{"report_id":"11e6ba00-ed41-4290-8751-e13c6f32ef45","version":6,"status":"done","tags":[],"date":"2026-04-21T18:06:02Z","url":{"schema":"http","addr":"onchain-crypto-xc.cc","fqdn":"onchain-crypto-xc.cc","domain":"onchain-crypto-xc.cc","tld":"cc"},"ip":{"addr":"104.21.62.167","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"onchain-crypto-xc.cc/#/login","fqdn":"onchain-crypto-xc.cc","domain":"onchain-crypto-xc.cc","tld":"cc"},"title":"Crypto Onchain","dom":{"size":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"onchain-crypto-xc.cc","fqdn":"onchain-crypto-xc.cc","domain":"onchain-crypto-xc.cc","tld":"cc"},"ip":{"addr":"104.21.62.167","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-05-26T18:06:02Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":12,"urlquery":0,"analyzer":2}},"detection":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-04-21T18:05:46Z","timestamp":1776794746,"ip_dst":{"addr":"47.79.82.131","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Japan","country_code":"JP"},"ip_src":{"addr":"Client IP","port":56706,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2026-04-21T18:05:46.493494+0000\",\"flow_id\":762016259758470,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.6\",\"src_port\":56706,\"dest_ip\":\"47.79.82.131\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"coinmm.oss-ap-northeast-1.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":5,\"bytes_toserver\":904,\"bytes_toclient\":4662,\"start\":\"2026-04-21T18:05:45.973190+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-04-21T18:05:46Z","timestamp":1776794746,"ip_dst":{"addr":"47.79.82.131","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Japan","country_code":"JP"},"ip_src":{"addr":"Client IP","port":56718,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2026-04-21T18:05:46.498526+0000\",\"flow_id\":2117104211450405,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.6\",\"src_port\":56718,\"dest_ip\":\"47.79.82.131\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"coinmm.oss-ap-northeast-1.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":7,\"bytes_toserver\":753,\"bytes_toclient\":6401,\"start\":\"2026-04-21T18:05:45.973349+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-04-21T18:05:46Z","timestamp":1776794746,"ip_dst":{"addr":"47.79.82.131","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Japan","country_code":"JP"},"ip_src":{"addr":"Client IP","port":56736,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2026-04-21T18:05:46.505203+0000\",\"flow_id\":1240608760519501,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.6\",\"src_port\":56736,\"dest_ip\":\"47.79.82.131\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"coinmm.oss-ap-northeast-1.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":3,\"bytes_toserver\":753,\"bytes_toclient\":1634,\"start\":\"2026-04-21T18:05:45.973645+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-04-21T18:05:46Z","timestamp":1776794746,"ip_dst":{"addr":"47.79.82.131","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Japan","country_code":"JP"},"ip_src":{"addr":"Client IP","port":56732,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2026-04-21T18:05:46.512390+0000\",\"flow_id\":932015360301754,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.6\",\"src_port\":56732,\"dest_ip\":\"47.79.82.131\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"coinmm.oss-ap-northeast-1.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":5,\"bytes_toserver\":753,\"bytes_toclient\":4662,\"start\":\"2026-04-21T18:05:45.973498+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-04-21T18:05:46Z","timestamp":1776794746,"ip_dst":{"addr":"47.79.82.131","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Japan","country_code":"JP"},"ip_src":{"addr":"Client IP","port":56694,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2026-04-21T18:05:46.518184+0000\",\"flow_id\":1304895831005338,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.6\",\"src_port\":56694,\"dest_ip\":\"47.79.82.131\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"coinmm.oss-ap-northeast-1.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":5,\"bytes_toserver\":904,\"bytes_toclient\":4662,\"start\":\"2026-04-21T18:05:45.972954+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-04-21T18:05:46Z","timestamp":1776794746,"ip_dst":{"addr":"47.79.82.131","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Japan","country_code":"JP"},"ip_src":{"addr":"Client IP","port":56748,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2026-04-21T18:05:46.528922+0000\",\"flow_id\":1065601728109588,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.6\",\"src_port\":56748,\"dest_ip\":\"47.79.82.131\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"coinmm.oss-ap-northeast-1.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":7,\"bytes_toserver\":753,\"bytes_toclient\":6401,\"start\":\"2026-04-21T18:05:45.973844+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-04-21T18:05:46Z","timestamp":1776794746,"ip_dst":{"addr":"47.79.82.131","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Japan","country_code":"JP"},"ip_src":{"addr":"Client IP","port":56784,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2026-04-21T18:05:46.752605+0000\",\"flow_id\":1394433014263330,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.6\",\"src_port\":56784,\"dest_ip\":\"47.79.82.131\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"coinmm.oss-ap-northeast-1.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":3,\"bytes_toserver\":753,\"bytes_toclient\":1634,\"start\":\"2026-04-21T18:05:46.224802+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-04-21T18:05:46Z","timestamp":1776794746,"ip_dst":{"addr":"47.79.82.131","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Japan","country_code":"JP"},"ip_src":{"addr":"Client IP","port":56808,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2026-04-21T18:05:46.754872+0000\",\"flow_id\":417104616124224,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.6\",\"src_port\":56808,\"dest_ip\":\"47.79.82.131\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"coinmm.oss-ap-northeast-1.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":5,\"bytes_toserver\":904,\"bytes_toclient\":4662,\"start\":\"2026-04-21T18:05:46.225088+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-04-21T18:05:46Z","timestamp":1776794746,"ip_dst":{"addr":"47.79.82.131","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Japan","country_code":"JP"},"ip_src":{"addr":"Client IP","port":56770,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2026-04-21T18:05:46.758467+0000\",\"flow_id\":1298693898268106,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.6\",\"src_port\":56770,\"dest_ip\":\"47.79.82.131\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"coinmm.oss-ap-northeast-1.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":7,\"bytes_toserver\":904,\"bytes_toclient\":6401,\"start\":\"2026-04-21T18:05:46.224714+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-04-21T18:05:46Z","timestamp":1776794746,"ip_dst":{"addr":"47.79.82.131","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Japan","country_code":"JP"},"ip_src":{"addr":"Client IP","port":56802,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2026-04-21T18:05:46.768757+0000\",\"flow_id\":813259514605275,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.6\",\"src_port\":56802,\"dest_ip\":\"47.79.82.131\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"coinmm.oss-ap-northeast-1.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":7,\"bytes_toserver\":904,\"bytes_toclient\":6401,\"start\":\"2026-04-21T18:05:46.224987+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-04-21T18:05:46Z","timestamp":1776794746,"ip_dst":{"addr":"47.79.82.131","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Japan","country_code":"JP"},"ip_src":{"addr":"Client IP","port":56800,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2026-04-21T18:05:46.815281+0000\",\"flow_id\":1603138360077959,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.6\",\"src_port\":56800,\"dest_ip\":\"47.79.82.131\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"coinmm.oss-ap-northeast-1.aliyuncs.com\",\"version\":\"UNDETERMINED\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":3,\"bytes_toserver\":916,\"bytes_toclient\":1634,\"start\":\"2026-04-21T18:05:46.224903+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-04-21T18:05:46Z","timestamp":1776794746,"ip_dst":{"addr":"47.79.82.131","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Japan","country_code":"JP"},"ip_src":{"addr":"Client IP","port":56756,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2026-04-21T18:05:46.822304+0000\",\"flow_id\":1515671351094569,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.6\",\"src_port\":56756,\"dest_ip\":\"47.79.82.131\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"coinmm.oss-ap-northeast-1.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":6,\"bytes_toserver\":904,\"bytes_toclient\":4887,\"start\":\"2026-04-21T18:05:46.224553+0000\"}}"}],"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"h5-api.onchaincryptoapi.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"onchain-crypto-xc.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"h5-api.onchaincryptoapi.cc","ip":{"addr":"104.21.44.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-04-16","domain_rank":0,"first_seen":"2026-04-17T12:22:44.242508Z","last_seen":"2026-04-17T12:22:44.242508Z","alert_count":19,"request_count":19,"received_data":218524,"sent_data":13299,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Java","description":"Java is a class-based, object-oriented programming language that is designed to have as few implementation dependencies as possible.","website":"https://java.com","common_platform_enumeration":"cpe:2.3:a:oracle:jre:*:*:*:*:*:*:*:*","icon":"Java.svg","categories":["Programming languages"]}]},{"fqdn":"onchain-crypto-xc.cc","ip":{"addr":"104.21.62.167","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-04-16","domain_rank":0,"first_seen":"2026-04-21T18:06:06.171223Z","last_seen":"2026-04-21T18:06:06.171223Z","alert_count":25,"request_count":25,"received_data":11520937,"sent_data":11200,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"coinmm.oss-ap-northeast-1.aliyuncs.com","ip":{"addr":"47.79.82.131","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Japan","country_code":"JP"},"domain_registered":"2012-04-01","domain_rank":0,"first_seen":"2024-12-20T23:51:24.400828Z","last_seen":"2026-04-17T12:22:44.781617Z","alert_count":0,"request_count":9,"received_data":28911,"sent_data":4393,"comment":"","tags":null,"fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"onchain-crypto-xc.cc/#/home","fqdn":"onchain-crypto-xc.cc","domain":"onchain-crypto-xc.cc","tld":"cc"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"ced6204993ccd4d4792486f3b3c899b1","sha1":"c16ea5b8c59dcea2b9b03d844467f9db0d358cdc","sha256":"317f80fdd1cb3e7b69648541320cfeb07fd3ea3d1b70d3aab180edce7c3c4ac5","sha512":"dbf99b86ffabe8deeb56f836821b1f3c58fe9b502b89210ec5082f60b4cb4e30f060645fc970bf48f5c3f20073f0e79845925b0dfb4ac89df0319d4c26bdb795","ssdeep":"","tlshash":"b8c08cc4a0c22e509622651410af38e89034402ab08c5b52dc98e94e3f260f49237eac","size":149,"data":"","first_seen":"2024-01-05T03:21:28Z","last_seen":"2026-04-30T14:42:23.642339Z","times_seen":331,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"onchain-crypto-xc.cc/ac-chat.js?2.2.1776335643294","fqdn":"onchain-crypto-xc.cc","domain":"onchain-crypto-xc.cc","tld":"cc"},"ip":{"addr":"104.21.62.167","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"f1f22e1c3f1ad317f0c10100fe4ca88f","sha1":"b16c8c959d49458db1ef2f7b734e135f5ae96048","sha256":"c45bfb2cd85abd4143b76d5a98376b94c134c88f56f8096095ffe30cdf3f6ccd","sha512":"952b7c83e041d344162e9a48c48a98120835dd227b53bc7bd1efc02de267b3a743ddde8138150ec9f0a61adfec7b04b2eacf49820f1605d443f2a6714fc20563","ssdeep":"","tlshash":"e441aeab47794224c20b11e32d4660943232a01fab4a1d3c79fc60d8efaab7554e1ff9","size":2311,"data":"","first_seen":"2024-08-29T17:49:52.044057Z","last_seen":"2026-04-21T18:06:11.937238Z","times_seen":127,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"onchain-crypto-xc.cc/","fqdn":"onchain-crypto-xc.cc","domain":"onchain-crypto-xc.cc","tld":"cc"},"ip":{"addr":"104.21.62.167","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"2ad53af9c18af912c76926221d570492","sha1":"a672a82ba5f9129d8fb523ca37757dfe57cdd22e","sha256":"284a9f872d166144ed7ea8ac15e57bb6ee50638a6a190362b26b1dac10c0dbfc","sha512":"5b07fd5bf0f1457fe02ee4348502b20379104b1deba673fde0270a812118321a9aa389f3333c1ed56d4fb523988c6b702afb1afa93d1f1416c56cb7db9067ece","ssdeep":"","tlshash":"c011abfe292a712a6343804f976b7911743160ad000e1441778c9a9dabaabadd0cfb8d","size":1058,"data":"","first_seen":"2026-04-17T12:22:51.871987Z","last_seen":"2026-04-21T18:06:11.961428Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"onchain-crypto-xc.cc/#/home","fqdn":"onchain-crypto-xc.cc","domain":"onchain-crypto-xc.cc","tld":"cc"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"3f2605bde342441a22c4f9855dc71b9f","sha1":"8f92d2195eae78263bdf685edc7098814627ae34","sha256":"a7b2d9be8dc7a620a683964c5b6cc4d90a01c610be35e2472a3ba4fb68bd462f","sha512":"747b5822ecd7e17503d1076745818f06edc89060862bdaf8c0b553500d560c52eee06dcb4261277648e2c18e523584cde9e60abca56659145dea7e551bdf095a","ssdeep":"","tlshash":"38e04ffb36b295486c44422959cd1e22b1518237dcadba5c748c2d009f9f52c0678436","size":343,"data":"","first_seen":"2025-11-21T07:12:48.197866Z","last_seen":"2026-04-21T18:06:11.96238Z","times_seen":21,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"onchain-crypto-xc.cc/#/home","fqdn":"onchain-crypto-xc.cc","domain":"onchain-crypto-xc.cc","tld":"cc"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"7746993e8adb9277ba5afa2584910974","sha1":"8e7e6d562fd56f594b40b6657156d483d7426e40","sha256":"833dc15f120cad89d5c0680edae217dbad02010e42af351959607df4170074ee","sha512":"10ee66e22fa45386057f1385e179955ad4fd4d53363c0aebe68aa9ba0547bf409a286e53ab6e678e5d0c3485d6cabcdd359f359c5258160b50a0a5a5496d6e6d","ssdeep":"","tlshash":"39c08cc5a0c22e101646641010bf28e49024402674481b028c98d8482e220b08233e9c","size":140,"data":"","first_seen":"2023-04-13T07:32:13Z","last_seen":"2026-04-30T14:43:21.719316Z","times_seen":3335,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"onchain-crypto-xc.cc/#/home","fqdn":"onchain-crypto-xc.cc","domain":"onchain-crypto-xc.cc","tld":"cc"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"fe38a231daabca7ee9331f1601a08e31","sha1":"22bf55758c90a53410cecd193fcb1c3216367d49","sha256":"f5bff08a53c4d278175a0a1220019e39232feb024918177f6d0f522dba4e8239","sha512":"6178f6fbd722656b8158b1b081cd981cf60e36eef4fe02d52f733a4df6d2e2570223735d03f97e55563633cd69218cebb85f2685a8d3ea38f4fd2a7f0498d266","ssdeep":"","tlshash":"77c08cc4a0c27d002606641010af24e49024402670481b028c94d8482e220b08233e98","size":136,"data":"","first_seen":"2023-05-04T20:29:59Z","last_seen":"2026-04-30T11:23:37.006001Z","times_seen":886,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"onchain-crypto-xc.cc/","fqdn":"onchain-crypto-xc.cc","domain":"onchain-crypto-xc.cc","tld":"cc"},"ip":{"addr":"104.21.62.167","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"cd7a34e714de94d5c29b8ac5acdde24b","sha1":"b722bccb435490630d97ef88cafeb02d92f70fd0","sha256":"312ebfdc50a0e168cff60c206811b02e944263a7d9060c2685509dacfacd7f71","sha512":"a724bc648a508c24e5bb1788e1f02b47030893bbb0b80a99e380d95480095983a35d8ec11193c53f0a67db47a289ab608fcbc9dbca846bfdd5d61a8832290f43","ssdeep":"","tlshash":"58e07d48ff28c7f316ce28ab516e770858d104d58c1b58024cebccc86935ed87291527","size":314,"data":"","first_seen":"2023-03-11T11:23:25Z","last_seen":"2026-04-30T19:26:26.791361Z","times_seen":32495,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"onchain-crypto-xc.cc/#/home","fqdn":"onchain-crypto-xc.cc","domain":"onchain-crypto-xc.cc","tld":"cc"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"2f77c84d08ba183d83bfdda827b0703f","sha1":"3dc3c6dfc228acc77a69b89d2539a3d3855834fb","sha256":"7acee9dcec67d02e6d64bb1ce42aad79bdf3c631349d51f9a439614f0502cc8f","sha512":"32c6577fa57217fc84b88e627840a122ad18600887d758aacc04a9a44a9528fcf04e4d60ac9e43ed26be952830ff5a25b5f91ac94b25b9ec00f1a2bd1faffd4d","ssdeep":"","tlshash":"97c08cc4a0da2d009616a49421af24e4a1344026744c1b028cd8dc482e624b09233ea8","size":146,"data":"","first_seen":"2025-10-12T16:46:58.570604Z","last_seen":"2026-04-21T18:06:11.96581Z","times_seen":21,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"onchain-crypto-xc.cc/#/home","fqdn":"onchain-crypto-xc.cc","domain":"onchain-crypto-xc.cc","tld":"cc"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"d29ebba693c922e91865335ffed845ed","sha1":"e9b9a77a3af462829f48bbd0768a55cb15baece2","sha256":"264772ca559411d6372742e35c51d669eae163b3b54e47511da5f5b71f330cd0","sha512":"af1764dadc8d96d8892483347259b950afdd7ed0353f007ad17d8cf16d7fadf82d97b7faca565a8bbe96a2f926328ffd8dcf15d52d18922c59627fd51c198f16","ssdeep":"","tlshash":"03c08cd9a0d73d001602691025ef34e4902480b670482b03ecd4e9582e638b5923bfa8","size":153,"data":"","first_seen":"2025-10-12T16:46:58.432109Z","last_seen":"2026-04-21T18:06:11.966656Z","times_seen":21,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"onchain-crypto-xc.cc/#/home","fqdn":"onchain-crypto-xc.cc","domain":"onchain-crypto-xc.cc","tld":"cc"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"eba99941cc5f24de4604993f37edafba","sha1":"55a09e6c1b31d1dc8442243d4b0de52baef778b8","sha256":"bed6b6bec235ba5fe5a67fc5e9ae830d8d482a753a0bbc707b69c7771ca08ed0","sha512":"43105170b7b1ba75799da4a75db345cba0ec50a28f9254654213e4742f0301d1776e4d0ec56a5f8b14d7e9dda00a6dd2db34d721b441348085166d8c3b8286e1","ssdeep":"","tlshash":"c7c080c560db3d145517595511ff34d890344836704817668cd8fc5d3f960b08177ddc","size":173,"data":"","first_seen":"2025-10-12T16:46:58.538134Z","last_seen":"2026-04-21T18:06:11.967439Z","times_seen":21,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"onchain-crypto-xc.cc/#/home","fqdn":"onchain-crypto-xc.cc","domain":"onchain-crypto-xc.cc","tld":"cc"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"59de23a2465a23b85c406660086caeef","sha1":"02591125c51ef15cce36ba28fd6bc0d97ae31a12","sha256":"da81a416025edf5a25791636ac1f78e0d57cc5fd8c7db213c48d258a9b7c09e7","sha512":"668e8050a8551be3259dd6473a8ebf9b25cd3717c1e11888a547d8ac6f7c8f26904bb2f0fbb92c1d46c905f7856bd074f0ecdce8b956a42037881eeb4a6c3a39","ssdeep":"","tlshash":"5ac012d9b1c33d105616a554256f35d455344466704c5a22dca4d85d2f520f0913beac","size":171,"data":"","first_seen":"2025-10-12T16:46:58.4714Z","last_seen":"2026-04-21T18:06:11.968296Z","times_seen":21,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"onchain-crypto-xc.cc/assets/en-hghz1qY-.js","fqdn":"onchain-crypto-xc.cc","domain":"onchain-crypto-xc.cc","tld":"cc"},"ip":{"addr":"104.21.62.167","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"02abef479c2da93ea7f45d367fc8d6d0","sha1":"268f5132879e133827f0f3f3d485f4a38cf3ef08","sha256":"24f5ac57c2475ea4826b86cc2302e80ec9a30dc647cfc6b0e1c063d62c26668c","sha512":"bb1c70b2f518c4d9cf45f262ed126607d1d83f5a51c4da9150b9901de7f27e0bedb4198233874beb42e2fd3423dc5f5fe965addda54b50efb54f0bd148e49d03","ssdeep":"768:KGtZcEw/o7rDO8siSAMnIUGcg2PmPsPScH35xJnLBgsFuuV:uponDO8uIUGcgLsP5H35xZLBHF/","tlshash":"b733f88ebe165c5a44e3133a7cce3a6010f505c18795880f5bec8afc53e1ba667b7639","size":50665,"data":"","first_seen":"2026-04-17T12:22:51.861407Z","last_seen":"2026-04-21T18:06:11.958652Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"onchain-crypto-xc.cc/#/home","fqdn":"onchain-crypto-xc.cc","domain":"onchain-crypto-xc.cc","tld":"cc"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"7de71cd324bb8833f4a138cbcdafa759","sha1":"d7a8122c1483170fa571ec47c62f91c66d662ede","sha256":"62b9d7d992de0ba11591d4ed7c7ab166d886c09ddb4a6b79693795ce836c6003","sha512":"5d42f665549881c48abeb0ee42138dcd1b0f6140e49c3fc6efdfe3657cba54e63218787f0b0d2f12622873799b4ec3a21b9f4f62194f2cc9bda2758dd699a439","ssdeep":"","tlshash":"73c08cdab0d72d006602642110af78e8a0388027b08c9b439cd4d8883ea30b08233fa8","size":151,"data":"","first_seen":"2024-01-05T03:21:29Z","last_seen":"2026-04-30T14:42:23.647088Z","times_seen":318,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"onchain-crypto-xc.cc/#/home","fqdn":"onchain-crypto-xc.cc","domain":"onchain-crypto-xc.cc","tld":"cc"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"acec29eeb7d4f8168a326a217f9f10f5","sha1":"3faa75f7a8891ea119579211a25c005b9494a761","sha256":"5dbc77b4e059427e99bc9e0b97bbdc214edaa00845dd1f6644d4418f30a76476","sha512":"b118e6cd5248947fbae3127fb48e14103ef8c842313ad7b1333df47b8756304eace77ad464bd4f73a83b92c39c5deae05c5bf1e5b1fc879e05a9dc9ee4fbfdd3","ssdeep":"","tlshash":"18c080c960c77d10651ee61418bf34f450244027704c5f429dd8dc483e120f49237f9c","size":166,"data":"","first_seen":"2025-10-12T16:46:58.57572Z","last_seen":"2026-04-21T18:06:11.970024Z","times_seen":21,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"onchain-crypto-xc.cc/#/home","fqdn":"onchain-crypto-xc.cc","domain":"onchain-crypto-xc.cc","tld":"cc"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"c0e88513b499aae066f13f6f0edfedab","sha1":"12fd9320e7be26e9257e2a1a39a698a5e2706292","sha256":"3ffd5a1fea533c35c122aeb0a36f3d4a37022e0a14c83167faeaa819b3ee8cfd","sha512":"36b57e74aa71e21ec5489637f206796e8b9097db32c59e4ffbbdd7eb11ce35c2f754178f996bd6e11abc560cdddd3af7cde3fc1847c1a455120b5c26ee4fb838","ssdeep":"","tlshash":"17c08cc8b0c6ad001602e45111bf25e4a024802770481b128d98e8483e220f48233e9c","size":139,"data":"","first_seen":"2023-08-29T11:10:58Z","last_seen":"2026-04-30T14:43:21.715557Z","times_seen":825,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"onchain-crypto-xc.cc/#/home","fqdn":"onchain-crypto-xc.cc","domain":"onchain-crypto-xc.cc","tld":"cc"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"f19a249a3e546a75d19b9d3f75497cdd","sha1":"4fcf8a4234dc76c37cb9415dd3c2d4820fb45a30","sha256":"8f0b9cbdf1999a03131eed312b7dc7ab85a5ddbf696e4805d240a61cdf5066b2","sha512":"7f999eee3d080218db37b9bd7ae6ca464771276ae0eb378b537d24635f5d700aede00359099b8e2197cc4f36e56162a46110fbdb85f213ed5ada51d9875a7402","ssdeep":"","tlshash":"c5c08cc9a2c22d001646641014bf28f4902480277048ab038dd4dc892e620f0823be9c","size":146,"data":"","first_seen":"2024-01-05T03:21:29Z","last_seen":"2026-04-30T14:42:23.653004Z","times_seen":495,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"onchain-crypto-xc.cc/charting_library/charting_library.min.js","fqdn":"onchain-crypto-xc.cc","domain":"onchain-crypto-xc.cc","tld":"cc"},"ip":{"addr":"104.21.62.167","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"8573e89d9ec535663d75f21b1f08109c","sha1":"a8d9eea0b157ceeffc38d4254e6f6abc9d697d10","sha256":"cb0c6c9f1771d252eee7caa043bdd7cfffbd52c2cc4b18b7be7c4554ed069151","sha512":"55d728fa1e0682725f94b17387c6790792d3d34b43652a00097876118575bd6cefa20916d80674519005d72f20ecbb745e9645516c056e6f9bb6691d5efbcb33","ssdeep":"192:9fdWSo7ktFUnoBelr6lw2LfnzuIQPlaJ1i10K+Ei/ISJhvHIheu5Ph3Ffam:vWS2ktFUnoIlD2LfnqIJimK+5/ISJhvu","tlshash":"6e224f58ed2478720acb54f0427f180f8239e278d84944ed3cc4e6ec59fd44a6a6fbb8","size":10858,"data":"","first_seen":"2023-08-16T00:37:19Z","last_seen":"2026-04-30T10:30:02.872376Z","times_seen":474,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"onchain-crypto-xc.cc/","fqdn":"onchain-crypto-xc.cc","domain":"onchain-crypto-xc.cc","tld":"cc"},"ip":{"addr":"104.21.62.167","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"528dd01eb509d1fc3c68b48e165c9d77","sha1":"8d702f33d869eb8c53cf75c17014f96385322395","sha256":"b508dff20bdbd9138e31aa48c45bc501805e509d2fd4709b39c4a60cd5c6b43a","sha512":"4c1edeec560f431005363ff5291acc80c1c42edf7c9a6d6e4fde2f7539b6a35a8e36f0bc228503263277bf5df4525dc579575faadca614c32e5dfa885a2d343b","ssdeep":"","tlshash":"78a012bb71b851710cd51ba7a40455e01c20123105052c101c8d5151c011c171d394c0","size":84,"data":"","first_seen":"2023-04-07T06:55:59Z","last_seen":"2026-04-30T19:26:26.791861Z","times_seen":35784,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"h5-api.onchaincryptoapi.cc/kline","fqdn":"h5-api.onchaincryptoapi.cc","domain":"onchaincryptoapi.cc","tld":"cc"},"ip":{"addr":"104.21.44.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://onchain-crypto-xc.cc/","date":"2026-04-21T18:05:46.048Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"onchaincryptoapi.cc","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 16 Apr 2026 06:30:01 GMT","end":"Wed, 15 Jul 2026 06:30:00 GMT"},"fingerprint":{"sha1":"37:E5:34:F0:88:CC:E7:1E:F3:EF:6E:50:46:07:EB:0E:17:EB:8F:90","sha256":"3F:29:0D:8F:29:F1:E6:6E:CA:74:3D:FB:32:6A:F4:18:41:A4:85:18:C9:48:5C:98:3A:8B:2D:38:B1:2C:5F:E5"}}},"request":{"raw":"OPTIONS /kline HTTP/1.1\r\nHost: h5-api.onchaincryptoapi.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,lang,language,sign\r\nOrigin: https://onchain-crypto-xc.cc\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 21 Apr 2026 18:05:46 GMT\r\ncontent-length: 0\r\nserver: cloudflare\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://onchain-crypto-xc.cc\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: content-type, lang, language, sign\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=55eWrHIXE2%2B89S8in3pwJADaRamn5z1b%2BenvV3jIWBiDpihlLqoeoLzRHs0OS5B95BpBC9kD5yHzHf3xWeyI2ffsdFjzyP1CfzHQQg1521uWGQp5tEbzelT8uo4owo5SZ8OcBHQSZibG2E6rxA%3D%3D\"}]}\r\ncf-ray: 9efe519acf88b4fd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-30T19:35:18.687432Z","times_seen":14438163,"resource_available":true,"data":null}},"time_used":271,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":271,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"h5-api.onchaincryptoapi.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.onchaincryptoapi.cc/kline","fqdn":"h5-api.onchaincryptoapi.cc","domain":"onchaincryptoapi.cc","tld":"cc"},"ip":{"addr":"104.21.44.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://onchain-crypto-xc.cc/","date":"2026-04-21T18:05:46.337Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"onchaincryptoapi.cc","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 16 Apr 2026 06:30:01 GMT","end":"Wed, 15 Jul 2026 06:30:00 GMT"},"fingerprint":{"sha1":"37:E5:34:F0:88:CC:E7:1E:F3:EF:6E:50:46:07:EB:0E:17:EB:8F:90","sha256":"3F:29:0D:8F:29:F1:E6:6E:CA:74:3D:FB:32:6A:F4:18:41:A4:85:18:C9:48:5C:98:3A:8B:2D:38:B1:2C:5F:E5"}}},"request":{"raw":"POST /kline HTTP/1.1\r\nHost: h5-api.onchaincryptoapi.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nlanguage: en\r\nlang: en\r\nsign: MpXmRMGt13HSK6x4MkBVMycfbCxS0FThNI0kx0TX2sIEvSR78XAufpGzWXIhS6lIm5Ypa54Gl7rdAQegGUkPwFcHe8jvc+sBUNe5OOVybA/Q/JpewIsGxI4jSQWO8txV+49pSETrqqKbhUmRxM768OFt99c8BS+vHt8RbTJIxpS8n607Au0gLrqP8JheMYYxPZsu4boryqnBG/ic0rqnnZXOiTWsK2hnjkBBLSRLJENOclS6UcLBZPmRlR4ZL0dvwDkn4/QNElLQ+VhXKygLOccaTiwXZLw5VU6TSsuMDSyaFv5I70EcVcvmZGoxbupm4UzW3w1NjLfr7e0Te3oNzA==\r\nContent-Length: 69\r\nOrigin: https://onchain-crypto-xc.cc\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":69,"data":"{\"interval\":\"ONE_MIN\",\"limit\":1000,\"market\":\"binance\",\"symbol\":\"btc\"}"}},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 21 Apr 2026 18:05:46 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://onchain-crypto-xc.cc\r\naccess-control-allow-credentials: true\r\nset-cookie: JSESSIONID=01DCCDE452EF732268A778A6228B382F; Path=/; HttpOnly\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NRUJlquOl16RuUTPuP0l4v056d1HEABlwfupxP5zfKCCdP3XG%2Bul%2F7TCnvx7UaHqOKn1GbyX0oV6sYPeNk68NpH601zXKsndh5ZK%2Ft2xX%2FVEQDaCO6kDnX%2BeaOAT9ysFwYCbGanBruBW%2FRl%2BUA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9efe519c8ac4b512-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Java","description":"Java is a class-based, object-oriented programming language that is designed to have as few implementation dependencies as possible.","website":"https://java.com","common_platform_enumeration":"cpe:2.3:a:oracle:jre:*:*:*:*:*:*:*:*","icon":"Java.svg","categories":["Programming languages"]}],"data":{"size":41924,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"8194b5910cb57464a0bfa2a9bbcc4ab8","sha1":"f3b4700b4b43e993c97ddabb69035cb6cce858c8","sha256":"b75a6c8138c7881615efa6e98d979b8e478736baf3013e0b867fcb2f4c0313fb","sha512":"faa5e9d2c39f140a041aa43322a053ce5c81cbec827a723d1df30acb6de16dcb8e5c4be88c428f5092d8e38275997236aa16dad46d9a36eb4bcec680f1e03bf4","ssdeep":"768:aRvLWfSqDgHVANS30vab9nBeNAA5cVw1QshsPbx2:aWKqDg1AM30yxnkd2Vw1QsiE","tlshash":"af1324704b9dc2faf8385cb21fa39ce7061677cb96ed4d8242ba57129ef46a0d0457c2","first_seen":"2026-04-21T18:06:11.91676Z","last_seen":"2026-04-21T18:06:11.91676Z","times_seen":1,"resource_available":false,"data":null}},"time_used":597,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":596,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"h5-api.onchaincryptoapi.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.onchaincryptoapi.cc/api/user/getInfo","fqdn":"h5-api.onchaincryptoapi.cc","domain":"onchaincryptoapi.cc","tld":"cc"},"ip":{"addr":"104.21.44.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://onchain-crypto-xc.cc/","date":"2026-04-21T18:05:46.344Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"onchaincryptoapi.cc","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 16 Apr 2026 06:30:01 GMT","end":"Wed, 15 Jul 2026 06:30:00 GMT"},"fingerprint":{"sha1":"37:E5:34:F0:88:CC:E7:1E:F3:EF:6E:50:46:07:EB:0E:17:EB:8F:90","sha256":"3F:29:0D:8F:29:F1:E6:6E:CA:74:3D:FB:32:6A:F4:18:41:A4:85:18:C9:48:5C:98:3A:8B:2D:38:B1:2C:5F:E5"}}},"request":{"raw":"POST /api/user/getInfo HTTP/1.1\r\nHost: h5-api.onchaincryptoapi.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nlanguage: en\r\nlang: en\r\nsign: L+hSm0dO3uRSNOjjQyLlUJrEPsUSkAk8ZyupUQMrVS3rxyp0tN3WqIE0mtWPGojNH60kZiHebszrbpAAhOncwgnkwOeNWfz4yno8hoWZDFNFA6QjTWnL7jVK2HBM/MzHONEXFeOI7epV2z6T5hRmTtONoOmP0A6BK+2+DWhswc8ZDtm72Fv949e6hhcdkLL7CJ53pYlh+dkGjkaGqREKMawyKVI6ERQz34+0Ms3lM5tRPSsFdVsbg7eUqBD9B8bieP1llXQjlN/0i/D8AU141OYdT2DY1erO8EXciY4BSEI7Qo0sQK9x63i87CfT3Z8mb4PgdiVvYZc3x6zfhcKQZQ==\r\nContent-Length: 2\r\nOrigin: https://onchain-crypto-xc.cc\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":2,"data":"{}"}},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 21 Apr 2026 18:05:46 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://onchain-crypto-xc.cc\r\naccess-control-allow-credentials: true\r\nset-cookie: JSESSIONID=A5153EDBBCB898FF435A41568F942064; Path=/; HttpOnly\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5SbtZvoLhQWkQibW3MzN4bsHiuU5qUBYL%2FDowVWfjjkB1h92Qo4lrInKEbDs2urOjMefY8w5ruq53iaDyqPHM5tPP9OoRUiuZ58YJC9yctYxZyktJ8gbIHVzFCkTjS543GAX%2BxXll0se6ywoCg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9efe519c8ac7b512-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Java","description":"Java is a class-based, object-oriented programming language that is designed to have as few implementation dependencies as possible.","website":"https://java.com","common_platform_enumeration":"cpe:2.3:a:oracle:jre:*:*:*:*:*:*:*:*","icon":"Java.svg","categories":["Programming languages"]}],"data":{"size":47,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"59a1afe8b31f80f0e51145407fed9514","sha1":"baae361ee7333bf1b8435c052beaa3b77cbb8940","sha256":"aa76b1b1cb076b4354edf2ba8556f1c8a11d98a3bd6962a6e79527007f9a6fef","sha512":"cae13bee231520d9a20dd235190e210225ef790e0df99e66d4fd88d3b91d09325f0f7de23c30e558b1292a0474c5f428d0c6b6841c062a72aa784cb43b6fcf74","ssdeep":"","tlshash":"3f90041fd04cd073114103c40444031c10151141373d47005d5dd375f1cc0cd011705c","first_seen":"2025-08-02T08:37:54.509369Z","last_seen":"2026-04-27T17:16:01.439392Z","times_seen":106,"resource_available":false,"data":null}},"time_used":283,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":283,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"h5-api.onchaincryptoapi.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.onchaincryptoapi.cc/api/common/type/defi_activity_type","fqdn":"h5-api.onchaincryptoapi.cc","domain":"onchaincryptoapi.cc","tld":"cc"},"ip":{"addr":"104.21.44.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://onchain-crypto-xc.cc/","date":"2026-04-21T18:05:46.356Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"onchaincryptoapi.cc","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 16 Apr 2026 06:30:01 GMT","end":"Wed, 15 Jul 2026 06:30:00 GMT"},"fingerprint":{"sha1":"37:E5:34:F0:88:CC:E7:1E:F3:EF:6E:50:46:07:EB:0E:17:EB:8F:90","sha256":"3F:29:0D:8F:29:F1:E6:6E:CA:74:3D:FB:32:6A:F4:18:41:A4:85:18:C9:48:5C:98:3A:8B:2D:38:B1:2C:5F:E5"}}},"request":{"raw":"POST /api/common/type/defi_activity_type HTTP/1.1\r\nHost: h5-api.onchaincryptoapi.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nlanguage: en\r\nlang: en\r\nsign: LvaGlySjOv5rCkV4TWWqJzhrHEYMiDvctx1/ojaAlz4N/VllENYShezOseLULNiMD//wM+v3T2Kf7+IOkeDi4/n0cIziAIixA/55mKRl0D+PMwgHtZp6i95hsRU/SvTi0GUA+MpuBPOaRbp+Ao1eMm45zKLtUVZMUEmdzt1uJ+Bh4r9enc/ht9jmf9eG1cACN3NuS5YR0xS2hWsgYCcNMnKyRWgw00JWu9E+vjAciDghy/gB3i03WNmSj8dHeOTiHwm9BoMlgJcYRAyHUETcVo0N8RHrFIUbPPGiPlpttQPJo0iNjxc/F8fFFE22j1RSAc6aLEqdroG/bT3zypSjNg==\r\nContent-Length: 2\r\nOrigin: https://onchain-crypto-xc.cc\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":2,"data":"{}"}},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 21 Apr 2026 18:05:46 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://onchain-crypto-xc.cc\r\naccess-control-allow-credentials: true\r\nset-cookie: JSESSIONID=4F110BA7DD63135002064E320BF6F96A; Path=/; HttpOnly\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=I3fY2y4y2UeuHpfR45y6eRWhUHTSxtYGVFGDn6KpTCavk%2Bc1QbOEoGwkbKbo5c1aD0X016QFxD3H61WJUIQ7aUwglTTyO6yH6I9V60OnL5Dpavjq%2FKjMHDKPhngWY53glByPWu1wMr6Gv%2Bu1Bw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9efe519caacab512-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Java","description":"Java is a class-based, object-oriented programming language that is designed to have as few implementation dependencies as possible.","website":"https://java.com","common_platform_enumeration":"cpe:2.3:a:oracle:jre:*:*:*:*:*:*:*:*","icon":"Java.svg","categories":["Programming languages"]}],"data":{"size":656,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"377547c8f767a60f400a02dae63eb33a","sha1":"90cd91d3318010114e6daa8f9e160beb4b0ac382","sha256":"3236498fcb921e4ac10b93fef88ecfda5469b4e2a3be7512090865a46e87d800","sha512":"a0116018b798349f620642b15c673ebf74df3b2a7eac2c1e0afc994b91ac5333b2301804efeff7f64544fd95553001b4d4b19a17c8b8ce7eef63218a74ea14c8","ssdeep":"","tlshash":"01f02814393dcebf095f65d745ec78183adc152b94e0bc60a8ab4f3c6be4171188a21c","first_seen":"2025-07-27T10:32:01.636668Z","last_seen":"2026-04-28T19:17:22.658268Z","times_seen":163,"resource_available":false,"data":null}},"time_used":279,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":279,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"h5-api.onchaincryptoapi.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"onchain-crypto-xc.cc/assets/vendor-hI4X-4rP.css","fqdn":"onchain-crypto-xc.cc","domain":"onchain-crypto-xc.cc","tld":"cc"},"ip":{"addr":"104.21.62.167","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://onchain-crypto-xc.cc/","date":"2026-04-21T18:05:40.319Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"onchain-crypto-xc.cc","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 16 Apr 2026 08:36:43 GMT","end":"Wed, 15 Jul 2026 08:36:42 GMT"},"fingerprint":{"sha1":"45:37:BD:3A:71:F6:EA:98:86:86:65:DB:AF:1D:54:93:10:D8:36:56","sha256":"3C:40:7F:8F:92:8F:99:55:82:58:9C:E1:82:0E:31:D8:55:7A:57:99:29:14:DD:A9:55:60:CB:B3:55:52:ED:48"}}},"request":{"raw":"GET /assets/vendor-hI4X-4rP.css HTTP/1.1\r\nHost: onchain-crypto-xc.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 21 Apr 2026 18:05:40 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 16 Apr 2026 18:34:02 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69e12b9a-1ef67\"\r\nexpires: Wed, 22 Apr 2026 06:05:40 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\npriority: u=2,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tyvYx78XvcbzWRLXncfhfx9zW%2F3LXJoNCVn421AOSZ%2Ba7%2FhJdzt52bZnbuW%2FCfD8p19tDvmqZY0LXQhhWCtzxgCKYOVzwRXPb1u%2BgdtKi1NSbJPrWJ0KqMx4cFb71EIH2kgTeV1MDA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9efe5176f93e5696-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":126823,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (65018), with no line terminators","md5":"ec0c2c01048283ebb98f504e0365f566","sha1":"2a5fc976f80a722ae2286d9ba28c4b32bccb1593","sha256":"edbdf59bc750abbfc32ba6a890f6baa7a25c74bbb0e0303c95fa8801a90eaf64","sha512":"0c90d5e6a4d413f0364af8b49751a323b94fed1a20805e2c957840279094e23e37992f47798da9aa7a8d17702a729f84807d761745e9ca1f74d3d520078e2a04","ssdeep":"1536:BtIyNBi3MFYaQj7FCwsBlDOFIxuVox8D2f/IG1Ah5aIzz:BnNIClDsIxuVS8SYtZ","tlshash":"1fc3d6a5e6c491bc6f2bf2659b8766d8f23cf661cd01daa4f105501c0fc7bf50223a2a","first_seen":"2026-04-17T12:22:51.84498Z","last_seen":"2026-04-21T18:06:11.921637Z","times_seen":9,"resource_available":false,"data":null}},"time_used":624,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":504,"receive":120,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"onchain-crypto-xc.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"wss","addr":"h5-api.onchaincryptoapi.cc/ws/c14c2c48-cccb-448a-961d-343a3463c887","fqdn":"h5-api.onchaincryptoapi.cc","domain":"onchaincryptoapi.cc","tld":"cc"},"ip":{"addr":"104.21.44.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://onchain-crypto-xc.cc/","date":"2026-04-21T18:05:43.781Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"onchaincryptoapi.cc","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 16 Apr 2026 06:30:01 GMT","end":"Wed, 15 Jul 2026 06:30:00 GMT"},"fingerprint":{"sha1":"37:E5:34:F0:88:CC:E7:1E:F3:EF:6E:50:46:07:EB:0E:17:EB:8F:90","sha256":"3F:29:0D:8F:29:F1:E6:6E:CA:74:3D:FB:32:6A:F4:18:41:A4:85:18:C9:48:5C:98:3A:8B:2D:38:B1:2C:5F:E5"}}},"request":{"raw":"GET /ws/c14c2c48-cccb-448a-961d-343a3463c887 HTTP/1.1\r\nHost: h5-api.onchaincryptoapi.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nSec-WebSocket-Version: 13\r\nOrigin: https://onchain-crypto-xc.cc\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: tKHp9nhNQAtURTMWde5OHg==\r\nDNT: 1\r\nConnection: keep-alive, Upgrade\r\nSec-Fetch-Dest: websocket\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 \r\nDate: Tue, 21 Apr 2026 18:05:44 GMT\r\nConnection: upgrade\r\nVary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nAccess-Control-Allow-Origin: https://onchain-crypto-xc.cc\r\nAccess-Control-Allow-Credentials: true\r\nSet-Cookie: JSESSIONID=19F6BE4E1C236CE6A022B1546C2E9504; Path=/; HttpOnly\r\nUpgrade: websocket\r\nSec-WebSocket-Accept: gcL/AnXhdt7XijpMqbbUt46aMbY=\r\nSec-WebSocket-Extensions: permessage-deflate\r\nX-Content-Type-Options: nosniff\r\nX-XSS-Protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\nReport-To: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=xj2fg7UNW3ZLrFk8tboFcSMQkdI6pefdvs6FAUW0TNm7hTQYJMD8ccD7DnEo2wGuHR%2BoM7C7YbYIi2RNVRZDG%2BAIL9e5pNlchI2GnofCZXoa8wg3ovCeohho%2FE0xY9BQDHpfWYKDQ7FIM81f0w%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nNEL: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nServer: cloudflare\r\nCF-RAY: 9efe518cfc88b4eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=507\u0026min_rtt=455\u0026rtt_var=219\u0026sent=4\u0026recv=7\u0026lost=0\u0026retrans=0\u0026sent_bytes=2370\u0026recv_bytes=1212\u0026delivery_rate=4246334\u0026cwnd=52\u0026unsent_bytes=0\u0026cid=5efb8f14a3934e94\u0026ts=840\u0026x=0\"\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Java","description":"Java is a class-based, object-oriented programming language that is designed to have as few implementation dependencies as possible.","website":"https://java.com","common_platform_enumeration":"cpe:2.3:a:oracle:jre:*:*:*:*:*:*:*:*","icon":"Java.svg","categories":["Programming languages"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-30T19:35:18.687432Z","times_seen":14438163,"resource_available":true,"data":null}},"time_used":891,"timings":{"blocked":-1,"dns":25,"connect":22,"send":0,"wait":818,"receive":1,"ssl":45},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"h5-api.onchaincryptoapi.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"onchain-crypto-xc.cc/platform/newcrypto_3/config.js?1776794743873","fqdn":"onchain-crypto-xc.cc","domain":"onchain-crypto-xc.cc","tld":"cc"},"ip":{"addr":"104.21.62.167","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://onchain-crypto-xc.cc/","date":"2026-04-21T18:05:43.880Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"onchain-crypto-xc.cc","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 16 Apr 2026 08:36:43 GMT","end":"Wed, 15 Jul 2026 08:36:42 GMT"},"fingerprint":{"sha1":"45:37:BD:3A:71:F6:EA:98:86:86:65:DB:AF:1D:54:93:10:D8:36:56","sha256":"3C:40:7F:8F:92:8F:99:55:82:58:9C:E1:82:0E:31:D8:55:7A:57:99:29:14:DD:A9:55:60:CB:B3:55:52:ED:48"}}},"request":{"raw":"GET /platform/newcrypto_3/config.js?1776794743873 HTTP/1.1\r\nHost: onchain-crypto-xc.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 21 Apr 2026 18:05:44 GMT\r\ncontent-type: application/javascript\r\npriority: u=3,i=?0\r\nlast-modified: Thu, 16 Apr 2026 18:33:38 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Wed, 22 Apr 2026 06:05:44 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: br\r\ncf-cache-status: MISS\r\netag: W/\"69e12b82-13d\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=F8pe%2By0M%2BVLT6hiFvJ5PnrCjWcOdqNBcXt%2BMGBuedRd7aIpJPPjx8TzwCDd%2FF5RHZ8P7NzH56%2F4%2ByOFJ4fGDOaFzEUsXiezWxe9e2g4gQt%2F6UNf5b3ghciyLzzXz1kkcSwFFrw0mXw%3D%3D\"}]}\r\ncf-ray: 9efe518d49f55696-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":317,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text","md5":"777da2d112bb66e15e6f83d0ac4424fa","sha1":"f38b0f651ea788cd88707a7f25d87fa0b3c6c3dd","sha256":"57ca997c2552c2d558d19562f0fc525bd92a7c105b84b7109d2e4e263f535481","sha512":"c910593312be4cd59998557db05ff7d99e34b4f1e1d2843e5c8d34b791907c19c19157840028731b881bf6c72686d3f8c1657af4cc64c1c8c7ceaf74fe838196","ssdeep":"","tlshash":"7ce0ecfb2ab595497c44422a59cc5a23b251923bdcadb65d789c2d00af9f91c0a78432","first_seen":"2025-11-21T07:12:48.178789Z","last_seen":"2026-04-21T18:06:11.923004Z","times_seen":21,"resource_available":false,"data":null}},"time_used":362,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":361,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"onchain-crypto-xc.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.onchaincryptoapi.cc/api/common/getAllSetting","fqdn":"h5-api.onchaincryptoapi.cc","domain":"onchaincryptoapi.cc","tld":"cc"},"ip":{"addr":"104.21.44.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://onchain-crypto-xc.cc/","date":"2026-04-21T18:05:43.922Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"onchaincryptoapi.cc","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 16 Apr 2026 06:30:01 GMT","end":"Wed, 15 Jul 2026 06:30:00 GMT"},"fingerprint":{"sha1":"37:E5:34:F0:88:CC:E7:1E:F3:EF:6E:50:46:07:EB:0E:17:EB:8F:90","sha256":"3F:29:0D:8F:29:F1:E6:6E:CA:74:3D:FB:32:6A:F4:18:41:A4:85:18:C9:48:5C:98:3A:8B:2D:38:B1:2C:5F:E5"}}},"request":{"raw":"OPTIONS /api/common/getAllSetting HTTP/1.1\r\nHost: h5-api.onchaincryptoapi.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,lang,sign\r\nOrigin: https://onchain-crypto-xc.cc\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 21 Apr 2026 18:05:44 GMT\r\ncontent-length: 0\r\nserver: cloudflare\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://onchain-crypto-xc.cc\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: content-type, lang, sign\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CEp5irqIXNXIHKdx8%2FP5krBBlS0BxXg4bPOs%2F92XrvSdYWzk6uavhMpXZmEoZ3YDfxXxO5WrxxHNxUJqxRCsquknYMT%2FJ1HQE%2BKlAEEBm4tqRnndz4pYnezxXKpnFf3MSBP%2FZYEARrmHgvUmaw%3D%3D\"}]}\r\ncf-ray: 9efe518dbd79b4fd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-30T19:35:18.687432Z","times_seen":14438163,"resource_available":true,"data":null}},"time_used":872,"timings":{"blocked":33,"dns":1,"connect":1,"send":0,"wait":804,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"h5-api.onchaincryptoapi.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"onchain-crypto-xc.cc/resource/fonts/sfprodisplaybold.OTF","fqdn":"onchain-crypto-xc.cc","domain":"onchain-crypto-xc.cc","tld":"cc"},"ip":{"addr":"104.21.62.167","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://onchain-crypto-xc.cc/","date":"2026-04-21T18:05:46.062Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"onchain-crypto-xc.cc","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 16 Apr 2026 08:36:43 GMT","end":"Wed, 15 Jul 2026 08:36:42 GMT"},"fingerprint":{"sha1":"45:37:BD:3A:71:F6:EA:98:86:86:65:DB:AF:1D:54:93:10:D8:36:56","sha256":"3C:40:7F:8F:92:8F:99:55:82:58:9C:E1:82:0E:31:D8:55:7A:57:99:29:14:DD:A9:55:60:CB:B3:55:52:ED:48"}}},"request":{"raw":"GET /resource/fonts/sfprodisplaybold.OTF HTTP/1.1\r\nHost: onchain-crypto-xc.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://onchain-crypto-xc.cc/assets/index-IbJ9t-Zl.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 21 Apr 2026 18:05:46 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 334728\r\nlast-modified: Thu, 16 Apr 2026 18:33:38 GMT\r\netag: \"69e12b82-51b88\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NPMtV%2BveIJe2wlvDwcjnN1lznbPnBIYRHRmXCaujHEAQj8ZU1fso9mzZWUOP14%2F8v6ypXKR02yOHdnk%2BWxVI9BVSZS572gIsOYbG2eIOW0zI6RDpV4Kf1udhzxKPrpNXEDMd7Fqf9w%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9efe519aea7f5696-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":334728,"size_decoded":0,"mime_type":"application/octet-stream","magic":"OpenType font data","md5":"644563f48ab5fe8e9082b64b2729b068","sha1":"100e7b7fd24facbca4db38e6d4d7e01c73b82818","sha256":"a981001f6d4e70292fd26fa8e05437c4a9f0f8c5981027ff0ceead01bb30311f","sha512":"7fd24a6e4437b8220074f5ec6069450e41d49bf2c9ca222902fac562b1e58d5226876d835fb475480f598925ed46fd8fb7672213a514072ebf4cc2312f54bf66","ssdeep":"6144:IFWjSaex9FmtB06XrELgiBBFoS7CQnfGTXbFNL3DUMuFA6MVdh5kgh3kusPuOSsE:62+FWLXQUqES7CQnfGTXbFNL3DUMuFAb","tlshash":"2f645bb4bb7b3a10d05ae43d1fd2c3397abab4155c9fb145f06b85a891893f728853c2","first_seen":"2023-05-10T19:38:00Z","last_seen":"2026-04-30T12:47:21.483673Z","times_seen":288,"resource_available":false,"data":null}},"time_used":940,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":531,"receive":409,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"onchain-crypto-xc.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.onchaincryptoapi.cc/kline","fqdn":"h5-api.onchaincryptoapi.cc","domain":"onchaincryptoapi.cc","tld":"cc"},"ip":{"addr":"104.21.44.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://onchain-crypto-xc.cc/","date":"2026-04-21T18:05:46.348Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"onchaincryptoapi.cc","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 16 Apr 2026 06:30:01 GMT","end":"Wed, 15 Jul 2026 06:30:00 GMT"},"fingerprint":{"sha1":"37:E5:34:F0:88:CC:E7:1E:F3:EF:6E:50:46:07:EB:0E:17:EB:8F:90","sha256":"3F:29:0D:8F:29:F1:E6:6E:CA:74:3D:FB:32:6A:F4:18:41:A4:85:18:C9:48:5C:98:3A:8B:2D:38:B1:2C:5F:E5"}}},"request":{"raw":"POST /kline HTTP/1.1\r\nHost: h5-api.onchaincryptoapi.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nlanguage: en\r\nlang: en\r\nsign: ChuGhS5ks4hmntQuzYkRVyWYTp3hj+HnZXhf10WekUu7pGI8b5ZPtTVJJBnrgFvoEa5ZqFMHzC/F2PQ53JSflMdNZoGsUAEa4elrkmLm/j3sbtEH9HxS8qYR7H66eS/gRNxyUkZ+HGE0zDJLBLyG/0Is6lh7lBscvESnx6QXvlj9+wYjGEENZyxmQElg+Wjnxh+cLSXznEzzZp/iKa7xWIBWxW+TPlevCezpBTdjKyAiNUBoZSFnWr/ELk84jCglaboM0u8FqeDqS0h0R0lC0+qxRhoGKpXPmc4JMYUSJB3AbQMWgMd9NKoJzT2qNdTUGbqm9VkAO1ACT+IbAhVDwg==\r\nContent-Length: 69\r\nOrigin: https://onchain-crypto-xc.cc\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":69,"data":"{\"interval\":\"ONE_MIN\",\"limit\":1000,\"market\":\"binance\",\"symbol\":\"bnb\"}"}},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 21 Apr 2026 18:05:46 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://onchain-crypto-xc.cc\r\naccess-control-allow-credentials: true\r\nset-cookie: JSESSIONID=46D9AC601BD99DF5D4B2689234AEC5AA; Path=/; HttpOnly\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=D0F6LRDbdoW%2FgTOW8N5PW4oeBzQKCsRf5tHOGP74LEmk7wOrPVGMVXyKtFaKmFmQaFfbbiGwMg9fcOvQQini3Aq%2FiwFndVczGvRmms4YJAQgzRl8t8Hpz%2BQ15VtIqlCj%2FDvR03zMCWhOVFlthQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9efe519c9ac8b512-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Java","description":"Java is a class-based, object-oriented programming language that is designed to have as few implementation dependencies as possible.","website":"https://java.com","common_platform_enumeration":"cpe:2.3:a:oracle:jre:*:*:*:*:*:*:*:*","icon":"Java.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":37607,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"7bf23cad7f356c9b71fdadf419091f8a","sha1":"ec1f561447053522dab0aa91979d97df554732d4","sha256":"41be4cd0f5b8a91caca755f03a461c933bc0822f48250b8571f4188d405fe4f8","sha512":"bc90ecbe528fcd146198289b125774880ea2e231f7ad13d174babe90a082ee94ec5b997a6f9b56c98d2e4371f8fca9426234a5d88dc72981b13786188ff1dc04","ssdeep":"384:boUtfiow/u+73Lqvuy9eymLShyDI/ELtiwT51AiTThGB5tJ/tg:b7tfCu+73LqmyALShyDIatBT5uiT0v/K","tlshash":"cef25b31fae9d109f438ce967bc39cbc481a3bc787dde942069b54418ef4b219569bc2","first_seen":"2026-04-21T18:06:11.925134Z","last_seen":"2026-04-21T18:06:11.925134Z","times_seen":1,"resource_available":false,"data":null}},"time_used":538,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":537,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"h5-api.onchaincryptoapi.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.onchaincryptoapi.cc/kline","fqdn":"h5-api.onchaincryptoapi.cc","domain":"onchaincryptoapi.cc","tld":"cc"},"ip":{"addr":"104.21.44.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://onchain-crypto-xc.cc/","date":"2026-04-21T18:05:46.353Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"onchaincryptoapi.cc","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 16 Apr 2026 06:30:01 GMT","end":"Wed, 15 Jul 2026 06:30:00 GMT"},"fingerprint":{"sha1":"37:E5:34:F0:88:CC:E7:1E:F3:EF:6E:50:46:07:EB:0E:17:EB:8F:90","sha256":"3F:29:0D:8F:29:F1:E6:6E:CA:74:3D:FB:32:6A:F4:18:41:A4:85:18:C9:48:5C:98:3A:8B:2D:38:B1:2C:5F:E5"}}},"request":{"raw":"POST /kline HTTP/1.1\r\nHost: h5-api.onchaincryptoapi.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nlanguage: en\r\nlang: en\r\nsign: Kp91Y0rBHNFQV8lzQgX7nvpCyPaU2A21zGJ98h3u7tIAWF2s2xLgnWLF5JMx+eD4LfCNXSfTNNRvyyibcy3NB++7bXGDnftS1tLvhDmj6RI24v4RVg9mV8+OYrI5f0N1v2MGbexYaco9IjwOim95E4eYpx+HmscrzROroMZSoB+ZPJTaPv87kFpuYmOkmlwF0Mu/uAUmrP8q+ikZqap2RcOWPh3IVvB/cigQCzte1rfWiDDUMh/9ypqmTvNxWSuM8n32TKUQmgLpI8c4J7dDAmiEA8PnICSiY+x3vHkB4us/LFsw6YtPwtYSC5x/Z1vbkvYxj6pBale5JSZfy05iGQ==\r\nContent-Length: 69\r\nOrigin: https://onchain-crypto-xc.cc\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":69,"data":"{\"interval\":\"ONE_MIN\",\"limit\":1000,\"market\":\"binance\",\"symbol\":\"sol\"}"}},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 21 Apr 2026 18:05:46 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://onchain-crypto-xc.cc\r\naccess-control-allow-credentials: true\r\nset-cookie: JSESSIONID=4BC879F5D2E3C5F3D8CB50AD17FD826B; Path=/; HttpOnly\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hjJfzrAM%2FsF0AbAsVQQLueeUy04rkgn%2FfJEHJSgoTS2rY1aldNJixs39h7rxKB2SKFYLCT32oFygBIYXGEfcgRmKo9d%2BbpclbRSc0Uv1MkL3OrdTBbFg0I01MSJoSZrcLAjxVGH3te4EGZGROQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9efe519c9ac9b512-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Java","description":"Java is a class-based, object-oriented programming language that is designed to have as few implementation dependencies as possible.","website":"https://java.com","common_platform_enumeration":"cpe:2.3:a:oracle:jre:*:*:*:*:*:*:*:*","icon":"Java.svg","categories":["Programming languages"]}],"data":{"size":36205,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"305a73fc33e4e71d785f5d12d90b8a86","sha1":"725155c01f933206896e714014509ec6016d28ab","sha256":"e0e9d84b64fa93cf786cf2ad4925bace9bff61b2a7028f8bd04ec709e8cd47d3","sha512":"1ac9923ff294e068c893d4d1dde1001527f901ba49a200ba498b86a7213457a9fa0a8f2044ba372b154bcc41b0be484b37393e6618740b1f575067283848f23d","ssdeep":"768:rAfi2rrlmkN7wwZpTbBH6EfOsncItQ1x7sqnibhYkPiBwkLRI+J/AoOnibOxT6Yo:UfiuncIoibhYyiBwkDOgYGW0dc+d1wSr","tlshash":"6df23b304a8b83c9f4745ede1b939cd878263bd78bdd484602ad7a410de7ea39941bd3","first_seen":"2026-04-21T18:06:11.927579Z","last_seen":"2026-04-21T18:06:11.927579Z","times_seen":1,"resource_available":false,"data":null}},"time_used":573,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":573,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"h5-api.onchaincryptoapi.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"onchain-crypto-xc.cc/assets/index-nPdLrom6.js","fqdn":"onchain-crypto-xc.cc","domain":"onchain-crypto-xc.cc","tld":"cc"},"ip":{"addr":"104.21.62.167","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://onchain-crypto-xc.cc/","date":"2026-04-21T18:05:40.317Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"onchain-crypto-xc.cc","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 16 Apr 2026 08:36:43 GMT","end":"Wed, 15 Jul 2026 08:36:42 GMT"},"fingerprint":{"sha1":"45:37:BD:3A:71:F6:EA:98:86:86:65:DB:AF:1D:54:93:10:D8:36:56","sha256":"3C:40:7F:8F:92:8F:99:55:82:58:9C:E1:82:0E:31:D8:55:7A:57:99:29:14:DD:A9:55:60:CB:B3:55:52:ED:48"}}},"request":{"raw":"GET /assets/index-nPdLrom6.js HTTP/1.1\r\nHost: onchain-crypto-xc.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 21 Apr 2026 18:05:40 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 16 Apr 2026 18:34:02 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69e12b9a-79bef\"\r\nexpires: Wed, 22 Apr 2026 06:05:40 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\npriority: u=3,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Eb9qt28kPmIZy343754ZAFWzpAnrSwxbDIlgCgd%2FQLpFBq8b6Xyj4z9NQyLpP5IQx%2FH96jLDDPX8KgpdNg38Eg5N1%2FehoCE5gHrIBX050SETj%2FFIqMKrL%2FN11eLVhTSRGu4NmgzUdg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9efe5176f93d5696-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":498671,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (64490), with no line terminators","md5":"575bc70959914c467ee4c3484693a360","sha1":"17a9b50b51206273f70351c6f63c266ce027018c","sha256":"b74f1477ace17461a9c5dac578b13627482190d671c68998e3ad448baa541aba","sha512":"58b361e0076704689a1dc9c407c883594aadc01276a3c9a6f9c82eca245efe890b0b68048bfd3ddfabc5e6808c42e365f6104ddc91f3c6fdc084efe31787e894","ssdeep":"6144:VXPykSJ2Aaug/KEtPPQVkC3tcBj3OxMy/nMFQ:VXPykSz9g/pdhBj3OxMy/nMFQ","tlshash":"fab4f841f55aa93effbb9499548e040032082fcad00c89a3f5fd9e5627d6cb8776a734","first_seen":"2026-04-17T12:22:51.8526Z","last_seen":"2026-04-21T18:06:11.929725Z","times_seen":9,"resource_available":false,"data":null}},"time_used":749,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":507,"receive":242,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"onchain-crypto-xc.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.onchaincryptoapi.cc/api/common/getCoinList","fqdn":"h5-api.onchaincryptoapi.cc","domain":"onchaincryptoapi.cc","tld":"cc"},"ip":{"addr":"104.21.44.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://onchain-crypto-xc.cc/","date":"2026-04-21T18:05:43.926Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"onchaincryptoapi.cc","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 16 Apr 2026 06:30:01 GMT","end":"Wed, 15 Jul 2026 06:30:00 GMT"},"fingerprint":{"sha1":"37:E5:34:F0:88:CC:E7:1E:F3:EF:6E:50:46:07:EB:0E:17:EB:8F:90","sha256":"3F:29:0D:8F:29:F1:E6:6E:CA:74:3D:FB:32:6A:F4:18:41:A4:85:18:C9:48:5C:98:3A:8B:2D:38:B1:2C:5F:E5"}}},"request":{"raw":"OPTIONS /api/common/getCoinList HTTP/1.1\r\nHost: h5-api.onchaincryptoapi.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,lang,sign\r\nOrigin: https://onchain-crypto-xc.cc\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 21 Apr 2026 18:05:44 GMT\r\ncontent-length: 0\r\nserver: cloudflare\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://onchain-crypto-xc.cc\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: content-type, lang, sign\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Zeq6OyWzd7eGIpltCyljrm%2FiTsXyC8bqoZBxRH6Q5KeeyL2zs7JJiyaEwwxraGJKBCQxhdvdat6rkcCMrnk7R8GKeK6IkpWa34Nu3uj810l95mdiZfloZBfJDq7Dr0oF2FNuO5NbSsrxujPMag%3D%3D\"}]}\r\ncf-ray: 9efe518dbd81b4fd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-30T19:35:18.687432Z","times_seen":14438163,"resource_available":true,"data":null}},"time_used":864,"timings":{"blocked":30,"dns":3,"connect":1,"send":0,"wait":798,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"h5-api.onchaincryptoapi.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.onchaincryptoapi.cc/api/common/getApprovalAddr","fqdn":"h5-api.onchaincryptoapi.cc","domain":"onchaincryptoapi.cc","tld":"cc"},"ip":{"addr":"104.21.44.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://onchain-crypto-xc.cc/","date":"2026-04-21T18:05:44.266Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"onchaincryptoapi.cc","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 16 Apr 2026 06:30:01 GMT","end":"Wed, 15 Jul 2026 06:30:00 GMT"},"fingerprint":{"sha1":"37:E5:34:F0:88:CC:E7:1E:F3:EF:6E:50:46:07:EB:0E:17:EB:8F:90","sha256":"3F:29:0D:8F:29:F1:E6:6E:CA:74:3D:FB:32:6A:F4:18:41:A4:85:18:C9:48:5C:98:3A:8B:2D:38:B1:2C:5F:E5"}}},"request":{"raw":"OPTIONS /api/common/getApprovalAddr HTTP/1.1\r\nHost: h5-api.onchaincryptoapi.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: lang,sign\r\nOrigin: https://onchain-crypto-xc.cc\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 21 Apr 2026 18:05:45 GMT\r\ncontent-length: 0\r\nserver: cloudflare\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://onchain-crypto-xc.cc\r\naccess-control-allow-methods: GET\r\naccess-control-allow-headers: lang, sign\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oR0POOAsAe7v8pApFbPnu%2FMikkLiL%2B9vW%2BqOS5zaOKWLSqPAIb%2BUpP5y6rQvBms9yoWBAZMMbAwVjsa7RFkvZzoddOgpe5GUyIqoIJ5OJ87eh3cg4e5z%2B9xPVUKk%2FaHBV6Nvw33GLKP%2BZuN%2Bpw%3D%3D\"}]}\r\ncf-ray: 9efe518fa86cb4fd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-30T19:35:18.687432Z","times_seen":14438163,"resource_available":true,"data":null}},"time_used":787,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":787,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"h5-api.onchaincryptoapi.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.onchaincryptoapi.cc/api/common/getCoinList","fqdn":"h5-api.onchaincryptoapi.cc","domain":"onchaincryptoapi.cc","tld":"cc"},"ip":{"addr":"104.21.44.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://onchain-crypto-xc.cc/","date":"2026-04-21T18:05:44.758Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"onchaincryptoapi.cc","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 16 Apr 2026 06:30:01 GMT","end":"Wed, 15 Jul 2026 06:30:00 GMT"},"fingerprint":{"sha1":"37:E5:34:F0:88:CC:E7:1E:F3:EF:6E:50:46:07:EB:0E:17:EB:8F:90","sha256":"3F:29:0D:8F:29:F1:E6:6E:CA:74:3D:FB:32:6A:F4:18:41:A4:85:18:C9:48:5C:98:3A:8B:2D:38:B1:2C:5F:E5"}}},"request":{"raw":"POST /api/common/getCoinList HTTP/1.1\r\nHost: h5-api.onchaincryptoapi.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nlang: en-US\r\nsign: SD04eSaOEFFQqqj5N5gON78XFBWtsj+LzyI5GW6qAWzWVYaMdm3wiskqnWPl0wKQdmDrrn1N8gpwj8xmPN/XQ7e34JNhdp6E1Z8JJmPc2aifsWzvhM8u1uDXKa3M0C1pfK4esPUqOspvLX877z8KPTJwmA5Wzf7K5JAm0OiVJGQIVABQP9ekRgrtg/lTZeFqXoEQXOcojTT2QKF6NfyYe1oxWQl16d7CF6OhhEuvapykI8LfQPcBqpUz1kgBpK16r5WjfybS8JHnof163W1s50JB2yysDvbkUgLCBjPpvsp432u2hIzInhQX3ZnZPB81z8EqI2bxkR1G/3kunygaSw==\r\nContent-Length: 2\r\nOrigin: https://onchain-crypto-xc.cc\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":2,"data":"{}"}},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 21 Apr 2026 18:05:45 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nserver: cloudflare\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://onchain-crypto-xc.cc\r\naccess-control-allow-credentials: true\r\nset-cookie: JSESSIONID=3A34460FC6AFB8DD8F30C6C9CE51674F; Path=/; HttpOnly\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Vd%2F7xZZekk%2FIRAUQJ2jtb8hUrTj%2F1zM9m6zraMuEJPIj%2FUPUBPFfCy%2BA6IkEei0DNge991FFXWsRc0oTihdNWGMLipbCayZKW5YqCrNudfYSBP%2BG68XtB6%2FuGXR6s1hRLc87%2F%2FipvE33TR72DQ%3D%3D\"}]}\r\ncf-ray: 9efe5192bcb0b4fd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Java","description":"Java is a class-based, object-oriented programming language that is designed to have as few implementation dependencies as possible.","website":"https://java.com","common_platform_enumeration":"cpe:2.3:a:oracle:jre:*:*:*:*:*:*:*:*","icon":"Java.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":27107,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"64186409c35fc93b701697be70e5e313","sha1":"3a3a91b72aca4b4ef44be0ddec5b08c7f4d43dac","sha256":"3b01adba256d2c4503d9ff0140ce6b33edf8de394600e28148400429c2555405","sha512":"a8022399ae484a8fe0d4f8b6a5a0b0cc77d55a2f02e051334bfb438f62785f1a486b1419811faf1315228a30c9a65c592058fb0fbf82a2332cf4066612ea7ecf","ssdeep":"192:WXURXLBX+XTOXnKXzFX+ZMLuX2mtjXLgNAjXEh3jXuaAjX1SWjXFM4jXEk1jX5ZI:sVQkxXIN64Bsn","tlshash":"32c23145163859bdc975e0d03fbfba16519c32af9cc68d1ac2d98d8c8ed4af5260ef02","first_seen":"2026-04-21T18:06:11.930649Z","last_seen":"2026-04-21T18:06:11.930649Z","times_seen":1,"resource_available":false,"data":null}},"time_used":279,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":279,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"h5-api.onchaincryptoapi.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"onchain-crypto-xc.cc/resource/svg/light/trendingup-e601d969.svg?2.2.1776335643294","fqdn":"onchain-crypto-xc.cc","domain":"onchain-crypto-xc.cc","tld":"cc"},"ip":{"addr":"104.21.62.167","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://onchain-crypto-xc.cc/","date":"2026-04-21T18:05:45.937Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"onchain-crypto-xc.cc","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 16 Apr 2026 08:36:43 GMT","end":"Wed, 15 Jul 2026 08:36:42 GMT"},"fingerprint":{"sha1":"45:37:BD:3A:71:F6:EA:98:86:86:65:DB:AF:1D:54:93:10:D8:36:56","sha256":"3C:40:7F:8F:92:8F:99:55:82:58:9C:E1:82:0E:31:D8:55:7A:57:99:29:14:DD:A9:55:60:CB:B3:55:52:ED:48"}}},"request":{"raw":"GET /resource/svg/light/trendingup-e601d969.svg?2.2.1776335643294 HTTP/1.1\r\nHost: onchain-crypto-xc.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 21 Apr 2026 18:05:46 GMT\r\ncontent-type: image/svg+xml\r\npriority: u=4,i=?0\r\nlast-modified: Thu, 16 Apr 2026 18:33:38 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"69e12b82-2de\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4%2FV0Hq47pMWpB7OL%2BMxWarfncpP5fENlwSNCQDBhZdmsdJ%2BZHHqwtvYTxza2Ens4i7HeHVgSlncRiz1FhJM1L%2F54y3JE8Gmu2gtS5EdzC2BH1LzNbthNmjMoj544aGaJYx1grLT7Pw%3D%3D\"}]}\r\ncf-ray: 9efe519a1a745696-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":734,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"6c91fb4c42ebd4a89c242dba3bc0de12","sha1":"b3a7af1e53a3195a457f8b1785230e93bf5451bd","sha256":"e601d96918f9c33c5f09cad0f089c9c99952b9a47351dda40f36484fe3dd76b8","sha512":"29f4706262a5c4aa7c72a93d9600b43d58b543ee6c02b8ab34b19d0effedcef6ff574d500c351446a95b05f36c9c0aa5844b95a5d3e0e9fd598f34713655527c","ssdeep":"","tlshash":"3d01dce8624cc88cb113832ccb183230851d28773fdd4314d32868f4a56154a6d3a5dc","first_seen":"2025-11-21T07:12:48.142954Z","last_seen":"2026-04-21T18:06:11.933002Z","times_seen":14,"resource_available":false,"data":null}},"time_used":367,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":367,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"onchain-crypto-xc.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"onchain-crypto-xc.cc/resource/svg/light/getting-started-icon-fcd3604e.svg?2.2.1776335643294","fqdn":"onchain-crypto-xc.cc","domain":"onchain-crypto-xc.cc","tld":"cc"},"ip":{"addr":"104.21.62.167","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://onchain-crypto-xc.cc/","date":"2026-04-21T18:05:45.957Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"onchain-crypto-xc.cc","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 16 Apr 2026 08:36:43 GMT","end":"Wed, 15 Jul 2026 08:36:42 GMT"},"fingerprint":{"sha1":"45:37:BD:3A:71:F6:EA:98:86:86:65:DB:AF:1D:54:93:10:D8:36:56","sha256":"3C:40:7F:8F:92:8F:99:55:82:58:9C:E1:82:0E:31:D8:55:7A:57:99:29:14:DD:A9:55:60:CB:B3:55:52:ED:48"}}},"request":{"raw":"GET /resource/svg/light/getting-started-icon-fcd3604e.svg?2.2.1776335643294 HTTP/1.1\r\nHost: onchain-crypto-xc.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 21 Apr 2026 18:05:46 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Thu, 16 Apr 2026 18:33:38 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69e12b82-538\"\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mI6DwtKe8%2FuzJhpv8fAsfbXHByQy%2FnwdaSVMdCwL3ZNw%2Fky%2FDCsVdfLLl5hyTXGVD7hxm%2BOz%2BoqYmy3%2FvElUOn5yX%2FvbBO8RRT2sCpXZPlZo%2B%2FdxTG3MiW4lPljNriYR%2BDzaLqpkBQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9efe519a3a775696-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1336,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"ee8994d818a886f896919b273727adb5","sha1":"4c0fcee60bdf28946249a3bf1b61218b36913288","sha256":"fcd3604efbb35b8507142b317ba5ea0363d8ebab13a65108ed9f240f305676f6","sha512":"902b2e375c6356099e1ea3116d6674727903166bd3ce3def21c6c829399dd9d62b8e158bcb89e2da7ec3a898050f0260fd7b25eb1977352e00341d09bda211bc","ssdeep":"","tlshash":"0a2115d573c84a6cb7238340db023230b5aa7277274eea54852659f5291811fa67fdc8","first_seen":"2025-11-21T07:12:48.109937Z","last_seen":"2026-04-21T18:06:11.933761Z","times_seen":14,"resource_available":false,"data":null}},"time_used":377,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":377,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"onchain-crypto-xc.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"onchain-crypto-xc.cc/assets/index-IbJ9t-Zl.css","fqdn":"onchain-crypto-xc.cc","domain":"onchain-crypto-xc.cc","tld":"cc"},"ip":{"addr":"104.21.62.167","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://onchain-crypto-xc.cc/","date":"2026-04-21T18:05:40.320Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"onchain-crypto-xc.cc","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 16 Apr 2026 08:36:43 GMT","end":"Wed, 15 Jul 2026 08:36:42 GMT"},"fingerprint":{"sha1":"45:37:BD:3A:71:F6:EA:98:86:86:65:DB:AF:1D:54:93:10:D8:36:56","sha256":"3C:40:7F:8F:92:8F:99:55:82:58:9C:E1:82:0E:31:D8:55:7A:57:99:29:14:DD:A9:55:60:CB:B3:55:52:ED:48"}}},"request":{"raw":"GET /assets/index-IbJ9t-Zl.css HTTP/1.1\r\nHost: onchain-crypto-xc.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 21 Apr 2026 18:05:40 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 16 Apr 2026 18:34:02 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69e12b9a-922ab\"\r\nexpires: Wed, 22 Apr 2026 06:05:40 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\npriority: u=2,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LGhKKOt82bD94KzMgDjhJHrLvT6sqsnvo%2BAeKpbdDmwvbQtosXo%2BmnqVKR7hRNekNSbqJyLnBAfwL3rwb8kXxzLAnvYCUDnkrKf1tJS%2FHKG%2BFgzV%2FdnlKcW94n9RkcCx2Fl0vl4sCg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9efe5176f9405696-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":598699,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (65018), with no line terminators","md5":"7e4cc56e3daeaabd958e9ae0ac471578","sha1":"321bdb7d8d3f9fe516c9962762eb5446208b27ba","sha256":"2eee12b1c640365667bdcdb3db1da862c342c49b4b7d807b8472298b8fe84ff9","sha512":"4489b7189669d492be377bc4e809f6d5747e77c41fb2838c743dab6087807fd9221eafa1a71b0b2325106eb7ea7f78ff2dce77fbcc77a155d7ebecaf909be64d","ssdeep":"12288:Xv1Q3dZ8w71ZACkFDS3vyf58rBeV05TyByEmKVGkfF+sMbg:Xv1Q3dZ8w71ZACkFDS3vyf58rBeV05TC","tlshash":"d4d4f969b29411396e37d5a97bcc9acce12cfe61c8025ee4f243551a0ec7bf7232161b","first_seen":"2026-04-17T12:22:51.859382Z","last_seen":"2026-04-21T18:06:11.934568Z","times_seen":9,"resource_available":false,"data":null}},"time_used":762,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":519,"receive":243,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"onchain-crypto-xc.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"onchain-crypto-xc.cc/resource/svg/light/cardbackground-1869bb09.svg?2.2.1776335643294","fqdn":"onchain-crypto-xc.cc","domain":"onchain-crypto-xc.cc","tld":"cc"},"ip":{"addr":"104.21.62.167","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://onchain-crypto-xc.cc/","date":"2026-04-21T18:05:45.930Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"onchain-crypto-xc.cc","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 16 Apr 2026 08:36:43 GMT","end":"Wed, 15 Jul 2026 08:36:42 GMT"},"fingerprint":{"sha1":"45:37:BD:3A:71:F6:EA:98:86:86:65:DB:AF:1D:54:93:10:D8:36:56","sha256":"3C:40:7F:8F:92:8F:99:55:82:58:9C:E1:82:0E:31:D8:55:7A:57:99:29:14:DD:A9:55:60:CB:B3:55:52:ED:48"}}},"request":{"raw":"GET /resource/svg/light/cardbackground-1869bb09.svg?2.2.1776335643294 HTTP/1.1\r\nHost: onchain-crypto-xc.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 21 Apr 2026 18:05:46 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Thu, 16 Apr 2026 18:33:38 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69e12b82-d1bc\"\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BwxEGa%2BeaQ5v0SeZA5tzi6J3e47dUp1SipN%2FCxCsiIbku%2BQqBax2bF%2BuzldOTPXUWx5vsulVNkYhc%2B1VT0bSdg1AHp092q7ZoacaLB0RHwsSiw3YSgADY7P5s5tFeO8%2BOwvu3ki1eg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9efe519a1a715696-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":53692,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"892a320856e78e1904cadfcaa8f22e77","sha1":"ce84b39d92160a79f4ff7e342f0bb8f46711a4d3","sha256":"1869bb09cd2a7314f4d8cbadc996e584c703546eb890995e09719eb3c11bcf99","sha512":"0fec2b8d3c49fa69aee6d220a13a449ad68e0499bfad791fa17addb5440562e9a32e7886dc9a39e9087ad07658530b955e65cdc0021f879ccff85f554686ed04","ssdeep":"768:pBpVtII+0ox0dn8tutyxgCLMlbH0xOroIoATK1xAcoqMSO+z4B5BrkoP4uQ:pDncOn8tFxg78QmfzMKPMQ","tlshash":"0b33c6dd6b6405f0dbc843cebf3088e8392264b229527928c21dae5d6c51e5d8c7fdca","first_seen":"2025-11-21T07:12:48.168377Z","last_seen":"2026-04-21T18:06:11.93529Z","times_seen":14,"resource_available":false,"data":null}},"time_used":504,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":501,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"onchain-crypto-xc.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"onchain-crypto-xc.cc/resource/svg/light/vector-9c970303.svg?2.2.1776335643294","fqdn":"onchain-crypto-xc.cc","domain":"onchain-crypto-xc.cc","tld":"cc"},"ip":{"addr":"104.21.62.167","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://onchain-crypto-xc.cc/","date":"2026-04-21T18:05:45.940Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"onchain-crypto-xc.cc","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 16 Apr 2026 08:36:43 GMT","end":"Wed, 15 Jul 2026 08:36:42 GMT"},"fingerprint":{"sha1":"45:37:BD:3A:71:F6:EA:98:86:86:65:DB:AF:1D:54:93:10:D8:36:56","sha256":"3C:40:7F:8F:92:8F:99:55:82:58:9C:E1:82:0E:31:D8:55:7A:57:99:29:14:DD:A9:55:60:CB:B3:55:52:ED:48"}}},"request":{"raw":"GET /resource/svg/light/vector-9c970303.svg?2.2.1776335643294 HTTP/1.1\r\nHost: onchain-crypto-xc.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 21 Apr 2026 18:05:46 GMT\r\ncontent-type: image/svg+xml\r\npriority: u=4,i=?0\r\nlast-modified: Thu, 16 Apr 2026 18:33:38 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"69e12b82-fc\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=suxNL1gkg%2F0DW3FGbaYeYwuxkaQpZj4HqcL9rFKBpLIyQdzPln2d%2FVgx1EIryCKUHclBLVjmPvGOr%2B7LJ480%2Bu2MeH46ZcMuwScHhI7%2F%2BaDJIiN9aVdAUygyjyKxBBgSzhnr5G6uvA%3D%3D\"}]}\r\ncf-ray: 9efe519a1a765696-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":252,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"869aa61ad26b57af810d9c0524435e79","sha1":"6270ad9705d8ae908bb68a0c1b7cc7ec2eaec484","sha256":"9c9703035e8acacfcc3010330a9a13d9ab76b5325202e46549c0ad5fc0e1f0f8","sha512":"7a28c85869f922bdf9bff3b1575dd25a69356346255d7543b04bda5a7b2dc3fbaa10a622f13beb831f0e217524d1dfb464c3f9d3fb4dc0d06136c2829479b4dd","ssdeep":"","tlshash":"4ed09798022a604f800a875d462cfa220a9e60c0270cc4d09e301c39b8affabee9a0d4","first_seen":"2025-11-21T07:12:48.108262Z","last_seen":"2026-04-21T18:06:11.935951Z","times_seen":14,"resource_available":false,"data":null}},"time_used":374,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":374,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"onchain-crypto-xc.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"onchain-crypto-xc.cc/resource/fonts/DINOT-Medium.otf","fqdn":"onchain-crypto-xc.cc","domain":"onchain-crypto-xc.cc","tld":"cc"},"ip":{"addr":"104.21.62.167","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://onchain-crypto-xc.cc/","date":"2026-04-21T18:05:46.066Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"onchain-crypto-xc.cc","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 16 Apr 2026 08:36:43 GMT","end":"Wed, 15 Jul 2026 08:36:42 GMT"},"fingerprint":{"sha1":"45:37:BD:3A:71:F6:EA:98:86:86:65:DB:AF:1D:54:93:10:D8:36:56","sha256":"3C:40:7F:8F:92:8F:99:55:82:58:9C:E1:82:0E:31:D8:55:7A:57:99:29:14:DD:A9:55:60:CB:B3:55:52:ED:48"}}},"request":{"raw":"GET /resource/fonts/DINOT-Medium.otf HTTP/1.1\r\nHost: onchain-crypto-xc.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://onchain-crypto-xc.cc/assets/index-IbJ9t-Zl.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 21 Apr 2026 18:05:46 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 73096\r\nlast-modified: Thu, 16 Apr 2026 18:33:38 GMT\r\netag: \"69e12b82-11d88\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=v3iM9in5foNkKdkpbQ4umRHqf62YNflBZQnXVTctIkQvuu8vPB1zs7p0cATZ6TbAvTg99GYuBEH%2FT6yPRIMY2ijtsKbXu4hoJaUPNCaRT%2FKeEqNlEk1t6lAcDTyQFmvBRO31qFh15w%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9efe519aea805696-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":73096,"size_decoded":0,"mime_type":"application/octet-stream","magic":"OpenType font data","md5":"ab876400560626fbe045633dc44f0748","sha1":"85bbfb1729e86f40ddc9af7197b5f54ed6136226","sha256":"5888b24f6b65ff7c989b4a258dbeb5d997320d61417371210da0258be21d854d","sha512":"82e96ade51b0570c1f691ba45d1a3c0802015dad7598954675c4abe2fa8a9fc705adbe6eb5e677aa5cc03b6704e594cfe99279c678855ebbbcbade6d5028dbd6","ssdeep":"1536:TlK/cP2D2oV7otQjBG1+acfZZHHDEdom1hvd5JItkB7k3Z:TKQQtG1yZSdomrvpIqcZ","tlshash":"0b636f031d4fb9548de4513a52de4ea34bb39ecc1ca493c30ae12d938fece6657152ae","first_seen":"2023-08-16T00:37:20Z","last_seen":"2026-04-30T14:43:21.644047Z","times_seen":890,"resource_available":false,"data":null}},"time_used":599,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":365,"receive":234,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"onchain-crypto-xc.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"onchain-crypto-xc.cc/ac-chat.js?2.2.1776335643294","fqdn":"onchain-crypto-xc.cc","domain":"onchain-crypto-xc.cc","tld":"cc"},"ip":{"addr":"104.21.62.167","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://onchain-crypto-xc.cc/","date":"2026-04-21T18:05:40.321Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"onchain-crypto-xc.cc","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 16 Apr 2026 08:36:43 GMT","end":"Wed, 15 Jul 2026 08:36:42 GMT"},"fingerprint":{"sha1":"45:37:BD:3A:71:F6:EA:98:86:86:65:DB:AF:1D:54:93:10:D8:36:56","sha256":"3C:40:7F:8F:92:8F:99:55:82:58:9C:E1:82:0E:31:D8:55:7A:57:99:29:14:DD:A9:55:60:CB:B3:55:52:ED:48"}}},"request":{"raw":"GET /ac-chat.js?2.2.1776335643294 HTTP/1.1\r\nHost: onchain-crypto-xc.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 21 Apr 2026 18:05:40 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 16 Apr 2026 18:33:36 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69e12b80-907\"\r\nexpires: Wed, 22 Apr 2026 06:05:40 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\npriority: u=2,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eYYqxghgiGnX9TyXhOTq7JwoOl34ghUL2OvkiHl3tiWiY7ZWkXuc3o7b4qD%2Fbub4L%2FZK9LzZXuVQQeWIkL6bLMhe3CVTmpAICVyUJxZFiO7xHHybt%2FmrXgSlkAj9EfnQtey5V9XKGQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9efe5176f9415696-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2311,"size_decoded":0,"mime_type":"application/javascript","magic":"C++ source, Unicode text, UTF-8 text","md5":"f1f22e1c3f1ad317f0c10100fe4ca88f","sha1":"b16c8c959d49458db1ef2f7b734e135f5ae96048","sha256":"c45bfb2cd85abd4143b76d5a98376b94c134c88f56f8096095ffe30cdf3f6ccd","sha512":"952b7c83e041d344162e9a48c48a98120835dd227b53bc7bd1efc02de267b3a743ddde8138150ec9f0a61adfec7b04b2eacf49820f1605d443f2a6714fc20563","ssdeep":"","tlshash":"e441aeab47794224c20b11e32d4660943232a01fab4a1d3c79fc60d8efaab7554e1ff9","first_seen":"2024-08-29T17:49:52.044057Z","last_seen":"2026-04-21T18:06:11.937238Z","times_seen":127,"resource_available":true,"data":null}},"time_used":425,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":425,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"onchain-crypto-xc.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"onchain-crypto-xc.cc/resource/fonts/Arial.ttf","fqdn":"onchain-crypto-xc.cc","domain":"onchain-crypto-xc.cc","tld":"cc"},"ip":{"addr":"104.21.62.167","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://onchain-crypto-xc.cc/","date":"2026-04-21T18:05:41.167Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"onchain-crypto-xc.cc","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 16 Apr 2026 08:36:43 GMT","end":"Wed, 15 Jul 2026 08:36:42 GMT"},"fingerprint":{"sha1":"45:37:BD:3A:71:F6:EA:98:86:86:65:DB:AF:1D:54:93:10:D8:36:56","sha256":"3C:40:7F:8F:92:8F:99:55:82:58:9C:E1:82:0E:31:D8:55:7A:57:99:29:14:DD:A9:55:60:CB:B3:55:52:ED:48"}}},"request":{"raw":"GET /resource/fonts/Arial.ttf HTTP/1.1\r\nHost: onchain-crypto-xc.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://onchain-crypto-xc.cc/assets/index-IbJ9t-Zl.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 21 Apr 2026 18:05:41 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 1047012\r\nlast-modified: Thu, 16 Apr 2026 18:33:38 GMT\r\netag: \"69e12b82-ff9e4\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ljDNUvlqInrUiZDDiT1MImqXKGL8OuPJkx3VZvBnDwe1gC%2BYh1YQyYJTCuoZ%2FN5cUvXjq9hjggyzBuKUWM8TuHeIYwLrahNJ7Hqz1DiPlK%2BHWxbGxHazGYMBiTAXPnlmNTmVOXBkQQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9efe517c49715696-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1047012,"size_decoded":0,"mime_type":"application/octet-stream","magic":"TrueType Font data, digitally signed, 25 tables, 1st \"DSIG\", 58 names, Unicode, � 2017 The Monotype Corporation. All Rights Reserved. ","md5":"ffe66dbfc4b07f36ef38dd621ad2c7cc","sha1":"e032b102cfc37c3226d17e1b462edea5fbf8fe1c","sha256":"c1216a01b3cc4e94df72577a6f618154058a1d8999ed58fa31ab7e54c7e4be4b","sha512":"3c7952b71c8117938c5284efca0e0b3e8c20d7b84c74a4890f76a72af3b26295786b0f7c33d9b6c980527b4c4c8dad628d1f5e7e5f202d11076367f082349bb3","ssdeep":"24576:NoQIQRjo/Y7wjgTmKJ4WxA7EAD4OBfDamXKE6AMra:NHIQJo/Y7wjgTm0PxAwJHE6hG","tlshash":"f125be0bf3929f0fe3902b38c9a5d761939b76189b2743b73d8c5858ecc85a45e487d2","first_seen":"2023-07-29T15:16:45Z","last_seen":"2026-04-30T14:43:21.631073Z","times_seen":1228,"resource_available":false,"data":null}},"time_used":1092,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":366,"receive":726,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"onchain-crypto-xc.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"onchain-crypto-xc.cc/resource/svg/light/security-icon-178b26e4.svg?2.2.1776335643294","fqdn":"onchain-crypto-xc.cc","domain":"onchain-crypto-xc.cc","tld":"cc"},"ip":{"addr":"104.21.62.167","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://onchain-crypto-xc.cc/","date":"2026-04-21T18:05:45.958Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"onchain-crypto-xc.cc","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 16 Apr 2026 08:36:43 GMT","end":"Wed, 15 Jul 2026 08:36:42 GMT"},"fingerprint":{"sha1":"45:37:BD:3A:71:F6:EA:98:86:86:65:DB:AF:1D:54:93:10:D8:36:56","sha256":"3C:40:7F:8F:92:8F:99:55:82:58:9C:E1:82:0E:31:D8:55:7A:57:99:29:14:DD:A9:55:60:CB:B3:55:52:ED:48"}}},"request":{"raw":"GET /resource/svg/light/security-icon-178b26e4.svg?2.2.1776335643294 HTTP/1.1\r\nHost: onchain-crypto-xc.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 21 Apr 2026 18:05:46 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Thu, 16 Apr 2026 18:33:38 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69e12b82-466\"\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GN%2BatKQ5VJdo%2BWhkQMQYzompLQqKVO%2FGdkSEYruo55tJ0dS%2BZxZDdhP%2Bmern%2F20A5ToJhsZVnVwsYJPPiDs2PKH3sW%2B5IQvg7%2BNGmZI0CgZLL9szyYwBeqxPGmK3b8QQQbulIwBSaA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9efe519a3a785696-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1126,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"02986b81fc0676fc854775bbba305915","sha1":"b8abb0102102fab599b1f425eb618d8359f61841","sha256":"178b26e4bbebb0718597fe6412d4165cf7d36f162cc68830641d0b9dca1414db","sha512":"a6da2d0612851ecea705b397c1f024b62b36376414cce382e0c61bdff40c3bbce8712cfd8b9aef826cd226bc8e12d388464587d809a55b097d42c6a95954cad4","ssdeep":"","tlshash":"392146d333886f7cfd2587a0e313723931292636b7099354d5259af82a5421e9b7bfc4","first_seen":"2025-11-21T07:12:48.176021Z","last_seen":"2026-04-21T18:06:11.938661Z","times_seen":14,"resource_available":false,"data":null}},"time_used":371,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":371,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"onchain-crypto-xc.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"coinmm.oss-ap-northeast-1.aliyuncs.com/2.0black/cryptoworld/cbc6c42ac8bb4e059acf460713d39247.png?2.2.1776335643294","fqdn":"coinmm.oss-ap-northeast-1.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.82.131","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://onchain-crypto-xc.cc/","date":"2026-04-21T18:05:45.972Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"ap-northeast-1.oss.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 03 Dec 2025 08:27:33 GMT","end":"Sat, 02 Jan 2027 02:51:19 GMT"},"fingerprint":{"sha1":"C1:8E:34:B2:8F:15:B2:BA:DA:FE:F6:10:0F:E2:E3:F9:58:49:E1:F6","sha256":"EC:23:4D:91:A3:D6:50:A7:18:C2:E7:A4:CF:82:F3:82:8A:26:C2:83:6F:AD:E9:94:86:9D:18:13:D3:91:8A:E8"}}},"request":{"raw":"GET /2.0black/cryptoworld/cbc6c42ac8bb4e059acf460713d39247.png?2.2.1776335643294 HTTP/1.1\r\nHost: coinmm.oss-ap-northeast-1.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Tue, 21 Apr 2026 18:05:46 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 1641\r\nConnection: keep-alive\r\nx-oss-request-id: 69E7BC7A78CEA834364DB850\r\nAccept-Ranges: bytes\r\nETag: \"62B277628ECA88FA98ECD8218810406F\"\r\nLast-Modified: Wed, 12 Feb 2025 05:34:32 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 3364992616936601280\r\nx-oss-storage-class: Standard\r\nCache-Control: no-cache\r\nx-oss-version-id: CAEQlwEYgYCAntvN4qcZIiBjNDg3ODVjNGI2MzE0OGJiYTM4NTZmNzNmNjg1NTAwZA--\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: YrJ3Yo7KiPqY7NghiBBAbw==\r\nx-oss-server-time: 2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":1641,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 75 x 75, 8-bit/color RGBA, non-interlaced","md5":"62b277628eca88fa98ecd8218810406f","sha1":"95f574b1079b3c68d9ca7d010b282857d3cc556c","sha256":"f6bd6fa7a2ff53e13d02918b1c437f94d36edf12660ed45776cce72df394e87c","sha512":"d4ea7c8ce3de64718001f64f379a2ac2d501b74b4c62d10feec48edb578b19c5bbb619644ba9327920cd1095378831ce14b51d0c0a943cec40835e7e6a5c9895","ssdeep":"","tlshash":"c031c6f2310ef44622d90ba66f5037fa953921300e04da4bc62cc252de679c02229f8f","first_seen":"2025-10-12T16:46:58.211083Z","last_seen":"2026-04-21T18:06:11.939335Z","times_seen":21,"resource_available":false,"data":null}},"time_used":1906,"timings":{"blocked":820,"dns":0,"connect":274,"send":0,"wait":268,"receive":0,"ssl":540},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coinmm.oss-ap-northeast-1.aliyuncs.com/2.0black/cryptoworld/14ce8bc2f8cd4a5d9e7be6da6a930f64.png?2.2.1776335643294","fqdn":"coinmm.oss-ap-northeast-1.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.82.131","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://onchain-crypto-xc.cc/","date":"2026-04-21T18:05:45.980Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"ap-northeast-1.oss.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 03 Dec 2025 08:27:33 GMT","end":"Sat, 02 Jan 2027 02:51:19 GMT"},"fingerprint":{"sha1":"C1:8E:34:B2:8F:15:B2:BA:DA:FE:F6:10:0F:E2:E3:F9:58:49:E1:F6","sha256":"EC:23:4D:91:A3:D6:50:A7:18:C2:E7:A4:CF:82:F3:82:8A:26:C2:83:6F:AD:E9:94:86:9D:18:13:D3:91:8A:E8"}}},"request":{"raw":"GET /2.0black/cryptoworld/14ce8bc2f8cd4a5d9e7be6da6a930f64.png?2.2.1776335643294 HTTP/1.1\r\nHost: coinmm.oss-ap-northeast-1.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Tue, 21 Apr 2026 18:05:47 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 3114\r\nConnection: keep-alive\r\nx-oss-request-id: 69E7BC7BD2F2953033F7AD82\r\nAccept-Ranges: bytes\r\nETag: \"4F3808A77E9E521C2D892C6A3AE934D4\"\r\nLast-Modified: Wed, 12 Feb 2025 05:37:34 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 16273753637922201333\r\nx-oss-storage-class: Standard\r\nCache-Control: no-cache\r\nx-oss-version-id: CAEQlwEYgYDAv6LT4qcZIiA1ZjJmNjIwMjg2ZTI0M2RiYmQwNjg4OGE1YjU0NWQzMQ--\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: TzgIp36eUhwtiSxqOuk01A==\r\nx-oss-server-time: 3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":3114,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 75 x 75, 8-bit/color RGBA, non-interlaced","md5":"4f3808a77e9e521c2d892c6a3ae934d4","sha1":"db3f3e0933833c6cbd673747e3760228dc27587b","sha256":"65a9c0ea728af7f29eb46573af6745a1aa4960a6144f21065c33e257ea244fd3","sha512":"b3010b57d68310f21b9dc74fb2c728ec6ae52836d3b5041cf065e2f657e137e84a0b9632f3442fdb265666f17f47ce897c694eaaae93b2e29854cac093cd12e6","ssdeep":"","tlshash":"21515df1cba2748b00ad07b1505f68b6d65e95c1088834720789e496cd7d7719d987a1","first_seen":"2026-03-24T19:37:22.543793Z","last_seen":"2026-04-21T18:06:11.939983Z","times_seen":11,"resource_available":false,"data":null}},"time_used":1336,"timings":{"blocked":1068,"dns":0,"connect":0,"send":0,"wait":268,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.onchaincryptoapi.cc/api/user/getInfo","fqdn":"h5-api.onchaincryptoapi.cc","domain":"onchaincryptoapi.cc","tld":"cc"},"ip":{"addr":"104.21.44.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://onchain-crypto-xc.cc/","date":"2026-04-21T18:05:46.045Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"onchaincryptoapi.cc","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 16 Apr 2026 06:30:01 GMT","end":"Wed, 15 Jul 2026 06:30:00 GMT"},"fingerprint":{"sha1":"37:E5:34:F0:88:CC:E7:1E:F3:EF:6E:50:46:07:EB:0E:17:EB:8F:90","sha256":"3F:29:0D:8F:29:F1:E6:6E:CA:74:3D:FB:32:6A:F4:18:41:A4:85:18:C9:48:5C:98:3A:8B:2D:38:B1:2C:5F:E5"}}},"request":{"raw":"OPTIONS /api/user/getInfo HTTP/1.1\r\nHost: h5-api.onchaincryptoapi.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,lang,language,sign\r\nOrigin: https://onchain-crypto-xc.cc\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 21 Apr 2026 18:05:46 GMT\r\ncontent-length: 0\r\nserver: cloudflare\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://onchain-crypto-xc.cc\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: content-type, lang, language, sign\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QsGgouyqBFJX5NNLrQq5bdoqxM3Y4NG7OfBqyBtnithxSjZg60VHWDYQRLqWoBm7dpwc8KVa4QoribvuvF83AEqSXJuZ9kEGAfd5EkOTMCQf%2FROd5xyD9lxaXdi8XkpJIkUf4Hs7B1X3kfb9rw%3D%3D\"}]}\r\ncf-ray: 9efe519acf84b4fd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-30T19:35:18.687432Z","times_seen":14438163,"resource_available":true,"data":null}},"time_used":273,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":273,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"h5-api.onchaincryptoapi.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.onchaincryptoapi.cc/kline","fqdn":"h5-api.onchaincryptoapi.cc","domain":"onchaincryptoapi.cc","tld":"cc"},"ip":{"addr":"104.21.44.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://onchain-crypto-xc.cc/","date":"2026-04-21T18:05:46.053Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"onchaincryptoapi.cc","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 16 Apr 2026 06:30:01 GMT","end":"Wed, 15 Jul 2026 06:30:00 GMT"},"fingerprint":{"sha1":"37:E5:34:F0:88:CC:E7:1E:F3:EF:6E:50:46:07:EB:0E:17:EB:8F:90","sha256":"3F:29:0D:8F:29:F1:E6:6E:CA:74:3D:FB:32:6A:F4:18:41:A4:85:18:C9:48:5C:98:3A:8B:2D:38:B1:2C:5F:E5"}}},"request":{"raw":"OPTIONS /kline HTTP/1.1\r\nHost: h5-api.onchaincryptoapi.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,lang,language,sign\r\nOrigin: https://onchain-crypto-xc.cc\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 21 Apr 2026 18:05:46 GMT\r\ncontent-length: 0\r\nserver: cloudflare\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://onchain-crypto-xc.cc\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: content-type, lang, language, sign\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=olIZkMUpLaRoC3W7x2RICFRNblpEpHpL%2BMvolyIA1lQ6NN9aDltRNz3pM%2Fq23xBRioy5IgLN2zYDGWNj7QrFRixTuRgHF2vPwaRoGNDZmcD45mqgIynJfz3OyXQWU%2BqlFdI28NnUZrLdD%2BKG8A%3D%3D\"}]}\r\ncf-ray: 9efe519acf93b4fd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-30T19:35:18.687432Z","times_seen":14438163,"resource_available":true,"data":null}},"time_used":269,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":269,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"h5-api.onchaincryptoapi.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.onchaincryptoapi.cc/kline","fqdn":"h5-api.onchaincryptoapi.cc","domain":"onchaincryptoapi.cc","tld":"cc"},"ip":{"addr":"104.21.44.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://onchain-crypto-xc.cc/","date":"2026-04-21T18:05:46.339Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"onchaincryptoapi.cc","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 16 Apr 2026 06:30:01 GMT","end":"Wed, 15 Jul 2026 06:30:00 GMT"},"fingerprint":{"sha1":"37:E5:34:F0:88:CC:E7:1E:F3:EF:6E:50:46:07:EB:0E:17:EB:8F:90","sha256":"3F:29:0D:8F:29:F1:E6:6E:CA:74:3D:FB:32:6A:F4:18:41:A4:85:18:C9:48:5C:98:3A:8B:2D:38:B1:2C:5F:E5"}}},"request":{"raw":"POST /kline HTTP/1.1\r\nHost: h5-api.onchaincryptoapi.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nlanguage: en\r\nlang: en\r\nsign: EbIKo61LES/JC9WRXG9yvf5vtiBfCoScciPtaW9f6n2q7gfg4m2bGmNW9tNtJXn/+Ojb5MiKYoI/3jew7MXjF9tXCS14Qig5vXG54tyedAmxmJ0+Wu9g7V76bF3AkHsB0f52FyGAN/ehFIkkDP2D09vInMtYNaNB0qjHludugx4RKrgisl29FQEa3c+S1peoVSFtKE/DeU00nqRAMxtuk40dBROudYVnyZtHpHhTj0q5o2nl5XZErKH23fgh6gunn6vhfgKDjn617rKwz/704N3v4EJFpucELp0lQiv/mFjZzDLPKfoCK1RiH3BHv5kdAJlkFPJlUXPOIm8IUoytRQ==\r\nContent-Length: 69\r\nOrigin: https://onchain-crypto-xc.cc\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":69,"data":"{\"interval\":\"ONE_MIN\",\"limit\":1000,\"market\":\"binance\",\"symbol\":\"eth\"}"}},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 21 Apr 2026 18:05:46 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://onchain-crypto-xc.cc\r\naccess-control-allow-credentials: true\r\nset-cookie: JSESSIONID=B7F563CDAF328AF5AAE29EEA8B57E1CE; Path=/; HttpOnly\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AgTbEOX8yNEe0V8E2bzmTihSJzK6nb4Bl%2F0jAXCiGSg8ZSI9KBVERVhsnJxncEm8Ch4DI1SYJ7Rq035GgpzMAE7%2FL%2F1Zhpsy60FKcq9sz%2BSqXI%2FAguNwaSJWsT5wcKgvarToDkViD7GZyV3hxQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9efe519c8ac5b512-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Java","description":"Java is a class-based, object-oriented programming language that is designed to have as few implementation dependencies as possible.","website":"https://java.com","common_platform_enumeration":"cpe:2.3:a:oracle:jre:*:*:*:*:*:*:*:*","icon":"Java.svg","categories":["Programming languages"]}],"data":{"size":40241,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"2be11c1060971cc3fcad4b6b1ac72d44","sha1":"56b3613a400b22fe12b72bb3a10f3b311f3aa5b4","sha256":"9f5b289282b423bf30419fe525925c146722041b8996915fa03bd6f878792115","sha512":"84bfbc866064b7a8b80c13a09cf7bfcc1265043ed4845754ccc49515bf17c23464163739e9fb64cbedd1b32cfaa9fd2874df24915b23cbe898e651a972ab475a","ssdeep":"384:4tVlR8RIZ5qlcI0ZE/mPYI0MyTvRBIws+TAfnj6UNNcxhINZ/7OOZlxZS4fmL3I2:aR8RIZ5IiElI0MovuEARlXxf1UKigz8","tlshash":"1e037872ca95e189e574cf8617c39ea48c5a37c786ed8e4206ae5811cef0324d54aff3","first_seen":"2026-04-21T18:06:11.940713Z","last_seen":"2026-04-21T18:06:11.940713Z","times_seen":1,"resource_available":false,"data":null}},"time_used":343,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":341,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"h5-api.onchaincryptoapi.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"onchain-crypto-xc.cc/","fqdn":"onchain-crypto-xc.cc","domain":"onchain-crypto-xc.cc","tld":"cc"},"ip":{"addr":"104.21.62.167","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-04-21T18:05:39.765Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"onchain-crypto-xc.cc","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 16 Apr 2026 08:36:43 GMT","end":"Wed, 15 Jul 2026 08:36:42 GMT"},"fingerprint":{"sha1":"45:37:BD:3A:71:F6:EA:98:86:86:65:DB:AF:1D:54:93:10:D8:36:56","sha256":"3C:40:7F:8F:92:8F:99:55:82:58:9C:E1:82:0E:31:D8:55:7A:57:99:29:14:DD:A9:55:60:CB:B3:55:52:ED:48"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: onchain-crypto-xc.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 21 Apr 2026 18:05:40 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\nlast-modified: Thu, 16 Apr 2026 18:34:02 GMT\r\nvary: Accept-Encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BPyWkoOqmkjWQB0XkFD3pSOQD7gLxVC46LQPH8VDmW8bEG4T0uQx4Znwlp019k7g%2B%2BpsBPddEbmwXtdZ26SYGV%2B2Xbfk5mGlD1lbY%2FiTtZoUrwEPBcD%2BL9X3Go0EBDMchSCC8WXObQ%3D%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9efe5173a8310afa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6425,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1176)","md5":"738f1f83ef71da3d0c1ad328e7e9892c","sha1":"d6eb48d847039bb7a8af96749fe46e62b12d6874","sha256":"454579db57cf6c916d366d79b7d92ad9c790a2a929bacc6004a464447cc76f30","sha512":"9bafae53b9f93cd7980ad27f9b407810fdb4747ddc110a74f8bafc9cc1175f5e10b748983bddff859bcafb89b0408eff750349393119fafd1a8220785f5d86bb","ssdeep":"192:TFmO1AOXUMUqRGKYCI4CyCMVZCxfn2nfHbbOuB1XieiSfo:gO1AOI4CyCQZCx/2/S9SA","tlshash":"c4d1a5b77cb1d8662392451bdee7f414aa60a153821e9c10b5cc04eccfc2fc588c7ba2","first_seen":"2026-04-17T12:22:51.844073Z","last_seen":"2026-04-21T18:06:11.94241Z","times_seen":9,"resource_available":true,"data":null}},"time_used":426,"timings":{"blocked":21,"dns":5,"connect":1,"send":0,"wait":384,"receive":0,"ssl":13},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"onchain-crypto-xc.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"onchain-crypto-xc.cc/charting_library/charting_library.min.js","fqdn":"onchain-crypto-xc.cc","domain":"onchain-crypto-xc.cc","tld":"cc"},"ip":{"addr":"104.21.62.167","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://onchain-crypto-xc.cc/","date":"2026-04-21T18:05:40.314Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"onchain-crypto-xc.cc","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 16 Apr 2026 08:36:43 GMT","end":"Wed, 15 Jul 2026 08:36:42 GMT"},"fingerprint":{"sha1":"45:37:BD:3A:71:F6:EA:98:86:86:65:DB:AF:1D:54:93:10:D8:36:56","sha256":"3C:40:7F:8F:92:8F:99:55:82:58:9C:E1:82:0E:31:D8:55:7A:57:99:29:14:DD:A9:55:60:CB:B3:55:52:ED:48"}}},"request":{"raw":"GET /charting_library/charting_library.min.js HTTP/1.1\r\nHost: onchain-crypto-xc.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 21 Apr 2026 18:05:40 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 16 Apr 2026 18:33:36 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69e12b80-2a6a\"\r\nexpires: Wed, 22 Apr 2026 06:05:40 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\npriority: u=3,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UjPxWBxUwVmloDx%2FDKibLRSJM%2FFxLyPMaD7PE7Ej3rY0NgT7xArvi%2B6%2ByRd0SaWWwb%2BV27JueLabsHvrbJv88kNfinENNy8NJeWYAjMFLZWr%2B6gihURx3Ctg5QRCTzUYvG%2B8HFXLbg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9efe5176f93c5696-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10858,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (10857)","md5":"8573e89d9ec535663d75f21b1f08109c","sha1":"a8d9eea0b157ceeffc38d4254e6f6abc9d697d10","sha256":"cb0c6c9f1771d252eee7caa043bdd7cfffbd52c2cc4b18b7be7c4554ed069151","sha512":"55d728fa1e0682725f94b17387c6790792d3d34b43652a00097876118575bd6cefa20916d80674519005d72f20ecbb745e9645516c056e6f9bb6691d5efbcb33","ssdeep":"192:9fdWSo7ktFUnoBelr6lw2LfnzuIQPlaJ1i10K+Ei/ISJhvHIheu5Ph3Ffam:vWS2ktFUnoIlD2LfnqIJimK+5/ISJhvu","tlshash":"6e224f58ed2478720acb54f0427f180f8239e278d84944ed3cc4e6ec59fd44a6a6fbb8","first_seen":"2023-08-16T00:37:19Z","last_seen":"2026-04-30T10:30:02.872376Z","times_seen":474,"resource_available":true,"data":null}},"time_used":416,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":416,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"onchain-crypto-xc.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"onchain-crypto-xc.cc/platform/newcrypto_3/logo.png?2.2.1776335643294","fqdn":"onchain-crypto-xc.cc","domain":"onchain-crypto-xc.cc","tld":"cc"},"ip":{"addr":"104.21.62.167","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://onchain-crypto-xc.cc/","date":"2026-04-21T18:05:45.920Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"onchain-crypto-xc.cc","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 16 Apr 2026 08:36:43 GMT","end":"Wed, 15 Jul 2026 08:36:42 GMT"},"fingerprint":{"sha1":"45:37:BD:3A:71:F6:EA:98:86:86:65:DB:AF:1D:54:93:10:D8:36:56","sha256":"3C:40:7F:8F:92:8F:99:55:82:58:9C:E1:82:0E:31:D8:55:7A:57:99:29:14:DD:A9:55:60:CB:B3:55:52:ED:48"}}},"request":{"raw":"GET /platform/newcrypto_3/logo.png?2.2.1776335643294 HTTP/1.1\r\nHost: onchain-crypto-xc.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 21 Apr 2026 18:05:46 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 16 Apr 2026 18:33:38 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69e12b82-f4e9\"\r\nexpires: Thu, 21 May 2026 18:05:46 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vZO1sFCfmxj7afp1rW7YT%2Bn2j%2FbDk7ng0OmMARtjaf85FSUzpZzyUUGwqz05RgouotHq3Y7SyShIJn9%2BtSEVwy4F7U%2BGveo2PK0Tg7uqo5NEzwDK1MN423xpYNnAfgPy4%2FSOiZGFsA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9efe519a0a705696-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":62697,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1130 x 250, 8-bit/color RGB, non-interlaced","md5":"299297a999e666c27bb4bf931f4289ef","sha1":"21b3c06cbafb1ae50fcb8f73b8cec7a3533ddf25","sha256":"cd3569cafa2c5f9cc988cf8e4d19aefefdc5e204bc522d1ba06e81bd44538292","sha512":"4d4b6195e8e7fa3247bc328abc5227671405dfd36029a831a3c0183e5f249f7b0ea7069a07dd69551eaf84deb929c6615f7f551890b483519ed1d7d48cf2fbf9","ssdeep":"1536:60q2RRrC/Ya5Aw/TR9W0GPpM7MdqBBaRAOcRd2n3JQeKhC:rq2qAUA019W0GRsMdEaRhcj2TwC","tlshash":"4453f14dd9d0b085ced887bb0cae91cb53b382c768759519c448f7960c6827e9b628af","first_seen":"2026-03-24T19:37:22.457615Z","last_seen":"2026-04-21T18:06:11.943869Z","times_seen":11,"resource_available":false,"data":null}},"time_used":595,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":477,"receive":118,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"onchain-crypto-xc.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"onchain-crypto-xc.cc/resource/svg/light/usdtlogo-8dafbb5e.svg?2.2.1776335643294","fqdn":"onchain-crypto-xc.cc","domain":"onchain-crypto-xc.cc","tld":"cc"},"ip":{"addr":"104.21.62.167","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://onchain-crypto-xc.cc/","date":"2026-04-21T18:05:45.935Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"onchain-crypto-xc.cc","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 16 Apr 2026 08:36:43 GMT","end":"Wed, 15 Jul 2026 08:36:42 GMT"},"fingerprint":{"sha1":"45:37:BD:3A:71:F6:EA:98:86:86:65:DB:AF:1D:54:93:10:D8:36:56","sha256":"3C:40:7F:8F:92:8F:99:55:82:58:9C:E1:82:0E:31:D8:55:7A:57:99:29:14:DD:A9:55:60:CB:B3:55:52:ED:48"}}},"request":{"raw":"GET /resource/svg/light/usdtlogo-8dafbb5e.svg?2.2.1776335643294 HTTP/1.1\r\nHost: onchain-crypto-xc.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 21 Apr 2026 18:05:46 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Thu, 16 Apr 2026 18:33:38 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69e12b82-7be\"\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ObgIICws282YUT8A4OkFDq5Kf8nn6CYen6sZa8jLoxndhEBSVls1cFVfe7BkRzFJ01KCFHuKVQFOJbJaPZ1SG2BtK4g8rcXa0fjpxOe2j6A04YsqqX4UVefZ20q9V9zBLEWL01oWqg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9efe519a1a735696-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1982,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"05e8d6e910a25433f40e28db4cfbc829","sha1":"6d9f703abc1d30d00740298dcfec11aadddba55d","sha256":"8dafbb5e6b86f608bd36dc7975e0ba494bd3f8865a2e436086c805715198a25e","sha512":"569163bfa9619b5b739a016de580517fe566dc54100b5f2c23e0fbb9905d87b7fadc2a07f0cf46719f574fbe76863c136150460ef02458aae78731ce3b69d8d0","ssdeep":"","tlshash":"324128b5a6dddc0d8989fa8297fd4144ec03ecc5d364e90bc8c83e99ac94a827d0009f","first_seen":"2026-01-09T14:03:26.858095Z","last_seen":"2026-04-21T18:06:11.944634Z","times_seen":11,"resource_available":false,"data":null}},"time_used":366,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":365,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"onchain-crypto-xc.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"onchain-crypto-xc.cc/resource/svg/light/boarding-icon-f91ba6b6.svg?2.2.1776335643294","fqdn":"onchain-crypto-xc.cc","domain":"onchain-crypto-xc.cc","tld":"cc"},"ip":{"addr":"104.21.62.167","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://onchain-crypto-xc.cc/","date":"2026-04-21T18:05:46.649Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"onchain-crypto-xc.cc","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 16 Apr 2026 08:36:43 GMT","end":"Wed, 15 Jul 2026 08:36:42 GMT"},"fingerprint":{"sha1":"45:37:BD:3A:71:F6:EA:98:86:86:65:DB:AF:1D:54:93:10:D8:36:56","sha256":"3C:40:7F:8F:92:8F:99:55:82:58:9C:E1:82:0E:31:D8:55:7A:57:99:29:14:DD:A9:55:60:CB:B3:55:52:ED:48"}}},"request":{"raw":"GET /resource/svg/light/boarding-icon-f91ba6b6.svg?2.2.1776335643294 HTTP/1.1\r\nHost: onchain-crypto-xc.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 21 Apr 2026 18:05:47 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Thu, 16 Apr 2026 18:33:38 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69e12b82-2b6a\"\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=juQLr6R1zPxqYeTLTg%2F63nuVsqO0UrOFkAfntq9ze4cNLq3wKU9SyxdkcgiqhE%2BRYI2RQIlF%2FQPb2kIEbcSKlzvQLBbjDl0p2LLGQu0Efs82vUS3%2FcCXrgUJivSQ67go87mAdajWAw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9efe519e8a995696-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11114,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"c6ad8f302bed22a4a0b839b4f697b318","sha1":"7219af9600a870b9adea4f7c0070389fae1b78b3","sha256":"f91ba6b6d788a0f78b5a67b8a204b631c39a5a26f2c856277fe17b99c6608b7e","sha512":"3e6abdd70132b1fdb31dfa8d12885d1b9a8e1062ffbfc55b705d8ceb0e30b0d6c53a156e98f8e7055485faef457e08239a604935c100cff786b1da4fd4475633","ssdeep":"192:g49iNPlWKHqGbjCTY1FUMdtXRXARAFjuOQYbPsZZg8DYy2M5eWSACNmEF:g49iNPlWKHqYjCTDMdtXhHJPkAjZtZAs","tlshash":"cb3264fc379420fcdec45bc2ef11e9ec2117d0b7a6505108da692a7d29a894fd83bac5","first_seen":"2025-11-11T17:28:17.562845Z","last_seen":"2026-04-21T18:06:11.945436Z","times_seen":13,"resource_available":false,"data":null}},"time_used":373,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":373,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"onchain-crypto-xc.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"onchain-crypto-xc.cc/assets/vendor-JZ4mawOx.js","fqdn":"onchain-crypto-xc.cc","domain":"onchain-crypto-xc.cc","tld":"cc"},"ip":{"addr":"104.21.62.167","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://onchain-crypto-xc.cc/","date":"2026-04-21T18:05:41.142Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"onchain-crypto-xc.cc","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 16 Apr 2026 08:36:43 GMT","end":"Wed, 15 Jul 2026 08:36:42 GMT"},"fingerprint":{"sha1":"45:37:BD:3A:71:F6:EA:98:86:86:65:DB:AF:1D:54:93:10:D8:36:56","sha256":"3C:40:7F:8F:92:8F:99:55:82:58:9C:E1:82:0E:31:D8:55:7A:57:99:29:14:DD:A9:55:60:CB:B3:55:52:ED:48"}}},"request":{"raw":"GET /assets/vendor-JZ4mawOx.js HTTP/1.1\r\nHost: onchain-crypto-xc.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 21 Apr 2026 18:05:41 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 16 Apr 2026 18:34:02 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69e12b9a-4194b6\"\r\nexpires: Wed, 22 Apr 2026 06:05:41 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\npriority: u=3,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SPX3ZyUjGR8Q%2F%2Bj7fT1hi6kM%2BvhekQEWZ7zk5wRUBoEbijY5zX12HufAfpllZKZ7gDSvuF%2FwR7CMUcv08%2B9QTkrpwre%2B5%2FlC3tRdrqNufhCGmaxVQ%2BTjINuiTsPyk7boFu7Fm1kaLw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9efe517c29705696-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4297910,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"aff14daff7da87a4bf07b6b7b62feedc","sha1":"79c55f4e20d7ea038187bb7b9b003f94076131c5","sha256":"5b4ae27e603903b775212bf39dd1724de6a31a52c1fd8920c36e17b3080eba0c","sha512":"709c0d68b8fc0c9a82bcd38e48e91ea6a844f9fc5c7c7be6b867a0f77a858fc8968c3b5fe72aa7a38e5740556b513865761ee5754c2a92393e659115b32314c3","ssdeep":"24576:/523HuJSEwbl8YTEMqvqhRnPWPK+JjffxMNihLlJd2drbZL1dTYo9C4a+5SO8vdD:/s3u0EwbWYTEMqvkRnPWPK+JjffxMm3/","tlshash":"46252bd8b285f02143a721f5407f140bf339591d784e84a8f669d8ea3cbe849627bf79","first_seen":"2026-04-17T12:22:51.830387Z","last_seen":"2026-04-21T18:06:11.946216Z","times_seen":9,"resource_available":false,"data":null}},"time_used":1126,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":495,"receive":631,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"onchain-crypto-xc.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"onchain-crypto-xc.cc/platform/newcrypto_3/favicon.ico?2.2.1776335643294","fqdn":"onchain-crypto-xc.cc","domain":"onchain-crypto-xc.cc","tld":"cc"},"ip":{"addr":"104.21.62.167","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://onchain-crypto-xc.cc/","date":"2026-04-21T18:05:42.884Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"onchain-crypto-xc.cc","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 16 Apr 2026 08:36:43 GMT","end":"Wed, 15 Jul 2026 08:36:42 GMT"},"fingerprint":{"sha1":"45:37:BD:3A:71:F6:EA:98:86:86:65:DB:AF:1D:54:93:10:D8:36:56","sha256":"3C:40:7F:8F:92:8F:99:55:82:58:9C:E1:82:0E:31:D8:55:7A:57:99:29:14:DD:A9:55:60:CB:B3:55:52:ED:48"}}},"request":{"raw":"GET /platform/newcrypto_3/favicon.ico?2.2.1776335643294 HTTP/1.1\r\nHost: onchain-crypto-xc.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 21 Apr 2026 18:05:43 GMT\r\ncontent-type: image/x-icon\r\npriority: u=6,i=?0\r\nlast-modified: Thu, 16 Apr 2026 18:33:38 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"69e12b82-423e\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0gzj1lFj4gceJ1UTa1Vdm27AQum%2F%2FeBhkPZcSNc2fHuLjn2IKxBnh3rwd%2BjUQdW82I9A%2BEMEQlxu4EkBv6Z6g%2BRrT%2F9zNkiuclzUEuFYU5KnCm2LM9Q7xiRyEOtdfsg9qIJFVS46wQ%3D%3D\"}]}\r\ncf-ray: 9efe518709d15696-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16958,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 64x64, 32 bits/pixel","md5":"63861117d362c60cbca3e14b70ac3f8d","sha1":"e44ff107f73d15b79937779e4215ac48768af8bb","sha256":"a47762da05b5973e3173e983a58b27f3c9d0838b3abdea3f34291e0046b84b6b","sha512":"1e2744969651652b7e920e0bde4f2f20d5258397777aee6fe60b4c9d333d67d0b6740b280b0ba8b685977e9ecd1b68e8bbbf4353b720dad74d4db89e589e5877","ssdeep":"192:EbaR3CkhW8vrcYOwcogdWY9lu0uGOtytH4OLGxu99Aqu:JSxErcYnIyGPzGxu95","tlshash":"6572d8d2969056aad94a3f386532de3d42bf1f68bc2df3466d15f0626ff32d41422883","first_seen":"2026-03-05T18:49:25.506784Z","last_seen":"2026-04-21T18:06:11.947079Z","times_seen":14,"resource_available":false,"data":null}},"time_used":502,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":382,"receive":120,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"onchain-crypto-xc.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"onchain-crypto-xc.cc/assets/vendor-JZ4mawOx.js","fqdn":"onchain-crypto-xc.cc","domain":"onchain-crypto-xc.cc","tld":"cc"},"ip":{"addr":"104.21.62.167","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://onchain-crypto-xc.cc/","date":"2026-04-21T18:05:43.659Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"onchain-crypto-xc.cc","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 16 Apr 2026 08:36:43 GMT","end":"Wed, 15 Jul 2026 08:36:42 GMT"},"fingerprint":{"sha1":"45:37:BD:3A:71:F6:EA:98:86:86:65:DB:AF:1D:54:93:10:D8:36:56","sha256":"3C:40:7F:8F:92:8F:99:55:82:58:9C:E1:82:0E:31:D8:55:7A:57:99:29:14:DD:A9:55:60:CB:B3:55:52:ED:48"}}},"request":{"raw":"GET /assets/vendor-JZ4mawOx.js HTTP/1.1\r\nHost: onchain-crypto-xc.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 21 Apr 2026 18:05:43 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 16 Apr 2026 18:34:02 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69e12b9a-4194b6\"\r\nexpires: Wed, 22 Apr 2026 06:05:41 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 2\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6mRIByHBjHWju1jLsVN6ilTyFbpRiHNwvSgGbnB%2BcN8NFoR0FsZzKamXIkkMgmn1%2Fwf5rXwBVW55lUosUtwjRj8WSwtszh%2FLL6%2BUaBD5mk%2FABLJUHrqNqWqFZRxjGtZsaJyDyPM9xw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9efe518be9e85696-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4297910,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"aff14daff7da87a4bf07b6b7b62feedc","sha1":"79c55f4e20d7ea038187bb7b9b003f94076131c5","sha256":"5b4ae27e603903b775212bf39dd1724de6a31a52c1fd8920c36e17b3080eba0c","sha512":"709c0d68b8fc0c9a82bcd38e48e91ea6a844f9fc5c7c7be6b867a0f77a858fc8968c3b5fe72aa7a38e5740556b513865761ee5754c2a92393e659115b32314c3","ssdeep":"24576:/523HuJSEwbl8YTEMqvqhRnPWPK+JjffxMNihLlJd2drbZL1dTYo9C4a+5SO8vdD:/s3u0EwbWYTEMqvkRnPWPK+JjffxMm3/","tlshash":"46252bd8b285f02143a721f5407f140bf339591d784e84a8f669d8ea3cbe849627bf79","first_seen":"2026-04-17T12:22:51.830387Z","last_seen":"2026-04-21T18:06:11.946216Z","times_seen":9,"resource_available":false,"data":null}},"time_used":40,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":9,"receive":31,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"onchain-crypto-xc.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.onchaincryptoapi.cc/api/common/getApprovalAddr","fqdn":"h5-api.onchaincryptoapi.cc","domain":"onchaincryptoapi.cc","tld":"cc"},"ip":{"addr":"104.21.44.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://onchain-crypto-xc.cc/","date":"2026-04-21T18:05:45.055Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"onchaincryptoapi.cc","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 16 Apr 2026 06:30:01 GMT","end":"Wed, 15 Jul 2026 06:30:00 GMT"},"fingerprint":{"sha1":"37:E5:34:F0:88:CC:E7:1E:F3:EF:6E:50:46:07:EB:0E:17:EB:8F:90","sha256":"3F:29:0D:8F:29:F1:E6:6E:CA:74:3D:FB:32:6A:F4:18:41:A4:85:18:C9:48:5C:98:3A:8B:2D:38:B1:2C:5F:E5"}}},"request":{"raw":"GET /api/common/getApprovalAddr HTTP/1.1\r\nHost: h5-api.onchaincryptoapi.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nlang: en-US\r\nsign: jVsXkJ3TQTc8nyCABXmX/VvA2b0n3C7Nn8veFleCVqcVVG9eGutYJgRvHnXvltPQNaXP7QCRGA0e7sGP1bqtS4Va99kOJpbNnrTij3PK8ce8O+5qwRAdbvT9U8rn1AAl2xg6GBudfYtG618T3LvkqfPnRNPPBjDjeHnOEO2ogeXswR/s2HMWmVaPixWUva1hNOXrnc0mHuT6jcpDdeVk0cIsGTt1aO8HpbARsfX/MJ2OTPRbp244jNGDxIee4Pc3s3kxS0cLx9Rk2IXZMozD220b7U6c64VSJcZO5lB1O93HxkzsBXNVYOt0zW0zoprcTYyYSwlgOro1owB9IIWytQ==\r\nOrigin: https://onchain-crypto-xc.cc\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 21 Apr 2026 18:05:45 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://onchain-crypto-xc.cc\r\naccess-control-allow-credentials: true\r\nset-cookie: JSESSIONID=32570F1899FE411CD65DE64F1D2E8D29; Path=/; HttpOnly\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cache: MISS\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=G7dZAOy9ZMkXraUKSzxiAqQsD9m%2BT9oi2OsU7PSWMVKBf%2FX%2BqtBhliPBtPSJ6Fq0BRAwHTCx7RvoxTSFalKhpaKz6pE5eIbr%2BNfvq7QOrN%2B9KC3WjOddVzUD1VH7k%2F2EgnZByda4t69jcTf4Lg%3D%3D\"}]}\r\ncf-ray: 9efe51949ef5b4fd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Java","description":"Java is a class-based, object-oriented programming language that is designed to have as few implementation dependencies as possible.","website":"https://java.com","common_platform_enumeration":"cpe:2.3:a:oracle:jre:*:*:*:*:*:*:*:*","icon":"Java.svg","categories":["Programming languages"]}],"data":{"size":204,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"9c89e59e2142e0327920d9ba0ad139d4","sha1":"893162fa6be485590f93425810d25b627917668b","sha256":"563de3461e2aa1621845d36751b9a3243bf2e55393153c1be7e97d3b073dd159","sha512":"bf0a494eb37108a9e40969a00095db6e7d96eb53399885b6e282b41c79877d263a1d39d2600d481f74e348ac41c97e16e840cb1052562e1ff711a8c6bfe5d5d3","ssdeep":"","tlshash":"51d012989d09d5e2d1079c1f16bf0f5158e07e6083664e548c5fc56ed4790395682d63","first_seen":"2025-09-21T23:56:09.122554Z","last_seen":"2026-04-21T18:06:11.947806Z","times_seen":25,"resource_available":false,"data":null}},"time_used":278,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":278,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"h5-api.onchaincryptoapi.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"coinmm.oss-ap-northeast-1.aliyuncs.com/2.0black/cryptoworld/a240ab6f6b5140189d78937633f61bea.png?2.2.1776335643294","fqdn":"coinmm.oss-ap-northeast-1.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.82.131","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://onchain-crypto-xc.cc/","date":"2026-04-21T18:05:45.950Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"ap-northeast-1.oss.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 03 Dec 2025 08:27:33 GMT","end":"Sat, 02 Jan 2027 02:51:19 GMT"},"fingerprint":{"sha1":"C1:8E:34:B2:8F:15:B2:BA:DA:FE:F6:10:0F:E2:E3:F9:58:49:E1:F6","sha256":"EC:23:4D:91:A3:D6:50:A7:18:C2:E7:A4:CF:82:F3:82:8A:26:C2:83:6F:AD:E9:94:86:9D:18:13:D3:91:8A:E8"}}},"request":{"raw":"GET /2.0black/cryptoworld/a240ab6f6b5140189d78937633f61bea.png?2.2.1776335643294 HTTP/1.1\r\nHost: coinmm.oss-ap-northeast-1.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Tue, 21 Apr 2026 18:05:46 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 1100\r\nConnection: keep-alive\r\nx-oss-request-id: 69E7BC7AC961DA333089F1E7\r\nAccept-Ranges: bytes\r\nETag: \"8658D5935AB59EE39D15C39226279D46\"\r\nLast-Modified: Tue, 18 Feb 2025 16:29:01 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 533354087542411518\r\nx-oss-storage-class: Standard\r\nCache-Control: no-cache\r\nx-oss-version-id: CAEQmwEYgYDAnLXI56gZIiA0ZTYyYmY0MjliMjQ0MjVlYTY1OWI2ZDdkYTAwYjNhMg--\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: hljVk1q1nuOdFcOSJiedRg==\r\nx-oss-server-time: 6\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":1100,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 96 x 96, 8-bit colormap, non-interlaced","md5":"8658d5935ab59ee39d15c39226279d46","sha1":"27463866eb9fa6fe4b6d2bd2cd3d6fd88392cb43","sha256":"595a7c97f329934d40fa297958ccbb31d3cd101c2965b02a32a7c96fd49c9e11","sha512":"0179fd67c6baa7d46fba32986a8f6fe1586f2d9d3c57161bc33ecae609d6e608e8d9bfcdad0459bf41ba087843955a45ce5daca8ea223cb33138de6b4c8b13db","ssdeep":"","tlshash":"f211b6b64261eec7905c8a22da820b38ed2d9718f01c3f06ef73efb39225b045105d0a","first_seen":"2023-05-25T23:01:30Z","last_seen":"2026-04-30T14:42:23.626414Z","times_seen":1579,"resource_available":false,"data":null}},"time_used":1883,"timings":{"blocked":810,"dns":21,"connect":262,"send":0,"wait":265,"receive":0,"ssl":521},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coinmm.oss-ap-northeast-1.aliyuncs.com/2.0black/cryptoworld/fc7ef2ed03234dda8b1df7312f742c06.png?2.2.1776335643294","fqdn":"coinmm.oss-ap-northeast-1.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.82.131","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://onchain-crypto-xc.cc/","date":"2026-04-21T18:05:45.953Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"ap-northeast-1.oss.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 03 Dec 2025 08:27:33 GMT","end":"Sat, 02 Jan 2027 02:51:19 GMT"},"fingerprint":{"sha1":"C1:8E:34:B2:8F:15:B2:BA:DA:FE:F6:10:0F:E2:E3:F9:58:49:E1:F6","sha256":"EC:23:4D:91:A3:D6:50:A7:18:C2:E7:A4:CF:82:F3:82:8A:26:C2:83:6F:AD:E9:94:86:9D:18:13:D3:91:8A:E8"}}},"request":{"raw":"GET /2.0black/cryptoworld/fc7ef2ed03234dda8b1df7312f742c06.png?2.2.1776335643294 HTTP/1.1\r\nHost: coinmm.oss-ap-northeast-1.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Tue, 21 Apr 2026 18:05:46 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 2560\r\nConnection: keep-alive\r\nx-oss-request-id: 69E7BC7A70C1143131149240\r\nAccept-Ranges: bytes\r\nETag: \"CB84D3CA48A52E3DF1025731A8BEF4EC\"\r\nLast-Modified: Tue, 18 Feb 2025 16:28:35 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 6590887318613304211\r\nx-oss-storage-class: Standard\r\nCache-Control: no-cache\r\nx-oss-version-id: CAEQmwEYgYDAl9HH56gZIiAyMWI4MjA4Yjc5OWE0Mjk4YTUyM2MxNTAxODkzM2JjMA--\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: y4TTykilLj3xAlcxqL707A==\r\nx-oss-server-time: 3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":2560,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 192 x 192, 8-bit colormap, non-interlaced","md5":"cb84d3ca48a52e3df1025731a8bef4ec","sha1":"b059f2eb3aaf93145fd62647cb908c5532e06795","sha256":"0f4502d8c5254df1eb0eb8d124c7684b4f02e2a5004525d5bd7acd18a6ebb9fc","sha512":"d7cd5d9aface1bb4718d418d1f7108bbbde7e8e24e926ce4bd4a88f51c715759e55741de3d6b17e7e54dea502761817e093e768a337fc0030a259fe9b4338151","ssdeep":"","tlshash":"7e513a6a47020c971334d44f89fc3eea1d6edc1ad421e0aeee0197fa18101c18dbe343","first_seen":"2023-05-25T23:01:30Z","last_seen":"2026-04-30T14:42:23.590063Z","times_seen":1438,"resource_available":false,"data":null}},"time_used":1881,"timings":{"blocked":816,"dns":4,"connect":265,"send":0,"wait":265,"receive":1,"ssl":526},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"onchain-crypto-xc.cc/resource/svg/light/chart-candle-icon-7a291575.svg?2.2.1776335643294","fqdn":"onchain-crypto-xc.cc","domain":"onchain-crypto-xc.cc","tld":"cc"},"ip":{"addr":"104.21.62.167","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://onchain-crypto-xc.cc/","date":"2026-04-21T18:05:45.959Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"onchain-crypto-xc.cc","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 16 Apr 2026 08:36:43 GMT","end":"Wed, 15 Jul 2026 08:36:42 GMT"},"fingerprint":{"sha1":"45:37:BD:3A:71:F6:EA:98:86:86:65:DB:AF:1D:54:93:10:D8:36:56","sha256":"3C:40:7F:8F:92:8F:99:55:82:58:9C:E1:82:0E:31:D8:55:7A:57:99:29:14:DD:A9:55:60:CB:B3:55:52:ED:48"}}},"request":{"raw":"GET /resource/svg/light/chart-candle-icon-7a291575.svg?2.2.1776335643294 HTTP/1.1\r\nHost: onchain-crypto-xc.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 21 Apr 2026 18:05:46 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Thu, 16 Apr 2026 18:33:38 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69e12b82-5f6\"\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dHBPaOka9FbEeXIIlceQf1gBUTsuShew6nZ952Ysumf3FzQL7DhOmFNhvp2YLS09DUOuaL05e5HzPf9F3zK5IuCo2lLsfZdE8mQ2rlbWlav6iBtPKx7ucBSwPBITMMllYPhgE%2FPl%2FQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9efe519a3a795696-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1526,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"9c0b7c654f57509a5d89aef9a2f13cdf","sha1":"77ef9cd673169c40fe3e3ba7ea26489ed717c5b2","sha256":"7a29157544e59128b1a2728b80332780fb7c1f6625c56104f4807a1fbf2f52a7","sha512":"6a2b1a0096068798eeef4e1dd9e9635efdeec3989fd5466a41dbbe5e8bc1a4f5df57dd807c0077cc1362e22537177a621ef3a82292de79782e31222a3ca1eba1","ssdeep":"","tlshash":"e531c38573480c3cba320a50d747733a617a5273264eb25889372ab81918a5f6a7fac4","first_seen":"2025-11-21T07:12:48.109136Z","last_seen":"2026-04-21T18:06:11.950474Z","times_seen":14,"resource_available":false,"data":null}},"time_used":363,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":363,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"onchain-crypto-xc.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"coinmm.oss-ap-northeast-1.aliyuncs.com/2.0black/cryptoworld/1d8099461933491bba8d79fce2e2f3ae.png?2.2.1776335643294","fqdn":"coinmm.oss-ap-northeast-1.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.82.131","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://onchain-crypto-xc.cc/","date":"2026-04-21T18:05:45.978Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"ap-northeast-1.oss.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 03 Dec 2025 08:27:33 GMT","end":"Sat, 02 Jan 2027 02:51:19 GMT"},"fingerprint":{"sha1":"C1:8E:34:B2:8F:15:B2:BA:DA:FE:F6:10:0F:E2:E3:F9:58:49:E1:F6","sha256":"EC:23:4D:91:A3:D6:50:A7:18:C2:E7:A4:CF:82:F3:82:8A:26:C2:83:6F:AD:E9:94:86:9D:18:13:D3:91:8A:E8"}}},"request":{"raw":"GET /2.0black/cryptoworld/1d8099461933491bba8d79fce2e2f3ae.png?2.2.1776335643294 HTTP/1.1\r\nHost: coinmm.oss-ap-northeast-1.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Tue, 21 Apr 2026 18:05:47 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 2387\r\nConnection: keep-alive\r\nx-oss-request-id: 69E7BC7B70C1143131749240\r\nAccept-Ranges: bytes\r\nETag: \"6EF6F16102B0FC6227F17F63EE97869C\"\r\nLast-Modified: Wed, 12 Feb 2025 05:35:29 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 8563449024876595536\r\nx-oss-storage-class: Standard\r\nCache-Control: no-cache\r\nx-oss-version-id: CAEQlwEYgYDAyLvP4qcZIiA4MGFiMzI0ZjdiMTA0MzY0OWI3N2Q2YTI1NjdlZjc2Mw--\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: bvbxYQKw/GIn8X9j7peGnA==\r\nx-oss-server-time: 5\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":2387,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 75 x 75, 8-bit/color RGBA, non-interlaced","md5":"6ef6f16102b0fc6227f17f63ee97869c","sha1":"92bf33d376e34a8b40e8b9b2596f0e5102972331","sha256":"e53290f177569c02687d7b553d85f9c8e50d7ae1c98819719063fce4fddf46ef","sha512":"2330194873091942b46932e8066552f860c057da75b94e7f997590b741e5ce2223513f6a3775dd363285b9cf7c96346a3a47b8cc156ef902006848860f450a46","ssdeep":"","tlshash":"10415b6de3126880fa9b32457e1c09fe87382dc81e914260374c3f1cb710a8bc92d923","first_seen":"2025-10-12T16:46:58.389689Z","last_seen":"2026-04-21T18:06:11.951319Z","times_seen":21,"resource_available":false,"data":null}},"time_used":1329,"timings":{"blocked":1062,"dns":0,"connect":0,"send":0,"wait":267,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.onchaincryptoapi.cc/api/common/getAllSetting","fqdn":"h5-api.onchaincryptoapi.cc","domain":"onchaincryptoapi.cc","tld":"cc"},"ip":{"addr":"104.21.44.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://onchain-crypto-xc.cc/","date":"2026-04-21T18:05:44.763Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"onchaincryptoapi.cc","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 16 Apr 2026 06:30:01 GMT","end":"Wed, 15 Jul 2026 06:30:00 GMT"},"fingerprint":{"sha1":"37:E5:34:F0:88:CC:E7:1E:F3:EF:6E:50:46:07:EB:0E:17:EB:8F:90","sha256":"3F:29:0D:8F:29:F1:E6:6E:CA:74:3D:FB:32:6A:F4:18:41:A4:85:18:C9:48:5C:98:3A:8B:2D:38:B1:2C:5F:E5"}}},"request":{"raw":"POST /api/common/getAllSetting HTTP/1.1\r\nHost: h5-api.onchaincryptoapi.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nlang: en-US\r\nsign: JWgBPDLHQtKoeawmgx9docyairuZ1H5xzWLNtX33d7KbALJqevyGyd3TGKbqbX6BvndHiaG43pwyFwmGHE7hke3TK6+ECzS1+PNU1bqEbbdaueSntkxBImsUwycD4QV1wfoLCwXtyG329FRGx3EG7ef9Wt9oJHjkfaJt3HjanHI0xoFb4qTE4O8iGyAeg83uotmxM992fTfyR5wIqccdOkUi/u7spMe/GCGw655llKiQbyF90YjYm3jClbs76DzZnboPSjPO0UkXZLCoj437yPHlfRm4lrES31fn+srruLvPvmGG60JQ9/97gBEwPqr4/cos4U6KZfa8Mcstnf41wg==\r\nContent-Length: 2\r\nOrigin: https://onchain-crypto-xc.cc\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":2,"data":"{}"}},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 21 Apr 2026 18:05:45 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nserver: cloudflare\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://onchain-crypto-xc.cc\r\naccess-control-allow-credentials: true\r\nset-cookie: JSESSIONID=692C38A318EE07C94C576985F5A72D20; Path=/; HttpOnly\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=igasK1E5aruKEbZa4NVvKzCCit%2BBHV0WDchkYh4m1ab8%2F6WxwW4Dldl2XxBNaeswQvsMSC58mHwZ%2FGHqTCq3eqd0F%2B9om%2B%2BVEHK91JiLzap%2BjLvBWyL6Jb5ThCm4O%2BNumgS6NX5m5YPtGqvEBw%3D%3D\"}]}\r\ncf-ray: 9efe5192ccbeb4fd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Java","description":"Java is a class-based, object-oriented programming language that is designed to have as few implementation dependencies as possible.","website":"https://java.com","common_platform_enumeration":"cpe:2.3:a:oracle:jre:*:*:*:*:*:*:*:*","icon":"Java.svg","categories":["Programming languages"]}],"data":{"size":16644,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"93dd2c39d74e3e2adcaa471266449e01","sha1":"38af5fd408f31ecdd10a411f4f9b910776017b37","sha256":"0999f9e1f75e9a594c0fbbdae0946507c474a01f47c81ff50cf9182ddc4216f0","sha512":"11e8866875fad43547101be32c98eef5d78c766e68050403095072f616d9e83adb714901a49b2d44ae1de532f74f296c8778d36febb13868abfb1c7a3d5229d0","ssdeep":"384:DtFyMC4Cn/2oTMlcjPdgNARdYXi1Li1Ui1ri1TTi1Yi1ui1vai1H:D7LiscjPFEO/qGFrEao","tlshash":"5272840c38dcccbd56c76ada20f7bb95a55c34b7e789ec4a94baef4d8494634450b00b","first_seen":"2026-04-17T12:22:51.86646Z","last_seen":"2026-04-21T18:06:11.952266Z","times_seen":9,"resource_available":false,"data":null}},"time_used":320,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":320,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"h5-api.onchaincryptoapi.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"onchain-crypto-xc.cc/resource/svg/light/vector-1-e16f3dc2.svg?2.2.1776335643294","fqdn":"onchain-crypto-xc.cc","domain":"onchain-crypto-xc.cc","tld":"cc"},"ip":{"addr":"104.21.62.167","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://onchain-crypto-xc.cc/","date":"2026-04-21T18:05:45.939Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"onchain-crypto-xc.cc","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 16 Apr 2026 08:36:43 GMT","end":"Wed, 15 Jul 2026 08:36:42 GMT"},"fingerprint":{"sha1":"45:37:BD:3A:71:F6:EA:98:86:86:65:DB:AF:1D:54:93:10:D8:36:56","sha256":"3C:40:7F:8F:92:8F:99:55:82:58:9C:E1:82:0E:31:D8:55:7A:57:99:29:14:DD:A9:55:60:CB:B3:55:52:ED:48"}}},"request":{"raw":"GET /resource/svg/light/vector-1-e16f3dc2.svg?2.2.1776335643294 HTTP/1.1\r\nHost: onchain-crypto-xc.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 21 Apr 2026 18:05:46 GMT\r\ncontent-type: image/svg+xml\r\npriority: u=4,i=?0\r\nlast-modified: Thu, 16 Apr 2026 18:33:38 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"69e12b82-ff\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1ttp%2FWfpPeiDS3bFpcyKkcVoZOL6ARV0TNaLtHCSJE%2FFDzrshNRWXnNXnuYZm7lpn60yxarFGzfKk80ZUrpC9Pt4kS051eMRutBYomm0bM6%2BnndUjpuv8BUX7f0HBVIVzoE2ACZFMw%3D%3D\"}]}\r\ncf-ray: 9efe519a1a755696-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":255,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"dbbb77817ebd41c92042af605326b5c6","sha1":"0f71f8bf16179b00e129ec869de348c9b64643d5","sha256":"e16f3dc28bef9b35f7b0df9249718db0c02bc23c39f033713f65dc728ff532f6","sha512":"144cd96222d1a1c13836031dfa1944d39b1e0c7b9c3ade6f43d21ac591ad3a9875035723dd2264d6788e07f048cc4c7b87894c7e3bb2954c5cab9f218e524afe","ssdeep":"","tlshash":"42d09798022a508f841a875d422cb6530a9e60c0170c88c1de34282ab06fdafef9a0d4","first_seen":"2025-11-21T07:12:48.179641Z","last_seen":"2026-04-21T18:06:11.953391Z","times_seen":14,"resource_available":false,"data":null}},"time_used":381,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":378,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"onchain-crypto-xc.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"coinmm.oss-ap-northeast-1.aliyuncs.com/2.0black/cryptoworld/1993eed7f73c449caa94fcccda8240bb.png?2.2.1776335643294","fqdn":"coinmm.oss-ap-northeast-1.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.82.131","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://onchain-crypto-xc.cc/","date":"2026-04-21T18:05:45.947Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"ap-northeast-1.oss.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 03 Dec 2025 08:27:33 GMT","end":"Sat, 02 Jan 2027 02:51:19 GMT"},"fingerprint":{"sha1":"C1:8E:34:B2:8F:15:B2:BA:DA:FE:F6:10:0F:E2:E3:F9:58:49:E1:F6","sha256":"EC:23:4D:91:A3:D6:50:A7:18:C2:E7:A4:CF:82:F3:82:8A:26:C2:83:6F:AD:E9:94:86:9D:18:13:D3:91:8A:E8"}}},"request":{"raw":"GET /2.0black/cryptoworld/1993eed7f73c449caa94fcccda8240bb.png?2.2.1776335643294 HTTP/1.1\r\nHost: coinmm.oss-ap-northeast-1.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Tue, 21 Apr 2026 18:05:46 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 1125\r\nConnection: keep-alive\r\nx-oss-request-id: 69E7BC7A78CEA835393CB850\r\nAccept-Ranges: bytes\r\nETag: \"75F196B437F9D87FDC198BC904C66C4C\"\r\nLast-Modified: Tue, 18 Feb 2025 16:28:22 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 10138601249240458443\r\nx-oss-storage-class: Standard\r\nCache-Control: no-cache\r\nx-oss-version-id: CAEQmwEYgYCAzZzH56gZIiAxNThmMTFmYTk2MGI0ODI0YjUyOGM2YjAyMzNiMTUyZA--\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: dfGWtDf52H/cGYvJBMZsTA==\r\nx-oss-server-time: 6\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":1125,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 96 x 96, 8-bit colormap, non-interlaced","md5":"75f196b437f9d87fdc198bc904c66c4c","sha1":"79b6e300761520f7ad41856878999dbc1fafc137","sha256":"f72b9a231c13012613217eec2bec27b923204e8c6cebc2b2ae51485d2b5d679d","sha512":"de4633885db64868d13a4a4699631acf0b00af0b2cda542c5be26b4dce3a1f8b4e071949280ddd9f3c59eb7a236d5d8d7003ffcb9633e0749fb62d46c780ac60","ssdeep":"","tlshash":"2421f9d3df09102ec4029c9cd4730c6bcc287a963410445b5f7c823fcc0b6496864b67","first_seen":"2023-05-07T19:16:41Z","last_seen":"2026-04-30T14:43:21.611044Z","times_seen":1571,"resource_available":false,"data":null}},"time_used":1876,"timings":{"blocked":808,"dns":23,"connect":258,"send":0,"wait":264,"receive":0,"ssl":520},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coinmm.oss-ap-northeast-1.aliyuncs.com/2.0black/cryptoworld/cd8eef9c0d644e75abb9a425cbce967f.png?2.2.1776335643294","fqdn":"coinmm.oss-ap-northeast-1.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.82.131","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://onchain-crypto-xc.cc/","date":"2026-04-21T18:05:45.973Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"ap-northeast-1.oss.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 03 Dec 2025 08:27:33 GMT","end":"Sat, 02 Jan 2027 02:51:19 GMT"},"fingerprint":{"sha1":"C1:8E:34:B2:8F:15:B2:BA:DA:FE:F6:10:0F:E2:E3:F9:58:49:E1:F6","sha256":"EC:23:4D:91:A3:D6:50:A7:18:C2:E7:A4:CF:82:F3:82:8A:26:C2:83:6F:AD:E9:94:86:9D:18:13:D3:91:8A:E8"}}},"request":{"raw":"GET /2.0black/cryptoworld/cd8eef9c0d644e75abb9a425cbce967f.png?2.2.1776335643294 HTTP/1.1\r\nHost: coinmm.oss-ap-northeast-1.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Tue, 21 Apr 2026 18:05:46 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 2699\r\nConnection: keep-alive\r\nx-oss-request-id: 69E7BC7AF4F675393445C83A\r\nAccept-Ranges: bytes\r\nETag: \"185E1CADBF3B70F785EA9518114F3614\"\r\nLast-Modified: Wed, 12 Feb 2025 05:34:41 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 16704178836373075336\r\nx-oss-storage-class: Standard\r\nCache-Control: no-cache\r\nx-oss-version-id: CAEQlwEYgYDA_f3N4qcZIiA2ZmMxMmFjNjI5Mzc0MjFjOTgyZGFlMjc0ODhlMTA0Zg--\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: GF4crb87cPeF6pUYEU82FA==\r\nx-oss-server-time: 2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":2699,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 75 x 75, 8-bit/color RGBA, non-interlaced","md5":"185e1cadbf3b70f785ea9518114f3614","sha1":"bb5188bdeefcaa6393be21f4c8f8f444491b6e3f","sha256":"6e3cc745c8bb21890b1c5ccf7968674369c7fff28f6c93532ea746d07541bc8e","sha512":"4831916740d0b8441fe06dc7c4ecd953e140ad3cd3ea908e315b28f351d686cf8e6bf3c912bd1869b7d686b61cbd3f1794c1d7dbafee3b3ddfa7e8964876c5e4","ssdeep":"","tlshash":"a3515c4e14f5d874639ad0f1296d6403d0571324f5d7ca038e14cf5f6e9e7ce688b855","first_seen":"2025-10-12T16:46:58.329523Z","last_seen":"2026-04-21T18:06:11.955294Z","times_seen":21,"resource_available":false,"data":null}},"time_used":1941,"timings":{"blocked":832,"dns":2,"connect":277,"send":0,"wait":276,"receive":0,"ssl":550},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coinmm.oss-ap-northeast-1.aliyuncs.com/2.0black/cryptoworld/161c854af57543bea26c552f5f0dd304.png?2.2.1776335643294","fqdn":"coinmm.oss-ap-northeast-1.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.82.131","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://onchain-crypto-xc.cc/","date":"2026-04-21T18:05:45.982Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"ap-northeast-1.oss.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 03 Dec 2025 08:27:33 GMT","end":"Sat, 02 Jan 2027 02:51:19 GMT"},"fingerprint":{"sha1":"C1:8E:34:B2:8F:15:B2:BA:DA:FE:F6:10:0F:E2:E3:F9:58:49:E1:F6","sha256":"EC:23:4D:91:A3:D6:50:A7:18:C2:E7:A4:CF:82:F3:82:8A:26:C2:83:6F:AD:E9:94:86:9D:18:13:D3:91:8A:E8"}}},"request":{"raw":"GET /2.0black/cryptoworld/161c854af57543bea26c552f5f0dd304.png?2.2.1776335643294 HTTP/1.1\r\nHost: coinmm.oss-ap-northeast-1.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Tue, 21 Apr 2026 18:05:47 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 2599\r\nConnection: keep-alive\r\nx-oss-request-id: 69E7BC7B78CEA83436AFB850\r\nAccept-Ranges: bytes\r\nETag: \"AC775C1137B65620C24F0393B6D221FB\"\r\nLast-Modified: Wed, 12 Feb 2025 05:35:00 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 12049353792835255149\r\nx-oss-storage-class: Standard\r\nCache-Control: no-cache\r\nx-oss-version-id: CAEQlwEYgYDA.cfO4qcZIiA4MTE1NTA3MjRkYmI0ZjMyYmY0NmRlMjk4ZmI4NmI5OQ--\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: rHdcETe2ViDCTwOTttIh+w==\r\nx-oss-server-time: 4\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":2599,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 75 x 75, 8-bit/color RGBA, non-interlaced","md5":"ac775c1137b65620c24f0393b6d221fb","sha1":"1db4d8bb080dec0d92cab9e8e1d7135bd6655f79","sha256":"bd1d28af74ec8d4979fc31f804f579f4e83b1095e2e704d1f40f91b1353e49a5","sha512":"87f17187eee3803fcb67ba4f7f9e4ea861b6b9463369c44a693a8f0065cbcccc1f7028440f47f1124578889e971ea83324dc76ff985c5d45b02b2e9ec9dd338f","ssdeep":"","tlshash":"cf514c6f9160981cea1ea612ca9c7418cd33a722875e83589e8362a92193d0cc370c42","first_seen":"2025-10-12T16:46:58.281724Z","last_seen":"2026-04-21T18:06:11.956658Z","times_seen":21,"resource_available":false,"data":null}},"time_used":1349,"timings":{"blocked":1078,"dns":0,"connect":0,"send":0,"wait":271,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.onchaincryptoapi.cc/kline","fqdn":"h5-api.onchaincryptoapi.cc","domain":"onchaincryptoapi.cc","tld":"cc"},"ip":{"addr":"104.21.44.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://onchain-crypto-xc.cc/","date":"2026-04-21T18:05:46.050Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"onchaincryptoapi.cc","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 16 Apr 2026 06:30:01 GMT","end":"Wed, 15 Jul 2026 06:30:00 GMT"},"fingerprint":{"sha1":"37:E5:34:F0:88:CC:E7:1E:F3:EF:6E:50:46:07:EB:0E:17:EB:8F:90","sha256":"3F:29:0D:8F:29:F1:E6:6E:CA:74:3D:FB:32:6A:F4:18:41:A4:85:18:C9:48:5C:98:3A:8B:2D:38:B1:2C:5F:E5"}}},"request":{"raw":"OPTIONS /kline HTTP/1.1\r\nHost: h5-api.onchaincryptoapi.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,lang,language,sign\r\nOrigin: https://onchain-crypto-xc.cc\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 21 Apr 2026 18:05:46 GMT\r\ncontent-length: 0\r\nserver: cloudflare\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://onchain-crypto-xc.cc\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: content-type, lang, language, sign\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gj46n69CRnP0T3%2Bia3ZBGwMfA69GNXmHrSMv8OGLj%2BE0i2MVm9iFwihCn0DWDI39aYTmDGxDkUu4kirv9Dj705oNPi5aMNdmZNvAFjAtjfOtPxlQebYtdxJZJ1PN%2B55fKECKG%2BsIa5JyMYWLLQ%3D%3D\"}]}\r\ncf-ray: 9efe519acf8cb4fd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-30T19:35:18.687432Z","times_seen":14438163,"resource_available":true,"data":null}},"time_used":271,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":271,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"h5-api.onchaincryptoapi.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.onchaincryptoapi.cc/kline","fqdn":"h5-api.onchaincryptoapi.cc","domain":"onchaincryptoapi.cc","tld":"cc"},"ip":{"addr":"104.21.44.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://onchain-crypto-xc.cc/","date":"2026-04-21T18:05:46.055Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"onchaincryptoapi.cc","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 16 Apr 2026 06:30:01 GMT","end":"Wed, 15 Jul 2026 06:30:00 GMT"},"fingerprint":{"sha1":"37:E5:34:F0:88:CC:E7:1E:F3:EF:6E:50:46:07:EB:0E:17:EB:8F:90","sha256":"3F:29:0D:8F:29:F1:E6:6E:CA:74:3D:FB:32:6A:F4:18:41:A4:85:18:C9:48:5C:98:3A:8B:2D:38:B1:2C:5F:E5"}}},"request":{"raw":"OPTIONS /kline HTTP/1.1\r\nHost: h5-api.onchaincryptoapi.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,lang,language,sign\r\nOrigin: https://onchain-crypto-xc.cc\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 21 Apr 2026 18:05:46 GMT\r\ncontent-length: 0\r\nserver: cloudflare\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://onchain-crypto-xc.cc\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: content-type, lang, language, sign\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Hm9lD5lls3RT6Uml1WwR3xpBqUU%2BABEh%2F52uVUkn69mpCXtfWQyl%2BEeXxoMi0S4%2BEoo%2FQfOkQfOwAykQtng8QD3ZF0oYR3%2FZgcv%2BP8Bb2ivvVP5S0xjWgbX55a6Ik%2FD%2FSJBkHuJM8A8qdp0%2FuQ%3D%3D\"}]}\r\ncf-ray: 9efe519adf9ab4fd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-30T19:35:18.687432Z","times_seen":14438163,"resource_available":true,"data":null}},"time_used":269,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":269,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"h5-api.onchaincryptoapi.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.onchaincryptoapi.cc/api/common/type/defi_activity_type","fqdn":"h5-api.onchaincryptoapi.cc","domain":"onchaincryptoapi.cc","tld":"cc"},"ip":{"addr":"104.21.44.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://onchain-crypto-xc.cc/","date":"2026-04-21T18:05:46.056Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"onchaincryptoapi.cc","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 16 Apr 2026 06:30:01 GMT","end":"Wed, 15 Jul 2026 06:30:00 GMT"},"fingerprint":{"sha1":"37:E5:34:F0:88:CC:E7:1E:F3:EF:6E:50:46:07:EB:0E:17:EB:8F:90","sha256":"3F:29:0D:8F:29:F1:E6:6E:CA:74:3D:FB:32:6A:F4:18:41:A4:85:18:C9:48:5C:98:3A:8B:2D:38:B1:2C:5F:E5"}}},"request":{"raw":"OPTIONS /api/common/type/defi_activity_type HTTP/1.1\r\nHost: h5-api.onchaincryptoapi.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,lang,language,sign\r\nOrigin: https://onchain-crypto-xc.cc\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 21 Apr 2026 18:05:46 GMT\r\ncontent-length: 0\r\nserver: cloudflare\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://onchain-crypto-xc.cc\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: content-type, lang, language, sign\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=J71LynQdODuX7vqOWNaKjp1u2nD9fLHFHm%2B%2BCHi5ZMLDYEWdOzRIXixgIE6y2NEA0Q44AZqQbj1I0dfYVkhPof33N%2FZAfnrZr0QhCk3eTeoyBbE1pn9VCg1tfrxIXC5rCmFXoIXppSNm4bQcFg%3D%3D\"}]}\r\ncf-ray: 9efe519adf9fb4fd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-30T19:35:18.687432Z","times_seen":14438163,"resource_available":true,"data":null}},"time_used":270,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":270,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"h5-api.onchaincryptoapi.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"onchain-crypto-xc.cc/platform/newcrypto_3/logo_144.png?2.2.1776335643294","fqdn":"onchain-crypto-xc.cc","domain":"onchain-crypto-xc.cc","tld":"cc"},"ip":{"addr":"104.21.62.167","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://onchain-crypto-xc.cc/","date":"2026-04-21T18:05:42.883Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"onchain-crypto-xc.cc","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 16 Apr 2026 08:36:43 GMT","end":"Wed, 15 Jul 2026 08:36:42 GMT"},"fingerprint":{"sha1":"45:37:BD:3A:71:F6:EA:98:86:86:65:DB:AF:1D:54:93:10:D8:36:56","sha256":"3C:40:7F:8F:92:8F:99:55:82:58:9C:E1:82:0E:31:D8:55:7A:57:99:29:14:DD:A9:55:60:CB:B3:55:52:ED:48"}}},"request":{"raw":"GET /platform/newcrypto_3/logo_144.png?2.2.1776335643294 HTTP/1.1\r\nHost: onchain-crypto-xc.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 21 Apr 2026 18:05:43 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 16 Apr 2026 18:33:38 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69e12b82-11a3\"\r\nexpires: Thu, 21 May 2026 18:05:43 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\npriority: u=6,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ERTsthkMV%2FSNOAWGlY7Ixf2vJtXGVO5MuwogAKntcY%2FCtPwPfwoqfCpkcjNhvQAOyBmvMDT0vmy6QdP2OUOQkSLiV7oEEhtooptEB8xxT1rB%2FDJatlhywthJch4CgzwJ%2B8TmiMfUPg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9efe518709d05696-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4515,"size_decoded":0,"mime_type":"image/png","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 225x225, components 3","md5":"57cd4d7e322ee2380a4bcaf107538c9b","sha1":"8e756084f0204651adbc30bc5d1ff0f140af0dfa","sha256":"43cf9692827d0d283b30c2a214ba4814762266e05486d97d780d7c722230840f","sha512":"2a595b5efe4f65f6aeef3400010068210abf29240e12f9e8c80b0772a8034c2a901560fe0b7aa9378d15515511daf28a185eefc9e4fe5bc36c17d0e77ba6296e","ssdeep":"96:ZcsbbxmMrL16Y6qsie1smLUlTJDVqfT3Z+3Ts9E6:ZcsbbxmMz6zJ1HolTKTU3TsS6","tlshash":"5f916c526dc90210dfb2e7732afccf90aa28d007ed8956cac640bb91dd32514ae6e448","first_seen":"2026-03-05T18:49:25.504137Z","last_seen":"2026-04-21T18:06:11.957688Z","times_seen":14,"resource_available":false,"data":null}},"time_used":383,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":383,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"onchain-crypto-xc.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"onchain-crypto-xc.cc/assets/en-hghz1qY-.js","fqdn":"onchain-crypto-xc.cc","domain":"onchain-crypto-xc.cc","tld":"cc"},"ip":{"addr":"104.21.62.167","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://onchain-crypto-xc.cc/","date":"2026-04-21T18:05:45.348Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"onchain-crypto-xc.cc","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 16 Apr 2026 08:36:43 GMT","end":"Wed, 15 Jul 2026 08:36:42 GMT"},"fingerprint":{"sha1":"45:37:BD:3A:71:F6:EA:98:86:86:65:DB:AF:1D:54:93:10:D8:36:56","sha256":"3C:40:7F:8F:92:8F:99:55:82:58:9C:E1:82:0E:31:D8:55:7A:57:99:29:14:DD:A9:55:60:CB:B3:55:52:ED:48"}}},"request":{"raw":"GET /assets/en-hghz1qY-.js HTTP/1.1\r\nHost: onchain-crypto-xc.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 21 Apr 2026 18:05:45 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 16 Apr 2026 18:34:02 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69e12b9a-c5eb\"\r\nexpires: Wed, 22 Apr 2026 06:05:45 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\npriority: u=3,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=m8kJ9t5jyLQzyZlMMnoHSJb%2FnSjlVl%2B3dnLz4h3agh5q5NdKUB3CMV1Lm7YjmRP7r74VJEn1CEhjG05GwRlEaJPUBSLVVgquaHuo7exEk0grLPiQOJcQ9V5cSvchZquDYTiDpLe8jw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9efe51966a4a5696-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":50667,"size_decoded":0,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text, with very long lines (50638)","md5":"02abef479c2da93ea7f45d367fc8d6d0","sha1":"268f5132879e133827f0f3f3d485f4a38cf3ef08","sha256":"24f5ac57c2475ea4826b86cc2302e80ec9a30dc647cfc6b0e1c063d62c26668c","sha512":"bb1c70b2f518c4d9cf45f262ed126607d1d83f5a51c4da9150b9901de7f27e0bedb4198233874beb42e2fd3423dc5f5fe965addda54b50efb54f0bd148e49d03","ssdeep":"768:KGtZcEw/o7rDO8siSAMnIUGcg2PmPsPScH35xJnLBgsFuuV:uponDO8uIUGcgLsP5H35xZLBHF/","tlshash":"b733f88ebe165c5a44e3133a7cce3a6010f505c18795880f5bec8afc53e1ba667b7639","first_seen":"2026-04-17T12:22:51.861407Z","last_seen":"2026-04-21T18:06:11.958652Z","times_seen":9,"resource_available":true,"data":null}},"time_used":540,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":540,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"onchain-crypto-xc.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"coinmm.oss-ap-northeast-1.aliyuncs.com/2.0black/cryptoworld/f44042711ae34bcdb7687e8ff56bbb60.jpeg?2.2.1776335643294","fqdn":"coinmm.oss-ap-northeast-1.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.82.131","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://onchain-crypto-xc.cc/","date":"2026-04-21T18:05:45.955Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"ap-northeast-1.oss.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 03 Dec 2025 08:27:33 GMT","end":"Sat, 02 Jan 2027 02:51:19 GMT"},"fingerprint":{"sha1":"C1:8E:34:B2:8F:15:B2:BA:DA:FE:F6:10:0F:E2:E3:F9:58:49:E1:F6","sha256":"EC:23:4D:91:A3:D6:50:A7:18:C2:E7:A4:CF:82:F3:82:8A:26:C2:83:6F:AD:E9:94:86:9D:18:13:D3:91:8A:E8"}}},"request":{"raw":"GET /2.0black/cryptoworld/f44042711ae34bcdb7687e8ff56bbb60.jpeg?2.2.1776335643294 HTTP/1.1\r\nHost: coinmm.oss-ap-northeast-1.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Tue, 21 Apr 2026 18:05:46 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 5724\r\nConnection: keep-alive\r\nx-oss-request-id: 69E7BC7AD2F295303379AD82\r\nAccept-Ranges: bytes\r\nETag: \"617B8978EE093317654AF89C121F1163\"\r\nLast-Modified: Tue, 18 Feb 2025 19:27:30 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 16245400791653343468\r\nx-oss-storage-class: Standard\r\nCache-Control: no-cache\r\nx-oss-version-id: CAEQmwEYgYDA1J2P6qgZIiA2ZTQ2ZDMxYzllZDA0MzI4OGFkNTkwMzFjMDk4YmEyNA--\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: YXuJeO4JMxdlSvicEh8RYw==\r\nx-oss-server-time: 2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":5724,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 0x0, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=4, height=228, orientation=upper-left, width=228], baseline, precision 8, 228x228, components 3","md5":"617b8978ee093317654af89c121f1163","sha1":"6bb436842e7f2432edebb0f6759b6e3cbfd83c6c","sha256":"ebf51d47c61ffea3ec70ce44d7952dc56d6ff2e6cf4be13178ef48eeaeb151c1","sha512":"086f4b2cc48193e09702e1508eaefa6998cf05e50875b505024d86e65886e55914520912a9e7a80332cb3254de9ff4e93518598f520c2ceacf5704b98e7fb1b1","ssdeep":"96:2LplvxhLSELcAEOaqGgqGGA4zyYmsiQJA4N8jDD9rsUrb5H+u0R:qrrPLc4anvGYsQRCtrb5eZR","tlshash":"5ac15baf5f916b02d711b5f170281a19b3a8613280469bb23859cab11d2cff94f61281","first_seen":"2025-10-12T16:46:58.238669Z","last_seen":"2026-04-21T18:06:11.959627Z","times_seen":21,"resource_available":false,"data":null}},"time_used":1917,"timings":{"blocked":824,"dns":18,"connect":265,"send":0,"wait":268,"receive":1,"ssl":533},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}