{"report_id":"2d81143b-228b-48ef-9ad8-c5ba31f6588e","version":6,"status":"done","tags":[],"date":"2025-08-06T15:07:07Z","url":{"schema":"https","addr":"y-onchain.com/","fqdn":"y-onchain.com","domain":"y-onchain.com","tld":"com"},"ip":{"addr":"104.21.16.1","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"y-onchain.com/","fqdn":"y-onchain.com","domain":"y-onchain.com","tld":"com"},"title":"y-onchain.com/"},"submit":{"url":{"schema":"https","addr":"y-onchain.com/","fqdn":"y-onchain.com","domain":"y-onchain.com","tld":"com"},"ip":{"addr":"104.21.16.1","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-09-10T15:07:07Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":3}},"detection":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-06","alert":"Sinkholed","trigger":"y-onchain.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-06","alert":"Sinkholed","trigger":"www.gpt4xdam.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-06","alert":"Sinkholed","trigger":"api.y-onchain.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"y-onchain.com","ip":{"addr":"104.21.80.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-03-24","domain_rank":0,"first_seen":"2025-08-06T15:07:10.549301Z","last_seen":"2025-08-06T15:07:10.549301Z","alert_count":17,"request_count":17,"received_data":5958611,"sent_data":7785,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"www.gpt4xdam.top","ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2024-02-16T16:45:28Z","last_seen":"2025-02-08T21:46:23.777603Z","alert_count":19,"request_count":19,"received_data":0,"sent_data":8290,"comment":"","tags":null,"fingerprints":null},{"fqdn":"api.y-onchain.com","ip":{"addr":"104.21.80.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-03-24","domain_rank":0,"first_seen":"2025-08-06T15:07:10.550978Z","last_seen":"2025-08-06T15:07:10.550978Z","alert_count":46,"request_count":46,"received_data":679786,"sent_data":26373,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"cdn.dcloud.net.cn","ip":{"addr":"106.54.228.253","port":443,"asn":45090,"as":"Shenzhen Tencent Computer Systems Company Limited","country":"China","country_code":"CN"},"domain_registered":"2013-07-17","domain_rank":116868,"first_seen":"2018-09-15T09:18:08Z","last_seen":"2025-07-31T11:48:08.281541Z","alert_count":0,"request_count":1,"received_data":578,"sent_data":444,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":null}],"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"y-onchain.com/static/js/pages-home-home.1a9edff9.js","fqdn":"y-onchain.com","domain":"y-onchain.com","tld":"com"},"ip":{"addr":"104.21.80.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ad8042ad14791e477fcadce669e84875","sha1":"666c82a9400c3cad865d0291882c56c219515905","sha256":"4c167fde648846382466a19f9860987da24c0f12ae09308dc907885b566d5f44","sha512":"35208a6ad2d9c327b40e6fde4136e0dbf0c26464ad2db09bcf984e48699751f85a3ffafb335d850f4cbc9313d65b54c9c7cff0beabd4f48c943d65e149f7b166","ssdeep":"1536:h8F1+dqkULLU6o7gBIfLnA83DGYjb38oZ:h8F13LLU6o7gB4D3N331","tlshash":"cb435b24ab65703d69ff642c712b694c5c716913e2509871b730f8e2ca9e84e3226f6e","size":57758,"data":"","first_seen":"2025-08-06T15:07:16.798391Z","last_seen":"2025-08-06T15:07:16.798391Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"y-onchain.com/static/js/pages-home-home~pages-markets-index~pages-trade-kline.4f6fe384.js","fqdn":"y-onchain.com","domain":"y-onchain.com","tld":"com"},"ip":{"addr":"104.21.80.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"f090c1eb3975dfdf33580b3c0a49d3b3","sha1":"a27c630934d877b1a39a4d0742dd76855eaee9bb","sha256":"cd46ad06cd3d38fd992aa084d4d94f85ba19aee793c1101b6746ba79c1ab3317","sha512":"d6472694bcb555d49d2a83a234db0f5a566e0a941672dbe76c2664e266f1e0bf1cbc2f3a6fd78902ef53ad47b078402bb13b04f5cac0ea32b468aa6d9420eb36","ssdeep":"3072:1nh8n0DQ8cvqvskgaaQeAy3sZvBS6qvBT0W3Gig5shtpl2Tx48Ykr:1+0DQ89vXPeAZvBGZA54tpl4NYkr","tlshash":"9254f8dcb284742942e73174047f150b92366909790b8998fa69e5debcbc58e327bf3c","size":297344,"data":"","first_seen":"2025-08-06T15:07:16.836902Z","last_seen":"2025-08-06T15:07:16.836902Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"y-onchain.com/static/js/pages-borrowMoney-index~pages-home-home~pages-mining-miningProduct~pages-trade-kline~pages-wallet-assets.cf4e30a8.js","fqdn":"y-onchain.com","domain":"y-onchain.com","tld":"com"},"ip":{"addr":"104.21.80.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"28b9bef957c178e95e62b2cc6e8ff934","sha1":"61e9e58324d787fedf03c45e20f1345d275abd33","sha256":"be0bf696037a277508b95dc0a936eaea3d4d82edde200aea07a67dc23bd10a9e","sha512":"990b31f15346e89edaaab9050a425f641b312e8ff91a8de0d49eb3fc855ae29b9f9556eb4bdacd048bbaf78d229f7a0457baf763f421802f42a46012b5c60434","ssdeep":"49152:JLyeZjJAQroY1d3m2niV8O+8d5ddGRtzz/N6b:jUSddI","tlshash":"ecc53bc47691b09583a36aa5402f500be33dbd692c4c4568f757ece36cb8a89523bf3d","size":2553087,"data":"","first_seen":"2025-08-06T15:07:16.868475Z","last_seen":"2025-08-06T15:07:16.868475Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"y-onchain.com/","fqdn":"y-onchain.com","domain":"y-onchain.com","tld":"com"},"ip":{"addr":"104.21.80.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"45c116a8adaeb7042f2174b094fa258b","sha1":"2c92de6e0d0b9ee4ddf09bf61ca1064809f3baea","sha256":"2a69be895e03668cf614329f7af41c26aa21f1695cae14372bfcdf2055cbc3b8","sha512":"d9e76e6cc99c7113c314a7fcac58b86215ba32df37e6f75c051cd69bb897858dd9dcb2dd52d278b27187f5adb032120cd43460a04e8a41019a87f5e3fcd280a1","ssdeep":"","tlshash":"03e0688260b7294c0220c156304ac4031fb608739e864d613c8c77a58ff9b4bc569859","size":371,"data":"","first_seen":"2025-03-15T09:58:35.220029Z","last_seen":"2026-08-06T12:26:22.870136Z","times_seen":289,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"y-onchain.com/static/js/chunk-vendors.165d6e9d.js","fqdn":"y-onchain.com","domain":"y-onchain.com","tld":"com"},"ip":{"addr":"104.21.80.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"3562eb39c962a528a129a825583c83f7","sha1":"668a695d0ba974f0d4254cbdc5b73bda0b9f66e2","sha256":"79ef51b70869e5ff1ee57b88432671455fe0a57032290774d41944a3be3fbef1","sha512":"4ef1b1d89404d8acbee1533e468e1961c579c713493bc70ed2f0a2bc54424fe0ea80910c951640d44f35e8a9af9f2d11202380cb848e107160490e198bc1ff0e","ssdeep":"6144:QQyCl1dIWkr4UggoXtwTfmPTb3p/JvXNT8UY3vm79Da/hRVkvSz0erRG9Lu/:QVCQ0GodwTOR/pXt+wDVvSzpGQ","tlshash":"0d05f78df281b0b60be760b5403f220ba2376959b40ac4d8f675e4d4ad7894e6237f7d","size":836808,"data":"","first_seen":"2025-01-19T00:01:08.336207Z","last_seen":"2025-08-06T15:07:16.842187Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"y-onchain.com/static/js/index.be26f4cd.js","fqdn":"y-onchain.com","domain":"y-onchain.com","tld":"com"},"ip":{"addr":"104.21.80.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"f04ab2770caaf514d13756a289227c03","sha1":"c62bf27aed6ccbf501395dab39a2c3c87f8d0c1f","sha256":"4cdca4bd4c5b5bb9e4588e06ae43238d00062cb9248c130ddbba77a0bab3581b","sha512":"61a8b7485065b4fb206daddb11c9e889558f4a1105b2c88518a98acc4022d325131e302e6cb1b237a53908de3de680f82b05851da5a621222476093243fde269","ssdeep":"12288:s7g59QTYyDSD3WF8BWyaD6wuWbVGlOOAEQkYAn3d1yxHf5oS+qzx1lCLnhKfzHKs:WmcsNqF","tlshash":"ab35e63731c5d5f52083a625a586760955aeec6ebe0af5f863d8042893d2f08e231ff7","size":1104982,"data":"","first_seen":"2025-08-06T15:07:16.778348Z","last_seen":"2025-08-06T15:07:16.778348Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"y-onchain.com/static/js/pages-borrowMoney-history~pages-borrowMoney-index~pages-home-home~pages-trade-kline~pages-user-kyc~p~98301549.c1a8d56b.js","fqdn":"y-onchain.com","domain":"y-onchain.com","tld":"com"},"ip":{"addr":"104.21.80.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"6bf9d42ae4ab19a844dc9a7faa8d7838","sha1":"971d8d56983052f651ae655f152c42ad5432fe36","sha256":"8fd6ac5d06f8d526bac8f3c69a51a1a3210009b0435565ddb40dd6207fd5a055","sha512":"42c957e7f56d67fa9caad06a55c16bacbfe0f132ff9b806a5599a95d2bba87437c29fbedd47a9fc31d6cd6130ee3faf5a6d17ad81b5b89d968cb90f8f051ab74","ssdeep":"192:htYWsnXUDnm1E8lELqRsetFre0hiA+Ijduxu76caSGS:htYWOWwlE++0hlj6O6caSGS","tlshash":"1632e90cf8c2b44100538561d2ef9518923ef6972562adcd73b4e5db0f6978e2393f6a","size":11857,"data":"","first_seen":"2025-08-06T15:07:16.818903Z","last_seen":"2025-08-06T15:07:16.818903Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":[{"md5":"3d5272693eb411e5b8b13a243f76c720","sha1":"6a586ab8e0a4bf12bbc60eea6ca9f2418625a22c","sha256":"9582f31f9eb892b8823a780e579d464d54e26d97d65dc327d2b2bdd92d47c4b8","sha512":"03fc5614f48fc9a2e3c4a30626fdbacde74c1fda09ffa9d1cde0393d31cd5fe1588e270c241f4cedb473c6e5cc224ff16c141468a29519ea6159accf3e3a18f1","ssdeep":"","tlshash":"a4c08c8350e2080c8210861b848880050b8808b04f9308a22cd85b7ecc9ae88c8f804c","size":148,"data":"","first_seen":"2023-03-07T01:10:06Z","last_seen":"2026-06-07T08:18:02.151537Z","times_seen":15899,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"console":null},"http":[{"url":{"schema":"https","addr":"y-onchain.com/static/js/index.be26f4cd.js","fqdn":"y-onchain.com","domain":"y-onchain.com","tld":"com"},"ip":{"addr":"104.21.80.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://y-onchain.com/","date":"2025-08-06T15:06:45.092Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"y-onchain.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 04 Aug 2025 08:36:15 GMT","end":"Sun, 02 Nov 2025 09:34:42 GMT"},"fingerprint":{"sha1":"6E:0E:D2:BE:4E:23:E6:6A:44:4D:C5:17:81:1A:5D:7F:5C:71:E7:0D","sha256":"9B:33:8A:08:BA:CF:85:A4:96:25:16:6A:FF:4D:8C:C6:29:44:36:17:B9:83:B6:33:95:A2:58:90:D4:BB:AE:A9"}}},"request":{"raw":"GET /static/js/index.be26f4cd.js HTTP/1.1\r\nHost: y-onchain.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://y-onchain.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 06 Aug 2025 15:06:45 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Wed, 30 Apr 2025 05:54:55 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6EoyMp3hO5J9eY5ci7tnmLbo%2B7lmYDoN%2Fhl4qUV%2FBD3Pn6EavYSEIG4ZZKduieAJRuuBq4pOQlG3Um5e4GRFkrdHZtYwMuhQg7SN\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"6811bb2f-10dc56\"\r\ncontent-encoding: br\r\ncf-ray: 96af709fcd400b51-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1104982,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (62842), with no line terminators","md5":"f04ab2770caaf514d13756a289227c03","sha1":"c62bf27aed6ccbf501395dab39a2c3c87f8d0c1f","sha256":"4cdca4bd4c5b5bb9e4588e06ae43238d00062cb9248c130ddbba77a0bab3581b","sha512":"61a8b7485065b4fb206daddb11c9e889558f4a1105b2c88518a98acc4022d325131e302e6cb1b237a53908de3de680f82b05851da5a621222476093243fde269","ssdeep":"12288:s7g59QTYyDSD3WF8BWyaD6wuWbVGlOOAEQkYAn3d1yxHf5oS+qzx1lCLnhKfzHKs:WmcsNqF","tlshash":"ab35e63731c5d5f52083a625a586760955aeec6ebe0af5f863d8042893d2f08e231ff7","first_seen":"2025-08-06T15:07:16.778348Z","last_seen":"2025-08-06T15:07:16.778348Z","times_seen":1,"resource_available":false,"data":null}},"time_used":616,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":616,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-06","alert":"Sinkholed","trigger":"y-onchain.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.gpt4xdam.top/logo/xrp.png","fqdn":"www.gpt4xdam.top","domain":"gpt4xdam.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://y-onchain.com/","date":"2025-08-06T15:06:52.897Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /logo/xrp.png HTTP/1.1\r\nHost: www.gpt4xdam.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://y-onchain.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-10T03:49:04.585278Z","times_seen":17810757,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-06","alert":"Sinkholed","trigger":"www.gpt4xdam.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.y-onchain.com/gpt4xf-api/coin/candles","fqdn":"api.y-onchain.com","domain":"y-onchain.com","tld":"com"},"ip":{"addr":"104.21.80.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://y-onchain.com/","date":"2025-08-06T15:06:53.404Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"y-onchain.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 04 Aug 2025 08:36:15 GMT","end":"Sun, 02 Nov 2025 09:34:42 GMT"},"fingerprint":{"sha1":"6E:0E:D2:BE:4E:23:E6:6A:44:4D:C5:17:81:1A:5D:7F:5C:71:E7:0D","sha256":"9B:33:8A:08:BA:CF:85:A4:96:25:16:6A:FF:4D:8C:C6:29:44:36:17:B9:83:B6:33:95:A2:58:90:D4:BB:AE:A9"}}},"request":{"raw":"POST /gpt4xf-api/coin/candles HTTP/1.1\r\nHost: api.y-onchain.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json\r\nAccept-Language: en-US\r\nAccept-Encoding: gzip, deflate, br\r\nX-Requested-With: XMLHttpRequest\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\naccesstoken: \r\nContent-Length: 20\r\nOrigin: https://y-onchain.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://y-onchain.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 06 Aug 2025 15:06:54 GMT\r\ncontent-type: application/json\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=RlyspIG5dlaSwUZayEFMxdH7YVudYhfPOlAGuS73W9lLEKAM5eZVYLJWMsB%2FuDUkQvMki56U%2Bp6E8VUgWFc53vrKpfMw3PeiUo9jwNIxDbTxd9%2F3hItia8FbjhjxYD0ZfGWMEw%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: *\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 96af70d3a94fb505-OSL\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=1414\u0026min_rtt=444\u0026rtt_var=763\u0026sent=1689\u0026recv=364\u0026lost=0\u0026retrans=1\u0026sent_bytes=2016242\u0026recv_bytes=33022\u0026delivery_rate=29689103\u0026ss_exit_cwnd=30585\u0026ss_exit_reason=2\u0026cwnd=50735\u0026unsent_bytes=0\u0026cid=483caaa6cce61b43\u0026ts=9307\u0026inflight_dur=471\u0026x=40\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":34048,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"4425c89d20d447164115749c84cb71f7","sha1":"9ca8738011d7c0a330fb420311af860fc841929d","sha256":"b3f4a1083b28eff9ffe4e6ba386d5acdaad74baf656eca0a8e0681875674bd00","sha512":"ac2f613c73d59972a47ef1fd006d77424f5f613586c9e281498c3acb46c891c7318436b29faec9f417d879bc0148cd7869994284f31d79e3f9d390f4e2099c66","ssdeep":"384:IeQC5snEzE/D0es4qfXPFOgrYiqWdIdrCzCX:6YesbXPHqcIcmX","tlshash":"7be28f844d8fc620b6885f39583e2c7ba8d4358e68e47901f733f4617a6edf8e478256","first_seen":"2025-08-06T15:07:16.784872Z","last_seen":"2025-08-06T15:07:16.784872Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1073,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":788,"receive":285,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-06","alert":"Sinkholed","trigger":"api.y-onchain.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"y-onchain.com/static/js/pages-borrowMoney-index~pages-home-home~pages-mining-miningProduct~pages-trade-kline~pages-wallet-assets.cf4e30a8.js","fqdn":"y-onchain.com","domain":"y-onchain.com","tld":"com"},"ip":{"addr":"104.21.80.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://y-onchain.com/","date":"2025-08-06T15:06:47.890Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"y-onchain.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 04 Aug 2025 08:36:15 GMT","end":"Sun, 02 Nov 2025 09:34:42 GMT"},"fingerprint":{"sha1":"6E:0E:D2:BE:4E:23:E6:6A:44:4D:C5:17:81:1A:5D:7F:5C:71:E7:0D","sha256":"9B:33:8A:08:BA:CF:85:A4:96:25:16:6A:FF:4D:8C:C6:29:44:36:17:B9:83:B6:33:95:A2:58:90:D4:BB:AE:A9"}}},"request":{"raw":"GET /static/js/pages-borrowMoney-index~pages-home-home~pages-mining-miningProduct~pages-trade-kline~pages-wallet-assets.cf4e30a8.js HTTP/1.1\r\nHost: y-onchain.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://y-onchain.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 06 Aug 2025 15:06:48 GMT\r\ncontent-type: application/javascript\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=ZqODSjgS4RwjexIQCvoCk8acJO%2BbjGlxESeN1MUOssZlQjax3Lo6t8t2XJxoZBP%2F14Pn4k67I4bexvIJF7ZnMnVw%2FpzTGOsUYls2J27GcmkJAoTGZ8qGraAigaay%2BCk0\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nlast-modified: Wed, 30 Apr 2025 05:54:55 GMT\r\netag: W/\"6811bb2f-26f4ff\"\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncontent-encoding: br\r\ncf-ray: 96af70b14fb7b505-OSL\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=2175\u0026min_rtt=444\u0026rtt_var=2020\u0026sent=117\u0026recv=130\u0026lost=0\u0026retrans=0\u0026sent_bytes=41666\u0026recv_bytes=8766\u0026delivery_rate=9830648\u0026ss_exit_cwnd=0\u0026ss_exit_reason=0\u0026cwnd=30585\u0026unsent_bytes=0\u0026cid=483caaa6cce61b43\u0026ts=3674\u0026inflight_dur=61\u0026x=40\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2553087,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (62172)","md5":"feb895b04699f8cdabed4e65b966b995","sha1":"003d8dabfe2a21b3c15dbceb2ecc04c953865050","sha256":"6afdf738c4b1db6f9b35a64c5e4ea7bf3e14f8da07f4e8cfcb724c4cac138769","sha512":"7db9083ab8ade009ce4d2f5d07519bc990525266f17f6d2b3afc33f395d59c3ccfa5b9cbfe1882a08541fec673cfa9aa1dff7aadffaef6a043f793b911a8a373","ssdeep":"12288:eyr7NJ0itdAveF9JAwRhN65gJskK0RamsLA:NrL0feF7BhNckK0RaA","tlshash":"80257cc47692f06547a325f5002f240bf239b92a584c8468f365ece67cbd989923bf7d","first_seen":"2025-08-06T15:07:16.788354Z","last_seen":"2025-08-06T15:07:16.788354Z","times_seen":1,"resource_available":false,"data":null}},"time_used":2730,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":648,"receive":2082,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-06","alert":"Sinkholed","trigger":"y-onchain.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.gpt4xdam.top/logo/ada.png","fqdn":"www.gpt4xdam.top","domain":"gpt4xdam.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://y-onchain.com/","date":"2025-08-06T15:06:52.899Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /logo/ada.png HTTP/1.1\r\nHost: www.gpt4xdam.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://y-onchain.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-10T03:49:04.585278Z","times_seen":17810757,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-06","alert":"Sinkholed","trigger":"www.gpt4xdam.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.gpt4xdam.top/logo/ape.png","fqdn":"www.gpt4xdam.top","domain":"gpt4xdam.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://y-onchain.com/","date":"2025-08-06T15:06:52.927Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /logo/ape.png HTTP/1.1\r\nHost: www.gpt4xdam.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://y-onchain.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-10T03:49:04.585278Z","times_seen":17810757,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-06","alert":"Sinkholed","trigger":"www.gpt4xdam.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.y-onchain.com/gpt4xf-api/coin/candles","fqdn":"api.y-onchain.com","domain":"y-onchain.com","tld":"com"},"ip":{"addr":"104.21.80.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://y-onchain.com/","date":"2025-08-06T15:06:53.293Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"y-onchain.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 04 Aug 2025 08:36:15 GMT","end":"Sun, 02 Nov 2025 09:34:42 GMT"},"fingerprint":{"sha1":"6E:0E:D2:BE:4E:23:E6:6A:44:4D:C5:17:81:1A:5D:7F:5C:71:E7:0D","sha256":"9B:33:8A:08:BA:CF:85:A4:96:25:16:6A:FF:4D:8C:C6:29:44:36:17:B9:83:B6:33:95:A2:58:90:D4:BB:AE:A9"}}},"request":{"raw":"POST /gpt4xf-api/coin/candles HTTP/1.1\r\nHost: api.y-onchain.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json\r\nAccept-Language: en-US\r\nAccept-Encoding: gzip, deflate, br\r\nX-Requested-With: XMLHttpRequest\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\naccesstoken: \r\nContent-Length: 19\r\nOrigin: https://y-onchain.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://y-onchain.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 06 Aug 2025 15:06:53 GMT\r\ncontent-type: application/json\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=gVS5Uv9hKLovI%2FGq4zD%2FT6bE7vlECdkXvQfNNz1LYJE%2BoBqQtBGNIc%2BAE3eLUGp2nYBp8UVJPANPgdjVW1hckrizHDwSOXtSWhGeAmgCyBLVj1f36sbj%2BzP7KzfQzQlomLfOaQ%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: *\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 96af70d31924b505-OSL\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=1884\u0026min_rtt=444\u0026rtt_var=1057\u0026sent=1631\u0026recv=348\u0026lost=0\u0026retrans=1\u0026sent_bytes=1965129\u0026recv_bytes=32301\u0026delivery_rate=29689103\u0026ss_exit_cwnd=30585\u0026ss_exit_reason=2\u0026cwnd=50735\u0026unsent_bytes=0\u0026cid=483caaa6cce61b43\u0026ts=9004\u0026inflight_dur=437\u0026x=40\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":37913,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"4ef324d707d4716f561f1f79ab090567","sha1":"5872fb372ed18348b06eba50a48fc60bbaebbba5","sha256":"9372316eac9105b8dc2e63f6d66ffd2dc7a6bdae08656f67a7b368520898350b","sha512":"96fea2aa8b831a87c30564ffc20a3b646b215833a1258bef9b10d7997445b3989fdf5b2b6c71314cda88de09b1ec1e0089ba2f32911ebc5eb3cb4b3218a32381","ssdeep":"384:S1iVQD/gIpIjNuZiFnlIJ4VrRiSWuhwJLWMrDtQd:ZM/RaukFnlXVt9aWMrS","tlshash":"3203add12cccc970b7885e2c1a3f4c0a5dca35d8669775206e67f1a24bb3ef4b178992","first_seen":"2025-08-06T15:07:16.79096Z","last_seen":"2025-08-06T15:07:16.79096Z","times_seen":1,"resource_available":false,"data":null}},"time_used":871,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":573,"receive":298,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-06","alert":"Sinkholed","trigger":"api.y-onchain.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.y-onchain.com/gpt4xf-api/coin/candles","fqdn":"api.y-onchain.com","domain":"y-onchain.com","tld":"com"},"ip":{"addr":"104.21.80.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://y-onchain.com/","date":"2025-08-06T15:06:53.348Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"y-onchain.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 04 Aug 2025 08:36:15 GMT","end":"Sun, 02 Nov 2025 09:34:42 GMT"},"fingerprint":{"sha1":"6E:0E:D2:BE:4E:23:E6:6A:44:4D:C5:17:81:1A:5D:7F:5C:71:E7:0D","sha256":"9B:33:8A:08:BA:CF:85:A4:96:25:16:6A:FF:4D:8C:C6:29:44:36:17:B9:83:B6:33:95:A2:58:90:D4:BB:AE:A9"}}},"request":{"raw":"POST /gpt4xf-api/coin/candles HTTP/1.1\r\nHost: api.y-onchain.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json\r\nAccept-Language: en-US\r\nAccept-Encoding: gzip, deflate, br\r\nX-Requested-With: XMLHttpRequest\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\naccesstoken: \r\nContent-Length: 20\r\nOrigin: https://y-onchain.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://y-onchain.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 06 Aug 2025 15:06:53 GMT\r\ncontent-type: application/json\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=AxQDPn7bbsmsxUocOG5LtRfSAxh%2BI%2FoUeTvIkhYi%2BvxHIK%2Bn5fbVYqzDXy%2Fpc%2BhIfrHbje1Lhy9PcmMcAKb5YkPtMMzgywQrUlidvcChumdClR7jJj4DMjFAWQLFetPF375Dyg%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: *\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 96af70d36932b505-OSL\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=1573\u0026min_rtt=444\u0026rtt_var=747\u0026sent=1644\u0026recv=352\u0026lost=0\u0026retrans=1\u0026sent_bytes=1979115\u0026recv_bytes=32481\u0026delivery_rate=29689103\u0026ss_exit_cwnd=30585\u0026ss_exit_reason=2\u0026cwnd=50735\u0026unsent_bytes=0\u0026cid=483caaa6cce61b43\u0026ts=9093\u0026inflight_dur=442\u0026x=40\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":32575,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"4b1fe3540691c8d6535aab7e56c97b10","sha1":"b644c7b2c0df263dd6de23ba069cb6bc6f2f084b","sha256":"d48140141c4cef3c3efe72d23a2e9d9887803d3abae9591c2c67950904226dc3","sha512":"ac2a88739f4b6b1d470cbc41cff88cd6461d13847746c449f1b081f16723866f2e0f33955fdb47cb017082ae31cf1b386c3caff5d54011877e2f14e1c6a87a5a","ssdeep":"384:4ySM7bQSTS/JjJtUA2MDV+Pqv5CH9H3Ak9DHAC0JJOtX5XfNJrD0TwWRBNFzNKwe:4ySnAylipd7o/Qn","tlshash":"58e29dcd5d8ec430b7885e7c283e1d2b8dd971e534b5b7942a27f9b14a736b9a03c182","first_seen":"2025-08-06T15:07:16.793582Z","last_seen":"2025-08-06T15:07:16.793582Z","times_seen":1,"resource_available":false,"data":null}},"time_used":912,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":611,"receive":301,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-06","alert":"Sinkholed","trigger":"api.y-onchain.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.y-onchain.com/gpt4xf-api/coin/candles","fqdn":"api.y-onchain.com","domain":"y-onchain.com","tld":"com"},"ip":{"addr":"104.21.80.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://y-onchain.com/","date":"2025-08-06T15:06:53.386Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"y-onchain.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 04 Aug 2025 08:36:15 GMT","end":"Sun, 02 Nov 2025 09:34:42 GMT"},"fingerprint":{"sha1":"6E:0E:D2:BE:4E:23:E6:6A:44:4D:C5:17:81:1A:5D:7F:5C:71:E7:0D","sha256":"9B:33:8A:08:BA:CF:85:A4:96:25:16:6A:FF:4D:8C:C6:29:44:36:17:B9:83:B6:33:95:A2:58:90:D4:BB:AE:A9"}}},"request":{"raw":"POST /gpt4xf-api/coin/candles HTTP/1.1\r\nHost: api.y-onchain.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json\r\nAccept-Language: en-US\r\nAccept-Encoding: gzip, deflate, br\r\nX-Requested-With: XMLHttpRequest\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\naccesstoken: \r\nContent-Length: 19\r\nOrigin: https://y-onchain.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://y-onchain.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 06 Aug 2025 15:06:54 GMT\r\ncontent-type: application/json\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=G3um2wexF0hfHsNzJUmDkwC6FS%2Buon11dAzRA1oCUlQKzSq%2F3knjKpsDuY4AvlsYYp6OO5wW1oEgP6aHLR1v0RM2nYsBRKils0fuuAwMcf1y9fS0HcTXxuxCM%2Bgnc1ED0hC7Kg%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: *\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 96af70d39938b505-OSL\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=2061\u0026min_rtt=444\u0026rtt_var=1180\u0026sent=1665\u0026recv=357\u0026lost=0\u0026retrans=1\u0026sent_bytes=1997196\u0026recv_bytes=32707\u0026delivery_rate=29689103\u0026ss_exit_cwnd=30585\u0026ss_exit_reason=2\u0026cwnd=50735\u0026unsent_bytes=0\u0026cid=483caaa6cce61b43\u0026ts=9216\u0026inflight_dur=462\u0026x=40\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":40467,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"1559bf3a500a352e3ed3724f514eee46","sha1":"930aa2e1b2d33bb1b2db5d3f221d641b3111c982","sha256":"3a07fe06f1590081072c7c2385295673d590165ca11412210bec799f209e8093","sha512":"30bc79f6de15c1a6c287f03bf0eb2eeb5cc1a25603f97b9ac6f10729a36eed81b6c438eec04da9ab6d46446e6c881b6ff83ae53fc594d54bb0c599c9a8409079","ssdeep":"384:wdVQhIjzxYXmx1TJbZmVH0lewZSFf88jJ0mnQtlQovbu:cjCyZmVHTFf88JZnAQovbu","tlshash":"4f033281098bc470ba886f1c4b3f3c4a9de1f5df2da535c1b717f1a44b626f0a23958a","first_seen":"2025-08-06T15:07:16.795914Z","last_seen":"2025-08-06T15:07:16.795914Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1002,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":708,"receive":294,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-06","alert":"Sinkholed","trigger":"api.y-onchain.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"y-onchain.com/static/js/pages-home-home.1a9edff9.js","fqdn":"y-onchain.com","domain":"y-onchain.com","tld":"com"},"ip":{"addr":"104.21.80.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://y-onchain.com/","date":"2025-08-06T15:06:47.894Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"y-onchain.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 04 Aug 2025 08:36:15 GMT","end":"Sun, 02 Nov 2025 09:34:42 GMT"},"fingerprint":{"sha1":"6E:0E:D2:BE:4E:23:E6:6A:44:4D:C5:17:81:1A:5D:7F:5C:71:E7:0D","sha256":"9B:33:8A:08:BA:CF:85:A4:96:25:16:6A:FF:4D:8C:C6:29:44:36:17:B9:83:B6:33:95:A2:58:90:D4:BB:AE:A9"}}},"request":{"raw":"GET /static/js/pages-home-home.1a9edff9.js HTTP/1.1\r\nHost: y-onchain.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://y-onchain.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 06 Aug 2025 15:06:48 GMT\r\ncontent-type: application/javascript\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=IkqiKrW%2FOndaYaMLlFOzlMWl%2Fuz6OxBYJkz5eqoT8UiywY1SYlq6Ayw%2Bwppl90VSao4hbZ3Vz9O6WznTI46DGOoEMsOJ%2BqObbHH85nAx7HjDQ2j3tfBuaEJtwzfo3nRn\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nlast-modified: Wed, 30 Apr 2025 05:54:55 GMT\r\netag: W/\"6811bb2f-e19e\"\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncontent-encoding: br\r\ncf-ray: 96af70b15fb9b505-OSL\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=3848\u0026min_rtt=705\u0026rtt_var=2390\u0026sent=90\u0026recv=124\u0026lost=0\u0026retrans=0\u0026sent_bytes=9201\u0026recv_bytes=8501\u0026delivery_rate=435072\u0026ss_exit_cwnd=0\u0026ss_exit_reason=0\u0026cwnd=18069\u0026unsent_bytes=0\u0026cid=483caaa6cce61b43\u0026ts=3647\u0026inflight_dur=54\u0026x=40\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":57758,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (57758), with no line terminators","md5":"ad8042ad14791e477fcadce669e84875","sha1":"666c82a9400c3cad865d0291882c56c219515905","sha256":"4c167fde648846382466a19f9860987da24c0f12ae09308dc907885b566d5f44","sha512":"35208a6ad2d9c327b40e6fde4136e0dbf0c26464ad2db09bcf984e48699751f85a3ffafb335d850f4cbc9313d65b54c9c7cff0beabd4f48c943d65e149f7b166","ssdeep":"1536:h8F1+dqkULLU6o7gBIfLnA83DGYjb38oZ:h8F13LLU6o7gB4D3N331","tlshash":"cb435b24ab65703d69ff642c712b694c5c716913e2509871b730f8e2ca9e84e3226f6e","first_seen":"2025-08-06T15:07:16.798391Z","last_seen":"2025-08-06T15:07:16.798391Z","times_seen":1,"resource_available":true,"data":null}},"time_used":1204,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":618,"receive":586,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-06","alert":"Sinkholed","trigger":"y-onchain.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.y-onchain.com/gpt4xf-api/coin/infos","fqdn":"api.y-onchain.com","domain":"y-onchain.com","tld":"com"},"ip":{"addr":"104.21.112.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://y-onchain.com/","date":"2025-08-06T15:06:51.592Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"y-onchain.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 04 Aug 2025 08:36:15 GMT","end":"Sun, 02 Nov 2025 09:34:42 GMT"},"fingerprint":{"sha1":"6E:0E:D2:BE:4E:23:E6:6A:44:4D:C5:17:81:1A:5D:7F:5C:71:E7:0D","sha256":"9B:33:8A:08:BA:CF:85:A4:96:25:16:6A:FF:4D:8C:C6:29:44:36:17:B9:83:B6:33:95:A2:58:90:D4:BB:AE:A9"}}},"request":{"raw":"OPTIONS /gpt4xf-api/coin/infos HTTP/1.1\r\nHost: api.y-onchain.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: accesstoken,x-requested-with\r\nReferer: https://y-onchain.com/\r\nOrigin: https://y-onchain.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 06 Aug 2025 15:06:52 GMT\r\ncontent-length: 0\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,HEAD,POST,PUT,DELETE,OPTIONS\r\naccess-control-allow-headers: accesstoken, x-requested-with\r\naccess-control-max-age: 1800\r\nallow: GET, HEAD, POST, PUT, DELETE, OPTIONS, PATCH\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HzgYgl9bpbWgpNJ3pwMxx%2Fh62qSWOidbblEhmVZPTUNWU4e3zU2BROVxMdR95cuvTZG9LIzzDjnk4aqZr5QfG4QC5Uvj7RoNO1O2OhxmDQ%3D%3D\"}]}\r\ncf-ray: 96af70c8ced7712d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-10T03:49:04.585278Z","times_seen":17810757,"resource_available":true,"data":null}},"time_used":736,"timings":{"blocked":54,"dns":7,"connect":1,"send":0,"wait":625,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-06","alert":"Sinkholed","trigger":"api.y-onchain.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.y-onchain.com/gpt4xf-api/coin/candles","fqdn":"api.y-onchain.com","domain":"y-onchain.com","tld":"com"},"ip":{"addr":"104.21.80.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://y-onchain.com/","date":"2025-08-06T15:06:52.761Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"y-onchain.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 04 Aug 2025 08:36:15 GMT","end":"Sun, 02 Nov 2025 09:34:42 GMT"},"fingerprint":{"sha1":"6E:0E:D2:BE:4E:23:E6:6A:44:4D:C5:17:81:1A:5D:7F:5C:71:E7:0D","sha256":"9B:33:8A:08:BA:CF:85:A4:96:25:16:6A:FF:4D:8C:C6:29:44:36:17:B9:83:B6:33:95:A2:58:90:D4:BB:AE:A9"}}},"request":{"raw":"OPTIONS /gpt4xf-api/coin/candles HTTP/1.1\r\nHost: api.y-onchain.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: accesstoken,x-requested-with\r\nReferer: https://y-onchain.com/\r\nOrigin: https://y-onchain.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 06 Aug 2025 15:06:53 GMT\r\ncontent-length: 0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=cjfvznEH1nddtxJGrMQYQVhN3W0TWLnVK8TyFKQGtXWx%2BQYNc%2FNOQqCQsaBuMcCoqVT5nUfsmmk9sBAVrsZYT2Vcxx8rFoTCdZCNoGK91B4cIC3NLMwHyX1oo9myR3xSvVoUhA%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,HEAD,POST,PUT,DELETE,OPTIONS\r\naccess-control-allow-headers: accesstoken, x-requested-with\r\naccess-control-max-age: 1800\r\nallow: GET, HEAD, POST, PUT, DELETE, OPTIONS, PATCH\r\ncf-cache-status: DYNAMIC\r\ncf-ray: 96af70cf9905b505-OSL\r\nserver: cloudflare\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=803\u0026min_rtt=444\u0026rtt_var=185\u0026sent=1557\u0026recv=322\u0026lost=0\u0026retrans=0\u0026sent_bytes=1894470\u0026recv_bytes=27473\u0026delivery_rate=29689103\u0026ss_exit_cwnd=30585\u0026ss_exit_reason=2\u0026cwnd=50735\u0026unsent_bytes=0\u0026cid=483caaa6cce61b43\u0026ts=8494\u0026inflight_dur=349\u0026x=40\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-10T03:49:04.585278Z","times_seen":17810757,"resource_available":true,"data":null}},"time_used":621,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":621,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-06","alert":"Sinkholed","trigger":"api.y-onchain.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.gpt4xdam.top/logo/sand.png","fqdn":"www.gpt4xdam.top","domain":"gpt4xdam.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://y-onchain.com/","date":"2025-08-06T15:06:52.929Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /logo/sand.png HTTP/1.1\r\nHost: www.gpt4xdam.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://y-onchain.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-10T03:49:04.585278Z","times_seen":17810757,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-06","alert":"Sinkholed","trigger":"www.gpt4xdam.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.y-onchain.com/gpt4xf-api/coin/candles","fqdn":"api.y-onchain.com","domain":"y-onchain.com","tld":"com"},"ip":{"addr":"104.21.80.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://y-onchain.com/","date":"2025-08-06T15:06:53.240Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"y-onchain.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 04 Aug 2025 08:36:15 GMT","end":"Sun, 02 Nov 2025 09:34:42 GMT"},"fingerprint":{"sha1":"6E:0E:D2:BE:4E:23:E6:6A:44:4D:C5:17:81:1A:5D:7F:5C:71:E7:0D","sha256":"9B:33:8A:08:BA:CF:85:A4:96:25:16:6A:FF:4D:8C:C6:29:44:36:17:B9:83:B6:33:95:A2:58:90:D4:BB:AE:A9"}}},"request":{"raw":"POST /gpt4xf-api/coin/candles HTTP/1.1\r\nHost: api.y-onchain.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json\r\nAccept-Language: en-US\r\nAccept-Encoding: gzip, deflate, br\r\nX-Requested-With: XMLHttpRequest\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\naccesstoken: \r\nContent-Length: 19\r\nOrigin: https://y-onchain.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://y-onchain.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 06 Aug 2025 15:06:53 GMT\r\ncontent-type: application/json\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=j2yES1ZawPLnStqWMZArQud01ai5XCFYCwanVKGUjWiRhYPTphq%2BPg6RRQjHDcDNO8%2B5aNdzajqrv69m6MNv3PDBKrslQdsYqbAeG7Q5ZvzoHsMQpoWh5z8rdIKrDDW6ERDhEg%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: *\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 96af70d2c91eb505-OSL\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=1024\u0026min_rtt=444\u0026rtt_var=281\u0026sent=1608\u0026recv=341\u0026lost=0\u0026retrans=0\u0026sent_bytes=1940977\u0026recv_bytes=31980\u0026delivery_rate=29689103\u0026ss_exit_cwnd=30585\u0026ss_exit_reason=2\u0026cwnd=50735\u0026unsent_bytes=0\u0026cid=483caaa6cce61b43\u0026ts=8776\u0026inflight_dur=395\u0026x=40\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":39267,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"edc9092a27f1cc38fcb422d69a17b1ba","sha1":"b4822a676a4b1643ed4f6fe405c2240244c0b7d7","sha256":"da86ef3e3c1c15aa52a1d4357172900a2620ccdb4443beb54730541c107bec17","sha512":"4a35763134b7dadaeb1083bbb042c0ebc71098421b2ac7b79bb1e0241604943cdadb2773429b6db8dbb9f042b99a6049466fe57ce78688c67f3d0e0d7b1d1be2","ssdeep":"384:G1Zye0gE9JkRRBCP32ZYx4lc8bU4jantwP2BSed1Tcuers8kwJ79ayiz:G6R9IBCP30YmlcqPsWuers8kwJ79ayiz","tlshash":"330342870e8dcd74b64c5e29783a5c1eafd435de20b1bd05b727f1a20ea26b1e539483","first_seen":"2025-08-06T15:07:16.801259Z","last_seen":"2025-08-06T15:07:16.801259Z","times_seen":1,"resource_available":false,"data":null}},"time_used":690,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":398,"receive":292,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-06","alert":"Sinkholed","trigger":"api.y-onchain.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.gpt4xdam.top/logo/gmt.png","fqdn":"www.gpt4xdam.top","domain":"gpt4xdam.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://y-onchain.com/","date":"2025-08-06T15:06:52.880Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /logo/gmt.png HTTP/1.1\r\nHost: www.gpt4xdam.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://y-onchain.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-10T03:49:04.585278Z","times_seen":17810757,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-06","alert":"Sinkholed","trigger":"www.gpt4xdam.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.gpt4xdam.top/logo/imx.png","fqdn":"www.gpt4xdam.top","domain":"gpt4xdam.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://y-onchain.com/","date":"2025-08-06T15:06:52.893Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /logo/imx.png HTTP/1.1\r\nHost: www.gpt4xdam.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://y-onchain.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-10T03:49:04.585278Z","times_seen":17810757,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-06","alert":"Sinkholed","trigger":"www.gpt4xdam.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"y-onchain.com/static/index.2da1efab.css","fqdn":"y-onchain.com","domain":"y-onchain.com","tld":"com"},"ip":{"addr":"104.21.80.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://y-onchain.com/","date":"2025-08-06T15:06:45.085Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"y-onchain.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 04 Aug 2025 08:36:15 GMT","end":"Sun, 02 Nov 2025 09:34:42 GMT"},"fingerprint":{"sha1":"6E:0E:D2:BE:4E:23:E6:6A:44:4D:C5:17:81:1A:5D:7F:5C:71:E7:0D","sha256":"9B:33:8A:08:BA:CF:85:A4:96:25:16:6A:FF:4D:8C:C6:29:44:36:17:B9:83:B6:33:95:A2:58:90:D4:BB:AE:A9"}}},"request":{"raw":"GET /static/index.2da1efab.css HTTP/1.1\r\nHost: y-onchain.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://y-onchain.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 06 Aug 2025 15:06:45 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Wed, 30 Apr 2025 05:54:55 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NblQHAi34QXJpAPzGn18dVr9mBqhTvQGio8F13ANJTyKgO%2BV7uWnXrxyEzZnAtE567%2FMTvibwygUR9QlVD%2Bm%2F5k5t395BxtQx6bS\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"6811bb2f-178f9\"\r\ncontent-encoding: br\r\ncf-ray: 96af709fcd350b51-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":96505,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"73ae6c583d02d78f81e3f18860a2899a","sha1":"07df9233fc11dddc34fbf519b891d40b2ac29c0f","sha256":"e97de9a247807f12d74101e9f736250b2410be4e1ed3d17ed875e4b08cf66c83","sha512":"da54ba9dbe06d8d763f3cfd64cf5babb54e761e3208c7a2f23e845290c48db8c115bb86c24262cd6c9a96ff2e51674c6d86439e1814baf2de7980f5c06349921","ssdeep":"1536:OlIApuK7hmVmb2RS1Wu3xdynGJ7eh/nKhlvbc:VApuK7hmVrS1Wu3iG41nKPI","tlshash":"1893f73719012e39e52bcd26b6c1ab5a1e61c033e15307adfba47628cbcf9c9167b345","first_seen":"2024-01-02T00:07:11Z","last_seen":"2026-08-09T23:47:55.867095Z","times_seen":6422,"resource_available":false,"data":null}},"time_used":623,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":623,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-06","alert":"Sinkholed","trigger":"y-onchain.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"y-onchain.com/static/fonts/Poppins.e212f840.ttf","fqdn":"y-onchain.com","domain":"y-onchain.com","tld":"com"},"ip":{"addr":"104.21.80.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://y-onchain.com/","date":"2025-08-06T15:06:47.903Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"y-onchain.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 04 Aug 2025 08:36:15 GMT","end":"Sun, 02 Nov 2025 09:34:42 GMT"},"fingerprint":{"sha1":"6E:0E:D2:BE:4E:23:E6:6A:44:4D:C5:17:81:1A:5D:7F:5C:71:E7:0D","sha256":"9B:33:8A:08:BA:CF:85:A4:96:25:16:6A:FF:4D:8C:C6:29:44:36:17:B9:83:B6:33:95:A2:58:90:D4:BB:AE:A9"}}},"request":{"raw":"GET /static/fonts/Poppins.e212f840.ttf HTTP/1.1\r\nHost: y-onchain.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://y-onchain.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 06 Aug 2025 15:06:48 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 256920\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=4KlBvPrh3Ti0INjxqDl2sl2B1O%2B284cJp3HGVrtx1mppchN687vy8vIxnAgUQr7vz1atFYrS5hY4ouHil%2B%2FQ8U761i4sPBsU6gJoTdBr0fT1AyBudLRVeiZm6hLUKT9D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nlast-modified: Wed, 30 Apr 2025 05:54:55 GMT\r\netag: \"6811bb2f-3eb98\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncf-ray: 96af70b16fbab505-OSL\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=2772\u0026min_rtt=444\u0026rtt_var=2637\u0026sent=97\u0026recv=127\u0026lost=0\u0026retrans=0\u0026sent_bytes=17174\u0026recv_bytes=8633\u0026delivery_rate=4811426\u0026ss_exit_cwnd=0\u0026ss_exit_reason=0\u0026cwnd=26042\u0026unsent_bytes=0\u0026cid=483caaa6cce61b43\u0026ts=3665\u0026inflight_dur=57\u0026x=40\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":256920,"size_decoded":0,"mime_type":"application/octet-stream","magic":"TrueType Font data, digitally signed, 18 tables, 1st \"DSIG\", 15 names, Microsoft, language 0x409, Copyright (c) 2014 Indian Type Foundry (info@indiantypefoundry.com)PoppinsRegular2.000;ITFO;Popp","md5":"e212f84086965da44a6c84f3d9a683a4","sha1":"58ca484f2ec5b8817a63136af362e1db1d29d49e","sha256":"4554cfac77e8cefa48f89ffcd4f1705f7c02ee34bd9b25415d1208065e4edb52","sha512":"2fbe3f5c702783f5e64ff1438f6cbc6fbe01d04a200cd4a589ac2630cfb158959d8af47f2310d764b6807cba3c348822414803756bd668aa02c3a9b68cfbd69b","ssdeep":"3072:WXR0+hO8o9KyyyRfW1nB37vVzmHAoPsApxuv1fzvkpJfn+aPFJENNjFuzKM/gXgK:qR0+hO8o97W1BJz5oPsAZmaP8NNjiFK","tlshash":"06448d91e56edf49db60ac3654376327baacf0356d9219a3c24f3718f4e20e016b21db","first_seen":"2023-04-25T17:00:56Z","last_seen":"2026-08-06T00:18:58.664555Z","times_seen":586,"resource_available":false,"data":null}},"time_used":1855,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":625,"receive":1230,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-06","alert":"Sinkholed","trigger":"y-onchain.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.y-onchain.com/gpt4xf-api/coin/exinfos","fqdn":"api.y-onchain.com","domain":"y-onchain.com","tld":"com"},"ip":{"addr":"104.21.112.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://y-onchain.com/","date":"2025-08-06T15:06:51.600Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"y-onchain.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 04 Aug 2025 08:36:15 GMT","end":"Sun, 02 Nov 2025 09:34:42 GMT"},"fingerprint":{"sha1":"6E:0E:D2:BE:4E:23:E6:6A:44:4D:C5:17:81:1A:5D:7F:5C:71:E7:0D","sha256":"9B:33:8A:08:BA:CF:85:A4:96:25:16:6A:FF:4D:8C:C6:29:44:36:17:B9:83:B6:33:95:A2:58:90:D4:BB:AE:A9"}}},"request":{"raw":"OPTIONS /gpt4xf-api/coin/exinfos HTTP/1.1\r\nHost: api.y-onchain.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: accesstoken,x-requested-with\r\nReferer: https://y-onchain.com/\r\nOrigin: https://y-onchain.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 06 Aug 2025 15:06:52 GMT\r\ncontent-length: 0\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,HEAD,POST,PUT,DELETE,OPTIONS\r\naccess-control-allow-headers: accesstoken, x-requested-with\r\naccess-control-max-age: 1800\r\nallow: GET, HEAD, POST, PUT, DELETE, OPTIONS, PATCH\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=v3cfF1aFUHxCH%2BOWwDE8Y3G5BaC3aQwlVOlUyyeLsSEkm0l4UDm8ecz1b2sNyV5uYgacA0mVjMZhARtaiwsdn%2BFMLBofg%2BgA0jdlLHqfzg%3D%3D\"}]}\r\ncf-ray: 96af70c8ef04712d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-10T03:49:04.585278Z","times_seen":17810757,"resource_available":true,"data":null}},"time_used":732,"timings":{"blocked":66,"dns":1,"connect":6,"send":0,"wait":597,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-06","alert":"Sinkholed","trigger":"api.y-onchain.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.y-onchain.com/gpt4xf-api/common/prop","fqdn":"api.y-onchain.com","domain":"y-onchain.com","tld":"com"},"ip":{"addr":"104.21.112.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://y-onchain.com/","date":"2025-08-06T15:06:52.268Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"y-onchain.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 04 Aug 2025 08:36:15 GMT","end":"Sun, 02 Nov 2025 09:34:42 GMT"},"fingerprint":{"sha1":"6E:0E:D2:BE:4E:23:E6:6A:44:4D:C5:17:81:1A:5D:7F:5C:71:E7:0D","sha256":"9B:33:8A:08:BA:CF:85:A4:96:25:16:6A:FF:4D:8C:C6:29:44:36:17:B9:83:B6:33:95:A2:58:90:D4:BB:AE:A9"}}},"request":{"raw":"POST /gpt4xf-api/common/prop HTTP/1.1\r\nHost: api.y-onchain.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json\r\nAccept-Language: en-US\r\nAccept-Encoding: gzip, deflate, br\r\nX-Requested-With: XMLHttpRequest\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\naccesstoken: \r\nContent-Length: 16\r\nOrigin: https://y-onchain.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://y-onchain.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 06 Aug 2025 15:06:52 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: *\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DcExvvvycbasZH%2BUqt5qy4O2gP%2BInCRPO6uNthTMagQq8WTeGFVdet%2FyybULa8l2rewdSpr6BVv37HtdFW2kQ2g7S44qaz7gPCFCScDQNg%3D%3D\"}]}\r\ncontent-encoding: br\r\ncf-ray: 96af70ccac6b712d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":67,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"f7eae4e71219b15cfdecb99d4d7ba535","sha1":"d4b56da423089865597d981f927e0136f524666c","sha256":"94ba9300a447fb76a0104f606351f2b1da63ad371f6ee9d1793bd3349682b000","sha512":"41582aeb47d9b36edeef33dacdcb1f301ddfe0b70b48ba07aecb3b6a59e90d1fad5408b797d3f2c3563f6a8866d8ab530a2d19bd801393ccf8bf0d88215f5b61","ssdeep":"","tlshash":"d9a022a32388830a8b0022c8282e2308e0c302038c032220cccc0c308e000a02382230","first_seen":"2024-12-24T22:23:00.038595Z","last_seen":"2025-08-06T15:07:16.806768Z","times_seen":2,"resource_available":false,"data":null}},"time_used":301,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":301,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-06","alert":"Sinkholed","trigger":"api.y-onchain.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.y-onchain.com/gpt4xf-api/coin/candles","fqdn":"api.y-onchain.com","domain":"y-onchain.com","tld":"com"},"ip":{"addr":"104.21.80.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://y-onchain.com/","date":"2025-08-06T15:06:52.679Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"y-onchain.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 04 Aug 2025 08:36:15 GMT","end":"Sun, 02 Nov 2025 09:34:42 GMT"},"fingerprint":{"sha1":"6E:0E:D2:BE:4E:23:E6:6A:44:4D:C5:17:81:1A:5D:7F:5C:71:E7:0D","sha256":"9B:33:8A:08:BA:CF:85:A4:96:25:16:6A:FF:4D:8C:C6:29:44:36:17:B9:83:B6:33:95:A2:58:90:D4:BB:AE:A9"}}},"request":{"raw":"OPTIONS /gpt4xf-api/coin/candles HTTP/1.1\r\nHost: api.y-onchain.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: accesstoken,x-requested-with\r\nReferer: https://y-onchain.com/\r\nOrigin: https://y-onchain.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 06 Aug 2025 15:06:53 GMT\r\ncontent-length: 0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=EEZyjaRDQRubgJtrAqgXYNbz8%2FQQ1U5g3QJawbsOE5uCDpHIJp1Dk497PwPcSl53G0VXVAzJCg0QRewYRMmpReQ4HYsc81Tae0RWflq5u6vHnYJ1YSdpBF8SjBuSA6NT8S%2B94A%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,HEAD,POST,PUT,DELETE,OPTIONS\r\naccess-control-allow-headers: accesstoken, x-requested-with\r\naccess-control-max-age: 1800\r\nallow: GET, HEAD, POST, PUT, DELETE, OPTIONS, PATCH\r\ncf-cache-status: DYNAMIC\r\ncf-ray: 96af70cf18f9b505-OSL\r\nserver: cloudflare\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=856\u0026min_rtt=444\u0026rtt_var=219\u0026sent=1419\u0026recv=298\u0026lost=0\u0026retrans=0\u0026sent_bytes=1715769\u0026recv_bytes=24394\u0026delivery_rate=29568302\u0026ss_exit_cwnd=30585\u0026ss_exit_reason=2\u0026cwnd=76138\u0026unsent_bytes=0\u0026cid=483caaa6cce61b43\u0026ts=8419\u0026inflight_dur=287\u0026x=40\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-10T03:49:04.585278Z","times_seen":17810757,"resource_available":true,"data":null}},"time_used":636,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":625,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-06","alert":"Sinkholed","trigger":"api.y-onchain.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.y-onchain.com/gpt4xf-api/coin/candles","fqdn":"api.y-onchain.com","domain":"y-onchain.com","tld":"com"},"ip":{"addr":"104.21.80.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://y-onchain.com/","date":"2025-08-06T15:06:52.734Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"y-onchain.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 04 Aug 2025 08:36:15 GMT","end":"Sun, 02 Nov 2025 09:34:42 GMT"},"fingerprint":{"sha1":"6E:0E:D2:BE:4E:23:E6:6A:44:4D:C5:17:81:1A:5D:7F:5C:71:E7:0D","sha256":"9B:33:8A:08:BA:CF:85:A4:96:25:16:6A:FF:4D:8C:C6:29:44:36:17:B9:83:B6:33:95:A2:58:90:D4:BB:AE:A9"}}},"request":{"raw":"OPTIONS /gpt4xf-api/coin/candles HTTP/1.1\r\nHost: api.y-onchain.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: accesstoken,x-requested-with\r\nReferer: https://y-onchain.com/\r\nOrigin: https://y-onchain.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 06 Aug 2025 15:06:53 GMT\r\ncontent-length: 0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=S39LFH0LzRU%2FB6yjQa42RP6kDGf6L3GTd78g1NxyOKMhOr9tDna738FhIXZm4t0bqp6K1CtCv7nw1lH9Ttz82qYuVaM3woTZB67rOVSidvJpn4ugYQMEuT7RciNoHfwC8y3h7Q%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,HEAD,POST,PUT,DELETE,OPTIONS\r\naccess-control-allow-headers: accesstoken, x-requested-with\r\naccess-control-max-age: 1800\r\nallow: GET, HEAD, POST, PUT, DELETE, OPTIONS, PATCH\r\ncf-cache-status: DYNAMIC\r\ncf-ray: 96af70cf58feb505-OSL\r\nserver: cloudflare\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=879\u0026min_rtt=444\u0026rtt_var=151\u0026sent=1467\u0026recv=306\u0026lost=0\u0026retrans=0\u0026sent_bytes=1773297\u0026recv_bytes=26083\u0026delivery_rate=29568302\u0026ss_exit_cwnd=30585\u0026ss_exit_reason=2\u0026cwnd=76138\u0026unsent_bytes=0\u0026cid=483caaa6cce61b43\u0026ts=8477\u0026inflight_dur=337\u0026x=40\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-10T03:49:04.585278Z","times_seen":17810757,"resource_available":true,"data":null}},"time_used":641,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":641,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-06","alert":"Sinkholed","trigger":"api.y-onchain.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.gpt4xdam.top/logo/enj.png","fqdn":"www.gpt4xdam.top","domain":"gpt4xdam.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://y-onchain.com/","date":"2025-08-06T15:06:52.933Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /logo/enj.png HTTP/1.1\r\nHost: www.gpt4xdam.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://y-onchain.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-10T03:49:04.585278Z","times_seen":17810757,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-06","alert":"Sinkholed","trigger":"www.gpt4xdam.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.y-onchain.com/gpt4xf-api/coin/candles","fqdn":"api.y-onchain.com","domain":"y-onchain.com","tld":"com"},"ip":{"addr":"104.21.80.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://y-onchain.com/","date":"2025-08-06T15:06:53.412Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"y-onchain.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 04 Aug 2025 08:36:15 GMT","end":"Sun, 02 Nov 2025 09:34:42 GMT"},"fingerprint":{"sha1":"6E:0E:D2:BE:4E:23:E6:6A:44:4D:C5:17:81:1A:5D:7F:5C:71:E7:0D","sha256":"9B:33:8A:08:BA:CF:85:A4:96:25:16:6A:FF:4D:8C:C6:29:44:36:17:B9:83:B6:33:95:A2:58:90:D4:BB:AE:A9"}}},"request":{"raw":"POST /gpt4xf-api/coin/candles HTTP/1.1\r\nHost: api.y-onchain.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json\r\nAccept-Language: en-US\r\nAccept-Encoding: gzip, deflate, br\r\nX-Requested-With: XMLHttpRequest\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\naccesstoken: \r\nContent-Length: 20\r\nOrigin: https://y-onchain.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://y-onchain.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 06 Aug 2025 15:06:54 GMT\r\ncontent-type: application/json\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=D4Y%2B1PjWOc6bAwuaFbqNm1ZIohDvxL8mmuaHMg3WZ7t6tH8es8%2BbDWAJHpgVzdlLDo7Ylyqyo6%2FhT5ItOgkNPJexGmSR1FCHOw3UT8T7tD0g7tfBSAXl6iq16fTege07otiwbw%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: *\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 96af70d3c952b505-OSL\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=1310\u0026min_rtt=444\u0026rtt_var=378\u0026sent=1732\u0026recv=378\u0026lost=0\u0026retrans=1\u0026sent_bytes=2056102\u0026recv_bytes=33642\u0026delivery_rate=29689103\u0026ss_exit_cwnd=30585\u0026ss_exit_reason=2\u0026cwnd=50735\u0026unsent_bytes=0\u0026cid=483caaa6cce61b43\u0026ts=9547\u0026inflight_dur=544\u0026x=40\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":30897,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"43fcdd269062a09d4a9ff27913d9f11e","sha1":"1ae9199a8770c81679c42ccf81898e5fc7276031","sha256":"7406d2b06c3c27a388ee1d737439ce043729b04e3654f85afe748847694cf03e","sha512":"e4fd1961c196a4c1fd5a2d65196b1c8712d7eb2b42c0f1a5d9acd68b493c2ae84b23547d5eb1badca52b6ad1701d52a1d0d13d032fde9aa073c8a5d4e0d92285","ssdeep":"192:xPsZ2cBjftaGoxSf41MrJozQE2rAmrLkDd74gJoHoBDp/rrrxrrrDrrrEwurrrig:xXBQMcaHWeXhjy","tlshash":"5ed2e4814d8ad130abcc5e7c1b3b5cc79dc539b178a56b40363bfa61aa723f5a13c642","first_seen":"2025-08-06T15:07:16.807678Z","last_seen":"2025-08-06T15:07:16.807678Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1324,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1008,"receive":316,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-06","alert":"Sinkholed","trigger":"api.y-onchain.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"y-onchain.com/","fqdn":"y-onchain.com","domain":"y-onchain.com","tld":"com"},"ip":{"addr":"104.21.80.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-08-06T15:06:44.209Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"y-onchain.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 04 Aug 2025 08:36:15 GMT","end":"Sun, 02 Nov 2025 09:34:42 GMT"},"fingerprint":{"sha1":"6E:0E:D2:BE:4E:23:E6:6A:44:4D:C5:17:81:1A:5D:7F:5C:71:E7:0D","sha256":"9B:33:8A:08:BA:CF:85:A4:96:25:16:6A:FF:4D:8C:C6:29:44:36:17:B9:83:B6:33:95:A2:58:90:D4:BB:AE:A9"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: y-onchain.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 06 Aug 2025 15:06:44 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\nlast-modified: Wed, 30 Apr 2025 05:54:55 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mkDUY2uoE2jBS7YyxDnGeKTl1CO5KnP0Tn87h1LODXKIjGU6%2F9VmIRzM57cuV5Wfobe71%2BvQA4SSrhU7I8NIW17PaSwMMHBYcBe3\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 96af709a7e280b51-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":750,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (334)","md5":"fbacacde548568b60b9d0862f97016e8","sha1":"f2a410bdc51ecfad8b87d532c9dff607d35e4f0f","sha256":"e24b18d7bf2bd2d17f6d529e605ab8158168559e446f57a190ecf75d1491e31d","sha512":"88a83025de276e3a87446426c4e4af214c6324accbda6d90b1a1b76553a4ad59577ee7d4dd804af2e20f9c4bd41920e8fd22ce71bbbc2f87eaae6fa814f75097","ssdeep":"","tlshash":"a501d0812c65e44c0a30c5467465e55ec9d746b51e61dc103ccd2ef84fa478eca1d405","first_seen":"2025-08-06T15:07:16.81029Z","last_seen":"2025-08-06T15:07:16.81029Z","times_seen":1,"resource_available":false,"data":null}},"time_used":679,"timings":{"blocked":29,"dns":1,"connect":1,"send":0,"wait":616,"receive":0,"ssl":26},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-06","alert":"Sinkholed","trigger":"y-onchain.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"y-onchain.com/static/img/favicon.ico","fqdn":"y-onchain.com","domain":"y-onchain.com","tld":"com"},"ip":{"addr":"104.21.80.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://y-onchain.com/","date":"2025-08-06T15:06:48.464Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"y-onchain.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 04 Aug 2025 08:36:15 GMT","end":"Sun, 02 Nov 2025 09:34:42 GMT"},"fingerprint":{"sha1":"6E:0E:D2:BE:4E:23:E6:6A:44:4D:C5:17:81:1A:5D:7F:5C:71:E7:0D","sha256":"9B:33:8A:08:BA:CF:85:A4:96:25:16:6A:FF:4D:8C:C6:29:44:36:17:B9:83:B6:33:95:A2:58:90:D4:BB:AE:A9"}}},"request":{"raw":"GET /static/img/favicon.ico HTTP/1.1\r\nHost: y-onchain.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://y-onchain.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 06 Aug 2025 15:06:49 GMT\r\ncontent-type: image/x-icon\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=3%2Fx8N5I%2Bv9in5Ir2tt9F%2FOubaRKfVVXASSUD78k3jqRZJ9gdpnHiK%2BDVA39WMuzrZi1446QOSsKMltHgYPAo6v2cOQ%2FqgH6gbodGriTli8Q4I22JnrlIWBQKmrIJC0TB\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nlast-modified: Wed, 30 Apr 2025 05:54:55 GMT\r\netag: W/\"6811bb2f-1348\"\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncontent-encoding: br\r\ncf-ray: 96af70b4efd6b505-OSL\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=1270\u0026min_rtt=444\u0026rtt_var=750\u0026sent=175\u0026recv=140\u0026lost=0\u0026retrans=0\u0026sent_bytes=114219\u0026recv_bytes=9225\u0026delivery_rate=17579128\u0026ss_exit_cwnd=30585\u0026ss_exit_reason=2\u0026cwnd=18129\u0026unsent_bytes=0\u0026cid=483caaa6cce61b43\u0026ts=4244\u0026inflight_dur=72\u0026x=40\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4936,"size_decoded":0,"mime_type":"image/x-icon","magic":"PNG image data, 60 x 60, 8-bit/color RGBA, non-interlaced","md5":"27aba8ac6f6872101593aac62c777a00","sha1":"5a594ff47649946f5af6ac6f97212f5fae57002e","sha256":"aa21eb1d130bbb72a9583e99ae1184e9ae644468a93c3e1e6bf49296580f7413","sha512":"a17eee01729795ea586a1334e199a11f6d8cf251b22bdb21ef96c285704ceffd76c137cdba2afc22abfd76db5d73acd0427fcd959b5ad562660112a1db7a789b","ssdeep":"96:k0P+SagvVoqMAbspglB8rHNf7ziDiA/XF0SAAOJQx5vde3e7:kzS99oubsABof7z6/XBT5v+e7","tlshash":"59a17dc50aba1347c3cf2f7dccf5b146c9a3885548d1956fab8da16b1f0ba82f18b404","first_seen":"2025-06-19T19:41:17.184069Z","last_seen":"2026-06-10T21:23:08.323527Z","times_seen":7,"resource_available":false,"data":null}},"time_used":644,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":643,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-06","alert":"Sinkholed","trigger":"y-onchain.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.y-onchain.com/gpt4xf-api/common/prop","fqdn":"api.y-onchain.com","domain":"y-onchain.com","tld":"com"},"ip":{"addr":"104.21.112.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://y-onchain.com/","date":"2025-08-06T15:06:51.655Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"y-onchain.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 04 Aug 2025 08:36:15 GMT","end":"Sun, 02 Nov 2025 09:34:42 GMT"},"fingerprint":{"sha1":"6E:0E:D2:BE:4E:23:E6:6A:44:4D:C5:17:81:1A:5D:7F:5C:71:E7:0D","sha256":"9B:33:8A:08:BA:CF:85:A4:96:25:16:6A:FF:4D:8C:C6:29:44:36:17:B9:83:B6:33:95:A2:58:90:D4:BB:AE:A9"}}},"request":{"raw":"OPTIONS /gpt4xf-api/common/prop HTTP/1.1\r\nHost: api.y-onchain.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: accesstoken,x-requested-with\r\nReferer: https://y-onchain.com/\r\nOrigin: https://y-onchain.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 06 Aug 2025 15:06:52 GMT\r\ncontent-length: 0\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,HEAD,POST,PUT,DELETE,OPTIONS\r\naccess-control-allow-headers: accesstoken, x-requested-with\r\naccess-control-max-age: 1800\r\nallow: GET, HEAD, POST, PUT, DELETE, OPTIONS, PATCH\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=32plUEomQ%2BdevIhMfpVJV3NRT07ogSQNpabGRk%2BvQ0axCdSJpnJBTsX9Rvk8IdSocdmVuO8xRS3uZpFoSPffsXg69i4fngnGuLPp67%2BECA%3D%3D\"}]}\r\ncf-ray: 96af70c8eef6712d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-10T03:49:04.585278Z","times_seen":17810757,"resource_available":true,"data":null}},"time_used":606,"timings":{"blocked":6,"dns":0,"connect":0,"send":0,"wait":600,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-06","alert":"Sinkholed","trigger":"api.y-onchain.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"y-onchain.com/static/img/logo.2abe1cc9.svg","fqdn":"y-onchain.com","domain":"y-onchain.com","tld":"com"},"ip":{"addr":"104.21.80.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://y-onchain.com/","date":"2025-08-06T15:06:51.819Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"y-onchain.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 04 Aug 2025 08:36:15 GMT","end":"Sun, 02 Nov 2025 09:34:42 GMT"},"fingerprint":{"sha1":"6E:0E:D2:BE:4E:23:E6:6A:44:4D:C5:17:81:1A:5D:7F:5C:71:E7:0D","sha256":"9B:33:8A:08:BA:CF:85:A4:96:25:16:6A:FF:4D:8C:C6:29:44:36:17:B9:83:B6:33:95:A2:58:90:D4:BB:AE:A9"}}},"request":{"raw":"GET /static/img/logo.2abe1cc9.svg HTTP/1.1\r\nHost: y-onchain.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://y-onchain.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 06 Aug 2025 15:06:52 GMT\r\ncontent-type: image/svg+xml\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=P%2FtciImuLhk%2BynP3nXRs333MvbJ8zZZtYmqU9Dtt14CjpLv%2By8Xl5Kgq%2FPm0IgYSKVTlHQrROcTjQqrUfyGr6JmTWeslxHBdDO2pW4QaJX8RXZuSESZ9EA1XmTzn3BIh\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nlast-modified: Wed, 30 Apr 2025 05:54:55 GMT\r\netag: W/\"6811bb2f-5cc\"\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncontent-encoding: br\r\ncf-ray: 96af70c9c899b505-OSL\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=1354\u0026min_rtt=444\u0026rtt_var=1132\u0026sent=1015\u0026recv=253\u0026lost=0\u0026retrans=0\u0026sent_bytes=1200541\u0026recv_bytes=15989\u0026delivery_rate=29568302\u0026ss_exit_cwnd=30585\u0026ss_exit_reason=2\u0026cwnd=59145\u0026unsent_bytes=0\u0026cid=483caaa6cce61b43\u0026ts=7570\u0026inflight_dur=197\u0026x=40\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1484,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"2abe1cc9e7801704b8b8c5d173d8c0af","sha1":"6e25d5e2ec27c949aa2d928d59a5e46463ca2f59","sha256":"94838ae0de5d0451ed9c1b03e070f6032f2a921daf2b88da2d7ac70560ada736","sha512":"37440768e9649d67b94734a15487693a80a5a05a8b8e83514602f6a2a761c49ec0fab859750693fb71e60fcf9ca6c4174ea943a8797bec5786d230fc529d04d3","ssdeep":"","tlshash":"9531dc4643903d7fa03241dc6270e652546734a3e129a70174ec3a686f4fde04e631e8","first_seen":"2025-08-06T15:07:16.814991Z","last_seen":"2025-08-06T15:07:16.814991Z","times_seen":1,"resource_available":false,"data":null}},"time_used":624,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":624,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-06","alert":"Sinkholed","trigger":"y-onchain.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.gpt4xdam.top/logo/chz.png","fqdn":"www.gpt4xdam.top","domain":"gpt4xdam.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://y-onchain.com/","date":"2025-08-06T15:06:52.883Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /logo/chz.png HTTP/1.1\r\nHost: www.gpt4xdam.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://y-onchain.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-10T03:49:04.585278Z","times_seen":17810757,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-06","alert":"Sinkholed","trigger":"www.gpt4xdam.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.gpt4xdam.top/logo/mana.png","fqdn":"www.gpt4xdam.top","domain":"gpt4xdam.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://y-onchain.com/","date":"2025-08-06T15:06:52.931Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /logo/mana.png HTTP/1.1\r\nHost: www.gpt4xdam.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://y-onchain.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-10T03:49:04.585278Z","times_seen":17810757,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-06","alert":"Sinkholed","trigger":"www.gpt4xdam.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.gpt4xdam.top/logo/matic.png","fqdn":"www.gpt4xdam.top","domain":"gpt4xdam.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://y-onchain.com/","date":"2025-08-06T15:06:52.935Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /logo/matic.png HTTP/1.1\r\nHost: www.gpt4xdam.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://y-onchain.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-10T03:49:04.585278Z","times_seen":17810757,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-06","alert":"Sinkholed","trigger":"www.gpt4xdam.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.y-onchain.com/gpt4xf-api/coin/candles","fqdn":"api.y-onchain.com","domain":"y-onchain.com","tld":"com"},"ip":{"addr":"104.21.80.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://y-onchain.com/","date":"2025-08-06T15:06:53.375Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"y-onchain.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 04 Aug 2025 08:36:15 GMT","end":"Sun, 02 Nov 2025 09:34:42 GMT"},"fingerprint":{"sha1":"6E:0E:D2:BE:4E:23:E6:6A:44:4D:C5:17:81:1A:5D:7F:5C:71:E7:0D","sha256":"9B:33:8A:08:BA:CF:85:A4:96:25:16:6A:FF:4D:8C:C6:29:44:36:17:B9:83:B6:33:95:A2:58:90:D4:BB:AE:A9"}}},"request":{"raw":"POST /gpt4xf-api/coin/candles HTTP/1.1\r\nHost: api.y-onchain.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json\r\nAccept-Language: en-US\r\nAccept-Encoding: gzip, deflate, br\r\nX-Requested-With: XMLHttpRequest\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\naccesstoken: \r\nContent-Length: 19\r\nOrigin: https://y-onchain.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://y-onchain.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 06 Aug 2025 15:06:53 GMT\r\ncontent-type: application/json\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=ZI0TOFIm072wi5vM8ifiAXSIA7ty%2BGRPOedsIIORUI6TSFahjM26WqZbmvbtRqndKb%2BcAC8mwAyQ934hUOZ1BzWAgHhlU59cFKEXb63iOKPcvO6ctxbthgi6sK9gSiVgaxnMrw%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: *\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 96af70d37936b505-OSL\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=2039\u0026min_rtt=444\u0026rtt_var=1241\u0026sent=1652\u0026recv=354\u0026lost=0\u0026retrans=1\u0026sent_bytes=1985666\u0026recv_bytes=32571\u0026delivery_rate=29689103\u0026ss_exit_cwnd=30585\u0026ss_exit_reason=2\u0026cwnd=50735\u0026unsent_bytes=0\u0026cid=483caaa6cce61b43\u0026ts=9128\u0026inflight_dur=450\u0026x=40\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":38371,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"88931a5f5e88482c82cf6dfddbd34dd8","sha1":"51b60acd75b56e328c5a79cdeb95ea291557ee7a","sha256":"cd586a28b528d5899c3e05cd6d9fb5850a8adeb5bf9d59f3eb35e7c7c9a3b8b2","sha512":"8ff0ef9d5025c4c40966b3b2953f468dc8c1a5593ea01244c2269a5070226fcaf5e32a84f35c4fdf9fae9ce3ede199e90da41a19eb7267325e73ad878379e959","ssdeep":"192:w+aBgpy9QZZ4Oi3roB8H1tyS+Cgt0Vhj0lFqw3keD2bwQ2Kl4Z7Ci6klprWOllMq:lc+BlL25WWMVVZO2P+y3YIbkJQ9e7c","tlshash":"900306c149c8c678b6885e681a3e2c1aacd63df170a57b40b52bf1616bb27f4e13cd47","first_seen":"2025-08-06T15:07:16.816907Z","last_seen":"2025-08-06T15:07:16.816907Z","times_seen":1,"resource_available":false,"data":null}},"time_used":934,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":633,"receive":301,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-06","alert":"Sinkholed","trigger":"api.y-onchain.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"y-onchain.com/static/js/pages-borrowMoney-history~pages-borrowMoney-index~pages-home-home~pages-trade-kline~pages-user-kyc~p~98301549.c1a8d56b.js","fqdn":"y-onchain.com","domain":"y-onchain.com","tld":"com"},"ip":{"addr":"104.21.80.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://y-onchain.com/","date":"2025-08-06T15:06:47.883Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"y-onchain.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 04 Aug 2025 08:36:15 GMT","end":"Sun, 02 Nov 2025 09:34:42 GMT"},"fingerprint":{"sha1":"6E:0E:D2:BE:4E:23:E6:6A:44:4D:C5:17:81:1A:5D:7F:5C:71:E7:0D","sha256":"9B:33:8A:08:BA:CF:85:A4:96:25:16:6A:FF:4D:8C:C6:29:44:36:17:B9:83:B6:33:95:A2:58:90:D4:BB:AE:A9"}}},"request":{"raw":"GET /static/js/pages-borrowMoney-history~pages-borrowMoney-index~pages-home-home~pages-trade-kline~pages-user-kyc~p~98301549.c1a8d56b.js HTTP/1.1\r\nHost: y-onchain.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://y-onchain.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 06 Aug 2025 15:06:48 GMT\r\ncontent-type: application/javascript\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=1p8dKDGwnE3AwfCg5iJzoEstQg%2BDdTkjS4anKi0XuEHtOlhvHUceln0bS2OjXR5sLI5I05aT0h7E6QAMkiz%2Fh%2BWsKHT%2BHt8Zd84Ob5ev4LV7%2F1HktJtbBsMMUjYzQQ20\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nlast-modified: Wed, 30 Apr 2025 05:54:55 GMT\r\netag: W/\"6811bb2f-2e51\"\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncontent-encoding: br\r\ncf-ray: 96af70b14fb6b505-OSL\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=2772\u0026min_rtt=444\u0026rtt_var=2637\u0026sent=97\u0026recv=127\u0026lost=0\u0026retrans=0\u0026sent_bytes=17174\u0026recv_bytes=8633\u0026delivery_rate=4811426\u0026ss_exit_cwnd=0\u0026ss_exit_reason=0\u0026cwnd=26042\u0026unsent_bytes=0\u0026cid=483caaa6cce61b43\u0026ts=3665\u0026inflight_dur=57\u0026x=40\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11857,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (11335), with no line terminators","md5":"6bf9d42ae4ab19a844dc9a7faa8d7838","sha1":"971d8d56983052f651ae655f152c42ad5432fe36","sha256":"8fd6ac5d06f8d526bac8f3c69a51a1a3210009b0435565ddb40dd6207fd5a055","sha512":"42c957e7f56d67fa9caad06a55c16bacbfe0f132ff9b806a5599a95d2bba87437c29fbedd47a9fc31d6cd6130ee3faf5a6d17ad81b5b89d968cb90f8f051ab74","ssdeep":"192:htYWsnXUDnm1E8lELqRsetFre0hiA+Ijduxu76caSGS:htYWOWwlE++0hlj6O6caSGS","tlshash":"1632e90cf8c2b44100538561d2ef9518923ef6972562adcd73b4e5db0f6978e2393f6a","first_seen":"2025-08-06T15:07:16.818903Z","last_seen":"2025-08-06T15:07:16.818903Z","times_seen":1,"resource_available":true,"data":null}},"time_used":645,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":645,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-06","alert":"Sinkholed","trigger":"y-onchain.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.y-onchain.com/gpt4xf-api/coin/candles","fqdn":"api.y-onchain.com","domain":"y-onchain.com","tld":"com"},"ip":{"addr":"104.21.80.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://y-onchain.com/","date":"2025-08-06T15:06:52.755Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"y-onchain.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 04 Aug 2025 08:36:15 GMT","end":"Sun, 02 Nov 2025 09:34:42 GMT"},"fingerprint":{"sha1":"6E:0E:D2:BE:4E:23:E6:6A:44:4D:C5:17:81:1A:5D:7F:5C:71:E7:0D","sha256":"9B:33:8A:08:BA:CF:85:A4:96:25:16:6A:FF:4D:8C:C6:29:44:36:17:B9:83:B6:33:95:A2:58:90:D4:BB:AE:A9"}}},"request":{"raw":"OPTIONS /gpt4xf-api/coin/candles HTTP/1.1\r\nHost: api.y-onchain.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: accesstoken,x-requested-with\r\nReferer: https://y-onchain.com/\r\nOrigin: https://y-onchain.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 06 Aug 2025 15:06:53 GMT\r\ncontent-length: 0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=cT50Y%2FZlKXOCdpeXShRGm09Iqz6E6oF8RZOb%2FKeiXdBE9SnUzZEN2hu1TPxbiz8axsYofHYOwxBNZHWQiPv3w7HnevhGYGlw1%2B1LmMZR93o9VAeNq5q%2F2xv838wuNd9dch%2F5cA%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,HEAD,POST,PUT,DELETE,OPTIONS\r\naccess-control-allow-headers: accesstoken, x-requested-with\r\naccess-control-max-age: 1800\r\nallow: GET, HEAD, POST, PUT, DELETE, OPTIONS, PATCH\r\ncf-cache-status: DYNAMIC\r\ncf-ray: 96af70cf9903b505-OSL\r\nserver: cloudflare\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=803\u0026min_rtt=444\u0026rtt_var=185\u0026sent=1556\u0026recv=322\u0026lost=0\u0026retrans=0\u0026sent_bytes=1893673\u0026recv_bytes=27473\u0026delivery_rate=29689103\u0026ss_exit_cwnd=30585\u0026ss_exit_reason=2\u0026cwnd=50735\u0026unsent_bytes=0\u0026cid=483caaa6cce61b43\u0026ts=8487\u0026inflight_dur=349\u0026x=40\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-10T03:49:04.585278Z","times_seen":17810757,"resource_available":true,"data":null}},"time_used":618,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":618,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-06","alert":"Sinkholed","trigger":"api.y-onchain.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.y-onchain.com/gpt4xf-api/coin/candles","fqdn":"api.y-onchain.com","domain":"y-onchain.com","tld":"com"},"ip":{"addr":"104.21.80.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://y-onchain.com/","date":"2025-08-06T15:06:52.746Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"y-onchain.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 04 Aug 2025 08:36:15 GMT","end":"Sun, 02 Nov 2025 09:34:42 GMT"},"fingerprint":{"sha1":"6E:0E:D2:BE:4E:23:E6:6A:44:4D:C5:17:81:1A:5D:7F:5C:71:E7:0D","sha256":"9B:33:8A:08:BA:CF:85:A4:96:25:16:6A:FF:4D:8C:C6:29:44:36:17:B9:83:B6:33:95:A2:58:90:D4:BB:AE:A9"}}},"request":{"raw":"OPTIONS /gpt4xf-api/coin/candles HTTP/1.1\r\nHost: api.y-onchain.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: accesstoken,x-requested-with\r\nReferer: https://y-onchain.com/\r\nOrigin: https://y-onchain.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 06 Aug 2025 15:06:53 GMT\r\ncontent-length: 0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=sd%2BPy3BhIJAaVDdElQyZz3OMhJvBZYacWM%2FqLQYdCuRXrcJQSsLKmDiHf7P%2FWFDzIkskU%2BCxYgooabwBqyJSBv2leKjHgm2U38TfP5xhhA8K1epuF8QDSMjXWdOn%2FnAAuI42Pw%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,HEAD,POST,PUT,DELETE,OPTIONS\r\naccess-control-allow-headers: accesstoken, x-requested-with\r\naccess-control-max-age: 1800\r\nallow: GET, HEAD, POST, PUT, DELETE, OPTIONS, PATCH\r\ncf-cache-status: DYNAMIC\r\ncf-ray: 96af70cf8900b505-OSL\r\nserver: cloudflare\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=972\u0026min_rtt=444\u0026rtt_var=253\u0026sent=1507\u0026recv=308\u0026lost=0\u0026retrans=0\u0026sent_bytes=1828557\u0026recv_bytes=26175\u0026delivery_rate=29568302\u0026ss_exit_cwnd=30585\u0026ss_exit_reason=2\u0026cwnd=76138\u0026unsent_bytes=0\u0026cid=483caaa6cce61b43\u0026ts=8479\u0026inflight_dur=342\u0026x=40\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-10T03:49:04.585278Z","times_seen":17810757,"resource_available":true,"data":null}},"time_used":623,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":622,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-06","alert":"Sinkholed","trigger":"api.y-onchain.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.y-onchain.com/gpt4xf-api/coin/candles","fqdn":"api.y-onchain.com","domain":"y-onchain.com","tld":"com"},"ip":{"addr":"104.21.80.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://y-onchain.com/","date":"2025-08-06T15:06:52.748Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"y-onchain.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 04 Aug 2025 08:36:15 GMT","end":"Sun, 02 Nov 2025 09:34:42 GMT"},"fingerprint":{"sha1":"6E:0E:D2:BE:4E:23:E6:6A:44:4D:C5:17:81:1A:5D:7F:5C:71:E7:0D","sha256":"9B:33:8A:08:BA:CF:85:A4:96:25:16:6A:FF:4D:8C:C6:29:44:36:17:B9:83:B6:33:95:A2:58:90:D4:BB:AE:A9"}}},"request":{"raw":"OPTIONS /gpt4xf-api/coin/candles HTTP/1.1\r\nHost: api.y-onchain.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: accesstoken,x-requested-with\r\nReferer: https://y-onchain.com/\r\nOrigin: https://y-onchain.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 06 Aug 2025 15:06:53 GMT\r\ncontent-length: 0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=vfae7oOAP%2Fucb4q%2Bhw8tzR%2BkNcs96MGNepYrKXWDQgnIWTpBPGnZOmnVmmBWRLE6p4y%2BWt%2FGe%2FFc4coJ%2FtX%2BAD2JWmAK9Y%2Bdd%2BQtExtHhRoHrJkMa7igaqZplH%2F1BLnnZ%2BX63A%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,HEAD,POST,PUT,DELETE,OPTIONS\r\naccess-control-allow-headers: accesstoken, x-requested-with\r\naccess-control-max-age: 1800\r\nallow: GET, HEAD, POST, PUT, DELETE, OPTIONS, PATCH\r\ncf-cache-status: DYNAMIC\r\ncf-ray: 96af70cf8901b505-OSL\r\nserver: cloudflare\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=841\u0026min_rtt=444\u0026rtt_var=208\u0026sent=1553\u0026recv=316\u0026lost=0\u0026retrans=0\u0026sent_bytes=1892037\u0026recv_bytes=26869\u0026delivery_rate=29689103\u0026ss_exit_cwnd=30585\u0026ss_exit_reason=2\u0026cwnd=76207\u0026unsent_bytes=0\u0026cid=483caaa6cce61b43\u0026ts=8481\u0026inflight_dur=345\u0026x=40\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-10T03:49:04.585278Z","times_seen":17810757,"resource_available":true,"data":null}},"time_used":619,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":619,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-06","alert":"Sinkholed","trigger":"api.y-onchain.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.gpt4xdam.top/logo/trx.png","fqdn":"www.gpt4xdam.top","domain":"gpt4xdam.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://y-onchain.com/","date":"2025-08-06T15:06:52.942Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /logo/trx.png HTTP/1.1\r\nHost: www.gpt4xdam.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://y-onchain.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-10T03:49:04.585278Z","times_seen":17810757,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-06","alert":"Sinkholed","trigger":"www.gpt4xdam.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.y-onchain.com/gpt4xf-api/coin/infos","fqdn":"api.y-onchain.com","domain":"y-onchain.com","tld":"com"},"ip":{"addr":"104.21.112.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://y-onchain.com/","date":"2025-08-06T15:06:52.278Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"y-onchain.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 04 Aug 2025 08:36:15 GMT","end":"Sun, 02 Nov 2025 09:34:42 GMT"},"fingerprint":{"sha1":"6E:0E:D2:BE:4E:23:E6:6A:44:4D:C5:17:81:1A:5D:7F:5C:71:E7:0D","sha256":"9B:33:8A:08:BA:CF:85:A4:96:25:16:6A:FF:4D:8C:C6:29:44:36:17:B9:83:B6:33:95:A2:58:90:D4:BB:AE:A9"}}},"request":{"raw":"POST /gpt4xf-api/coin/infos HTTP/1.1\r\nHost: api.y-onchain.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json\r\nAccept-Language: en-US\r\nAccept-Encoding: gzip, deflate, br\r\nX-Requested-With: XMLHttpRequest\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\naccesstoken: \r\nContent-Length: 0\r\nOrigin: https://y-onchain.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://y-onchain.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 06 Aug 2025 15:06:52 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: *\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QLLK6WGGCMeg1Y1%2FEu4fsBMb74HtpubhPJgZAahmUciBrTkQnhlcC5dehzhJa4i%2BLGDJ%2B8YW8wOxcF7CEfjXVIlhcpxIYF%2F1dlQdLBa3hQ%3D%3D\"}]}\r\ncontent-encoding: br\r\ncf-ray: 96af70cccc9c712d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6520,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"97f08af370987db0632295de161d7514","sha1":"30786a7fc1a206279539310c4e740f5c4c00d4de","sha256":"7eba834bf484ae4196357d8ed118a59c39b63912ee406c8a90e65f39255dcd76","sha512":"f458a88b49db546c5a2b84b4b7f82a9e5214c7cd54fbb2f615655ec8714e74a9351a64f33428dcc08e6e859c6890a510cfe3404321c7ee8df38aa9d74c78b7d7","ssdeep":"96:TQidQiZQinQimQikQimQiIQi3QidQieQij7QirQiNQiQQi+QiHSQieQitQiBQirQ:IQ","tlshash":"9ed1ad2d3f8adb9523a071842afbbd1b92653b926d4d0d33434ced2b41d17d7298b21a","first_seen":"2024-12-24T22:23:00.037179Z","last_seen":"2025-08-06T15:07:16.820978Z","times_seen":2,"resource_available":false,"data":null}},"time_used":315,"timings":{"blocked":7,"dns":0,"connect":0,"send":0,"wait":308,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-06","alert":"Sinkholed","trigger":"api.y-onchain.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.y-onchain.com/gpt4xf-api/coin/candles","fqdn":"api.y-onchain.com","domain":"y-onchain.com","tld":"com"},"ip":{"addr":"104.21.80.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://y-onchain.com/","date":"2025-08-06T15:06:52.759Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"y-onchain.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 04 Aug 2025 08:36:15 GMT","end":"Sun, 02 Nov 2025 09:34:42 GMT"},"fingerprint":{"sha1":"6E:0E:D2:BE:4E:23:E6:6A:44:4D:C5:17:81:1A:5D:7F:5C:71:E7:0D","sha256":"9B:33:8A:08:BA:CF:85:A4:96:25:16:6A:FF:4D:8C:C6:29:44:36:17:B9:83:B6:33:95:A2:58:90:D4:BB:AE:A9"}}},"request":{"raw":"OPTIONS /gpt4xf-api/coin/candles HTTP/1.1\r\nHost: api.y-onchain.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: accesstoken,x-requested-with\r\nReferer: https://y-onchain.com/\r\nOrigin: https://y-onchain.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 06 Aug 2025 15:06:53 GMT\r\ncontent-length: 0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=xDaZNfdITL0LDb%2BMBI5YDHMbESSuUa%2BYf1YIgjLI%2BkF%2BK40k%2FiROtRf6JhTHF2jBo%2B%2Fn4PzS3VQkxQOwl1mwqSF1PKn9jFMfUbOfl%2F60Clqqnsya7jC7GL8kMItb7kSlQLi9hg%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,HEAD,POST,PUT,DELETE,OPTIONS\r\naccess-control-allow-headers: accesstoken, x-requested-with\r\naccess-control-max-age: 1800\r\nallow: GET, HEAD, POST, PUT, DELETE, OPTIONS, PATCH\r\ncf-cache-status: DYNAMIC\r\ncf-ray: 96af70cf9904b505-OSL\r\nserver: cloudflare\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=802\u0026min_rtt=444\u0026rtt_var=142\u0026sent=1559\u0026recv=324\u0026lost=0\u0026retrans=0\u0026sent_bytes=1895291\u0026recv_bytes=27894\u0026delivery_rate=29689103\u0026ss_exit_cwnd=30585\u0026ss_exit_reason=2\u0026cwnd=50735\u0026unsent_bytes=0\u0026cid=483caaa6cce61b43\u0026ts=8498\u0026inflight_dur=357\u0026x=40\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-10T03:49:04.585278Z","times_seen":17810757,"resource_available":true,"data":null}},"time_used":629,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":628,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-06","alert":"Sinkholed","trigger":"api.y-onchain.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.y-onchain.com/gpt4xf-api/coin/candles","fqdn":"api.y-onchain.com","domain":"y-onchain.com","tld":"com"},"ip":{"addr":"104.21.80.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://y-onchain.com/","date":"2025-08-06T15:06:52.767Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"y-onchain.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 04 Aug 2025 08:36:15 GMT","end":"Sun, 02 Nov 2025 09:34:42 GMT"},"fingerprint":{"sha1":"6E:0E:D2:BE:4E:23:E6:6A:44:4D:C5:17:81:1A:5D:7F:5C:71:E7:0D","sha256":"9B:33:8A:08:BA:CF:85:A4:96:25:16:6A:FF:4D:8C:C6:29:44:36:17:B9:83:B6:33:95:A2:58:90:D4:BB:AE:A9"}}},"request":{"raw":"OPTIONS /gpt4xf-api/coin/candles HTTP/1.1\r\nHost: api.y-onchain.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: accesstoken,x-requested-with\r\nReferer: https://y-onchain.com/\r\nOrigin: https://y-onchain.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 06 Aug 2025 15:06:53 GMT\r\ncontent-length: 0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=d9YwTpCpzYhyyfAiien8VyfSAidkTih7k8Lfav1O9KevCyBSZvC356OoaqsaLDLORu8KaQQ%2BIcOZiDPd7Vi%2BwftJViJa08gPOP%2F9xy1WDVtXSDBz9dLngs0BLueEqb2OpTcKlA%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,HEAD,POST,PUT,DELETE,OPTIONS\r\naccess-control-allow-headers: accesstoken, x-requested-with\r\naccess-control-max-age: 1800\r\nallow: GET, HEAD, POST, PUT, DELETE, OPTIONS, PATCH\r\ncf-cache-status: DYNAMIC\r\ncf-ray: 96af70cfa90ab505-OSL\r\nserver: cloudflare\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=822\u0026min_rtt=444\u0026rtt_var=147\u0026sent=1562\u0026recv=326\u0026lost=0\u0026retrans=0\u0026sent_bytes=1896916\u0026recv_bytes=28315\u0026delivery_rate=29689103\u0026ss_exit_cwnd=30585\u0026ss_exit_reason=2\u0026cwnd=50735\u0026unsent_bytes=0\u0026cid=483caaa6cce61b43\u0026ts=8507\u0026inflight_dur=361\u0026x=40\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-10T03:49:04.585278Z","times_seen":17810757,"resource_available":true,"data":null}},"time_used":623,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":622,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-06","alert":"Sinkholed","trigger":"api.y-onchain.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.y-onchain.com/gpt4xf-api/coin/tickers","fqdn":"api.y-onchain.com","domain":"y-onchain.com","tld":"com"},"ip":{"addr":"104.21.80.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://y-onchain.com/","date":"2025-08-06T15:06:53.231Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"y-onchain.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 04 Aug 2025 08:36:15 GMT","end":"Sun, 02 Nov 2025 09:34:42 GMT"},"fingerprint":{"sha1":"6E:0E:D2:BE:4E:23:E6:6A:44:4D:C5:17:81:1A:5D:7F:5C:71:E7:0D","sha256":"9B:33:8A:08:BA:CF:85:A4:96:25:16:6A:FF:4D:8C:C6:29:44:36:17:B9:83:B6:33:95:A2:58:90:D4:BB:AE:A9"}}},"request":{"raw":"POST /gpt4xf-api/coin/tickers HTTP/1.1\r\nHost: api.y-onchain.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json\r\nAccept-Language: en-US\r\nAccept-Encoding: gzip, deflate, br\r\nX-Requested-With: XMLHttpRequest\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\naccesstoken: \r\nContent-Length: 10\r\nOrigin: https://y-onchain.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://y-onchain.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 06 Aug 2025 15:06:53 GMT\r\ncontent-type: application/json\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=GNKbFSBkTWqmALpwJnAXICJwXdqim1kKmdMKkFIRSFixlhes3ZSjZ7E0TRG76ylCyM9KlNMpiH7KeEqZ7LQNTrfXgD6WFymwJfqhayjjI6BYmCtvHi9NLp%2BAYgKQECtCQ1P1TA%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: *\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 96af70d2a91db505-OSL\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=1002\u0026min_rtt=444\u0026rtt_var=315\u0026sent=1604\u0026recv=340\u0026lost=0\u0026retrans=0\u0026sent_bytes=1938945\u0026recv_bytes=31934\u0026delivery_rate=29689103\u0026ss_exit_cwnd=30585\u0026ss_exit_reason=2\u0026cwnd=50735\u0026unsent_bytes=0\u0026cid=483caaa6cce61b43\u0026ts=8687\u0026inflight_dur=393\u0026x=40\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6476,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"9407919d1184a1a7b28005605cbb788a","sha1":"10f1192d261d4a6ed10b60da6e93b0b1a02657cb","sha256":"b8cb9c2c4acc03f2eaeede335f7103660601d278c23eb8860ec22c4ea66520de","sha512":"076d48154b340a76a1fd2a99c325a293ce136fa4ae9e65a625128575e754f48f714bc8bf2860f09eeace9f24bb01c734fa5ea8bd9506fe175fd44b9e1d4bdc84","ssdeep":"48:YdoGHGnF6ydrNN9F6lq4xdcxJ7HPOOSn/HOjLwacUwyRTLC7HXLVETY6UGB59rRk:sTzCTC7bsNFzXWhdyO9g4zf","tlshash":"f0d1dd1b13299a4cf42e4dc45c03e8a7e8f3a7d0bfe5d3276b66cd5991e079e908a103","first_seen":"2025-08-06T15:07:16.822039Z","last_seen":"2025-08-06T15:07:16.822039Z","times_seen":1,"resource_available":false,"data":null}},"time_used":322,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":322,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-06","alert":"Sinkholed","trigger":"api.y-onchain.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.y-onchain.com/gpt4xf-api/coin/candles","fqdn":"api.y-onchain.com","domain":"y-onchain.com","tld":"com"},"ip":{"addr":"104.21.80.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://y-onchain.com/","date":"2025-08-06T15:06:52.750Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"y-onchain.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 04 Aug 2025 08:36:15 GMT","end":"Sun, 02 Nov 2025 09:34:42 GMT"},"fingerprint":{"sha1":"6E:0E:D2:BE:4E:23:E6:6A:44:4D:C5:17:81:1A:5D:7F:5C:71:E7:0D","sha256":"9B:33:8A:08:BA:CF:85:A4:96:25:16:6A:FF:4D:8C:C6:29:44:36:17:B9:83:B6:33:95:A2:58:90:D4:BB:AE:A9"}}},"request":{"raw":"OPTIONS /gpt4xf-api/coin/candles HTTP/1.1\r\nHost: api.y-onchain.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: accesstoken,x-requested-with\r\nReferer: https://y-onchain.com/\r\nOrigin: https://y-onchain.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 06 Aug 2025 15:06:53 GMT\r\ncontent-length: 0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=w8io8kcQhewdMcMF%2FcmNj1dYv09%2BqI%2FPnzZudI7vmusQ7Ugs8NiXgLFKJyGfZqAyZHYnbmKoY8WhZN%2B%2B4jv1lfBX4VJF2pVkbQUuGLhDMbe7oZBeufiwJbcOjPNR4%2BhgFZ9x5Q%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,HEAD,POST,PUT,DELETE,OPTIONS\r\naccess-control-allow-headers: accesstoken, x-requested-with\r\naccess-control-max-age: 1800\r\nallow: GET, HEAD, POST, PUT, DELETE, OPTIONS, PATCH\r\ncf-cache-status: DYNAMIC\r\ncf-ray: 96af70cf8902b505-OSL\r\nserver: cloudflare\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=759\u0026min_rtt=444\u0026rtt_var=208\u0026sent=1554\u0026recv=319\u0026lost=0\u0026retrans=0\u0026sent_bytes=1892843\u0026recv_bytes=27007\u0026delivery_rate=29689103\u0026ss_exit_cwnd=30585\u0026ss_exit_reason=2\u0026cwnd=50735\u0026unsent_bytes=0\u0026cid=483caaa6cce61b43\u0026ts=8483\u0026inflight_dur=346\u0026x=40\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-10T03:49:04.585278Z","times_seen":17810757,"resource_available":true,"data":null}},"time_used":617,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":617,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-06","alert":"Sinkholed","trigger":"api.y-onchain.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.y-onchain.com/gpt4xf-api/coin/candles","fqdn":"api.y-onchain.com","domain":"y-onchain.com","tld":"com"},"ip":{"addr":"104.21.80.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://y-onchain.com/","date":"2025-08-06T15:06:52.772Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"y-onchain.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 04 Aug 2025 08:36:15 GMT","end":"Sun, 02 Nov 2025 09:34:42 GMT"},"fingerprint":{"sha1":"6E:0E:D2:BE:4E:23:E6:6A:44:4D:C5:17:81:1A:5D:7F:5C:71:E7:0D","sha256":"9B:33:8A:08:BA:CF:85:A4:96:25:16:6A:FF:4D:8C:C6:29:44:36:17:B9:83:B6:33:95:A2:58:90:D4:BB:AE:A9"}}},"request":{"raw":"OPTIONS /gpt4xf-api/coin/candles HTTP/1.1\r\nHost: api.y-onchain.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: accesstoken,x-requested-with\r\nReferer: https://y-onchain.com/\r\nOrigin: https://y-onchain.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 06 Aug 2025 15:06:53 GMT\r\ncontent-length: 0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=9o30isW50w8kijG44vpq5e0ivG2y6%2By%2FGQ3nUNJMR3cw%2FDF1kibqDC8nHmzt%2FBcxdeGH1RPcOOmcWwiuVut%2B7hbKnajlzGUFW5LgbS32eVkj06sMeheLetwTWXbygQeIAhQlnQ%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,HEAD,POST,PUT,DELETE,OPTIONS\r\naccess-control-allow-headers: accesstoken, x-requested-with\r\naccess-control-max-age: 1800\r\nallow: GET, HEAD, POST, PUT, DELETE, OPTIONS, PATCH\r\ncf-cache-status: DYNAMIC\r\ncf-ray: 96af70cfa908b505-OSL\r\nserver: cloudflare\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=883\u0026min_rtt=444\u0026rtt_var=231\u0026sent=1566\u0026recv=329\u0026lost=0\u0026retrans=0\u0026sent_bytes=1898555\u0026recv_bytes=29113\u0026delivery_rate=29689103\u0026ss_exit_cwnd=30585\u0026ss_exit_reason=2\u0026cwnd=50735\u0026unsent_bytes=0\u0026cid=483caaa6cce61b43\u0026ts=8514\u0026inflight_dur=367\u0026x=40\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-10T03:49:04.585278Z","times_seen":17810757,"resource_available":true,"data":null}},"time_used":629,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":629,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-06","alert":"Sinkholed","trigger":"api.y-onchain.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.gpt4xdam.top/logo/ens.png","fqdn":"www.gpt4xdam.top","domain":"gpt4xdam.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://y-onchain.com/","date":"2025-08-06T15:06:52.890Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /logo/ens.png HTTP/1.1\r\nHost: www.gpt4xdam.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://y-onchain.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-10T03:49:04.585278Z","times_seen":17810757,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-06","alert":"Sinkholed","trigger":"www.gpt4xdam.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.y-onchain.com/gpt4xf-api/coin/candles","fqdn":"api.y-onchain.com","domain":"y-onchain.com","tld":"com"},"ip":{"addr":"104.21.80.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://y-onchain.com/","date":"2025-08-06T15:06:53.399Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"y-onchain.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 04 Aug 2025 08:36:15 GMT","end":"Sun, 02 Nov 2025 09:34:42 GMT"},"fingerprint":{"sha1":"6E:0E:D2:BE:4E:23:E6:6A:44:4D:C5:17:81:1A:5D:7F:5C:71:E7:0D","sha256":"9B:33:8A:08:BA:CF:85:A4:96:25:16:6A:FF:4D:8C:C6:29:44:36:17:B9:83:B6:33:95:A2:58:90:D4:BB:AE:A9"}}},"request":{"raw":"POST /gpt4xf-api/coin/candles HTTP/1.1\r\nHost: api.y-onchain.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json\r\nAccept-Language: en-US\r\nAccept-Encoding: gzip, deflate, br\r\nX-Requested-With: XMLHttpRequest\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\naccesstoken: \r\nContent-Length: 20\r\nOrigin: https://y-onchain.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://y-onchain.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 06 Aug 2025 15:06:54 GMT\r\ncontent-type: application/json\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=8rEjVr4jF3dzX%2BKf%2Btbrnwkt2O5rc0L%2F5uJq2RnyXERZ%2BqrwgRmw%2FA%2Bi8FkMFOLXxxXq%2Fm7rTdoU5EfBI31xwhd7zSThS%2BmMeJkyOXeN6E4W7fFtxMRQMOfNy8OuolZ6fzOg3w%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: *\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 96af70d3994eb505-OSL\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=1652\u0026min_rtt=444\u0026rtt_var=909\u0026sent=1678\u0026recv=361\u0026lost=0\u0026retrans=1\u0026sent_bytes=2006474\u0026recv_bytes=32890\u0026delivery_rate=29689103\u0026ss_exit_cwnd=30585\u0026ss_exit_reason=2\u0026cwnd=50735\u0026unsent_bytes=0\u0026cid=483caaa6cce61b43\u0026ts=9274\u0026inflight_dur=467\u0026x=40\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":35708,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"12c6ae0b864c3e198800ddb0fb6efc46","sha1":"99cf73f39712bddc09ae29944107edffb7db6c17","sha256":"a4cbadcd7cf3f62baa138626fb9e9eb170028e98c357c998b3d41b518d193f9e","sha512":"2ac88e346f9dc07fb7b1ee626e00f617e64cda6015a8ae513a24777014b10ba861c7ff5edc3e56f682a1a240f1ec1bfc68cb81b681b81d041cffa7cafbbf3274","ssdeep":"192:reNa65RHidqzETizB2H60iNE87abxPZQQrTAXWa6Uy80ANbgj/IvrXIPzUrzakzG:reNaP6NB0JzoV15DpkHW6coV65VHPVE","tlshash":"46f29c950c9bcca0bb99af1c1b7b5c0b68cd35d524dd65c0371bf7218ba62f8b634682","first_seen":"2025-08-06T15:07:16.824632Z","last_seen":"2025-08-06T15:07:16.824632Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1060,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":760,"receive":300,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-06","alert":"Sinkholed","trigger":"api.y-onchain.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"y-onchain.com/static/img/img_invite.png","fqdn":"y-onchain.com","domain":"y-onchain.com","tld":"com"},"ip":{"addr":"104.21.80.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://y-onchain.com/","date":"2025-08-06T15:06:51.648Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"y-onchain.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 04 Aug 2025 08:36:15 GMT","end":"Sun, 02 Nov 2025 09:34:42 GMT"},"fingerprint":{"sha1":"6E:0E:D2:BE:4E:23:E6:6A:44:4D:C5:17:81:1A:5D:7F:5C:71:E7:0D","sha256":"9B:33:8A:08:BA:CF:85:A4:96:25:16:6A:FF:4D:8C:C6:29:44:36:17:B9:83:B6:33:95:A2:58:90:D4:BB:AE:A9"}}},"request":{"raw":"GET /static/img/img_invite.png HTTP/1.1\r\nHost: y-onchain.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://y-onchain.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 06 Aug 2025 15:06:52 GMT\r\ncontent-type: image/png\r\ncontent-length: 253517\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=pJkCoBE4GzBVzPXVyrGghnhoYgb5w58lAYKgOImhBWXE48O9RYvssI%2BOl6SQ%2F3bnve4MzLmYOvoaxamsECZc4B%2Bis9BHFzkO%2B2pB7yguPJY%2BEjgaFNbSthpmJhWxB0rb\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nlast-modified: Wed, 30 Apr 2025 05:54:55 GMT\r\netag: \"6811bb2f-3de4d\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncf-ray: 96af70c8d88db505-OSL\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=914\u0026min_rtt=444\u0026rtt_var=336\u0026sent=1003\u0026recv=252\u0026lost=0\u0026retrans=0\u0026sent_bytes=1185870\u0026recv_bytes=15944\u0026delivery_rate=29568302\u0026ss_exit_cwnd=30585\u0026ss_exit_reason=2\u0026cwnd=59145\u0026unsent_bytes=0\u0026cid=483caaa6cce61b43\u0026ts=7432\u0026inflight_dur=191\u0026x=40\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":253517,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1107 x 555, 8-bit/color RGBA, non-interlaced","md5":"61c3bcd8509aea1400a400d1cf2f28db","sha1":"6695e6deec3951a0da7c90b0e8be76e5b7d2b01c","sha256":"78a92d5f336426740ad6aa184e79eccf9600dea1073095556e36066f26b8478e","sha512":"d7b56d379574dad0232ca0edacbec19130292bce6bdbc7a093581de2f09847c80b9e39f2c20a90891eb62ff8e1adb620a2fd840f5870cf3ddec008d6a755d53d","ssdeep":"6144:bAOXnT5QrVoBXUUa8K9IDKkl4ZHUPkPdK:bAOj56UaDwZenI","tlshash":"6144138da286ccee93d9d425d370b4752bb8291a30134e5c21a5e513bf837a9d934cde","first_seen":"2024-12-22T05:51:59.153097Z","last_seen":"2025-08-06T15:07:16.827491Z","times_seen":4,"resource_available":false,"data":null}},"time_used":1856,"timings":{"blocked":2,"dns":0,"connect":0,"send":0,"wait":646,"receive":1208,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-06","alert":"Sinkholed","trigger":"y-onchain.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.y-onchain.com/gpt4xf-api/coin/candles","fqdn":"api.y-onchain.com","domain":"y-onchain.com","tld":"com"},"ip":{"addr":"104.21.80.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://y-onchain.com/","date":"2025-08-06T15:06:53.309Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"y-onchain.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 04 Aug 2025 08:36:15 GMT","end":"Sun, 02 Nov 2025 09:34:42 GMT"},"fingerprint":{"sha1":"6E:0E:D2:BE:4E:23:E6:6A:44:4D:C5:17:81:1A:5D:7F:5C:71:E7:0D","sha256":"9B:33:8A:08:BA:CF:85:A4:96:25:16:6A:FF:4D:8C:C6:29:44:36:17:B9:83:B6:33:95:A2:58:90:D4:BB:AE:A9"}}},"request":{"raw":"POST /gpt4xf-api/coin/candles HTTP/1.1\r\nHost: api.y-onchain.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json\r\nAccept-Language: en-US\r\nAccept-Encoding: gzip, deflate, br\r\nX-Requested-With: XMLHttpRequest\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\naccesstoken: \r\nContent-Length: 20\r\nOrigin: https://y-onchain.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://y-onchain.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 06 Aug 2025 15:06:53 GMT\r\ncontent-type: application/json\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=wOFLHwe%2BTCVllOzKf12yCq7YLduA0AF5xn%2B0JIwmb2pGSESCzv4PYJ5fMIbsm8i1zYplbzXVY8ANRkgbr2rdeBI6psbYWoaVQCNy6VdhZU7Ab5CsY0gv2UlsGqwXctCQXozu2w%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: *\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 96af70d32927b505-OSL\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=1963\u0026min_rtt=444\u0026rtt_var=1200\u0026sent=1628\u0026recv=347\u0026lost=0\u0026retrans=1\u0026sent_bytes=1962238\u0026recv_bytes=32255\u0026delivery_rate=29689103\u0026ss_exit_cwnd=30585\u0026ss_exit_reason=2\u0026cwnd=50735\u0026unsent_bytes=0\u0026cid=483caaa6cce61b43\u0026ts=8964\u0026inflight_dur=434\u0026x=40\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":32203,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"226acc37d76559a7e5051a1b06337802","sha1":"3cc5081aa3e5b0ce2a5fb3d9714810e5a9901f87","sha256":"b10a76286282a0a17b85e7443cea1ced39e7458de79d3092463c7d138bfec158","sha512":"9d35c7b4099ed7e784f12d477b20f3f7389b3dc1335a04381bd369483c436ac42c67c78289ab0c529bd242da0de3813fc696b29c70cbb811af4278bfdf02c558","ssdeep":"192:p/MU23rO1eEVbyDnTYLlplXlNVo38aY7BnA4eRqkWCWbph38GGGlGGG/L+C9CMM2:p/FV1D3jjkbU+I83","tlshash":"60e21781ac8bc479b6cddf3d293e5c4b4ce175d196a16c4c3b1ff8a58b626b8ac39041","first_seen":"2025-08-06T15:07:16.828247Z","last_seen":"2025-08-06T15:07:16.828247Z","times_seen":1,"resource_available":false,"data":null}},"time_used":804,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":520,"receive":284,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-06","alert":"Sinkholed","trigger":"api.y-onchain.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.y-onchain.com/gpt4xf-api/coin/candles","fqdn":"api.y-onchain.com","domain":"y-onchain.com","tld":"com"},"ip":{"addr":"104.21.80.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://y-onchain.com/","date":"2025-08-06T15:06:53.313Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"y-onchain.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 04 Aug 2025 08:36:15 GMT","end":"Sun, 02 Nov 2025 09:34:42 GMT"},"fingerprint":{"sha1":"6E:0E:D2:BE:4E:23:E6:6A:44:4D:C5:17:81:1A:5D:7F:5C:71:E7:0D","sha256":"9B:33:8A:08:BA:CF:85:A4:96:25:16:6A:FF:4D:8C:C6:29:44:36:17:B9:83:B6:33:95:A2:58:90:D4:BB:AE:A9"}}},"request":{"raw":"POST /gpt4xf-api/coin/candles HTTP/1.1\r\nHost: api.y-onchain.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json\r\nAccept-Language: en-US\r\nAccept-Encoding: gzip, deflate, br\r\nX-Requested-With: XMLHttpRequest\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\naccesstoken: \r\nContent-Length: 20\r\nOrigin: https://y-onchain.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://y-onchain.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 06 Aug 2025 15:06:53 GMT\r\ncontent-type: application/json\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=NQ5mVNxgY5hfFN03xZQvIWe7tY79I3GKQ0qkASOxyJua4aDSk%2BHzX5nbFYqHylcwWh06KyqBGIy2HUzh%2F%2FY0sI%2FoulxrWN5BXmjWMko%2F6XEOy5d4cdMqXOfskBc1aLHbwYvclQ%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: *\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 96af70d32928b505-OSL\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=2075\u0026min_rtt=444\u0026rtt_var=1301\u0026sent=1625\u0026recv=346\u0026lost=0\u0026retrans=1\u0026sent_bytes=1958939\u0026recv_bytes=32209\u0026delivery_rate=29689103\u0026ss_exit_cwnd=30585\u0026ss_exit_reason=2\u0026cwnd=50735\u0026unsent_bytes=0\u0026cid=483caaa6cce61b43\u0026ts=8920\u0026inflight_dur=433\u0026x=40\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":34846,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"4a9988e243edf37d82907322fd7f6de5","sha1":"7e3c7615826a28d7e888ab9d79246cc5e831e35b","sha256":"c36a6c8dded52f8102fdb97d0537ddf71f3ab61e7b032bf007109d1ff2b7c210","sha512":"3ff22d813b969421607badba40e6a162984d7c0dc9e0d7b8a2ddf38167edae9bf4db4021cfad377eccbdc9cdc3cdbda65d24fd6b6cfaf1208dc52fb228c1998c","ssdeep":"192:UkfwUJ77RJqFdWoTadOEHCe1sKKK85pI537ebqQg7vL5mKiVLU19O/aPXD3jpwpV:7mhL3cwSa0OjnVmRcJIm9T+sefU","tlshash":"57f24b824d8bc421b6cb1f280c3b4ce748c13de118957943fb97f4e14b666b8af79256","first_seen":"2025-08-06T15:07:16.829923Z","last_seen":"2025-08-06T15:07:16.829923Z","times_seen":1,"resource_available":false,"data":null}},"time_used":781,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":473,"receive":308,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-06","alert":"Sinkholed","trigger":"api.y-onchain.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.y-onchain.com/gpt4xf-api/coin/candles","fqdn":"api.y-onchain.com","domain":"y-onchain.com","tld":"com"},"ip":{"addr":"104.21.80.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://y-onchain.com/","date":"2025-08-06T15:06:53.345Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"y-onchain.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 04 Aug 2025 08:36:15 GMT","end":"Sun, 02 Nov 2025 09:34:42 GMT"},"fingerprint":{"sha1":"6E:0E:D2:BE:4E:23:E6:6A:44:4D:C5:17:81:1A:5D:7F:5C:71:E7:0D","sha256":"9B:33:8A:08:BA:CF:85:A4:96:25:16:6A:FF:4D:8C:C6:29:44:36:17:B9:83:B6:33:95:A2:58:90:D4:BB:AE:A9"}}},"request":{"raw":"POST /gpt4xf-api/coin/candles HTTP/1.1\r\nHost: api.y-onchain.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json\r\nAccept-Language: en-US\r\nAccept-Encoding: gzip, deflate, br\r\nX-Requested-With: XMLHttpRequest\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\naccesstoken: \r\nContent-Length: 20\r\nOrigin: https://y-onchain.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://y-onchain.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 06 Aug 2025 15:06:53 GMT\r\ncontent-type: application/json\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=neSkUlOSiPMa0%2F1kLtuRUL0h8XIbCgwiLG5wEwVNmFMmOm%2BBuxM%2Fp6uaC9fNumcf%2FsCk3U6neoINu0zyrs9NrXKhL9iTWSiV%2FlaKLXAHm30Q8cWfmBWpbhdWdiXkQ5fGSo5BPQ%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: *\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 96af70d36931b505-OSL\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=1800\u0026min_rtt=444\u0026rtt_var=960\u0026sent=1635\u0026recv=349\u0026lost=0\u0026retrans=1\u0026sent_bytes=1969493\u0026recv_bytes=32346\u0026delivery_rate=29689103\u0026ss_exit_cwnd=30585\u0026ss_exit_reason=2\u0026cwnd=50735\u0026unsent_bytes=0\u0026cid=483caaa6cce61b43\u0026ts=9037\u0026inflight_dur=438\u0026x=40\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":32720,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"503c0bcd27c376074739dd6bdf0dd0b8","sha1":"b861e86ea16d45255f5f1e792c15fde7e81f814c","sha256":"5cf9643a84bc887c1576f868cd5d06e2347ebdac18cd4ece42107f2bcb8f224a","sha512":"d665152a0743caf2018674a68f5406351830e1e12805933804475f5c635f4274175c6bdacfbfedb7d9357c766bdf866e27c96df0c25efc1c29846d2043febb1b","ssdeep":"384:RpcuMqjJfnFRVBaan80n/zxIBfN17rBhzjzpieeMDP2XfP56P+:Tcu3nFR8+oNNpLDA56P+","tlshash":"41e2acf08d8fc520f6895f38d93e1c2b98d1b1aa6ba237007f67f59166666f3e035142","first_seen":"2025-08-06T15:07:16.831969Z","last_seen":"2025-08-06T15:07:16.831969Z","times_seen":1,"resource_available":false,"data":null}},"time_used":883,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":557,"receive":326,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-06","alert":"Sinkholed","trigger":"api.y-onchain.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.y-onchain.com/gpt4xf-api/coin/candles","fqdn":"api.y-onchain.com","domain":"y-onchain.com","tld":"com"},"ip":{"addr":"104.21.80.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://y-onchain.com/","date":"2025-08-06T15:06:53.381Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"y-onchain.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 04 Aug 2025 08:36:15 GMT","end":"Sun, 02 Nov 2025 09:34:42 GMT"},"fingerprint":{"sha1":"6E:0E:D2:BE:4E:23:E6:6A:44:4D:C5:17:81:1A:5D:7F:5C:71:E7:0D","sha256":"9B:33:8A:08:BA:CF:85:A4:96:25:16:6A:FF:4D:8C:C6:29:44:36:17:B9:83:B6:33:95:A2:58:90:D4:BB:AE:A9"}}},"request":{"raw":"POST /gpt4xf-api/coin/candles HTTP/1.1\r\nHost: api.y-onchain.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json\r\nAccept-Language: en-US\r\nAccept-Encoding: gzip, deflate, br\r\nX-Requested-With: XMLHttpRequest\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\naccesstoken: \r\nContent-Length: 19\r\nOrigin: https://y-onchain.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://y-onchain.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 06 Aug 2025 15:06:54 GMT\r\ncontent-type: application/json\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=gIO%2BAmfYrH1sLIJ72ic4n9uxBJE%2F%2Fl3kuUAjQ2eWifCh%2BfRWWG3ko4QVwF4x2hxa%2Fo2OIp4JqSNr8YGvEl%2BB%2BXxpjGwl9VK24VMA1qsgjdpZ2vRc%2BdGfGNNgw0QdMk92g58eEg%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: *\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 96af70d38937b505-OSL\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=2191\u0026min_rtt=444\u0026rtt_var=1228\u0026sent=1661\u0026recv=356\u0026lost=0\u0026retrans=1\u0026sent_bytes=1993274\u0026recv_bytes=32661\u0026delivery_rate=29689103\u0026ss_exit_cwnd=30585\u0026ss_exit_reason=2\u0026cwnd=50735\u0026unsent_bytes=0\u0026cid=483caaa6cce61b43\u0026ts=9183\u0026inflight_dur=458\u0026x=40\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":35651,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"60f8cfd32b6da6acef1c3f2382bfb8a6","sha1":"e7c2d19259adf3a5c3a454d1fdd027ab6c65ad11","sha256":"d34d08052b416be5c1b4e38e48712f5ad3ea38a7c702aa85dedb25b9e590e80d","sha512":"6f82ff968185ed3e31aa925da724b1fddee84911c641e25aef9999cb7da32456b68b3e6b725538789ab237a52162e78c486de82a057a765009cb09c32b9b8081","ssdeep":"384:9zFeMmge2SpLYUh2FtGIp3mf30z2LDKt+Lde8HWl:dg/LhW2LD8Ede8Q","tlshash":"77f200a14c8fe470fbc85f681a3b4e4a5cc176c121e7b541776bf1618ba26f8e338646","first_seen":"2025-08-06T15:07:16.833169Z","last_seen":"2025-08-06T15:07:16.833169Z","times_seen":1,"resource_available":false,"data":null}},"time_used":985,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":683,"receive":302,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-06","alert":"Sinkholed","trigger":"api.y-onchain.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.y-onchain.com/gpt4xf-api/coin/candles","fqdn":"api.y-onchain.com","domain":"y-onchain.com","tld":"com"},"ip":{"addr":"104.21.80.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://y-onchain.com/","date":"2025-08-06T15:06:53.392Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"y-onchain.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 04 Aug 2025 08:36:15 GMT","end":"Sun, 02 Nov 2025 09:34:42 GMT"},"fingerprint":{"sha1":"6E:0E:D2:BE:4E:23:E6:6A:44:4D:C5:17:81:1A:5D:7F:5C:71:E7:0D","sha256":"9B:33:8A:08:BA:CF:85:A4:96:25:16:6A:FF:4D:8C:C6:29:44:36:17:B9:83:B6:33:95:A2:58:90:D4:BB:AE:A9"}}},"request":{"raw":"POST /gpt4xf-api/coin/candles HTTP/1.1\r\nHost: api.y-onchain.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json\r\nAccept-Language: en-US\r\nAccept-Encoding: gzip, deflate, br\r\nX-Requested-With: XMLHttpRequest\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\naccesstoken: \r\nContent-Length: 20\r\nOrigin: https://y-onchain.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://y-onchain.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 06 Aug 2025 15:06:54 GMT\r\ncontent-type: application/json\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=1pkwZgnQ8q5UPPG1Z3N5uNN0wKgc%2BzvEzpyHVUxXgAK3HmmNA9RbpOi0KbqOAMr%2FqjwbLBMA8HomUxtK6zsFH0rR8NhKc8bEmtvql%2FxALEiQJLYojNgHLRdfUcYNUATfhUfuwA%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: *\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 96af70d39944b505-OSL\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=1402\u0026min_rtt=444\u0026rtt_var=554\u0026sent=1697\u0026recv=368\u0026lost=0\u0026retrans=1\u0026sent_bytes=2023040\u0026recv_bytes=33200\u0026delivery_rate=29689103\u0026ss_exit_cwnd=30585\u0026ss_exit_reason=2\u0026cwnd=50735\u0026unsent_bytes=0\u0026cid=483caaa6cce61b43\u0026ts=9392\u0026inflight_dur=517\u0026x=40\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":31446,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"1db5ee6ffbf44bb50f789a3fba529bba","sha1":"d958eb1b73b3712095b2b92d714a672a33f1479f","sha256":"fb75bce593eaa1cbe901d2e3c7df842d2d86987c2fc73ac757254330ec51d89f","sha512":"63d7c5cc61f71dfa7c41c288eb5ce07ed2c2352ba07419b5909f477e05ca7fe3e4c0ab8326e86cee922d34223fa8f4a2ba360ace8a5b8fa9af4a35f896991c48","ssdeep":"384:PyAA1qDHDHx0uuupAA1qCCCkCCCJCCAFCCC9uuu2uuue111NCCCEDDhuDDDDsssa:Z1KAqhsi8ddfle","tlshash":"65e2f5814fcbc6f1b6ca5f29187a2c166bc131c5a4d1b602f717f8324e62fbda574286","first_seen":"2025-08-06T15:07:16.834978Z","last_seen":"2025-08-06T15:07:16.834978Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1174,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":882,"receive":292,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-06","alert":"Sinkholed","trigger":"api.y-onchain.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"y-onchain.com/main.js","fqdn":"y-onchain.com","domain":"y-onchain.com","tld":"com"},"ip":{"addr":"104.21.80.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://y-onchain.com/","date":"2025-08-06T15:06:45.087Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"y-onchain.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 04 Aug 2025 08:36:15 GMT","end":"Sun, 02 Nov 2025 09:34:42 GMT"},"fingerprint":{"sha1":"6E:0E:D2:BE:4E:23:E6:6A:44:4D:C5:17:81:1A:5D:7F:5C:71:E7:0D","sha256":"9B:33:8A:08:BA:CF:85:A4:96:25:16:6A:FF:4D:8C:C6:29:44:36:17:B9:83:B6:33:95:A2:58:90:D4:BB:AE:A9"}}},"request":{"raw":"GET /main.js HTTP/1.1\r\nHost: y-onchain.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://y-onchain.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 06 Aug 2025 15:06:45 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\nlast-modified: Wed, 30 Apr 2025 05:54:55 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rtdoDGLyOFovRKXbXlCIYyrKFFYZDKhqPP%2Bpl2obabEpQBz1kVHyu8agTBPa3jzcQxuk8SRLlkOox6KDFcy4U5e7Dqsp7a3pdCsC\"}]}\r\nvary: accept-encoding\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncontent-encoding: br\r\ncf-ray: 96af709fcd3a0b51-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-10T03:49:04.585278Z","times_seen":17810757,"resource_available":true,"data":null}},"time_used":616,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":616,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-06","alert":"Sinkholed","trigger":"y-onchain.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"y-onchain.com/static/js/pages-home-home~pages-markets-index~pages-trade-kline.4f6fe384.js","fqdn":"y-onchain.com","domain":"y-onchain.com","tld":"com"},"ip":{"addr":"104.21.80.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://y-onchain.com/","date":"2025-08-06T15:06:47.891Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"y-onchain.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 04 Aug 2025 08:36:15 GMT","end":"Sun, 02 Nov 2025 09:34:42 GMT"},"fingerprint":{"sha1":"6E:0E:D2:BE:4E:23:E6:6A:44:4D:C5:17:81:1A:5D:7F:5C:71:E7:0D","sha256":"9B:33:8A:08:BA:CF:85:A4:96:25:16:6A:FF:4D:8C:C6:29:44:36:17:B9:83:B6:33:95:A2:58:90:D4:BB:AE:A9"}}},"request":{"raw":"GET /static/js/pages-home-home~pages-markets-index~pages-trade-kline.4f6fe384.js HTTP/1.1\r\nHost: y-onchain.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://y-onchain.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 06 Aug 2025 15:06:48 GMT\r\ncontent-type: application/javascript\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=tsUZV0qKeU9rQkGxg39rC3i%2FeAsQNWk8E%2B9yihDntEXiND2%2BDSXiBnzSYmJdFRpdQ0LAPcySVV3MtQuNRbcMROuNGxPrpd280UcPfxlCyWLGJR1uqUAxFaqz1UQ3sogu\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nlast-modified: Wed, 30 Apr 2025 05:54:55 GMT\r\netag: W/\"6811bb2f-48980\"\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncontent-encoding: br\r\ncf-ray: 96af70b15fb8b505-OSL\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=2772\u0026min_rtt=444\u0026rtt_var=2637\u0026sent=102\u0026recv=127\u0026lost=0\u0026retrans=0\u0026sent_bytes=21717\u0026recv_bytes=8633\u0026delivery_rate=4811426\u0026ss_exit_cwnd=0\u0026ss_exit_reason=0\u0026cwnd=26042\u0026unsent_bytes=0\u0026cid=483caaa6cce61b43\u0026ts=3666\u0026inflight_dur=57\u0026x=40\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":297344,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65532), with no line terminators","md5":"f090c1eb3975dfdf33580b3c0a49d3b3","sha1":"a27c630934d877b1a39a4d0742dd76855eaee9bb","sha256":"cd46ad06cd3d38fd992aa084d4d94f85ba19aee793c1101b6746ba79c1ab3317","sha512":"d6472694bcb555d49d2a83a234db0f5a566e0a941672dbe76c2664e266f1e0bf1cbc2f3a6fd78902ef53ad47b078402bb13b04f5cac0ea32b468aa6d9420eb36","ssdeep":"3072:1nh8n0DQ8cvqvskgaaQeAy3sZvBS6qvBT0W3Gig5shtpl2Tx48Ykr:1+0DQ89vXPeAZvBGZA54tpl4NYkr","tlshash":"9254f8dcb284742942e73174047f150b92366909790b8998fa69e5debcbc58e327bf3c","first_seen":"2025-08-06T15:07:16.836902Z","last_seen":"2025-08-06T15:07:16.836902Z","times_seen":1,"resource_available":true,"data":null}},"time_used":1851,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":640,"receive":1211,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-06","alert":"Sinkholed","trigger":"y-onchain.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"y-onchain.com/static/img/trade.png","fqdn":"y-onchain.com","domain":"y-onchain.com","tld":"com"},"ip":{"addr":"104.21.80.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://y-onchain.com/","date":"2025-08-06T15:06:51.824Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"y-onchain.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 04 Aug 2025 08:36:15 GMT","end":"Sun, 02 Nov 2025 09:34:42 GMT"},"fingerprint":{"sha1":"6E:0E:D2:BE:4E:23:E6:6A:44:4D:C5:17:81:1A:5D:7F:5C:71:E7:0D","sha256":"9B:33:8A:08:BA:CF:85:A4:96:25:16:6A:FF:4D:8C:C6:29:44:36:17:B9:83:B6:33:95:A2:58:90:D4:BB:AE:A9"}}},"request":{"raw":"GET /static/img/trade.png HTTP/1.1\r\nHost: y-onchain.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://y-onchain.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 06 Aug 2025 15:06:52 GMT\r\ncontent-type: image/png\r\ncontent-length: 152225\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=jqswIdVXEqB55jFkAdCndMr%2BGdMKfaLDNlTMb0JEl4sFqrw0asHRn5io1lDY7GpzLoxIuHJezbjCUcGHFmpMdpKwkKou%2Fmb1qIFgeGMT66V79ORt6gq3HHr9SP%2F64Qp0\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nlast-modified: Wed, 30 Apr 2025 05:54:55 GMT\r\netag: \"6811bb2f-252a1\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncf-ray: 96af70c9d89bb505-OSL\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=1213\u0026min_rtt=444\u0026rtt_var=885\u0026sent=1019\u0026recv=255\u0026lost=0\u0026retrans=0\u0026sent_bytes=1202255\u0026recv_bytes=16080\u0026delivery_rate=29568302\u0026ss_exit_cwnd=30585\u0026ss_exit_reason=2\u0026cwnd=59145\u0026unsent_bytes=0\u0026cid=483caaa6cce61b43\u0026ts=7575\u0026inflight_dur=206\u0026x=40\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":152225,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1107 x 495, 8-bit/color RGBA, non-interlaced","md5":"7877ad0ea5379cfa35a34a8598553d32","sha1":"8bb18fc398b4012d7621cb1295b36b5ff507986e","sha256":"301c7a5d6fe1d8a8e683a426014c82d6af06d9b1f6665509560b24e585c47755","sha512":"805fc76dc8fe5615f76ed72c07fe1ee9d7d7ab28eae483ac789762a77a509f9da6ed3c8c4a5742a92a812324b8b03d25a6852866e691221a5cdb7cb58e9f9785","ssdeep":"3072:14l9XJah40ESsHGUVsCQWCcNb+kA/lLBzMBSO7j+8dh:yazVsHCHJ/lLlMBS+dh","tlshash":"dde3025dc9f501870a9514b8e6ab2df2e37cb41f8ed0385a14a9b0c84cabcbd93d015f","first_seen":"2024-12-22T05:51:59.147849Z","last_seen":"2026-06-05T13:12:44.551745Z","times_seen":21,"resource_available":false,"data":null}},"time_used":1523,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":623,"receive":900,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-06","alert":"Sinkholed","trigger":"y-onchain.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.y-onchain.com/gpt4xf-api/coin/candles","fqdn":"api.y-onchain.com","domain":"y-onchain.com","tld":"com"},"ip":{"addr":"104.21.80.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://y-onchain.com/","date":"2025-08-06T15:06:52.770Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"y-onchain.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 04 Aug 2025 08:36:15 GMT","end":"Sun, 02 Nov 2025 09:34:42 GMT"},"fingerprint":{"sha1":"6E:0E:D2:BE:4E:23:E6:6A:44:4D:C5:17:81:1A:5D:7F:5C:71:E7:0D","sha256":"9B:33:8A:08:BA:CF:85:A4:96:25:16:6A:FF:4D:8C:C6:29:44:36:17:B9:83:B6:33:95:A2:58:90:D4:BB:AE:A9"}}},"request":{"raw":"OPTIONS /gpt4xf-api/coin/candles HTTP/1.1\r\nHost: api.y-onchain.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: accesstoken,x-requested-with\r\nReferer: https://y-onchain.com/\r\nOrigin: https://y-onchain.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 06 Aug 2025 15:06:53 GMT\r\ncontent-length: 0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=xd44hqfdTDxbZQ3EpTuRvMCOMeZEP7rJ2jpkwJyWpAryOcoNce%2FmeHc0qHuQvZmG4hkgiUclplSgancJrPCw4%2BQDDeX9IDbsQU72oL8xAmd75Y6PHUfX%2Ft4wf5wNHQsMAo4VoQ%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,HEAD,POST,PUT,DELETE,OPTIONS\r\naccess-control-allow-headers: accesstoken, x-requested-with\r\naccess-control-max-age: 1800\r\nallow: GET, HEAD, POST, PUT, DELETE, OPTIONS, PATCH\r\ncf-cache-status: DYNAMIC\r\ncf-ray: 96af70cfa909b505-OSL\r\nserver: cloudflare\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=822\u0026min_rtt=444\u0026rtt_var=147\u0026sent=1564\u0026recv=327\u0026lost=0\u0026retrans=0\u0026sent_bytes=1897735\u0026recv_bytes=28691\u0026delivery_rate=29689103\u0026ss_exit_cwnd=30585\u0026ss_exit_reason=2\u0026cwnd=50735\u0026unsent_bytes=0\u0026cid=483caaa6cce61b43\u0026ts=8511\u0026inflight_dur=361\u0026x=40\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-10T03:49:04.585278Z","times_seen":17810757,"resource_available":true,"data":null}},"time_used":626,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":626,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-06","alert":"Sinkholed","trigger":"api.y-onchain.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.y-onchain.com/gpt4xf-api/coin/candles","fqdn":"api.y-onchain.com","domain":"y-onchain.com","tld":"com"},"ip":{"addr":"104.21.80.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://y-onchain.com/","date":"2025-08-06T15:06:53.406Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"y-onchain.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 04 Aug 2025 08:36:15 GMT","end":"Sun, 02 Nov 2025 09:34:42 GMT"},"fingerprint":{"sha1":"6E:0E:D2:BE:4E:23:E6:6A:44:4D:C5:17:81:1A:5D:7F:5C:71:E7:0D","sha256":"9B:33:8A:08:BA:CF:85:A4:96:25:16:6A:FF:4D:8C:C6:29:44:36:17:B9:83:B6:33:95:A2:58:90:D4:BB:AE:A9"}}},"request":{"raw":"POST /gpt4xf-api/coin/candles HTTP/1.1\r\nHost: api.y-onchain.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json\r\nAccept-Language: en-US\r\nAccept-Encoding: gzip, deflate, br\r\nX-Requested-With: XMLHttpRequest\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\naccesstoken: \r\nContent-Length: 20\r\nOrigin: https://y-onchain.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://y-onchain.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 06 Aug 2025 15:06:54 GMT\r\ncontent-type: application/json\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=qrXZP0ohC2Ny%2FNQ7o0LNUw1P%2BNxRhovvfgywUncZCgl5cNw9r%2FxsGWy5yyfYqXleimRawFGCs6qRH8ECXexghqw3XQnY8IJ5Bvk2m9a123uBPMlk%2FxN%2BW4MwWIDUP98JKNftsA%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: *\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 96af70d3a950b505-OSL\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=1294\u0026min_rtt=444\u0026rtt_var=505\u0026sent=1704\u0026recv=370\u0026lost=0\u0026retrans=1\u0026sent_bytes=2029070\u0026recv_bytes=33288\u0026delivery_rate=29689103\u0026ss_exit_cwnd=30585\u0026ss_exit_reason=2\u0026cwnd=50735\u0026unsent_bytes=0\u0026cid=483caaa6cce61b43\u0026ts=9396\u0026inflight_dur=520\u0026x=40\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":29751,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"47bb0378d8544dac392560c559f64ad6","sha1":"ed4357adbe7a89dcbac98e5044d2e63700024e9d","sha256":"445e37c1e095712f09733e0e6c00fe3d0bb5f29b1601e58022b484a79d361928","sha512":"b0bf008e4150f25318389c4055b6109ad31848c025e96886fe6f37f3877ce44e61c3633977ca67daa4d1296cde3cc32c9425a545feaa39c26c2ad8e41393cb04","ssdeep":"192:qaWsZwQF8hl0l3MFN1LC1PmeH+wrd0vQkYPkUOU+pfkkk6YihHyIvsTAj1L3hCHY:qaWQw6Ka0pM5cj1LxCHY","tlshash":"c4d2d1866c8fc4b5b54c5f7c0b3f5c4b8cc5b196189df8e43727f8a54ba62b4a03a846","first_seen":"2025-08-06T15:07:16.839483Z","last_seen":"2025-08-06T15:07:16.839483Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1152,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":872,"receive":280,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-06","alert":"Sinkholed","trigger":"api.y-onchain.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.y-onchain.com/gpt4xf-api/coin/candles","fqdn":"api.y-onchain.com","domain":"y-onchain.com","tld":"com"},"ip":{"addr":"104.21.80.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://y-onchain.com/","date":"2025-08-06T15:06:53.408Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"y-onchain.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 04 Aug 2025 08:36:15 GMT","end":"Sun, 02 Nov 2025 09:34:42 GMT"},"fingerprint":{"sha1":"6E:0E:D2:BE:4E:23:E6:6A:44:4D:C5:17:81:1A:5D:7F:5C:71:E7:0D","sha256":"9B:33:8A:08:BA:CF:85:A4:96:25:16:6A:FF:4D:8C:C6:29:44:36:17:B9:83:B6:33:95:A2:58:90:D4:BB:AE:A9"}}},"request":{"raw":"POST /gpt4xf-api/coin/candles HTTP/1.1\r\nHost: api.y-onchain.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json\r\nAccept-Language: en-US\r\nAccept-Encoding: gzip, deflate, br\r\nX-Requested-With: XMLHttpRequest\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\naccesstoken: \r\nContent-Length: 20\r\nOrigin: https://y-onchain.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://y-onchain.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 06 Aug 2025 15:06:54 GMT\r\ncontent-type: application/json\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=KtRUBBOiyeL3zDzLvurFJ%2F4jCGf6eON00RqL%2F%2FoahczdFn0KYwjx8lrDxr0eO7L0vu%2FtR0BwmZq%2FFQywxKllZEkXubXeDpt6LQl3P3sAVJV5aCitSomhUalVZLhqYYo0zTnZ1w%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: *\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 96af70d3b951b505-OSL\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=1179\u0026min_rtt=444\u0026rtt_var=396\u0026sent=1713\u0026recv=373\u0026lost=0\u0026retrans=1\u0026sent_bytes=2037735\u0026recv_bytes=33420\u0026delivery_rate=29689103\u0026ss_exit_cwnd=30585\u0026ss_exit_reason=2\u0026cwnd=50735\u0026unsent_bytes=0\u0026cid=483caaa6cce61b43\u0026ts=9452\u0026inflight_dur=523\u0026x=40\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":36,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"e0cf7c324ca28ab3236075087b116c43","sha1":"e26d4d6ef8de5274c7b05d0ef9ecfe5a931679de","sha256":"f061ade4192a92e320f9d556dac2ec2a4918435b3f1a49e715bed6f67dd54914","sha512":"82891a8f40f30277fd4d165d80f8b1cf3ed4f13dd86d4aca38628e1b2fe185592a039afa1e8328126dbd52ccdb6ce203123640c20b1850d0935352dc84aac2af","ssdeep":"","tlshash":"93800023283c08838e0238cc280e0b8822e822808e000320cc8ca228cb080a8b282830","first_seen":"2024-08-20T15:06:24.370009Z","last_seen":"2026-05-17T10:59:44.361077Z","times_seen":12,"resource_available":false,"data":null}},"time_used":923,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":922,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-06","alert":"Sinkholed","trigger":"api.y-onchain.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"y-onchain.com/static/js/chunk-vendors.165d6e9d.js","fqdn":"y-onchain.com","domain":"y-onchain.com","tld":"com"},"ip":{"addr":"104.21.80.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://y-onchain.com/","date":"2025-08-06T15:06:45.089Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"y-onchain.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 04 Aug 2025 08:36:15 GMT","end":"Sun, 02 Nov 2025 09:34:42 GMT"},"fingerprint":{"sha1":"6E:0E:D2:BE:4E:23:E6:6A:44:4D:C5:17:81:1A:5D:7F:5C:71:E7:0D","sha256":"9B:33:8A:08:BA:CF:85:A4:96:25:16:6A:FF:4D:8C:C6:29:44:36:17:B9:83:B6:33:95:A2:58:90:D4:BB:AE:A9"}}},"request":{"raw":"GET /static/js/chunk-vendors.165d6e9d.js HTTP/1.1\r\nHost: y-onchain.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://y-onchain.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 06 Aug 2025 15:06:45 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Wed, 30 Apr 2025 05:54:55 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mbDG0DLQIYT55ejii2vZtGR7VbZCwwmAGjMwi%2F%2BNMTAdffCjiLbNeLqDkLFRhuHTkh4zK22MS32Hu1Qffo3dEf7jLmZBUR28zzb3\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"6811bb2f-cc4c8\"\r\ncontent-encoding: br\r\ncf-ray: 96af709fcd3f0b51-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":836808,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (42410)","md5":"3562eb39c962a528a129a825583c83f7","sha1":"668a695d0ba974f0d4254cbdc5b73bda0b9f66e2","sha256":"79ef51b70869e5ff1ee57b88432671455fe0a57032290774d41944a3be3fbef1","sha512":"4ef1b1d89404d8acbee1533e468e1961c579c713493bc70ed2f0a2bc54424fe0ea80910c951640d44f35e8a9af9f2d11202380cb848e107160490e198bc1ff0e","ssdeep":"6144:QQyCl1dIWkr4UggoXtwTfmPTb3p/JvXNT8UY3vm79Da/hRVkvSz0erRG9Lu/:QVCQ0GodwTOR/pXt+wDVvSzpGQ","tlshash":"0d05f78df281b0b60be760b5403f220ba2376959b40ac4d8f675e4d4ad7894e6237f7d","first_seen":"2025-01-19T00:01:08.336207Z","last_seen":"2025-08-06T15:07:16.842187Z","times_seen":5,"resource_available":true,"data":null}},"time_used":629,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":629,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-06","alert":"Sinkholed","trigger":"y-onchain.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.y-onchain.com/gpt4xf-api/coin/candles","fqdn":"api.y-onchain.com","domain":"y-onchain.com","tld":"com"},"ip":{"addr":"104.21.80.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://y-onchain.com/","date":"2025-08-06T15:06:52.715Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"y-onchain.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 04 Aug 2025 08:36:15 GMT","end":"Sun, 02 Nov 2025 09:34:42 GMT"},"fingerprint":{"sha1":"6E:0E:D2:BE:4E:23:E6:6A:44:4D:C5:17:81:1A:5D:7F:5C:71:E7:0D","sha256":"9B:33:8A:08:BA:CF:85:A4:96:25:16:6A:FF:4D:8C:C6:29:44:36:17:B9:83:B6:33:95:A2:58:90:D4:BB:AE:A9"}}},"request":{"raw":"OPTIONS /gpt4xf-api/coin/candles HTTP/1.1\r\nHost: api.y-onchain.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: accesstoken,x-requested-with\r\nReferer: https://y-onchain.com/\r\nOrigin: https://y-onchain.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 06 Aug 2025 15:06:53 GMT\r\ncontent-length: 0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=BdwomzR8dyp0Jp8TuLJWlgjhiwt%2F2ZFNDtyRkIaxD81zTlyWhVy30OE1ACnIx4ECFCMPepsx34OKHHDM4lTen8am1h0rGQoZK4md7CpdycKEx4cAqFR4PH%2FZzvZbkD2V4Nr3xg%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,HEAD,POST,PUT,DELETE,OPTIONS\r\naccess-control-allow-headers: accesstoken, x-requested-with\r\naccess-control-max-age: 1800\r\nallow: GET, HEAD, POST, PUT, DELETE, OPTIONS, PATCH\r\ncf-cache-status: DYNAMIC\r\ncf-ray: 96af70cf48fcb505-OSL\r\nserver: cloudflare\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=859\u0026min_rtt=444\u0026rtt_var=168\u0026sent=1422\u0026recv=300\u0026lost=0\u0026retrans=0\u0026sent_bytes=1717385\u0026recv_bytes=24816\u0026delivery_rate=29568302\u0026ss_exit_cwnd=30585\u0026ss_exit_reason=2\u0026cwnd=76138\u0026unsent_bytes=0\u0026cid=483caaa6cce61b43\u0026ts=8438\u0026inflight_dur=303\u0026x=40\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-10T03:49:04.585278Z","times_seen":17810757,"resource_available":true,"data":null}},"time_used":622,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":621,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-06","alert":"Sinkholed","trigger":"api.y-onchain.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.y-onchain.com/gpt4xf-api/coin/candles","fqdn":"api.y-onchain.com","domain":"y-onchain.com","tld":"com"},"ip":{"addr":"104.21.80.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://y-onchain.com/","date":"2025-08-06T15:06:52.766Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"y-onchain.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 04 Aug 2025 08:36:15 GMT","end":"Sun, 02 Nov 2025 09:34:42 GMT"},"fingerprint":{"sha1":"6E:0E:D2:BE:4E:23:E6:6A:44:4D:C5:17:81:1A:5D:7F:5C:71:E7:0D","sha256":"9B:33:8A:08:BA:CF:85:A4:96:25:16:6A:FF:4D:8C:C6:29:44:36:17:B9:83:B6:33:95:A2:58:90:D4:BB:AE:A9"}}},"request":{"raw":"OPTIONS /gpt4xf-api/coin/candles HTTP/1.1\r\nHost: api.y-onchain.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: accesstoken,x-requested-with\r\nReferer: https://y-onchain.com/\r\nOrigin: https://y-onchain.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 06 Aug 2025 15:06:53 GMT\r\ncontent-length: 0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=LO9SW78IKTcWVW8lEt5Z5ZEWxoN2ioxvr1jCNii8obdZ29hZXI135P95j5zlrtKWw9EV8scd7DxcGZ9DlzXiMgIcClxd0Fs2Vgit2%2BcD1x38lTBPFnAD0E0zAbzxTHT7XN82yg%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,HEAD,POST,PUT,DELETE,OPTIONS\r\naccess-control-allow-headers: accesstoken, x-requested-with\r\naccess-control-max-age: 1800\r\nallow: GET, HEAD, POST, PUT, DELETE, OPTIONS, PATCH\r\ncf-cache-status: DYNAMIC\r\ncf-ray: 96af70cfa907b505-OSL\r\nserver: cloudflare\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=883\u0026min_rtt=444\u0026rtt_var=231\u0026sent=1570\u0026recv=332\u0026lost=0\u0026retrans=0\u0026sent_bytes=1899431\u0026recv_bytes=30244\u0026delivery_rate=29689103\u0026ss_exit_cwnd=30585\u0026ss_exit_reason=2\u0026cwnd=50735\u0026unsent_bytes=0\u0026cid=483caaa6cce61b43\u0026ts=8528\u0026inflight_dur=367\u0026x=40\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-10T03:49:04.585278Z","times_seen":17810757,"resource_available":true,"data":null}},"time_used":645,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":645,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-06","alert":"Sinkholed","trigger":"api.y-onchain.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.gpt4xdam.top/logo/btc.png","fqdn":"www.gpt4xdam.top","domain":"gpt4xdam.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://y-onchain.com/","date":"2025-08-06T15:06:52.852Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /logo/btc.png HTTP/1.1\r\nHost: www.gpt4xdam.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://y-onchain.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-10T03:49:04.585278Z","times_seen":17810757,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-06","alert":"Sinkholed","trigger":"www.gpt4xdam.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.gpt4xdam.top/logo/gala.png","fqdn":"www.gpt4xdam.top","domain":"gpt4xdam.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://y-onchain.com/","date":"2025-08-06T15:06:52.886Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /logo/gala.png HTTP/1.1\r\nHost: www.gpt4xdam.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://y-onchain.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-10T03:49:04.585278Z","times_seen":17810757,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-06","alert":"Sinkholed","trigger":"www.gpt4xdam.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.gpt4xdam.top/logo/ygg.png","fqdn":"www.gpt4xdam.top","domain":"gpt4xdam.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://y-onchain.com/","date":"2025-08-06T15:06:52.925Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /logo/ygg.png HTTP/1.1\r\nHost: www.gpt4xdam.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://y-onchain.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-10T03:49:04.585278Z","times_seen":17810757,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-06","alert":"Sinkholed","trigger":"www.gpt4xdam.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.y-onchain.com/gpt4xf-api/coin/candles","fqdn":"api.y-onchain.com","domain":"y-onchain.com","tld":"com"},"ip":{"addr":"104.21.80.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://y-onchain.com/","date":"2025-08-06T15:06:53.419Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"y-onchain.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 04 Aug 2025 08:36:15 GMT","end":"Sun, 02 Nov 2025 09:34:42 GMT"},"fingerprint":{"sha1":"6E:0E:D2:BE:4E:23:E6:6A:44:4D:C5:17:81:1A:5D:7F:5C:71:E7:0D","sha256":"9B:33:8A:08:BA:CF:85:A4:96:25:16:6A:FF:4D:8C:C6:29:44:36:17:B9:83:B6:33:95:A2:58:90:D4:BB:AE:A9"}}},"request":{"raw":"POST /gpt4xf-api/coin/candles HTTP/1.1\r\nHost: api.y-onchain.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json\r\nAccept-Language: en-US\r\nAccept-Encoding: gzip, deflate, br\r\nX-Requested-With: XMLHttpRequest\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\naccesstoken: \r\nContent-Length: 20\r\nOrigin: https://y-onchain.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://y-onchain.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 06 Aug 2025 15:06:54 GMT\r\ncontent-type: application/json\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=FgrIFd0W15DjGjvSSIh%2Fg4xcd1nFv0SMALdZKnJwmd2R5ZOuciMzFozpB%2FJLKRc8sd85uPavIQ9g43McnL5m8shGIDNR64c5TyEJt%2F3JvUtI8cxBLeSCFTO41cjNkK59gv5Z1A%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: *\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 96af70d3d954b505-OSL\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=1302\u0026min_rtt=444\u0026rtt_var=483\u0026sent=1730\u0026recv=377\u0026lost=0\u0026retrans=1\u0026sent_bytes=2053564\u0026recv_bytes=33597\u0026delivery_rate=29689103\u0026ss_exit_cwnd=30585\u0026ss_exit_reason=2\u0026cwnd=50735\u0026unsent_bytes=0\u0026cid=483caaa6cce61b43\u0026ts=9534\u0026inflight_dur=542\u0026x=40\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":30175,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"e4a2345fd9b5b450e94c0319b3726b31","sha1":"f119b955e0d59ca601d696513219b6aa5ad634a1","sha256":"128f2a4487f9b8188e619d7e7abd970f8bbcdabce91330f4b5f1721ee72bb524","sha512":"9fd2be21d5cfc3af1af2656bdd446f08963a2cd6bba15d1e48fa32bb93bcba9a3594a5af3805ed12fe24751d3674aa624db03833a8fe30ca5bd84e69d51c42a6","ssdeep":"192:kXXXcJwbwiRJ6DfeZ75aYvnEp516Ygvk3o4foG1hCE2nS77foN:nj1K21hH2nwoN","tlshash":"abd29b914c8bd530b6cd5f3c183a9cd78c9d3581a4ada8413b2bfcad4b62bf4ec25592","first_seen":"2025-08-06T15:07:16.845293Z","last_seen":"2025-08-06T15:07:16.845293Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1288,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":984,"receive":304,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-06","alert":"Sinkholed","trigger":"api.y-onchain.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.y-onchain.com/gpt4xf-api/coin/exinfos","fqdn":"api.y-onchain.com","domain":"y-onchain.com","tld":"com"},"ip":{"addr":"104.21.112.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://y-onchain.com/","date":"2025-08-06T15:06:52.271Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"y-onchain.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 04 Aug 2025 08:36:15 GMT","end":"Sun, 02 Nov 2025 09:34:42 GMT"},"fingerprint":{"sha1":"6E:0E:D2:BE:4E:23:E6:6A:44:4D:C5:17:81:1A:5D:7F:5C:71:E7:0D","sha256":"9B:33:8A:08:BA:CF:85:A4:96:25:16:6A:FF:4D:8C:C6:29:44:36:17:B9:83:B6:33:95:A2:58:90:D4:BB:AE:A9"}}},"request":{"raw":"POST /gpt4xf-api/coin/exinfos HTTP/1.1\r\nHost: api.y-onchain.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json\r\nAccept-Language: en-US\r\nAccept-Encoding: gzip, deflate, br\r\nX-Requested-With: XMLHttpRequest\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\naccesstoken: \r\nContent-Length: 0\r\nOrigin: https://y-onchain.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://y-onchain.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 06 Aug 2025 15:06:52 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: *\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vTJ%2BKzyjIIgT%2BrVHqmTkzmCPx7hNzjbnbaOe8FATz3oLANejSQEv2S30GawjddgBRXFMgTyJuHaJnhg6A4LQLgFDOKksQWIY3wh59b9pUw%3D%3D\"}]}\r\ncontent-encoding: br\r\ncf-ray: 96af70ccac77712d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1044,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"c99cba5e750a23f3fae901c3a7c2b142","sha1":"649b0d00238d64dcb53688c932f3ab344735bb8f","sha256":"c5813a2c9dcce61faecf21e38c47686c652495fe879bd1cc0e8f12fd830e2bf0","sha512":"986299ba93343de6ca99146bf53fff7db9220930adad28b1277fd69a5325d8b95bf6aea9012f74574edbf271e8207795ee221cbbef1485c93bfd72825766bf5a","ssdeep":"","tlshash":"e411635f225cbdcd13ad5ac4289fae6de8d7250ffcd0da4640598ba0493cbe3e0c9651","first_seen":"2024-12-22T05:51:59.150453Z","last_seen":"2025-08-06T15:07:16.847901Z","times_seen":3,"resource_available":false,"data":null}},"time_used":301,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":301,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-06","alert":"Sinkholed","trigger":"api.y-onchain.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.y-onchain.com/gpt4xf-api/coin/candles","fqdn":"api.y-onchain.com","domain":"y-onchain.com","tld":"com"},"ip":{"addr":"104.21.80.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://y-onchain.com/","date":"2025-08-06T15:06:52.708Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"y-onchain.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 04 Aug 2025 08:36:15 GMT","end":"Sun, 02 Nov 2025 09:34:42 GMT"},"fingerprint":{"sha1":"6E:0E:D2:BE:4E:23:E6:6A:44:4D:C5:17:81:1A:5D:7F:5C:71:E7:0D","sha256":"9B:33:8A:08:BA:CF:85:A4:96:25:16:6A:FF:4D:8C:C6:29:44:36:17:B9:83:B6:33:95:A2:58:90:D4:BB:AE:A9"}}},"request":{"raw":"OPTIONS /gpt4xf-api/coin/candles HTTP/1.1\r\nHost: api.y-onchain.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: accesstoken,x-requested-with\r\nReferer: https://y-onchain.com/\r\nOrigin: https://y-onchain.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 06 Aug 2025 15:06:53 GMT\r\ncontent-length: 0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=606LAMVNEK59LSHQ7JSkWP3PWB1KDo8O0LlMjCrjD7QBysaXubiPwxa7wj8T7hkZlxVPxScpeEjfitZPq2Tge4xNyjvhp7hNyHz8MhBFYY6AnBS7laznaRKobVFxce69%2B4OblQ%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,HEAD,POST,PUT,DELETE,OPTIONS\r\naccess-control-allow-headers: accesstoken, x-requested-with\r\naccess-control-max-age: 1800\r\nallow: GET, HEAD, POST, PUT, DELETE, OPTIONS, PATCH\r\ncf-cache-status: DYNAMIC\r\ncf-ray: 96af70cf38fbb505-OSL\r\nserver: cloudflare\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=856\u0026min_rtt=444\u0026rtt_var=219\u0026sent=1417\u0026recv=297\u0026lost=0\u0026retrans=0\u0026sent_bytes=1714951\u0026recv_bytes=24017\u0026delivery_rate=29568302\u0026ss_exit_cwnd=30585\u0026ss_exit_reason=2\u0026cwnd=76138\u0026unsent_bytes=0\u0026cid=483caaa6cce61b43\u0026ts=8414\u0026inflight_dur=287\u0026x=40\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-10T03:49:04.585278Z","times_seen":17810757,"resource_available":true,"data":null}},"time_used":600,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":600,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-06","alert":"Sinkholed","trigger":"api.y-onchain.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.gpt4xdam.top/logo/eth.png","fqdn":"www.gpt4xdam.top","domain":"gpt4xdam.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://y-onchain.com/","date":"2025-08-06T15:06:52.862Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /logo/eth.png HTTP/1.1\r\nHost: www.gpt4xdam.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://y-onchain.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-10T03:49:04.585278Z","times_seen":17810757,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-06","alert":"Sinkholed","trigger":"www.gpt4xdam.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.gpt4xdam.top/logo/bch.png","fqdn":"www.gpt4xdam.top","domain":"gpt4xdam.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://y-onchain.com/","date":"2025-08-06T15:06:52.869Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /logo/bch.png HTTP/1.1\r\nHost: www.gpt4xdam.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://y-onchain.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-10T03:49:04.585278Z","times_seen":17810757,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-06","alert":"Sinkholed","trigger":"www.gpt4xdam.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.gpt4xdam.top/logo/doge.png","fqdn":"www.gpt4xdam.top","domain":"gpt4xdam.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://y-onchain.com/","date":"2025-08-06T15:06:52.901Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /logo/doge.png HTTP/1.1\r\nHost: www.gpt4xdam.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://y-onchain.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-10T03:49:04.585278Z","times_seen":17810757,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-06","alert":"Sinkholed","trigger":"www.gpt4xdam.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.y-onchain.com/gpt4xf-api/coin/candles","fqdn":"api.y-onchain.com","domain":"y-onchain.com","tld":"com"},"ip":{"addr":"104.21.80.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://y-onchain.com/","date":"2025-08-06T15:06:53.279Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"y-onchain.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 04 Aug 2025 08:36:15 GMT","end":"Sun, 02 Nov 2025 09:34:42 GMT"},"fingerprint":{"sha1":"6E:0E:D2:BE:4E:23:E6:6A:44:4D:C5:17:81:1A:5D:7F:5C:71:E7:0D","sha256":"9B:33:8A:08:BA:CF:85:A4:96:25:16:6A:FF:4D:8C:C6:29:44:36:17:B9:83:B6:33:95:A2:58:90:D4:BB:AE:A9"}}},"request":{"raw":"POST /gpt4xf-api/coin/candles HTTP/1.1\r\nHost: api.y-onchain.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json\r\nAccept-Language: en-US\r\nAccept-Encoding: gzip, deflate, br\r\nX-Requested-With: XMLHttpRequest\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\naccesstoken: \r\nContent-Length: 20\r\nOrigin: https://y-onchain.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://y-onchain.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 06 Aug 2025 15:06:53 GMT\r\ncontent-type: application/json\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=Abokt4OEqdWaWW5Lc2Nz80i8TgFiU87nt6NpAFp4wHO1lCzCRZMAFJPu%2BumxiW4R7Rn2E90OYyUkwprGZLpxxoFeLNaPk8hRUILvucNFDEESJ%2FcGq7W5Oe7L98HUar12Ukd%2FfQ%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: *\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 96af70d2f922b505-OSL\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=2011\u0026min_rtt=444\u0026rtt_var=1734\u0026sent=1619\u0026recv=344\u0026lost=0\u0026retrans=1\u0026sent_bytes=1952285\u0026recv_bytes=32117\u0026delivery_rate=29689103\u0026ss_exit_cwnd=30585\u0026ss_exit_reason=2\u0026cwnd=50735\u0026unsent_bytes=0\u0026cid=483caaa6cce61b43\u0026ts=8836\u0026inflight_dur=426\u0026x=40\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":32967,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"4421f4c357c1f10be0319d902a7a1131","sha1":"7a5572d295f9937e7fd8fcabdee6bf0c93d3e03e","sha256":"13feaf636a4f8040512dbdad91fea2ca4b086f533632cc744e5553e62d4b2d3e","sha512":"9a8816d65fbdd17507883d2e3cc492f6573db766e53f560b005fe4bf6afc6a910e075a0bd7ff548d76cce582157efc27f3f1b8ffc42defaafca4c25c42a96ffa","ssdeep":"192:z735GEjQKkV30eb7Jvlzv32Z0ue8+BWSXSS999mB9m5Qw999e9Ixz29993999B9L:n2uiW5NaHL5XclFd29Wxxhp","tlshash":"a0e2ffe10d9fc62cfad86f68493a1cb758817ac0559137803b77f5205be26bdac3d186","first_seen":"2025-08-06T15:07:16.852734Z","last_seen":"2025-08-06T15:07:16.852734Z","times_seen":1,"resource_available":false,"data":null}},"time_used":699,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":421,"receive":278,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-06","alert":"Sinkholed","trigger":"api.y-onchain.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.y-onchain.com/gpt4xf-api/coin/candles","fqdn":"api.y-onchain.com","domain":"y-onchain.com","tld":"com"},"ip":{"addr":"104.21.80.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://y-onchain.com/","date":"2025-08-06T15:06:53.416Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"y-onchain.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 04 Aug 2025 08:36:15 GMT","end":"Sun, 02 Nov 2025 09:34:42 GMT"},"fingerprint":{"sha1":"6E:0E:D2:BE:4E:23:E6:6A:44:4D:C5:17:81:1A:5D:7F:5C:71:E7:0D","sha256":"9B:33:8A:08:BA:CF:85:A4:96:25:16:6A:FF:4D:8C:C6:29:44:36:17:B9:83:B6:33:95:A2:58:90:D4:BB:AE:A9"}}},"request":{"raw":"POST /gpt4xf-api/coin/candles HTTP/1.1\r\nHost: api.y-onchain.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json\r\nAccept-Language: en-US\r\nAccept-Encoding: gzip, deflate, br\r\nX-Requested-With: XMLHttpRequest\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\naccesstoken: \r\nContent-Length: 19\r\nOrigin: https://y-onchain.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://y-onchain.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 06 Aug 2025 15:06:54 GMT\r\ncontent-type: application/json\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=cbzNd7l3G6vAmLA8HZBn9DuDB2YSRkPUcFucSbmM30KQlN8TFMRQkvsTs%2FKG%2FDFMlIRVQKYG50aG0IyqhksB2aRXeINHoYiJE%2BGBzoiO5Q45Mjjyzy0T4kS%2BaKAD%2Fx6laZeTqg%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: *\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 96af70d3c953b505-OSL\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=1179\u0026min_rtt=444\u0026rtt_var=396\u0026sent=1714\u0026recv=373\u0026lost=0\u0026retrans=1\u0026sent_bytes=2038456\u0026recv_bytes=33420\u0026delivery_rate=29689103\u0026ss_exit_cwnd=30585\u0026ss_exit_reason=2\u0026cwnd=50735\u0026unsent_bytes=0\u0026cid=483caaa6cce61b43\u0026ts=9464\u0026inflight_dur=523\u0026x=40\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":39544,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"fa9730b7620cabbefb53675516ca4ae4","sha1":"c0674fcc8048e1ad254e7be7cdda07996029f721","sha256":"09655f2be709f8c53f86cb223ea8ef67245204393202f60be16f0fabc1b2932b","sha512":"a60deece60ee14750d3f1ae0ec639c5ec62ec74affd33465578efdef181d3e13e705da129239b6ee414fec146860c9e5bcddfd91e6fd8ebd902f1c66eaedaeff","ssdeep":"384:wBGsHhidDdia5KIKU299/kgXxoygTWGpRAvvUan7iOxcc35jg5vI/hMT:wss4dia5rKDLn95jty","tlshash":"160335808d8fc6b5bacc5f18197a9c0a9cc537c061947d03ff1ff6614ab26f8a239946","first_seen":"2025-08-06T15:07:16.856459Z","last_seen":"2025-08-06T15:07:16.856459Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1224,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":923,"receive":301,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-06","alert":"Sinkholed","trigger":"api.y-onchain.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.dcloud.net.cn/img/shadow-grey.png","fqdn":"cdn.dcloud.net.cn","domain":"dcloud.net.cn","tld":"net.cn"},"ip":{"addr":"106.54.228.253","port":443,"asn":45090,"as":"Shenzhen Tencent Computer Systems Company Limited","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://y-onchain.com/","date":"2025-08-06T15:06:49.370Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.dcloud.net.cn","organization":""},"issuer":{"commonName":"Certum Domain Validation CA SHA2","organization":"Unizeto Technologies S.A."},"validity":{"start":"Mon, 12 Aug 2024 08:33:13 GMT","end":"Thu, 11 Sep 2025 08:33:12 GMT"},"fingerprint":{"sha1":"9C:B4:91:1F:60:88:9E:80:73:F3:11:AF:51:62:A5:A0:E4:56:80:C6","sha256":"5E:C6:CA:FE:4E:22:EA:23:BF:7F:CC:7F:0F:60:5A:E8:65:18:C1:07:8E:78:86:0A:58:C0:5F:ED:B2:51:78:72"}}},"request":{"raw":"GET /img/shadow-grey.png HTTP/1.1\r\nHost: cdn.dcloud.net.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://y-onchain.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 06 Aug 2025 15:06:51 GMT\r\ncontent-type: image/png\r\ncontent-length: 136\r\nlast-modified: Thu, 06 Jun 2019 06:42:07 GMT\r\netag: \"5cf8b5bf-88\"\r\nexpires: Wed, 06 Aug 2025 15:36:51 GMT\r\ncache-control: max-age=1800\r\nset-cookie: __uni__uid=rBEQg2iTb4sKPwcFAxoYAg==; expires=Thu, 31-Dec-37 23:55:55 GMT; domain=dcloud.net.cn; path=/; secure; httponly; samesite=none\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":136,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1 x 6, 4-bit colormap, non-interlaced","md5":"5a962adf74d92ae702467b3f47976547","sha1":"36f74049375584e3fa69b5ef87e9572336ff9e7a","sha256":"ad4ebea1c3496dd2924789ee009174a2c6289d1200e9811f458fd46f172d1d6f","sha512":"4ace23fe7ec6c7271710030fd423aace13eafac68ac3e76366ce4ce9bdc702caf71c9bdc2fb6a32c8e9791546098617cc0259decd8bb8489afdbce43e1b53a73","ssdeep":"","tlshash":"47c09bf3a615dc754a0d153b42e98271f429511e07046d0e5a13c216741e3448d56793","first_seen":"2023-04-15T10:50:30Z","last_seen":"2026-08-09T23:47:55.895736Z","times_seen":20175,"resource_available":false,"data":null}},"time_used":2986,"timings":{"blocked":694,"dns":3,"connect":238,"send":0,"wait":1595,"receive":1,"ssl":448},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"y-onchain.com/static/img/icon_bell.5edf6f91.svg","fqdn":"y-onchain.com","domain":"y-onchain.com","tld":"com"},"ip":{"addr":"104.21.80.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://y-onchain.com/","date":"2025-08-06T15:06:51.816Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"y-onchain.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 04 Aug 2025 08:36:15 GMT","end":"Sun, 02 Nov 2025 09:34:42 GMT"},"fingerprint":{"sha1":"6E:0E:D2:BE:4E:23:E6:6A:44:4D:C5:17:81:1A:5D:7F:5C:71:E7:0D","sha256":"9B:33:8A:08:BA:CF:85:A4:96:25:16:6A:FF:4D:8C:C6:29:44:36:17:B9:83:B6:33:95:A2:58:90:D4:BB:AE:A9"}}},"request":{"raw":"GET /static/img/icon_bell.5edf6f91.svg HTTP/1.1\r\nHost: y-onchain.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://y-onchain.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 06 Aug 2025 15:06:52 GMT\r\ncontent-type: image/svg+xml\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=TYmo7PmatLnauEtJ2g427ZC0zFjI4OctIZgTmB10x%2FUVrL1m%2BKigRwqFC5aEmeZKfhJcfUpDn8iKaryMBZinPscy%2BSZU%2F65DYmNup1OXb7ZQwUcqFzDlg6HPUaheu2tO\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nlast-modified: Wed, 30 Apr 2025 05:54:55 GMT\r\netag: W/\"6811bb2f-2ff\"\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncontent-encoding: br\r\ncf-ray: 96af70c9c898b505-OSL\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=1354\u0026min_rtt=444\u0026rtt_var=1132\u0026sent=1014\u0026recv=253\u0026lost=0\u0026retrans=0\u0026sent_bytes=1199855\u0026recv_bytes=15989\u0026delivery_rate=29568302\u0026ss_exit_cwnd=30585\u0026ss_exit_reason=2\u0026cwnd=59145\u0026unsent_bytes=0\u0026cid=483caaa6cce61b43\u0026ts=7563\u0026inflight_dur=197\u0026x=40\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":767,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"5edf6f916f3e887076c4fbc41000aac5","sha1":"e64338933d741ac26b0a41b50d8d1478319974ae","sha256":"75981db91b23c191428ab11f1dde1dac426e061aa7460dda1cb577da5779e58f","sha512":"4090e769b7bf1b634101dfd97c97adcb61c3d856df9abdb41ab0b21eb846f36d1a075ebe92820353b6808c8c0c908afb78c8099bb6e613826abe03277d566f49","ssdeep":"","tlshash":"9d01f15a657d63ec2901cbbcc81b045032693cf58e26ffc8c3906d0110215e55da8dd8","first_seen":"2024-10-06T09:13:02.732608Z","last_seen":"2025-08-06T15:07:16.860459Z","times_seen":3,"resource_available":false,"data":null}},"time_used":632,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":622,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-06","alert":"Sinkholed","trigger":"y-onchain.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.y-onchain.com/gpt4xf-api/coin/tickers","fqdn":"api.y-onchain.com","domain":"y-onchain.com","tld":"com"},"ip":{"addr":"104.21.80.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://y-onchain.com/","date":"2025-08-06T15:06:52.587Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"y-onchain.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 04 Aug 2025 08:36:15 GMT","end":"Sun, 02 Nov 2025 09:34:42 GMT"},"fingerprint":{"sha1":"6E:0E:D2:BE:4E:23:E6:6A:44:4D:C5:17:81:1A:5D:7F:5C:71:E7:0D","sha256":"9B:33:8A:08:BA:CF:85:A4:96:25:16:6A:FF:4D:8C:C6:29:44:36:17:B9:83:B6:33:95:A2:58:90:D4:BB:AE:A9"}}},"request":{"raw":"OPTIONS /gpt4xf-api/coin/tickers HTTP/1.1\r\nHost: api.y-onchain.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: accesstoken,x-requested-with\r\nReferer: https://y-onchain.com/\r\nOrigin: https://y-onchain.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 06 Aug 2025 15:06:53 GMT\r\ncontent-length: 0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=nC6m9Dz7qzLkzHnr9tH2m2DNqL1oYtgSGVQIBE3fBJT1n84B7uJBicENwaPVdTOOjeAs%2FpwE0hDX4lsuqa%2B9yd3s93Mp2qS7fEv2Zbp3NcYXZd0Cqw92AS8HiiWMB8nk4gq2kQ%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,HEAD,POST,PUT,DELETE,OPTIONS\r\naccess-control-allow-headers: accesstoken, x-requested-with\r\naccess-control-max-age: 1800\r\nallow: GET, HEAD, POST, PUT, DELETE, OPTIONS, PATCH\r\ncf-cache-status: DYNAMIC\r\ncf-ray: 96af70cea8f2b505-OSL\r\nserver: cloudflare\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=862\u0026min_rtt=444\u0026rtt_var=276\u0026sent=1413\u0026recv=294\u0026lost=0\u0026retrans=0\u0026sent_bytes=1713315\u0026recv_bytes=23228\u0026delivery_rate=29568302\u0026ss_exit_cwnd=30585\u0026ss_exit_reason=2\u0026cwnd=76138\u0026unsent_bytes=0\u0026cid=483caaa6cce61b43\u0026ts=8347\u0026inflight_dur=262\u0026x=40\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-10T03:49:04.585278Z","times_seen":17810757,"resource_available":true,"data":null}},"time_used":623,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":623,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-06","alert":"Sinkholed","trigger":"api.y-onchain.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.y-onchain.com/gpt4xf-api/coin/candles","fqdn":"api.y-onchain.com","domain":"y-onchain.com","tld":"com"},"ip":{"addr":"104.21.80.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://y-onchain.com/","date":"2025-08-06T15:06:52.730Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"y-onchain.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 04 Aug 2025 08:36:15 GMT","end":"Sun, 02 Nov 2025 09:34:42 GMT"},"fingerprint":{"sha1":"6E:0E:D2:BE:4E:23:E6:6A:44:4D:C5:17:81:1A:5D:7F:5C:71:E7:0D","sha256":"9B:33:8A:08:BA:CF:85:A4:96:25:16:6A:FF:4D:8C:C6:29:44:36:17:B9:83:B6:33:95:A2:58:90:D4:BB:AE:A9"}}},"request":{"raw":"OPTIONS /gpt4xf-api/coin/candles HTTP/1.1\r\nHost: api.y-onchain.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: accesstoken,x-requested-with\r\nReferer: https://y-onchain.com/\r\nOrigin: https://y-onchain.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 06 Aug 2025 15:06:53 GMT\r\ncontent-length: 0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=quQTQR5D9t9V5z9xQIf6ZXhqoRDTS0DkDU%2F84mfbTlCkg%2FRAFoiBvJMzAD1QzasgGhiCBfdsXzKEpQMT5I1eFrdjkdV2rWyQqAugRqJSRqxNud7pCxNbDLoYqgDHmndWB2XKhQ%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,HEAD,POST,PUT,DELETE,OPTIONS\r\naccess-control-allow-headers: accesstoken, x-requested-with\r\naccess-control-max-age: 1800\r\nallow: GET, HEAD, POST, PUT, DELETE, OPTIONS, PATCH\r\ncf-cache-status: DYNAMIC\r\ncf-ray: 96af70cf58fdb505-OSL\r\nserver: cloudflare\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=859\u0026min_rtt=444\u0026rtt_var=168\u0026sent=1423\u0026recv=300\u0026lost=0\u0026retrans=0\u0026sent_bytes=1718177\u0026recv_bytes=24816\u0026delivery_rate=29568302\u0026ss_exit_cwnd=30585\u0026ss_exit_reason=2\u0026cwnd=76138\u0026unsent_bytes=0\u0026cid=483caaa6cce61b43\u0026ts=8440\u0026inflight_dur=309\u0026x=40\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-10T03:49:04.585278Z","times_seen":17810757,"resource_available":true,"data":null}},"time_used":608,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":608,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-06","alert":"Sinkholed","trigger":"api.y-onchain.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.y-onchain.com/gpt4xf-api/coin/candles","fqdn":"api.y-onchain.com","domain":"y-onchain.com","tld":"com"},"ip":{"addr":"104.21.80.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://y-onchain.com/","date":"2025-08-06T15:06:52.764Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"y-onchain.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 04 Aug 2025 08:36:15 GMT","end":"Sun, 02 Nov 2025 09:34:42 GMT"},"fingerprint":{"sha1":"6E:0E:D2:BE:4E:23:E6:6A:44:4D:C5:17:81:1A:5D:7F:5C:71:E7:0D","sha256":"9B:33:8A:08:BA:CF:85:A4:96:25:16:6A:FF:4D:8C:C6:29:44:36:17:B9:83:B6:33:95:A2:58:90:D4:BB:AE:A9"}}},"request":{"raw":"OPTIONS /gpt4xf-api/coin/candles HTTP/1.1\r\nHost: api.y-onchain.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: accesstoken,x-requested-with\r\nReferer: https://y-onchain.com/\r\nOrigin: https://y-onchain.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 06 Aug 2025 15:06:53 GMT\r\ncontent-length: 0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=qAit6LQcscwaTidPDfbUWWE%2Bsnhf3%2FPgETPNnYwC%2BSUujuMP8tmiCU1GX%2FH062t33YhXuasRgdKqdkDOSsB8g6X8hynJKG%2FyCC2vt2hLFJp3nPXWvy3hfIYid4Ihgqg00cdBmA%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,HEAD,POST,PUT,DELETE,OPTIONS\r\naccess-control-allow-headers: accesstoken, x-requested-with\r\naccess-control-max-age: 1800\r\nallow: GET, HEAD, POST, PUT, DELETE, OPTIONS, PATCH\r\ncf-cache-status: DYNAMIC\r\ncf-ray: 96af70cfa906b505-OSL\r\nserver: cloudflare\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=802\u0026min_rtt=444\u0026rtt_var=142\u0026sent=1560\u0026recv=324\u0026lost=0\u0026retrans=0\u0026sent_bytes=1896094\u0026recv_bytes=27894\u0026delivery_rate=29689103\u0026ss_exit_cwnd=30585\u0026ss_exit_reason=2\u0026cwnd=50735\u0026unsent_bytes=0\u0026cid=483caaa6cce61b43\u0026ts=8500\u0026inflight_dur=357\u0026x=40\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-10T03:49:04.585278Z","times_seen":17810757,"resource_available":true,"data":null}},"time_used":621,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":621,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-06","alert":"Sinkholed","trigger":"api.y-onchain.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.gpt4xdam.top/logo/axs.png","fqdn":"www.gpt4xdam.top","domain":"gpt4xdam.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://y-onchain.com/","date":"2025-08-06T15:06:52.937Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /logo/axs.png HTTP/1.1\r\nHost: www.gpt4xdam.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://y-onchain.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-10T03:49:04.585278Z","times_seen":17810757,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-06","alert":"Sinkholed","trigger":"www.gpt4xdam.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"y-onchain.com/static/img/Contracts.png","fqdn":"y-onchain.com","domain":"y-onchain.com","tld":"com"},"ip":{"addr":"104.21.80.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://y-onchain.com/","date":"2025-08-06T15:06:51.822Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"y-onchain.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 04 Aug 2025 08:36:15 GMT","end":"Sun, 02 Nov 2025 09:34:42 GMT"},"fingerprint":{"sha1":"6E:0E:D2:BE:4E:23:E6:6A:44:4D:C5:17:81:1A:5D:7F:5C:71:E7:0D","sha256":"9B:33:8A:08:BA:CF:85:A4:96:25:16:6A:FF:4D:8C:C6:29:44:36:17:B9:83:B6:33:95:A2:58:90:D4:BB:AE:A9"}}},"request":{"raw":"GET /static/img/Contracts.png HTTP/1.1\r\nHost: y-onchain.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://y-onchain.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 06 Aug 2025 15:06:52 GMT\r\ncontent-type: image/png\r\ncontent-length: 220124\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=58tgNKhuSBwbRm3zbrUnL2hDRp9MehiQ3a9KdS7P%2BF5DTAugyjPlXAIzRc9C1OXErtPJh%2FWAq1UAObinW9wkMMQ9Cyc3og5YsFWQjwDkHLJ2pQ45Yn3kMs%2BxbZHb670K\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nlast-modified: Wed, 30 Apr 2025 05:54:55 GMT\r\netag: \"6811bb2f-35bdc\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncf-ray: 96af70c9d89ab505-OSL\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=1213\u0026min_rtt=444\u0026rtt_var=885\u0026sent=1030\u0026recv=255\u0026lost=0\u0026retrans=0\u0026sent_bytes=1216235\u0026recv_bytes=16080\u0026delivery_rate=29568302\u0026ss_exit_cwnd=30585\u0026ss_exit_reason=2\u0026cwnd=59145\u0026unsent_bytes=0\u0026cid=483caaa6cce61b43\u0026ts=7576\u0026inflight_dur=206\u0026x=40\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":220124,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1107 x 555, 8-bit/color RGBA, non-interlaced","md5":"1d03c9308593f2e71b8a102d0491d461","sha1":"ce6f20ebf73b6fe980cd6e618fa804d2fd3b9461","sha256":"1bc83fcf72a9ce5d9a0c4a9b7da3b42f8c334848d653ce74b6417322c8874191","sha512":"4481b943d2b3f9b0886e13667dd3b8bd094635bc1fe70f66275986f8e813d16a09f07d0f564f039610825b25543e57246067d638f872d2e92a6040fe1c80d406","ssdeep":"6144:kEHC8c0nxm2483P7GWaSxRVEB4sASpM5R90ZEpUN:kEi8d7na/qigMN","tlshash":"282412add2c18efd22e4d59c37c30363c2d9f62fae46127955c866c130a592839a57ec","first_seen":"2024-12-22T05:51:59.15174Z","last_seen":"2025-08-06T15:07:16.861327Z","times_seen":4,"resource_available":false,"data":null}},"time_used":1860,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":627,"receive":1233,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-06","alert":"Sinkholed","trigger":"y-onchain.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"y-onchain.com/static/img/headerBg.png","fqdn":"y-onchain.com","domain":"y-onchain.com","tld":"com"},"ip":{"addr":"104.21.80.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://y-onchain.com/","date":"2025-08-06T15:06:51.826Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"y-onchain.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 04 Aug 2025 08:36:15 GMT","end":"Sun, 02 Nov 2025 09:34:42 GMT"},"fingerprint":{"sha1":"6E:0E:D2:BE:4E:23:E6:6A:44:4D:C5:17:81:1A:5D:7F:5C:71:E7:0D","sha256":"9B:33:8A:08:BA:CF:85:A4:96:25:16:6A:FF:4D:8C:C6:29:44:36:17:B9:83:B6:33:95:A2:58:90:D4:BB:AE:A9"}}},"request":{"raw":"GET /static/img/headerBg.png HTTP/1.1\r\nHost: y-onchain.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://y-onchain.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 06 Aug 2025 15:06:52 GMT\r\ncontent-type: image/png\r\ncontent-length: 95145\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=wvWNVxW3juF9FsFIcWjhqJBl7D%2B4xybvsAhjLbDUOMtO%2Fgb090t23jVfTW92cuRMJdrfGj1iggVqnVzu6CElvZ8zIAEFCoGKZry5W4NzU0I6VFerQCfZ1dn9dOMSAJli\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nlast-modified: Wed, 30 Apr 2025 05:54:55 GMT\r\netag: \"6811bb2f-173a9\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncf-ray: 96af70c9d89cb505-OSL\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=1157\u0026min_rtt=444\u0026rtt_var=592\u0026sent=1040\u0026recv=257\u0026lost=0\u0026retrans=0\u0026sent_bytes=1230190\u0026recv_bytes=16172\u0026delivery_rate=29568302\u0026ss_exit_cwnd=30585\u0026ss_exit_reason=2\u0026cwnd=59145\u0026unsent_bytes=0\u0026cid=483caaa6cce61b43\u0026ts=7582\u0026inflight_dur=209\u0026x=40\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":95145,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1125 x 720, 8-bit/color RGBA, non-interlaced","md5":"150c47a0a8cb41e1bf03bec9e2ee934f","sha1":"0816af27147c94d3f37f56be243fdbed50cb1471","sha256":"8c6a891ea5d88a13a816bd707f697ef84e33b79a2282c92aebb0e0463478fb48","sha512":"90d8b4ade5a693977a0308477ec936d3cf642235c95378fc34d6e02891442cce831925df17df4bbe6245363044ccd61d275e741e02b07127ab1547757dffa3c9","ssdeep":"1536:0UL+Pc1vxyxis2MK/or1+b3wIZZhGeprXkyZAdZSHlHxPNXb:aIUDKgY/T0SUyGmFR1L","tlshash":"409302d8274194dc2551c1028d81c749f67b6eef30627bf8d984c4eaa9f89bc0f4db86","first_seen":"2024-12-22T05:51:59.145905Z","last_seen":"2025-08-06T15:07:16.864932Z","times_seen":5,"resource_available":false,"data":null}},"time_used":1214,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":629,"receive":585,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-06","alert":"Sinkholed","trigger":"y-onchain.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.y-onchain.com/gpt4xf-api/coin/candles","fqdn":"api.y-onchain.com","domain":"y-onchain.com","tld":"com"},"ip":{"addr":"104.21.80.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://y-onchain.com/","date":"2025-08-06T15:06:52.699Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"y-onchain.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 04 Aug 2025 08:36:15 GMT","end":"Sun, 02 Nov 2025 09:34:42 GMT"},"fingerprint":{"sha1":"6E:0E:D2:BE:4E:23:E6:6A:44:4D:C5:17:81:1A:5D:7F:5C:71:E7:0D","sha256":"9B:33:8A:08:BA:CF:85:A4:96:25:16:6A:FF:4D:8C:C6:29:44:36:17:B9:83:B6:33:95:A2:58:90:D4:BB:AE:A9"}}},"request":{"raw":"OPTIONS /gpt4xf-api/coin/candles HTTP/1.1\r\nHost: api.y-onchain.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: accesstoken,x-requested-with\r\nReferer: https://y-onchain.com/\r\nOrigin: https://y-onchain.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 06 Aug 2025 15:06:53 GMT\r\ncontent-length: 0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=3vsqmDlH6MZGUc384Pu8xVB%2Ba5n1MTn1YHcP0SEl%2BbZJXtlUC%2BGRbyayD8W%2BCtyEKF4HI0LMMqhD%2FsCrJBpchowHTNlI2Y1CtqIwlGrBxCp%2FFKb06c4VFlKoVAjZhVKTkgEs7A%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,HEAD,POST,PUT,DELETE,OPTIONS\r\naccess-control-allow-headers: accesstoken, x-requested-with\r\naccess-control-max-age: 1800\r\nallow: GET, HEAD, POST, PUT, DELETE, OPTIONS, PATCH\r\ncf-cache-status: DYNAMIC\r\ncf-ray: 96af70cf38fab505-OSL\r\nserver: cloudflare\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=859\u0026min_rtt=444\u0026rtt_var=168\u0026sent=1420\u0026recv=299\u0026lost=0\u0026retrans=0\u0026sent_bytes=1716561\u0026recv_bytes=24440\u0026delivery_rate=29568302\u0026ss_exit_cwnd=30585\u0026ss_exit_reason=2\u0026cwnd=76138\u0026unsent_bytes=0\u0026cid=483caaa6cce61b43\u0026ts=8432\u0026inflight_dur=303\u0026x=40\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-10T03:49:04.585278Z","times_seen":17810757,"resource_available":true,"data":null}},"time_used":625,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":625,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-06","alert":"Sinkholed","trigger":"api.y-onchain.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.y-onchain.com/gpt4xf-api/coin/candles","fqdn":"api.y-onchain.com","domain":"y-onchain.com","tld":"com"},"ip":{"addr":"104.21.80.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://y-onchain.com/","date":"2025-08-06T15:06:52.744Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"y-onchain.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 04 Aug 2025 08:36:15 GMT","end":"Sun, 02 Nov 2025 09:34:42 GMT"},"fingerprint":{"sha1":"6E:0E:D2:BE:4E:23:E6:6A:44:4D:C5:17:81:1A:5D:7F:5C:71:E7:0D","sha256":"9B:33:8A:08:BA:CF:85:A4:96:25:16:6A:FF:4D:8C:C6:29:44:36:17:B9:83:B6:33:95:A2:58:90:D4:BB:AE:A9"}}},"request":{"raw":"OPTIONS /gpt4xf-api/coin/candles HTTP/1.1\r\nHost: api.y-onchain.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: accesstoken,x-requested-with\r\nReferer: https://y-onchain.com/\r\nOrigin: https://y-onchain.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 06 Aug 2025 15:06:53 GMT\r\ncontent-length: 0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=8%2FvmMCVYttMuoE8XBv6VFtD5kg0vokOTQ0gr9AZyVGYlLe4VdWcJKG9muIT1uTIOXsvp2BpV7dUK7d9XEAQfDv%2BE98OmKTpIB2zdoRaVDdMZUIRp1ONSK%2FEBR2yj7iDiENDM0A%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,HEAD,POST,PUT,DELETE,OPTIONS\r\naccess-control-allow-headers: accesstoken, x-requested-with\r\naccess-control-max-age: 1800\r\nallow: GET, HEAD, POST, PUT, DELETE, OPTIONS, PATCH\r\ncf-cache-status: DYNAMIC\r\ncf-ray: 96af70cf78ffb505-OSL\r\nserver: cloudflare\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=879\u0026min_rtt=444\u0026rtt_var=151\u0026sent=1466\u0026recv=306\u0026lost=0\u0026retrans=0\u0026sent_bytes=1772502\u0026recv_bytes=26083\u0026delivery_rate=29568302\u0026ss_exit_cwnd=30585\u0026ss_exit_reason=2\u0026cwnd=76138\u0026unsent_bytes=0\u0026cid=483caaa6cce61b43\u0026ts=8474\u0026inflight_dur=336\u0026x=40\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-10T03:49:04.585278Z","times_seen":17810757,"resource_available":true,"data":null}},"time_used":622,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":622,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-06","alert":"Sinkholed","trigger":"api.y-onchain.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.y-onchain.com/gpt4xf-api/coin/candles","fqdn":"api.y-onchain.com","domain":"y-onchain.com","tld":"com"},"ip":{"addr":"104.21.80.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://y-onchain.com/","date":"2025-08-06T15:06:53.302Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"y-onchain.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 04 Aug 2025 08:36:15 GMT","end":"Sun, 02 Nov 2025 09:34:42 GMT"},"fingerprint":{"sha1":"6E:0E:D2:BE:4E:23:E6:6A:44:4D:C5:17:81:1A:5D:7F:5C:71:E7:0D","sha256":"9B:33:8A:08:BA:CF:85:A4:96:25:16:6A:FF:4D:8C:C6:29:44:36:17:B9:83:B6:33:95:A2:58:90:D4:BB:AE:A9"}}},"request":{"raw":"POST /gpt4xf-api/coin/candles HTTP/1.1\r\nHost: api.y-onchain.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json\r\nAccept-Language: en-US\r\nAccept-Encoding: gzip, deflate, br\r\nX-Requested-With: XMLHttpRequest\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\naccesstoken: \r\nContent-Length: 19\r\nOrigin: https://y-onchain.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://y-onchain.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 06 Aug 2025 15:06:53 GMT\r\ncontent-type: application/json\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=qdLPzgaACqybOQJ0xwovmXgFEsm0ETkCusW%2Fw8HeFNYTXkfCyTJz9h6h4cVIEhtJUnT79gXWJNtviOUnmCLFTHem4dYTgj90kHfaHB1%2FeqH9YVTK1JOX1DMAnU5%2B8DuwXf3eFA%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: *\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 96af70d32926b505-OSL\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=2141\u0026min_rtt=444\u0026rtt_var=1560\u0026sent=1622\u0026recv=345\u0026lost=0\u0026retrans=1\u0026sent_bytes=1955466\u0026recv_bytes=32163\u0026delivery_rate=29689103\u0026ss_exit_cwnd=30585\u0026ss_exit_reason=2\u0026cwnd=50735\u0026unsent_bytes=0\u0026cid=483caaa6cce61b43\u0026ts=8867\u0026inflight_dur=430\u0026x=40\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":31793,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"38f60a79cd5fb473d2323b76676c38e6","sha1":"16123de11b4de089602362eb973b5807b121211a","sha256":"3c3b664fd0919280dddb00d852303f5449d1a86bd9a41bacf0cb63821cc61dcd","sha512":"c575ccf08b3099b87828b97d819db65b90fc6d139ede5cb1de86f028e814e7ef204767adde9362bd329d96b2978f245d740cfab6233ab573ff2f67b1d4e28a09","ssdeep":"768:bjVB0+qjUDppp4pUjjjYRjIjXCn0TWSWT0V0fFjijjjWjjj3jjjCj3jjjz0IGq4J:Y+3ppp4p/SWT0agypppvp/pppjpppFpN","tlshash":"b2e2b2a04d8ec630ba945e2d59faad475fc035c811a360c0ba17f5334bbf6f8a139b56","first_seen":"2025-08-06T15:07:16.866371Z","last_seen":"2025-08-06T15:07:16.866371Z","times_seen":1,"resource_available":false,"data":null}},"time_used":727,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":427,"receive":300,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-06","alert":"Sinkholed","trigger":"api.y-onchain.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.y-onchain.com/gpt4xf-api/coin/candles","fqdn":"api.y-onchain.com","domain":"y-onchain.com","tld":"com"},"ip":{"addr":"104.21.80.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://y-onchain.com/","date":"2025-08-06T15:06:52.626Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"y-onchain.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 04 Aug 2025 08:36:15 GMT","end":"Sun, 02 Nov 2025 09:34:42 GMT"},"fingerprint":{"sha1":"6E:0E:D2:BE:4E:23:E6:6A:44:4D:C5:17:81:1A:5D:7F:5C:71:E7:0D","sha256":"9B:33:8A:08:BA:CF:85:A4:96:25:16:6A:FF:4D:8C:C6:29:44:36:17:B9:83:B6:33:95:A2:58:90:D4:BB:AE:A9"}}},"request":{"raw":"OPTIONS /gpt4xf-api/coin/candles HTTP/1.1\r\nHost: api.y-onchain.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: accesstoken,x-requested-with\r\nReferer: https://y-onchain.com/\r\nOrigin: https://y-onchain.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 06 Aug 2025 15:06:53 GMT\r\ncontent-length: 0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=ZSJVne%2BXrheaDXyJxBWjQvCPcAwqbvicS850NENm3nTQAxadYMMSuiv1YDvyQdoCTBtourzfwCOvrIZb0TW%2B%2BJrb91Om5MbF1y37jDGsc7mvV3tFZucRvVNcCApRsgy4YAVigg%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,HEAD,POST,PUT,DELETE,OPTIONS\r\naccess-control-allow-headers: accesstoken, x-requested-with\r\naccess-control-max-age: 1800\r\nallow: GET, HEAD, POST, PUT, DELETE, OPTIONS, PATCH\r\ncf-cache-status: DYNAMIC\r\ncf-ray: 96af70cee8f5b505-OSL\r\nserver: cloudflare\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=862\u0026min_rtt=444\u0026rtt_var=276\u0026sent=1415\u0026recv=295\u0026lost=0\u0026retrans=0\u0026sent_bytes=1714132\u0026recv_bytes=23595\u0026delivery_rate=29568302\u0026ss_exit_cwnd=30585\u0026ss_exit_reason=2\u0026cwnd=76138\u0026unsent_bytes=0\u0026cid=483caaa6cce61b43\u0026ts=8369\u0026inflight_dur=262\u0026x=40\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-10T03:49:04.585278Z","times_seen":17810757,"resource_available":true,"data":null}},"time_used":610,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":609,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-06","alert":"Sinkholed","trigger":"api.y-onchain.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}}]}