{"report_id":"407e58e1-1d46-4dc5-a800-5e14a2b54c41","version":6,"status":"done","tags":[],"date":"2026-04-10T14:43:49Z","url":{"schema":"http","addr":"onchainusdcsaving.com","fqdn":"onchainusdcsaving.com","domain":"onchainusdcsaving.com","tld":"com"},"ip":{"addr":"118.107.28.253","port":0,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"final":{"url":{"schema":"https","addr":"onchainusdcsaving.com/#/no-wallet","fqdn":"onchainusdcsaving.com","domain":"onchainusdcsaving.com","tld":"com"},"title":"USDT Savings","dom":{"size":6446,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (1274)","md5":"18253e229576b7c1c45ff96dfd436147","sha1":"3053fb21c7be159db61dd678dc305768fbd544e7","sha256":"eae254844cb5de855ab90b94aa2a7509c8e188b08c280d2a64737579c54c55e0","sha512":"10aa2a22ed7207799b043ef63bb1f6a20598ce5a3a100ecec019e5117380021530594d5bb45ab72c232efbb0d82fc37e50cb961d4ccde7cdef9782fe0427de5a","ssdeep":"96:68iCZprCuj7SFVlUit/aXr6TCZydHRH/9Y2mUsGKAiowG9QhQhQxVM0KUeZedB11:hT7KbIZCxfa2nfD3bPoeZedB1nYAYzfw","tlshash":"72d1b9b3a9e0841723634697dad7b518ae729217880e5810b5cd80e94fe1ff5c8c77b5","dom_hash":"domhash4b2dadc8a84def067818e18aab079d8f","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"onchainusdcsaving.com","fqdn":"onchainusdcsaving.com","domain":"onchainusdcsaving.com","tld":"com"},"ip":{"addr":"118.107.28.253","port":0,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-05-15T14:43:49Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":1,"urlquery":0,"analyzer":0}},"detection":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-04-10T14:43:27Z","timestamp":1775832207,"ip_dst":{"addr":"118.107.28.253","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"ip_src":{"addr":"Client IP","port":43206,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"medium","alert":"ET INFO Suspicious Domain (*.icu) in TLS SNI","source":"{\"timestamp\":\"2026-04-10T14:43:27.838012+0000\",\"flow_id\":421789621485721,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.17\",\"src_port\":43206,\"dest_ip\":\"118.107.28.253\",\"dest_port\":443,\"proto\":\"TCP\",\"metadata\":{\"flowbits\":[\"ET.Evil\",\"ET.DROPIP\"]},\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2026889,\"rev\":4,\"signature\":\"ET INFO Suspicious Domain (*.icu) in TLS SNI\",\"category\":\"Potentially Bad Traffic\",\"severity\":2,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2019_02_06\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2022_11_21\"]}},\"tls\":{\"sni\":\"webapi.jhyiu-daw.icu\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"15af977ce25de452b96affa2addb1036\",\"string\":\"771,4866,43-51\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":4,\"bytes_toserver\":922,\"bytes_toclient\":3168,\"start\":\"2026-04-10T14:43:27.327833+0000\"}}"}],"analyzer":null,"urlquery":null},"summary":[{"fqdn":"onchainusdcsaving.com","ip":{"addr":"118.107.28.253","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"domain_registered":"2026-02-19","domain_rank":0,"first_seen":"2026-04-10T14:43:51.805074Z","last_seen":"2026-04-10T14:43:51.805074Z","alert_count":0,"request_count":13,"received_data":3439677,"sent_data":6295,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"webapi.jhyiu-daw.icu","ip":{"addr":"118.107.28.253","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"domain_registered":"2025-04-20","domain_rank":0,"first_seen":"2025-12-30T23:38:10.065983Z","last_seen":"2026-04-06T13:08:23.872941Z","alert_count":0,"request_count":13,"received_data":42858,"sent_data":6760,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"onchainusdcsaving.com/","fqdn":"onchainusdcsaving.com","domain":"onchainusdcsaving.com","tld":"com"},"ip":{"addr":"118.107.28.253","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":true,"md5":"149b81ed17ec66b9ce0e6930a84d4a93","sha1":"901202a80e7c55702525e6f75bbdca81ba8dde44","sha256":"b6cf58e2facee99857b99d58d44fcfd961876908dc39f711788594cc2539d519","sha512":"742a8a3bb87ae3ab50aa093ea12967700032b787debd712f1fd558f12c8443dd7f5c00a14d48d19b6cbf9dd09bfb477988c2d5389ae1c3ffeba07ded48c8f83c","ssdeep":"","tlshash":"c411abfe291aa1296303404f976b7911643250b9000a184277ccde9dbb9ab7dd0cfb8c","size":1048,"data":"","first_seen":"2026-04-10T14:36:22.490026Z","last_seen":"2026-04-10T14:43:55.141591Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"onchainusdcsaving.com/#/no-wallet","fqdn":"onchainusdcsaving.com","domain":"onchainusdcsaving.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"9d379fc52463f2b630c6894900da5180","sha1":"b33fecceae6c1ef97518c6ad7159534d78e7b2f7","sha256":"6c3288c6af4396096b1a8a927fbfaf05ac8cc29658fc97d13cf036ba6bb38ab3","sha512":"49b43b0c253e26c135bd5009d73c537cf2e78342ef6b116ce6efbd3627152ac804449ec5cbe637a544b5557b52a50213a19dfcf33158a4f6b0a8ff91d79372d5","ssdeep":"","tlshash":"61c012c5a0da29102951595424bf28e8a024c026b55c6b169de4dda829e64fcc627d98","size":190,"data":"","first_seen":"2024-07-11T15:08:28Z","last_seen":"2026-04-10T14:43:55.142299Z","times_seen":406,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"onchainusdcsaving.com/#/no-wallet","fqdn":"onchainusdcsaving.com","domain":"onchainusdcsaving.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"a12beb8c3bea6886db7346b336af5549","sha1":"d816d03c631617eb32b27baac48feb2c2495ced9","sha256":"a4d1b2dbfcfa038ac5b5e980ea2f3fdc31948863bfca2849320183410f831fc4","sha512":"0ac7131f62c6f4834a04a8f1824d28bbc3f95975bdf2d1b90b026db770f6320d735e910aced8d25ce7ce198de07b5af06c957855d3b8f62ccba1cca16810658b","ssdeep":"","tlshash":"d6c08cc4a0c22d001642691014af28e4d024a026b0485b168c98dc892e630b09237ea8","size":142,"data":"","first_seen":"2025-04-13T20:28:04.827015Z","last_seen":"2026-04-10T14:43:55.143023Z","times_seen":40,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"onchainusdcsaving.com/assets/en-957fcd2d.js","fqdn":"onchainusdcsaving.com","domain":"onchainusdcsaving.com","tld":"com"},"ip":{"addr":"118.107.28.253","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"50ceebc4416edacf5ebd4bb6c4c437b8","sha1":"a4d7e1c7944ed840f097e5a5b4124b6d1c07150a","sha256":"5e411802073bfde7490016dcbe87f8ed242aad10b6b366a73402c16df2041f8a","sha512":"873a8950d26cb248129ec5f0ef14369d2ddef8c0703e12804aa4de315f58dd3d9c705ba2a44d38adf721b587a94447e667bdac778baa8f44565b740dba023cfc","ssdeep":"768:+GtZcEw/o7rKOUAFsifnAMC2rAaAMFXF6+6sP4u9w1mwO6fpk7aOLeir7:iponKOUebE2rdFXKsP4ewqLeif","tlshash":"5c13d6897e1a889a04f35376b4ce6e5120f60ac18255881f4fedc9fd53d2b67a363734","size":41587,"data":"","first_seen":"2025-12-30T23:38:20.673388Z","last_seen":"2026-04-10T14:43:55.114465Z","times_seen":26,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"onchainusdcsaving.com/assets/index-c587dfe8.js","fqdn":"onchainusdcsaving.com","domain":"onchainusdcsaving.com","tld":"com"},"ip":{"addr":"118.107.28.253","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"945b07c65ad184bf016d495e33299776","sha1":"994aa2a2493238df23ae13970f687d5709a92beb","sha256":"6c2b99eaed6db04282fe617a10ed5ca35b40c2fb82eda7b02e58443ca37ddf09","sha512":"ac85a991dc2530c57d1ebe07c131f11265c6f2cf47febb6f74068688f52f2b0656f35086d68c8d8d63f1cd8143625055d41b0950085667cfe75e5ddc9089c561","ssdeep":"768:DBT6EmtguQsTE/6sfcUD8c4NaiOX8Aagu3VKivLKQZLv8+m8MqhKJhqre6fNHJ5c:MsxcPWsbxv4+m8NhNU976MGGlEDs3","tlshash":"96a34a8aa5070fff58be0894691f181022681fd75d8c8cd3b6be6e562bf9cd4635d328","size":104960,"data":"","first_seen":"2026-04-10T14:36:22.477074Z","last_seen":"2026-04-10T14:43:55.138734Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"onchainusdcsaving.com/#/no-wallet","fqdn":"onchainusdcsaving.com","domain":"onchainusdcsaving.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"7c96400943ff63b3b008a98a27c61e3d","sha1":"2b6d5e460a71aaca5d5e7e91e461d75dea0115b8","sha256":"75a2968bb74aab72703044f8502f087e0198d3f6f17c8d32282e3c445ebc0474","sha512":"83bf2b18f155399572df2e325e2ffe5ba1f6f0f90e7816d2d9982422ca134894326e10b7f61936b6f79cbc22e8ad6ef2307fa4bc41ff35aefb4178ac731dfab1","ssdeep":"","tlshash":"bce0abf370b8c1208981121f2cdc282ba3c665b20c4c4e2ab8c8e5186e5cc28207e091","size":408,"data":"","first_seen":"2025-12-30T23:38:20.703838Z","last_seen":"2026-04-10T14:43:55.143865Z","times_seen":20,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"onchainusdcsaving.com/#/no-wallet","fqdn":"onchainusdcsaving.com","domain":"onchainusdcsaving.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"7746993e8adb9277ba5afa2584910974","sha1":"8e7e6d562fd56f594b40b6657156d483d7426e40","sha256":"833dc15f120cad89d5c0680edae217dbad02010e42af351959607df4170074ee","sha512":"10ee66e22fa45386057f1385e179955ad4fd4d53363c0aebe68aa9ba0547bf409a286e53ab6e678e5d0c3485d6cabcdd359f359c5258160b50a0a5a5496d6e6d","ssdeep":"","tlshash":"39c08cc5a0c22e101646641010bf28e49024402674481b028c98d8482e220b08233e9c","size":140,"data":"","first_seen":"2023-04-13T07:32:13Z","last_seen":"2026-04-10T16:38:05.521448Z","times_seen":3010,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"onchainusdcsaving.com/charting_library/charting_library.min.js","fqdn":"onchainusdcsaving.com","domain":"onchainusdcsaving.com","tld":"com"},"ip":{"addr":"118.107.28.253","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"8573e89d9ec535663d75f21b1f08109c","sha1":"a8d9eea0b157ceeffc38d4254e6f6abc9d697d10","sha256":"cb0c6c9f1771d252eee7caa043bdd7cfffbd52c2cc4b18b7be7c4554ed069151","sha512":"55d728fa1e0682725f94b17387c6790792d3d34b43652a00097876118575bd6cefa20916d80674519005d72f20ecbb745e9645516c056e6f9bb6691d5efbcb33","ssdeep":"192:9fdWSo7ktFUnoBelr6lw2LfnzuIQPlaJ1i10K+Ei/ISJhvHIheu5Ph3Ffam:vWS2ktFUnoIlD2LfnqIJimK+5/ISJhvu","tlshash":"6e224f58ed2478720acb54f0427f180f8239e278d84944ed3cc4e6ec59fd44a6a6fbb8","size":10858,"data":"","first_seen":"2023-08-16T00:37:19Z","last_seen":"2026-04-10T15:03:13.146392Z","times_seen":435,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"onchainusdcsaving.com/","fqdn":"onchainusdcsaving.com","domain":"onchainusdcsaving.com","tld":"com"},"ip":{"addr":"118.107.28.253","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":true,"md5":"cd7a34e714de94d5c29b8ac5acdde24b","sha1":"b722bccb435490630d97ef88cafeb02d92f70fd0","sha256":"312ebfdc50a0e168cff60c206811b02e944263a7d9060c2685509dacfacd7f71","sha512":"a724bc648a508c24e5bb1788e1f02b47030893bbb0b80a99e380d95480095983a35d8ec11193c53f0a67db47a289ab608fcbc9dbca846bfdd5d61a8832290f43","ssdeep":"","tlshash":"58e07d48ff28c7f316ce28ab516e770858d104d58c1b58024cebccc86935ed87291527","size":314,"data":"","first_seen":"2023-03-11T11:23:25Z","last_seen":"2026-04-10T17:55:01.959453Z","times_seen":30492,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"onchainusdcsaving.com/assets/vendor-64f46974.js","fqdn":"onchainusdcsaving.com","domain":"onchainusdcsaving.com","tld":"com"},"ip":{"addr":"118.107.28.253","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"introduction_type":"importedModule","is_inline":false,"md5":"3abf93235f8805aa2deb613de1c2e022","sha1":"3d00674e75280d0c645aab6e995dadb83c2e5e29","sha256":"4d5b7079708762a681efb01593bd187df376929eb2119a74fff768d1cbf01344","sha512":"87d7887c903a132b9189f0b75fdd99897fafd08a343443ded10b564a4120b21a2e703818267814284a0545a8337ffc61e44dc17efd049a48d30898388d199208","ssdeep":"12288:5RnbvFkQvVb8mXXdRLYNmD/ahCVawlVaPeJZ3J/pooTqr9szo/UXRdBE7m+jYhSr:5RnbvFjoiXTLxahCVlSG3WtYioSstI","tlshash":"f31528c97292f06147ab24e240bb0106f3396e59740e84a4f1ad98eb7d79d89d277f3c","size":889410,"data":"","first_seen":"2025-12-30T23:38:20.64961Z","last_seen":"2026-04-10T14:43:55.129455Z","times_seen":26,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"onchainusdcsaving.com/#/no-wallet","fqdn":"onchainusdcsaving.com","domain":"onchainusdcsaving.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"c0e88513b499aae066f13f6f0edfedab","sha1":"12fd9320e7be26e9257e2a1a39a698a5e2706292","sha256":"3ffd5a1fea533c35c122aeb0a36f3d4a37022e0a14c83167faeaa819b3ee8cfd","sha512":"36b57e74aa71e21ec5489637f206796e8b9097db32c59e4ffbbdd7eb11ce35c2f754178f996bd6e11abc560cdddd3af7cde3fc1847c1a455120b5c26ee4fb838","ssdeep":"","tlshash":"17c08cc8b0c6ad001602e45111bf25e4a024802770481b128d98e8483e220f48233e9c","size":139,"data":"","first_seen":"2023-08-29T11:10:58Z","last_seen":"2026-04-10T14:43:55.146089Z","times_seen":582,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"onchainusdcsaving.com/#/no-wallet","fqdn":"onchainusdcsaving.com","domain":"onchainusdcsaving.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"51e586f9b3825943ee5e3bb9ca606ad3","sha1":"ca2bf67804939fb4d9bc9afb5f7470e36e0037f4","sha256":"63aa8568c2b31ae59842bdf28b74c1b266b81d186c72ee64d0ec371f48d458de","sha512":"ddd3f2c11759fdf632e9c6b4021c8755cee3bddff9efb9071dfef3f844bde35ef421169ce982ff1c69f7402dc70f428d776bba513a73136631b0a8b09e44c12f","ssdeep":"","tlshash":"a7c08cc6a0d22d001616641014af24e89024402670485f128c94d84c2e220f09233ea8","size":142,"data":"","first_seen":"2025-04-13T20:28:04.830126Z","last_seen":"2026-04-10T14:43:55.146801Z","times_seen":45,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"onchainusdcsaving.com/#/no-wallet","fqdn":"onchainusdcsaving.com","domain":"onchainusdcsaving.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"dcd79ed7f4bc026b4db96e1ae9b8fb97","sha1":"598a212ecf4898b9b2892412e9e83a400d5a008b","sha256":"cbb9e541e67567a3dc61831e08ec402a53984cff58a096f1a48597da3df62c77","sha512":"24a9faf9ea6f0ccd4e9af46a3ca424ff87b2b37001b079c8c4e0b0081d9a844d4e6bfc81c73a2243776d58f8bb1304f4d572975c70a3139c4d2125e5da54c9a7","ssdeep":"","tlshash":"95d0a7d5b1861e605745575524ef15e4a138842a76444716cd9c990c2a520f88333f98","size":224,"data":"","first_seen":"2025-04-13T20:28:04.831233Z","last_seen":"2026-04-10T14:43:55.147555Z","times_seen":40,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"onchainusdcsaving.com/","fqdn":"onchainusdcsaving.com","domain":"onchainusdcsaving.com","tld":"com"},"ip":{"addr":"118.107.28.253","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":true,"md5":"528dd01eb509d1fc3c68b48e165c9d77","sha1":"8d702f33d869eb8c53cf75c17014f96385322395","sha256":"b508dff20bdbd9138e31aa48c45bc501805e509d2fd4709b39c4a60cd5c6b43a","sha512":"4c1edeec560f431005363ff5291acc80c1c42edf7c9a6d6e4fde2f7539b6a35a8e36f0bc228503263277bf5df4525dc579575faadca614c32e5dfa885a2d343b","ssdeep":"","tlshash":"78a012bb71b851710cd51ba7a40455e01c20123105052c101c8d5151c011c171d394c0","size":84,"data":"","first_seen":"2023-04-07T06:55:59Z","last_seen":"2026-04-10T17:55:01.960795Z","times_seen":34180,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"onchainusdcsaving.com/#/no-wallet","fqdn":"onchainusdcsaving.com","domain":"onchainusdcsaving.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"3b8169908f63877e8e60a39198f276ad","sha1":"c168a52fac932c30ce26c29354094eb425561757","sha256":"e4ef5cf4ec0d569c9f0e48a159f32fb1b0db370020139adba6a80ea708200830","sha512":"0ccb1f75e1f25c2fed565176bbd9e0f2a216bd3b2e2df3f161a3aca8ba607ad435353e94382ba33db3d13c24f42c57a87299e3e45c68e6a3ed88adbe83d10cea","ssdeep":"","tlshash":"47c08cc9a1c22e006602651155bf35f4a024402a71481b178ee4d8982f230f88233ed8","size":156,"data":"","first_seen":"2025-04-13T20:28:04.833363Z","last_seen":"2026-04-10T14:43:55.149043Z","times_seen":30,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null},"http":[{"url":{"schema":"https","addr":"onchainusdcsaving.com/assets/index-6854b246.css","fqdn":"onchainusdcsaving.com","domain":"onchainusdcsaving.com","tld":"com"},"ip":{"addr":"118.107.28.253","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://onchainusdcsaving.com/","date":"2026-04-10T14:43:25.837Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"onchainusdcsaving.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 09 Apr 2026 14:35:26 GMT","end":"Wed, 08 Jul 2026 14:35:25 GMT"},"fingerprint":{"sha1":"EB:8A:20:EF:AE:63:45:C1:BF:72:E1:08:DD:82:D5:F5:76:EB:9C:0B","sha256":"F9:90:DF:90:60:99:C0:18:54:80:6A:E8:C6:69:F9:6E:D1:F8:1E:72:5E:8C:23:1D:9A:70:C6:68:7D:E7:60:1F"}}},"request":{"raw":"GET /assets/index-6854b246.css HTTP/1.1\r\nHost: onchainusdcsaving.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: server_name_session=f92d1653e14ce9e3eaea0d0a71a55618\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 10 Apr 2026 14:43:25 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 09 Apr 2026 16:29:06 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69d7d3d2-4af23\"\r\nexpires: Sat, 11 Apr 2026 02:43:25 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":306979,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (65022), with no line terminators","md5":"c4757fd454d234b068ab77ae16406213","sha1":"3ecb9821238eda95f1dffaee46bfbf9ae15c52dc","sha256":"6854b2466dee3cd5aa60e7c7db22341e47f8f6f383c29af8509011a29a32d596","sha512":"99ff1138c0b3626f4c93d034a1c5e90a1761466983a4ab5b8167dadbf079b55a267c293d0241be30fe56efad7974cca7d903097305c5fa3db9a2054a1f9eefd8","ssdeep":"6144:nTN/9SpddBmkZ8w71ZACkFDS3vyf58rBeV05T7:TN/YBTZ8w71ZACkFDS3vyf58rBeV05T7","tlshash":"bf64d8a9a59011bc6f27aa7597ce5ad8f23ce6719c018de8f201600a4fc3ff91367617","first_seen":"2026-02-23T22:56:26.020185Z","last_seen":"2026-04-10T14:43:55.109018Z","times_seen":12,"resource_available":false,"data":null}},"time_used":764,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":764,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webapi.jhyiu-daw.icu/api/common/getAllSetting","fqdn":"webapi.jhyiu-daw.icu","domain":"jhyiu-daw.icu","tld":"icu"},"ip":{"addr":"118.107.28.253","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://onchainusdcsaving.com/","date":"2026-04-10T14:43:28.197Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webapi.jhyiu-daw.icu","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 09 Apr 2026 14:24:30 GMT","end":"Wed, 08 Jul 2026 14:24:29 GMT"},"fingerprint":{"sha1":"BF:F7:51:C2:30:90:8E:4A:7A:8C:60:D9:23:EF:DC:C5:D1:5C:82:36","sha256":"4A:39:5A:6B:CC:26:8B:89:39:44:C1:BE:AC:DE:E8:90:70:72:C1:C5:C0:16:07:98:79:6A:6C:80:DD:2E:FE:0B"}}},"request":{"raw":"POST /api/common/getAllSetting HTTP/1.1\r\nHost: webapi.jhyiu-daw.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nlang: en-US\r\nOrigin: https://onchainusdcsaving.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 10 Apr 2026 14:43:28 GMT\r\ncontent-type: application/json\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://onchainusdcsaving.com\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nset-cookie: server_name_session=ff0146b5df195fada969e1140d415c90; Max-Age=86400; httponly; path=/\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":14132,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"f720b111e494cac694598fc66f0d32b5","sha1":"915780e114cfa9faf9e079ca010fb98bff213583","sha256":"0e0085b062a0d559729d9cb000e422b90aa058a0ec4a21ac63a9b5c7b60164dd","sha512":"e1e8b1cd23d5966e6b49383df74f4b42eaf124b50d23e48420fd619f9b6434d38246561042090915812dc4d1367751ef1811cffd1792f9fad71b7bd4f09a3ba5","ssdeep":"384:bGyhGjDaFqHXigCj2OGzTj0aH3NyHPWQnb:bGyYjDaFq3igeyj0a9yHOQb","tlshash":"8152b81a32d8dcbd83e75aca90fb39057adc386bd594e841d4a7ef5c85e9df2480b009","first_seen":"2026-04-06T13:08:31.77668Z","last_seen":"2026-04-10T14:43:55.111653Z","times_seen":10,"resource_available":false,"data":null}},"time_used":271,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":271,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"onchainusdcsaving.com/assets/en-957fcd2d.js","fqdn":"onchainusdcsaving.com","domain":"onchainusdcsaving.com","tld":"com"},"ip":{"addr":"118.107.28.253","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://onchainusdcsaving.com/","date":"2026-04-10T14:43:28.478Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"onchainusdcsaving.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 09 Apr 2026 14:35:26 GMT","end":"Wed, 08 Jul 2026 14:35:25 GMT"},"fingerprint":{"sha1":"EB:8A:20:EF:AE:63:45:C1:BF:72:E1:08:DD:82:D5:F5:76:EB:9C:0B","sha256":"F9:90:DF:90:60:99:C0:18:54:80:6A:E8:C6:69:F9:6E:D1:F8:1E:72:5E:8C:23:1D:9A:70:C6:68:7D:E7:60:1F"}}},"request":{"raw":"GET /assets/en-957fcd2d.js HTTP/1.1\r\nHost: onchainusdcsaving.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: server_name_session=f92d1653e14ce9e3eaea0d0a71a55618\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 10 Apr 2026 14:43:28 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 09 Apr 2026 16:29:06 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69d7d3d2-a275\"\r\nexpires: Sat, 11 Apr 2026 02:43:28 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":41589,"size_decoded":0,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text, with very long lines (41566)","md5":"50ceebc4416edacf5ebd4bb6c4c437b8","sha1":"a4d7e1c7944ed840f097e5a5b4124b6d1c07150a","sha256":"5e411802073bfde7490016dcbe87f8ed242aad10b6b366a73402c16df2041f8a","sha512":"873a8950d26cb248129ec5f0ef14369d2ddef8c0703e12804aa4de315f58dd3d9c705ba2a44d38adf721b587a94447e667bdac778baa8f44565b740dba023cfc","ssdeep":"768:+GtZcEw/o7rKOUAFsifnAMC2rAaAMFXF6+6sP4u9w1mwO6fpk7aOLeir7:iponKOUebE2rdFXKsP4ewqLeif","tlshash":"5c13d6897e1a889a04f35376b4ce6e5120f60ac18255881f4fedc9fd53d2b67a363734","first_seen":"2025-12-30T23:38:20.673388Z","last_seen":"2026-04-10T14:43:55.114465Z","times_seen":26,"resource_available":true,"data":null}},"time_used":256,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":256,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webapi.jhyiu-daw.icu/api/common/getMt5Amount?coin=xau","fqdn":"webapi.jhyiu-daw.icu","domain":"jhyiu-daw.icu","tld":"icu"},"ip":{"addr":"118.107.28.253","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://onchainusdcsaving.com/","date":"2026-04-10T14:43:28.726Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webapi.jhyiu-daw.icu","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 09 Apr 2026 14:24:30 GMT","end":"Wed, 08 Jul 2026 14:24:29 GMT"},"fingerprint":{"sha1":"BF:F7:51:C2:30:90:8E:4A:7A:8C:60:D9:23:EF:DC:C5:D1:5C:82:36","sha256":"4A:39:5A:6B:CC:26:8B:89:39:44:C1:BE:AC:DE:E8:90:70:72:C1:C5:C0:16:07:98:79:6A:6C:80:DD:2E:FE:0B"}}},"request":{"raw":"POST /api/common/getMt5Amount?coin=xau HTTP/1.1\r\nHost: webapi.jhyiu-daw.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nlang: en-US\r\nOrigin: https://onchainusdcsaving.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 10 Apr 2026 14:43:28 GMT\r\ncontent-type: application/json\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://onchainusdcsaving.com\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nset-cookie: server_name_session=ff0146b5df195fada969e1140d415c90; Max-Age=86400; httponly; path=/\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":48,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"ebfd8b90f064fad532c2029e66119a2a","sha1":"066ce3ffd30498b18ec41dd05999f59954f5e1de","sha256":"d31f3d1a2cd44fdf119709137f2befe8af47d3bd759ef062852128c46eee628d","sha512":"ba4429e9dbb5271562b5538204e70f1edd7602adaaf1097068224d8f7279119f4b5829fd785420e7ad09e44fcc72a65ff1f2eacf73950dfd7ccc79e03e47af64","ssdeep":"","tlshash":"349002562e188292b88b25a59506660400243174262492484c69512580891622064c58","first_seen":"2026-04-10T14:43:55.116306Z","last_seen":"2026-04-10T14:43:55.116306Z","times_seen":1,"resource_available":false,"data":null}},"time_used":253,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":253,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webapi.jhyiu-daw.icu/api/common/getMt5Amount?coin=xag","fqdn":"webapi.jhyiu-daw.icu","domain":"jhyiu-daw.icu","tld":"icu"},"ip":{"addr":"118.107.28.253","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://onchainusdcsaving.com/","date":"2026-04-10T14:43:28.737Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webapi.jhyiu-daw.icu","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 09 Apr 2026 14:24:30 GMT","end":"Wed, 08 Jul 2026 14:24:29 GMT"},"fingerprint":{"sha1":"BF:F7:51:C2:30:90:8E:4A:7A:8C:60:D9:23:EF:DC:C5:D1:5C:82:36","sha256":"4A:39:5A:6B:CC:26:8B:89:39:44:C1:BE:AC:DE:E8:90:70:72:C1:C5:C0:16:07:98:79:6A:6C:80:DD:2E:FE:0B"}}},"request":{"raw":"POST /api/common/getMt5Amount?coin=xag HTTP/1.1\r\nHost: webapi.jhyiu-daw.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nlang: en-US\r\nOrigin: https://onchainusdcsaving.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 10 Apr 2026 14:43:28 GMT\r\ncontent-type: application/json\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://onchainusdcsaving.com\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nset-cookie: server_name_session=ff0146b5df195fada969e1140d415c90; Max-Age=86400; httponly; path=/\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":48,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"d51c8394b999bce8f63e8997b68b4916","sha1":"08a65e25bab279242a2dcae08d7b37215a5f383a","sha256":"3a3dbb4048bf8cd4e8572b2682e8ae6eaf536f46cef2548e6c06e8b1e0fc1e16","sha512":"b69c27d8126b1eb692e1a3df9de1c913f2b236219c9aa5524c94467eb8ddb14968b857739840954a4e294753e27af45a7ada53feca1a9122be66ffc83f4bc0d8","ssdeep":"","tlshash":"cf9002551e18c242fc8300a59647561400343160272492594d59512580982622080c58","first_seen":"2026-04-10T14:43:55.121813Z","last_seen":"2026-04-10T14:43:55.121813Z","times_seen":1,"resource_available":false,"data":null}},"time_used":253,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":253,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webapi.jhyiu-daw.icu/api/common/type/defi_activity_type","fqdn":"webapi.jhyiu-daw.icu","domain":"jhyiu-daw.icu","tld":"icu"},"ip":{"addr":"118.107.28.253","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://onchainusdcsaving.com/","date":"2026-04-10T14:43:29.077Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webapi.jhyiu-daw.icu","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 09 Apr 2026 14:24:30 GMT","end":"Wed, 08 Jul 2026 14:24:29 GMT"},"fingerprint":{"sha1":"BF:F7:51:C2:30:90:8E:4A:7A:8C:60:D9:23:EF:DC:C5:D1:5C:82:36","sha256":"4A:39:5A:6B:CC:26:8B:89:39:44:C1:BE:AC:DE:E8:90:70:72:C1:C5:C0:16:07:98:79:6A:6C:80:DD:2E:FE:0B"}}},"request":{"raw":"POST /api/common/type/defi_activity_type HTTP/1.1\r\nHost: webapi.jhyiu-daw.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nlanguage: en\r\nlang: en\r\nOrigin: https://onchainusdcsaving.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 10 Apr 2026 14:43:29 GMT\r\ncontent-type: application/json\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://onchainusdcsaving.com\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nset-cookie: server_name_session=ff0146b5df195fada969e1140d415c90; Max-Age=86400; httponly; path=/\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":635,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"7a423e3451e474878191a0a7f1d323b9","sha1":"13312f533f380295131f6a1540f425d0c98a16ba","sha256":"49c938e0bb3a834cab9319575489cf6c1694cace3f1ceb9671570024328e2a35","sha512":"0522e47fc06c4329cee21e354b264c90ae4b0725941d75cf63af54bee4a307fbe91e7078a412bd9750f3856657159ffe5efff139a652ec0443368f7c146bfdbf","ssdeep":"","tlshash":"5af028143d3dcebf098f65e745ec7818399c152794a0fca058ab0f3c5ae4171088921c","first_seen":"2025-04-07T11:28:26.961944Z","last_seen":"2026-04-10T14:43:55.12409Z","times_seen":496,"resource_available":false,"data":null}},"time_used":254,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":254,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"onchainusdcsaving.com/","fqdn":"onchainusdcsaving.com","domain":"onchainusdcsaving.com","tld":"com"},"ip":{"addr":"118.107.28.253","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-04-10T14:43:24.762Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"onchainusdcsaving.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 09 Apr 2026 14:35:26 GMT","end":"Wed, 08 Jul 2026 14:35:25 GMT"},"fingerprint":{"sha1":"EB:8A:20:EF:AE:63:45:C1:BF:72:E1:08:DD:82:D5:F5:76:EB:9C:0B","sha256":"F9:90:DF:90:60:99:C0:18:54:80:6A:E8:C6:69:F9:6E:D1:F8:1E:72:5E:8C:23:1D:9A:70:C6:68:7D:E7:60:1F"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: onchainusdcsaving.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 10 Apr 2026 14:43:25 GMT\r\ncontent-type: text/html\r\nlast-modified: Thu, 09 Apr 2026 16:29:08 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69d7d3d4-14c5\"\r\nset-cookie: server_name_session=f92d1653e14ce9e3eaea0d0a71a55618; Max-Age=86400; httponly; path=/\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5317,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1094)","md5":"c08d0e44fabe9874cac10b5f94f91454","sha1":"70ee4840ce230a8cb8b979013cd9557f6a50af99","sha256":"1cb08acec671d2527ae7175acca6c2a8cef34c9ecee46f84c9a90c5224393fba","sha512":"df12e2ee9cac494519132d21a4177a980a201838e481f4798f693e3bfc9a2962786ba86e19845a22acb30c034ba7693d25e2a18ceea8d3f760951bcc8f056ca7","ssdeep":"96:AbCL5yKuc67DCfnt/z0r6TCZydHRH/gY2mUsGKAiowGpuB1niHgiHTH/w:AUL67cuZCxfJ2nfD3bpuB1niAizfw","tlshash":"4cb161b3adb0c92a2355022bebd7f0189e620193851e5854b0cd84ed8fe5fe584db7b1","first_seen":"2026-04-10T14:36:22.481649Z","last_seen":"2026-04-10T14:43:55.124901Z","times_seen":6,"resource_available":true,"data":null}},"time_used":1258,"timings":{"blocked":505,"dns":0,"connect":248,"send":0,"wait":248,"receive":0,"ssl":254},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"onchainusdcsaving.com/assets/vendor-72ef657d.css","fqdn":"onchainusdcsaving.com","domain":"onchainusdcsaving.com","tld":"com"},"ip":{"addr":"118.107.28.253","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://onchainusdcsaving.com/","date":"2026-04-10T14:43:25.836Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"onchainusdcsaving.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 09 Apr 2026 14:35:26 GMT","end":"Wed, 08 Jul 2026 14:35:25 GMT"},"fingerprint":{"sha1":"EB:8A:20:EF:AE:63:45:C1:BF:72:E1:08:DD:82:D5:F5:76:EB:9C:0B","sha256":"F9:90:DF:90:60:99:C0:18:54:80:6A:E8:C6:69:F9:6E:D1:F8:1E:72:5E:8C:23:1D:9A:70:C6:68:7D:E7:60:1F"}}},"request":{"raw":"GET /assets/vendor-72ef657d.css HTTP/1.1\r\nHost: onchainusdcsaving.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: server_name_session=f92d1653e14ce9e3eaea0d0a71a55618\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 10 Apr 2026 14:43:25 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 09 Apr 2026 16:29:06 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69d7d3d2-16997\"\r\nexpires: Sat, 11 Apr 2026 02:43:25 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":92567,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (65022), with no line terminators","md5":"b40940e3efd47e3e653fe1fbec0ab363","sha1":"3911d44e1bceb07e83746e6bc68de9dbb587b11a","sha256":"72ef657df5906e9f23040a4ceb49985bf894ddcb4324d7d873a0c20b15d3e864","sha512":"f3706c9146b2091fb1a864ab4180d0a1538e801686af21bab4c7231421859a99fba7dd694632faaf1c457fb06711fcb16809e2221fe692c16390e7e98ccbf4d5","ssdeep":"1536:ZTIyNBi3MFYaQj73rx3WqyrtpqoSWEDZEnX73:ZdN0rxmNH9yDWr3","tlshash":"0193c5a5e9c4a1fc6f26f6659b4766d8f13cf661cc01daa0f109512d0fc7bf50223a2a","first_seen":"2024-01-05T03:21:29Z","last_seen":"2026-04-10T14:43:55.12683Z","times_seen":181,"resource_available":false,"data":null}},"time_used":548,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":548,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"onchainusdcsaving.com/resource/fonts/Arial.ttf","fqdn":"onchainusdcsaving.com","domain":"onchainusdcsaving.com","tld":"com"},"ip":{"addr":"118.107.28.253","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://onchainusdcsaving.com/","date":"2026-04-10T14:43:26.878Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"onchainusdcsaving.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 09 Apr 2026 14:35:26 GMT","end":"Wed, 08 Jul 2026 14:35:25 GMT"},"fingerprint":{"sha1":"EB:8A:20:EF:AE:63:45:C1:BF:72:E1:08:DD:82:D5:F5:76:EB:9C:0B","sha256":"F9:90:DF:90:60:99:C0:18:54:80:6A:E8:C6:69:F9:6E:D1:F8:1E:72:5E:8C:23:1D:9A:70:C6:68:7D:E7:60:1F"}}},"request":{"raw":"GET /resource/fonts/Arial.ttf HTTP/1.1\r\nHost: onchainusdcsaving.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://onchainusdcsaving.com/assets/index-6854b246.css\r\nCookie: server_name_session=f92d1653e14ce9e3eaea0d0a71a55618\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 10 Apr 2026 14:43:26 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 1047012\r\nlast-modified: Wed, 01 Apr 2026 20:23:28 GMT\r\netag: \"69cd7ec0-ff9e4\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1047012,"size_decoded":0,"mime_type":"application/octet-stream","magic":"TrueType Font data, digitally signed, 25 tables, 1st \"DSIG\", 58 names, Unicode, � 2017 The Monotype Corporation. All Rights Reserved. ","md5":"ffe66dbfc4b07f36ef38dd621ad2c7cc","sha1":"e032b102cfc37c3226d17e1b462edea5fbf8fe1c","sha256":"c1216a01b3cc4e94df72577a6f618154058a1d8999ed58fa31ab7e54c7e4be4b","sha512":"3c7952b71c8117938c5284efca0e0b3e8c20d7b84c74a4890f76a72af3b26295786b0f7c33d9b6c980527b4c4c8dad628d1f5e7e5f202d11076367f082349bb3","ssdeep":"24576:NoQIQRjo/Y7wjgTmKJ4WxA7EAD4OBfDamXKE6AMra:NHIQJo/Y7wjgTm0PxAwJHE6hG","tlshash":"f125be0bf3929f0fe3902b38c9a5d761939b76189b2743b73d8c5858ecc85a45e487d2","first_seen":"2023-07-29T15:16:45Z","last_seen":"2026-04-10T14:43:55.128565Z","times_seen":898,"resource_available":false,"data":null}},"time_used":1001,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":296,"receive":705,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"onchainusdcsaving.com/assets/vendor-64f46974.js","fqdn":"onchainusdcsaving.com","domain":"onchainusdcsaving.com","tld":"com"},"ip":{"addr":"118.107.28.253","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://onchainusdcsaving.com/","date":"2026-04-10T14:43:27.305Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"onchainusdcsaving.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 09 Apr 2026 14:35:26 GMT","end":"Wed, 08 Jul 2026 14:35:25 GMT"},"fingerprint":{"sha1":"EB:8A:20:EF:AE:63:45:C1:BF:72:E1:08:DD:82:D5:F5:76:EB:9C:0B","sha256":"F9:90:DF:90:60:99:C0:18:54:80:6A:E8:C6:69:F9:6E:D1:F8:1E:72:5E:8C:23:1D:9A:70:C6:68:7D:E7:60:1F"}}},"request":{"raw":"GET /assets/vendor-64f46974.js HTTP/1.1\r\nHost: onchainusdcsaving.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 10 Apr 2026 14:43:27 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 09 Apr 2026 16:29:08 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69d7d3d4-d9242\"\r\nset-cookie: server_name_session=f92d1653e14ce9e3eaea0d0a71a55618; Max-Age=86400; httponly; path=/\r\nexpires: Sat, 11 Apr 2026 02:43:27 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":889410,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"3abf93235f8805aa2deb613de1c2e022","sha1":"3d00674e75280d0c645aab6e995dadb83c2e5e29","sha256":"4d5b7079708762a681efb01593bd187df376929eb2119a74fff768d1cbf01344","sha512":"87d7887c903a132b9189f0b75fdd99897fafd08a343443ded10b564a4120b21a2e703818267814284a0545a8337ffc61e44dc17efd049a48d30898388d199208","ssdeep":"12288:5RnbvFkQvVb8mXXdRLYNmD/ahCVawlVaPeJZ3J/pooTqr9szo/UXRdBE7m+jYhSr:5RnbvFjoiXTLxahCVlSG3WtYioSstI","tlshash":"f31528c97292f06147ab24e240bb0106f3396e59740e84a4f1ad98eb7d79d89d277f3c","first_seen":"2025-12-30T23:38:20.64961Z","last_seen":"2026-04-10T14:43:55.129455Z","times_seen":26,"resource_available":true,"data":null}},"time_used":574,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":574,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"wss","addr":"webapi.jhyiu-daw.icu/ws/5f8f77e3-f5cf-486a-ad2d-e4efb4bbfafb","fqdn":"webapi.jhyiu-daw.icu","domain":"jhyiu-daw.icu","tld":"icu"},"ip":{"addr":"118.107.28.253","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://onchainusdcsaving.com/","date":"2026-04-10T14:43:27.327Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webapi.jhyiu-daw.icu","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 09 Apr 2026 14:24:30 GMT","end":"Wed, 08 Jul 2026 14:24:29 GMT"},"fingerprint":{"sha1":"BF:F7:51:C2:30:90:8E:4A:7A:8C:60:D9:23:EF:DC:C5:D1:5C:82:36","sha256":"4A:39:5A:6B:CC:26:8B:89:39:44:C1:BE:AC:DE:E8:90:70:72:C1:C5:C0:16:07:98:79:6A:6C:80:DD:2E:FE:0B"}}},"request":{"raw":"GET /ws/5f8f77e3-f5cf-486a-ad2d-e4efb4bbfafb HTTP/1.1\r\nHost: webapi.jhyiu-daw.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nSec-WebSocket-Version: 13\r\nOrigin: https://onchainusdcsaving.com\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: 8z+nnsKPs9VfFEADXs3SSw==\r\nDNT: 1\r\nConnection: keep-alive, Upgrade\r\nSec-Fetch-Dest: websocket\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 \r\nServer: nginx\r\nDate: Fri, 10 Apr 2026 14:43:28 GMT\r\nConnection: upgrade\r\nVary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nAccess-Control-Allow-Origin: https://onchainusdcsaving.com\r\nAccess-Control-Allow-Credentials: true\r\nUpgrade: websocket\r\nSec-WebSocket-Accept: bDJlTP3JPjgcUWQAlWejlHLlXPw=\r\nSec-WebSocket-Extensions: permessage-deflate\r\nX-Content-Type-Options: nosniff\r\nX-XSS-Protection: 1; mode=block\r\nSet-Cookie: server_name_session=ff0146b5df195fada969e1140d415c90; Max-Age=86400; httponly; path=/\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-10T17:55:54.916022Z","times_seen":13588354,"resource_available":true,"data":null}},"time_used":2313,"timings":{"blocked":0,"dns":768,"connect":1022,"send":0,"wait":259,"receive":0,"ssl":1032},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"onchainusdcsaving.com/platform/dev/logo_144.png?2.0.1775752147866","fqdn":"onchainusdcsaving.com","domain":"onchainusdcsaving.com","tld":"com"},"ip":{"addr":"118.107.28.253","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://onchainusdcsaving.com/","date":"2026-04-10T14:43:27.860Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"onchainusdcsaving.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 09 Apr 2026 14:35:26 GMT","end":"Wed, 08 Jul 2026 14:35:25 GMT"},"fingerprint":{"sha1":"EB:8A:20:EF:AE:63:45:C1:BF:72:E1:08:DD:82:D5:F5:76:EB:9C:0B","sha256":"F9:90:DF:90:60:99:C0:18:54:80:6A:E8:C6:69:F9:6E:D1:F8:1E:72:5E:8C:23:1D:9A:70:C6:68:7D:E7:60:1F"}}},"request":{"raw":"GET /platform/dev/logo_144.png?2.0.1775752147866 HTTP/1.1\r\nHost: onchainusdcsaving.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: server_name_session=f92d1653e14ce9e3eaea0d0a71a55618\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 10 Apr 2026 14:43:27 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 01 Apr 2026 20:23:28 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69cd7ec0-193a\"\r\nexpires: Sun, 10 May 2026 14:43:27 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6458,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 144 x 144, 8-bit/color RGBA, non-interlaced","md5":"50f574f4f2f03443c5a256778b8620d1","sha1":"114a6496ed36e1e47e0c03dac805218be6ff7536","sha256":"d711cc9896caa50d5372dd43d3563b79363d103572a8a5c8768fb0b5bbc08e43","sha512":"e4ef317f936b4a1e5a66f7b3bb7ba6060a29da21d34eabc2c985126db1ff9d437c94d7d2be4f1597ac58eb4ffbbdf494ea3407d71be1bd9fb8b258e3c65abb99","ssdeep":"96:FcTUS26mjE4Ar0sSY91c7OjTYtGZfrqx8FJE6jOUnoKpSQlON:mTUS26mjE4A6Yq7WYIS8FKKpS1N","tlshash":"3bd1aebb259746dd202f4ce608cccaa60104ea8fb5b79295674301cba229cb2914fe68","first_seen":"2025-12-30T23:38:20.661881Z","last_seen":"2026-04-10T14:43:55.13146Z","times_seen":26,"resource_available":false,"data":null}},"time_used":270,"timings":{"blocked":19,"dns":0,"connect":0,"send":0,"wait":251,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webapi.jhyiu-daw.icu/api/common/getCoinList","fqdn":"webapi.jhyiu-daw.icu","domain":"jhyiu-daw.icu","tld":"icu"},"ip":{"addr":"118.107.28.253","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://onchainusdcsaving.com/","date":"2026-04-10T14:43:28.202Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webapi.jhyiu-daw.icu","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 09 Apr 2026 14:24:30 GMT","end":"Wed, 08 Jul 2026 14:24:29 GMT"},"fingerprint":{"sha1":"BF:F7:51:C2:30:90:8E:4A:7A:8C:60:D9:23:EF:DC:C5:D1:5C:82:36","sha256":"4A:39:5A:6B:CC:26:8B:89:39:44:C1:BE:AC:DE:E8:90:70:72:C1:C5:C0:16:07:98:79:6A:6C:80:DD:2E:FE:0B"}}},"request":{"raw":"POST /api/common/getCoinList HTTP/1.1\r\nHost: webapi.jhyiu-daw.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nlang: en-US\r\nOrigin: https://onchainusdcsaving.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 10 Apr 2026 14:43:28 GMT\r\ncontent-type: application/json\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://onchainusdcsaving.com\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nset-cookie: server_name_session=ff0146b5df195fada969e1140d415c90; Max-Age=86400; httponly; path=/\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":19914,"size_decoded":0,"mime_type":"application/json","magic":"Unicode text, UTF-8 text, with very long lines (19898), with no line terminators","md5":"e540a3531abe9acb32c84aff9cbe94da","sha1":"f8e5c9c9dcb8000f527d91b2d61b5b88a3e87f0f","sha256":"000bf12548bd838f2e7d4ffe792f54e491d2d3b6efa57e478601627cf6d5a32e","sha512":"d73a7658c9d45c8a7bf7c0fa97b40a15cf619b4e3aa67998f1d2adc7fcaefcdeda378cca48114310b1a05bf4a1a79bbacf31337587af8294d72ff52cc6d033f4","ssdeep":"192:VXznEXEnXk6wXwZcXCmXaD0XsZXljDX3QSs8guWwXWwY5K7SYfECKQfnjkLxmQlO:i6XHIkQD+n","tlshash":"739220551168a8b8d17a81e52fbfb91601dd367facd58e0b86ce8d8c4ed9ef01606f02","first_seen":"2026-04-10T14:43:55.135475Z","last_seen":"2026-04-10T14:43:55.135475Z","times_seen":1,"resource_available":false,"data":null}},"time_used":266,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":266,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webapi.jhyiu-daw.icu/api/common/type/defi_activity_type","fqdn":"webapi.jhyiu-daw.icu","domain":"jhyiu-daw.icu","tld":"icu"},"ip":{"addr":"118.107.28.253","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://onchainusdcsaving.com/","date":"2026-04-10T14:43:28.815Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webapi.jhyiu-daw.icu","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 09 Apr 2026 14:24:30 GMT","end":"Wed, 08 Jul 2026 14:24:29 GMT"},"fingerprint":{"sha1":"BF:F7:51:C2:30:90:8E:4A:7A:8C:60:D9:23:EF:DC:C5:D1:5C:82:36","sha256":"4A:39:5A:6B:CC:26:8B:89:39:44:C1:BE:AC:DE:E8:90:70:72:C1:C5:C0:16:07:98:79:6A:6C:80:DD:2E:FE:0B"}}},"request":{"raw":"OPTIONS /api/common/type/defi_activity_type HTTP/1.1\r\nHost: webapi.jhyiu-daw.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: lang,language\r\nOrigin: https://onchainusdcsaving.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 10 Apr 2026 14:43:28 GMT\r\ncontent-length: 0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://onchainusdcsaving.com\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: lang, language\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nset-cookie: server_name_session=ff0146b5df195fada969e1140d415c90; Max-Age=86400; httponly; path=/\r\nstrict-transport-security: max-age=31536000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-10T17:55:54.916022Z","times_seen":13588354,"resource_available":true,"data":null}},"time_used":253,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":253,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"onchainusdcsaving.com/charting_library/charting_library.min.js","fqdn":"onchainusdcsaving.com","domain":"onchainusdcsaving.com","tld":"com"},"ip":{"addr":"118.107.28.253","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://onchainusdcsaving.com/","date":"2026-04-10T14:43:25.833Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"onchainusdcsaving.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 09 Apr 2026 14:35:26 GMT","end":"Wed, 08 Jul 2026 14:35:25 GMT"},"fingerprint":{"sha1":"EB:8A:20:EF:AE:63:45:C1:BF:72:E1:08:DD:82:D5:F5:76:EB:9C:0B","sha256":"F9:90:DF:90:60:99:C0:18:54:80:6A:E8:C6:69:F9:6E:D1:F8:1E:72:5E:8C:23:1D:9A:70:C6:68:7D:E7:60:1F"}}},"request":{"raw":"GET /charting_library/charting_library.min.js HTTP/1.1\r\nHost: onchainusdcsaving.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: server_name_session=f92d1653e14ce9e3eaea0d0a71a55618\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 10 Apr 2026 14:43:25 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 01 Apr 2026 20:23:28 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69cd7ec0-2a6a\"\r\nexpires: Sat, 11 Apr 2026 02:43:25 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10858,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (10857)","md5":"8573e89d9ec535663d75f21b1f08109c","sha1":"a8d9eea0b157ceeffc38d4254e6f6abc9d697d10","sha256":"cb0c6c9f1771d252eee7caa043bdd7cfffbd52c2cc4b18b7be7c4554ed069151","sha512":"55d728fa1e0682725f94b17387c6790792d3d34b43652a00097876118575bd6cefa20916d80674519005d72f20ecbb745e9645516c056e6f9bb6691d5efbcb33","ssdeep":"192:9fdWSo7ktFUnoBelr6lw2LfnzuIQPlaJ1i10K+Ei/ISJhvHIheu5Ph3Ffam:vWS2ktFUnoIlD2LfnqIJimK+5/ISJhvu","tlshash":"6e224f58ed2478720acb54f0427f180f8239e278d84944ed3cc4e6ec59fd44a6a6fbb8","first_seen":"2023-08-16T00:37:19Z","last_seen":"2026-04-10T15:03:13.146392Z","times_seen":435,"resource_available":true,"data":null}},"time_used":250,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":250,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"onchainusdcsaving.com/assets/index-c587dfe8.js","fqdn":"onchainusdcsaving.com","domain":"onchainusdcsaving.com","tld":"com"},"ip":{"addr":"118.107.28.253","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://onchainusdcsaving.com/","date":"2026-04-10T14:43:25.835Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"onchainusdcsaving.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 09 Apr 2026 14:35:26 GMT","end":"Wed, 08 Jul 2026 14:35:25 GMT"},"fingerprint":{"sha1":"EB:8A:20:EF:AE:63:45:C1:BF:72:E1:08:DD:82:D5:F5:76:EB:9C:0B","sha256":"F9:90:DF:90:60:99:C0:18:54:80:6A:E8:C6:69:F9:6E:D1:F8:1E:72:5E:8C:23:1D:9A:70:C6:68:7D:E7:60:1F"}}},"request":{"raw":"GET /assets/index-c587dfe8.js HTTP/1.1\r\nHost: onchainusdcsaving.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: server_name_session=f92d1653e14ce9e3eaea0d0a71a55618\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 10 Apr 2026 14:43:25 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 09 Apr 2026 16:29:06 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69d7d3d2-19a00\"\r\nexpires: Sat, 11 Apr 2026 02:43:25 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":104960,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65526), with no line terminators","md5":"945b07c65ad184bf016d495e33299776","sha1":"994aa2a2493238df23ae13970f687d5709a92beb","sha256":"6c2b99eaed6db04282fe617a10ed5ca35b40c2fb82eda7b02e58443ca37ddf09","sha512":"ac85a991dc2530c57d1ebe07c131f11265c6f2cf47febb6f74068688f52f2b0656f35086d68c8d8d63f1cd8143625055d41b0950085667cfe75e5ddc9089c561","ssdeep":"768:DBT6EmtguQsTE/6sfcUD8c4NaiOX8Aagu3VKivLKQZLv8+m8MqhKJhqre6fNHJ5c:MsxcPWsbxv4+m8NhNU976MGGlEDs3","tlshash":"96a34a8aa5070fff58be0894691f181022681fd75d8c8cd3b6be6e562bf9cd4635d328","first_seen":"2026-04-10T14:36:22.477074Z","last_seen":"2026-04-10T14:43:55.138734Z","times_seen":6,"resource_available":true,"data":null}},"time_used":497,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":497,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"onchainusdcsaving.com/assets/vendor-64f46974.js","fqdn":"onchainusdcsaving.com","domain":"onchainusdcsaving.com","tld":"com"},"ip":{"addr":"118.107.28.253","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://onchainusdcsaving.com/","date":"2026-04-10T14:43:26.365Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"onchainusdcsaving.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 09 Apr 2026 14:35:26 GMT","end":"Wed, 08 Jul 2026 14:35:25 GMT"},"fingerprint":{"sha1":"EB:8A:20:EF:AE:63:45:C1:BF:72:E1:08:DD:82:D5:F5:76:EB:9C:0B","sha256":"F9:90:DF:90:60:99:C0:18:54:80:6A:E8:C6:69:F9:6E:D1:F8:1E:72:5E:8C:23:1D:9A:70:C6:68:7D:E7:60:1F"}}},"request":{"raw":"GET /assets/vendor-64f46974.js HTTP/1.1\r\nHost: onchainusdcsaving.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: server_name_session=f92d1653e14ce9e3eaea0d0a71a55618\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 10 Apr 2026 14:43:26 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 09 Apr 2026 16:29:08 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69d7d3d4-d9242\"\r\nexpires: Sat, 11 Apr 2026 02:43:26 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":889410,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"3abf93235f8805aa2deb613de1c2e022","sha1":"3d00674e75280d0c645aab6e995dadb83c2e5e29","sha256":"4d5b7079708762a681efb01593bd187df376929eb2119a74fff768d1cbf01344","sha512":"87d7887c903a132b9189f0b75fdd99897fafd08a343443ded10b564a4120b21a2e703818267814284a0545a8337ffc61e44dc17efd049a48d30898388d199208","ssdeep":"12288:5RnbvFkQvVb8mXXdRLYNmD/ahCVawlVaPeJZ3J/pooTqr9szo/UXRdBE7m+jYhSr:5RnbvFjoiXTLxahCVlSG3WtYioSstI","tlshash":"f31528c97292f06147ab24e240bb0106f3396e59740e84a4f1ad98eb7d79d89d277f3c","first_seen":"2025-12-30T23:38:20.64961Z","last_seen":"2026-04-10T14:43:55.129455Z","times_seen":26,"resource_available":true,"data":null}},"time_used":475,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":475,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webapi.jhyiu-daw.icu/api/common/getCoinList","fqdn":"webapi.jhyiu-daw.icu","domain":"jhyiu-daw.icu","tld":"icu"},"ip":{"addr":"118.107.28.253","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://onchainusdcsaving.com/","date":"2026-04-10T14:43:27.368Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webapi.jhyiu-daw.icu","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 09 Apr 2026 14:24:30 GMT","end":"Wed, 08 Jul 2026 14:24:29 GMT"},"fingerprint":{"sha1":"BF:F7:51:C2:30:90:8E:4A:7A:8C:60:D9:23:EF:DC:C5:D1:5C:82:36","sha256":"4A:39:5A:6B:CC:26:8B:89:39:44:C1:BE:AC:DE:E8:90:70:72:C1:C5:C0:16:07:98:79:6A:6C:80:DD:2E:FE:0B"}}},"request":{"raw":"OPTIONS /api/common/getCoinList HTTP/1.1\r\nHost: webapi.jhyiu-daw.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: lang\r\nOrigin: https://onchainusdcsaving.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 10 Apr 2026 14:43:27 GMT\r\ncontent-length: 0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://onchainusdcsaving.com\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: lang\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nset-cookie: server_name_session=ff0146b5df195fada969e1140d415c90; Max-Age=86400; httponly; path=/\r\nstrict-transport-security: max-age=31536000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-10T17:55:54.916022Z","times_seen":13588354,"resource_available":true,"data":null}},"time_used":1308,"timings":{"blocked":522,"dns":1,"connect":256,"send":0,"wait":252,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"onchainusdcsaving.com/resource/images/light/nowallet.png?2.0.1775752147866","fqdn":"onchainusdcsaving.com","domain":"onchainusdcsaving.com","tld":"com"},"ip":{"addr":"118.107.28.253","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://onchainusdcsaving.com/","date":"2026-04-10T14:43:28.781Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"onchainusdcsaving.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 09 Apr 2026 14:35:26 GMT","end":"Wed, 08 Jul 2026 14:35:25 GMT"},"fingerprint":{"sha1":"EB:8A:20:EF:AE:63:45:C1:BF:72:E1:08:DD:82:D5:F5:76:EB:9C:0B","sha256":"F9:90:DF:90:60:99:C0:18:54:80:6A:E8:C6:69:F9:6E:D1:F8:1E:72:5E:8C:23:1D:9A:70:C6:68:7D:E7:60:1F"}}},"request":{"raw":"GET /resource/images/light/nowallet.png?2.0.1775752147866 HTTP/1.1\r\nHost: onchainusdcsaving.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: server_name_session=f92d1653e14ce9e3eaea0d0a71a55618\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 10 Apr 2026 14:43:28 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 01 Apr 2026 20:23:28 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69cd7ec0-8c14\"\r\nexpires: Sun, 10 May 2026 14:43:28 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":35860,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 800 x 356, 8-bit/color RGB, non-interlaced","md5":"a3877c3de6991724167020f4746cd343","sha1":"96568f8b5ed09a56ac2f9fece74d54bc7629d57d","sha256":"e63c8b25303ff05fad80631688c5638be2edd6c29bc8b92670ba4780a8fab25d","sha512":"7aeb267846808fa244c76e55be3dc5f337bfc6d8e82b6e1a5af73553985bf6e4b3ca6e26064c94bc8cd227bebb3bdb01ba46dc534cabc90ebabf488ef3569cea","ssdeep":"768:/N1IBFqG0kSI5ta4rUSlWUbsylujjXL+GFCTh:/NCqTkdECAUIPXSGmh","tlshash":"18f2f102fe7af081f32ce1f3a5662f77562e111ddf86e62672dad45e01011b62b91c8d","first_seen":"2025-04-13T20:28:04.816981Z","last_seen":"2026-04-10T14:43:55.139492Z","times_seen":40,"resource_available":false,"data":null}},"time_used":257,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":257,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webapi.jhyiu-daw.icu/api/common/type/defi_activity_type","fqdn":"webapi.jhyiu-daw.icu","domain":"jhyiu-daw.icu","tld":"icu"},"ip":{"addr":"118.107.28.253","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://onchainusdcsaving.com/","date":"2026-04-10T14:43:28.817Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webapi.jhyiu-daw.icu","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 09 Apr 2026 14:24:30 GMT","end":"Wed, 08 Jul 2026 14:24:29 GMT"},"fingerprint":{"sha1":"BF:F7:51:C2:30:90:8E:4A:7A:8C:60:D9:23:EF:DC:C5:D1:5C:82:36","sha256":"4A:39:5A:6B:CC:26:8B:89:39:44:C1:BE:AC:DE:E8:90:70:72:C1:C5:C0:16:07:98:79:6A:6C:80:DD:2E:FE:0B"}}},"request":{"raw":"OPTIONS /api/common/type/defi_activity_type HTTP/1.1\r\nHost: webapi.jhyiu-daw.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: lang,language\r\nOrigin: https://onchainusdcsaving.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 10 Apr 2026 14:43:28 GMT\r\ncontent-length: 0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://onchainusdcsaving.com\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: lang, language\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nset-cookie: server_name_session=ff0146b5df195fada969e1140d415c90; Max-Age=86400; httponly; path=/\r\nstrict-transport-security: max-age=31536000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-10T17:55:54.916022Z","times_seen":13588354,"resource_available":true,"data":null}},"time_used":258,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":252,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webapi.jhyiu-daw.icu/api/common/type/defi_activity_type","fqdn":"webapi.jhyiu-daw.icu","domain":"jhyiu-daw.icu","tld":"icu"},"ip":{"addr":"118.107.28.253","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://onchainusdcsaving.com/","date":"2026-04-10T14:43:29.070Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webapi.jhyiu-daw.icu","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 09 Apr 2026 14:24:30 GMT","end":"Wed, 08 Jul 2026 14:24:29 GMT"},"fingerprint":{"sha1":"BF:F7:51:C2:30:90:8E:4A:7A:8C:60:D9:23:EF:DC:C5:D1:5C:82:36","sha256":"4A:39:5A:6B:CC:26:8B:89:39:44:C1:BE:AC:DE:E8:90:70:72:C1:C5:C0:16:07:98:79:6A:6C:80:DD:2E:FE:0B"}}},"request":{"raw":"POST /api/common/type/defi_activity_type HTTP/1.1\r\nHost: webapi.jhyiu-daw.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nlanguage: en\r\nlang: en\r\nOrigin: https://onchainusdcsaving.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 10 Apr 2026 14:43:29 GMT\r\ncontent-type: application/json\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://onchainusdcsaving.com\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nset-cookie: server_name_session=ff0146b5df195fada969e1140d415c90; Max-Age=86400; httponly; path=/\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":635,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"7a423e3451e474878191a0a7f1d323b9","sha1":"13312f533f380295131f6a1540f425d0c98a16ba","sha256":"49c938e0bb3a834cab9319575489cf6c1694cace3f1ceb9671570024328e2a35","sha512":"0522e47fc06c4329cee21e354b264c90ae4b0725941d75cf63af54bee4a307fbe91e7078a412bd9750f3856657159ffe5efff139a652ec0443368f7c146bfdbf","ssdeep":"","tlshash":"5af028143d3dcebf098f65e745ec7818399c152794a0fca058ab0f3c5ae4171088921c","first_seen":"2025-04-07T11:28:26.961944Z","last_seen":"2026-04-10T14:43:55.12409Z","times_seen":496,"resource_available":false,"data":null}},"time_used":260,"timings":{"blocked":5,"dns":0,"connect":0,"send":0,"wait":255,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"onchainusdcsaving.com/platform/dev/config.js?1775832207332","fqdn":"onchainusdcsaving.com","domain":"onchainusdcsaving.com","tld":"com"},"ip":{"addr":"118.107.28.253","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://onchainusdcsaving.com/","date":"2026-04-10T14:43:27.349Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"onchainusdcsaving.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 09 Apr 2026 14:35:26 GMT","end":"Wed, 08 Jul 2026 14:35:25 GMT"},"fingerprint":{"sha1":"EB:8A:20:EF:AE:63:45:C1:BF:72:E1:08:DD:82:D5:F5:76:EB:9C:0B","sha256":"F9:90:DF:90:60:99:C0:18:54:80:6A:E8:C6:69:F9:6E:D1:F8:1E:72:5E:8C:23:1D:9A:70:C6:68:7D:E7:60:1F"}}},"request":{"raw":"GET /platform/dev/config.js?1775832207332 HTTP/1.1\r\nHost: onchainusdcsaving.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: server_name_session=f92d1653e14ce9e3eaea0d0a71a55618\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 10 Apr 2026 14:43:27 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 382\r\nlast-modified: Wed, 01 Apr 2026 20:23:28 GMT\r\netag: \"69cd7ec0-17e\"\r\nexpires: Sat, 11 Apr 2026 02:43:27 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":382,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text","md5":"0cc7860a17b657a48cf6a6b1be003d95","sha1":"b34379eb969d9dff83c1dba09506ed3a4ae562da","sha256":"2ab26276b641372ac6f94679f40d96bfae6ddf8ccb7e445adcfa5b6a2f9bd0a0","sha512":"58e454c67c9f8ee48e5b96f37fc9da6f3dfd0337999d59baea42ed7ad41f9252f346e63aca445ba1d35fd76d8a1cc827ad679cd6c60765a2d3af050bf7630dc7","ssdeep":"","tlshash":"ace068f371b8c1209981561f2ddc282bf3c775a24d5d5e2eb8d9a51cae5cc6c24be092","first_seen":"2025-12-30T23:38:20.68691Z","last_seen":"2026-04-10T14:43:55.140157Z","times_seen":20,"resource_available":false,"data":null}},"time_used":679,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":679,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webapi.jhyiu-daw.icu/api/common/getAllSetting","fqdn":"webapi.jhyiu-daw.icu","domain":"jhyiu-daw.icu","tld":"icu"},"ip":{"addr":"118.107.28.253","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://onchainusdcsaving.com/","date":"2026-04-10T14:43:27.362Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webapi.jhyiu-daw.icu","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 09 Apr 2026 14:24:30 GMT","end":"Wed, 08 Jul 2026 14:24:29 GMT"},"fingerprint":{"sha1":"BF:F7:51:C2:30:90:8E:4A:7A:8C:60:D9:23:EF:DC:C5:D1:5C:82:36","sha256":"4A:39:5A:6B:CC:26:8B:89:39:44:C1:BE:AC:DE:E8:90:70:72:C1:C5:C0:16:07:98:79:6A:6C:80:DD:2E:FE:0B"}}},"request":{"raw":"OPTIONS /api/common/getAllSetting HTTP/1.1\r\nHost: webapi.jhyiu-daw.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: lang\r\nOrigin: https://onchainusdcsaving.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 10 Apr 2026 14:43:27 GMT\r\ncontent-length: 0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://onchainusdcsaving.com\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: lang\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nset-cookie: server_name_session=ff0146b5df195fada969e1140d415c90; Max-Age=86400; httponly; path=/\r\nstrict-transport-security: max-age=31536000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-10T17:55:54.916022Z","times_seen":13588354,"resource_available":true,"data":null}},"time_used":1310,"timings":{"blocked":527,"dns":1,"connect":251,"send":0,"wait":252,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"onchainusdcsaving.com/platform/dev/favicon.ico?2.0.1775752147866","fqdn":"onchainusdcsaving.com","domain":"onchainusdcsaving.com","tld":"com"},"ip":{"addr":"118.107.28.253","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://onchainusdcsaving.com/","date":"2026-04-10T14:43:27.862Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"onchainusdcsaving.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 09 Apr 2026 14:35:26 GMT","end":"Wed, 08 Jul 2026 14:35:25 GMT"},"fingerprint":{"sha1":"EB:8A:20:EF:AE:63:45:C1:BF:72:E1:08:DD:82:D5:F5:76:EB:9C:0B","sha256":"F9:90:DF:90:60:99:C0:18:54:80:6A:E8:C6:69:F9:6E:D1:F8:1E:72:5E:8C:23:1D:9A:70:C6:68:7D:E7:60:1F"}}},"request":{"raw":"GET /platform/dev/favicon.ico?2.0.1775752147866 HTTP/1.1\r\nHost: onchainusdcsaving.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: server_name_session=f92d1653e14ce9e3eaea0d0a71a55618\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 10 Apr 2026 14:43:27 GMT\r\ncontent-type: image/x-icon\r\ncontent-length: 4286\r\nlast-modified: Wed, 01 Apr 2026 20:23:28 GMT\r\netag: \"69cd7ec0-10be\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4286,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 32x32, 32 bits/pixel","md5":"c2c37fa4ac01f8696e4fdf1365fb085b","sha1":"39b385e4fa4b24d1332f2103c1d48c25768e7afb","sha256":"02dfd11e190fa690b49178b7a5256fc58e7601ffdce7ab113f12dbd233ce27b3","sha512":"91de6cb71c7a103caa87007e408b28f09b4925ad3a9affc1c7658544ec9792cc873a84ea92908080c91691e93d6631d17f4b006e8d2483138be1265bb3e9af48","ssdeep":"96:ooelv2ehvCZEQWyNKc1xxxxxxxxxxxxnNfjCNNNOT:LelvdCDdNfjCNDOT","tlshash":"1c9164da17218f7cfc95007cf0908a0d199a6eae754942fb94e2b14858b6bd9c47bcb3","first_seen":"2025-12-30T23:38:20.652825Z","last_seen":"2026-04-10T14:43:55.140865Z","times_seen":27,"resource_available":false,"data":null}},"time_used":270,"timings":{"blocked":18,"dns":0,"connect":0,"send":0,"wait":252,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webapi.jhyiu-daw.icu/api/common/getMt5Amount?coin=xau","fqdn":"webapi.jhyiu-daw.icu","domain":"jhyiu-daw.icu","tld":"icu"},"ip":{"addr":"118.107.28.253","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://onchainusdcsaving.com/","date":"2026-04-10T14:43:28.471Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webapi.jhyiu-daw.icu","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 09 Apr 2026 14:24:30 GMT","end":"Wed, 08 Jul 2026 14:24:29 GMT"},"fingerprint":{"sha1":"BF:F7:51:C2:30:90:8E:4A:7A:8C:60:D9:23:EF:DC:C5:D1:5C:82:36","sha256":"4A:39:5A:6B:CC:26:8B:89:39:44:C1:BE:AC:DE:E8:90:70:72:C1:C5:C0:16:07:98:79:6A:6C:80:DD:2E:FE:0B"}}},"request":{"raw":"OPTIONS /api/common/getMt5Amount?coin=xau HTTP/1.1\r\nHost: webapi.jhyiu-daw.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: lang\r\nOrigin: https://onchainusdcsaving.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 10 Apr 2026 14:43:28 GMT\r\ncontent-length: 0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://onchainusdcsaving.com\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: lang\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nset-cookie: server_name_session=ff0146b5df195fada969e1140d415c90; Max-Age=86400; httponly; path=/\r\nstrict-transport-security: max-age=31536000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-10T17:55:54.916022Z","times_seen":13588354,"resource_available":true,"data":null}},"time_used":252,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":252,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webapi.jhyiu-daw.icu/api/common/getMt5Amount?coin=xag","fqdn":"webapi.jhyiu-daw.icu","domain":"jhyiu-daw.icu","tld":"icu"},"ip":{"addr":"118.107.28.253","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://onchainusdcsaving.com/","date":"2026-04-10T14:43:28.477Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webapi.jhyiu-daw.icu","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 09 Apr 2026 14:24:30 GMT","end":"Wed, 08 Jul 2026 14:24:29 GMT"},"fingerprint":{"sha1":"BF:F7:51:C2:30:90:8E:4A:7A:8C:60:D9:23:EF:DC:C5:D1:5C:82:36","sha256":"4A:39:5A:6B:CC:26:8B:89:39:44:C1:BE:AC:DE:E8:90:70:72:C1:C5:C0:16:07:98:79:6A:6C:80:DD:2E:FE:0B"}}},"request":{"raw":"OPTIONS /api/common/getMt5Amount?coin=xag HTTP/1.1\r\nHost: webapi.jhyiu-daw.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: lang\r\nOrigin: https://onchainusdcsaving.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 10 Apr 2026 14:43:28 GMT\r\ncontent-length: 0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://onchainusdcsaving.com\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: lang\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nset-cookie: server_name_session=ff0146b5df195fada969e1140d415c90; Max-Age=86400; httponly; path=/\r\nstrict-transport-security: max-age=31536000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-10T17:55:54.916022Z","times_seen":13588354,"resource_available":true,"data":null}},"time_used":256,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":256,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}