{"report_id":"37150ccc-7855-4f2e-a7b7-08f359bebe80","version":6,"status":"done","tags":[],"date":"2026-01-31T15:51:16Z","url":{"schema":"http","addr":"onchain-exchange.life","fqdn":"onchain-exchange.life","domain":"onchain-exchange.life","tld":"life"},"ip":{"addr":"118.107.59.199","port":0,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"final":{"url":{"schema":"https","addr":"onchain-exchange.life/#/","fqdn":"onchain-exchange.life","domain":"onchain-exchange.life","tld":"life"},"title":"Trust","dom":{"size":6568,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (1274)","md5":"5b884a0bac7693874289bd86fedf1792","sha1":"4c4b0e2f135fc755e7d38d2ff701f4c83009ba37","sha256":"aee3e4ee831522f9e9fb26575ba48fa72cd3abbdbafcd7b5469e451b24635378","sha512":"df87cdc8f153aa23493373c407bbd5a510e1d07be8db9954de2f406ffefbf29885183196ad04e8241cbba4f5a4276520671e4185f9af649589bee8150610956d","ssdeep":"96:er858KDxprCuj7SFIDhT7DkDyt/DqDnr6TCZydHRH/9nM2mUsGKAiowG9e2KbVHZ:eiT7Ks4ZCxfK2nfD3boNdB1nYQY9fiFR","tlshash":"17d173f358a4dc2b13234666eae7fa14aa314546c4095810b9dc41ea4fe3ff6c8df726","dom_hash":"domhash225cb5543bcc7a98b6d666e16cee5a2c","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"onchain-exchange.life","fqdn":"onchain-exchange.life","domain":"onchain-exchange.life","tld":"life"},"ip":{"addr":"118.107.59.199","port":0,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-03-07T15:51:16Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-31","alert":"Sinkholed","trigger":"onchain-exchange.life","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null},"summary":[{"fqdn":"onchain-exchange.life","ip":{"addr":"118.107.59.199","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-01-31T14:09:50.987271Z","last_seen":"2026-01-31T14:09:50.987271Z","alert_count":17,"request_count":17,"received_data":3420116,"sent_data":7857,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"onchain-exchange.life/#/","fqdn":"onchain-exchange.life","domain":"onchain-exchange.life","tld":"life"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"7746993e8adb9277ba5afa2584910974","sha1":"8e7e6d562fd56f594b40b6657156d483d7426e40","sha256":"833dc15f120cad89d5c0680edae217dbad02010e42af351959607df4170074ee","sha512":"10ee66e22fa45386057f1385e179955ad4fd4d53363c0aebe68aa9ba0547bf409a286e53ab6e678e5d0c3485d6cabcdd359f359c5258160b50a0a5a5496d6e6d","ssdeep":"","tlshash":"39c08cc5a0c22e101646641010bf28e49024402674481b028c98d8482e220b08233e9c","size":140,"data":"","first_seen":"2023-04-13T07:32:13Z","last_seen":"2026-07-26T03:49:10.506249Z","times_seen":4382,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"onchain-exchange.life/assets/en-0a809b51.js","fqdn":"onchain-exchange.life","domain":"onchain-exchange.life","tld":"life"},"ip":{"addr":"118.107.59.199","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"introduction_type":"scriptElement","is_inline":false,"md5":"6fc0eb5601be1758429868cee4846e74","sha1":"f00602b8c7a9881f79a51c34944b50e67970d280","sha256":"86f822c6d5d240751bf70806702ac177ff4f4b86e148cf42818aa915bad7dce3","sha512":"a6b7aa1647fb6fc4613e832eba0e0f9fd177b7385a365bfcc5d1d166c9db6f6bb04589459acd1082c941c1c3e8389cc035ae693559ac8142f6a6b11f2fb275a3","ssdeep":"768:+GtZcEw/o7rKOdKFsiynAMcIrAaAMFVoP6+ksPG928mwO6fpk7aOjxzzC:iponKOd42+IrdFV9sPW29jxzO","tlshash":"0e03e7893e1a989a04f3537674ce6e1120f60ac18256881f4fedc9fd53d2b67a363b34","size":40956,"data":"","first_seen":"2025-11-26T02:51:27.280781Z","last_seen":"2026-05-20T16:26:26.431669Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"onchain-exchange.life/","fqdn":"onchain-exchange.life","domain":"onchain-exchange.life","tld":"life"},"ip":{"addr":"118.107.59.199","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"introduction_type":"scriptElement","is_inline":true,"md5":"7fbb9578de99e6e93ac71826e4b33aa4","sha1":"8c2250cfd44319c20fbf7ba27ca107ceb9b191f4","sha256":"4ef9d0dc0b8ac20ed27fdc951fae60ad46cf49f169e79c0ebb0ba33120db3d8c","sha512":"f0ddcb44a9f5912e734fe16facf49e207c769c380f6b7839d75851a907558f9ab9a25c165ff3199a4cf0dd48b7c09461d2e2c1c67316e269ac5f09a4f60484f3","ssdeep":"","tlshash":"e611abfe191ab02a6303404f976b7905a43250a9400a184277ccda9dbb9ab7dd0cfb8d","size":1048,"data":"","first_seen":"2025-11-26T02:51:27.284384Z","last_seen":"2026-05-20T16:26:26.441581Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"onchain-exchange.life/","fqdn":"onchain-exchange.life","domain":"onchain-exchange.life","tld":"life"},"ip":{"addr":"118.107.59.199","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"introduction_type":"scriptElement","is_inline":true,"md5":"cd7a34e714de94d5c29b8ac5acdde24b","sha1":"b722bccb435490630d97ef88cafeb02d92f70fd0","sha256":"312ebfdc50a0e168cff60c206811b02e944263a7d9060c2685509dacfacd7f71","sha512":"a724bc648a508c24e5bb1788e1f02b47030893bbb0b80a99e380d95480095983a35d8ec11193c53f0a67db47a289ab608fcbc9dbca846bfdd5d61a8832290f43","ssdeep":"","tlshash":"58e07d48ff28c7f316ce28ab516e770858d104d58c1b58024cebccc86935ed87291527","size":314,"data":"","first_seen":"2023-03-11T11:23:25Z","last_seen":"2026-07-27T19:45:50.914679Z","times_seen":40800,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"onchain-exchange.life/assets/vendor-0a14d709.js","fqdn":"onchain-exchange.life","domain":"onchain-exchange.life","tld":"life"},"ip":{"addr":"118.107.59.199","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"introduction_type":"importedModule","is_inline":false,"md5":"dd2b49b8e2e6b85276288003c7d8bf5b","sha1":"0c1586fceb60c8f0e47eca7b344f5af2ac383d13","sha256":"002b922e539a81a6ac692aab0757dfa2718437fa22a9ed75ed1d20ddf9d0383d","sha512":"40c35e92d5cb2b934eb125557fc54857ec17bde1b6dee86fb1f419fa7a3db0b9addca92602610a54e21029b2c100d872ea6e8026112b7302f8969048aaed66ff","ssdeep":"12288:Mv6NLEg6h1uVDwbV7VPY+L668W/LGDV2e8qwnWkOukK4a2Vd:Mv65Eg1VUh7a+J/LGD8ownWkOusa2X","tlshash":"681529c97292f06147ab24e240bb0006f3396e59744e84a4f16d98db7d7ad89e277f3c","size":879067,"data":"","first_seen":"2025-11-26T02:51:27.273938Z","last_seen":"2026-05-20T16:26:26.43002Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"onchain-exchange.life/assets/index-2cbce33d.js","fqdn":"onchain-exchange.life","domain":"onchain-exchange.life","tld":"life"},"ip":{"addr":"118.107.59.199","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"introduction_type":"scriptElement","is_inline":false,"md5":"434d2f8140d3cc2a4609bdd62a54667b","sha1":"4afe27bf4834f858acaac0a86f1886b023825c36","sha256":"6b8bc98bcc73c3f2d6c98c2ecd485bb6ca9c6716d6da0e13c2717be144bfd401","sha512":"39c0a57e9888b34c952d0635ae00d567d80149baa9d1f2a1c4ba4de3c17b4c9c5e9d67b6062d63bf151e5af5374ff33676b94c7741ad9f18ae8df67b164f42f8","ssdeep":"768:YrXf6BhmPgasJrgt6AjoEMWHn1g5wRJ/nhEW9wuKIACY2G9SiiwU14gh1CyVimVj:gXTroGEXEVDdwU19SSufsayK9C","tlshash":"8ca33acda50b0fbf28fd0898a95b551021681fd3988dccd3b37a6e5527facd8624a71c","size":102008,"data":"","first_seen":"2025-11-26T02:51:27.271145Z","last_seen":"2026-05-20T16:26:26.437016Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"onchain-exchange.life/#/","fqdn":"onchain-exchange.life","domain":"onchain-exchange.life","tld":"life"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"9d379fc52463f2b630c6894900da5180","sha1":"b33fecceae6c1ef97518c6ad7159534d78e7b2f7","sha256":"6c3288c6af4396096b1a8a927fbfaf05ac8cc29658fc97d13cf036ba6bb38ab3","sha512":"49b43b0c253e26c135bd5009d73c537cf2e78342ef6b116ce6efbd3627152ac804449ec5cbe637a544b5557b52a50213a19dfcf33158a4f6b0a8ff91d79372d5","ssdeep":"","tlshash":"61c012c5a0da29102951595424bf28e8a024c026b55c6b169de4dda829e64fcc627d98","size":190,"data":"","first_seen":"2024-07-11T15:08:28Z","last_seen":"2026-07-25T23:35:41.546068Z","times_seen":1364,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"onchain-exchange.life/#/","fqdn":"onchain-exchange.life","domain":"onchain-exchange.life","tld":"life"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"c0e88513b499aae066f13f6f0edfedab","sha1":"12fd9320e7be26e9257e2a1a39a698a5e2706292","sha256":"3ffd5a1fea533c35c122aeb0a36f3d4a37022e0a14c83167faeaa819b3ee8cfd","sha512":"36b57e74aa71e21ec5489637f206796e8b9097db32c59e4ffbbdd7eb11ce35c2f754178f996bd6e11abc560cdddd3af7cde3fc1847c1a455120b5c26ee4fb838","ssdeep":"","tlshash":"17c08cc8b0c6ad001602e45111bf25e4a024802770481b128d98e8483e220f48233e9c","size":139,"data":"","first_seen":"2023-08-29T11:10:58Z","last_seen":"2026-07-25T23:35:41.547722Z","times_seen":1618,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"onchain-exchange.life/charting_library/charting_library.min.js","fqdn":"onchain-exchange.life","domain":"onchain-exchange.life","tld":"life"},"ip":{"addr":"118.107.59.199","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"introduction_type":"scriptElement","is_inline":false,"md5":"2a5fa40461c4e10123b62c021ab0a4ed","sha1":"527b4a35104eda6479c5ac876f57b5375ab00f51","sha256":"bcee984fd52b4a82bd6b23543bb33f6472e076c125edbdd8756d29ca230628cb","sha512":"51c91bff846f3825a21d6b301b1e4615d05bb27defef6c39c622e647f5d0262fdb0382924c9245c4a18a11cd32b60e4c913ed451b6f4b2fec1c87ce871eb874b","ssdeep":"192:9fdWSo7ktFUnoBelr6lw2LfnzuIQPlaJ1i10K+Ei/ISJhvHIheu5Ph3Ffa5:vWS2ktFUnoIlD2LfnqIJimK+5/ISJhvB","tlshash":"58224f58ed2478720acb54f0427f180f8239e278d84944ed3c84e6ec59fd44a6a6fbb8","size":10859,"data":"","first_seen":"2024-07-11T15:08:28Z","last_seen":"2026-07-27T07:09:42.368538Z","times_seen":1257,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"onchain-exchange.life/","fqdn":"onchain-exchange.life","domain":"onchain-exchange.life","tld":"life"},"ip":{"addr":"118.107.59.199","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"introduction_type":"scriptElement","is_inline":true,"md5":"528dd01eb509d1fc3c68b48e165c9d77","sha1":"8d702f33d869eb8c53cf75c17014f96385322395","sha256":"b508dff20bdbd9138e31aa48c45bc501805e509d2fd4709b39c4a60cd5c6b43a","sha512":"4c1edeec560f431005363ff5291acc80c1c42edf7c9a6d6e4fde2f7539b6a35a8e36f0bc228503263277bf5df4525dc579575faadca614c32e5dfa885a2d343b","ssdeep":"","tlshash":"78a012bb71b851710cd51ba7a40455e01c20123105052c101c8d5151c011c171d394c0","size":84,"data":"","first_seen":"2023-04-07T06:55:59Z","last_seen":"2026-07-27T19:45:50.915408Z","times_seen":42322,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"onchain-exchange.life/","fqdn":"onchain-exchange.life","domain":"onchain-exchange.life","tld":"life"},"ip":{"addr":"118.107.59.199","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-01-31T15:50:54.892Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.onchain-exchange.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 29 Jan 2026 02:25:58 GMT","end":"Wed, 29 Apr 2026 02:25:57 GMT"},"fingerprint":{"sha1":"2D:D4:CF:B0:3E:71:8C:44:4E:29:06:86:0C:F6:F4:8B:E9:4E:6A:CE","sha256":"65:F5:C4:59:64:4F:2A:1D:2A:6C:B6:9D:EF:40:88:95:08:30:26:56:53:2D:07:2B:BB:2C:63:04:AB:A1:02:50"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: onchain-exchange.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 31 Jan 2026 15:46:16 GMT\r\ncontent-type: text/html\r\nlast-modified: Thu, 04 Sep 2025 06:07:27 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68b92c9f-14ad\"\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5293,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1094), with CRLF, LF line terminators","md5":"e12f83d5ad2caf6f5df357eb3ab6eac2","sha1":"16ecc76b01639fabaacf590b0d9fa89b872fddc7","sha256":"d68c085b09e8e47092fb5d9b16b7df964570bddd7196abb57bd2c69fc94ca7fb","sha512":"7ff9b79f53bb63e76fcc00b71b54b3f6dae6256dadbb7d643622182a5998ab079e63cf8494091ce130a1b96a6777b87ef5605e46fc682a79d662547bca3590d0","ssdeep":"96:+r82uDLf53uSPEsDhU7DPDXt/DjDkr6TCZydHRH/gnM2mUsGKAiowGwuB1niHwiE:+FM9PEruZCxfV2nfD3bwuB1niQi9f2","tlshash":"cfb151b39ca1c81a2371022beed7b518df611193851a4850b5dc40ee4fe7fd688dbb2a","first_seen":"2025-11-26T02:51:27.275082Z","last_seen":"2026-05-20T16:26:26.436032Z","times_seen":6,"resource_available":false,"data":null}},"time_used":1377,"timings":{"blocked":562,"dns":50,"connect":251,"send":0,"wait":253,"receive":0,"ssl":257},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-31","alert":"Sinkholed","trigger":"onchain-exchange.life","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"onchain-exchange.life/charting_library/charting_library.min.js","fqdn":"onchain-exchange.life","domain":"onchain-exchange.life","tld":"life"},"ip":{"addr":"118.107.59.199","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://onchain-exchange.life/","date":"2026-01-31T15:50:55.896Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.onchain-exchange.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 29 Jan 2026 02:25:58 GMT","end":"Wed, 29 Apr 2026 02:25:57 GMT"},"fingerprint":{"sha1":"2D:D4:CF:B0:3E:71:8C:44:4E:29:06:86:0C:F6:F4:8B:E9:4E:6A:CE","sha256":"65:F5:C4:59:64:4F:2A:1D:2A:6C:B6:9D:EF:40:88:95:08:30:26:56:53:2D:07:2B:BB:2C:63:04:AB:A1:02:50"}}},"request":{"raw":"GET /charting_library/charting_library.min.js HTTP/1.1\r\nHost: onchain-exchange.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 31 Jan 2026 15:46:17 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 04 Sep 2025 06:07:09 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68b92c8d-2a6b\"\r\nexpires: Sun, 01 Feb 2026 03:46:17 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10859,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (10857), with CRLF line terminators","md5":"2a5fa40461c4e10123b62c021ab0a4ed","sha1":"527b4a35104eda6479c5ac876f57b5375ab00f51","sha256":"bcee984fd52b4a82bd6b23543bb33f6472e076c125edbdd8756d29ca230628cb","sha512":"51c91bff846f3825a21d6b301b1e4615d05bb27defef6c39c622e647f5d0262fdb0382924c9245c4a18a11cd32b60e4c913ed451b6f4b2fec1c87ce871eb874b","ssdeep":"192:9fdWSo7ktFUnoBelr6lw2LfnzuIQPlaJ1i10K+Ei/ISJhvHIheu5Ph3Ffa5:vWS2ktFUnoIlD2LfnqIJimK+5/ISJhvB","tlshash":"58224f58ed2478720acb54f0427f180f8239e278d84944ed3c84e6ec59fd44a6a6fbb8","first_seen":"2024-07-11T15:08:28Z","last_seen":"2026-07-27T07:09:42.368538Z","times_seen":1257,"resource_available":true,"data":null}},"time_used":252,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":252,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-31","alert":"Sinkholed","trigger":"onchain-exchange.life","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"onchain-exchange.life/assets/vendor-72ef657d.css","fqdn":"onchain-exchange.life","domain":"onchain-exchange.life","tld":"life"},"ip":{"addr":"118.107.59.199","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://onchain-exchange.life/","date":"2026-01-31T15:50:55.900Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.onchain-exchange.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 29 Jan 2026 02:25:58 GMT","end":"Wed, 29 Apr 2026 02:25:57 GMT"},"fingerprint":{"sha1":"2D:D4:CF:B0:3E:71:8C:44:4E:29:06:86:0C:F6:F4:8B:E9:4E:6A:CE","sha256":"65:F5:C4:59:64:4F:2A:1D:2A:6C:B6:9D:EF:40:88:95:08:30:26:56:53:2D:07:2B:BB:2C:63:04:AB:A1:02:50"}}},"request":{"raw":"GET /assets/vendor-72ef657d.css HTTP/1.1\r\nHost: onchain-exchange.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 31 Jan 2026 15:46:17 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 04 Sep 2025 06:07:27 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68b92c9f-16997\"\r\nexpires: Sun, 01 Feb 2026 03:46:17 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":92567,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (65022), with no line terminators","md5":"b40940e3efd47e3e653fe1fbec0ab363","sha1":"3911d44e1bceb07e83746e6bc68de9dbb587b11a","sha256":"72ef657df5906e9f23040a4ceb49985bf894ddcb4324d7d873a0c20b15d3e864","sha512":"f3706c9146b2091fb1a864ab4180d0a1538e801686af21bab4c7231421859a99fba7dd694632faaf1c457fb06711fcb16809e2221fe692c16390e7e98ccbf4d5","ssdeep":"1536:ZTIyNBi3MFYaQj73rx3WqyrtpqoSWEDZEnX73:ZdN0rxmNH9yDWr3","tlshash":"0193c5a5e9c4a1fc6f26f6659b4766d8f13cf661cc01daa0f109512d0fc7bf50223a2a","first_seen":"2024-01-05T03:21:29Z","last_seen":"2026-07-25T23:35:41.513729Z","times_seen":331,"resource_available":false,"data":null}},"time_used":755,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":755,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-31","alert":"Sinkholed","trigger":"onchain-exchange.life","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"onchain-exchange.life/assets/vendor-0a14d709.js","fqdn":"onchain-exchange.life","domain":"onchain-exchange.life","tld":"life"},"ip":{"addr":"118.107.59.199","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://onchain-exchange.life/","date":"2026-01-31T15:50:56.418Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.onchain-exchange.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 29 Jan 2026 02:25:58 GMT","end":"Wed, 29 Apr 2026 02:25:57 GMT"},"fingerprint":{"sha1":"2D:D4:CF:B0:3E:71:8C:44:4E:29:06:86:0C:F6:F4:8B:E9:4E:6A:CE","sha256":"65:F5:C4:59:64:4F:2A:1D:2A:6C:B6:9D:EF:40:88:95:08:30:26:56:53:2D:07:2B:BB:2C:63:04:AB:A1:02:50"}}},"request":{"raw":"GET /assets/vendor-0a14d709.js HTTP/1.1\r\nHost: onchain-exchange.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 31 Jan 2026 15:46:17 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 04 Sep 2025 06:07:27 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68b92c9f-d69db\"\r\nexpires: Sun, 01 Feb 2026 03:46:17 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":879067,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"dd2b49b8e2e6b85276288003c7d8bf5b","sha1":"0c1586fceb60c8f0e47eca7b344f5af2ac383d13","sha256":"002b922e539a81a6ac692aab0757dfa2718437fa22a9ed75ed1d20ddf9d0383d","sha512":"40c35e92d5cb2b934eb125557fc54857ec17bde1b6dee86fb1f419fa7a3db0b9addca92602610a54e21029b2c100d872ea6e8026112b7302f8969048aaed66ff","ssdeep":"12288:Mv6NLEg6h1uVDwbV7VPY+L668W/LGDV2e8qwnWkOukK4a2Vd:Mv65Eg1VUh7a+J/LGD8ownWkOusa2X","tlshash":"681529c97292f06147ab24e240bb0006f3396e59744e84a4f16d98db7d7ad89e277f3c","first_seen":"2025-11-26T02:51:27.273938Z","last_seen":"2026-05-20T16:26:26.43002Z","times_seen":6,"resource_available":true,"data":null}},"time_used":486,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":486,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-31","alert":"Sinkholed","trigger":"onchain-exchange.life","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"wss","addr":"onchain-exchange.life/ws/48b421f8-f8e1-4b21-9d67-64dcc6ffe240","fqdn":"onchain-exchange.life","domain":"onchain-exchange.life","tld":"life"},"ip":{"addr":"118.107.59.199","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://onchain-exchange.life/","date":"2026-01-31T15:50:57.561Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.onchain-exchange.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 29 Jan 2026 02:25:58 GMT","end":"Wed, 29 Apr 2026 02:25:57 GMT"},"fingerprint":{"sha1":"2D:D4:CF:B0:3E:71:8C:44:4E:29:06:86:0C:F6:F4:8B:E9:4E:6A:CE","sha256":"65:F5:C4:59:64:4F:2A:1D:2A:6C:B6:9D:EF:40:88:95:08:30:26:56:53:2D:07:2B:BB:2C:63:04:AB:A1:02:50"}}},"request":{"raw":"GET /ws/48b421f8-f8e1-4b21-9d67-64dcc6ffe240 HTTP/1.1\r\nHost: onchain-exchange.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nSec-WebSocket-Version: 13\r\nOrigin: https://onchain-exchange.life\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: OnXpOBSzr8fn+f/6pT0LdQ==\r\nDNT: 1\r\nConnection: keep-alive, Upgrade\r\nSec-Fetch-Dest: websocket\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 \r\nServer: nginx\r\nDate: Sat, 31 Jan 2026 15:46:19 GMT\r\nConnection: upgrade\r\nVary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nAccess-Control-Allow-Origin: https://onchain-exchange.life\r\nAccess-Control-Allow-Credentials: true\r\nUpgrade: websocket\r\nSec-WebSocket-Accept: 0dZZXqbS20vGewmYcCsekeTn0UU=\r\nSec-WebSocket-Extensions: permessage-deflate\r\nX-Content-Type-Options: nosniff\r\nX-XSS-Protection: 1; mode=block\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-28T01:22:25.15752Z","times_seen":17571767,"resource_available":true,"data":null}},"time_used":770,"timings":{"blocked":0,"dns":1,"connect":253,"send":0,"wait":254,"receive":0,"ssl":262},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-31","alert":"Sinkholed","trigger":"onchain-exchange.life","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"onchain-exchange.life/api/common/getAllSetting","fqdn":"onchain-exchange.life","domain":"onchain-exchange.life","tld":"life"},"ip":{"addr":"118.107.59.199","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://onchain-exchange.life/","date":"2026-01-31T15:50:57.578Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.onchain-exchange.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 29 Jan 2026 02:25:58 GMT","end":"Wed, 29 Apr 2026 02:25:57 GMT"},"fingerprint":{"sha1":"2D:D4:CF:B0:3E:71:8C:44:4E:29:06:86:0C:F6:F4:8B:E9:4E:6A:CE","sha256":"65:F5:C4:59:64:4F:2A:1D:2A:6C:B6:9D:EF:40:88:95:08:30:26:56:53:2D:07:2B:BB:2C:63:04:AB:A1:02:50"}}},"request":{"raw":"POST /api/common/getAllSetting HTTP/1.1\r\nHost: onchain-exchange.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nlang: en-US\r\nOrigin: https://onchain-exchange.life\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 31 Jan 2026 15:46:18 GMT\r\ncontent-type: application/json\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://onchain-exchange.life\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":14081,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"6cabe6d68990777a6a5d6a009bfff62b","sha1":"6533b7d114e6dfc66fbc7992f3b53e759a55dc51","sha256":"de0295fd5aca16edf0917930f32e14109ed10b22000d31e5bad2fd3539401964","sha512":"afc9dc42c2b94d3725ab5b8566178fc7c921087f4d3777cc40f457be9e29f9e46c93471dd04873a80c700ce5db6e679a5b28725f9f1596bbde2f86f1174bae2c","ssdeep":"192:N/krwelSgyjxf6+Iq3uc2hZKx3wPjN1Z+iZNLZGAZwOHeYqs0CIyZNzbiQywsppI:zu5H3SAg1mdRWn+I7W","tlshash":"0752644d3be8cc7d57c716d1c4daba89badc2c77e898ac4ae567ef2c8585770040e10a","first_seen":"2026-01-31T14:09:45.578698Z","last_seen":"2026-01-31T15:52:22.965124Z","times_seen":4,"resource_available":false,"data":null}},"time_used":331,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":331,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-31","alert":"Sinkholed","trigger":"onchain-exchange.life","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"onchain-exchange.life/api/common/getMt5Amount?coin=xau","fqdn":"onchain-exchange.life","domain":"onchain-exchange.life","tld":"life"},"ip":{"addr":"118.107.59.199","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://onchain-exchange.life/","date":"2026-01-31T15:50:57.955Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.onchain-exchange.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 29 Jan 2026 02:25:58 GMT","end":"Wed, 29 Apr 2026 02:25:57 GMT"},"fingerprint":{"sha1":"2D:D4:CF:B0:3E:71:8C:44:4E:29:06:86:0C:F6:F4:8B:E9:4E:6A:CE","sha256":"65:F5:C4:59:64:4F:2A:1D:2A:6C:B6:9D:EF:40:88:95:08:30:26:56:53:2D:07:2B:BB:2C:63:04:AB:A1:02:50"}}},"request":{"raw":"POST /api/common/getMt5Amount?coin=xau HTTP/1.1\r\nHost: onchain-exchange.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nlang: en-US\r\nOrigin: https://onchain-exchange.life\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 31 Jan 2026 15:46:19 GMT\r\ncontent-type: application/json\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://onchain-exchange.life\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":48,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"5bf59ccbbe68f51b1ca9fc2118cf69a1","sha1":"36687010b960b44eff5379e4ce7287395c3d9f7b","sha256":"6c9bd12a41347e005cf25ee54428d676c9932a85a3bc300df385a2446cc424ab","sha512":"fb9f582f2d7ddcf4f27ea647a5525e1d0a85ba381dd16df7f243101e693f033f211cfbbfbf87054fab0e4a6253823c580081c3432f813676fff16e8da6838b5b","ssdeep":"","tlshash":"439002555d9c8242a8c300a5950a520901343560276492484c599126c0c85b26058858","first_seen":"2026-01-31T15:51:18.886834Z","last_seen":"2026-01-31T15:51:18.886834Z","times_seen":1,"resource_available":false,"data":null}},"time_used":255,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":255,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-31","alert":"Sinkholed","trigger":"onchain-exchange.life","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"onchain-exchange.life/api/common/getCoinList","fqdn":"onchain-exchange.life","domain":"onchain-exchange.life","tld":"life"},"ip":{"addr":"118.107.59.199","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://onchain-exchange.life/","date":"2026-01-31T15:50:57.579Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.onchain-exchange.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 29 Jan 2026 02:25:58 GMT","end":"Wed, 29 Apr 2026 02:25:57 GMT"},"fingerprint":{"sha1":"2D:D4:CF:B0:3E:71:8C:44:4E:29:06:86:0C:F6:F4:8B:E9:4E:6A:CE","sha256":"65:F5:C4:59:64:4F:2A:1D:2A:6C:B6:9D:EF:40:88:95:08:30:26:56:53:2D:07:2B:BB:2C:63:04:AB:A1:02:50"}}},"request":{"raw":"POST /api/common/getCoinList HTTP/1.1\r\nHost: onchain-exchange.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nlang: en-US\r\nOrigin: https://onchain-exchange.life\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 31 Jan 2026 15:46:18 GMT\r\ncontent-type: application/json\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://onchain-exchange.life\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":30276,"size_decoded":0,"mime_type":"application/json","magic":"Unicode text, UTF-8 text, with very long lines (30260), with no line terminators","md5":"6aacba82ab24106b82f3cfa517d41785","sha1":"67e9f1c147c770c22aec2acd4cb04a0f8211bca1","sha256":"1bd50c59b0be2223d5525f20b4e4f61618f687deefca7bdf9bb9a5263545f696","sha512":"f2af18f22b27ad22dc5144f921df29886b0d5b089fc4c211218c927f400ccd6b90fd8269285e04ca134ec19d963790d468335eaddf56539a9c4c78e8aa6a1ff5","ssdeep":"192:VX4mXeSX/xXoNWXXmXgHSXWv0XS1XG6XwgQS8gurwXuwYSJ9AvxdA4JeBAdohAnU:ayhi/No","tlshash":"a1d220597228856cd56981e11eaf7a63b2cc353ffcc98e1ed2da4c548ad8bb4110bf07","first_seen":"2026-01-31T15:51:18.889019Z","last_seen":"2026-01-31T15:51:18.889019Z","times_seen":1,"resource_available":false,"data":null}},"time_used":332,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":332,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-31","alert":"Sinkholed","trigger":"onchain-exchange.life","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"onchain-exchange.life/platform/dev/logo_144.png?2.0.1756966047403","fqdn":"onchain-exchange.life","domain":"onchain-exchange.life","tld":"life"},"ip":{"addr":"118.107.59.199","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://onchain-exchange.life/","date":"2026-01-31T15:50:57.923Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.onchain-exchange.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 29 Jan 2026 02:25:58 GMT","end":"Wed, 29 Apr 2026 02:25:57 GMT"},"fingerprint":{"sha1":"2D:D4:CF:B0:3E:71:8C:44:4E:29:06:86:0C:F6:F4:8B:E9:4E:6A:CE","sha256":"65:F5:C4:59:64:4F:2A:1D:2A:6C:B6:9D:EF:40:88:95:08:30:26:56:53:2D:07:2B:BB:2C:63:04:AB:A1:02:50"}}},"request":{"raw":"GET /platform/dev/logo_144.png?2.0.1756966047403 HTTP/1.1\r\nHost: onchain-exchange.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 31 Jan 2026 15:46:19 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 04 Sep 2025 06:07:09 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68b92c8d-b5c\"\r\nexpires: Mon, 02 Mar 2026 15:46:19 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2908,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 144 x 144, 8-bit/color RGBA, non-interlaced","md5":"9a5a67a3b984ab223eef25ac3f419432","sha1":"5b07513414db526d86d32c3b8f42c0dbb62a8e71","sha256":"38055609c5d61aad696e97b746489c7f886b79cc069326312c6a111062019777","sha512":"4f610ac72700d9727ff6d32567b7d71a582a8c87eb067e4f33a8a910c66968514277df68c0794d1db6ce3a94ed0111003a71afd8cab40dcb3bc062dfb9f14bad","ssdeep":"","tlshash":"0c5119e6d89d003a4dd329b7b0f03e45fe7ab5fb5ab6330480972b3065552ab84d8327","first_seen":"2024-10-20T08:32:52.883488Z","last_seen":"2026-07-27T07:09:42.371921Z","times_seen":296,"resource_available":false,"data":null}},"time_used":252,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":252,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-31","alert":"Sinkholed","trigger":"onchain-exchange.life","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"onchain-exchange.life/assets/index-2cbce33d.js","fqdn":"onchain-exchange.life","domain":"onchain-exchange.life","tld":"life"},"ip":{"addr":"118.107.59.199","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://onchain-exchange.life/","date":"2026-01-31T15:50:55.898Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.onchain-exchange.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 29 Jan 2026 02:25:58 GMT","end":"Wed, 29 Apr 2026 02:25:57 GMT"},"fingerprint":{"sha1":"2D:D4:CF:B0:3E:71:8C:44:4E:29:06:86:0C:F6:F4:8B:E9:4E:6A:CE","sha256":"65:F5:C4:59:64:4F:2A:1D:2A:6C:B6:9D:EF:40:88:95:08:30:26:56:53:2D:07:2B:BB:2C:63:04:AB:A1:02:50"}}},"request":{"raw":"GET /assets/index-2cbce33d.js HTTP/1.1\r\nHost: onchain-exchange.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 31 Jan 2026 15:46:17 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 04 Sep 2025 06:07:27 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68b92c9f-18e78\"\r\nexpires: Sun, 01 Feb 2026 03:46:17 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":102008,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65526), with no line terminators","md5":"434d2f8140d3cc2a4609bdd62a54667b","sha1":"4afe27bf4834f858acaac0a86f1886b023825c36","sha256":"6b8bc98bcc73c3f2d6c98c2ecd485bb6ca9c6716d6da0e13c2717be144bfd401","sha512":"39c0a57e9888b34c952d0635ae00d567d80149baa9d1f2a1c4ba4de3c17b4c9c5e9d67b6062d63bf151e5af5374ff33676b94c7741ad9f18ae8df67b164f42f8","ssdeep":"768:YrXf6BhmPgasJrgt6AjoEMWHn1g5wRJ/nhEW9wuKIACY2G9SiiwU14gh1CyVimVj:gXTroGEXEVDdwU19SSufsayK9C","tlshash":"8ca33acda50b0fbf28fd0898a95b551021681fd3988dccd3b37a6e5527facd8624a71c","first_seen":"2025-11-26T02:51:27.271145Z","last_seen":"2026-05-20T16:26:26.437016Z","times_seen":6,"resource_available":true,"data":null}},"time_used":504,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":504,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-31","alert":"Sinkholed","trigger":"onchain-exchange.life","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"onchain-exchange.life/platform/dev/favicon.ico?2.0.1756966047403","fqdn":"onchain-exchange.life","domain":"onchain-exchange.life","tld":"life"},"ip":{"addr":"118.107.59.199","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://onchain-exchange.life/","date":"2026-01-31T15:50:57.925Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.onchain-exchange.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 29 Jan 2026 02:25:58 GMT","end":"Wed, 29 Apr 2026 02:25:57 GMT"},"fingerprint":{"sha1":"2D:D4:CF:B0:3E:71:8C:44:4E:29:06:86:0C:F6:F4:8B:E9:4E:6A:CE","sha256":"65:F5:C4:59:64:4F:2A:1D:2A:6C:B6:9D:EF:40:88:95:08:30:26:56:53:2D:07:2B:BB:2C:63:04:AB:A1:02:50"}}},"request":{"raw":"GET /platform/dev/favicon.ico?2.0.1756966047403 HTTP/1.1\r\nHost: onchain-exchange.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 31 Jan 2026 15:46:19 GMT\r\ncontent-type: image/x-icon\r\ncontent-length: 4286\r\nlast-modified: Thu, 04 Sep 2025 06:07:09 GMT\r\netag: \"68b92c8d-10be\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4286,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 32x32, 32 bits/pixel","md5":"52fcbdc9b89c76570a1246925d321d0d","sha1":"3f50dd9c170be3d69730f9060d26c40c72bb9d96","sha256":"973c5a83c751f168437e3b261dbd6e939123a9908a711cbed65f18d74696a62d","sha512":"c070c3d1805d341a50bdf930c4fd272b83fe40b7f2f5fa873fc7c46c5cdfb867efa265a29b6d190f393c342edd7079d7181fadc8904d7c6b9b67aee9d3dafb6f","ssdeep":"96:fulu06nYkKiOeP1wl7tU3GLtIJyoAbdDes1:BYgF1K7tU2LtIwoEdDR1","tlshash":"c391debd5deea63cc201467128910264f6f2cf207afb2b0994f7f68dd92d40a532c9a5","first_seen":"2024-12-28T13:26:38.876326Z","last_seen":"2026-07-18T21:01:06.991397Z","times_seen":119,"resource_available":false,"data":null}},"time_used":252,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":252,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-31","alert":"Sinkholed","trigger":"onchain-exchange.life","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"onchain-exchange.life/assets/index-e4c09e61.css","fqdn":"onchain-exchange.life","domain":"onchain-exchange.life","tld":"life"},"ip":{"addr":"118.107.59.199","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://onchain-exchange.life/","date":"2026-01-31T15:50:55.902Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.onchain-exchange.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 29 Jan 2026 02:25:58 GMT","end":"Wed, 29 Apr 2026 02:25:57 GMT"},"fingerprint":{"sha1":"2D:D4:CF:B0:3E:71:8C:44:4E:29:06:86:0C:F6:F4:8B:E9:4E:6A:CE","sha256":"65:F5:C4:59:64:4F:2A:1D:2A:6C:B6:9D:EF:40:88:95:08:30:26:56:53:2D:07:2B:BB:2C:63:04:AB:A1:02:50"}}},"request":{"raw":"GET /assets/index-e4c09e61.css HTTP/1.1\r\nHost: onchain-exchange.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 31 Jan 2026 15:46:17 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 04 Sep 2025 06:07:27 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68b92c9f-4a5e6\"\r\nexpires: Sun, 01 Feb 2026 03:46:17 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":304614,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (65022), with no line terminators","md5":"9f73840daddca74e5e5583087edcca76","sha1":"8fb0fcaf13f0dcb21df86d256f30dfa0188bda6f","sha256":"e4c09e61c3c25ca4dd973f69f00bf83ef3efb36be5f21a93edc765eb282fe9b4","sha512":"9f79ce5a5aaf6fba4d8131bdc59713a4feb0ee1868180b3ecb2d0b0ac62ff6fe573f464b7b792baf9b31978541569941c416b80258e2c7064e34cb158b5926d2","ssdeep":"6144:naB/9S/Jk4UkZ8w71ZACkFDS3vyf58rBeV05T2:aB/54NZ8w71ZACkFDS3vyf58rBeV05T2","tlshash":"4754c6a9a590117c6f27aa7597ce9ad8f23ce6719c118de8f20160094fc3ff92363617","first_seen":"2025-11-26T02:51:27.272136Z","last_seen":"2026-05-20T16:26:26.428889Z","times_seen":6,"resource_available":false,"data":null}},"time_used":760,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":760,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-31","alert":"Sinkholed","trigger":"onchain-exchange.life","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"onchain-exchange.life/resource/fonts/Arial.ttf","fqdn":"onchain-exchange.life","domain":"onchain-exchange.life","tld":"life"},"ip":{"addr":"118.107.59.199","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://onchain-exchange.life/","date":"2026-01-31T15:50:56.951Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.onchain-exchange.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 29 Jan 2026 02:25:58 GMT","end":"Wed, 29 Apr 2026 02:25:57 GMT"},"fingerprint":{"sha1":"2D:D4:CF:B0:3E:71:8C:44:4E:29:06:86:0C:F6:F4:8B:E9:4E:6A:CE","sha256":"65:F5:C4:59:64:4F:2A:1D:2A:6C:B6:9D:EF:40:88:95:08:30:26:56:53:2D:07:2B:BB:2C:63:04:AB:A1:02:50"}}},"request":{"raw":"GET /resource/fonts/Arial.ttf HTTP/1.1\r\nHost: onchain-exchange.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://onchain-exchange.life/assets/index-e4c09e61.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 31 Jan 2026 15:46:18 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 1047012\r\nlast-modified: Thu, 04 Sep 2025 06:07:09 GMT\r\netag: \"68b92c8d-ff9e4\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1047012,"size_decoded":0,"mime_type":"application/octet-stream","magic":"TrueType Font data, digitally signed, 25 tables, 1st \"DSIG\", 58 names, Unicode, � 2017 The Monotype Corporation. All Rights Reserved. ","md5":"ffe66dbfc4b07f36ef38dd621ad2c7cc","sha1":"e032b102cfc37c3226d17e1b462edea5fbf8fe1c","sha256":"c1216a01b3cc4e94df72577a6f618154058a1d8999ed58fa31ab7e54c7e4be4b","sha512":"3c7952b71c8117938c5284efca0e0b3e8c20d7b84c74a4890f76a72af3b26295786b0f7c33d9b6c980527b4c4c8dad628d1f5e7e5f202d11076367f082349bb3","ssdeep":"24576:NoQIQRjo/Y7wjgTmKJ4WxA7EAD4OBfDamXKE6AMra:NHIQJo/Y7wjgTm0PxAwJHE6hG","tlshash":"f125be0bf3929f0fe3902b38c9a5d761939b76189b2743b73d8c5858ecc85a45e487d2","first_seen":"2023-07-29T15:16:45Z","last_seen":"2026-07-27T07:09:42.387393Z","times_seen":2145,"resource_available":false,"data":null}},"time_used":830,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":455,"receive":375,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-31","alert":"Sinkholed","trigger":"onchain-exchange.life","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"onchain-exchange.life/assets/vendor-0a14d709.js","fqdn":"onchain-exchange.life","domain":"onchain-exchange.life","tld":"life"},"ip":{"addr":"118.107.59.199","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://onchain-exchange.life/","date":"2026-01-31T15:50:57.545Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.onchain-exchange.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 29 Jan 2026 02:25:58 GMT","end":"Wed, 29 Apr 2026 02:25:57 GMT"},"fingerprint":{"sha1":"2D:D4:CF:B0:3E:71:8C:44:4E:29:06:86:0C:F6:F4:8B:E9:4E:6A:CE","sha256":"65:F5:C4:59:64:4F:2A:1D:2A:6C:B6:9D:EF:40:88:95:08:30:26:56:53:2D:07:2B:BB:2C:63:04:AB:A1:02:50"}}},"request":{"raw":"GET /assets/vendor-0a14d709.js HTTP/1.1\r\nHost: onchain-exchange.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 31 Jan 2026 15:46:18 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 04 Sep 2025 06:07:27 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68b92c9f-d69db\"\r\nexpires: Sun, 01 Feb 2026 03:46:18 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":879067,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"dd2b49b8e2e6b85276288003c7d8bf5b","sha1":"0c1586fceb60c8f0e47eca7b344f5af2ac383d13","sha256":"002b922e539a81a6ac692aab0757dfa2718437fa22a9ed75ed1d20ddf9d0383d","sha512":"40c35e92d5cb2b934eb125557fc54857ec17bde1b6dee86fb1f419fa7a3db0b9addca92602610a54e21029b2c100d872ea6e8026112b7302f8969048aaed66ff","ssdeep":"12288:Mv6NLEg6h1uVDwbV7VPY+L668W/LGDV2e8qwnWkOukK4a2Vd:Mv65Eg1VUh7a+J/LGD8ownWkOusa2X","tlshash":"681529c97292f06147ab24e240bb0006f3396e59744e84a4f16d98db7d7ad89e277f3c","first_seen":"2025-11-26T02:51:27.273938Z","last_seen":"2026-05-20T16:26:26.43002Z","times_seen":6,"resource_available":true,"data":null}},"time_used":255,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":255,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-31","alert":"Sinkholed","trigger":"onchain-exchange.life","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"onchain-exchange.life/api/common/getMt5Amount?coin=xag","fqdn":"onchain-exchange.life","domain":"onchain-exchange.life","tld":"life"},"ip":{"addr":"118.107.59.199","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://onchain-exchange.life/","date":"2026-01-31T15:50:57.957Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.onchain-exchange.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 29 Jan 2026 02:25:58 GMT","end":"Wed, 29 Apr 2026 02:25:57 GMT"},"fingerprint":{"sha1":"2D:D4:CF:B0:3E:71:8C:44:4E:29:06:86:0C:F6:F4:8B:E9:4E:6A:CE","sha256":"65:F5:C4:59:64:4F:2A:1D:2A:6C:B6:9D:EF:40:88:95:08:30:26:56:53:2D:07:2B:BB:2C:63:04:AB:A1:02:50"}}},"request":{"raw":"POST /api/common/getMt5Amount?coin=xag HTTP/1.1\r\nHost: onchain-exchange.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nlang: en-US\r\nOrigin: https://onchain-exchange.life\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 31 Jan 2026 15:46:19 GMT\r\ncontent-type: application/json\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://onchain-exchange.life\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":48,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"5186f33d47dca63396f22e6d72af32bf","sha1":"94e4f431bf295704bf89c38a8a471bc7ff7bc2f6","sha256":"d74f4729a6848358ef253c8ede99495927d2448808d2b277e414675848ddfe7c","sha512":"1bbf788771d15b58aaa79a00c393805edebd2d4d3ae562806ff3ca77886c742dedda4f9a3982b1e672cab7b102d1d85f8c10fa93036fb06a24094483aec7094d","ssdeep":"","tlshash":"749002555c1c8382b8d300a9950a12480034316036649a884c595125c0881a26058c58","first_seen":"2026-01-31T15:51:18.897987Z","last_seen":"2026-01-31T15:51:18.897987Z","times_seen":1,"resource_available":false,"data":null}},"time_used":254,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":254,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-31","alert":"Sinkholed","trigger":"onchain-exchange.life","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"onchain-exchange.life/assets/en-0a809b51.js","fqdn":"onchain-exchange.life","domain":"onchain-exchange.life","tld":"life"},"ip":{"addr":"118.107.59.199","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://onchain-exchange.life/","date":"2026-01-31T15:50:57.961Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.onchain-exchange.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 29 Jan 2026 02:25:58 GMT","end":"Wed, 29 Apr 2026 02:25:57 GMT"},"fingerprint":{"sha1":"2D:D4:CF:B0:3E:71:8C:44:4E:29:06:86:0C:F6:F4:8B:E9:4E:6A:CE","sha256":"65:F5:C4:59:64:4F:2A:1D:2A:6C:B6:9D:EF:40:88:95:08:30:26:56:53:2D:07:2B:BB:2C:63:04:AB:A1:02:50"}}},"request":{"raw":"GET /assets/en-0a809b51.js HTTP/1.1\r\nHost: onchain-exchange.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 31 Jan 2026 15:46:19 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 04 Sep 2025 06:07:27 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68b92c9f-9ffe\"\r\nexpires: Sun, 01 Feb 2026 03:46:19 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":40958,"size_decoded":0,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text, with very long lines (40935)","md5":"6fc0eb5601be1758429868cee4846e74","sha1":"f00602b8c7a9881f79a51c34944b50e67970d280","sha256":"86f822c6d5d240751bf70806702ac177ff4f4b86e148cf42818aa915bad7dce3","sha512":"a6b7aa1647fb6fc4613e832eba0e0f9fd177b7385a365bfcc5d1d166c9db6f6bb04589459acd1082c941c1c3e8389cc035ae693559ac8142f6a6b11f2fb275a3","ssdeep":"768:+GtZcEw/o7rKOdKFsiynAMcIrAaAMFVoP6+ksPG928mwO6fpk7aOjxzzC:iponKOd42+IrdFV9sPW29jxzO","tlshash":"0e03e7893e1a989a04f3537674ce6e1120f60ac18256881f4fedc9fd53d2b67a363b34","first_seen":"2025-11-26T02:51:27.280781Z","last_seen":"2026-05-20T16:26:26.431669Z","times_seen":8,"resource_available":true,"data":null}},"time_used":254,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":254,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-31","alert":"Sinkholed","trigger":"onchain-exchange.life","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"onchain-exchange.life/api/common/type/defi_activity_type","fqdn":"onchain-exchange.life","domain":"onchain-exchange.life","tld":"life"},"ip":{"addr":"118.107.59.199","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://onchain-exchange.life/","date":"2026-01-31T15:50:58.260Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.onchain-exchange.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 29 Jan 2026 02:25:58 GMT","end":"Wed, 29 Apr 2026 02:25:57 GMT"},"fingerprint":{"sha1":"2D:D4:CF:B0:3E:71:8C:44:4E:29:06:86:0C:F6:F4:8B:E9:4E:6A:CE","sha256":"65:F5:C4:59:64:4F:2A:1D:2A:6C:B6:9D:EF:40:88:95:08:30:26:56:53:2D:07:2B:BB:2C:63:04:AB:A1:02:50"}}},"request":{"raw":"POST /api/common/type/defi_activity_type HTTP/1.1\r\nHost: onchain-exchange.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nlanguage: en\r\nlang: en\r\nOrigin: https://onchain-exchange.life\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 31 Jan 2026 15:46:19 GMT\r\ncontent-type: application/json\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://onchain-exchange.life\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":635,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"7a423e3451e474878191a0a7f1d323b9","sha1":"13312f533f380295131f6a1540f425d0c98a16ba","sha256":"49c938e0bb3a834cab9319575489cf6c1694cace3f1ceb9671570024328e2a35","sha512":"0522e47fc06c4329cee21e354b264c90ae4b0725941d75cf63af54bee4a307fbe91e7078a412bd9750f3856657159ffe5efff139a652ec0443368f7c146bfdbf","ssdeep":"","tlshash":"5af028143d3dcebf098f65e745ec7818399c152794a0fca058ab0f3c5ae4171088921c","first_seen":"2025-04-07T11:28:26.961944Z","last_seen":"2026-07-25T14:35:33.345146Z","times_seen":783,"resource_available":false,"data":null}},"time_used":255,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":255,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-31","alert":"Sinkholed","trigger":"onchain-exchange.life","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}}]}
