbaeb123","sha512":"84a24cf0782fb6fd625e3a6f82c8b2edc677761d23ce4721086f24396dac0fbc39ab65aecae899afbf9f18b0a83552d2defe4552520c9f12a4b5bcdf7ca6f1bc","ssdeep":"","tlshash":"3511e588b2cad020ca96ddd583bab180c214f0dc32ce8c3a15d1e24e0dd60b04b1290e","first_seen":"2024-07-08T23:13:47Z","last_seen":"2026-09-25T06:10:52.67508Z","times_seen":287,"resource_available":false,"data":null}},"time_used":372,"timings":{"blocked":-1,"dns":5,"connect":30,"send":0,"wait":337,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"b6ktecz7yjy6fzgzlivivwfm4xtjvavuqbddceaslq46lxbuw2wq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"b6ktecz7yjy6fzgzlivivwfm4xtjvavuqbddceaslq46lxbuw2wq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"b6ktecz7yjy6fzgzlivivwfm4xtjvavuqbddceaslq46lxbuw2wq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"enr4cxf3dl3xz57mcmmg6wlxvi7gda2w5xdradzypkaigsdonhma.mainnet-1.datasprite-cdn.com/3P9VdFHyd9sSnhWw6vt5skH79MDNbmAPLeKZ3WU6GZjD/","fqdn":"enr4cxf3dl3xz57mcmmg6wlxvi7gda2w5xdradzypkaigsdonhma.mainnet-1.datasprite-cdn.com","domain":"datasprite-cdn.com","tld":"com"},"ip":{"addr":"104.21.15.158","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://firelight.run/","date":"2026-09-25T05:36:51.748Z","timestamp":1790314611748,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"datasprite-cdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 01 Sep 2026 16:12:35 GMT","end":"Mon, 30 Nov 2026 17:12:28 GMT"},"fingerprint":{"sha1":"A7:49:1F:BA:09:CF:9C:E9:55:85:E1:3E:6A:46:2B:56:1A:DD:E7:32","sha256":"57:8A:D0:59:59:01:19:C2:80:F0:3E:E8:83:04:E6:8C:0B:A5:94:44:42:21:A0:F5:48:2D:7F:8D:19:15:08:52"}}},"request":{"raw":"GET /3P9VdFHyd9sSnhWw6vt5skH79MDNbmAPLeKZ3WU6GZjD/ HTTP/1.1\r\nHost: enr4cxf3dl3xz57mcmmg6wlxvi7gda2w5xdradzypkaigsdonhma.mainnet-1.datasprite-cdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://firelight.run/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 25 Sep 2026 05:36:52 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\npriority: u=5,i\r\nvary: Origin\r\nx-irys-item-id: 3P9VdFHyd9sSnhWw6vt5skH79MDNbmAPLeKZ3WU6GZjD\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-content-type: image/webp\r\nx-content-length: 1164\r\ncache-control: max-age=2592000\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2jVG7tnhRAGzF1E3Py6ET4wBaUFgmxF8wnDPq1e3z8KIilPnPXQj1ExqYtIIjfUPc1AhCQriy182WZDWAv5BI5FdZcDdZxU0XOQDaknsrMdBm4DChSa1jHsieh4x1skQSozF5kQg5%2FU54MOC5R9oiQOPRvfEdx5cmOqjAgvcGO%2F63l0Ubay6d%2BUKmvmWdjXy9yFEpggSM84TAUjzqVexnFjiJjE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a407ac747dbfb509-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1164\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1164,"size_decoded":2038,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 120x120, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"2b37f561678007760f1900ae79ea02e8","sha1":"9dcc6586c899eaa80a4ac2c2a1994b6749886b40","sha256":"10d87c9ee524e288a101badbd24e59cbb729a6a848e816570c0f3c4f96c04e30","sha512":"8e642ac9f4abc69b5e2c4d0ad2e1571800042d9f03c4a1b0888b346b6fc6e66fe74e743799e70a42c594c0dac5c984e8aea0078394e0c9c4954f97447b2966b6","ssdeep":"","tlshash":"32210dadc1608eb152009e7bca2c35d40640a33a82b7033e95f00fc79c3f5301e80496","first_seen":"2025-06-20T23:38:08.726013Z","last_seen":"2026-09-25T06:10:52.673534Z","times_seen":220,"resource_available":false,"data":null}},"time_used":273,"timings":{"blocked":84,"dns":9,"connect":0,"send":0,"wait":180,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"enr4cxf3dl3xz57mcmmg6wlxvi7gda2w5xdradzypkaigsdonhma.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"enr4cxf3dl3xz57mcmmg6wlxvi7gda2w5xdradzypkaigsdonhma.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"enr4cxf3dl3xz57mcmmg6wlxvi7gda2w5xdradzypkaigsdonhma.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vote.88mph.app/home.html","fqdn":"vote.88mph.app","domain":"88mph.app","tld":"app"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://firelight.run/","date":"2026-09-25T05:36:55.526Z","timestamp":1790314615526,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vote.88mph.app","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 24 Sep 2026 19:03:28 GMT","end":"Wed, 23 Dec 2026 19:03:27 GMT"},"fingerprint":{"sha1":"D4:FD:D9:29:2F:72:43:12:FD:D6:7C:0C:B0:5E:3D:43:DD:22:DF:A1","sha256":"F1:01:33:39:ED:39:48:AD:00:10:0B:36:60:6A:32:34:2A:D3:46:5D:2D:D7:FD:89:49:2B:93:F6:23:74:2E:78"}}},"request":{"raw":"GET /home.html HTTP/1.1\r\nHost: vote.88mph.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://firelight.run/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 25 Sep 2026 05:36:55 GMT\r\ncontent-type: text/html\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 6620487\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=2592000\r\ncontent-encoding: zstd\r\netag: \"6aaf7b5e-168\"\r\nlast-modified: Sun, 20 Sep 2026 06:21:18 GMT\r\ncdn-storageserver: DE-1138\r\ncdn-fileserver: 1151\r\ncdn-proxyver: 1.70\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 09/25/2026 05:36:55\r\ncdn-edgestorageid: 830\r\ncdn-requestid: dbdafb661f46dc02dfccfeccb0c6e7af\r\ncdn-cache: MISS\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":360,"size_decoded":905,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"19cd5208a408263513ec78df42504f5b","sha1":"f2cfc32fda68fa0151db58b2461a33ac29567cc4","sha256":"32a5b00ecb6cd9770fdfcd9254830d0b387590b69e010f4d7746fd9ee9ca312d","sha512":"af782aa213e8c76b850f2e57c37a5c8877009ffcbb2f9d1296dc5b9fc836eb06ff93238dec37411ab3a3f090494c6343441379507dbb6384e4a65b1ab621dbc8","ssdeep":"","tlshash":"9fe0c0c3699254095036c7a01df1f14c511786a8a3d64d507fff70658b8e79688e35dc","first_seen":"2026-09-22T20:45:22.59998Z","last_seen":"2026-09-25T06:10:52.702821Z","times_seen":10,"resource_available":true,"data":null}},"time_used":191,"timings":{"blocked":0,"dns":110,"connect":15,"send":0,"wait":58,"receive":-1,"ssl":7},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"firelight.run/FSKOVX1BWF3xbQivs286Q8YiLsc.mp4","fqdn":"firelight.run","domain":"firelight.run","tld":"run"},"ip":{"addr":"104.21.13.148","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://firelight.run/","date":"2026-09-25T05:36:49.890Z","timestamp":1790314609890,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"firelight.run","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 24 Sep 2026 11:54:24 GMT","end":"Wed, 23 Dec 2026 11:54:23 GMT"},"fingerprint":{"sha1":"02:54:09:B5:1A:C4:80:FE:25:D5:90:D5:C2:96:72:47:EA:08:E4:AE","sha256":"3B:A7:9F:77:5F:07:1D:DF:C1:4E:DC:82:26:78:98:F9:C7:9C:E6:6F:08:FA:7C:0D:00:C0:A7:B5:72:83:E1:45"}}},"request":{"raw":"GET /FSKOVX1BWF3xbQivs286Q8YiLsc.mp4 HTTP/1.1\r\nHost: firelight.run\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nRange: bytes=0-\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://firelight.run/\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 206 \r\nserver: cloudflare\r\ndate: Fri, 25 Sep 2026 05:36:49 GMT\r\ncontent-type: video/mp4\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 21 Apr 2026 11:39:44 GMT\r\npriority: u=4,i=?0\r\netag: \"69e76200-3d92fc\"\r\nage: 3\r\ncontent-range: bytes 0-4035323/4035324\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IYpGIkgs9ZMapNefC96xJUfQfxkaq8KWWseUaunZmlMoibp7iTL%2FS03Jo%2B9es9fEvZepjIA4ItJYcJc%2BO1bCuFDXpCtRHRp2A3K9Lf5UnMNOajeF55IZMRBZlpRxQSLY\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a407ac67de5e2efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 4035324\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4035324,"size_decoded":4036039,"mime_type":"video/mp4","magic":"ISO Media, MP4 Base Media v1 [ISO 14496-12:2003]","md5":"9de9ba113eb8f1ca99386823b91d5dd7","sha1":"36681774b53174489a888cf919e20e4ba09a136e","sha256":"65d083efb97e50d7d49f53ed25396483eafa93decf7f60bea8e7304342b15061","sha512":"0eff98e971b0cc000f44525fdad5e1b566cd91ac2a613f122c17799da5adbfec0c0218fdd89014fd52ac27c0b458e6e0dfc0ec77b7883e9ca33f0d706745d5e6","ssdeep":"24576:4OmWxkfP3WD7Bh2RF02rcowzKPk8lKoCwU/VK953u:XNGfP3WvB0Cscn8hC5/l","tlshash":"fd2533de3bcfa6dae812317b8ad20700321fdd947558279153e05cbffc16aa4ed90694","first_seen":"2026-04-24T15:23:09.405122Z","last_seen":"2026-09-25T05:38:01.304605Z","times_seen":20,"resource_available":false,"data":null}},"time_used":497,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":491,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"firelight.run","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"firelight.run","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-25","alert":"Phishing Block","trigger":"firelight.run","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"firelight.run/Xl0qRJRthxbLyXf5wUwVv5npiIQ.png","fqdn":"firelight.run","domain":"firelight.run","tld":"run"},"ip":{"addr":"104.21.13.148","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://firelight.run/","date":"2026-09-25T05:36:50.740Z","timestamp":1790314610740,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"firelight.run","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 24 Sep 2026 11:54:24 GMT","end":"Wed, 23 Dec 2026 11:54:23 GMT"},"fingerprint":{"sha1":"02:54:09:B5:1A:C4:80:FE:25:D5:90:D5:C2:96:72:47:EA:08:E4:AE","sha256":"3B:A7:9F:77:5F:07:1D:DF:C1:4E:DC:82:26:78:98:F9:C7:9C:E6:6F:08:FA:7C:0D:00:C0:A7:B5:72:83:E1:45"}}},"request":{"raw":"GET /Xl0qRJRthxbLyXf5wUwVv5npiIQ.png HTTP/1.1\r\nHost: firelight.run\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://firelight.run/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 25 Sep 2026 05:36:50 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 21 Apr 2026 11:39:44 GMT\r\npriority: u=6,i=?0\r\netag: \"69e76200-9bb\"\r\naccept-ranges: bytes\r\nage: 3\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dF5ifmz83mvufka50EQDhc%2B%2F39pGnXmce0416RH3RKUiEXgRCOr8vnKx0rMLCudq5h6h7fwPjETCMfJErLdpZFvVVKdyu6S35iCNQoOd0j3Bj%2BHMTKUjoEDPPbQUXuOS\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a407ac6d2fc32efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 2491\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2491,"size_decoded":3182,"mime_type":"image/png","magic":"PNG image data, 241 x 240, 8-bit colormap, non-interlaced","md5":"774908dd96042307639e40a6950e03a0","sha1":"7ae1fd5c09a816c4621ede27e29f7e71fd6aa6f5","sha256":"0594fb55762cd41c9e6bc4f0ba31f2ba8fd4c8288a22a92da169c6e9bd748b8a","sha512":"fc8a1a0953c216952a585988bb4fc598e514ba032c9cd6e6df764bbd0945992eb96999fc4452c3907462863626f231fea2b802fadfe1190a53f880bffeabfaf8","ssdeep":"","tlshash":"53515df6ecbd282c4014d6ad141f00f3ec37cb86cc4d1d185a830ad496a7aa0fc943e0","first_seen":"2026-04-24T15:23:09.414396Z","last_seen":"2026-09-25T05:38:01.311253Z","times_seen":210,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-25","alert":"Phishing Block","trigger":"firelight.run","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"firelight.run","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"firelight.run","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gateway.irys.xyz/3eh8oadBGXTp7k1PY4iYeiBbyhE1u2zmMMaMm9nBanHq","fqdn":"gateway.irys.xyz","domain":"irys.xyz","tld":"xyz"},"ip":{"addr":"172.66.167.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://firelight.run/","date":"2026-09-25T05:36:51.241Z","timestamp":1790314611241,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gateway.irys.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 20 Sep 2026 11:49:06 GMT","end":"Sat, 19 Dec 2026 11:49:05 GMT"},"fingerprint":{"sha1":"1B:75:8F:42:C3:0D:D3:04:72:4A:4F:BC:B0:44:35:11:BD:B0:C1:3A","sha256":"5D:7C:E7:8F:C7:B7:35:6E:0D:92:E6:E6:6C:71:F4:0D:D9:DE:7D:74:E5:56:33:7F:8D:2C:15:B1:80:E9:5D:E0"}}},"request":{"raw":"GET /3eh8oadBGXTp7k1PY4iYeiBbyhE1u2zmMMaMm9nBanHq HTTP/1.1\r\nHost: gateway.irys.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://firelight.run/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 \r\ndate: Fri, 25 Sep 2026 05:36:51 GMT\r\ncontent-length: 0\r\nlocation: https://e5pt46sfryibvjq4hrrz5src2xmfrc7jvtiolpsp3jzjl4eyeaga.mainnet-1.datasprite-cdn.com/3eh8oadBGXTp7k1PY4iYeiBbyhE1u2zmMMaMm9nBanHq/\r\nserver: cloudflare\r\naccess-control-expose-headers: location, cache-control\r\naccess-control-allow-credentials: true\r\ncache-control: no-store\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nx-cache-status: BYPASS\r\ncf-cache-status: BYPASS\r\ncf-ray: a407ac70fd905687-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/png","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-25T12:27:37.283953Z","times_seen":18651356,"resource_available":true,"data":null}},"time_used":287,"timings":{"blocked":66,"dns":0,"connect":4,"send":0,"wait":180,"receive":0,"ssl":36},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sabtndk46ts7f2qr7ndhhfdkgivlnbtawgrzpqlfgsuv3vrcx3ra.mainnet-1.datasprite-cdn.com/AhAYuinacUyu1gTLdVFFMVBnVCPnn5hadJ6sQ9oUW2wB/","fqdn":"sabtndk46ts7f2qr7ndhhfdkgivlnbtawgrzpqlfgsuv3vrcx3ra.mainnet-1.datasprite-cdn.com","domain":"datasprite-cdn.com","tld":"com"},"ip":{"addr":"104.21.15.158","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://firelight.run/","date":"2026-09-25T05:36:51.751Z","timestamp":1790314611751,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"datasprite-cdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 01 Sep 2026 16:12:35 GMT","end":"Mon, 30 Nov 2026 17:12:28 GMT"},"fingerprint":{"sha1":"A7:49:1F:BA:09:CF:9C:E9:55:85:E1:3E:6A:46:2B:56:1A:DD:E7:32","sha256":"57:8A:D0:59:59:01:19:C2:80:F0:3E:E8:83:04:E6:8C:0B:A5:94:44:42:21:A0:F5:48:2D:7F:8D:19:15:08:52"}}},"request":{"raw":"GET /AhAYuinacUyu1gTLdVFFMVBnVCPnn5hadJ6sQ9oUW2wB/ HTTP/1.1\r\nHost: sabtndk46ts7f2qr7ndhhfdkgivlnbtawgrzpqlfgsuv3vrcx3ra.mainnet-1.datasprite-cdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://firelight.run/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 25 Sep 2026 05:36:52 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1984\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin\r\nx-irys-item-id: AhAYuinacUyu1gTLdVFFMVBnVCPnn5hadJ6sQ9oUW2wB\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-content-type: image/webp\r\nx-content-length: 1984\r\ncache-control: max-age=2592000\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vr9XcsiWm4CBB22PtgfC85K68IkCaCLfMTUIsN8%2BGrxTlERtszwAHsWv9qwik4tHCbnIutDI8omtCDsrbE6A35%2Fd9G1cIllSSVB0hEvBQzDQKfzjZH%2BXTTwLVtbLdLr6JttUrB1%2FWLOVz9SsqOYwxLjO4BtmnfhsdvirKBVfejqGJsp1dgsQiQAYcmTPjR0bpIu7whgD918lsae%2BaaR9gphZeWE%3D\"}]}\r\ncf-ray: a407ac74f8bfb4f1-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1984,"size_decoded":2840,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"21ea491573af9794b3534936fd4f670f","sha1":"11b83fd6b1345bdea5ff04e5e682f9d77dcc514d","sha256":"92401c017701759fbc8e6c250ed653c50b0fffe78b1d628172650d4367e5636d","sha512":"38c070fc984bf3691a0493a762b2c6677a5d59af6dc48be1c318424ae6c041258277529e64a50106c1df0ff1439e2236238c64a9ffbc4708b12b8cc16df30b55","ssdeep":"","tlshash":"29410a1e0ec8958adb25a519873bcc5a5997283cd4fa41c578ce94a5131d181ab3cdf4","first_seen":"2026-06-10T18:04:23.90852Z","last_seen":"2026-09-25T06:10:52.666738Z","times_seen":46,"resource_available":false,"data":null}},"time_used":484,"timings":{"blocked":156,"dns":13,"connect":6,"send":0,"wait":180,"receive":0,"ssl":89},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"sabtndk46ts7f2qr7ndhhfdkgivlnbtawgrzpqlfgsuv3vrcx3ra.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"sabtndk46ts7f2qr7ndhhfdkgivlnbtawgrzpqlfgsuv3vrcx3ra.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"sabtndk46ts7f2qr7ndhhfdkgivlnbtawgrzpqlfgsuv3vrcx3ra.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gateway.irys.xyz/4D9JvTbpqf8it29ZeG4AkLd9PUPhpwWH7MzH8bjqcE8a","fqdn":"gateway.irys.xyz","domain":"irys.xyz","tld":"xyz"},"ip":{"addr":"172.66.167.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://firelight.run/","date":"2026-09-25T05:36:51.308Z","timestamp":1790314611308,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gateway.irys.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 20 Sep 2026 11:49:06 GMT","end":"Sat, 19 Dec 2026 11:49:05 GMT"},"fingerprint":{"sha1":"1B:75:8F:42:C3:0D:D3:04:72:4A:4F:BC:B0:44:35:11:BD:B0:C1:3A","sha256":"5D:7C:E7:8F:C7:B7:35:6E:0D:92:E6:E6:6C:71:F4:0D:D9:DE:7D:74:E5:56:33:7F:8D:2C:15:B1:80:E9:5D:E0"}}},"request":{"raw":"GET /4D9JvTbpqf8it29ZeG4AkLd9PUPhpwWH7MzH8bjqcE8a HTTP/1.1\r\nHost: gateway.irys.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://firelight.run/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 \r\ndate: Fri, 25 Sep 2026 05:36:51 GMT\r\ncontent-length: 0\r\nlocation: https://f6xwz3lwcfil7qwaikhvuopkgolm7x4zdfqegfkqcoceimvb65bq.mainnet-1.datasprite-cdn.com/4D9JvTbpqf8it29ZeG4AkLd9PUPhpwWH7MzH8bjqcE8a/\r\nserver: cloudflare\r\naccess-control-allow-credentials: true\r\ncache-control: no-store\r\naccess-control-expose-headers: location, cache-control\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nx-cache-status: BYPASS\r\ncf-cache-status: BYPASS\r\ncf-ray: a407ac710da85687-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/webp","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-25T12:27:37.283953Z","times_seen":18651356,"resource_available":true,"data":null}},"time_used":172,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":172,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"g2akedaejpemffcb3k3tbk3zmsdzsgpvw3zsqilmev3jh4ywcf4q.mainnet-1.datasprite-cdn.com/4fknCk58W1hxsN2yyfLGwPmgrvjRZwGoMCtrY6DtfWPA/","fqdn":"g2akedaejpemffcb3k3tbk3zmsdzsgpvw3zsqilmev3jh4ywcf4q.mainnet-1.datasprite-cdn.com","domain":"datasprite-cdn.com","tld":"com"},"ip":{"addr":"172.67.163.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://firelight.run/","date":"2026-09-25T05:36:51.830Z","timestamp":1790314611830,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"datasprite-cdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 01 Sep 2026 16:12:35 GMT","end":"Mon, 30 Nov 2026 17:12:28 GMT"},"fingerprint":{"sha1":"A7:49:1F:BA:09:CF:9C:E9:55:85:E1:3E:6A:46:2B:56:1A:DD:E7:32","sha256":"57:8A:D0:59:59:01:19:C2:80:F0:3E:E8:83:04:E6:8C:0B:A5:94:44:42:21:A0:F5:48:2D:7F:8D:19:15:08:52"}}},"request":{"raw":"GET /4fknCk58W1hxsN2yyfLGwPmgrvjRZwGoMCtrY6DtfWPA/ HTTP/1.1\r\nHost: g2akedaejpemffcb3k3tbk3zmsdzsgpvw3zsqilmev3jh4ywcf4q.mainnet-1.datasprite-cdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://firelight.run/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 25 Sep 2026 05:36:52 GMT\r\ncontent-type: image/webp\r\ncontent-length: 3088\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin\r\nx-irys-item-id: 4fknCk58W1hxsN2yyfLGwPmgrvjRZwGoMCtrY6DtfWPA\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-content-type: image/webp\r\nx-content-length: 3088\r\ncache-control: max-age=2592000\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=k1TtxJM6QQgUK6dpKg%2Bya4573C5cFKaMWyQo1a%2FJy4ieHMDat6EtA4w2Zb9pzHol7HufiQOGaMo1Afwv5v7n%2FtaW8%2FKa83c6zo71Gy4mEeiVgT450GsYcWDkDyuK6Wdcf4FbOIcyaCYGMvTW07pyXjaxvbHqy3DvMbpTIYIbb%2B7mtcZQGmQqzixXcK0%2BmfGqA2qqfKSaaNR5QQ%2BlKSGrr2S1e24%3D\"}]}\r\ncf-ray: a407ac759ec4120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3088,"size_decoded":3948,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"945d9baeb17b3b825fac41d17a7c6708","sha1":"d4c7c37a26dbcfb19dab27be959c1557d98c7017","sha256":"5b023ca70029d1de860edbd397ecee29a6a4967ffda6d31ff6f60055ecf4061d","sha512":"23c5193bb3bacee8c6558cfcfcbbb784216f48777bf4e084246f907a4000bbd7836a7c4b6fa266349b3fe93d6af257a16a2f715534b8377b38ccd0e6dde762ce","ssdeep":"","tlshash":"2b514c24286d7d3b8186b91315d85d3f85fb83d2fa4ef34836f69290d040d29c6e0306","first_seen":"2026-06-11T07:30:29.715818Z","last_seen":"2026-09-25T06:10:52.706894Z","times_seen":43,"resource_available":false,"data":null}},"time_used":539,"timings":{"blocked":232,"dns":0,"connect":0,"send":0,"wait":307,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"g2akedaejpemffcb3k3tbk3zmsdzsgpvw3zsqilmev3jh4ywcf4q.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"g2akedaejpemffcb3k3tbk3zmsdzsgpvw3zsqilmev3jh4ywcf4q.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"g2akedaejpemffcb3k3tbk3zmsdzsgpvw3zsqilmev3jh4ywcf4q.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"arbitrum-one.publicnode.com/","fqdn":"arbitrum-one.publicnode.com","domain":"publicnode.com","tld":"com"},"ip":{"addr":"172.66.150.162","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://firelight.run/","date":"2026-09-25T05:36:50.398Z","timestamp":1790314610398,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"publicnode.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 07 Aug 2026 02:01:04 GMT","end":"Thu, 05 Nov 2026 03:00:51 GMT"},"fingerprint":{"sha1":"94:5F:9F:32:64:19:A5:50:59:22:7E:16:22:E5:6B:9B:1C:65:F3:ED","sha256":"7D:67:31:E8:80:74:FB:3E:3C:A4:1B:9F:F0:BE:71:56:CE:95:31:97:BD:28:75:B6:47:AA:02:45:08:74:76:65"}}},"request":{"raw":"POST / HTTP/1.1\r\nHost: arbitrum-one.publicnode.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://firelight.run/\r\nContent-Type: application/json\r\nContent-Length: 136\r\nOrigin: https://firelight.run\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":136,"data":"{\"jsonrpc\":\"2.0\",\"method\":\"eth_call\",\"params\":[{\"to\":\"0x967530969F5e5c94E0dC7247e9355e62e0ED65B2\",\"data\":\"0x3bc5de30\"},\"latest\"],\"id\":1}"}},"response":{"raw":"HTTP/3 200 \r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 1728000\r\ncontent-type: application/json\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, accept-encoding\r\ndate: Fri, 25 Sep 2026 05:36:50 GMT\r\nx-content-type-options: nosniff\r\nx-envoy-upstream-service-time: 4\r\nserver: cloudflare\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\ncontent-encoding: br\r\ncf-ray: a407ac6bae26c272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":423,"size_decoded":712,"mime_type":"application/json","magic":"JSON text data","md5":"4ace8e5249d7ec0c7ee3dd3be637a6a3","sha1":"23f3281e1e454e2d79e67ef163810934874f1a7c","sha256":"71fb00a02e383bac36ddaa90a334053e7a11470a7234ab4c9a8a5694403e74be","sha512":"9228613e0464d17dd85e35930c5cb045b5fac1b48340cb5e1bf42ca5124b73cbab87be8964563c75f647de70d7ee67ca88d2b50a49ddb34dac601eb38cc15968","ssdeep":"","tlshash":"11e02bd0f9889c21e1c49f19b30079887a287b558dc40b83085c450a2aa9b19bf0ca85","first_seen":"2026-09-25T05:38:00.10265Z","last_seen":"2026-09-25T06:10:52.657073Z","times_seen":9,"resource_available":true,"data":null}},"time_used":47,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":47,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/@cap.js/wasm@0.0.7/browser/cap_wasm_bg.wasm","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.65.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://firelight.run/","date":"2026-09-25T05:36:50.989Z","timestamp":1790314610989,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2026 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 20 May 2026 15:48:47 GMT","end":"Sat, 05 Dec 2026 14:48:47 GMT"},"fingerprint":{"sha1":"D4:05:C2:EC:C7:EE:2B:D0:08:68:0D:3D:33:77:48:78:43:E7:D1:E1","sha256":"ED:84:90:EE:71:BC:6B:5E:B3:D2:50:B0:23:3A:06:0D:E0:50:C6:B6:A9:09:36:E6:CE:FE:E8:66:89:EB:4E:C5"}}},"request":{"raw":"GET /npm/@cap.js/wasm@0.0.7/browser/cap_wasm_bg.wasm HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://firelight.run/\r\nOrigin: https://firelight.run\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: application/wasm\r\nx-jsd-version: 0.0.7\r\nx-jsd-version-type: version\r\netag: W/\"5850-Zla5mhcuOico9+qcpv5wsYqeHHI\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\ndate: Fri, 25 Sep 2026 05:36:51 GMT\r\nage: 1773076\r\nx-served-by: cache-fra-eddf8230077-FRA, cache-hel1410022-HEL\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 8259\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"WebAssembly","description":"WebAssembly (abbreviated Wasm) is a binary instruction format for a stack-based virtual machine. Wasm is designed as a portable compilation target for programming languages, enabling deployment on the web for client and server applications.","website":"https://webassembly.org/","common_platform_enumeration":"","icon":"WebAssembly.svg","categories":["Programming languages"]}],"data":{"size":22608,"size_decoded":9026,"mime_type":"application/wasm","magic":"WebAssembly (wasm) binary module version 0x1 (MVP)","md5":"7116ffe340a553a454fef87341c44bed","sha1":"6656b99a172e3a2728f7ea9ca6fe70b18a9e1c72","sha256":"e4f3c00246a775193661f9277ca1288cd310a6514de166ecc2176ccd26fb06a9","sha512":"d9f2e698bf8beefb99d476bd78b26002d7e617ba6e8234c7c93e81ddb74594cf713fc276dc55fe8f5a837c8992fb51a6a52cc183998415cef1b626f4040f2b6c","ssdeep":"384:q1lFv+dy0yrXzRJnzAQTI+q9HU692o3SeHom/EtUHTOih2YeRbpKgYRSE94+D7+:K7zAZ9ao3XHom/L4RbgjSqDq","tlshash":"aaa2859231a428e1f13af73ae00ef1b937139558fb89ba2ac71f25e72c7b50465d6d10","first_seen":"2026-05-10T23:32:59.054461Z","last_seen":"2026-09-25T06:10:52.685804Z","times_seen":400,"resource_available":false,"data":null}},"time_used":57,"timings":{"blocked":0,"dns":2,"connect":15,"send":0,"wait":15,"receive":1,"ssl":24},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"esm.sh/disable-devtool","fqdn":"esm.sh","domain":"esm.sh","tld":"sh"},"ip":{"addr":"104.26.15.209","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://firelight.run/","date":"2026-09-25T05:36:51.156Z","timestamp":1790314611156,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"esm.sh","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 19 Aug 2026 09:36:52 GMT","end":"Tue, 17 Nov 2026 10:36:50 GMT"},"fingerprint":{"sha1":"69:BD:AC:29:6F:45:CF:4F:70:65:A1:85:91:55:B0:4D:40:D3:F0:53","sha256":"C4:3A:EB:EC:A0:85:B2:25:A4:84:5A:D6:4E:E5:6D:0E:89:C0:0F:03:6B:0C:87:1E:55:50:E6:C3:CA:80:75:CB"}}},"request":{"raw":"GET /disable-devtool HTTP/1.1\r\nHost: esm.sh\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://firelight.run\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://pinky-goat.digital/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: X-ESM-Path, X-TypeScript-Types\r\ncache-control: public, max-age=600\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: cloudflare\r\nvary: User-Agent\r\nx-esm-path: /disable-devtool@0.3.9/es2022/disable-devtool.mjs\r\nx-typescript-types: https://esm.sh/disable-devtool@0.3.9/index.d.ts\r\ndate: Fri, 25 Sep 2026 05:36:51 GMT\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nage: 223\r\nlast-modified: Fri, 25 Sep 2026 05:36:50 GMT\r\ncf-ray: a407ac6fcf58c272-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":181,"size_decoded":664,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text","md5":"97c69ddec5a41bfd71d4e46f03aa3a66","sha1":"6632a0a55d48d322450a0a0147526f0e91b4cc0b","sha256":"bbd0cbecbc43488ec920e0660e7a0b903af3d9fcd3114421a7620f55ffa98792","sha512":"80e5b974e51b127e2b9c0f227c6cc0b302351806ae1947f0691cb18a67d3743f4390cfe8d0d45f57ab6f5ba899eae8775fdd776edcdb2c0c733997bb38abd90b","ssdeep":"","tlshash":"66c08c10c033f0382a308cb832b4eaefe3a302c6d20c52b88e04022c93cf100d22cba4","first_seen":"2026-05-26T18:42:46.141539Z","last_seen":"2026-09-25T06:10:52.663801Z","times_seen":151,"resource_available":true,"data":null}},"time_used":21,"timings":{"blocked":0,"dns":2,"connect":11,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gateway.irys.xyz/AhAYuinacUyu1gTLdVFFMVBnVCPnn5hadJ6sQ9oUW2wB","fqdn":"gateway.irys.xyz","domain":"irys.xyz","tld":"xyz"},"ip":{"addr":"172.66.167.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://firelight.run/","date":"2026-09-25T05:36:51.286Z","timestamp":1790314611286,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gateway.irys.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 20 Sep 2026 11:49:06 GMT","end":"Sat, 19 Dec 2026 11:49:05 GMT"},"fingerprint":{"sha1":"1B:75:8F:42:C3:0D:D3:04:72:4A:4F:BC:B0:44:35:11:BD:B0:C1:3A","sha256":"5D:7C:E7:8F:C7:B7:35:6E:0D:92:E6:E6:6C:71:F4:0D:D9:DE:7D:74:E5:56:33:7F:8D:2C:15:B1:80:E9:5D:E0"}}},"request":{"raw":"GET /AhAYuinacUyu1gTLdVFFMVBnVCPnn5hadJ6sQ9oUW2wB HTTP/1.1\r\nHost: gateway.irys.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://firelight.run/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 \r\ndate: Fri, 25 Sep 2026 05:36:51 GMT\r\ncontent-length: 0\r\nlocation: https://sabtndk46ts7f2qr7ndhhfdkgivlnbtawgrzpqlfgsuv3vrcx3ra.mainnet-1.datasprite-cdn.com/AhAYuinacUyu1gTLdVFFMVBnVCPnn5hadJ6sQ9oUW2wB/\r\nserver: cloudflare\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-credentials: true\r\ncache-control: no-store\r\naccess-control-expose-headers: location, cache-control\r\nx-cache-status: BYPASS\r\ncf-cache-status: BYPASS\r\ncf-ray: a407ac70fd9a5687-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/webp","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-25T12:27:37.283953Z","times_seen":18651356,"resource_available":true,"data":null}},"time_used":188,"timings":{"blocked":17,"dns":0,"connect":0,"send":0,"wait":171,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gateway.irys.xyz/9rVKcKYLPvNfTyUKrT2QXE8XwqyHgTdHF5TY6zV8pNSR","fqdn":"gateway.irys.xyz","domain":"irys.xyz","tld":"xyz"},"ip":{"addr":"172.66.167.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://firelight.run/","date":"2026-09-25T05:36:51.358Z","timestamp":1790314611358,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gateway.irys.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 20 Sep 2026 11:49:06 GMT","end":"Sat, 19 Dec 2026 11:49:05 GMT"},"fingerprint":{"sha1":"1B:75:8F:42:C3:0D:D3:04:72:4A:4F:BC:B0:44:35:11:BD:B0:C1:3A","sha256":"5D:7C:E7:8F:C7:B7:35:6E:0D:92:E6:E6:6C:71:F4:0D:D9:DE:7D:74:E5:56:33:7F:8D:2C:15:B1:80:E9:5D:E0"}}},"request":{"raw":"GET /9rVKcKYLPvNfTyUKrT2QXE8XwqyHgTdHF5TY6zV8pNSR HTTP/1.1\r\nHost: gateway.irys.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://firelight.run/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 \r\ndate: Fri, 25 Sep 2026 05:36:51 GMT\r\ncontent-length: 0\r\nlocation: https://qofpup6nmdjajko4dxgkt5mq2htvoe4uqxfbycxyrybfw7p5to7a.mainnet-1.datasprite-cdn.com/9rVKcKYLPvNfTyUKrT2QXE8XwqyHgTdHF5TY6zV8pNSR/\r\nserver: cloudflare\r\naccess-control-allow-credentials: true\r\ncache-control: no-store\r\naccess-control-expose-headers: cache-control, location\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nx-cache-status: BYPASS\r\ncf-cache-status: BYPASS\r\ncf-ray: a407ac711dda5687-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/webp","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-25T12:27:37.283953Z","times_seen":18651356,"resource_available":true,"data":null}},"time_used":161,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":161,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"public-bsc.nownodes.io/","fqdn":"public-bsc.nownodes.io","domain":"nownodes.io","tld":"io"},"ip":{"addr":"104.20.35.2","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://firelight.run/","date":"2026-09-25T05:36:51.635Z","timestamp":1790314611635,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nownodes.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 05 Sep 2026 07:43:33 GMT","end":"Fri, 04 Dec 2026 08:43:22 GMT"},"fingerprint":{"sha1":"71:29:AE:AD:E1:8E:3D:33:85:27:FC:0B:61:59:DF:56:DD:53:53:4C","sha256":"57:6C:66:02:2E:5E:D3:E3:78:20:F0:AB:75:A0:F1:8B:0B:E9:4F:BB:AD:BC:F0:67:25:93:6E:FC:E3:05:EC:88"}}},"request":{"raw":"POST / HTTP/1.1\r\nHost: public-bsc.nownodes.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://firelight.run/\r\nContent-Type: application/json\r\nContent-Length: 136\r\nOrigin: https://firelight.run\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":136,"data":"{\"jsonrpc\":\"2.0\",\"method\":\"eth_call\",\"params\":[{\"to\":\"0x6981E9EA7023a8407E4B08ad97f186A5CBDaFCf5\",\"data\":\"0x3bc5de30\"},\"latest\"],\"id\":1}"}},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 25 Sep 2026 05:36:51 GMT\r\ncontent-type: application/json\r\ncontent-length: 195\r\nserver: cloudflare\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nvary: Origin, accept-encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncf-cache-status: DYNAMIC\r\ncf-ray: a407ac73b8c556a9-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":807,"size_decoded":547,"mime_type":"application/json","magic":"JSON text data","md5":"c98f1747016b12280ffd84c27a2afab3","sha1":"3ee585c411a12b22edc33d9ffd7d4b33728ef5ef","sha256":"d8ec030792568e53b3742bf19e2a417c131a5b2eb689f1f272878c9778bb3aad","sha512":"5a5a5a0a51cf21db623b6543d250f9376b55bf7bd68cca0f7cd8fa6c7b73170fbb07c9f542e62e7fdde179d338984ce884020d4b1f654fd1780a43c36a841187","ssdeep":"","tlshash":"ca011df5415fce91d0fd988c14547a5523173c676cde2f419d4cddc4206c6427379235","first_seen":"2026-04-26T14:03:09.543803Z","last_seen":"2026-09-25T06:10:52.659753Z","times_seen":41,"resource_available":true,"data":null}},"time_used":90,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":90,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bsc.publicnode.com/","fqdn":"bsc.publicnode.com","domain":"publicnode.com","tld":"com"},"ip":{"addr":"172.66.150.162","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://firelight.run/","date":"2026-09-25T05:36:51.644Z","timestamp":1790314611644,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"publicnode.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 07 Aug 2026 02:01:04 GMT","end":"Thu, 05 Nov 2026 03:00:51 GMT"},"fingerprint":{"sha1":"94:5F:9F:32:64:19:A5:50:59:22:7E:16:22:E5:6B:9B:1C:65:F3:ED","sha256":"7D:67:31:E8:80:74:FB:3E:3C:A4:1B:9F:F0:BE:71:56:CE:95:31:97:BD:28:75:B6:47:AA:02:45:08:74:76:65"}}},"request":{"raw":"OPTIONS / HTTP/1.1\r\nHost: bsc.publicnode.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://firelight.run/\r\nOrigin: https://firelight.run\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 204 \r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: content-type\r\naccess-control-allow-methods: GET,HEAD,OPTIONS,POST\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 172800\r\nallow: OPTIONS, POST\r\nvary: Origin,Access-Control-Request-Method,Access-Control-Request-Headers\r\ndate: Fri, 25 Sep 2026 05:36:51 GMT\r\nx-envoy-upstream-service-time: 0\r\nserver: cloudflare\r\ncf-cache-status: DYNAMIC\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\npriority: u=4,i=?0\r\nx-content-type-options: nosniff\r\ncf-ray: a407ac72cfe0c272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":641,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-25T12:27:37.283953Z","times_seen":18651356,"resource_available":true,"data":null}},"time_used":56,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":56,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"f6xwz3lwcfil7qwaikhvuopkgolm7x4zdfqegfkqcoceimvb65bq.mainnet-1.datasprite-cdn.com/4D9JvTbpqf8it29ZeG4AkLd9PUPhpwWH7MzH8bjqcE8a/","fqdn":"f6xwz3lwcfil7qwaikhvuopkgolm7x4zdfqegfkqcoceimvb65bq.mainnet-1.datasprite-cdn.com","domain":"datasprite-cdn.com","tld":"com"},"ip":{"addr":"104.21.15.158","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://firelight.run/","date":"2026-09-25T05:36:51.763Z","timestamp":1790314611763,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"datasprite-cdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 01 Sep 2026 16:12:35 GMT","end":"Mon, 30 Nov 2026 17:12:28 GMT"},"fingerprint":{"sha1":"A7:49:1F:BA:09:CF:9C:E9:55:85:E1:3E:6A:46:2B:56:1A:DD:E7:32","sha256":"57:8A:D0:59:59:01:19:C2:80:F0:3E:E8:83:04:E6:8C:0B:A5:94:44:42:21:A0:F5:48:2D:7F:8D:19:15:08:52"}}},"request":{"raw":"GET /4D9JvTbpqf8it29ZeG4AkLd9PUPhpwWH7MzH8bjqcE8a/ HTTP/1.1\r\nHost: f6xwz3lwcfil7qwaikhvuopkgolm7x4zdfqegfkqcoceimvb65bq.mainnet-1.datasprite-cdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://firelight.run/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 25 Sep 2026 05:36:52 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1000\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin\r\nx-irys-item-id: 4D9JvTbpqf8it29ZeG4AkLd9PUPhpwWH7MzH8bjqcE8a\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-content-type: image/webp\r\nx-content-length: 1000\r\ncache-control: max-age=2592000\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eMnmQS8mklKWValKgavtemZfs%2Fq8Bw%2Bc%2Bggfnje1OMTdBAizfo3NBLusC1QciYoJYviB0a9j5xWjCuMmWSwo0Eroalw5pa5HOFQt2i7qhLRw02qoyRAG5mnbNUpyhf2vIN0N5Ym2j7fHq4IkDBGVf6T5LnfDXfOOVWdOoiEugJRHTtl9q1lVjwzl090J4rQVT8xtqFiVjfAy9a4VI9tdzcGw47A%3D\"}]}\r\ncf-ray: a407ac74aa9e56c3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1000,"size_decoded":1852,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 120x120, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"7aae514c4eada8141a37a9035f55e164","sha1":"d25d7fbc63b22b825098116ebbd65896f6ed6bc5","sha256":"e5710984e7f46092329faf76466920cec1f9fef2975e3f0bae48ed87d06aa9a0","sha512":"e888f76d362655ca1064e7359d96ebb8009c92c3a52534110f9d46c06e59dd44ae71c0c28c69c22d0c6ff23d5625135792f40c7904b690a07c99b392904ebb04","ssdeep":"","tlshash":"4e11c89d4bf55e17d356d474901f5f8304b2f6ad0c51c261cac6649d44740dc3e4691f","first_seen":"2024-06-14T11:01:45Z","last_seen":"2026-09-25T06:10:52.693528Z","times_seen":4104,"resource_available":false,"data":null}},"time_used":510,"timings":{"blocked":106,"dns":4,"connect":5,"send":0,"wait":314,"receive":0,"ssl":61},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"f6xwz3lwcfil7qwaikhvuopkgolm7x4zdfqegfkqcoceimvb65bq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"f6xwz3lwcfil7qwaikhvuopkgolm7x4zdfqegfkqcoceimvb65bq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"f6xwz3lwcfil7qwaikhvuopkgolm7x4zdfqegfkqcoceimvb65bq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gateway.irys.xyz/Fo5WiNNZWKWpLsBjTE9UVq9c5h2Y9DKF9BCyMd9f4p4H","fqdn":"gateway.irys.xyz","domain":"irys.xyz","tld":"xyz"},"ip":{"addr":"172.66.167.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://firelight.run/","date":"2026-09-25T05:36:51.251Z","timestamp":1790314611251,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gateway.irys.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 20 Sep 2026 11:49:06 GMT","end":"Sat, 19 Dec 2026 11:49:05 GMT"},"fingerprint":{"sha1":"1B:75:8F:42:C3:0D:D3:04:72:4A:4F:BC:B0:44:35:11:BD:B0:C1:3A","sha256":"5D:7C:E7:8F:C7:B7:35:6E:0D:92:E6:E6:6C:71:F4:0D:D9:DE:7D:74:E5:56:33:7F:8D:2C:15:B1:80:E9:5D:E0"}}},"request":{"raw":"GET /Fo5WiNNZWKWpLsBjTE9UVq9c5h2Y9DKF9BCyMd9f4p4H HTTP/1.1\r\nHost: gateway.irys.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://firelight.run/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 \r\ndate: Fri, 25 Sep 2026 05:36:51 GMT\r\ncontent-length: 0\r\nlocation: https://3piw7lupog56srrpctt46tuuiroz3dh47v2vjdtocircg3f7u4za.mainnet-1.datasprite-cdn.com/Fo5WiNNZWKWpLsBjTE9UVq9c5h2Y9DKF9BCyMd9f4p4H/\r\nserver: cloudflare\r\naccess-control-expose-headers: cache-control, location\r\naccess-control-allow-credentials: true\r\ncache-control: no-store\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nx-cache-status: BYPASS\r\ncf-cache-status: BYPASS\r\ncf-ray: a407ac711dd15687-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/png","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-25T12:27:37.283953Z","times_seen":18651356,"resource_available":true,"data":null}},"time_used":271,"timings":{"blocked":45,"dns":0,"connect":1,"send":0,"wait":170,"receive":0,"ssl":41},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gateway.irys.xyz/6Txn2Htb2ZZS6c5kQnF6q6P8YraMrEyZwCs1fuJs85ku","fqdn":"gateway.irys.xyz","domain":"irys.xyz","tld":"xyz"},"ip":{"addr":"172.66.167.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://firelight.run/","date":"2026-09-25T05:36:51.268Z","timestamp":1790314611268,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gateway.irys.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 20 Sep 2026 11:49:06 GMT","end":"Sat, 19 Dec 2026 11:49:05 GMT"},"fingerprint":{"sha1":"1B:75:8F:42:C3:0D:D3:04:72:4A:4F:BC:B0:44:35:11:BD:B0:C1:3A","sha256":"5D:7C:E7:8F:C7:B7:35:6E:0D:92:E6:E6:6C:71:F4:0D:D9:DE:7D:74:E5:56:33:7F:8D:2C:15:B1:80:E9:5D:E0"}}},"request":{"raw":"GET /6Txn2Htb2ZZS6c5kQnF6q6P8YraMrEyZwCs1fuJs85ku HTTP/1.1\r\nHost: gateway.irys.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://firelight.run/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 \r\ndate: Fri, 25 Sep 2026 05:36:51 GMT\r\ncontent-length: 0\r\nlocation: https://kezjuikcsaiyqvsd2w32dhijntrtnjkh4vwendcd35dw34hhszna.mainnet-1.datasprite-cdn.com/6Txn2Htb2ZZS6c5kQnF6q6P8YraMrEyZwCs1fuJs85ku/\r\nserver: cloudflare\r\naccess-control-expose-headers: cache-control, location\r\naccess-control-allow-credentials: true\r\ncache-control: no-store\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nx-cache-status: BYPASS\r\ncf-cache-status: BYPASS\r\ncf-ray: a407ac70fd965687-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/webp","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-25T12:27:37.283953Z","times_seen":18651356,"resource_available":true,"data":null}},"time_used":213,"timings":{"blocked":51,"dns":0,"connect":0,"send":0,"wait":162,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gateway.irys.xyz/Eodj8znQBik51BJNXiRTw1t2HXyv9p3LNhiNvsoMuDbg","fqdn":"gateway.irys.xyz","domain":"irys.xyz","tld":"xyz"},"ip":{"addr":"172.66.167.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://firelight.run/","date":"2026-09-25T05:36:51.303Z","timestamp":1790314611303,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gateway.irys.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 20 Sep 2026 11:49:06 GMT","end":"Sat, 19 Dec 2026 11:49:05 GMT"},"fingerprint":{"sha1":"1B:75:8F:42:C3:0D:D3:04:72:4A:4F:BC:B0:44:35:11:BD:B0:C1:3A","sha256":"5D:7C:E7:8F:C7:B7:35:6E:0D:92:E6:E6:6C:71:F4:0D:D9:DE:7D:74:E5:56:33:7F:8D:2C:15:B1:80:E9:5D:E0"}}},"request":{"raw":"GET /Eodj8znQBik51BJNXiRTw1t2HXyv9p3LNhiNvsoMuDbg HTTP/1.1\r\nHost: gateway.irys.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://firelight.run/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 \r\ndate: Fri, 25 Sep 2026 05:36:51 GMT\r\ncontent-length: 0\r\nlocation: https://zunczd3cinnovpzh2w3sv4yyf4ycdzgcmlyvoo2eu3edqrvshgvq.mainnet-1.datasprite-cdn.com/Eodj8znQBik51BJNXiRTw1t2HXyv9p3LNhiNvsoMuDbg/\r\nserver: cloudflare\r\ncache-control: no-store\r\naccess-control-expose-headers: location, cache-control\r\naccess-control-allow-credentials: true\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nx-cache-status: BYPASS\r\ncf-cache-status: BYPASS\r\ncf-ray: a407ac70fda35687-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/webp","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-25T12:27:37.283953Z","times_seen":18651356,"resource_available":true,"data":null}},"time_used":157,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":157,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zkrzh37fj2r5lngihbn6q4tvv2yw6qsa2oykho7r7ofhoutwmbiq.mainnet-1.datasprite-cdn.com/Ee22Pv7cBH8BUouBujgDbWKxMkbCCZGKJUPot9ZNpLsi/","fqdn":"zkrzh37fj2r5lngihbn6q4tvv2yw6qsa2oykho7r7ofhoutwmbiq.mainnet-1.datasprite-cdn.com","domain":"datasprite-cdn.com","tld":"com"},"ip":{"addr":"104.21.15.158","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://firelight.run/","date":"2026-09-25T05:36:51.769Z","timestamp":1790314611769,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"datasprite-cdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 01 Sep 2026 16:12:35 GMT","end":"Mon, 30 Nov 2026 17:12:28 GMT"},"fingerprint":{"sha1":"A7:49:1F:BA:09:CF:9C:E9:55:85:E1:3E:6A:46:2B:56:1A:DD:E7:32","sha256":"57:8A:D0:59:59:01:19:C2:80:F0:3E:E8:83:04:E6:8C:0B:A5:94:44:42:21:A0:F5:48:2D:7F:8D:19:15:08:52"}}},"request":{"raw":"GET /Ee22Pv7cBH8BUouBujgDbWKxMkbCCZGKJUPot9ZNpLsi/ HTTP/1.1\r\nHost: zkrzh37fj2r5lngihbn6q4tvv2yw6qsa2oykho7r7ofhoutwmbiq.mainnet-1.datasprite-cdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://firelight.run/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 25 Sep 2026 05:36:52 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1318\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin\r\nx-irys-item-id: Ee22Pv7cBH8BUouBujgDbWKxMkbCCZGKJUPot9ZNpLsi\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-content-type: image/webp\r\nx-content-length: 1318\r\ncache-control: max-age=2592000\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dN8%2FpLNN39%2F0Ija0ZBP%2FV%2FazzIojn29i723xDVhyBLfag4DAoDoRt20Siqxl%2FiHCAYfa3C2rTlV7C%2BekHV0j%2Bl%2FD9byHbUpR56v2WkhnvGOrDp%2Bu%2FTknaHIxrhX2XfRdXaLV4ArebHPyqNlXnXP4aFSeVlmJ0KVw3d7LireKfO2npEWjg7cwh36KQIPF2Ky8IbyVDpD9pfV19veq%2B3Q%2B8%2FMCFVg%3D\"}]}\r\ncf-ray: a407ac74ae32a41f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1318,"size_decoded":2190,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"c26e45cae3d02d9942ed0380e587f9ca","sha1":"da974aef55c1f343f5888d3952771b0b2fa7b389","sha256":"0d7589be044acdb28633fdf313cc6adaa15a19b27de85eb6b14ddc125e6e1a45","sha512":"6048fd686819e5253cfa0206543bf1033cb8d68c7630734c4aa74bf77c1b8754e6cc69cd96159d4627d7951b5e82b61874b08c999da6a4e0c8d08be21cda7b88","ssdeep":"","tlshash":"7a21f86840e5036cc993d8bac116c03494eb02bbe74eb668123071d172b60178a93df2","first_seen":"2024-06-21T17:22:35Z","last_seen":"2026-09-25T06:10:52.67622Z","times_seen":4507,"resource_available":false,"data":null}},"time_used":479,"timings":{"blocked":98,"dns":4,"connect":4,"send":0,"wait":292,"receive":0,"ssl":66},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"zkrzh37fj2r5lngihbn6q4tvv2yw6qsa2oykho7r7ofhoutwmbiq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"zkrzh37fj2r5lngihbn6q4tvv2yw6qsa2oykho7r7ofhoutwmbiq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"zkrzh37fj2r5lngihbn6q4tvv2yw6qsa2oykho7r7ofhoutwmbiq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"6sab273b7nl3rcdustvjejsgxkwzkkibobj56v5dumz7i6xdbltq.mainnet-1.datasprite-cdn.com/HTRnUQQDU47XpwWJMzeSSqzX7y5GMLuXnowdYk183S2i/","fqdn":"6sab273b7nl3rcdustvjejsgxkwzkkibobj56v5dumz7i6xdbltq.mainnet-1.datasprite-cdn.com","domain":"datasprite-cdn.com","tld":"com"},"ip":{"addr":"104.21.15.158","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://firelight.run/","date":"2026-09-25T05:36:51.796Z","timestamp":1790314611796,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"datasprite-cdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 01 Sep 2026 16:12:35 GMT","end":"Mon, 30 Nov 2026 17:12:28 GMT"},"fingerprint":{"sha1":"A7:49:1F:BA:09:CF:9C:E9:55:85:E1:3E:6A:46:2B:56:1A:DD:E7:32","sha256":"57:8A:D0:59:59:01:19:C2:80:F0:3E:E8:83:04:E6:8C:0B:A5:94:44:42:21:A0:F5:48:2D:7F:8D:19:15:08:52"}}},"request":{"raw":"GET /HTRnUQQDU47XpwWJMzeSSqzX7y5GMLuXnowdYk183S2i/ HTTP/1.1\r\nHost: 6sab273b7nl3rcdustvjejsgxkwzkkibobj56v5dumz7i6xdbltq.mainnet-1.datasprite-cdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://firelight.run/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 25 Sep 2026 05:36:52 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\npriority: u=5,i\r\nvary: Origin\r\nx-irys-item-id: HTRnUQQDU47XpwWJMzeSSqzX7y5GMLuXnowdYk183S2i\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-content-type: image/webp\r\nx-content-length: 1446\r\ncache-control: max-age=2592000\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=j2glrDIfsTAEDFNJdUMBJUAgrZqJ7erfS7tuSNXiYypomREsQFPrM6A13KDESohSDLldMDy07HlMBUsxm8OZ1RrsRULZdeZNRQB5CpalCmcJF%2FkcWqrmkFuPAbp2fAaH3zH0SvLrr7eUel8hQdfTrrOmAnbQ29Cva54x5KUFWGMNQLDIn38zvB5h%2BCWF8yYJ6Zk27QBPXR4XLOJLpGApMtdgaH8%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a407ac74edc5b509-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1446\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1446,"size_decoded":2318,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"2611650f3bf1d59e660eb3dbcdb14f1b","sha1":"d20eafa0b7a6cf800ef1fc2f181534a83db5cf9a","sha256":"2aca745d61a88a9a898b8fcd91bee3c3dc36d338a8bc41f9f90de924fe1f62a3","sha512":"a0e218a3731b072d1fa74c67dc477ef003bc0c281823933a45bbc0fb87b91ebd587241df9fb0dfa541a72d96bfa4b8bc348f2d4765c2a67fba2564e27d630b6a","ssdeep":"","tlshash":"c731e91f12de9361a2bcca837b50e48c73d3541f740a7a64a56053807702159a669e02","first_seen":"2025-03-05T19:21:16.060703Z","last_seen":"2026-09-25T06:10:52.70458Z","times_seen":177,"resource_available":false,"data":null}},"time_used":317,"timings":{"blocked":139,"dns":4,"connect":0,"send":0,"wait":174,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"6sab273b7nl3rcdustvjejsgxkwzkkibobj56v5dumz7i6xdbltq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"6sab273b7nl3rcdustvjejsgxkwzkkibobj56v5dumz7i6xdbltq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"6sab273b7nl3rcdustvjejsgxkwzkkibobj56v5dumz7i6xdbltq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"crwj4ebgvb7k4zcwmmxrnzxbs2gaegjyku7rc4eqjkvdnsvrehsa.mainnet-1.datasprite-cdn.com/2NjDWqEJ9EGvxgj9wS1oDfh2jWS7mq5KLYvofQx24YXM/","fqdn":"crwj4ebgvb7k4zcwmmxrnzxbs2gaegjyku7rc4eqjkvdnsvrehsa.mainnet-1.datasprite-cdn.com","domain":"datasprite-cdn.com","tld":"com"},"ip":{"addr":"104.21.15.158","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://firelight.run/","date":"2026-09-25T05:36:51.801Z","timestamp":1790314611801,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"datasprite-cdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 01 Sep 2026 16:12:35 GMT","end":"Mon, 30 Nov 2026 17:12:28 GMT"},"fingerprint":{"sha1":"A7:49:1F:BA:09:CF:9C:E9:55:85:E1:3E:6A:46:2B:56:1A:DD:E7:32","sha256":"57:8A:D0:59:59:01:19:C2:80:F0:3E:E8:83:04:E6:8C:0B:A5:94:44:42:21:A0:F5:48:2D:7F:8D:19:15:08:52"}}},"request":{"raw":"GET /2NjDWqEJ9EGvxgj9wS1oDfh2jWS7mq5KLYvofQx24YXM/ HTTP/1.1\r\nHost: crwj4ebgvb7k4zcwmmxrnzxbs2gaegjyku7rc4eqjkvdnsvrehsa.mainnet-1.datasprite-cdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://firelight.run/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 25 Sep 2026 05:36:52 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\npriority: u=5,i\r\nvary: Origin\r\nx-irys-item-id: 2NjDWqEJ9EGvxgj9wS1oDfh2jWS7mq5KLYvofQx24YXM\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-content-type: image/webp\r\nx-content-length: 1226\r\ncache-control: max-age=2592000\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GuXOP4WiC3zoIEAGsHzGQllnCdaehVGY1jwT7TxSdwZaeryfFKdfLNAL4gzymlbm0IvBW5MU8JCyuPDUm%2F7VpHLg3cJqJxZL3YfG7U2tvDFl2Z2E6pGspDgFBD%2Bp2VB8hhBbQbajlLBuXvgyUogvSX5h4f8HnQNUCxfgarsru4U7JdhqhnX9AuC2RZ4QH%2Fq1o%2BbetnX2scDRy10oMCoAjexdyoA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a407ac753b1856ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1226\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1226,"size_decoded":2102,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 120x120, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"deee48bad1fc92c6fd6a9a0e674b79bf","sha1":"4e9111335476a86a3f21ee4d49d4848987a238fd","sha256":"15aae5f5c33873d84b119f28e4d22497a73baff226d0f5fee4d38e0cf409f8c1","sha512":"d9fb58405ee580a2e169ead3209a47627f632a9c8afd0f5c31ef29e6f86cd5bfa6aadd3397312d92f4fedd354220c1f7782679d811bda52fd3996f0035b7881a","ssdeep":"","tlshash":"4521b7afa47fc325c3d238581d19054b0bb6026975c7e33cb954ba81797700dba260f0","first_seen":"2024-06-14T10:37:34Z","last_seen":"2026-09-25T06:10:52.673012Z","times_seen":178,"resource_available":false,"data":null}},"time_used":400,"timings":{"blocked":179,"dns":34,"connect":0,"send":0,"wait":187,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"crwj4ebgvb7k4zcwmmxrnzxbs2gaegjyku7rc4eqjkvdnsvrehsa.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"crwj4ebgvb7k4zcwmmxrnzxbs2gaegjyku7rc4eqjkvdnsvrehsa.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"crwj4ebgvb7k4zcwmmxrnzxbs2gaegjyku7rc4eqjkvdnsvrehsa.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"t73giqqwtpkhhdyyeszo2vv4sqyyuafuk7y2deshpm3xftc7jg7q.mainnet-1.datasprite-cdn.com/BmRja2B3uNcEnmSf4spQwbDhyXoU8SpESENkTyQBN6Wr/","fqdn":"t73giqqwtpkhhdyyeszo2vv4sqyyuafuk7y2deshpm3xftc7jg7q.mainnet-1.datasprite-cdn.com","domain":"datasprite-cdn.com","tld":"com"},"ip":{"addr":"104.21.15.158","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://firelight.run/","date":"2026-09-25T05:36:51.811Z","timestamp":1790314611811,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"datasprite-cdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 01 Sep 2026 16:12:35 GMT","end":"Mon, 30 Nov 2026 17:12:28 GMT"},"fingerprint":{"sha1":"A7:49:1F:BA:09:CF:9C:E9:55:85:E1:3E:6A:46:2B:56:1A:DD:E7:32","sha256":"57:8A:D0:59:59:01:19:C2:80:F0:3E:E8:83:04:E6:8C:0B:A5:94:44:42:21:A0:F5:48:2D:7F:8D:19:15:08:52"}}},"request":{"raw":"GET /BmRja2B3uNcEnmSf4spQwbDhyXoU8SpESENkTyQBN6Wr/ HTTP/1.1\r\nHost: t73giqqwtpkhhdyyeszo2vv4sqyyuafuk7y2deshpm3xftc7jg7q.mainnet-1.datasprite-cdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://firelight.run/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 25 Sep 2026 05:36:52 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\npriority: u=5,i\r\nvary: Origin\r\nx-irys-item-id: BmRja2B3uNcEnmSf4spQwbDhyXoU8SpESENkTyQBN6Wr\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-content-type: image/webp\r\nx-content-length: 404\r\ncache-control: max-age=2592000\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qko6JR3Hb0RGg8jR3ClmK%2FMvvtEVATLMUZ3CzX6jFjz%2FKkGivgqJIA30PhQWlwzbhFvYXpSoGacmLtMLkmWQ97hsBtw3RdtUchfWvVQVeYsEonWSGGz4dTT95pNgBIla6s8hnqKdjYq6u2wAp6dsbrrT%2Biev0eqSinjjWUCz2kXVbldm0BBzZ57KbUCzjR9zI%2Fw%2FMA7lm%2BuqKJVNKuSGIol1qQc%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a407ac758b1e56ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 404\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":404,"size_decoded":1282,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 120x120, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"38e0fdddc2ae9c063534c43963acc120","sha1":"807c4dc8578cfd17d503a3dd33a847d70b3df49b","sha256":"ac764ebfd47367399a0ecbc2236a573ad8bab36a76d7b9ff0406b9901b1fc7fc","sha512":"55b13de8dd085096e32e0f1570c8446afc9a2ae48b3f86cfa5a463a8ae2a3aac1a55ff32e72544e431924947b9e168da887e56bf2b0a0a9e9097ceb543dd6674","ssdeep":"","tlshash":"b1e0f1f097225061d3d0b2332e9b3905170cb905552c0d809837b4fd59254c35e60c2e","first_seen":"2025-10-03T06:22:13.531935Z","last_seen":"2026-09-25T06:10:52.688383Z","times_seen":233,"resource_available":false,"data":null}},"time_used":426,"timings":{"blocked":228,"dns":20,"connect":0,"send":0,"wait":178,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"t73giqqwtpkhhdyyeszo2vv4sqyyuafuk7y2deshpm3xftc7jg7q.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"t73giqqwtpkhhdyyeszo2vv4sqyyuafuk7y2deshpm3xftc7jg7q.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"t73giqqwtpkhhdyyeszo2vv4sqyyuafuk7y2deshpm3xftc7jg7q.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rpc.ankr.com/arbitrum","fqdn":"rpc.ankr.com","domain":"ankr.com","tld":"com"},"ip":{"addr":"152.236.9.75","port":443,"asn":7738,"as":"V tal","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://firelight.run/","date":"2026-09-25T05:36:50.415Z","timestamp":1790314610415,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"shark.multi-rpc.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Tue, 15 Sep 2026 09:08:08 GMT","end":"Mon, 14 Dec 2026 09:08:07 GMT"},"fingerprint":{"sha1":"5C:21:BA:98:E5:D9:20:AF:E9:BB:74:C7:96:5E:67:7E:0E:35:B7:9F","sha256":"89:8F:A0:D2:17:79:FA:35:38:5E:B2:D1:CC:B9:4B:77:BF:21:D2:BE:7A:9D:22:4E:7B:BE:FD:24:35:91:B9:D4"}}},"request":{"raw":"OPTIONS /arbitrum HTTP/1.1\r\nHost: rpc.ankr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://firelight.run/\r\nOrigin: https://firelight.run\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 \r\ndate: Fri, 25 Sep 2026 05:36:50 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, PUT, POST, DELETE, PATCH, OPTIONS\r\naccess-control-allow-headers: DNT,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization,solana-client,client-sdk-version,client-sdk-type,client-target-api-version,x-ton-client-version,x-client-name,x-client-version,Accept-Token-Tier,Rpc-Compress,Rpc-Decode\r\naccess-control-expose-headers: Token-Tier\r\naccess-control-max-age: 1728000\r\ncontent-length: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":681,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-25T12:27:37.283953Z","times_seen":18651356,"resource_available":true,"data":null}},"time_used":68,"timings":{"blocked":-1,"dns":2,"connect":19,"send":0,"wait":19,"receive":0,"ssl":27},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"firelight.run/assets/core_27d1859f63.php?req=ping","fqdn":"firelight.run","domain":"firelight.run","tld":"run"},"ip":{"addr":"104.21.13.148","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://firelight.run/","date":"2026-09-25T05:36:51.175Z","timestamp":1790314611175,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"firelight.run","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 24 Sep 2026 11:54:24 GMT","end":"Wed, 23 Dec 2026 11:54:23 GMT"},"fingerprint":{"sha1":"02:54:09:B5:1A:C4:80:FE:25:D5:90:D5:C2:96:72:47:EA:08:E4:AE","sha256":"3B:A7:9F:77:5F:07:1D:DF:C1:4E:DC:82:26:78:98:F9:C7:9C:E6:6F:08:FA:7C:0D:00:C0:A7:B5:72:83:E1:45"}}},"request":{"raw":"GET /assets/core_27d1859f63.php?req=ping HTTP/1.1\r\nHost: firelight.run\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://firelight.run/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 25 Sep 2026 05:36:51 GMT\r\ncontent-type: application/octet-stream\r\nserver-timing: cfExtPri\r\nlast-modified: Sun, 20 Sep 2026 01:48:56 GMT\r\npriority: u=4,i=?0\r\netag: \"6aaf3b88-3ab6\"\r\naccept-ranges: bytes\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3QWjikRXta2LRoNe%2BqF%2Bb2I30l%2BZ563e18Ov9kVTLR6Pe%2Fbl%2BfsjrKqSqXnyAb5IiO83%2B2Z9%2BAgoZ0c2kIuKX02rQJBchCEZlSgZ1FXrldeh6y6Kfv7l2lxyySw9KGoh\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a407ac6fd8402efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 15030\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15030,"size_decoded":15712,"mime_type":"application/octet-stream","magic":"PHP script, ASCII text, with very long lines (14206)","md5":"125ffa0d6e9aa27bbb3399c610385adf","sha1":"d3c479a2879f65d0a04c05372872ee353691c6a5","sha256":"5e9df4c8def228eae22363c981bf4a1b09733dbd4e317d5d8aaadb2346e1c668","sha512":"c0f068b823cb2540ac6d78af1aa7871fe0710aa74fc8c322c8e997155ceab5bb56e795825418783df4b116a507742c45f247b249e54b6e0b7ce3809f235b247a","ssdeep":"384:DmjDm+CH/ALQAEoYEU5SpMAAHwxRcFW4rFwoDeN/NuXX:0Dm+CH/meoLNp/AHAcQ4rFheNl4X","tlshash":"106283746542528b799e0dc6afa2288d71b041e70e4e7e8f8f7c78cc21ac299c55dfe4","first_seen":"2026-09-25T05:38:00.113134Z","last_seen":"2026-09-25T06:10:52.686439Z","times_seen":6,"resource_available":false,"data":null}},"time_used":80,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":43,"receive":37,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"infosec_yara","sensor_type":"yara","title":"Nextron YARA rules","description":"Public Nextron YARA rules","scan_date":"2026-09-25","alert":"PHP webshell obfuscated by encoding of mixed hex and dec","trigger":"firelight.run/assets/core_27d1859f63.php?req=ping","verdict":"malware","severity":"medium","comment":"","link":"https://github.com/Neo23x0/signature-base","meta":{"author":"Arnim Rupp","date":"2021/04/18","description":"PHP webshell obfuscated by encoding of mixed hex and dec","license":"Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE","rule":"webshell_php_obfuscated_encoding_mixed_dec_and_hex"}},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"firelight.run","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-25","alert":"Phishing Block","trigger":"firelight.run","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"firelight.run","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gateway.irys.xyz/5gBbYXnATXAj3B6zmP8CaV88YB5uB9m8PZrfKJ7WjwUv","fqdn":"gateway.irys.xyz","domain":"irys.xyz","tld":"xyz"},"ip":{"addr":"172.66.167.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://firelight.run/","date":"2026-09-25T05:36:51.306Z","timestamp":1790314611306,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gateway.irys.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 20 Sep 2026 11:49:06 GMT","end":"Sat, 19 Dec 2026 11:49:05 GMT"},"fingerprint":{"sha1":"1B:75:8F:42:C3:0D:D3:04:72:4A:4F:BC:B0:44:35:11:BD:B0:C1:3A","sha256":"5D:7C:E7:8F:C7:B7:35:6E:0D:92:E6:E6:6C:71:F4:0D:D9:DE:7D:74:E5:56:33:7F:8D:2C:15:B1:80:E9:5D:E0"}}},"request":{"raw":"GET /5gBbYXnATXAj3B6zmP8CaV88YB5uB9m8PZrfKJ7WjwUv HTTP/1.1\r\nHost: gateway.irys.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://firelight.run/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 \r\ndate: Fri, 25 Sep 2026 05:36:51 GMT\r\ncontent-length: 0\r\nlocation: https://iv4gcnkpfdnodp3rm73df3m6vnf4ucnpjwdlcsrtmns4li5aljfq.mainnet-1.datasprite-cdn.com/5gBbYXnATXAj3B6zmP8CaV88YB5uB9m8PZrfKJ7WjwUv/\r\nserver: cloudflare\r\ncache-control: no-store\r\naccess-control-expose-headers: cache-control, location\r\naccess-control-allow-credentials: true\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nx-cache-status: BYPASS\r\ncf-cache-status: BYPASS\r\ncf-ray: a407ac710da65687-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/webp","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-25T12:27:37.283953Z","times_seen":18651356,"resource_available":true,"data":null}},"time_used":182,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":182,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gateway.irys.xyz/GYXDFoP5N7zD9drksjJDtzLyuKMxzVC6cxL7hd5FTEmG","fqdn":"gateway.irys.xyz","domain":"irys.xyz","tld":"xyz"},"ip":{"addr":"172.66.167.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://firelight.run/","date":"2026-09-25T05:36:51.310Z","timestamp":1790314611310,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gateway.irys.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 20 Sep 2026 11:49:06 GMT","end":"Sat, 19 Dec 2026 11:49:05 GMT"},"fingerprint":{"sha1":"1B:75:8F:42:C3:0D:D3:04:72:4A:4F:BC:B0:44:35:11:BD:B0:C1:3A","sha256":"5D:7C:E7:8F:C7:B7:35:6E:0D:92:E6:E6:6C:71:F4:0D:D9:DE:7D:74:E5:56:33:7F:8D:2C:15:B1:80:E9:5D:E0"}}},"request":{"raw":"GET /GYXDFoP5N7zD9drksjJDtzLyuKMxzVC6cxL7hd5FTEmG HTTP/1.1\r\nHost: gateway.irys.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://firelight.run/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 \r\ndate: Fri, 25 Sep 2026 05:36:51 GMT\r\ncontent-length: 0\r\nlocation: https://43zhqeb6vzldlqwzbqdiamkbmmrohzz5bvua563j7rbvxnd5u5fq.mainnet-1.datasprite-cdn.com/GYXDFoP5N7zD9drksjJDtzLyuKMxzVC6cxL7hd5FTEmG/\r\nserver: cloudflare\r\naccess-control-expose-headers: location, cache-control\r\ncache-control: no-store\r\naccess-control-allow-credentials: true\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nx-cache-status: BYPASS\r\ncf-cache-status: BYPASS\r\ncf-ray: a407ac710dac5687-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/webp","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-25T12:27:37.283953Z","times_seen":18651356,"resource_available":true,"data":null}},"time_used":184,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":184,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gateway.irys.xyz/ENERkaSEqTZ9HDtcuY5LHchHWY4CPN3Q31Qasqrq4f6k","fqdn":"gateway.irys.xyz","domain":"irys.xyz","tld":"xyz"},"ip":{"addr":"172.66.167.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://firelight.run/","date":"2026-09-25T05:36:51.364Z","timestamp":1790314611364,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gateway.irys.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 20 Sep 2026 11:49:06 GMT","end":"Sat, 19 Dec 2026 11:49:05 GMT"},"fingerprint":{"sha1":"1B:75:8F:42:C3:0D:D3:04:72:4A:4F:BC:B0:44:35:11:BD:B0:C1:3A","sha256":"5D:7C:E7:8F:C7:B7:35:6E:0D:92:E6:E6:6C:71:F4:0D:D9:DE:7D:74:E5:56:33:7F:8D:2C:15:B1:80:E9:5D:E0"}}},"request":{"raw":"GET /ENERkaSEqTZ9HDtcuY5LHchHWY4CPN3Q31Qasqrq4f6k HTTP/1.1\r\nHost: gateway.irys.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://firelight.run/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 \r\ndate: Fri, 25 Sep 2026 05:36:51 GMT\r\ncontent-length: 0\r\nlocation: https://y2me6bz5xzrin5vis76bc53hqcyzeg6ccrbutd74zgrtsncobg6q.mainnet-1.datasprite-cdn.com/ENERkaSEqTZ9HDtcuY5LHchHWY4CPN3Q31Qasqrq4f6k/\r\nserver: cloudflare\r\ncache-control: no-store\r\naccess-control-expose-headers: location, cache-control\r\naccess-control-allow-credentials: true\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nx-cache-status: BYPASS\r\ncf-cache-status: BYPASS\r\ncf-ray: a407ac711de25687-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/webp","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-25T12:27:37.283953Z","times_seen":18651356,"resource_available":true,"data":null}},"time_used":158,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":158,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bsc.drpc.org/","fqdn":"bsc.drpc.org","domain":"drpc.org","tld":"org"},"ip":{"addr":"104.18.11.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://firelight.run/","date":"2026-09-25T05:36:51.647Z","timestamp":1790314611647,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"drpc.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 13 Aug 2026 01:49:22 GMT","end":"Wed, 11 Nov 2026 02:49:11 GMT"},"fingerprint":{"sha1":"1D:AA:98:9C:F7:ED:CA:BA:5E:92:74:4B:18:3B:83:D6:0C:A4:D7:3C","sha256":"71:EB:00:B8:D0:6F:B9:E3:E0:9D:2C:E5:6B:57:0E:BA:4D:41:8C:64:EB:3E:B0:D8:8E:54:49:8D:2D:50:A2:65"}}},"request":{"raw":"OPTIONS / HTTP/1.1\r\nHost: bsc.drpc.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://firelight.run/\r\nOrigin: https://firelight.run\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 204 \r\ndate: Fri, 25 Sep 2026 05:36:51 GMT\r\naccess-control-allow-headers: content-type\r\naccess-control-allow-methods: POST\r\naccess-control-allow-origin: https://firelight.run\r\naccess-control-max-age: 600\r\nvary: Origin\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\ncf-ray: a407ac72ddfa56ca-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":442,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-25T12:27:37.283953Z","times_seen":18651356,"resource_available":true,"data":null}},"time_used":202,"timings":{"blocked":3,"dns":1,"connect":0,"send":0,"wait":198,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"buutf2tmltbd5uchhy32zl6l6dichmeqmkfy746sru4cutui7g3q.mainnet-1.datasprite-cdn.com/tNjir8swBoPJcDaSUy49m7YW8n9rjjUNZzKpeJzjGhC/","fqdn":"buutf2tmltbd5uchhy32zl6l6dichmeqmkfy746sru4cutui7g3q.mainnet-1.datasprite-cdn.com","domain":"datasprite-cdn.com","tld":"com"},"ip":{"addr":"104.21.15.158","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://firelight.run/","date":"2026-09-25T05:36:51.734Z","timestamp":1790314611734,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"datasprite-cdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 01 Sep 2026 16:12:35 GMT","end":"Mon, 30 Nov 2026 17:12:28 GMT"},"fingerprint":{"sha1":"A7:49:1F:BA:09:CF:9C:E9:55:85:E1:3E:6A:46:2B:56:1A:DD:E7:32","sha256":"57:8A:D0:59:59:01:19:C2:80:F0:3E:E8:83:04:E6:8C:0B:A5:94:44:42:21:A0:F5:48:2D:7F:8D:19:15:08:52"}}},"request":{"raw":"GET /tNjir8swBoPJcDaSUy49m7YW8n9rjjUNZzKpeJzjGhC/ HTTP/1.1\r\nHost: buutf2tmltbd5uchhy32zl6l6dichmeqmkfy746sru4cutui7g3q.mainnet-1.datasprite-cdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://firelight.run/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 25 Sep 2026 05:36:52 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\npriority: u=5,i\r\nvary: Origin\r\nx-irys-item-id: tNjir8swBoPJcDaSUy49m7YW8n9rjjUNZzKpeJzjGhC\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-content-type: image/webp\r\nx-content-length: 1264\r\ncache-control: max-age=2592000\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MNs9IiJ9G%2BQsc0P5v7vmVmatPQ4f%2FUirT6k%2FmT0GUhvcIOYaYeUYBFtpX6njQLGfuF9QGdz704g0d5AhZ2ai3Sh7g1%2Bxr8to5R%2FGsh08btRUCiF40aDppUcDU1YKBcctNE5v4NBxldrXfylwFgA6N5wV8PCI5NCz%2FjtkDAJEE%2BnscFEIkvj3ypkbGliR5%2BcMlOwJps0klBcl3fzRAuAW3CnXERg%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a407ac737da6b509-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1264\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1264,"size_decoded":2147,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 120x120, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"a59ccce4090b66e6adfe363df40ac9f0","sha1":"d02fe751dafb8202db62931f44cf1e7673c7b430","sha256":"f374fd161e2abe943efdd445069ac1ff036e3317e9fb9d89ea0359a6d0584d52","sha512":"d93353fb79572007a6819315626193551a6f458d820647167b459ee324c32da3564473b25bc0ac9044860474f6eaf68e066809628376d0269e2cb446fd87ccfb","ssdeep":"","tlshash":"2921b7daf0b8e204840f1a2a4d66bc6b762f2d307f626a85395daff2424041e35d82b4","first_seen":"2024-06-14T10:37:34Z","last_seen":"2026-09-25T06:10:52.708076Z","times_seen":4437,"resource_available":false,"data":null}},"time_used":315,"timings":{"blocked":-1,"dns":7,"connect":0,"send":0,"wait":308,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"buutf2tmltbd5uchhy32zl6l6dichmeqmkfy746sru4cutui7g3q.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"buutf2tmltbd5uchhy32zl6l6dichmeqmkfy746sru4cutui7g3q.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"buutf2tmltbd5uchhy32zl6l6dichmeqmkfy746sru4cutui7g3q.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"egp3uffvpgr2wpafcervpo3f64y2lpvikbnscmfvn3udttq77joq.mainnet-1.datasprite-cdn.com/3GFibxLTiHvi7DucnoGZGgHbWb3eA9cXG3E85dEnjRsi/","fqdn":"egp3uffvpgr2wpafcervpo3f64y2lpvikbnscmfvn3udttq77joq.mainnet-1.datasprite-cdn.com","domain":"datasprite-cdn.com","tld":"com"},"ip":{"addr":"172.67.163.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://firelight.run/","date":"2026-09-25T05:36:51.818Z","timestamp":1790314611818,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"datasprite-cdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 01 Sep 2026 16:12:35 GMT","end":"Mon, 30 Nov 2026 17:12:28 GMT"},"fingerprint":{"sha1":"A7:49:1F:BA:09:CF:9C:E9:55:85:E1:3E:6A:46:2B:56:1A:DD:E7:32","sha256":"57:8A:D0:59:59:01:19:C2:80:F0:3E:E8:83:04:E6:8C:0B:A5:94:44:42:21:A0:F5:48:2D:7F:8D:19:15:08:52"}}},"request":{"raw":"GET /3GFibxLTiHvi7DucnoGZGgHbWb3eA9cXG3E85dEnjRsi/ HTTP/1.1\r\nHost: egp3uffvpgr2wpafcervpo3f64y2lpvikbnscmfvn3udttq77joq.mainnet-1.datasprite-cdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://firelight.run/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 25 Sep 2026 05:36:52 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1992\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin\r\nx-irys-item-id: 3GFibxLTiHvi7DucnoGZGgHbWb3eA9cXG3E85dEnjRsi\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-content-type: image/webp\r\nx-content-length: 1992\r\ncache-control: max-age=2592000\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5YhOKP2XRQNXVYoAITbSzTG9jfhF3OTyHh4Uk%2BX3UwvbfdN8szzBD%2Fq%2FLK%2Fc%2B9JGDvPDNTxYL6rkg9qNGgNjgNkuqv8LDazo66kOiWh6VZTjjYe8Y4l%2B%2F5hk0vRt186I4aPJt5TwdtlHv8BnpSmT1sgBFpJwjJ3PXdtHCGbIgnKtkidaJW1ycRHghqMsPiBJVB4GeX0wtWdnj4punZVC4n6bXfM%3D\"}]}\r\ncf-ray: a407ac759eea120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1992,"size_decoded":2852,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 120x120, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"4b013764d1cd40ca1e78cac87007ed2c","sha1":"55fd79cc74b5e19798e4ef08327914446bec62ab","sha256":"14abbbc1a69d2de80f758bc1dd392c9bb98e884193033ecadd6177e07b552f8e","sha512":"a06b598a53e2ccca0e93c46c2865d2e0f4e948fbdbb655a2ec12c5700fb70971368098f8ad172003f10ccdc7a94930fb7cd8e7ad61b9f849181a8de2ac42011e","ssdeep":"","tlshash":"06410a3883863b94ae5eb9ec6f81001b82791e76621d8483d93664cf8f21f864f8f851","first_seen":"2024-06-14T10:37:34Z","last_seen":"2026-09-25T06:10:52.671271Z","times_seen":4457,"resource_available":false,"data":null}},"time_used":532,"timings":{"blocked":241,"dns":0,"connect":0,"send":0,"wait":291,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"egp3uffvpgr2wpafcervpo3f64y2lpvikbnscmfvn3udttq77joq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"egp3uffvpgr2wpafcervpo3f64y2lpvikbnscmfvn3udttq77joq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"egp3uffvpgr2wpafcervpo3f64y2lpvikbnscmfvn3udttq77joq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"firelight.run/1729aa1263747dd8b8588b63077202ed2d2d7318.svg","fqdn":"firelight.run","domain":"firelight.run","tld":"run"},"ip":{"addr":"104.21.13.148","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://firelight.run/","date":"2026-09-25T05:36:49.853Z","timestamp":1790314609853,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"firelight.run","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 24 Sep 2026 11:54:24 GMT","end":"Wed, 23 Dec 2026 11:54:23 GMT"},"fingerprint":{"sha1":"02:54:09:B5:1A:C4:80:FE:25:D5:90:D5:C2:96:72:47:EA:08:E4:AE","sha256":"3B:A7:9F:77:5F:07:1D:DF:C1:4E:DC:82:26:78:98:F9:C7:9C:E6:6F:08:FA:7C:0D:00:C0:A7:B5:72:83:E1:45"}}},"request":{"raw":"GET /1729aa1263747dd8b8588b63077202ed2d2d7318.svg HTTP/1.1\r\nHost: firelight.run\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://firelight.run/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 25 Sep 2026 05:36:49 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=f%2Bn1Ze4Jd5tiKfPhPMfo88yD5MEyruDO%2Bv%2Fe5quhc6O8Iz4btbIEs6kD1wWioyx01DMtj3w70PBgH8UJALwXJF9cXdtP%2BHjRnFM%2F4rkHJ5PMfmyWOFcCqXnpAEg5CrGj\"}]}\r\nlast-modified: Tue, 21 Apr 2026 11:39:44 GMT\r\npriority: u=4,i\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"69e76200-1131\"\r\nage: 3\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a407ac679e552efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4401,"size_decoded":2494,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"2af18033ebf1d46e16a2a12fa77e9a35","sha1":"1729aa1263747dd8b8588b63077202ed2d2d7318","sha256":"0a861394733fd023e83d260dabef406361dfb0ab1231b6c1bdc9ac6e212ed2da","sha512":"7ec8ed5d91caa45544f2b4e2cc81f4965ff94417ff2d1c4c0970aaefa296186246e141e2828f9e23bdf26ccaada2c9ee68c1e2ecdcb795390195ac8a038dcd62","ssdeep":"96:+Zk7pzJjO2fK2eSRNREFRuSoOApRc7pdL7QHS9EdP1HEDxG:yk7fb2SRNREFRQOApCpdDEJ5EDxG","tlshash":"679176eedfbcb5e5b089e3eefb536098351f98766281ce91c34d2c896096c0cd9994d0","first_seen":"2026-02-16T14:56:50.163733Z","last_seen":"2026-09-25T05:38:01.291508Z","times_seen":20,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"firelight.run","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-25","alert":"Phishing Block","trigger":"firelight.run","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"firelight.run","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gateway.irys.xyz/7CXSgx8jsxLxjzMCMaadAm2zy2HXnfgpYFs2sF6C1kEV","fqdn":"gateway.irys.xyz","domain":"irys.xyz","tld":"xyz"},"ip":{"addr":"172.66.167.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://firelight.run/","date":"2026-09-25T05:36:51.288Z","timestamp":1790314611288,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gateway.irys.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 20 Sep 2026 11:49:06 GMT","end":"Sat, 19 Dec 2026 11:49:05 GMT"},"fingerprint":{"sha1":"1B:75:8F:42:C3:0D:D3:04:72:4A:4F:BC:B0:44:35:11:BD:B0:C1:3A","sha256":"5D:7C:E7:8F:C7:B7:35:6E:0D:92:E6:E6:6C:71:F4:0D:D9:DE:7D:74:E5:56:33:7F:8D:2C:15:B1:80:E9:5D:E0"}}},"request":{"raw":"GET /7CXSgx8jsxLxjzMCMaadAm2zy2HXnfgpYFs2sF6C1kEV HTTP/1.1\r\nHost: gateway.irys.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://firelight.run/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 \r\ndate: Fri, 25 Sep 2026 05:36:51 GMT\r\ncontent-length: 0\r\nlocation: https://lqm65l4rsie7lcqzwyygqd4xmycpt6vpx7jqzqhlj6x4xnaxvvva.mainnet-1.datasprite-cdn.com/7CXSgx8jsxLxjzMCMaadAm2zy2HXnfgpYFs2sF6C1kEV/\r\nserver: cloudflare\r\naccess-control-allow-credentials: true\r\ncache-control: no-store\r\naccess-control-expose-headers: cache-control, location\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nx-cache-status: BYPASS\r\ncf-cache-status: BYPASS\r\ncf-ray: a407ac70fd9d5687-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/webp","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-25T12:27:37.283953Z","times_seen":18651356,"resource_available":true,"data":null}},"time_used":178,"timings":{"blocked":15,"dns":0,"connect":0,"send":0,"wait":163,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gateway.irys.xyz/FGwxtfb99CU7ZWrkGJ1tKhV8vxUmhrTjs6zgp62ko6W7","fqdn":"gateway.irys.xyz","domain":"irys.xyz","tld":"xyz"},"ip":{"addr":"172.66.167.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://firelight.run/","date":"2026-09-25T05:36:51.290Z","timestamp":1790314611290,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gateway.irys.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 20 Sep 2026 11:49:06 GMT","end":"Sat, 19 Dec 2026 11:49:05 GMT"},"fingerprint":{"sha1":"1B:75:8F:42:C3:0D:D3:04:72:4A:4F:BC:B0:44:35:11:BD:B0:C1:3A","sha256":"5D:7C:E7:8F:C7:B7:35:6E:0D:92:E6:E6:6C:71:F4:0D:D9:DE:7D:74:E5:56:33:7F:8D:2C:15:B1:80:E9:5D:E0"}}},"request":{"raw":"GET /FGwxtfb99CU7ZWrkGJ1tKhV8vxUmhrTjs6zgp62ko6W7 HTTP/1.1\r\nHost: gateway.irys.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://firelight.run/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 \r\ndate: Fri, 25 Sep 2026 05:36:51 GMT\r\ncontent-length: 0\r\nlocation: https://2qmxub74calbyr5e4vgvxb6tbvyem7xps23rhcmptoozpppemsga.mainnet-1.datasprite-cdn.com/FGwxtfb99CU7ZWrkGJ1tKhV8vxUmhrTjs6zgp62ko6W7/\r\nserver: cloudflare\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\ncache-control: no-store\r\naccess-control-allow-credentials: true\r\naccess-control-expose-headers: cache-control, location\r\nx-cache-status: BYPASS\r\ncf-cache-status: BYPASS\r\ncf-ray: a407ac70fd9e5687-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/webp","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-25T12:27:37.283953Z","times_seen":18651356,"resource_available":true,"data":null}},"time_used":172,"timings":{"blocked":12,"dns":0,"connect":0,"send":0,"wait":160,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gateway.irys.xyz/B5sLi9Stwf8xRFrbJ6Bm6wZojhuyzkGcWowZenqKD4fz","fqdn":"gateway.irys.xyz","domain":"irys.xyz","tld":"xyz"},"ip":{"addr":"172.66.167.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://firelight.run/","date":"2026-09-25T05:36:51.305Z","timestamp":1790314611305,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gateway.irys.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 20 Sep 2026 11:49:06 GMT","end":"Sat, 19 Dec 2026 11:49:05 GMT"},"fingerprint":{"sha1":"1B:75:8F:42:C3:0D:D3:04:72:4A:4F:BC:B0:44:35:11:BD:B0:C1:3A","sha256":"5D:7C:E7:8F:C7:B7:35:6E:0D:92:E6:E6:6C:71:F4:0D:D9:DE:7D:74:E5:56:33:7F:8D:2C:15:B1:80:E9:5D:E0"}}},"request":{"raw":"GET /B5sLi9Stwf8xRFrbJ6Bm6wZojhuyzkGcWowZenqKD4fz HTTP/1.1\r\nHost: gateway.irys.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://firelight.run/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 \r\ndate: Fri, 25 Sep 2026 05:36:51 GMT\r\ncontent-length: 0\r\nlocation: https://sxkbzjsq65wh654do6f2fcn4t5phs2iozxkrihpxbz4jaqr3fuaq.mainnet-1.datasprite-cdn.com/B5sLi9Stwf8xRFrbJ6Bm6wZojhuyzkGcWowZenqKD4fz/\r\nserver: cloudflare\r\naccess-control-allow-credentials: true\r\ncache-control: no-store\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-expose-headers: cache-control, location\r\nx-cache-status: BYPASS\r\ncf-cache-status: BYPASS\r\ncf-ray: a407ac70fda45687-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/webp","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-25T12:27:37.283953Z","times_seen":18651356,"resource_available":true,"data":null}},"time_used":159,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":159,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gateway.irys.xyz/5ALLUP4yuGwDcVHWQu9rkA4iavNi6RPYuFSFagBKuJAX","fqdn":"gateway.irys.xyz","domain":"irys.xyz","tld":"xyz"},"ip":{"addr":"172.66.167.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://firelight.run/","date":"2026-09-25T05:36:51.377Z","timestamp":1790314611377,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gateway.irys.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 20 Sep 2026 11:49:06 GMT","end":"Sat, 19 Dec 2026 11:49:05 GMT"},"fingerprint":{"sha1":"1B:75:8F:42:C3:0D:D3:04:72:4A:4F:BC:B0:44:35:11:BD:B0:C1:3A","sha256":"5D:7C:E7:8F:C7:B7:35:6E:0D:92:E6:E6:6C:71:F4:0D:D9:DE:7D:74:E5:56:33:7F:8D:2C:15:B1:80:E9:5D:E0"}}},"request":{"raw":"GET /5ALLUP4yuGwDcVHWQu9rkA4iavNi6RPYuFSFagBKuJAX HTTP/1.1\r\nHost: gateway.irys.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://firelight.run/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 \r\ndate: Fri, 25 Sep 2026 05:36:51 GMT\r\ncontent-length: 0\r\nlocation: https://hxjnnbfgmzureusmhjgltavcqubaut2yzqx23rrlalgrwm4nynga.mainnet-1.datasprite-cdn.com/5ALLUP4yuGwDcVHWQu9rkA4iavNi6RPYuFSFagBKuJAX/\r\nserver: cloudflare\r\ncache-control: no-store\r\naccess-control-expose-headers: cache-control, location\r\naccess-control-allow-credentials: true\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nx-cache-status: BYPASS\r\ncf-cache-status: BYPASS\r\ncf-ray: a407ac711deb5687-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/webp","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-25T12:27:37.283953Z","times_seen":18651356,"resource_available":true,"data":null}},"time_used":168,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":168,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aa5xkwqvefm3tszfisosqh6wdakhahxso3jyl5d5wsibuczex6ma.mainnet-1.datasprite-cdn.com/1uax15bZQNN9id5YyXCs7XPHXgsx2XaS5z93YrdvjDH/","fqdn":"aa5xkwqvefm3tszfisosqh6wdakhahxso3jyl5d5wsibuczex6ma.mainnet-1.datasprite-cdn.com","domain":"datasprite-cdn.com","tld":"com"},"ip":{"addr":"104.21.15.158","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://firelight.run/","date":"2026-09-25T05:36:51.694Z","timestamp":1790314611694,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"datasprite-cdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 01 Sep 2026 16:12:35 GMT","end":"Mon, 30 Nov 2026 17:12:28 GMT"},"fingerprint":{"sha1":"A7:49:1F:BA:09:CF:9C:E9:55:85:E1:3E:6A:46:2B:56:1A:DD:E7:32","sha256":"57:8A:D0:59:59:01:19:C2:80:F0:3E:E8:83:04:E6:8C:0B:A5:94:44:42:21:A0:F5:48:2D:7F:8D:19:15:08:52"}}},"request":{"raw":"GET /1uax15bZQNN9id5YyXCs7XPHXgsx2XaS5z93YrdvjDH/ HTTP/1.1\r\nHost: aa5xkwqvefm3tszfisosqh6wdakhahxso3jyl5d5wsibuczex6ma.mainnet-1.datasprite-cdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://firelight.run/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 25 Sep 2026 05:36:52 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\npriority: u=5,i\r\nvary: Origin\r\nx-irys-item-id: 1uax15bZQNN9id5YyXCs7XPHXgsx2XaS5z93YrdvjDH\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-content-type: image/png\r\nx-content-length: 2583\r\ncache-control: max-age=2592000\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=h2CdwSQEs2RwBcqSbkFAHRyGvSM7sagMjGLFiIIhgXww15wKcyWDmaakJsFyTWmnmwZIHl1AY7WooJbpGLhyOjmU%2BMsepqrRpVaVS5TcNikGgxmH2dznPP%2BpJ57FFNfoP31ksRM6xzUNODutgnerL8BkNekdHNZ%2FAfFilLKiEg5%2FopdLF5MIP99tzYssjwzVfn4UlMgkI%2BoUodVrpn6U7KN4YpQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a407ac735da3b509-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 2583\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2583,"size_decoded":3458,"mime_type":"image/png","magic":"PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced","md5":"c4ce54825b90a5e29f1d01212a5cfbb4","sha1":"080e35b85dd4b25898a2aec6943af4404905854c","sha256":"7385e03ff8f0f4bfc47db8935a39e57e1d2b19d02e7a1510dc6458a79e4e48ac","sha512":"33864c6e123dd07391eed83ef825411c140523c94c56b347215c35253276f9174c4fccb07412b6fe34ecf888a7e088051e8fea9ef8e2c7f0cf2035bf4eef4694","ssdeep":"","tlshash":"41511a5f6e8e7ce3d2c4801e860d914b317912c5bb1eb55bd988c760af22e6d9e248f1","first_seen":"2026-06-11T07:30:29.705894Z","last_seen":"2026-09-25T06:10:52.684733Z","times_seen":44,"resource_available":false,"data":null}},"time_used":368,"timings":{"blocked":-1,"dns":6,"connect":1,"send":0,"wait":333,"receive":0,"ssl":26},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"aa5xkwqvefm3tszfisosqh6wdakhahxso3jyl5d5wsibuczex6ma.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"aa5xkwqvefm3tszfisosqh6wdakhahxso3jyl5d5wsibuczex6ma.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"aa5xkwqvefm3tszfisosqh6wdakhahxso3jyl5d5wsibuczex6ma.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kezjuikcsaiyqvsd2w32dhijntrtnjkh4vwendcd35dw34hhszna.mainnet-1.datasprite-cdn.com/6Txn2Htb2ZZS6c5kQnF6q6P8YraMrEyZwCs1fuJs85ku/","fqdn":"kezjuikcsaiyqvsd2w32dhijntrtnjkh4vwendcd35dw34hhszna.mainnet-1.datasprite-cdn.com","domain":"datasprite-cdn.com","tld":"com"},"ip":{"addr":"104.21.15.158","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://firelight.run/","date":"2026-09-25T05:36:51.737Z","timestamp":1790314611737,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"datasprite-cdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 01 Sep 2026 16:12:35 GMT","end":"Mon, 30 Nov 2026 17:12:28 GMT"},"fingerprint":{"sha1":"A7:49:1F:BA:09:CF:9C:E9:55:85:E1:3E:6A:46:2B:56:1A:DD:E7:32","sha256":"57:8A:D0:59:59:01:19:C2:80:F0:3E:E8:83:04:E6:8C:0B:A5:94:44:42:21:A0:F5:48:2D:7F:8D:19:15:08:52"}}},"request":{"raw":"GET /6Txn2Htb2ZZS6c5kQnF6q6P8YraMrEyZwCs1fuJs85ku/ HTTP/1.1\r\nHost: kezjuikcsaiyqvsd2w32dhijntrtnjkh4vwendcd35dw34hhszna.mainnet-1.datasprite-cdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://firelight.run/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 25 Sep 2026 05:36:52 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\npriority: u=5,i\r\nvary: Origin\r\nx-irys-item-id: 6Txn2Htb2ZZS6c5kQnF6q6P8YraMrEyZwCs1fuJs85ku\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-content-type: image/webp\r\nx-content-length: 1036\r\ncache-control: max-age=2592000\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=d3ux9w8Y7J2PSTfgh%2BuU1mZTWwYijNvx%2Bu%2BtweOTiPGU4uQptmogy%2Fpi%2FPVZ63DmxJ6vzegKbaX04eg2Q68pA7maanr%2BnLuF9GnnQVNfxL9zm015zkgm%2BMeWBGOg%2F8gO7Y6CFXUuvOY5k2cYHjb9Q58rP3DSWOddDvpP4B44xHpxLcME1I1N6LKdO%2BM6IcE3qX02uj942eXO2SR5ud1NS8yftsk%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a407ac746dbbb509-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1036\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1036,"size_decoded":1922,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 120x120, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"92030d96c1392aa396821eed37e18820","sha1":"e6f1203de3f4bb6673a687e11bcfc904c575f54e","sha256":"99d1969405be9e05042fbcdff942b23117f1cb439fef2e1f0d55e0b55667fb79","sha512":"c91e71d3148ebe6dbc6fd9da525cc781da7137f103b0964e53374a7be46720093e220b9db3f05063966c8a171de33c2a31575f2657918ed8c96395fc77d7b832","ssdeep":"","tlshash":"bb11a8e611570b07e38dfb82516c871194fcb31a645a48fb6e5131ac567e705464135d","first_seen":"2025-10-03T06:22:13.525754Z","last_seen":"2026-09-25T06:10:52.674002Z","times_seen":3947,"resource_available":false,"data":null}},"time_used":366,"timings":{"blocked":71,"dns":122,"connect":0,"send":0,"wait":173,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"kezjuikcsaiyqvsd2w32dhijntrtnjkh4vwendcd35dw34hhszna.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"kezjuikcsaiyqvsd2w32dhijntrtnjkh4vwendcd35dw34hhszna.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"kezjuikcsaiyqvsd2w32dhijntrtnjkh4vwendcd35dw34hhszna.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nr37cg543n2zbiykifsgbtzl3tuysa2xn3ymy57xhyrvm3g2j2nq.mainnet-1.datasprite-cdn.com/8JR7J4bybYjEWs8Ep7tqRFEpqwftdhxQghx2a5EQUaCr/","fqdn":"nr37cg543n2zbiykifsgbtzl3tuysa2xn3ymy57xhyrvm3g2j2nq.mainnet-1.datasprite-cdn.com","domain":"datasprite-cdn.com","tld":"com"},"ip":{"addr":"104.21.15.158","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://firelight.run/","date":"2026-09-25T05:36:51.772Z","timestamp":1790314611772,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"datasprite-cdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 01 Sep 2026 16:12:35 GMT","end":"Mon, 30 Nov 2026 17:12:28 GMT"},"fingerprint":{"sha1":"A7:49:1F:BA:09:CF:9C:E9:55:85:E1:3E:6A:46:2B:56:1A:DD:E7:32","sha256":"57:8A:D0:59:59:01:19:C2:80:F0:3E:E8:83:04:E6:8C:0B:A5:94:44:42:21:A0:F5:48:2D:7F:8D:19:15:08:52"}}},"request":{"raw":"GET /8JR7J4bybYjEWs8Ep7tqRFEpqwftdhxQghx2a5EQUaCr/ HTTP/1.1\r\nHost: nr37cg543n2zbiykifsgbtzl3tuysa2xn3ymy57xhyrvm3g2j2nq.mainnet-1.datasprite-cdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://firelight.run/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 25 Sep 2026 05:36:52 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1274\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin\r\nx-irys-item-id: 8JR7J4bybYjEWs8Ep7tqRFEpqwftdhxQghx2a5EQUaCr\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-content-type: image/webp\r\nx-content-length: 1274\r\ncache-control: max-age=2592000\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LDsO%2BNDpMjgbjh9e4f2dD%2BUWkwBtiSpqulSe26t1oxftXl1hPhGfOIgT7Jl2UceXfXfXfwzu6sy%2FRRbtGEkk6ZeeCNv1rvHYLNikFm0Xxe5Enpy272guMW0lrzKYMP2cMtbQad7aqKMxGDJpJt2gtAHsIFfLq1Z4FUOI8A4IDwLWWNatKcLsML0ZNxiDVgWy8rF6s%2BW8D3qhPVnuMZiyDHYh%2Bkc%3D\"}]}\r\ncf-ray: a407ac74ae9ec759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1274,"size_decoded":2130,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 120x120, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"2fd3d6ecc45cae27fa8a4e224a23c9f7","sha1":"642381761938ca6dffdb32b5481b4c2d1febe170","sha256":"7e3218626833037cb46dbd0ca48b141b6c084c5c94f11e7b7cf6b2450dbece44","sha512":"18b82655a881b6fe7b49deb081b0336700292a008ee1a57caaa0bf12dbedaa3b67d2dec0b9892b308f5b5704e02b66a760bc7bc29e2664a8373f6b9d3a97f372","ssdeep":"","tlshash":"312117918faa8042edb47a42ff3288907a0290252d6c1b5a34a038bef80874b59ffc10","first_seen":"2026-02-10T08:05:59.35261Z","last_seen":"2026-09-25T06:10:52.655609Z","times_seen":54,"resource_available":false,"data":null}},"time_used":492,"timings":{"blocked":97,"dns":4,"connect":4,"send":0,"wait":307,"receive":0,"ssl":67},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"nr37cg543n2zbiykifsgbtzl3tuysa2xn3ymy57xhyrvm3g2j2nq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"nr37cg543n2zbiykifsgbtzl3tuysa2xn3ymy57xhyrvm3g2j2nq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"nr37cg543n2zbiykifsgbtzl3tuysa2xn3ymy57xhyrvm3g2j2nq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"firelight.run/b6ad9e40c45ed5117f4040e65f8c652bb40135fd.svg","fqdn":"firelight.run","domain":"firelight.run","tld":"run"},"ip":{"addr":"104.21.13.148","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://firelight.run/","date":"2026-09-25T05:36:49.847Z","timestamp":1790314609847,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"firelight.run","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 24 Sep 2026 11:54:24 GMT","end":"Wed, 23 Dec 2026 11:54:23 GMT"},"fingerprint":{"sha1":"02:54:09:B5:1A:C4:80:FE:25:D5:90:D5:C2:96:72:47:EA:08:E4:AE","sha256":"3B:A7:9F:77:5F:07:1D:DF:C1:4E:DC:82:26:78:98:F9:C7:9C:E6:6F:08:FA:7C:0D:00:C0:A7:B5:72:83:E1:45"}}},"request":{"raw":"GET /b6ad9e40c45ed5117f4040e65f8c652bb40135fd.svg HTTP/1.1\r\nHost: firelight.run\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://firelight.run/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 25 Sep 2026 05:36:49 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vShxHKTQuQf%2B8XOgnJQ65V0%2BPDwGAbKgS%2BSvCX0AOVtDKJFVjGSXGPUt3CoFHP1z1cTYj%2BZuVfmeLBCfjcx4eU6M4bRFGZaj8RobbSfWoF78glcjYNcwYTkaRCaOB0XJ\"}]}\r\nlast-modified: Tue, 21 Apr 2026 11:39:44 GMT\r\npriority: u=4,i\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"69e76200-411\"\r\nage: 3\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a407ac678e4e2efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1041,"size_decoded":1258,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"d29271f69bf5a5cce9b99cad01619a31","sha1":"b6ad9e40c45ed5117f4040e65f8c652bb40135fd","sha256":"84d8f03e0016bfc7b24a243733e74f211aa5e2c3d6423746e0ed93bca660852a","sha512":"564d71caca9c28b10400e0d2eb39a242da88996d6d0f3ebe567c01d5e6824e01432920cb008db0abe44a7e38f2f69b0b8e546c448600432e05d76f2ea24f1eb4","ssdeep":"","tlshash":"3511affe4bb95bf0495e8bbaf932118cba06fc352bd459cec14d5d469091ce8e582801","first_seen":"2026-04-24T15:23:09.436872Z","last_seen":"2026-09-25T05:38:01.293456Z","times_seen":18,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"firelight.run","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"firelight.run","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-25","alert":"Phishing Block","trigger":"firelight.run","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gateway.irys.xyz/ErFp6xHQkocPcwKe4eVa6afbKPpCdjzp1bvBARDXwsuc","fqdn":"gateway.irys.xyz","domain":"irys.xyz","tld":"xyz"},"ip":{"addr":"172.66.167.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://firelight.run/","date":"2026-09-25T05:36:51.321Z","timestamp":1790314611321,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gateway.irys.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 20 Sep 2026 11:49:06 GMT","end":"Sat, 19 Dec 2026 11:49:05 GMT"},"fingerprint":{"sha1":"1B:75:8F:42:C3:0D:D3:04:72:4A:4F:BC:B0:44:35:11:BD:B0:C1:3A","sha256":"5D:7C:E7:8F:C7:B7:35:6E:0D:92:E6:E6:6C:71:F4:0D:D9:DE:7D:74:E5:56:33:7F:8D:2C:15:B1:80:E9:5D:E0"}}},"request":{"raw":"GET /ErFp6xHQkocPcwKe4eVa6afbKPpCdjzp1bvBARDXwsuc HTTP/1.1\r\nHost: gateway.irys.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://firelight.run/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 \r\ndate: Fri, 25 Sep 2026 05:36:51 GMT\r\ncontent-length: 0\r\nlocation: https://zxdcgrwdlct5d5hkzf5ikt35hpxjgyetcpfzrvlhwzw2f6fnevbq.mainnet-1.datasprite-cdn.com/ErFp6xHQkocPcwKe4eVa6afbKPpCdjzp1bvBARDXwsuc/\r\nserver: cloudflare\r\naccess-control-expose-headers: cache-control, location\r\naccess-control-allow-credentials: true\r\ncache-control: no-store\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nx-cache-status: BYPASS\r\ncf-cache-status: BYPASS\r\ncf-ray: a407ac710dbd5687-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/webp","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-25T12:27:37.283953Z","times_seen":18651356,"resource_available":true,"data":null}},"time_used":154,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":154,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gateway.irys.xyz/2DGBFeacTMVeEKeuYdJgdXZMjMhUFdxygmQLNcvBR3iu","fqdn":"gateway.irys.xyz","domain":"irys.xyz","tld":"xyz"},"ip":{"addr":"172.66.167.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://firelight.run/","date":"2026-09-25T05:36:51.323Z","timestamp":1790314611323,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gateway.irys.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 20 Sep 2026 11:49:06 GMT","end":"Sat, 19 Dec 2026 11:49:05 GMT"},"fingerprint":{"sha1":"1B:75:8F:42:C3:0D:D3:04:72:4A:4F:BC:B0:44:35:11:BD:B0:C1:3A","sha256":"5D:7C:E7:8F:C7:B7:35:6E:0D:92:E6:E6:6C:71:F4:0D:D9:DE:7D:74:E5:56:33:7F:8D:2C:15:B1:80:E9:5D:E0"}}},"request":{"raw":"GET /2DGBFeacTMVeEKeuYdJgdXZMjMhUFdxygmQLNcvBR3iu HTTP/1.1\r\nHost: gateway.irys.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://firelight.run/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 \r\ndate: Fri, 25 Sep 2026 05:36:51 GMT\r\ncontent-length: 0\r\nlocation: https://ch75ckxualkloc7t5fsfem56e5odt55sl7lel66ksibigpvzxsda.mainnet-1.datasprite-cdn.com/2DGBFeacTMVeEKeuYdJgdXZMjMhUFdxygmQLNcvBR3iu/\r\nserver: cloudflare\r\ncache-control: no-store\r\naccess-control-expose-headers: location, cache-control\r\naccess-control-allow-credentials: true\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nx-cache-status: BYPASS\r\ncf-cache-status: BYPASS\r\ncf-ray: a407ac710dc05687-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/webp","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-25T12:27:37.283953Z","times_seen":18651356,"resource_available":true,"data":null}},"time_used":163,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":163,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gateway.irys.xyz/GUcEiBVePo1UyG8J3tBaNDDHn3k2isozZHErCoS64QLf","fqdn":"gateway.irys.xyz","domain":"irys.xyz","tld":"xyz"},"ip":{"addr":"172.66.167.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://firelight.run/","date":"2026-09-25T05:36:51.360Z","timestamp":1790314611360,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gateway.irys.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 20 Sep 2026 11:49:06 GMT","end":"Sat, 19 Dec 2026 11:49:05 GMT"},"fingerprint":{"sha1":"1B:75:8F:42:C3:0D:D3:04:72:4A:4F:BC:B0:44:35:11:BD:B0:C1:3A","sha256":"5D:7C:E7:8F:C7:B7:35:6E:0D:92:E6:E6:6C:71:F4:0D:D9:DE:7D:74:E5:56:33:7F:8D:2C:15:B1:80:E9:5D:E0"}}},"request":{"raw":"GET /GUcEiBVePo1UyG8J3tBaNDDHn3k2isozZHErCoS64QLf HTTP/1.1\r\nHost: gateway.irys.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://firelight.run/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 \r\ndate: Fri, 25 Sep 2026 05:36:51 GMT\r\ncontent-length: 0\r\nlocation: https://4xy5hycubobxyykm63sfnbkjznatsbung7ttetuoehkqf7ozquma.mainnet-1.datasprite-cdn.com/GUcEiBVePo1UyG8J3tBaNDDHn3k2isozZHErCoS64QLf/\r\nserver: cloudflare\r\naccess-control-allow-credentials: true\r\ncache-control: no-store\r\naccess-control-expose-headers: cache-control, location\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nx-cache-status: BYPASS\r\ncf-cache-status: BYPASS\r\ncf-ray: a407ac711ddc5687-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/webp","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-25T12:27:37.283953Z","times_seen":18651356,"resource_available":true,"data":null}},"time_used":158,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":158,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"l2kourp7xt2ar7nw3fpgqmxu3mvfli4qxvsvx3cacditkaifq6rq.mainnet-1.datasprite-cdn.com/7ND2SiYwsfvAPwL9K4ZdpbAi3iABc5jpoJqvVdppHRsY/","fqdn":"l2kourp7xt2ar7nw3fpgqmxu3mvfli4qxvsvx3cacditkaifq6rq.mainnet-1.datasprite-cdn.com","domain":"datasprite-cdn.com","tld":"com"},"ip":{"addr":"104.21.15.158","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://firelight.run/","date":"2026-09-25T05:36:51.775Z","timestamp":1790314611775,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"datasprite-cdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 01 Sep 2026 16:12:35 GMT","end":"Mon, 30 Nov 2026 17:12:28 GMT"},"fingerprint":{"sha1":"A7:49:1F:BA:09:CF:9C:E9:55:85:E1:3E:6A:46:2B:56:1A:DD:E7:32","sha256":"57:8A:D0:59:59:01:19:C2:80:F0:3E:E8:83:04:E6:8C:0B:A5:94:44:42:21:A0:F5:48:2D:7F:8D:19:15:08:52"}}},"request":{"raw":"GET /7ND2SiYwsfvAPwL9K4ZdpbAi3iABc5jpoJqvVdppHRsY/ HTTP/1.1\r\nHost: l2kourp7xt2ar7nw3fpgqmxu3mvfli4qxvsvx3cacditkaifq6rq.mainnet-1.datasprite-cdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://firelight.run/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 25 Sep 2026 05:36:52 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\npriority: u=5,i\r\nvary: Origin\r\nx-irys-item-id: 7ND2SiYwsfvAPwL9K4ZdpbAi3iABc5jpoJqvVdppHRsY\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-content-type: image/webp\r\nx-content-length: 1884\r\ncache-control: max-age=2592000\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VF6t%2FEv%2Fov%2F4GFh%2F0%2BRbII83dNnsN0Q3qDIXQ4%2FQQ7EBhCLU9SgOIocgRlkpcTj%2BwUHZtRMVj2aSqOzCQxId%2F8lAO2fjVoYGAQaR9X4Umi6yXWnxvl8NEUZUu1c3NNeB9i2%2BQgdUi0DCuhczQhchUmADr1lHzsM7VCcbmhu1H7G%2FWXMFb9aWJ4X3pxTFggbHpdpU0kAf8PHPfFHeB1QleQXAjGc%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a407ac74edc3b509-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1884\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1884,"size_decoded":2772,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"cafb298fb3c0ce00dd7cd5ecca87af68","sha1":"c73e7b60042b7fb99394c310037f67df6dbdd3e5","sha256":"8316053d504f8c45143eb6feba6161e5495c8c9d148e2f2654b86ffa765cb6dd","sha512":"a374cb45c93127f3d684c19a92d091ff2fb8ea7eff3747e7ff8f539bb8fdbf0da7fb661209aee6bd9b4cde900540d29de27f2de40705add77599e730f3c0126d","ssdeep":"","tlshash":"9b41fba0c83200f74f7b7a3594501b64ec5a2705cd28ee6c8be9f5203527cd7f26789a","first_seen":"2026-06-11T07:30:29.757651Z","last_seen":"2026-09-25T06:10:52.65624Z","times_seen":48,"resource_available":false,"data":null}},"time_used":318,"timings":{"blocked":141,"dns":3,"connect":0,"send":0,"wait":174,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"l2kourp7xt2ar7nw3fpgqmxu3mvfli4qxvsvx3cacditkaifq6rq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"l2kourp7xt2ar7nw3fpgqmxu3mvfli4qxvsvx3cacditkaifq6rq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"l2kourp7xt2ar7nw3fpgqmxu3mvfli4qxvsvx3cacditkaifq6rq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gateway.irys.xyz/5M61R7ETnvpQLgBp7a6DRVWm759u5Ls8PB1FWJv52rx1","fqdn":"gateway.irys.xyz","domain":"irys.xyz","tld":"xyz"},"ip":{"addr":"172.66.167.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://firelight.run/","date":"2026-09-25T05:36:51.311Z","timestamp":1790314611311,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gateway.irys.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 20 Sep 2026 11:49:06 GMT","end":"Sat, 19 Dec 2026 11:49:05 GMT"},"fingerprint":{"sha1":"1B:75:8F:42:C3:0D:D3:04:72:4A:4F:BC:B0:44:35:11:BD:B0:C1:3A","sha256":"5D:7C:E7:8F:C7:B7:35:6E:0D:92:E6:E6:6C:71:F4:0D:D9:DE:7D:74:E5:56:33:7F:8D:2C:15:B1:80:E9:5D:E0"}}},"request":{"raw":"GET /5M61R7ETnvpQLgBp7a6DRVWm759u5Ls8PB1FWJv52rx1 HTTP/1.1\r\nHost: gateway.irys.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://firelight.run/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 \r\ndate: Fri, 25 Sep 2026 05:36:51 GMT\r\ncontent-length: 0\r\nlocation: https://ickanb5psbhquhnys6hyxxn5kcs7k75kvqwlajid5qycvq2ijgra.mainnet-1.datasprite-cdn.com/5M61R7ETnvpQLgBp7a6DRVWm759u5Ls8PB1FWJv52rx1/\r\nserver: cloudflare\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-credentials: true\r\ncache-control: no-store\r\naccess-control-expose-headers: cache-control, location\r\nx-cache-status: BYPASS\r\ncf-cache-status: BYPASS\r\ncf-ray: a407ac710daf5687-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/webp","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-25T12:27:37.283953Z","times_seen":18651356,"resource_available":true,"data":null}},"time_used":177,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":177,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gateway.irys.xyz/HBj8Z3AkcCFxM5BdpG2ciRACVipaCQnwJ8QboBwkHgX5","fqdn":"gateway.irys.xyz","domain":"irys.xyz","tld":"xyz"},"ip":{"addr":"172.66.167.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://firelight.run/","date":"2026-09-25T05:36:51.320Z","timestamp":1790314611320,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gateway.irys.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 20 Sep 2026 11:49:06 GMT","end":"Sat, 19 Dec 2026 11:49:05 GMT"},"fingerprint":{"sha1":"1B:75:8F:42:C3:0D:D3:04:72:4A:4F:BC:B0:44:35:11:BD:B0:C1:3A","sha256":"5D:7C:E7:8F:C7:B7:35:6E:0D:92:E6:E6:6C:71:F4:0D:D9:DE:7D:74:E5:56:33:7F:8D:2C:15:B1:80:E9:5D:E0"}}},"request":{"raw":"GET /HBj8Z3AkcCFxM5BdpG2ciRACVipaCQnwJ8QboBwkHgX5 HTTP/1.1\r\nHost: gateway.irys.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://firelight.run/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 \r\ndate: Fri, 25 Sep 2026 05:36:51 GMT\r\ncontent-length: 0\r\nlocation: https://6b5g7comjyz3c4cgalgs5qvnmcfq4arqkx6d2np6kdxclsrmnc6a.mainnet-1.datasprite-cdn.com/HBj8Z3AkcCFxM5BdpG2ciRACVipaCQnwJ8QboBwkHgX5/\r\nserver: cloudflare\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\ncache-control: no-store\r\naccess-control-allow-credentials: true\r\naccess-control-expose-headers: location, cache-control\r\nx-cache-status: BYPASS\r\ncf-cache-status: BYPASS\r\ncf-ray: a407ac710dbc5687-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/webp","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-25T12:27:37.283953Z","times_seen":18651356,"resource_available":true,"data":null}},"time_used":174,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":174,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fynfue6gizxdkcyib7qzqxl6yplic3utnguuvmr3vhltij4lrsha.mainnet-1.datasprite-cdn.com/46y4UEUG6a2zPWBDoDstJ7Efqgc3hqxYUwUgUHuAByem/","fqdn":"fynfue6gizxdkcyib7qzqxl6yplic3utnguuvmr3vhltij4lrsha.mainnet-1.datasprite-cdn.com","domain":"datasprite-cdn.com","tld":"com"},"ip":{"addr":"104.21.15.158","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://firelight.run/","date":"2026-09-25T05:36:51.774Z","timestamp":1790314611774,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"datasprite-cdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 01 Sep 2026 16:12:35 GMT","end":"Mon, 30 Nov 2026 17:12:28 GMT"},"fingerprint":{"sha1":"A7:49:1F:BA:09:CF:9C:E9:55:85:E1:3E:6A:46:2B:56:1A:DD:E7:32","sha256":"57:8A:D0:59:59:01:19:C2:80:F0:3E:E8:83:04:E6:8C:0B:A5:94:44:42:21:A0:F5:48:2D:7F:8D:19:15:08:52"}}},"request":{"raw":"GET /46y4UEUG6a2zPWBDoDstJ7Efqgc3hqxYUwUgUHuAByem/ HTTP/1.1\r\nHost: fynfue6gizxdkcyib7qzqxl6yplic3utnguuvmr3vhltij4lrsha.mainnet-1.datasprite-cdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://firelight.run/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 25 Sep 2026 05:36:52 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\npriority: u=5,i\r\nvary: Origin\r\nx-irys-item-id: 46y4UEUG6a2zPWBDoDstJ7Efqgc3hqxYUwUgUHuAByem\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-content-type: image/webp\r\nx-content-length: 1412\r\ncache-control: max-age=2592000\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1to74wZDbAK7f7BrsQCFrzaD50%2FMSmm3RaxN10r5RVxzvvD9TchGI1QMImds8goi8X9%2B%2Fd3BRDT6cBiIQTlG6yOlXy88HC%2B3eQi%2BbnoY9YtJSAd0RxgOQJWvQnfyXk1ugZHxpLVDjm33FX%2FqtnrYyuGm2jXpgchOO6HJbNJjSHoKdYurl5URDPtl1NEnBSnHj9Vzint9BQieitBOEp%2F4GZJW3F0%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a407ac73cdaeb509-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1412\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1412,"size_decoded":2294,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 120x120, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"247b0e4d7c011a68e72b467bff4fe134","sha1":"c17df0ed13075661ebda9c66012b7cae88148e13","sha256":"0331d87e5eb10f506878366f6ca1cf253bca579df404e5e064096f610fc9ff3a","sha512":"b23e11b3c12778fe8f559140a7ce257a557c673ceaa662fa188d08699f3b601edf4e873426359f09d09c36b80f58c2c3e76b936cd5e12fcddb3b21c0bfa872cc","ssdeep":"","tlshash":"c621e91fe353580b23b49dcb6d1a3e53bf00686d3973a2861c476862e93140c1868348","first_seen":"2025-03-05T19:21:16.067466Z","last_seen":"2026-09-25T06:10:52.675582Z","times_seen":149,"resource_available":false,"data":null}},"time_used":319,"timings":{"blocked":-1,"dns":6,"connect":0,"send":0,"wait":313,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"fynfue6gizxdkcyib7qzqxl6yplic3utnguuvmr3vhltij4lrsha.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"fynfue6gizxdkcyib7qzqxl6yplic3utnguuvmr3vhltij4lrsha.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"fynfue6gizxdkcyib7qzqxl6yplic3utnguuvmr3vhltij4lrsha.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"5jrjgp2nl37gpefz75hgo6idl2q2frezh2ewvezllzssodeldc3a.mainnet-1.datasprite-cdn.com/GmwajjdnKm9Mst1txGwAqi6bxVzqhg6ysJGdzGgPF6uB/","fqdn":"5jrjgp2nl37gpefz75hgo6idl2q2frezh2ewvezllzssodeldc3a.mainnet-1.datasprite-cdn.com","domain":"datasprite-cdn.com","tld":"com"},"ip":{"addr":"172.67.163.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://firelight.run/","date":"2026-09-25T05:36:51.828Z","timestamp":1790314611828,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"datasprite-cdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 01 Sep 2026 16:12:35 GMT","end":"Mon, 30 Nov 2026 17:12:28 GMT"},"fingerprint":{"sha1":"A7:49:1F:BA:09:CF:9C:E9:55:85:E1:3E:6A:46:2B:56:1A:DD:E7:32","sha256":"57:8A:D0:59:59:01:19:C2:80:F0:3E:E8:83:04:E6:8C:0B:A5:94:44:42:21:A0:F5:48:2D:7F:8D:19:15:08:52"}}},"request":{"raw":"GET /GmwajjdnKm9Mst1txGwAqi6bxVzqhg6ysJGdzGgPF6uB/ HTTP/1.1\r\nHost: 5jrjgp2nl37gpefz75hgo6idl2q2frezh2ewvezllzssodeldc3a.mainnet-1.datasprite-cdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://firelight.run/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 25 Sep 2026 05:36:52 GMT\r\ncontent-type: image/png\r\ncontent-length: 142171\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin\r\nx-irys-item-id: GmwajjdnKm9Mst1txGwAqi6bxVzqhg6ysJGdzGgPF6uB\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-content-type: image/png\r\nx-content-length: 142171\r\ncache-control: max-age=2592000\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ySF4Zg6QiO130UDuYZBt%2BfvEtnHRu6TVaKmFCRPhAHVtj7WUvh0HRIb3fsexYH5eaczOSRXJWFT6Gg9%2FxBAQyygbKJk8ZJt7%2BNdD518pT7ct2JySjViRNPaxBUUjmiO2jLHg3sqP1D9vQbvItuHu3wLrIoTs1z4Sa5QB7gaJZlvc8jKykTLnQHlB0GB9zgbYWbfBnjJFK9DQqw4g0Vl1NU%2F5%2B3s%3D\"}]}\r\ncf-ray: a407ac759ec7120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":142171,"size_decoded":143029,"mime_type":"image/png","magic":"PNG image data, 800 x 776, 8-bit/color RGBA, non-interlaced","md5":"22b70ab1a57849b2d9229ea5f20e55c7","sha1":"06819da46a119a541dbda36e9a9eb47a68ee89a4","sha256":"b66c86f3a8fc126a563f582f85ec7e2bc36a4608d33b81e0777401114eed2818","sha512":"925f53ac647440f879a67709f1611dbc4e1b4173be31cee7014417417ed6225bba69c61862d6cd2a48ef04a2bf6abb6c723cfd387af6a975c681c512aab80c85","ssdeep":"3072:UOrY2fP7LgFIvLtU3JffWuVpnLQhvqTjv+6i++iJWUnhJIJ/d0RuYAS:UOrTHgoK38uVVLDn+nwnnIddrS","tlshash":"9dd3132ee8c062716d0d1b7e84c97c73050aedd7636aef3d4e3054eab9348923ba5547","first_seen":"2026-04-17T17:57:05.28014Z","last_seen":"2026-09-25T06:10:52.701484Z","times_seen":69,"resource_available":false,"data":null}},"time_used":792,"timings":{"blocked":232,"dns":0,"connect":0,"send":0,"wait":183,"receive":377,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"5jrjgp2nl37gpefz75hgo6idl2q2frezh2ewvezllzssodeldc3a.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"5jrjgp2nl37gpefz75hgo6idl2q2frezh2ewvezllzssodeldc3a.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"5jrjgp2nl37gpefz75hgo6idl2q2frezh2ewvezllzssodeldc3a.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"firelight.run/FbRzuHg3Dl9qrQsGHegXsQJMVU.woff2","fqdn":"firelight.run","domain":"firelight.run","tld":"run"},"ip":{"addr":"104.21.13.148","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://firelight.run/","date":"2026-09-25T05:36:49.927Z","timestamp":1790314609927,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"firelight.run","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 24 Sep 2026 11:54:24 GMT","end":"Wed, 23 Dec 2026 11:54:23 GMT"},"fingerprint":{"sha1":"02:54:09:B5:1A:C4:80:FE:25:D5:90:D5:C2:96:72:47:EA:08:E4:AE","sha256":"3B:A7:9F:77:5F:07:1D:DF:C1:4E:DC:82:26:78:98:F9:C7:9C:E6:6F:08:FA:7C:0D:00:C0:A7:B5:72:83:E1:45"}}},"request":{"raw":"GET /FbRzuHg3Dl9qrQsGHegXsQJMVU.woff2 HTTP/1.1\r\nHost: firelight.run\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://firelight.run/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 25 Sep 2026 05:36:49 GMT\r\ncontent-type: font/woff2\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 21 Apr 2026 11:39:44 GMT\r\npriority: u=3,i=?0\r\netag: \"69e76200-14d4\"\r\naccept-ranges: bytes\r\nage: 3\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xDH9cdQ189kLI7Lcr2zb%2B5klOAkAaXr8kVQWqCaBXpBuvuqKp3Ssn%2B4V1ar2S4N4LsNeUIVAnLnSPbTsNAx6g%2FDDM%2FkqWMV2nvS2t4GyI1rcw%2BndgR4xNjC3x8NzQhf0\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a407ac680e6f2efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 5332\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5332,"size_decoded":6029,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), CFF, length 5332, version 1.0","md5":"115dc5b24361b570908f74beeb867280","sha1":"15b473b878370e5f6aad0b061defe05ec4093155","sha256":"d39f873f016a48c20bedfca5c6cfd69acde4076069c4a866764cda95e08d59d3","sha512":"1d560800fefa03170659d46bcbd53b6f7316b11ac105f971f122dd82185aed3781b8e626b43527b20e5adda7e62245b093f3342b68ff0a8cd3cc7c23006ca038","ssdeep":"96:saZE6k9dCffoOPCI4LvmVt3NvfBeClG7V9t5TH065jfiNVC2o7e0vQvI1z2lbsU:s06goOqDgJTVI/tdU61qNRo7e0viPH","tlshash":"91b18d04c425a51ff6594876b4a65df38ba12959c404a3cf3d0987ce92fa22883e9ba1","first_seen":"2026-02-16T14:56:50.16867Z","last_seen":"2026-09-25T05:38:01.277775Z","times_seen":25,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"firelight.run","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"firelight.run","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-25","alert":"Phishing Block","trigger":"firelight.run","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"arb1.arbitrum.io/rpc","fqdn":"arb1.arbitrum.io","domain":"arbitrum.io","tld":"io"},"ip":{"addr":"172.66.171.45","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://firelight.run/","date":"2026-09-25T05:36:50.385Z","timestamp":1790314610385,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"arbitrum.io","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 31 Aug 2026 14:06:40 GMT","end":"Sun, 29 Nov 2026 14:06:39 GMT"},"fingerprint":{"sha1":"2E:54:50:59:0F:7E:56:CE:77:95:05:FA:A3:BB:06:E3:41:72:5F:2C","sha256":"8E:29:DE:F8:49:2E:C5:53:C1:DF:97:71:F7:FC:7B:49:B2:AF:01:67:17:63:F8:F8:82:10:8E:7A:A8:9D:B2:ED"}}},"request":{"raw":"POST /rpc HTTP/1.1\r\nHost: arb1.arbitrum.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://firelight.run/\r\nContent-Type: application/json\r\nContent-Length: 136\r\nOrigin: https://firelight.run\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":136,"data":"{\"jsonrpc\":\"2.0\",\"method\":\"eth_call\",\"params\":[{\"to\":\"0x967530969F5e5c94E0dC7247e9355e62e0ED65B2\",\"data\":\"0x3bc5de30\"},\"latest\"],\"id\":1}"}},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 25 Sep 2026 05:36:50 GMT\r\ncontent-type: application/json\r\ncontent-length: 204\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nvary: Origin, accept-encoding\r\nx-envoy-upstream-service-time: 2\r\ncache-control: no-cache\r\nserver: cloudflare\r\ncf-cache-status: DYNAMIC\r\ncf-ray: a407ac6becb85a0f-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":423,"size_decoded":551,"mime_type":"application/json","magic":"JSON text data","md5":"4ace8e5249d7ec0c7ee3dd3be637a6a3","sha1":"23f3281e1e454e2d79e67ef163810934874f1a7c","sha256":"71fb00a02e383bac36ddaa90a334053e7a11470a7234ab4c9a8a5694403e74be","sha512":"9228613e0464d17dd85e35930c5cb045b5fac1b48340cb5e1bf42ca5124b73cbab87be8964563c75f647de70d7ee67ca88d2b50a49ddb34dac601eb38cc15968","ssdeep":"","tlshash":"11e02bd0f9889c21e1c49f19b30079887a287b558dc40b83085c450a2aa9b19bf0ca85","first_seen":"2026-09-25T05:38:00.10265Z","last_seen":"2026-09-25T06:10:52.657073Z","times_seen":9,"resource_available":true,"data":null}},"time_used":130,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":130,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gateway.irys.xyz/GVqzNswLTwAnCD7CtTZw67VCMbChaqBxjezVsqQAqUzS","fqdn":"gateway.irys.xyz","domain":"irys.xyz","tld":"xyz"},"ip":{"addr":"172.66.167.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://firelight.run/","date":"2026-09-25T05:36:51.312Z","timestamp":1790314611312,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gateway.irys.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 20 Sep 2026 11:49:06 GMT","end":"Sat, 19 Dec 2026 11:49:05 GMT"},"fingerprint":{"sha1":"1B:75:8F:42:C3:0D:D3:04:72:4A:4F:BC:B0:44:35:11:BD:B0:C1:3A","sha256":"5D:7C:E7:8F:C7:B7:35:6E:0D:92:E6:E6:6C:71:F4:0D:D9:DE:7D:74:E5:56:33:7F:8D:2C:15:B1:80:E9:5D:E0"}}},"request":{"raw":"GET /GVqzNswLTwAnCD7CtTZw67VCMbChaqBxjezVsqQAqUzS HTTP/1.1\r\nHost: gateway.irys.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://firelight.run/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 \r\ndate: Fri, 25 Sep 2026 05:36:51 GMT\r\ncontent-length: 0\r\nlocation: https://4zbpk6lzsya26tazaje3yw7d6st53o23iriglps2sp2bnpqb6e7q.mainnet-1.datasprite-cdn.com/GVqzNswLTwAnCD7CtTZw67VCMbChaqBxjezVsqQAqUzS/\r\nserver: cloudflare\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-credentials: true\r\ncache-control: no-store\r\naccess-control-expose-headers: location, cache-control\r\nx-cache-status: BYPASS\r\ncf-cache-status: BYPASS\r\ncf-ray: a407ac710db15687-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/webp","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-25T12:27:37.283953Z","times_seen":18651356,"resource_available":true,"data":null}},"time_used":170,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":170,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gateway.irys.xyz/46y4UEUG6a2zPWBDoDstJ7Efqgc3hqxYUwUgUHuAByem","fqdn":"gateway.irys.xyz","domain":"irys.xyz","tld":"xyz"},"ip":{"addr":"172.66.167.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://firelight.run/","date":"2026-09-25T05:36:51.322Z","timestamp":1790314611322,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gateway.irys.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 20 Sep 2026 11:49:06 GMT","end":"Sat, 19 Dec 2026 11:49:05 GMT"},"fingerprint":{"sha1":"1B:75:8F:42:C3:0D:D3:04:72:4A:4F:BC:B0:44:35:11:BD:B0:C1:3A","sha256":"5D:7C:E7:8F:C7:B7:35:6E:0D:92:E6:E6:6C:71:F4:0D:D9:DE:7D:74:E5:56:33:7F:8D:2C:15:B1:80:E9:5D:E0"}}},"request":{"raw":"GET /46y4UEUG6a2zPWBDoDstJ7Efqgc3hqxYUwUgUHuAByem HTTP/1.1\r\nHost: gateway.irys.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://firelight.run/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 \r\ndate: Fri, 25 Sep 2026 05:36:51 GMT\r\ncontent-length: 0\r\nlocation: https://fynfue6gizxdkcyib7qzqxl6yplic3utnguuvmr3vhltij4lrsha.mainnet-1.datasprite-cdn.com/46y4UEUG6a2zPWBDoDstJ7Efqgc3hqxYUwUgUHuAByem/\r\nserver: cloudflare\r\ncache-control: no-store\r\naccess-control-expose-headers: location, cache-control\r\naccess-control-allow-credentials: true\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nx-cache-status: BYPASS\r\ncf-cache-status: BYPASS\r\ncf-ray: a407ac710dbf5687-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/webp","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-25T12:27:37.283953Z","times_seen":18651356,"resource_available":true,"data":null}},"time_used":169,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":169,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gateway.irys.xyz/FxfTrcshALLke9qQSKxpTpvZHc6wdnzk3EmjMb9bbith","fqdn":"gateway.irys.xyz","domain":"irys.xyz","tld":"xyz"},"ip":{"addr":"172.66.167.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://firelight.run/","date":"2026-09-25T05:36:51.346Z","timestamp":1790314611346,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gateway.irys.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 20 Sep 2026 11:49:06 GMT","end":"Sat, 19 Dec 2026 11:49:05 GMT"},"fingerprint":{"sha1":"1B:75:8F:42:C3:0D:D3:04:72:4A:4F:BC:B0:44:35:11:BD:B0:C1:3A","sha256":"5D:7C:E7:8F:C7:B7:35:6E:0D:92:E6:E6:6C:71:F4:0D:D9:DE:7D:74:E5:56:33:7F:8D:2C:15:B1:80:E9:5D:E0"}}},"request":{"raw":"GET /FxfTrcshALLke9qQSKxpTpvZHc6wdnzk3EmjMb9bbith HTTP/1.1\r\nHost: gateway.irys.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://firelight.run/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 \r\ndate: Fri, 25 Sep 2026 05:36:51 GMT\r\ncontent-length: 0\r\nlocation: https://3zda2p33cro63eoev6gcult7nzm6vegrll7kg6cknocqfq4tavva.mainnet-1.datasprite-cdn.com/FxfTrcshALLke9qQSKxpTpvZHc6wdnzk3EmjMb9bbith/\r\nserver: cloudflare\r\naccess-control-expose-headers: location, cache-control\r\ncache-control: no-store\r\naccess-control-allow-credentials: true\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nx-cache-status: BYPASS\r\ncf-cache-status: BYPASS\r\ncf-ray: a407ac711dce5687-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/webp","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-25T12:27:37.283953Z","times_seen":18651356,"resource_available":true,"data":null}},"time_used":170,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":170,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zunczd3cinnovpzh2w3sv4yyf4ycdzgcmlyvoo2eu3edqrvshgvq.mainnet-1.datasprite-cdn.com/Eodj8znQBik51BJNXiRTw1t2HXyv9p3LNhiNvsoMuDbg/","fqdn":"zunczd3cinnovpzh2w3sv4yyf4ycdzgcmlyvoo2eu3edqrvshgvq.mainnet-1.datasprite-cdn.com","domain":"datasprite-cdn.com","tld":"com"},"ip":{"addr":"104.21.15.158","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://firelight.run/","date":"2026-09-25T05:36:51.706Z","timestamp":1790314611706,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"datasprite-cdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 01 Sep 2026 16:12:35 GMT","end":"Mon, 30 Nov 2026 17:12:28 GMT"},"fingerprint":{"sha1":"A7:49:1F:BA:09:CF:9C:E9:55:85:E1:3E:6A:46:2B:56:1A:DD:E7:32","sha256":"57:8A:D0:59:59:01:19:C2:80:F0:3E:E8:83:04:E6:8C:0B:A5:94:44:42:21:A0:F5:48:2D:7F:8D:19:15:08:52"}}},"request":{"raw":"GET /Eodj8znQBik51BJNXiRTw1t2HXyv9p3LNhiNvsoMuDbg/ HTTP/1.1\r\nHost: zunczd3cinnovpzh2w3sv4yyf4ycdzgcmlyvoo2eu3edqrvshgvq.mainnet-1.datasprite-cdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://firelight.run/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 25 Sep 2026 05:36:51 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\npriority: u=5,i\r\nvary: Origin\r\nx-irys-item-id: Eodj8znQBik51BJNXiRTw1t2HXyv9p3LNhiNvsoMuDbg\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-content-type: image/webp\r\nx-content-length: 910\r\ncache-control: max-age=2592000\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lpOYUyBK2rt3lcxBW7t0afCE1eoyI2an5P25EEIfcf2cJ0WU5VBQsyIWIC3C0hRaVsn4OUxicbwbrqs1Qhb6Oz0ocaKHJWlKAhrX47QcoUmdXXlpWG9C0is8l4T9tsKQHNCXJIWEJjLkDY8A%2FCViAdEVAKRbCqU7LSpDnUOY91fsjHgdF3%2BnItyRpSw6fsW229%2BFeXqBiq4anur0pslMUEzy6rg%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a407ac738a6f4c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 910\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":910,"size_decoded":1782,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"75e06389f1522e8619d51b4aa5249049","sha1":"2be7ecc59449e73efea55ee6f7d1a7ecfe2cebc3","sha256":"8e352c8a9e65670d43fa8709cbde5535226746cc4d4777e07b251e117ca4aa95","sha512":"81767e30786a7529278208cb567b4d4438585fb0983d2bc74704570f01649903875897309a86f4114b569bf17288115813904fe1becc997adc5f6621242fa0fb","ssdeep":"","tlshash":"5611f7e348aacc3ddcbd98325416b475e603ed0802f55e0381202ee420da42697d3a8a","first_seen":"2024-06-14T00:48:21Z","last_seen":"2026-09-25T06:10:52.665334Z","times_seen":4343,"resource_available":false,"data":null}},"time_used":224,"timings":{"blocked":-1,"dns":2,"connect":36,"send":0,"wait":176,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"zunczd3cinnovpzh2w3sv4yyf4ycdzgcmlyvoo2eu3edqrvshgvq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"zunczd3cinnovpzh2w3sv4yyf4ycdzgcmlyvoo2eu3edqrvshgvq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"zunczd3cinnovpzh2w3sv4yyf4ycdzgcmlyvoo2eu3edqrvshgvq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"6b5g7comjyz3c4cgalgs5qvnmcfq4arqkx6d2np6kdxclsrmnc6a.mainnet-1.datasprite-cdn.com/HBj8Z3AkcCFxM5BdpG2ciRACVipaCQnwJ8QboBwkHgX5/","fqdn":"6b5g7comjyz3c4cgalgs5qvnmcfq4arqkx6d2np6kdxclsrmnc6a.mainnet-1.datasprite-cdn.com","domain":"datasprite-cdn.com","tld":"com"},"ip":{"addr":"104.21.15.158","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://firelight.run/","date":"2026-09-25T05:36:51.793Z","timestamp":1790314611793,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"datasprite-cdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 01 Sep 2026 16:12:35 GMT","end":"Mon, 30 Nov 2026 17:12:28 GMT"},"fingerprint":{"sha1":"A7:49:1F:BA:09:CF:9C:E9:55:85:E1:3E:6A:46:2B:56:1A:DD:E7:32","sha256":"57:8A:D0:59:59:01:19:C2:80:F0:3E:E8:83:04:E6:8C:0B:A5:94:44:42:21:A0:F5:48:2D:7F:8D:19:15:08:52"}}},"request":{"raw":"GET /HBj8Z3AkcCFxM5BdpG2ciRACVipaCQnwJ8QboBwkHgX5/ HTTP/1.1\r\nHost: 6b5g7comjyz3c4cgalgs5qvnmcfq4arqkx6d2np6kdxclsrmnc6a.mainnet-1.datasprite-cdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://firelight.run/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 25 Sep 2026 05:36:52 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\npriority: u=5,i\r\nvary: Origin\r\nx-irys-item-id: HBj8Z3AkcCFxM5BdpG2ciRACVipaCQnwJ8QboBwkHgX5\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-content-type: image/webp\r\nx-content-length: 742\r\ncache-control: max-age=2592000\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=j0qIq16Xx4loRuhYlTcY8sf%2FCFw9w7aIgvKrS1xJfaPQ%2FlHWAwxfOddk983HJeUKgSCy%2FZfAZ0CPtJ6hpSccJF%2Blu0fxn4oHyGBoj4khEUy9ja2YYA4U2zoeE7TRM5uoRTN55nlR1%2B0trhWbfmLmQI5mhYhMdce1846OIp2%2B%2F1VxPcqytkWSBEagdHTiOeK81fjwz7ujFu5j5%2FLrleDpfCvSi8Y%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a407ac73fdb2b509-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 742\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":742,"size_decoded":1624,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 120x120, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"e7d8fcb07ee9d18516b53caa0d64de17","sha1":"0e8e550c8987324229df62620b2583cb377ffdd6","sha256":"6dab8e56b28c5da96f44c1dbed1d2e22a904d9744624886c3eeff2bf201f124f","sha512":"135e619b84976c313b9ec58b69eecd9705813ae75cffff9d52ceaef7b943895a7db9e8df170b4d54b43d2444398e020244a7c39e922886265858a82afe94995b","ssdeep":"","tlshash":"f50165d81ff5c5b439ba0b89744366725a831d74fd38608b0431ca644efc86db5502ac","first_seen":"2024-06-14T10:37:34Z","last_seen":"2026-09-25T06:10:52.678205Z","times_seen":86,"resource_available":false,"data":null}},"time_used":213,"timings":{"blocked":-1,"dns":14,"connect":0,"send":0,"wait":199,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"6b5g7comjyz3c4cgalgs5qvnmcfq4arqkx6d2np6kdxclsrmnc6a.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"6b5g7comjyz3c4cgalgs5qvnmcfq4arqkx6d2np6kdxclsrmnc6a.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"6b5g7comjyz3c4cgalgs5qvnmcfq4arqkx6d2np6kdxclsrmnc6a.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"arbitrum-one.publicnode.com/","fqdn":"arbitrum-one.publicnode.com","domain":"publicnode.com","tld":"com"},"ip":{"addr":"172.66.150.162","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://firelight.run/","date":"2026-09-25T05:36:50.414Z","timestamp":1790314610414,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"publicnode.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 07 Aug 2026 02:01:04 GMT","end":"Thu, 05 Nov 2026 03:00:51 GMT"},"fingerprint":{"sha1":"94:5F:9F:32:64:19:A5:50:59:22:7E:16:22:E5:6B:9B:1C:65:F3:ED","sha256":"7D:67:31:E8:80:74:FB:3E:3C:A4:1B:9F:F0:BE:71:56:CE:95:31:97:BD:28:75:B6:47:AA:02:45:08:74:76:65"}}},"request":{"raw":"OPTIONS / HTTP/1.1\r\nHost: arbitrum-one.publicnode.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://firelight.run/\r\nOrigin: https://firelight.run\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 204 \r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: content-type\r\naccess-control-allow-methods: GET,HEAD,OPTIONS,POST\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 172800\r\nallow: OPTIONS, POST\r\nvary: Origin,Access-Control-Request-Method,Access-Control-Request-Headers\r\ndate: Fri, 25 Sep 2026 05:36:50 GMT\r\nx-envoy-upstream-service-time: 0\r\nserver: cloudflare\r\ncf-cache-status: DYNAMIC\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\npriority: u=4,i=?0\r\nx-content-type-options: nosniff\r\ncf-ray: a407ac6b3e19c272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":0,"size_decoded":641,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-25T12:27:37.283953Z","times_seen":18651356,"resource_available":true,"data":null}},"time_used":79,"timings":{"blocked":-1,"dns":0,"connect":19,"send":0,"wait":59,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"firelight.run/assets/secure.php?req=ping","fqdn":"firelight.run","domain":"firelight.run","tld":"run"},"ip":{"addr":"104.21.13.148","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://firelight.run/","date":"2026-09-25T05:36:51.172Z","timestamp":1790314611172,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"firelight.run","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 24 Sep 2026 11:54:24 GMT","end":"Wed, 23 Dec 2026 11:54:23 GMT"},"fingerprint":{"sha1":"02:54:09:B5:1A:C4:80:FE:25:D5:90:D5:C2:96:72:47:EA:08:E4:AE","sha256":"3B:A7:9F:77:5F:07:1D:DF:C1:4E:DC:82:26:78:98:F9:C7:9C:E6:6F:08:FA:7C:0D:00:C0:A7:B5:72:83:E1:45"}}},"request":{"raw":"GET /assets/secure.php?req=ping HTTP/1.1\r\nHost: firelight.run\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://firelight.run/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 25 Sep 2026 05:36:51 GMT\r\ncontent-type: text/html\r\nlast-modified: Sun, 20 Sep 2026 09:00:48 GMT\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BGGq%2Fauqxh6ie1Sh7v6ugCmjAABdCNKZnOyyfTJGnpaNHE%2BXvVK5T7zuKxWDUfNwFf68DwRkyFeCfmTrldPOXlXOfEnbVV2rPfsI5NiSEMhB2DIc%2B7p%2FLGetrMifZY9C\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: zstd\r\ncf-ray: a407ac6fd83f2efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Framer Sites","description":"Framer is a no-code web design platform for designing and publishing responsive websites.","website":"https://www.framer.com","common_platform_enumeration":"","icon":"Framer Sites.svg","categories":["CMS","Page builders"]},{"name":"React","description":"React is an open-source JavaScript library for building user interfaces or UI components.","website":"https://reactjs.org","common_platform_enumeration":"cpe:2.3:a:facebook:react:*:*:*:*:*:*:*:*","icon":"React.svg","categories":["JavaScript frameworks"]}],"data":{"size":440375,"size_decoded":51847,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1572)","md5":"3f70015e33a9796b21ed3d3fe64025ee","sha1":"e6c9d1dd0bcff690b51db55680049b4f989c17c8","sha256":"5ee2b7ec29a1dcf6772a4fae51caa8a7e74265ef0f5f14c73ecf7af616baccae","sha512":"f4c181ce1424bf53ba597590435d61a4ceb712219a1bdde0445bd11d2d4b8b0342daab4fc9e8beabe1a2983b5a96a9f0c374baff17922b2817f024693b69976d","ssdeep":"3072:yNuTSYcLGIJ1e+BY9mxeh5evVt94foO0WcAfYtI4fzM0WcEfD:yNu0H4AEh4bA","tlshash":"4b94c6136214d0385dc729bdf7d9ba1c251ca201fb3286ea62fd426f95c9ef412a27dc","first_seen":"2026-09-25T05:38:00.053396Z","last_seen":"2026-09-25T05:38:01.265667Z","times_seen":2,"resource_available":true,"data":null}},"time_used":110,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":42,"receive":68,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-25","alert":"Phishing Block","trigger":"firelight.run","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"firelight.run","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"firelight.run","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gateway.irys.xyz/AEdaUbAHJH6uu1qeTC5sgQUzocwS61ZW7xEYJMCzuuq6","fqdn":"gateway.irys.xyz","domain":"irys.xyz","tld":"xyz"},"ip":{"addr":"172.66.167.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://firelight.run/","date":"2026-09-25T05:36:51.315Z","timestamp":1790314611315,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gateway.irys.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 20 Sep 2026 11:49:06 GMT","end":"Sat, 19 Dec 2026 11:49:05 GMT"},"fingerprint":{"sha1":"1B:75:8F:42:C3:0D:D3:04:72:4A:4F:BC:B0:44:35:11:BD:B0:C1:3A","sha256":"5D:7C:E7:8F:C7:B7:35:6E:0D:92:E6:E6:6C:71:F4:0D:D9:DE:7D:74:E5:56:33:7F:8D:2C:15:B1:80:E9:5D:E0"}}},"request":{"raw":"GET /AEdaUbAHJH6uu1qeTC5sgQUzocwS61ZW7xEYJMCzuuq6 HTTP/1.1\r\nHost: gateway.irys.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://firelight.run/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 \r\ndate: Fri, 25 Sep 2026 05:36:51 GMT\r\ncontent-length: 0\r\nlocation: https://re3ropp2geh4d5qidoozfesfsagireabcedh4j6agvkzpc463fcq.mainnet-1.datasprite-cdn.com/AEdaUbAHJH6uu1qeTC5sgQUzocwS61ZW7xEYJMCzuuq6/\r\nserver: cloudflare\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\ncache-control: no-store\r\naccess-control-allow-credentials: true\r\naccess-control-expose-headers: cache-control, location\r\nx-cache-status: BYPASS\r\ncf-cache-status: BYPASS\r\ncf-ray: a407ac710db45687-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/webp","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-25T12:27:37.283953Z","times_seen":18651356,"resource_available":true,"data":null}},"time_used":171,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":171,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gateway.irys.xyz/23q4kgVKA71hmzEKL9qhRwSTESeYhDZ84LUNc1HJ8XX2","fqdn":"gateway.irys.xyz","domain":"irys.xyz","tld":"xyz"},"ip":{"addr":"172.66.167.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://firelight.run/","date":"2026-09-25T05:36:51.354Z","timestamp":1790314611354,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gateway.irys.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 20 Sep 2026 11:49:06 GMT","end":"Sat, 19 Dec 2026 11:49:05 GMT"},"fingerprint":{"sha1":"1B:75:8F:42:C3:0D:D3:04:72:4A:4F:BC:B0:44:35:11:BD:B0:C1:3A","sha256":"5D:7C:E7:8F:C7:B7:35:6E:0D:92:E6:E6:6C:71:F4:0D:D9:DE:7D:74:E5:56:33:7F:8D:2C:15:B1:80:E9:5D:E0"}}},"request":{"raw":"GET /23q4kgVKA71hmzEKL9qhRwSTESeYhDZ84LUNc1HJ8XX2 HTTP/1.1\r\nHost: gateway.irys.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://firelight.run/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 \r\ndate: Fri, 25 Sep 2026 05:36:51 GMT\r\ncontent-length: 0\r\nlocation: https://b6ktecz7yjy6fzgzlivivwfm4xtjvavuqbddceaslq46lxbuw2wq.mainnet-1.datasprite-cdn.com/23q4kgVKA71hmzEKL9qhRwSTESeYhDZ84LUNc1HJ8XX2/\r\nserver: cloudflare\r\naccess-control-expose-headers: location, cache-control\r\ncache-control: no-store\r\naccess-control-allow-credentials: true\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nx-cache-status: BYPASS\r\ncf-cache-status: BYPASS\r\ncf-ray: a407ac70fd915687-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/webp","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-25T12:27:37.283953Z","times_seen":18651356,"resource_available":true,"data":null}},"time_used":156,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":156,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gateway.irys.xyz/2NjDWqEJ9EGvxgj9wS1oDfh2jWS7mq5KLYvofQx24YXM","fqdn":"gateway.irys.xyz","domain":"irys.xyz","tld":"xyz"},"ip":{"addr":"172.66.167.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://firelight.run/","date":"2026-09-25T05:36:51.367Z","timestamp":1790314611367,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gateway.irys.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 20 Sep 2026 11:49:06 GMT","end":"Sat, 19 Dec 2026 11:49:05 GMT"},"fingerprint":{"sha1":"1B:75:8F:42:C3:0D:D3:04:72:4A:4F:BC:B0:44:35:11:BD:B0:C1:3A","sha256":"5D:7C:E7:8F:C7:B7:35:6E:0D:92:E6:E6:6C:71:F4:0D:D9:DE:7D:74:E5:56:33:7F:8D:2C:15:B1:80:E9:5D:E0"}}},"request":{"raw":"GET /2NjDWqEJ9EGvxgj9wS1oDfh2jWS7mq5KLYvofQx24YXM HTTP/1.1\r\nHost: gateway.irys.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://firelight.run/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 \r\ndate: Fri, 25 Sep 2026 05:36:51 GMT\r\ncontent-length: 0\r\nlocation: https://crwj4ebgvb7k4zcwmmxrnzxbs2gaegjyku7rc4eqjkvdnsvrehsa.mainnet-1.datasprite-cdn.com/2NjDWqEJ9EGvxgj9wS1oDfh2jWS7mq5KLYvofQx24YXM/\r\nserver: cloudflare\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\ncache-control: no-store\r\naccess-control-allow-credentials: true\r\naccess-control-expose-headers: location, cache-control\r\nx-cache-status: BYPASS\r\ncf-cache-status: BYPASS\r\ncf-ray: a407ac711de35687-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/webp","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-25T12:27:37.283953Z","times_seen":18651356,"resource_available":true,"data":null}},"time_used":165,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":165,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"esm.sh/disable-devtool@0.3.9/es2022/disable-devtool.mjs","fqdn":"esm.sh","domain":"esm.sh","tld":"sh"},"ip":{"addr":"104.26.15.209","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://firelight.run/","date":"2026-09-25T05:36:51.439Z","timestamp":1790314611439,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"esm.sh","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 19 Aug 2026 09:36:52 GMT","end":"Tue, 17 Nov 2026 10:36:50 GMT"},"fingerprint":{"sha1":"69:BD:AC:29:6F:45:CF:4F:70:65:A1:85:91:55:B0:4D:40:D3:F0:53","sha256":"C4:3A:EB:EC:A0:85:B2:25:A4:84:5A:D6:4E:E5:6D:0E:89:C0:0F:03:6B:0C:87:1E:55:50:E6:C3:CA:80:75:CB"}}},"request":{"raw":"GET /disable-devtool@0.3.9/es2022/disable-devtool.mjs HTTP/1.1\r\nHost: esm.sh\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://firelight.run\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://esm.sh/disable-devtool\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Fri, 21 Nov 2025 02:57:18 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\ndate: Fri, 25 Sep 2026 05:36:51 GMT\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nage: 103805\r\ncf-ray: a407ac717fbbc272-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":18401,"size_decoded":8526,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (14919)","md5":"6f134aa0a4c14df6fe081e2a6643f4bf","sha1":"61989a9857651a3e6e67a4f56bd65a0ac61e1faf","sha256":"f24cb4d56e23c43c0f5927a4ab308c23741e40fbb13e3996e3c42679982559a9","sha512":"b2b21f9c85678b62e77b009768a4ce7fcd1332410817c76f1fc8bff5595edf99fa48b353886413d0952504c7d1629fd4983751c8361bff9edf79d5bec6db839f","ssdeep":"384:XTkAes3CkB0YatnIE3EmI/N62D7LI2fU6HFvQxCN:P3Ck5ibEPt7bU6lvECN","tlshash":"b982c5dcf55770706bb2b9b4403f450ab2367856908c8440e669c8e06eb856fe27bf3e","first_seen":"2026-05-26T18:42:46.16671Z","last_seen":"2026-09-25T06:10:52.679921Z","times_seen":131,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"43zhqeb6vzldlqwzbqdiamkbmmrohzz5bvua563j7rbvxnd5u5fq.mainnet-1.datasprite-cdn.com/GYXDFoP5N7zD9drksjJDtzLyuKMxzVC6cxL7hd5FTEmG/","fqdn":"43zhqeb6vzldlqwzbqdiamkbmmrohzz5bvua563j7rbvxnd5u5fq.mainnet-1.datasprite-cdn.com","domain":"datasprite-cdn.com","tld":"com"},"ip":{"addr":"172.67.163.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://firelight.run/","date":"2026-09-25T05:36:51.817Z","timestamp":1790314611817,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"datasprite-cdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 01 Sep 2026 16:12:35 GMT","end":"Mon, 30 Nov 2026 17:12:28 GMT"},"fingerprint":{"sha1":"A7:49:1F:BA:09:CF:9C:E9:55:85:E1:3E:6A:46:2B:56:1A:DD:E7:32","sha256":"57:8A:D0:59:59:01:19:C2:80:F0:3E:E8:83:04:E6:8C:0B:A5:94:44:42:21:A0:F5:48:2D:7F:8D:19:15:08:52"}}},"request":{"raw":"GET /GYXDFoP5N7zD9drksjJDtzLyuKMxzVC6cxL7hd5FTEmG/ HTTP/1.1\r\nHost: 43zhqeb6vzldlqwzbqdiamkbmmrohzz5bvua563j7rbvxnd5u5fq.mainnet-1.datasprite-cdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://firelight.run/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 25 Sep 2026 05:36:52 GMT\r\ncontent-type: image/webp\r\ncontent-length: 2008\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin\r\nx-irys-item-id: GYXDFoP5N7zD9drksjJDtzLyuKMxzVC6cxL7hd5FTEmG\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-content-type: image/webp\r\nx-content-length: 2008\r\ncache-control: max-age=2592000\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3bjP7HxzUSWrLzmoSlkejwi8378hUlfSj4wr3pevzH7g32vLbJixfRC8bHHv8YQASFy3udPxGzgh6njRQchsY9jsKvb6R%2F8%2BzqZSF8s8Jo4klOEiHPU5s3b4Y98hZiwXBpnORBwPW3yKUss4LZ6UgdDpPPrpDvYhMCX5m%2BWz86HNhUry0XEB9N1MHFWX2Fw77D6%2F2%2Fli9Mnh6cXq2FAk8wB04lE%3D\"}]}\r\ncf-ray: a407ac75cf35120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2008,"size_decoded":2864,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 120x120, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"ad5cab38c5477b10861597c294caf179","sha1":"c5e68dd36b9b9cfe78e6c8b8c6ca87d9c9975a6b","sha256":"1585361e26918c5ffd73a70b3963bdedd62feda6f8400985db9e85505e7a1ded","sha512":"1273021aac5283372f1a375d9555472c46b2c84000ba7fb89d138defea8184e65bf80a2acc41cd536b8e5d4bb7e58c00557798c89f8d1586bcad083c63b241bc","ssdeep":"","tlshash":"c4412e4541e54a7fc3bf6b47195ee27353434159363f52b70256c4a31504e712e90672","first_seen":"2025-03-05T19:21:16.036556Z","last_seen":"2026-09-25T06:10:52.706376Z","times_seen":229,"resource_available":false,"data":null}},"time_used":561,"timings":{"blocked":263,"dns":0,"connect":0,"send":0,"wait":298,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"43zhqeb6vzldlqwzbqdiamkbmmrohzz5bvua563j7rbvxnd5u5fq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"43zhqeb6vzldlqwzbqdiamkbmmrohzz5bvua563j7rbvxnd5u5fq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"43zhqeb6vzldlqwzbqdiamkbmmrohzz5bvua563j7rbvxnd5u5fq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hxjnnbfgmzureusmhjgltavcqubaut2yzqx23rrlalgrwm4nynga.mainnet-1.datasprite-cdn.com/5ALLUP4yuGwDcVHWQu9rkA4iavNi6RPYuFSFagBKuJAX/","fqdn":"hxjnnbfgmzureusmhjgltavcqubaut2yzqx23rrlalgrwm4nynga.mainnet-1.datasprite-cdn.com","domain":"datasprite-cdn.com","tld":"com"},"ip":{"addr":"172.67.163.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://firelight.run/","date":"2026-09-25T05:36:51.823Z","timestamp":1790314611823,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"datasprite-cdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 01 Sep 2026 16:12:35 GMT","end":"Mon, 30 Nov 2026 17:12:28 GMT"},"fingerprint":{"sha1":"A7:49:1F:BA:09:CF:9C:E9:55:85:E1:3E:6A:46:2B:56:1A:DD:E7:32","sha256":"57:8A:D0:59:59:01:19:C2:80:F0:3E:E8:83:04:E6:8C:0B:A5:94:44:42:21:A0:F5:48:2D:7F:8D:19:15:08:52"}}},"request":{"raw":"GET /5ALLUP4yuGwDcVHWQu9rkA4iavNi6RPYuFSFagBKuJAX/ HTTP/1.1\r\nHost: hxjnnbfgmzureusmhjgltavcqubaut2yzqx23rrlalgrwm4nynga.mainnet-1.datasprite-cdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://firelight.run/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 25 Sep 2026 05:36:52 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1438\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin\r\nx-irys-item-id: 5ALLUP4yuGwDcVHWQu9rkA4iavNi6RPYuFSFagBKuJAX\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-content-type: image/webp\r\nx-content-length: 1438\r\ncache-control: max-age=2592000\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uEsksgxF3ZlJ4e35CmEEtXm0jsDavUTww6MoFiW2EnUplMxMKyaeALrcb0ItBNctVFyOdWXHQ4MRkNK0MG7aIh65l8Lv6cMthChksIE9xRreZZXjbkAxWxp7sFieAW4ZNoD6xH7CUZSZcOSPHhDUpoQlk1V0KVi931EiOivDbCC3f9JxEDOaDhunVwYi0HDgPH2ywGwcEQGsUEdslZG4cxiuwQs%3D\"}]}\r\ncf-ray: a407ac759ecb120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1438,"size_decoded":2284,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 120x120, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"739c17e97821986cee753ce116d27ecf","sha1":"06e069a865b1da92efe4aefc96ae4f088d1fb94b","sha256":"a59b53d6102a24cbc0521f8395b37c6e36f69926ebe63268e389321f871dc529","sha512":"aed4fbd8df5b742900bf36bd92c7734087b7562c9ac0e303a12fa46b3f8b04267e9983b3b7a70e5e35143a7c212d440a74d97266ce3594a7a949dbfe40cea6fa","ssdeep":"","tlshash":"412119f1e42e130ff0f507398c1f634898f24b905834addcb93db2661e603d82268899","first_seen":"2026-06-11T07:30:29.717032Z","last_seen":"2026-09-25T06:10:52.668932Z","times_seen":45,"resource_available":false,"data":null}},"time_used":399,"timings":{"blocked":233,"dns":0,"connect":0,"send":0,"wait":166,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"hxjnnbfgmzureusmhjgltavcqubaut2yzqx23rrlalgrwm4nynga.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"hxjnnbfgmzureusmhjgltavcqubaut2yzqx23rrlalgrwm4nynga.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"hxjnnbfgmzureusmhjgltavcqubaut2yzqx23rrlalgrwm4nynga.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"firelight.run/d9f21a476ed4dc3967816cf76c7a1b414629d3d9.svg","fqdn":"firelight.run","domain":"firelight.run","tld":"run"},"ip":{"addr":"104.21.13.148","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://firelight.run/","date":"2026-09-25T05:36:49.852Z","timestamp":1790314609852,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"firelight.run","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 24 Sep 2026 11:54:24 GMT","end":"Wed, 23 Dec 2026 11:54:23 GMT"},"fingerprint":{"sha1":"02:54:09:B5:1A:C4:80:FE:25:D5:90:D5:C2:96:72:47:EA:08:E4:AE","sha256":"3B:A7:9F:77:5F:07:1D:DF:C1:4E:DC:82:26:78:98:F9:C7:9C:E6:6F:08:FA:7C:0D:00:C0:A7:B5:72:83:E1:45"}}},"request":{"raw":"GET /d9f21a476ed4dc3967816cf76c7a1b414629d3d9.svg HTTP/1.1\r\nHost: firelight.run\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://firelight.run/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 25 Sep 2026 05:36:49 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hO%2F0UM5kEr8yMCFlIyAklJZy8fiE3XsL389KLnBNiv5gf6u%2B0oTmXjgbz2R4NJPdix%2FEws2Lx1CpwXOl5M25W%2BUoM2Yx4DVNjUSSZx9z3o9OyQxcv8EQwI75js00JGDw\"}]}\r\nlast-modified: Tue, 21 Apr 2026 11:39:44 GMT\r\npriority: u=4,i\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"69e76200-df2\"\r\nage: 3\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a407ac679e542efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3570,"size_decoded":1992,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"5a0cb2856f15edf4bbb07e9a227d36b8","sha1":"d9f21a476ed4dc3967816cf76c7a1b414629d3d9","sha256":"648b8fcabf85413ff444fb1cd0e5ed65a31fe82c574e840086f5b350b90e6c27","sha512":"923a5c9b2ae96bf83d751990a815851410d19cda32beda465f9659374bb01c6cb5f5ec1445a43455652a7d6ef239e8543a8c3a735a740fca59e20f265c65aa90","ssdeep":"","tlshash":"c671e0efeebc23d874cca3fae3538099b20e64e41451ce99cc2e9c0cdd4585da497850","first_seen":"2026-04-24T15:23:09.421323Z","last_seen":"2026-09-25T05:38:01.256417Z","times_seen":18,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"firelight.run","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-25","alert":"Phishing Block","trigger":"firelight.run","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"firelight.run","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bsc-dataseed.bnbchain.org/","fqdn":"bsc-dataseed.bnbchain.org","domain":"bnbchain.org","tld":"org"},"ip":{"addr":"54.247.133.244","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://firelight.run/","date":"2026-09-25T05:36:51.632Z","timestamp":1790314611632,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"bnbchain.org","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Thu, 10 Sep 2026 00:00:00 GMT","end":"Fri, 26 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"7A:85:67:66:4A:8D:DF:FE:36:B0:5B:3A:03:EB:87:D2:2B:24:8A:BE","sha256":"9A:E8:86:0C:00:4D:16:23:9D:C5:55:32:6C:46:50:5D:1F:CD:28:89:E7:25:A3:8E:88:2A:63:D3:FC:3B:11:67"}}},"request":{"raw":"POST / HTTP/1.1\r\nHost: bsc-dataseed.bnbchain.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://firelight.run/\r\nContent-Type: application/json\r\nContent-Length: 136\r\nOrigin: https://firelight.run\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":136,"data":"{\"jsonrpc\":\"2.0\",\"method\":\"eth_call\",\"params\":[{\"to\":\"0x6981E9EA7023a8407E4B08ad97f186A5CBDaFCf5\",\"data\":\"0x3bc5de30\"},\"latest\"],\"id\":1}"}},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 25 Sep 2026 05:36:51 GMT\r\ncontent-type: application/json; charset=utf-8\r\nvary: Accept-Encoding\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: POST, GET, OPTIONS\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 600\r\nx-nr-trace-id: 7b9418ae0f91bfae3cb9e2f1c01fd12c\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubdomains\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":806,"size_decoded":773,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"d925be8d5701b36f14c1fe2f4923141a","sha1":"8c392eed0024a8fc5b20d173339dde8d8b4165c3","sha256":"6a5ac30b0c84cb8de2a2eed6d00fc93b2003e86011e7184824126c02b9b948af","sha512":"4706ba99835739e5fd936bafb424e1cd318f003a9a6d1e4ff8025d279e594e5a05e763fcf8545954da0d1e2bba7f593bceb0c3ec135991468f3c2175319365aa","ssdeep":"","tlshash":"68011df5415fce91d0fd988c14547a5523173c6768de2f419d4cddc4206c6427279235","first_seen":"2026-04-26T14:03:09.562126Z","last_seen":"2026-09-25T06:10:52.687719Z","times_seen":31,"resource_available":true,"data":null}},"time_used":55,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":55,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hkmjhyubcmyt55tyslqmyt4arfmczeuf7xtrysanzghe6n5ezduq.mainnet-1.datasprite-cdn.com/4wjb3TudcCwb4QiUeXRMGVHnVoozBbvLCZzu92xYgcUx/","fqdn":"hkmjhyubcmyt55tyslqmyt4arfmczeuf7xtrysanzghe6n5ezduq.mainnet-1.datasprite-cdn.com","domain":"datasprite-cdn.com","tld":"com"},"ip":{"addr":"104.21.15.158","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://firelight.run/","date":"2026-09-25T05:36:51.740Z","timestamp":1790314611740,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"datasprite-cdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 01 Sep 2026 16:12:35 GMT","end":"Mon, 30 Nov 2026 17:12:28 GMT"},"fingerprint":{"sha1":"A7:49:1F:BA:09:CF:9C:E9:55:85:E1:3E:6A:46:2B:56:1A:DD:E7:32","sha256":"57:8A:D0:59:59:01:19:C2:80:F0:3E:E8:83:04:E6:8C:0B:A5:94:44:42:21:A0:F5:48:2D:7F:8D:19:15:08:52"}}},"request":{"raw":"GET /4wjb3TudcCwb4QiUeXRMGVHnVoozBbvLCZzu92xYgcUx/ HTTP/1.1\r\nHost: hkmjhyubcmyt55tyslqmyt4arfmczeuf7xtrysanzghe6n5ezduq.mainnet-1.datasprite-cdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://firelight.run/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 25 Sep 2026 05:36:52 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\npriority: u=5,i\r\nvary: Origin\r\nx-irys-item-id: 4wjb3TudcCwb4QiUeXRMGVHnVoozBbvLCZzu92xYgcUx\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-content-type: image/webp\r\nx-content-length: 752\r\ncache-control: max-age=2592000\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xgGGHyQAtR1pVCBxa4UEgaB054M%2FUs0DHppqaBUp8tuCDfPwkc%2B7MBPC7zzJOMSRv4W3DgtBvzCudf3AtnJ1Xe%2FLQ4IEIId%2FQhVVuxSzxhoOuGJYT6JRGnynV2h3GTGjVgZhjCnDq%2BhfFIrLCCSjH0Ge79ExCro%2F%2FHEDphiVisn1zS1ma01NB1s%2BXBIsAeiYJ4D8ilhNv8byguXseBbVL7bEPHI%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a407ac73adaab509-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 752\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":752,"size_decoded":1634,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 120x120, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"25784e0593a6a7a9ac79b00bc2dd3839","sha1":"e02ec172de34547688e43bbf48d48d1a7db5fcd3","sha256":"8c60306501fc0292d202caa788f781b4c97dd676e858c104e6d0798850570cf5","sha512":"f3b7071ce04331f2791e711de6e7424f14cc20d9e36797c7a361001cd14978c7f959db5cb0d453e865526ba833bf7e4531a9c6c1d4249255dfa320734dc8acd9","ssdeep":"","tlshash":"d6017093302d8182c623a6e91c481853d1b3b40096fcee3846a5baa055e43b12dc34b7","first_seen":"2026-06-11T07:30:29.699613Z","last_seen":"2026-09-25T06:10:52.670272Z","times_seen":43,"resource_available":false,"data":null}},"time_used":347,"timings":{"blocked":-1,"dns":16,"connect":0,"send":0,"wait":331,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"hkmjhyubcmyt55tyslqmyt4arfmczeuf7xtrysanzghe6n5ezduq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"hkmjhyubcmyt55tyslqmyt4arfmczeuf7xtrysanzghe6n5ezduq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"hkmjhyubcmyt55tyslqmyt4arfmczeuf7xtrysanzghe6n5ezduq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"v57bhor75skl3yh2fasy5zibmxu374hc564a5oiidpjj3yk5qoua.mainnet-1.datasprite-cdn.com/Cp3rKQhcxnwLeryCXo65zSv8dYFvXn4b47fC9GiYbXu9/","fqdn":"v57bhor75skl3yh2fasy5zibmxu374hc564a5oiidpjj3yk5qoua.mainnet-1.datasprite-cdn.com","domain":"datasprite-cdn.com","tld":"com"},"ip":{"addr":"104.21.15.158","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://firelight.run/","date":"2026-09-25T05:36:51.809Z","timestamp":1790314611809,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"datasprite-cdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 01 Sep 2026 16:12:35 GMT","end":"Mon, 30 Nov 2026 17:12:28 GMT"},"fingerprint":{"sha1":"A7:49:1F:BA:09:CF:9C:E9:55:85:E1:3E:6A:46:2B:56:1A:DD:E7:32","sha256":"57:8A:D0:59:59:01:19:C2:80:F0:3E:E8:83:04:E6:8C:0B:A5:94:44:42:21:A0:F5:48:2D:7F:8D:19:15:08:52"}}},"request":{"raw":"GET /Cp3rKQhcxnwLeryCXo65zSv8dYFvXn4b47fC9GiYbXu9/ HTTP/1.1\r\nHost: v57bhor75skl3yh2fasy5zibmxu374hc564a5oiidpjj3yk5qoua.mainnet-1.datasprite-cdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://firelight.run/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 25 Sep 2026 05:36:52 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\npriority: u=5,i\r\nvary: Origin\r\nx-irys-item-id: Cp3rKQhcxnwLeryCXo65zSv8dYFvXn4b47fC9GiYbXu9\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-content-type: image/webp\r\nx-content-length: 1248\r\ncache-control: max-age=2592000\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LbxNCKdY3VmLXf0PoQIABssceVQDRSIJwBgZTWoVz8FK%2Brh10R1C%2F2GGJN0APD0bRqh17N1TYpk%2F4sk9Ni4y%2BtamZd5GDUCwLl8XHqrjKdC6FzZcc549ANZJi%2Bo02AdWKFhioh50IBctXPWBUHa0R8F4g6UVVVfgX6deyaAV%2BFBbrgoEvYcjnFB6X3mT9LN%2F0Ae%2FU7dqjj33BTaXyRw7b6eoAMk%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a407ac758b1d56ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1248\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1248,"size_decoded":2132,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 120x120, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"2b05fb4b18fe871b8347001697b847b1","sha1":"f8615e5beebf1a23f352508742ba120eb16e5c80","sha256":"c21793083a9ec1cfd7fc610f8c8aee7d77b637cde7534bccdca1e8b6821fbd3a","sha512":"040f3ee9a0b8b3ba63953acde3a12533c29396a99b5795aa2fd435c5468263607bdb57aadda10d88f825edb3f5e331c1b232ee357e3610ebf82cf26a40eaf561","ssdeep":"","tlshash":"5121b7e3b95dac0dd9020a6d5b1127f8ee1c75f6449c02220acf5e5268a1609322e2c2","first_seen":"2026-06-11T07:30:29.694011Z","last_seen":"2026-09-25T06:10:52.66462Z","times_seen":43,"resource_available":false,"data":null}},"time_used":429,"timings":{"blocked":228,"dns":20,"connect":0,"send":0,"wait":181,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"v57bhor75skl3yh2fasy5zibmxu374hc564a5oiidpjj3yk5qoua.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"v57bhor75skl3yh2fasy5zibmxu374hc564a5oiidpjj3yk5qoua.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"v57bhor75skl3yh2fasy5zibmxu374hc564a5oiidpjj3yk5qoua.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"arbitrum.drpc.org/","fqdn":"arbitrum.drpc.org","domain":"drpc.org","tld":"org"},"ip":{"addr":"104.18.11.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://firelight.run/","date":"2026-09-25T05:36:50.416Z","timestamp":1790314610416,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"drpc.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 13 Aug 2026 01:49:22 GMT","end":"Wed, 11 Nov 2026 02:49:11 GMT"},"fingerprint":{"sha1":"1D:AA:98:9C:F7:ED:CA:BA:5E:92:74:4B:18:3B:83:D6:0C:A4:D7:3C","sha256":"71:EB:00:B8:D0:6F:B9:E3:E0:9D:2C:E5:6B:57:0E:BA:4D:41:8C:64:EB:3E:B0:D8:8E:54:49:8D:2D:50:A2:65"}}},"request":{"raw":"OPTIONS / HTTP/1.1\r\nHost: arbitrum.drpc.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://firelight.run/\r\nOrigin: https://firelight.run\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 204 \r\ndate: Fri, 25 Sep 2026 05:36:50 GMT\r\naccess-control-allow-headers: content-type\r\naccess-control-allow-methods: POST\r\naccess-control-allow-origin: https://firelight.run\r\naccess-control-max-age: 600\r\nvary: Origin\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\ncf-ray: a407ac6b384e56ca-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":442,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-25T12:27:37.283953Z","times_seen":18651356,"resource_available":true,"data":null}},"time_used":219,"timings":{"blocked":-1,"dns":0,"connect":18,"send":0,"wait":200,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gateway.irys.xyz/D7p9hb5EEeuut3VvifV1UNAiPEfnuNCrK6ubse1dWiwE","fqdn":"gateway.irys.xyz","domain":"irys.xyz","tld":"xyz"},"ip":{"addr":"172.66.167.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://firelight.run/","date":"2026-09-25T05:36:51.317Z","timestamp":1790314611317,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gateway.irys.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 20 Sep 2026 11:49:06 GMT","end":"Sat, 19 Dec 2026 11:49:05 GMT"},"fingerprint":{"sha1":"1B:75:8F:42:C3:0D:D3:04:72:4A:4F:BC:B0:44:35:11:BD:B0:C1:3A","sha256":"5D:7C:E7:8F:C7:B7:35:6E:0D:92:E6:E6:6C:71:F4:0D:D9:DE:7D:74:E5:56:33:7F:8D:2C:15:B1:80:E9:5D:E0"}}},"request":{"raw":"GET /D7p9hb5EEeuut3VvifV1UNAiPEfnuNCrK6ubse1dWiwE HTTP/1.1\r\nHost: gateway.irys.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://firelight.run/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 \r\ndate: Fri, 25 Sep 2026 05:36:51 GMT\r\ncontent-length: 0\r\nlocation: https://wqfquz32a4lzecqogmqyxh4zeqpie2ndhtrq2liju6ygvivvaykq.mainnet-1.datasprite-cdn.com/D7p9hb5EEeuut3VvifV1UNAiPEfnuNCrK6ubse1dWiwE/\r\nserver: cloudflare\r\naccess-control-allow-credentials: true\r\ncache-control: no-store\r\naccess-control-expose-headers: cache-control, location\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nx-cache-status: BYPASS\r\ncf-cache-status: BYPASS\r\ncf-ray: a407ac710db95687-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/webp","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-25T12:27:37.283953Z","times_seen":18651356,"resource_available":true,"data":null}},"time_used":160,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":160,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gateway.irys.xyz/5GHDNrA7AEgG9NmMQKVL78E5F3oMjEvyd59Ls5SEk6JC","fqdn":"gateway.irys.xyz","domain":"irys.xyz","tld":"xyz"},"ip":{"addr":"172.66.167.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://firelight.run/","date":"2026-09-25T05:36:51.341Z","timestamp":1790314611341,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gateway.irys.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 20 Sep 2026 11:49:06 GMT","end":"Sat, 19 Dec 2026 11:49:05 GMT"},"fingerprint":{"sha1":"1B:75:8F:42:C3:0D:D3:04:72:4A:4F:BC:B0:44:35:11:BD:B0:C1:3A","sha256":"5D:7C:E7:8F:C7:B7:35:6E:0D:92:E6:E6:6C:71:F4:0D:D9:DE:7D:74:E5:56:33:7F:8D:2C:15:B1:80:E9:5D:E0"}}},"request":{"raw":"GET /5GHDNrA7AEgG9NmMQKVL78E5F3oMjEvyd59Ls5SEk6JC HTTP/1.1\r\nHost: gateway.irys.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://firelight.run/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 \r\ndate: Fri, 25 Sep 2026 05:36:51 GMT\r\ncontent-length: 0\r\nlocation: https://h5mmvwl7o3g5kseh6ibvzgyebxak4j4qgqqczbevmgdtkhvbbhaq.mainnet-1.datasprite-cdn.com/5GHDNrA7AEgG9NmMQKVL78E5F3oMjEvyd59Ls5SEk6JC/\r\nserver: cloudflare\r\naccess-control-allow-credentials: true\r\ncache-control: no-store\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-expose-headers: location, cache-control\r\nx-cache-status: BYPASS\r\ncf-cache-status: BYPASS\r\ncf-ray: a407ac710dc85687-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/webp","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-25T12:27:37.283953Z","times_seen":18651356,"resource_available":true,"data":null}},"time_used":166,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":166,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gateway.irys.xyz/BZsRGcBURQnewjAfV98ZUziy45VCmwCQHch8hcGU64wz","fqdn":"gateway.irys.xyz","domain":"irys.xyz","tld":"xyz"},"ip":{"addr":"172.66.167.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://firelight.run/","date":"2026-09-25T05:36:51.343Z","timestamp":1790314611343,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gateway.irys.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 20 Sep 2026 11:49:06 GMT","end":"Sat, 19 Dec 2026 11:49:05 GMT"},"fingerprint":{"sha1":"1B:75:8F:42:C3:0D:D3:04:72:4A:4F:BC:B0:44:35:11:BD:B0:C1:3A","sha256":"5D:7C:E7:8F:C7:B7:35:6E:0D:92:E6:E6:6C:71:F4:0D:D9:DE:7D:74:E5:56:33:7F:8D:2C:15:B1:80:E9:5D:E0"}}},"request":{"raw":"GET /BZsRGcBURQnewjAfV98ZUziy45VCmwCQHch8hcGU64wz HTTP/1.1\r\nHost: gateway.irys.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://firelight.run/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 \r\ndate: Fri, 25 Sep 2026 05:36:51 GMT\r\ncontent-length: 0\r\nlocation: https://tuahnjjbd4ptq2z3dq73mmxdcdpdxt5sjs4uwfluwoxw2i3zrv4q.mainnet-1.datasprite-cdn.com/BZsRGcBURQnewjAfV98ZUziy45VCmwCQHch8hcGU64wz/\r\nserver: cloudflare\r\naccess-control-allow-credentials: true\r\ncache-control: no-store\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-expose-headers: cache-control, location\r\nx-cache-status: BYPASS\r\ncf-cache-status: BYPASS\r\ncf-ray: a407ac711dca5687-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/webp","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-25T12:27:37.283953Z","times_seen":18651356,"resource_available":true,"data":null}},"time_used":164,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":164,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bsc-rpc.publicnode.com/","fqdn":"bsc-rpc.publicnode.com","domain":"publicnode.com","tld":"com"},"ip":{"addr":"172.66.150.162","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://firelight.run/","date":"2026-09-25T05:36:51.638Z","timestamp":1790314611638,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"publicnode.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 07 Aug 2026 02:01:04 GMT","end":"Thu, 05 Nov 2026 03:00:51 GMT"},"fingerprint":{"sha1":"94:5F:9F:32:64:19:A5:50:59:22:7E:16:22:E5:6B:9B:1C:65:F3:ED","sha256":"7D:67:31:E8:80:74:FB:3E:3C:A4:1B:9F:F0:BE:71:56:CE:95:31:97:BD:28:75:B6:47:AA:02:45:08:74:76:65"}}},"request":{"raw":"POST / HTTP/1.1\r\nHost: bsc-rpc.publicnode.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://firelight.run/\r\nContent-Type: application/json\r\nContent-Length: 136\r\nOrigin: https://firelight.run\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":136,"data":"{\"jsonrpc\":\"2.0\",\"method\":\"eth_call\",\"params\":[{\"to\":\"0x6981E9EA7023a8407E4B08ad97f186A5CBDaFCf5\",\"data\":\"0x3bc5de30\"},\"latest\"],\"id\":1}"}},"response":{"raw":"HTTP/3 200 \r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 1728000\r\ncontent-type: application/json\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, accept-encoding\r\ndate: Fri, 25 Sep 2026 05:36:51 GMT\r\nx-content-type-options: nosniff\r\nx-envoy-upstream-service-time: 5\r\nserver: cloudflare\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\ncontent-encoding: br\r\ncf-ray: a407ac737ff1c272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":807,"size_decoded":704,"mime_type":"application/json","magic":"JSON text data","md5":"66ee8adfe9707946d818189cc4b91efe","sha1":"ac1f591cf34a425b14ef2ce80d9ecb5697f73c52","sha256":"2e7ca5f9c7ba7a39b9274cbabc72c1e56b7d22d6e899014d0260bc9da47b52d2","sha512":"0122feded748e1812a86a3b1cda81d47d60ea72bfe9534d88503e0a044cea16539c12e28604b630a741a9a28a11c8d07d621fea7b13b788d8d6247670de8ab35","ssdeep":"","tlshash":"470112f6425bcea1e0fe988d14547a5923173c67a8de2f419e4cddc8206c6827279339","first_seen":"2026-04-26T14:03:09.577135Z","last_seen":"2026-09-25T06:10:52.680409Z","times_seen":17,"resource_available":true,"data":null}},"time_used":64,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":64,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zzcs2m5lomlcptku6ihjjgjt3gz7ni5ok2jfwmd7eiwlz2a5giaq.mainnet-1.datasprite-cdn.com/EtCAcusz6dRAmAEjLhg5caTZC47eQwZ31wgKWofrPc4g/","fqdn":"zzcs2m5lomlcptku6ihjjgjt3gz7ni5ok2jfwmd7eiwlz2a5giaq.mainnet-1.datasprite-cdn.com","domain":"datasprite-cdn.com","tld":"com"},"ip":{"addr":"104.21.15.158","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://firelight.run/","date":"2026-09-25T05:36:51.726Z","timestamp":1790314611726,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"datasprite-cdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 01 Sep 2026 16:12:35 GMT","end":"Mon, 30 Nov 2026 17:12:28 GMT"},"fingerprint":{"sha1":"A7:49:1F:BA:09:CF:9C:E9:55:85:E1:3E:6A:46:2B:56:1A:DD:E7:32","sha256":"57:8A:D0:59:59:01:19:C2:80:F0:3E:E8:83:04:E6:8C:0B:A5:94:44:42:21:A0:F5:48:2D:7F:8D:19:15:08:52"}}},"request":{"raw":"GET /EtCAcusz6dRAmAEjLhg5caTZC47eQwZ31wgKWofrPc4g/ HTTP/1.1\r\nHost: zzcs2m5lomlcptku6ihjjgjt3gz7ni5ok2jfwmd7eiwlz2a5giaq.mainnet-1.datasprite-cdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://firelight.run/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 25 Sep 2026 05:36:52 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\npriority: u=5,i\r\nvary: Origin\r\nx-irys-item-id: EtCAcusz6dRAmAEjLhg5caTZC47eQwZ31wgKWofrPc4g\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-content-type: image/webp\r\nx-content-length: 1720\r\ncache-control: max-age=2592000\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MEQ9Mb3GEp%2BhlWzZBsZyymAGFK5lCmKmoZd19GH99kEt18WUCWhdydcEUV3XHT4QvGVdtKsVwO%2FG7qz%2B8V4KtYPQKfAa%2B2kHiAzt4pXBGegOmi%2BMl5sG7CDPEEBgqkK8Foa%2B5Y1UpAzx2v1WAvsNwy1dvs5lEWbhqHDM8GQwtMnXa5RzwNv%2FsfTaDp5Z11Y5gP%2Bt4k8tP3gDyZA6Il83kAe1%2B6Y%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a407ac736da4b509-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1720\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1720,"size_decoded":2606,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"0314e0b2cc12271fd9c1ffaf13f80c91","sha1":"152c1c56734890372da333fe64cd37e79ec81d36","sha256":"b1e1818d8943c7f10fb99aeac6a0a86ea4b4b646b16adbf9d4c4db2c4e8cb7f7","sha512":"ec6234ac2fa864339199f40e6aa08b33ea986e12c61ec951aa3728a2b045af2a29c2fc200b2f5aa157425bd36dbee1cacd61028a810ece6e448b34c6d18f6efc","ssdeep":"","tlshash":"ec310815a47e31a7e3b1dc8a631b5877bb08888960e99cc8309d7cd6c12780d27ad5a0","first_seen":"2026-06-11T07:30:29.733709Z","last_seen":"2026-09-25T06:10:52.64981Z","times_seen":45,"resource_available":false,"data":null}},"time_used":334,"timings":{"blocked":-1,"dns":10,"connect":0,"send":0,"wait":324,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"zzcs2m5lomlcptku6ihjjgjt3gz7ni5ok2jfwmd7eiwlz2a5giaq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"zzcs2m5lomlcptku6ihjjgjt3gz7ni5ok2jfwmd7eiwlz2a5giaq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"zzcs2m5lomlcptku6ihjjgjt3gz7ni5ok2jfwmd7eiwlz2a5giaq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ipgv6k3cx6mftzzxhfhhzv64ydqttwwd4p6dtqjffey5ckd47buq.mainnet-1.datasprite-cdn.com/5ZfwxdeiMwp91zkMTo5ABo4XYBcStqopPe52LZRVUSwr/","fqdn":"ipgv6k3cx6mftzzxhfhhzv64ydqttwwd4p6dtqjffey5ckd47buq.mainnet-1.datasprite-cdn.com","domain":"datasprite-cdn.com","tld":"com"},"ip":{"addr":"104.21.15.158","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://firelight.run/","date":"2026-09-25T05:36:51.777Z","timestamp":1790314611777,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"datasprite-cdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 01 Sep 2026 16:12:35 GMT","end":"Mon, 30 Nov 2026 17:12:28 GMT"},"fingerprint":{"sha1":"A7:49:1F:BA:09:CF:9C:E9:55:85:E1:3E:6A:46:2B:56:1A:DD:E7:32","sha256":"57:8A:D0:59:59:01:19:C2:80:F0:3E:E8:83:04:E6:8C:0B:A5:94:44:42:21:A0:F5:48:2D:7F:8D:19:15:08:52"}}},"request":{"raw":"GET /5ZfwxdeiMwp91zkMTo5ABo4XYBcStqopPe52LZRVUSwr/ HTTP/1.1\r\nHost: ipgv6k3cx6mftzzxhfhhzv64ydqttwwd4p6dtqjffey5ckd47buq.mainnet-1.datasprite-cdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://firelight.run/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 25 Sep 2026 05:36:51 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\npriority: u=5,i\r\nvary: Origin\r\nx-irys-item-id: 5ZfwxdeiMwp91zkMTo5ABo4XYBcStqopPe52LZRVUSwr\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-content-type: image/webp\r\nx-content-length: 972\r\ncache-control: max-age=2592000\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FKIObCqpkA1jgP1t%2F1eBCyrcZVYn0C%2F%2B73HhbwDIBKz%2BssJvf%2FS%2FgXQROsEwei2jy6%2FuGudoTZ58tQEKMVhlpsZrOWH5cB3B79U095RpQy4khrQ7iRumtW16BzoZ2RbXRJcf6Y2rgv%2BbQ29TgEdGCWF7nD3lLw0Wv%2FeP2%2FACp4sa5H1gdpAbEG8mKG1cE%2FnbPGPCn0sGPsFOXr4%2FxP9BWNKQvIA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a407ac73cdafb509-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 972\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":972,"size_decoded":1862,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 120x120, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"0c9f6edd760754aeea301e192c1c3c7a","sha1":"79d7e5342bd50b2717e4709912e8657c81f4b7fd","sha256":"9528c5ccadff18933bcdba89cf812c8d82eb2278318d77f636b1fa75aac2859a","sha512":"a49689b3cadaee426b840306686b2f59b72665fef43383319a1e857b9a7af8d18b35a553dbbf2dd62e679b1889b6d31f18bfc1c6da17e3ca26388b60acc00253","ssdeep":"","tlshash":"85119072e7b083d5cf9993a298431ecc829010597ebc0aaa0b2554a250ee9d6bc9144b","first_seen":"2025-02-06T07:36:38.211469Z","last_seen":"2026-09-25T06:10:52.683198Z","times_seen":70,"resource_available":false,"data":null}},"time_used":199,"timings":{"blocked":-1,"dns":5,"connect":0,"send":0,"wait":194,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"ipgv6k3cx6mftzzxhfhhzv64ydqttwwd4p6dtqjffey5ckd47buq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"ipgv6k3cx6mftzzxhfhhzv64ydqttwwd4p6dtqjffey5ckd47buq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"ipgv6k3cx6mftzzxhfhhzv64ydqttwwd4p6dtqjffey5ckd47buq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vote.88mph.app/VmMCJGSn0d3iF4K.js?v=3","fqdn":"vote.88mph.app","domain":"88mph.app","tld":"app"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://vote.88mph.app/home.html","date":"2026-09-25T05:36:55.849Z","timestamp":1790314615849,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vote.88mph.app","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 24 Sep 2026 19:03:28 GMT","end":"Wed, 23 Dec 2026 19:03:27 GMT"},"fingerprint":{"sha1":"D4:FD:D9:29:2F:72:43:12:FD:D6:7C:0C:B0:5E:3D:43:DD:22:DF:A1","sha256":"F1:01:33:39:ED:39:48:AD:00:10:0B:36:60:6A:32:34:2A:D3:46:5D:2D:D7:FD:89:49:2B:93:F6:23:74:2E:78"}}},"request":{"raw":"GET /VmMCJGSn0d3iF4K.js?v=3 HTTP/1.1\r\nHost: vote.88mph.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://vote.88mph.app/LjjKLFLseByZ8Sz.js?v=3\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 25 Sep 2026 05:36:56 GMT\r\ncontent-type: application/javascript\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 6620487\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=2592000\r\ncontent-encoding: zstd\r\netag: \"6aaf7b5f-8e1c7\"\r\nlast-modified: Sun, 20 Sep 2026 06:21:19 GMT\r\ncdn-storageserver: DE-1140\r\ncdn-fileserver: 1336\r\ncdn-proxyver: 1.70\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 09/25/2026 05:36:55\r\ncdn-edgestorageid: 830\r\ncdn-requestid: ea1782ecad5e1dcc952873588fc16267\r\ncdn-cache: MISS\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":582087,"size_decoded":154762,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"e7db85be86b63b0a80b101f162451357","sha1":"6a3d44c90d262d8c573e85302c496813dac5c75e","sha256":"a09d895f3902eeee47c2d1d34d1f3139154874c11d5be50211b2d20dbf76bcde","sha512":"5ca33c2e2f2f25e715eadf8513b70910c76efda39446227ba54f87602e7e65f1eccaa290433ef76aca518d9d485f1fb471482daa404a9bc5951e2186aceb38bd","ssdeep":"3072:VqiVnv40OFTikYdji2RmGO8gBwi2RmGO8SHY+NcByLNNYpNntaIIbVEzmxbvvy0e:rGliHdoIWEK1vPXi4s49GiUlLFGZo","tlshash":"dfc42a95b3b4b022839d65a5482b2045f33af96d580a002cf668fcfb7da5544ab7ff70","first_seen":"2026-09-22T20:45:22.597306Z","last_seen":"2026-09-25T06:10:52.716031Z","times_seen":10,"resource_available":true,"data":null}},"time_used":166,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":166,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"firelight.run/assets/alpha-cacheplus.js","fqdn":"firelight.run","domain":"firelight.run","tld":"run"},"ip":{"addr":"104.21.13.148","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://firelight.run/","date":"2026-09-25T05:36:49.787Z","timestamp":1790314609787,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"firelight.run","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 24 Sep 2026 11:54:24 GMT","end":"Wed, 23 Dec 2026 11:54:23 GMT"},"fingerprint":{"sha1":"02:54:09:B5:1A:C4:80:FE:25:D5:90:D5:C2:96:72:47:EA:08:E4:AE","sha256":"3B:A7:9F:77:5F:07:1D:DF:C1:4E:DC:82:26:78:98:F9:C7:9C:E6:6F:08:FA:7C:0D:00:C0:A7:B5:72:83:E1:45"}}},"request":{"raw":"GET /assets/alpha-cacheplus.js HTTP/1.1\r\nHost: firelight.run\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://firelight.run/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 25 Sep 2026 05:36:49 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sun, 20 Sep 2026 01:48:56 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=d7oVoyrlJYPSd7ngFcg613wkigtikIVQOCUrW%2BlLTpW%2Bg3IyNjf3fGSwEOz0SX2OKVt%2BacvxRXuuguQCNUllwZeEMwbAAlKStZ9ri1SUQj1z8auy6v0Dgc80sQ535IEr\"}]}\r\npriority: u=3,i=?0\r\netag: W/\"6aaf3b88-366155\"\r\ncontent-encoding: gzip\r\nage: 3\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a407ac672e202efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3563861,"size_decoded":721463,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (62500), with no line terminators","md5":"5088dda15758fe6656d0ee815891a33b","sha1":"b949a5c771812717b461006d52fedcbae7d929ea","sha256":"59ff963d9e5ac0271c6b9d50c8a7232238afaf3667a696147c4071355624d216","sha512":"3bdf76468e48d978b61c123e11ec333e99c9d348026d759c3a4d128849bdf55dd23b4c276b71cc50e0c90f692939b5ba1b7cafb3e3dbf4e260acbc8f2b9cf924","ssdeep":"3072:vK8qMUbbylcNtoFez19ZQviFZnf9Puza1iPOd:auS6ez70ibf9PPi0","tlshash":"ba3551f717a98e7ec0bfec49dd356c0c90b4c9840e1e9156bd23a95bdb8caa8534874c","first_seen":"2026-09-25T05:38:00.134275Z","last_seen":"2026-09-25T05:38:00.134275Z","times_seen":1,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-25","alert":"Phishing Block","trigger":"firelight.run","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"firelight.run","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"firelight.run","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"firelight.run/index_1.html","fqdn":"firelight.run","domain":"firelight.run","tld":"run"},"ip":{"addr":"104.21.13.148","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://firelight.run/","date":"2026-09-25T05:36:49.844Z","timestamp":1790314609844,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"firelight.run","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 24 Sep 2026 11:54:24 GMT","end":"Wed, 23 Dec 2026 11:54:23 GMT"},"fingerprint":{"sha1":"02:54:09:B5:1A:C4:80:FE:25:D5:90:D5:C2:96:72:47:EA:08:E4:AE","sha256":"3B:A7:9F:77:5F:07:1D:DF:C1:4E:DC:82:26:78:98:F9:C7:9C:E6:6F:08:FA:7C:0D:00:C0:A7:B5:72:83:E1:45"}}},"request":{"raw":"GET /index_1.html HTTP/1.1\r\nHost: firelight.run\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://firelight.run/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 25 Sep 2026 05:36:49 GMT\r\ncontent-type: text/html\r\nlast-modified: Tue, 21 Apr 2026 11:39:44 GMT\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oJzCuf2AlLXeiO2tTvD0HxayyjwOTk%2FX0AFIJ3aaSbTtxdzPjHy0b5mOCSzzrBlgQ0BWGgK6MNfDiLOaIqdOphlEJipJXkRcl5gDaMUpOFbBtDPKf8whYdca9i6Y7bW%2B\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: zstd\r\ncf-ray: a407ac678e4d2efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":748,"size_decoded":1149,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (353)","md5":"ec70d6263b129fe337179e8f271b22ba","sha1":"e7823b4fbde77f7b3652e0ce1d40f40caeaffa40","sha256":"6cb473f68a849d275aa71cdc99a5ea5c4630202068c2bf4cd2581a78596771dc","sha512":"38671273a9db9ccb87ec244e4bdc81825c6275e3723b7b3a4b2f1801ab848bc8210f2d0a3a3365c82ed747e19973b3e9b879d285833ead7a5a9ac9e81ced8190","ssdeep":"","tlshash":"6a01d063c0b0842e08139173dd98b28d075c9ea8f6b1a491bd8892cd5cd5aadd66a6a8","first_seen":"2026-04-29T09:31:56.27406Z","last_seen":"2026-09-25T05:38:01.295655Z","times_seen":10,"resource_available":true,"data":null}},"time_used":40,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":40,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"firelight.run","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-25","alert":"Phishing Block","trigger":"firelight.run","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"firelight.run","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.firelight.run/?req=ping","fqdn":"api.firelight.run","domain":"firelight.run","tld":"run"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://firelight.run/","date":"2026-09-25T05:36:51.170Z","timestamp":1790314611170,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /?req=ping HTTP/1.1\r\nHost: api.firelight.run\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://firelight.run/\r\nOrigin: https://firelight.run\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-25T12:27:37.283953Z","times_seen":18651356,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"api.firelight.run","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-25","alert":"Phishing Block","trigger":"api.firelight.run","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gateway.irys.xyz/5wUerABHQTtos15xuLUSaGKLdHRysPmt8cLkhr169WEp","fqdn":"gateway.irys.xyz","domain":"irys.xyz","tld":"xyz"},"ip":{"addr":"172.66.167.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://firelight.run/","date":"2026-09-25T05:36:51.315Z","timestamp":1790314611315,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gateway.irys.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 20 Sep 2026 11:49:06 GMT","end":"Sat, 19 Dec 2026 11:49:05 GMT"},"fingerprint":{"sha1":"1B:75:8F:42:C3:0D:D3:04:72:4A:4F:BC:B0:44:35:11:BD:B0:C1:3A","sha256":"5D:7C:E7:8F:C7:B7:35:6E:0D:92:E6:E6:6C:71:F4:0D:D9:DE:7D:74:E5:56:33:7F:8D:2C:15:B1:80:E9:5D:E0"}}},"request":{"raw":"GET /5wUerABHQTtos15xuLUSaGKLdHRysPmt8cLkhr169WEp HTTP/1.1\r\nHost: gateway.irys.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://firelight.run/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 \r\ndate: Fri, 25 Sep 2026 05:36:51 GMT\r\ncontent-length: 0\r\nlocation: https://jfrwbu3xjectzwr6zpvpvbewqkwb3tvpr7kikhkfa7gcmzugoycq.mainnet-1.datasprite-cdn.com/5wUerABHQTtos15xuLUSaGKLdHRysPmt8cLkhr169WEp/\r\nserver: cloudflare\r\ncache-control: no-store\r\naccess-control-expose-headers: location, cache-control\r\naccess-control-allow-credentials: true\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nx-cache-status: BYPASS\r\ncf-cache-status: BYPASS\r\ncf-ray: a407ac710db65687-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/webp","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-25T12:27:37.283953Z","times_seen":18651356,"resource_available":true,"data":null}},"time_used":166,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":166,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gateway.irys.xyz/HvyemAESJHULoAKmn8NDZwnCL6NodeAUeqwxbtjumDgH","fqdn":"gateway.irys.xyz","domain":"irys.xyz","tld":"xyz"},"ip":{"addr":"172.66.167.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://firelight.run/","date":"2026-09-25T05:36:51.356Z","timestamp":1790314611356,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gateway.irys.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 20 Sep 2026 11:49:06 GMT","end":"Sat, 19 Dec 2026 11:49:05 GMT"},"fingerprint":{"sha1":"1B:75:8F:42:C3:0D:D3:04:72:4A:4F:BC:B0:44:35:11:BD:B0:C1:3A","sha256":"5D:7C:E7:8F:C7:B7:35:6E:0D:92:E6:E6:6C:71:F4:0D:D9:DE:7D:74:E5:56:33:7F:8D:2C:15:B1:80:E9:5D:E0"}}},"request":{"raw":"GET /HvyemAESJHULoAKmn8NDZwnCL6NodeAUeqwxbtjumDgH HTTP/1.1\r\nHost: gateway.irys.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://firelight.run/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 \r\ndate: Fri, 25 Sep 2026 05:36:51 GMT\r\ncontent-length: 0\r\nlocation: https://7ohnisscwweqylohacphls5cmyhfuuworva4o7nypw42xdl6i63a.mainnet-1.datasprite-cdn.com/HvyemAESJHULoAKmn8NDZwnCL6NodeAUeqwxbtjumDgH/\r\nserver: cloudflare\r\ncache-control: no-store\r\naccess-control-expose-headers: cache-control, location\r\naccess-control-allow-credentials: true\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nx-cache-status: BYPASS\r\ncf-cache-status: BYPASS\r\ncf-ray: a407ac711dd65687-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/webp","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-25T12:27:37.283953Z","times_seen":18651356,"resource_available":true,"data":null}},"time_used":156,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":156,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gateway.irys.xyz/4wjb3TudcCwb4QiUeXRMGVHnVoozBbvLCZzu92xYgcUx","fqdn":"gateway.irys.xyz","domain":"irys.xyz","tld":"xyz"},"ip":{"addr":"172.66.167.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://firelight.run/","date":"2026-09-25T05:36:51.297Z","timestamp":1790314611297,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gateway.irys.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 20 Sep 2026 11:49:06 GMT","end":"Sat, 19 Dec 2026 11:49:05 GMT"},"fingerprint":{"sha1":"1B:75:8F:42:C3:0D:D3:04:72:4A:4F:BC:B0:44:35:11:BD:B0:C1:3A","sha256":"5D:7C:E7:8F:C7:B7:35:6E:0D:92:E6:E6:6C:71:F4:0D:D9:DE:7D:74:E5:56:33:7F:8D:2C:15:B1:80:E9:5D:E0"}}},"request":{"raw":"GET /4wjb3TudcCwb4QiUeXRMGVHnVoozBbvLCZzu92xYgcUx HTTP/1.1\r\nHost: gateway.irys.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://firelight.run/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 \r\ndate: Fri, 25 Sep 2026 05:36:51 GMT\r\ncontent-length: 0\r\nlocation: https://hkmjhyubcmyt55tyslqmyt4arfmczeuf7xtrysanzghe6n5ezduq.mainnet-1.datasprite-cdn.com/4wjb3TudcCwb4QiUeXRMGVHnVoozBbvLCZzu92xYgcUx/\r\nserver: cloudflare\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\ncache-control: no-store\r\naccess-control-allow-credentials: true\r\naccess-control-expose-headers: cache-control, location\r\nx-cache-status: BYPASS\r\ncf-cache-status: BYPASS\r\ncf-ray: a407ac70fda15687-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/webp","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-25T12:27:37.283953Z","times_seen":18651356,"resource_available":true,"data":null}},"time_used":163,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":163,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"y2me6bz5xzrin5vis76bc53hqcyzeg6ccrbutd74zgrtsncobg6q.mainnet-1.datasprite-cdn.com/ENERkaSEqTZ9HDtcuY5LHchHWY4CPN3Q31Qasqrq4f6k/","fqdn":"y2me6bz5xzrin5vis76bc53hqcyzeg6ccrbutd74zgrtsncobg6q.mainnet-1.datasprite-cdn.com","domain":"datasprite-cdn.com","tld":"com"},"ip":{"addr":"172.67.163.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://firelight.run/","date":"2026-09-25T05:36:51.761Z","timestamp":1790314611761,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"datasprite-cdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 01 Sep 2026 16:12:35 GMT","end":"Mon, 30 Nov 2026 17:12:28 GMT"},"fingerprint":{"sha1":"A7:49:1F:BA:09:CF:9C:E9:55:85:E1:3E:6A:46:2B:56:1A:DD:E7:32","sha256":"57:8A:D0:59:59:01:19:C2:80:F0:3E:E8:83:04:E6:8C:0B:A5:94:44:42:21:A0:F5:48:2D:7F:8D:19:15:08:52"}}},"request":{"raw":"GET /ENERkaSEqTZ9HDtcuY5LHchHWY4CPN3Q31Qasqrq4f6k/ HTTP/1.1\r\nHost: y2me6bz5xzrin5vis76bc53hqcyzeg6ccrbutd74zgrtsncobg6q.mainnet-1.datasprite-cdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://firelight.run/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 25 Sep 2026 05:36:52 GMT\r\ncontent-type: image/webp\r\ncontent-length: 3038\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin\r\nx-irys-item-id: ENERkaSEqTZ9HDtcuY5LHchHWY4CPN3Q31Qasqrq4f6k\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-content-type: image/webp\r\nx-content-length: 3038\r\ncache-control: max-age=2592000\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=93H1E%2FB%2ByASAJxnAJjUnjphhGrVpe2u%2F8ew6YphCbCmd%2Fr9GNMz%2FxjHlJRigsAWHIogJoYNIGBOU0pkS%2B3UMG29d7SKJsi544VKqtKRJr01vT92Vz7XHQtGFMZbx%2BmBUYnIQgDhcAdSUTzV4vBA1W%2FPVD3d%2BTh%2FWNwYxzNn3cTUg10dohZMteJ2i4lm0lC3nmqlpN5%2B3zVN%2FPzKsxKYqwB94JaA%3D\"}]}\r\ncf-ray: a407ac74aa9f56c3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3038,"size_decoded":3908,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"54747395241f6641b0751d62e4b37d1d","sha1":"cc851372f7345453800e4153d3c41e920730f627","sha256":"b621b6d515cead780994d3a0f326c071af1e4af652483396bcaa884e73645b3c","sha512":"d252b2f4693ed0d4ed747462825d973f1c4c2085ef10d699c11e6e98a3149563fee3a3dbddefc9321abc136bb537e99eb6835b40fcf905ab6510218e2ab540cb","ssdeep":"","tlshash":"c0512d828a46b132e2091dec581199f815d6a548f7dddb8b171197172c1e9d3ccf4edc","first_seen":"2026-06-11T07:30:29.69305Z","last_seen":"2026-09-25T06:10:52.696388Z","times_seen":44,"resource_available":false,"data":null}},"time_used":381,"timings":{"blocked":106,"dns":4,"connect":5,"send":0,"wait":185,"receive":0,"ssl":60},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"y2me6bz5xzrin5vis76bc53hqcyzeg6ccrbutd74zgrtsncobg6q.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"y2me6bz5xzrin5vis76bc53hqcyzeg6ccrbutd74zgrtsncobg6q.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"y2me6bz5xzrin5vis76bc53hqcyzeg6ccrbutd74zgrtsncobg6q.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"el2hrgbroeyi4qgvgvj2lqoggwyiygesvezu3i5thvntgjewgylq.mainnet-1.datasprite-cdn.com/3MT5FBCpHxMz8SpzNZQUrhWmpXbjFb5jKMxSKUbk2HJe/","fqdn":"el2hrgbroeyi4qgvgvj2lqoggwyiygesvezu3i5thvntgjewgylq.mainnet-1.datasprite-cdn.com","domain":"datasprite-cdn.com","tld":"com"},"ip":{"addr":"104.21.15.158","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://firelight.run/","date":"2026-09-25T05:36:51.804Z","timestamp":1790314611804,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"datasprite-cdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 01 Sep 2026 16:12:35 GMT","end":"Mon, 30 Nov 2026 17:12:28 GMT"},"fingerprint":{"sha1":"A7:49:1F:BA:09:CF:9C:E9:55:85:E1:3E:6A:46:2B:56:1A:DD:E7:32","sha256":"57:8A:D0:59:59:01:19:C2:80:F0:3E:E8:83:04:E6:8C:0B:A5:94:44:42:21:A0:F5:48:2D:7F:8D:19:15:08:52"}}},"request":{"raw":"GET /3MT5FBCpHxMz8SpzNZQUrhWmpXbjFb5jKMxSKUbk2HJe/ HTTP/1.1\r\nHost: el2hrgbroeyi4qgvgvj2lqoggwyiygesvezu3i5thvntgjewgylq.mainnet-1.datasprite-cdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://firelight.run/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 25 Sep 2026 05:36:52 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\npriority: u=5,i\r\nvary: Origin\r\nx-irys-item-id: 3MT5FBCpHxMz8SpzNZQUrhWmpXbjFb5jKMxSKUbk2HJe\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-content-type: image/webp\r\nx-content-length: 1626\r\ncache-control: max-age=2592000\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3sSrqF4pFzR00D9mAMqYtI7alG57GEeE9B7Ni5dAY4Kwrx8OvzskrKgZ9M5Zw2MIvUeOCaC4CPCSG2whRkJ1jbvXKQj7YPYLDrSb9vP%2Fw%2BBM%2FKw8xTIqm4XQDgifTySLcHH5rcaWoFYvao9qr61mQ0pOwujZATa5UmSnJzmU8kKsj22hKSw3RmGor%2Bi4McluU0M91fzsAFEbML%2FmYgfPr3a4hWg%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a407ac740db3b509-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1626\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1626,"size_decoded":2504,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"f264d3c5f7b7ebe8775107161dc8c0ca","sha1":"60d88c760ebd5a5180312077fd964638849b930e","sha256":"2e6a8da7fb056c2f18249fcaf24e36ad93ecd40c0f6c3dd169061ec809e6662f","sha512":"12e73ec2d942cc782915e702636aa0c9c01cdf1e63099f8ad74532b37f720377f5955b34db3182a4a1eac30f54bf5c569e971551b6d70ce69b4c66ab27e0dec7","ssdeep":"","tlshash":"7931081a0c7fa689c735bc98ff621892b1738115e2f403e3daf39b10888609c0b924e3","first_seen":"2025-04-02T10:59:29.279287Z","last_seen":"2026-09-25T06:10:52.654855Z","times_seen":46,"resource_available":false,"data":null}},"time_used":322,"timings":{"blocked":-1,"dns":7,"connect":0,"send":0,"wait":315,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"el2hrgbroeyi4qgvgvj2lqoggwyiygesvezu3i5thvntgjewgylq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"el2hrgbroeyi4qgvgvj2lqoggwyiygesvezu3i5thvntgjewgylq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"el2hrgbroeyi4qgvgvj2lqoggwyiygesvezu3i5thvntgjewgylq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"firelight.run/24s1RHEMIZEIF0tJYVJugDOVA.png","fqdn":"firelight.run","domain":"firelight.run","tld":"run"},"ip":{"addr":"104.21.13.148","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://firelight.run/","date":"2026-09-25T05:36:49.892Z","timestamp":1790314609892,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"firelight.run","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 24 Sep 2026 11:54:24 GMT","end":"Wed, 23 Dec 2026 11:54:23 GMT"},"fingerprint":{"sha1":"02:54:09:B5:1A:C4:80:FE:25:D5:90:D5:C2:96:72:47:EA:08:E4:AE","sha256":"3B:A7:9F:77:5F:07:1D:DF:C1:4E:DC:82:26:78:98:F9:C7:9C:E6:6F:08:FA:7C:0D:00:C0:A7:B5:72:83:E1:45"}}},"request":{"raw":"GET /24s1RHEMIZEIF0tJYVJugDOVA.png HTTP/1.1\r\nHost: firelight.run\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://firelight.run/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 25 Sep 2026 05:36:49 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 21 Apr 2026 11:39:44 GMT\r\npriority: u=4,i\r\netag: \"69e76200-67f0\"\r\naccept-ranges: bytes\r\nage: 3\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8onGIkCvzhk1R4Wb7t3kKxngKkXPyUDASq7tUo4FdxvfCvtyq6M59B7KFz4Txo6NFpryRliXOxnmu4jQzkNkXpjCQjvyJLQqpxfQ0XOch8JH5XKjZjnTJW31McLFAqHU\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a407ac67de602efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 26608\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":26608,"size_decoded":27292,"mime_type":"image/png","magic":"PNG image data, 374 x 375, 8-bit colormap, non-interlaced","md5":"28f3c1cc4d40a59fcf0f079642b9b0cd","sha1":"f2a99d499d2f432ff42c683adce3d4f8f0e67b97","sha256":"d256b15f5b457d476bf59db37035aef282e31bb2c1c79a6e1e1b568eb3e6247f","sha512":"7e89e7b186c93607bbcd7d6c91c615613b478e12f76fd6371e0cff13d94827e900a7195c2aacf29585349ead1e87f7ac8e3ff1f6ba2c162938f4dd4178057fdc","ssdeep":"768:as3FNSH36osLOmYPLwpyym3Kx4F3kpyhuMY:9VNSXtlpLKc90","tlshash":"42c2e0e2010ad43ac1879667bdd6e812073e0a5de681ca86637c8f0b8e4d488ef5df48","first_seen":"2026-04-24T15:23:09.42495Z","last_seen":"2026-09-25T05:38:01.308014Z","times_seen":25,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"firelight.run","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"firelight.run","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-25","alert":"Phishing Block","trigger":"firelight.run","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gateway.irys.xyz/3P9VdFHyd9sSnhWw6vt5skH79MDNbmAPLeKZ3WU6GZjD","fqdn":"gateway.irys.xyz","domain":"irys.xyz","tld":"xyz"},"ip":{"addr":"172.66.167.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://firelight.run/","date":"2026-09-25T05:36:51.259Z","timestamp":1790314611259,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gateway.irys.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 20 Sep 2026 11:49:06 GMT","end":"Sat, 19 Dec 2026 11:49:05 GMT"},"fingerprint":{"sha1":"1B:75:8F:42:C3:0D:D3:04:72:4A:4F:BC:B0:44:35:11:BD:B0:C1:3A","sha256":"5D:7C:E7:8F:C7:B7:35:6E:0D:92:E6:E6:6C:71:F4:0D:D9:DE:7D:74:E5:56:33:7F:8D:2C:15:B1:80:E9:5D:E0"}}},"request":{"raw":"GET /3P9VdFHyd9sSnhWw6vt5skH79MDNbmAPLeKZ3WU6GZjD HTTP/1.1\r\nHost: gateway.irys.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://firelight.run/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 \r\ndate: Fri, 25 Sep 2026 05:36:51 GMT\r\ncontent-length: 0\r\nlocation: https://enr4cxf3dl3xz57mcmmg6wlxvi7gda2w5xdradzypkaigsdonhma.mainnet-1.datasprite-cdn.com/3P9VdFHyd9sSnhWw6vt5skH79MDNbmAPLeKZ3WU6GZjD/\r\nserver: cloudflare\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-credentials: true\r\ncache-control: no-store\r\naccess-control-expose-headers: location, cache-control\r\nx-cache-status: BYPASS\r\ncf-cache-status: BYPASS\r\ncf-ray: a407ac711dd85687-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/webp","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-25T12:27:37.283953Z","times_seen":18651356,"resource_available":true,"data":null}},"time_used":245,"timings":{"blocked":32,"dns":0,"connect":3,"send":0,"wait":156,"receive":0,"ssl":38},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gateway.irys.xyz/BwZqZkoJjgvs5QoobRe8CysTNUs155FJAKg6xngJ4yXj","fqdn":"gateway.irys.xyz","domain":"irys.xyz","tld":"xyz"},"ip":{"addr":"172.66.167.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://firelight.run/","date":"2026-09-25T05:36:51.284Z","timestamp":1790314611284,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gateway.irys.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 20 Sep 2026 11:49:06 GMT","end":"Sat, 19 Dec 2026 11:49:05 GMT"},"fingerprint":{"sha1":"1B:75:8F:42:C3:0D:D3:04:72:4A:4F:BC:B0:44:35:11:BD:B0:C1:3A","sha256":"5D:7C:E7:8F:C7:B7:35:6E:0D:92:E6:E6:6C:71:F4:0D:D9:DE:7D:74:E5:56:33:7F:8D:2C:15:B1:80:E9:5D:E0"}}},"request":{"raw":"GET /BwZqZkoJjgvs5QoobRe8CysTNUs155FJAKg6xngJ4yXj HTTP/1.1\r\nHost: gateway.irys.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://firelight.run/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 \r\ndate: Fri, 25 Sep 2026 05:36:51 GMT\r\ncontent-length: 0\r\nlocation: https://ukhvzo2rrxh7wozvlpmgie2zqeaaaquohhrc7a6usunqtlubkr7a.mainnet-1.datasprite-cdn.com/BwZqZkoJjgvs5QoobRe8CysTNUs155FJAKg6xngJ4yXj/\r\nserver: cloudflare\r\naccess-control-expose-headers: cache-control, location\r\naccess-control-allow-credentials: true\r\ncache-control: no-store\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nx-cache-status: BYPASS\r\ncf-cache-status: BYPASS\r\ncf-ray: a407ac70fd995687-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/png","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-25T12:27:37.283953Z","times_seen":18651356,"resource_available":true,"data":null}},"time_used":200,"timings":{"blocked":19,"dns":0,"connect":0,"send":0,"wait":181,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gateway.irys.xyz/HpG4ABhwNauwmtHUfh2BiLRYzJS5uQfZVSsU9P5dCc8n","fqdn":"gateway.irys.xyz","domain":"irys.xyz","tld":"xyz"},"ip":{"addr":"172.66.167.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://firelight.run/","date":"2026-09-25T05:36:51.374Z","timestamp":1790314611374,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gateway.irys.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 20 Sep 2026 11:49:06 GMT","end":"Sat, 19 Dec 2026 11:49:05 GMT"},"fingerprint":{"sha1":"1B:75:8F:42:C3:0D:D3:04:72:4A:4F:BC:B0:44:35:11:BD:B0:C1:3A","sha256":"5D:7C:E7:8F:C7:B7:35:6E:0D:92:E6:E6:6C:71:F4:0D:D9:DE:7D:74:E5:56:33:7F:8D:2C:15:B1:80:E9:5D:E0"}}},"request":{"raw":"GET /HpG4ABhwNauwmtHUfh2BiLRYzJS5uQfZVSsU9P5dCc8n HTTP/1.1\r\nHost: gateway.irys.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://firelight.run/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 \r\ndate: Fri, 25 Sep 2026 05:36:51 GMT\r\ncontent-length: 0\r\nlocation: https://7hle7g76hwhzkcgcytuleelhk7lwp5k2ivnywsyp5umgak26bktq.mainnet-1.datasprite-cdn.com/HpG4ABhwNauwmtHUfh2BiLRYzJS5uQfZVSsU9P5dCc8n/\r\nserver: cloudflare\r\naccess-control-expose-headers: location, cache-control\r\ncache-control: no-store\r\naccess-control-allow-credentials: true\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nx-cache-status: BYPASS\r\ncf-cache-status: BYPASS\r\ncf-ray: a407ac711de85687-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/webp","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-25T12:27:37.283953Z","times_seen":18651356,"resource_available":true,"data":null}},"time_used":159,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":159,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"elliptical-rabbit.icu/api/ping","fqdn":"elliptical-rabbit.icu","domain":"elliptical-rabbit.icu","tld":"icu"},"ip":{"addr":"172.67.175.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://firelight.run/","date":"2026-09-25T05:36:51.868Z","timestamp":1790314611868,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"elliptical-rabbit.icu","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 24 Sep 2026 03:48:05 GMT","end":"Wed, 23 Dec 2026 03:48:04 GMT"},"fingerprint":{"sha1":"AD:2B:26:5C:52:6E:8A:37:7A:A9:99:10:86:6F:5A:9E:A9:32:7E:E0","sha256":"54:29:B2:09:23:E1:46:70:31:71:D4:37:47:D6:45:84:C0:8E:33:39:75:8D:75:36:6C:3B:4F:C8:9F:60:CB:93"}}},"request":{"raw":"GET /api/ping HTTP/1.1\r\nHost: elliptical-rabbit.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://firelight.run/\r\nOrigin: https://firelight.run\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 25 Sep 2026 05:36:52 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 14\r\naccess-control-allow-origin: *\r\nvary: Accept-Encoding\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ULpxFWLuCDsVpHQCqMYrnvTg7%2FpNkUwE%2BtrJADhNOoBID1vNCTlsIEmVKUxTSxEccrAsLwXD9X7Q8OL02IiWrRiWqUH0CrtzJDUanJ6SdEy%2FlKQ%2BJc58nflcUG%2B9vmed2zkC2Q4Sm4E%3D\"}]}\r\nserver: cloudflare\r\ncf-ray: a407ac75dc1c5699-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14,"size_decoded":649,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"594d96ea0628a6a87187b8e17a7fa4b0","sha1":"5fbf4e5362196240e62d4e192bd93777898755b2","sha256":"cb100e693b55b36a08dc2b04eb312835069a4f2fc406ff374b21313b1f56b5cd","sha512":"c92fac11849dbd07dd610982d2d2e49f7aa59ec6048782145992bed639b1a518c539d9603bea6b79e4f29aa745e301923edaa9d96e1dec3ce27a8a2f4c2f2f4c","ssdeep":"","tlshash":"d96000330c0c0330030c0cc0300fcf030cc0c0c00000fcc000000300c300c000c00300","first_seen":"2025-10-03T14:25:47.505502Z","last_seen":"2026-09-25T06:10:52.67941Z","times_seen":867,"resource_available":true,"data":null}},"time_used":582,"timings":{"blocked":247,"dns":3,"connect":29,"send":0,"wait":315,"receive":0,"ssl":75},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"elliptical-rabbit.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"elliptical-rabbit.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"elliptical-rabbit.icu/api/fp","fqdn":"elliptical-rabbit.icu","domain":"elliptical-rabbit.icu","tld":"icu"},"ip":{"addr":"172.67.175.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://firelight.run/","date":"2026-09-25T05:36:54.021Z","timestamp":1790314614021,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"elliptical-rabbit.icu","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 24 Sep 2026 03:48:05 GMT","end":"Wed, 23 Dec 2026 03:48:04 GMT"},"fingerprint":{"sha1":"AD:2B:26:5C:52:6E:8A:37:7A:A9:99:10:86:6F:5A:9E:A9:32:7E:E0","sha256":"54:29:B2:09:23:E1:46:70:31:71:D4:37:47:D6:45:84:C0:8E:33:39:75:8D:75:36:6C:3B:4F:C8:9F:60:CB:93"}}},"request":{"raw":"POST /api/fp HTTP/1.1\r\nHost: elliptical-rabbit.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://firelight.run/\r\nContent-Type: application/json\r\nContent-Length: 2870\r\nOrigin: https://firelight.run\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":2870,"data":"{\"payload\":\"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\",\"reserve\":false}"}},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 25 Sep 2026 05:36:55 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 1316\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nvary: Accept-Encoding\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Nv2C%2FN6M9gnysH7EP9EygV%2F45kAbNSyaFmLRachBZ7xVp8NQghRPFdJP%2BPuaL55JocFKYm1Qn1uM2KHYmnckMd9l%2BT9%2BVmNEJqyDeOlvVFclqR7xI%2Big9CXsgIlc05vjPJ87bmZAF1Y%3D\"}]}\r\nserver: cloudflare\r\ncf-ray: a407ac82995cb51b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1291,"size_decoded":1979,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"4a7f0917c36e9b6c17a2f41a81459239","sha1":"14e444869e488ee947e9df17aabc90ba7c9cf568","sha256":"aad7e7d19da91b2e0af6075569033839b6bccc2f4a1233b05b4d5c19a3e38ff4","sha512":"c1bbfc0150ec0b6d9e2b78798d12ae5ddf75176c5f4e26cff4dc7acafa7b35da01fd350aab20f95151d7ac9506212e8281b74cb0079f196021a32eb2d71f4035","ssdeep":"","tlshash":"5721c525e4b10afb9e6cb0706062a53bf22e27596e0cc184b9415e1b96ba3ca1466896","first_seen":"2026-09-25T05:38:00.140629Z","last_seen":"2026-09-25T05:38:00.140629Z","times_seen":1,"resource_available":true,"data":null}},"time_used":1333,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":1333,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"elliptical-rabbit.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"elliptical-rabbit.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gateway.irys.xyz/7p1SUU8Rx3sQFLVxhjXboi5nVLFjCRR1Qn2pbpyBnrXn","fqdn":"gateway.irys.xyz","domain":"irys.xyz","tld":"xyz"},"ip":{"addr":"172.66.167.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://firelight.run/","date":"2026-09-25T05:36:51.348Z","timestamp":1790314611348,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gateway.irys.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 20 Sep 2026 11:49:06 GMT","end":"Sat, 19 Dec 2026 11:49:05 GMT"},"fingerprint":{"sha1":"1B:75:8F:42:C3:0D:D3:04:72:4A:4F:BC:B0:44:35:11:BD:B0:C1:3A","sha256":"5D:7C:E7:8F:C7:B7:35:6E:0D:92:E6:E6:6C:71:F4:0D:D9:DE:7D:74:E5:56:33:7F:8D:2C:15:B1:80:E9:5D:E0"}}},"request":{"raw":"GET /7p1SUU8Rx3sQFLVxhjXboi5nVLFjCRR1Qn2pbpyBnrXn HTTP/1.1\r\nHost: gateway.irys.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://firelight.run/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 \r\ndate: Fri, 25 Sep 2026 05:36:51 GMT\r\ncontent-length: 0\r\nlocation: https://muyovc3b2336fg4hlwg73n6w7lve6xi5wwagbq3mkm34hz3fufcq.mainnet-1.datasprite-cdn.com/7p1SUU8Rx3sQFLVxhjXboi5nVLFjCRR1Qn2pbpyBnrXn/\r\nserver: cloudflare\r\naccess-control-allow-credentials: true\r\ncache-control: no-store\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-expose-headers: location, cache-control\r\nx-cache-status: BYPASS\r\ncf-cache-status: BYPASS\r\ncf-ray: a407ac711dd05687-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/webp","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-25T12:27:37.283953Z","times_seen":18651356,"resource_available":true,"data":null}},"time_used":188,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":188,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gateway.irys.xyz/AA7kJLwyTxzxHDmpsHigApQXVPexXwmEAK6K939kfcX8","fqdn":"gateway.irys.xyz","domain":"irys.xyz","tld":"xyz"},"ip":{"addr":"172.66.167.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://firelight.run/","date":"2026-09-25T05:36:51.362Z","timestamp":1790314611362,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gateway.irys.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 20 Sep 2026 11:49:06 GMT","end":"Sat, 19 Dec 2026 11:49:05 GMT"},"fingerprint":{"sha1":"1B:75:8F:42:C3:0D:D3:04:72:4A:4F:BC:B0:44:35:11:BD:B0:C1:3A","sha256":"5D:7C:E7:8F:C7:B7:35:6E:0D:92:E6:E6:6C:71:F4:0D:D9:DE:7D:74:E5:56:33:7F:8D:2C:15:B1:80:E9:5D:E0"}}},"request":{"raw":"GET /AA7kJLwyTxzxHDmpsHigApQXVPexXwmEAK6K939kfcX8 HTTP/1.1\r\nHost: gateway.irys.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://firelight.run/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 \r\ndate: Fri, 25 Sep 2026 05:36:51 GMT\r\ncontent-length: 0\r\nlocation: https://rahqtny5jec73ifzc2gg5x3d5s6bznpxhj4g3ky25pp5g2l7y7pq.mainnet-1.datasprite-cdn.com/AA7kJLwyTxzxHDmpsHigApQXVPexXwmEAK6K939kfcX8/\r\nserver: cloudflare\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\ncache-control: no-store\r\naccess-control-allow-credentials: true\r\naccess-control-expose-headers: cache-control, location\r\nx-cache-status: BYPASS\r\ncf-cache-status: BYPASS\r\ncf-ray: a407ac711dde5687-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/webp","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-25T12:27:37.283953Z","times_seen":18651356,"resource_available":true,"data":null}},"time_used":170,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":170,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"7hle7g76hwhzkcgcytuleelhk7lwp5k2ivnywsyp5umgak26bktq.mainnet-1.datasprite-cdn.com/HpG4ABhwNauwmtHUfh2BiLRYzJS5uQfZVSsU9P5dCc8n/","fqdn":"7hle7g76hwhzkcgcytuleelhk7lwp5k2ivnywsyp5umgak26bktq.mainnet-1.datasprite-cdn.com","domain":"datasprite-cdn.com","tld":"com"},"ip":{"addr":"104.21.15.158","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://firelight.run/","date":"2026-09-25T05:36:51.767Z","timestamp":1790314611767,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"datasprite-cdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 01 Sep 2026 16:12:35 GMT","end":"Mon, 30 Nov 2026 17:12:28 GMT"},"fingerprint":{"sha1":"A7:49:1F:BA:09:CF:9C:E9:55:85:E1:3E:6A:46:2B:56:1A:DD:E7:32","sha256":"57:8A:D0:59:59:01:19:C2:80:F0:3E:E8:83:04:E6:8C:0B:A5:94:44:42:21:A0:F5:48:2D:7F:8D:19:15:08:52"}}},"request":{"raw":"GET /HpG4ABhwNauwmtHUfh2BiLRYzJS5uQfZVSsU9P5dCc8n/ HTTP/1.1\r\nHost: 7hle7g76hwhzkcgcytuleelhk7lwp5k2ivnywsyp5umgak26bktq.mainnet-1.datasprite-cdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://firelight.run/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 25 Sep 2026 05:36:52 GMT\r\ncontent-type: image/webp\r\ncontent-length: 2034\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin\r\nx-irys-item-id: HpG4ABhwNauwmtHUfh2BiLRYzJS5uQfZVSsU9P5dCc8n\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-content-type: image/webp\r\nx-content-length: 2034\r\ncache-control: max-age=2592000\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=e2Pjy8rFvaZJMIwV1A2%2B%2BQ7tOEVFGIJqMRpo2Hr1bf8p7FHWwl%2BTwdjgPRH6veEJgaih1LbT2HvxTHxbbGPM0omvhu%2FKYyDPFW6%2B19G%2BirC5baS3FVY1gXE5R0baE0u2Ztx%2B2j03ff4oHYewzTgGbBtgsf857uV6AJvQRAjx41UFYYou%2FoMFwYo%2FrQlNhfXDKI1eOJFl2858yu%2Fb0pUidq8G%2B5c%3D\"}]}\r\ncf-ray: a407ac74afabb51e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2034,"size_decoded":2902,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"b83294a28b7ab0245ecf46cb205cfcc3","sha1":"2268400a548f428e98812f71c49921937ded5610","sha256":"9be573dd626af24162d8bac830e1e4427319fe2b45ae19ed877417505fac3085","sha512":"fbefee7041bbd4f1f6b3096106c8eada732f11444818b9aec2947e23e323aa8148a3f352ae408ac3755e7c1bd26b4423f17c01747a9c96230f5908b0c8ad2688","ssdeep":"","tlshash":"b3414cc39546827c704c1d7aeb02f1c321e7f1a181e1283216c86af5729e400a70f795","first_seen":"2026-06-11T07:30:29.751577Z","last_seen":"2026-09-25T06:10:52.71396Z","times_seen":41,"resource_available":false,"data":null}},"time_used":376,"timings":{"blocked":98,"dns":4,"connect":4,"send":0,"wait":189,"receive":0,"ssl":64},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"7hle7g76hwhzkcgcytuleelhk7lwp5k2ivnywsyp5umgak26bktq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"7hle7g76hwhzkcgcytuleelhk7lwp5k2ivnywsyp5umgak26bktq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"7hle7g76hwhzkcgcytuleelhk7lwp5k2ivnywsyp5umgak26bktq.mainnet-1.datasprite-cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}}]}