{"report_id":"7333cb36-cefc-453c-a12b-5a33ba2769a4","version":6,"status":"done","tags":[],"date":"2026-03-20T18:49:17Z","url":{"schema":"http","addr":"ofgxtw.help","fqdn":"ofgxtw.help","domain":"ofgxtw.help","tld":"help"},"ip":{"addr":"172.67.172.104","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"ofgxtw.help/#/home","fqdn":"ofgxtw.help","domain":"ofgxtw.help","tld":"help"},"title":"TWFXCC","dom":{"size":60089,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (51292)","md5":"a49ad0f168777b8245f0b795c4a3fe11","sha1":"30fdb9144f55b7565ad7e4873162dc5e4535bb81","sha256":"78dbc94ee3c7c956409bc66d6fe816d960a0619eabeba53a5d07916b6772e4b7","sha512":"b995ed3963d6e6f2843c3123b19ebfd5c236202e25dd4c21ddad1f08a72b5e0eb903e9db7a7159685f6200b624cc6c8c3251b6154bd612bbe6500b3a5d228ea5","ssdeep":"1536:1PU0pQaKoh6llEaPdJSpvhRCcjDMRM/j0u+FUhWb5sxltu2Dg8xMKbM4kNoufci1:1Pkr","tlshash":"db43bd20b014106641b7fac0e1b67f0971b3f70be70a94397bac42958fd7da4be6e865","dom_hash":"domhashe9d97bdb5cd82e8c13f8a408ecf1fffd","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"ofgxtw.help","fqdn":"ofgxtw.help","domain":"ofgxtw.help","tld":"help"},"ip":{"addr":"172.67.172.104","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-04-24T18:49:17Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":4}},"detection":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-20","alert":"Phishing Block","trigger":"h5-api.ofgxtw.help","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-20","alert":"Sinkholed","trigger":"h5-api.ofgxtw.help","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-20","alert":"Phishing Block","trigger":"ofgxtw.help","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-20","alert":"Sinkholed","trigger":"ofgxtw.help","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null},"summary":[{"fqdn":"h5-api.ofgxtw.help","ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-03-17","domain_rank":0,"first_seen":"2026-03-20T18:49:22.599253Z","last_seen":"2026-03-20T18:49:22.599253Z","alert_count":130,"request_count":65,"received_data":1099991,"sent_data":33212,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"storage.googleapis.com","ip":{"addr":"142.251.143.155","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":880,"first_seen":"2012-08-06T06:33:30Z","last_seen":"2026-03-16T05:08:34.648352Z","alert_count":0,"request_count":18,"received_data":684076,"sent_data":8611,"comment":"","tags":null,"fingerprints":[{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}]},{"fqdn":"ofgxtw.help","ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-03-17","domain_rank":0,"first_seen":"2026-03-20T18:49:22.600147Z","last_seen":"2026-03-20T18:49:22.600147Z","alert_count":64,"request_count":32,"received_data":7786818,"sent_data":15405,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"admin-api.twfxcc.vip","ip":{"addr":"104.21.28.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-09-23","domain_rank":0,"first_seen":"2025-11-01T17:44:30.200166Z","last_seen":"2026-02-24T16:10:29.2333Z","alert_count":0,"request_count":2,"received_data":3668,"sent_data":931,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"cdnjs.cloudflare.com","ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-02-17","domain_rank":1222,"first_seen":"2012-05-23T12:49:49Z","last_seen":"2026-03-15T22:30:49.343058Z","alert_count":0,"request_count":2,"received_data":261105,"sent_data":980,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"ofgxtw.help/#/home","fqdn":"ofgxtw.help","domain":"ofgxtw.help","tld":"help"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"b9feffaf88a276be701798d25ec91767","sha1":"67d6f5c6a65090927fe5143dbf6f92f6123e2924","sha256":"2bc6d1c977ab4af73256c49f1a8bb00cf566dba43825851666ac68f608c0bd25","sha512":"156a0089916390ebfc44b5681c9c35ddc19f575c0632264ba3e709f2a88b2b41cfccd8ca8d5e66bd11858cebdcc365bcc17c588577b9e316c83c024965ddf33f","ssdeep":"","tlshash":"c8c08cc4a0c22e001a02a82128af28e8a024806774881b228cd4d8592e620b08233ea8","size":145,"data":"","first_seen":"2025-04-27T11:55:12.997265Z","last_seen":"2026-06-01T14:38:39.534158Z","times_seen":86,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ofgxtw.help/#/home","fqdn":"ofgxtw.help","domain":"ofgxtw.help","tld":"help"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"2e4a7e90831c1bdb26e2ce6df106a83d","sha1":"5923251fbec594eeba41afbfac24af5ee0e74d56","sha256":"6fc754e914ddb5d93f11d74413c8e9e0db331bbc04f357c8725c824b496c3db9","sha512":"03ce6da278085fad75e631597676ce71c0e5891687222594a0620581188e4e9b72f649d0262e9bd91c8cbfe1076c492d0b5389df988e74068ff6f79a1abb55b0","ssdeep":"","tlshash":"c7c08cc8b0c36d002602781055af34e99024802bb0489b128cd4fc5d2e230b09233eac","size":146,"data":"","first_seen":"2024-12-18T14:57:20.727033Z","last_seen":"2026-06-13T03:38:45.300951Z","times_seen":203,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ofgxtw.help/assets/index-DOvWnwTc.js","fqdn":"ofgxtw.help","domain":"ofgxtw.help","tld":"help"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"4ddff6dbe6c91101caeaf87edebbbfee","sha1":"9251dfded69e2913b6f1a5b510c63fe3c721b33b","sha256":"5c7568fa3f12aab2fc03dcdd084a4a979ab7701ccb7f3ae5e6d1185520bb5e7a","sha512":"a804611277378c47ada35b03cc281248b42e4f9351982ac17364bf7409daf88d01c9d3586e6838e4ff528a5dae2807258dd0d26bce94372296034ad58d2c385c","ssdeep":"6144:vysJZejNx4F2f8GpkG22QqHrDqLYiB2sgVrL777Kyjp3KIn:qsJZejNesf8G3vQqHr9sQL7/KyhJ","tlshash":"d8c4f842f896d9bde7b7a495104e2410724c3fcad04848e6b5fe9e062b97db8371eb34","size":573683,"data":"","first_seen":"2026-03-02T14:13:32.426343Z","last_seen":"2026-03-20T19:46:41.78986Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ofgxtw.help/#/home","fqdn":"ofgxtw.help","domain":"ofgxtw.help","tld":"help"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"7c73b3e70a89b16b24889d2b77711692","sha1":"c08c0db4d510a678b7ddff79bded6b7438391e83","sha256":"296a8d4b16cd700d45fefbf3c101b1522e79fce25822ccc34bfb5b7083776ebb","sha512":"16eabb6120e5070e072e676359a144974d58aa725940e45e4b4d342431dd1f696a46c813ad627275e7dcf713f779ddddeccc43de9befd21a98fa9c075fb7f77a","ssdeep":"","tlshash":"b5c08cc4b0c36e102682645010bf38e490244026744c1b038da4e8492e630f08233e9c","size":141,"data":"","first_seen":"2023-06-05T11:50:58Z","last_seen":"2026-06-13T03:34:39.543916Z","times_seen":216,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ofgxtw.help/#/home","fqdn":"ofgxtw.help","domain":"ofgxtw.help","tld":"help"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"5c7a39acdc80832820021580392fcb76","sha1":"a6978212b5941186e837a6216fbb774e529a2c0f","sha256":"50f915c4f4c0fa8f5d2c082a202659e6e67e6ba0ee02779b736c68ff2a0da2e0","sha512":"82b2b29d46269860ca9c6c31cb3c1065003579186ad2df34a4340ac939108b26cf8877e3a9a0e6d112efc75e7e7876d6d1f958dda85135c0f1294c0c4d02c5fa","ssdeep":"","tlshash":"88c08cc4b0d26d001602641160af34e49024802a74481b028cd8d8882e230b0a237ea8","size":139,"data":"","first_seen":"2025-10-12T15:34:03.485106Z","last_seen":"2026-06-01T14:38:39.531298Z","times_seen":77,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ofgxtw.help/#/home","fqdn":"ofgxtw.help","domain":"ofgxtw.help","tld":"help"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"98cb1f471a0de238da72628a4c39dea5","sha1":"de6c28f3b2e2ee6f1b47b45d014bff6a887bcd08","sha256":"b1e75cfc14734b3cb73043c2d0b3e1f10dd80af0775ef978ec39a0500f445f26","sha512":"5ea0135c7d00e74a33a6ee8ad3ea92eef10154456aade6904e59c1bafb3b755cf2e0c2d1c3efc83cae6dcf2db7354bb90ca930c1df504fa39eb03c381206c6a9","ssdeep":"","tlshash":"38c08cc5b0c26d40160aa49028ff35e89024442bb0881b428ce8e8983e220b08237e98","size":152,"data":"","first_seen":"2025-10-12T16:34:39.992257Z","last_seen":"2026-06-01T14:38:39.523555Z","times_seen":65,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ofgxtw.help/#/home","fqdn":"ofgxtw.help","domain":"ofgxtw.help","tld":"help"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"d7f30188eefc54566743b0560ea37910","sha1":"9ddfefbaeee03f35051d9482cea2f36ccd33a9cd","sha256":"46f138d5b096b2d454a1d06069dc1d81a79cc1865fa5b3810359947568d238d2","sha512":"dd319936b7d72e14725ad62623eec0594fe63e6e3c79d74a5ea99616d61c6afc1076654a8f8a248b61b3dcaaa20a9d807d2aa941cd20055e3d14687cbf757d9d","ssdeep":"","tlshash":"51c08cc4a0c23d101616645054bf24e59034402670481b229ed8e8482e220b09233e98","size":145,"data":"","first_seen":"2024-08-20T20:23:53.57009Z","last_seen":"2026-06-01T14:38:39.532694Z","times_seen":112,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ofgxtw.help/#/home","fqdn":"ofgxtw.help","domain":"ofgxtw.help","tld":"help"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"afd6dadb9533533d8514ac548303e331","sha1":"0b297795e161099658da59b3912482e86732e56d","sha256":"e378d3c8bb137aed4116bdd0c560231896d500f4edbb80088c14fd8fb220c3a9","sha512":"0df2fd8eb6e505ad35fff7e135feb15d50d1ae87d9990d9fa472fb834b7baf48ca73b3e8850042c74584e60de2daa8b9a4a981e5bef460ab48ad5f8ddb5d03e6","ssdeep":"","tlshash":"6cc08cc4a0c22d101602661014bf29e59024802671881b42cc94e8882e220f08233e98","size":140,"data":"","first_seen":"2023-06-06T09:30:31Z","last_seen":"2026-06-13T13:54:53.621188Z","times_seen":1430,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ofgxtw.help/#/home","fqdn":"ofgxtw.help","domain":"ofgxtw.help","tld":"help"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"c0e88513b499aae066f13f6f0edfedab","sha1":"12fd9320e7be26e9257e2a1a39a698a5e2706292","sha256":"3ffd5a1fea533c35c122aeb0a36f3d4a37022e0a14c83167faeaa819b3ee8cfd","sha512":"36b57e74aa71e21ec5489637f206796e8b9097db32c59e4ffbbdd7eb11ce35c2f754178f996bd6e11abc560cdddd3af7cde3fc1847c1a455120b5c26ee4fb838","ssdeep":"","tlshash":"17c08cc8b0c6ad001602e45111bf25e4a024802770481b128d98e8483e220f48233e9c","size":139,"data":"","first_seen":"2023-08-29T11:10:58Z","last_seen":"2026-06-13T13:54:53.613009Z","times_seen":1442,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ofgxtw.help/","fqdn":"ofgxtw.help","domain":"ofgxtw.help","tld":"help"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"a8d72cabb73b8128015d963b9da46af9","sha1":"070ad3c1f398e691d0e2e6ce947887a425d0ad4d","sha256":"83e26b7979b33b3116d07d95eba86097790e1624bdef7ff2713bc140a87a68e0","sha512":"9cd3174abb2cf23a383852ad1562d436297b5eb21907473befb2c8f82894a56dbc8e430e83da4df8845ae4ca844d79a6f84e367625b4c1ddb7944d34cb945196","ssdeep":"","tlshash":"3b11affe151ab0296303405f976b7811642150a9000a544177cc9e9dab9ab6de0cfb8d","size":1054,"data":"","first_seen":"2026-03-02T14:13:32.445558Z","last_seen":"2026-03-20T19:46:41.807878Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ofgxtw.help/#/home","fqdn":"ofgxtw.help","domain":"ofgxtw.help","tld":"help"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"b60a2fe4310f25d7824536b6a1e697b0","sha1":"b1b2f5cdda4a1ddbeb01cfdffa9bef2293b692f4","sha256":"92f8551cc981825b303bebbfa6afd1538f69600db62e9723506926b5636027bd","sha512":"5486ea1d943b63594e8c994649e10b25a67945ef222ed768c2a523c2abd5e6f2194f017a8f9119a0da2b9cda115a7a8547c16b1bdbc4d7ebfed2c766114d4baa","ssdeep":"","tlshash":"48c08cc4b0c22d242606682014bfb4e49024402770885b028c98e84c2e220b09233fa8","size":145,"data":"","first_seen":"2025-04-27T11:55:12.958543Z","last_seen":"2026-06-07T14:29:35.459018Z","times_seen":113,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ofgxtw.help/#/home","fqdn":"ofgxtw.help","domain":"ofgxtw.help","tld":"help"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"2e3141b6741f85896e470f695de39554","sha1":"802b71c88e22a081673f7907b6a5859a06ad63a2","sha256":"1ba974e2b96fc98550eb2211073f493e17675b0e2611fa2b41774a5308118842","sha512":"c03196e5663f2a0268d574bf8fcb53aa187ee43f0122e8bcd22c4eae2835e1a531cf8df6df17dccb20bfe9ab51021ca4cf70e1136de63749bcf9fd8c7f9e9558","ssdeep":"","tlshash":"1ac08cc4a0d77d201612a42020bf24e89024406670481b57eda8dc483e620b48237e98","size":147,"data":"","first_seen":"2024-08-29T17:49:52.039904Z","last_seen":"2026-06-01T14:38:39.533455Z","times_seen":87,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ofgxtw.help/#/home","fqdn":"ofgxtw.help","domain":"ofgxtw.help","tld":"help"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"7d484391ae36f9672dd3a7e7d7be9763","sha1":"d53f53a7b8fd10a4966a66bf4850e275378a555e","sha256":"ceb3142d25d807ee8b06dfc21328ad2535124a2da646d83f8460e529f9ce6f47","sha512":"24b179dc9998205322e8c96e434a14e5e610c4faf8a4b78a3a415d067d26b327a94be7ac5f4dd2c2f52999d4693664b17625d2bf65655ad07665e3a8c1f4ed0a","ssdeep":"","tlshash":"6ac08cc4a0c32d402606641011bf34e49028842674481b429d94d8482e620b48233e9c","size":148,"data":"","first_seen":"2025-04-27T11:55:12.952615Z","last_seen":"2026-06-01T14:38:39.518933Z","times_seen":70,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ofgxtw.help/#/home","fqdn":"ofgxtw.help","domain":"ofgxtw.help","tld":"help"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"99362d42c48c3ce8a91d0ef845a6d291","sha1":"7255a4d130d514351caf81f67fb4d9cc0d83c62b","sha256":"be94163fb61fb00bbe6983f50081c480207345b8954f9ee50fb2c1c2ae3e6073","sha512":"00d898d537893ec342ca42ae6de18ace2f732233bdcc9ebec86dadc655f76c242e445b9f21e0e764a91e23051842285042be74f3b088e36c08f664b359be5ff6","ssdeep":"","tlshash":"f4c08cc4a0cb7e145742691052bf29e4a0344027744cab038cd4d8482e274b4a23beec","size":154,"data":"","first_seen":"2025-10-12T16:34:39.92349Z","last_seen":"2026-06-01T14:38:39.514034Z","times_seen":54,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ofgxtw.help/#/home","fqdn":"ofgxtw.help","domain":"ofgxtw.help","tld":"help"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"0f40806f855fc503ec7fe0e2cdc6da5f","sha1":"ad59d99993690064ee6565eea713ee4c5260f572","sha256":"954bc1931a5584c910a5391a0e2c05ba7190f3c672433a85c162ac948a74a44f","sha512":"7ea9c1cffaf640bc7083f2306a134368aa54ae775230a1f1990c43817594d950ecbf94412ea7ab6262bb8add4715ab6fffe7579f85b0a1c07f6acc4f8207cd9e","ssdeep":"","tlshash":"1fc08cc4a0c2ad001a12649010af24e49034402770481b029c94e8492e220b08237e98","size":137,"data":"","first_seen":"2023-04-13T00:16:19Z","last_seen":"2026-06-13T16:49:33.510503Z","times_seen":6249,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ofgxtw.help/#/home","fqdn":"ofgxtw.help","domain":"ofgxtw.help","tld":"help"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"7ab6dc81a5c1758a8381906989c4f704","sha1":"c3550c4675f6cb594031a333a3919f4d9428a278","sha256":"5eea0b86438aaa77b6a0b077bd01275ac57ab8586461564354417051a2554648","sha512":"1f75183d8956f47b911386e6a074bb83a858d49f67e7b7e63e9a1ac721f06bbe905dd07686f270d1da45e8cb224361ac7ccf68e9bfb7a85af070d24ac0b81a1a","ssdeep":"","tlshash":"ddc08cc4a0c23e001612641819af24e4a034802770481b238ca4d8482e220b09233e98","size":140,"data":"","first_seen":"2023-06-06T20:45:10Z","last_seen":"2026-06-10T10:44:31.294159Z","times_seen":201,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ofgxtw.help/#/home","fqdn":"ofgxtw.help","domain":"ofgxtw.help","tld":"help"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"d5b9095106d420a9e894653253889d42","sha1":"5906b05cd1abf9cf7939e6ebe29333665bee864f","sha256":"cbd2c27fa7ef3be0a40795283f56b2910112741c9a6771adc57d6e56d814af2b","sha512":"ab91769e0450984c12dcc12607d5b75e1cd75001b96fa71cbdb8036e3e606e79eb378bb0ebb9a13241663ca93a583d0cd17bc98d5f35a3ac62bb75e6d6be08cd","ssdeep":"","tlshash":"e9c02bc4b0c73d001602645010bf34e490344027b04c1b53ccd4dc483e230f08233edc","size":137,"data":"","first_seen":"2023-06-06T20:45:10Z","last_seen":"2026-06-13T11:46:12.412017Z","times_seen":952,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ofgxtw.help/#/home","fqdn":"ofgxtw.help","domain":"ofgxtw.help","tld":"help"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"4342c075064069a75b21b06ec6c9c3df","sha1":"6d219c2b352a6e62d76bdceffcbe70cfe0b9ef66","sha256":"51d786f481e0b83ee1dc319b53342d36b4b4f8fbeda9e872f89e25ab0e41a380","sha512":"cc78154423bd3125ca7754f934cde50e37e904ab59ed3aad3e349c5be9447a95a5dbc5c39eaf5d3c2b8df659c2b29555ef731de13df95c7e4351f0fe084ca604","ssdeep":"","tlshash":"f7e0c089f4c43b50ac052429766e38e89030001a6ae85b6ad9fc88887b110f84633ef8","size":353,"data":"","first_seen":"2025-10-12T16:34:39.979026Z","last_seen":"2026-06-01T14:38:39.518147Z","times_seen":63,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ofgxtw.help/#/home","fqdn":"ofgxtw.help","domain":"ofgxtw.help","tld":"help"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"5948bc3b90afab1829ab7ee61269f24e","sha1":"517e29a82521418181f702543be8ae74a3bf68b3","sha256":"14fc83a84c91770211dc352186f8e87ddc85e87c2dba0c80a159b45897b9ae2d","sha512":"05c079bbf0389ad341941c3e837aca91dc9aff681cee8da0b4560551ba13e6bbb76b01213af6514e6991e3369062870866a41e67e6d67a37038ddba3ddee7d5f","ssdeep":"","tlshash":"a5c08cc4a0c26d002606691010af24e49028802670485b028c94e8592e264b08233ea8","size":139,"data":"","first_seen":"2023-07-01T13:40:07Z","last_seen":"2026-06-13T13:54:53.611266Z","times_seen":1561,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ofgxtw.help/","fqdn":"ofgxtw.help","domain":"ofgxtw.help","tld":"help"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"cd7a34e714de94d5c29b8ac5acdde24b","sha1":"b722bccb435490630d97ef88cafeb02d92f70fd0","sha256":"312ebfdc50a0e168cff60c206811b02e944263a7d9060c2685509dacfacd7f71","sha512":"a724bc648a508c24e5bb1788e1f02b47030893bbb0b80a99e380d95480095983a35d8ec11193c53f0a67db47a289ab608fcbc9dbca846bfdd5d61a8832290f43","ssdeep":"","tlshash":"58e07d48ff28c7f316ce28ab516e770858d104d58c1b58024cebccc86935ed87291527","size":314,"data":"","first_seen":"2023-03-11T11:23:25Z","last_seen":"2026-06-13T17:11:14.856439Z","times_seen":37531,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ofgxtw.help/#/home","fqdn":"ofgxtw.help","domain":"ofgxtw.help","tld":"help"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"b1dcfa69604091c6b34e7d885ffa476e","sha1":"6fea510b921781ce00aba383120bb1be83e38522","sha256":"a95b8e1b8b49c34e4a6d0d7028a690a10957f373a79584d0787c6dab02693a5e","sha512":"b124dcc683d061ee449bad373209adc2c48dc9a3d9664d3c4bdb890ab460a85c9872587d8f21a3fa2f074bd72046b0e8f49b5d3978ee1cfba4e0cc34b369a498","ssdeep":"","tlshash":"72c08cc8a0c77e501a42655029bf24e8e024416ab0889b039d94dc4c2e630b4923bea8","size":148,"data":"","first_seen":"2024-08-29T17:49:52.033375Z","last_seen":"2026-06-01T14:38:39.529854Z","times_seen":87,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ofgxtw.help/#/home","fqdn":"ofgxtw.help","domain":"ofgxtw.help","tld":"help"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"f2d562f0482af28097a1e8bff743e202","sha1":"ab1f7442f13da01242f874f07b84041f32ff8cb8","sha256":"8ea8193c70220762139c7844d4be3c37d53d805256513bc224b53d16ad35730a","sha512":"2cf8993becc7c96e42b0499e72862eefa57d365830253e8b580c35ee9f854d4adb0b5b6817b56dfb125acdbc496ae99e8e78d7f73220c4093e8f2d2e521205f0","ssdeep":"","tlshash":"21c08cc5a0c23d002616641011af38e49028402674481b029c94e8482e230b48233e98","size":137,"data":"","first_seen":"2023-06-05T11:50:57Z","last_seen":"2026-06-12T12:16:48.410023Z","times_seen":1039,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ofgxtw.help/#/home","fqdn":"ofgxtw.help","domain":"ofgxtw.help","tld":"help"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"6bf3d54da83101c2d0cd0d94a69d3c04","sha1":"d125f3ba021adeb05c5c7dfaf4fc7e74a0e7b3ee","sha256":"2a2418700efee08efa3470a8e6e387ed7f4769f63bb147a00d2ca287af1ea474","sha512":"6d32fa0a1baf76885888126915cbe4a60047748be8833907a4585c6248e25837cce5f38efd8ce543d95735a113922eb8e236f6fa50efde28ea544f9f85ae2fab","ssdeep":"","tlshash":"edc080cdb0d32e183e01692064af3cd4f1344467b14817528c94d85c2d330f54333e9c","size":178,"data":"","first_seen":"2025-10-12T16:34:39.962702Z","last_seen":"2026-06-01T14:38:39.52201Z","times_seen":65,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ofgxtw.help/#/home","fqdn":"ofgxtw.help","domain":"ofgxtw.help","tld":"help"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"0381290b89e9198fc37d2e50b5f37797","sha1":"1508e92e22fcce03f5d3750ebdfa5abefe1b4e7e","sha256":"44841ff32b4f70eed44572ac672c77bd9cb91e417284049c17468f9e228122dd","sha512":"eb0e7d0c8ccca235d9f892dc29b843dc17ce5ab411959bd84620db36ca384f98e36acd31e3658904cf86c7c20d2fa0c7efcae2a1b2a68139d47df061f3f62003","ssdeep":"","tlshash":"38c022c6b1c63d804182711010bf24d090389122b0489b438cced8082b630b28137f98","size":192,"data":"","first_seen":"2025-10-12T16:34:39.937079Z","last_seen":"2026-06-01T14:38:39.529103Z","times_seen":55,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ofgxtw.help/#/home","fqdn":"ofgxtw.help","domain":"ofgxtw.help","tld":"help"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"e97785bb8a0733e09196b0392638169c","sha1":"1b592f85757841220e83fbab5a5f243ab792566a","sha256":"59040aafe599c17173ba1bc6700f43ea8262bbd404013d5f4240a78e83929ff5","sha512":"479eb215633acd4c731b2783091de909ff193f096ae19284f7a35630291b68edce9c0bfe6b5cc470d88369f63f7b5ecab9783fab06b7ab3d924f3f50682df25e","ssdeep":"","tlshash":"bbc08cc4a0d22d107a02641060bf25e49024402670485b028c94dc482e230f48233e98","size":141,"data":"","first_seen":"2025-11-01T17:44:45.846986Z","last_seen":"2026-03-20T19:46:41.809631Z","times_seen":24,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ofgxtw.help/#/home","fqdn":"ofgxtw.help","domain":"ofgxtw.help","tld":"help"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"7746993e8adb9277ba5afa2584910974","sha1":"8e7e6d562fd56f594b40b6657156d483d7426e40","sha256":"833dc15f120cad89d5c0680edae217dbad02010e42af351959607df4170074ee","sha512":"10ee66e22fa45386057f1385e179955ad4fd4d53363c0aebe68aa9ba0547bf409a286e53ab6e678e5d0c3485d6cabcdd359f359c5258160b50a0a5a5496d6e6d","ssdeep":"","tlshash":"39c08cc5a0c22e101646641010bf28e49024402674481b028c98d8482e220b08233e9c","size":140,"data":"","first_seen":"2023-04-13T07:32:13Z","last_seen":"2026-06-13T13:54:53.622495Z","times_seen":4080,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ofgxtw.help/#/home","fqdn":"ofgxtw.help","domain":"ofgxtw.help","tld":"help"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"0a6dcd4a293ca369ec22e3f632d87d77","sha1":"f1ceff18918a70369adbfac3c38de492f0970d31","sha256":"74b9b080545da650705afb7bb7c83deea7d8dba4f544194b01121ffc59ae1cd5","sha512":"c1fe1c83c092b6c8abc122a6503bde6642cfdceb2ff0bd4ec7229ad0f16a48eecb5f5a40445f1a9d67d980176f4d2593a2135412d81f3afd476ee6551706cf62","ssdeep":"","tlshash":"79c08cc4a0d22d101616691010af24e49024442670481b028ca4dc482e228f09233ed8","size":139,"data":"","first_seen":"2023-04-12T10:08:15Z","last_seen":"2026-06-13T16:31:23.513075Z","times_seen":1737,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ofgxtw.help/#/home","fqdn":"ofgxtw.help","domain":"ofgxtw.help","tld":"help"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"6900701ff959494d30437499abeb8885","sha1":"7cb4c820fbf30caa6b50d6c2dc4aa7c0c4b644d8","sha256":"3be52a71ee1e4d668cceef779a9942298cef4d68e03183d10681c4aa945c83f5","sha512":"731bc35b44d92adfda91474163cba7cbfe8ebb8faeb76364becb6a0f87c8d62c68a560257759546c0c38da3d0ea220cbee60eed126f77194441f92786231135b","ssdeep":"","tlshash":"b5c08cc4a0c22d101642645420af26e4a028802a70485b128c94d8482e620b48233ea8","size":138,"data":"","first_seen":"2023-04-13T00:16:19Z","last_seen":"2026-06-13T14:18:03.143321Z","times_seen":7153,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ofgxtw.help/#/home","fqdn":"ofgxtw.help","domain":"ofgxtw.help","tld":"help"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"4acf87d00c4897d30dc5cb9aeadd7c45","sha1":"dcf23a6536e55481fa1bac3bd3fd146a91e65184","sha256":"56727def1b270126ba40c9ffb947309084fc4a22d6caafd6f785307e9614ad82","sha512":"842f100296530229b32e93ef969aabe0745435f435f79bc069fbf45f5fd47526d2d8e7d2ffb09957fefdfd831d27a0d1c5814ae7ff0e5177f8813ca941bfe17a","ssdeep":"","tlshash":"5dc012d9b1832d1016166410957fa4d8912844767188ab92ded8e8583d534b45137f9c","size":178,"data":"","first_seen":"2025-10-12T16:34:39.945429Z","last_seen":"2026-06-01T14:38:39.512471Z","times_seen":64,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ofgxtw.help/#/home","fqdn":"ofgxtw.help","domain":"ofgxtw.help","tld":"help"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"47540997c6538c57830fb0ce972ce055","sha1":"8565f22fcbcff847c75545c1896ae84d4be4ea73","sha256":"0f80d63f8299c46291ef24637b760be2286a9f13587118e8c3af078cbba1d4a0","sha512":"5ca74a18fbfcd3273b667769d68236eb8eb2996fd1d8d84644584274ba0d6f5d43d6a1d2aabfc806c4e033c363d1493eb12d857d14eb3b4f40ceae3b793b4605","ssdeep":"","tlshash":"a5c08cc8e0d22d101a02b41424ff24e490a8442674481b069c94ec892e230b48233ea8","size":149,"data":"","first_seen":"2025-04-27T11:55:12.998082Z","last_seen":"2026-06-01T14:38:39.528221Z","times_seen":90,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ofgxtw.help/#/home","fqdn":"ofgxtw.help","domain":"ofgxtw.help","tld":"help"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"55c7691ac49fb33b8dbe27f3a42beb17","sha1":"d8eba60ec9a2f4726f867ddd2731b18d307e495f","sha256":"d421b1fe3fba609c2649edb854dfcf2a95ab5b80e78389d6493790d1b387222c","sha512":"9dedf1eec48e262d578058367dd918d73f291cebf9e4a0e4de626f6eb3f6e22c3a391a5a9fba72dacd5d3d36c24c387f727ad19b7a05458a858a42ea5a0608b7","ssdeep":"","tlshash":"5dc08cc4a0c22d101606682010bf24e490348026705c1b428ed4e8482e220b48233e98","size":141,"data":"","first_seen":"2023-07-05T19:24:05Z","last_seen":"2026-06-11T20:20:57.78125Z","times_seen":864,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ofgxtw.help/#/home","fqdn":"ofgxtw.help","domain":"ofgxtw.help","tld":"help"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"d8a0b36a3bb5359d82373fd74ab0a55b","sha1":"109fcd2e9501021577ad657d5701aa40e771b723","sha256":"26b23c11a596c1301030aaa5e72296226d0b2c601ff7b24694d413a401ac9826","sha512":"ebb5fb5d0b9ad70253bc33b31f5fab9fa0efb74a89eefd5b900d6b956970a52ef306b8e62a73b47775339624aef7daf7f4779743b84394f80591c0ea8182f9fe","ssdeep":"","tlshash":"d8c08cc4a0d22d001a02641060af34e49028442670481b028ca4d8482e620b48233e98","size":138,"data":"","first_seen":"2023-06-06T09:30:31Z","last_seen":"2026-06-13T13:54:53.61066Z","times_seen":1879,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ofgxtw.help/#/home","fqdn":"ofgxtw.help","domain":"ofgxtw.help","tld":"help"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"c51e92812024c4509b0b6b45c1b9b5ab","sha1":"1bc9d855f1f41e867d29634123b1f9be531c0e68","sha256":"8c2b197ea628d6a693b2a210d4b36df5dc482c485ac41cfad399e525666f6c19","sha512":"9cbd0534837b4b5574955a9af167a4c8c8732741368cdc3ce5f3cbfb827aff177fe0cba09142905f71ded2213dfe8fd8172fc0d25aaaebd82a5b4cefddb591c9","ssdeep":"","tlshash":"4dc08cc4a0c22d101602641120af26e4a024402a70889b128c94d8482e220b08237e98","size":137,"data":"","first_seen":"2024-12-02T16:36:01.409431Z","last_seen":"2026-06-11T20:20:57.847483Z","times_seen":188,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ofgxtw.help/assets/en-Dbrzt6Vj.js","fqdn":"ofgxtw.help","domain":"ofgxtw.help","tld":"help"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"fe50af114fc5e587f6c79c2be1e6273f","sha1":"9d02e02462df7ebc01a07cfc310a688e3c5ed53a","sha256":"5c2b59f8a163fabe36341e65215793395c096e4fe4dc18b4591707bb319d7659","sha512":"da633e18c213c8ac5ca71a40ad8948ad74b4fbc35e13a0f4465ba599c527669154ee5a7c6dbbe643c44a188e8e8ac6afe6ed8afd6448c1643ca118059dd6073c","ssdeep":"768:uVtZcEw/oPrZOuiUAtgzUgJ+PmvsYJ8HnxJou4/HiA9JYOuy:5poTZOozUgJzsYOHnxahJ3uy","tlshash":"7f43f88dbe165c9a04e3237a78ce6a6120f505c1c358881f5fec85fc83e1b6767a7629","size":55269,"data":"","first_seen":"2026-02-24T16:10:35.270307Z","last_seen":"2026-03-20T19:46:41.750165Z","times_seen":40,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ofgxtw.help/#/home","fqdn":"ofgxtw.help","domain":"ofgxtw.help","tld":"help"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"7342e4e83efdd4685023506df50500a1","sha1":"d4e998baf5423c2212d97dc74cb641afd5acce8e","sha256":"b318b1783e618e649d51f2fd8823043ebd92c8e55930eb55798d63d62661d985","sha512":"47718a51ac2a72020f8504e34d011db4240075d28b43d5f3e360645aa64de90989ef46e947a5114e0b7d0a04001c6fb7a6dd9cc0d779069b9152f5f89f471fb8","ssdeep":"","tlshash":"83d06cf636b655802c85412e0acd2c21b1108233cc9e7a0c788c6c00afaf9181a78436","size":245,"data":"","first_seen":"2026-02-24T16:10:35.333553Z","last_seen":"2026-06-01T14:38:39.519619Z","times_seen":76,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ofgxtw.help/#/home","fqdn":"ofgxtw.help","domain":"ofgxtw.help","tld":"help"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"43a144a646cd1c3aa47c6e97b8997f16","sha1":"751520d68e01030d76aaa27829bee42de57b33ae","sha256":"7400aff6408f23b72deadda0905ff4dc8eb4af368f7e8026063918149826a7d6","sha512":"85eff0527e8a86cde19b0e67070c8f71528670484865bafb4b88ee54f83b48f575275ed10cf343f0c84d4c0a425f6632b5b1bdfdfbfd75c6702ee856d28f512f","ssdeep":"","tlshash":"14c08cc8a0c22d101a02681414af24e49028442774481b068cd4e8882e230b08233ea8","size":141,"data":"","first_seen":"2023-04-13T00:16:19Z","last_seen":"2026-06-13T14:18:03.22661Z","times_seen":4147,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ofgxtw.help/#/home","fqdn":"ofgxtw.help","domain":"ofgxtw.help","tld":"help"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"ec9df9a33b666410337704bd726733b4","sha1":"d198df361486f669307a9f500430af5781ec29ca","sha256":"caca11cea1f1ff1eca68caaf85a0bb4b49f19bfcdc242251086ee515cc3bbc49","sha512":"e86f9ff2e723cba50481674e7514202d0198ac7629d8181b722cddb077afc2c5295c6d28dada4a9fd5d4886bf82ccda806c7aacb64740f31a8c643c411143342","ssdeep":"","tlshash":"a5c08cc4b0c23d006a02641410af38e4a0284027b04c1b129c94d8582e730b08237ee8","size":143,"data":"","first_seen":"2025-10-12T16:34:39.988929Z","last_seen":"2026-06-01T14:38:39.531991Z","times_seen":54,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ofgxtw.help/#/home","fqdn":"ofgxtw.help","domain":"ofgxtw.help","tld":"help"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"56ed1dc7a7c7c4d0135776e306ae9bcb","sha1":"18d8914c8d7a21ea2f664080fcbcaf0c942c3ac1","sha256":"055cb83a18d103da0b9e79549d4ca0aaa5b2c7445ede7bf18317c53d8d18570e","sha512":"3f4c3d523962372f297e9aab82917e8d07f1b8f69c4a1fa2ee8e3721d73001e60707bc6de4111ca20196ffefd97f3df6b2f07211b3841f397635d05b9cd4e2e9","ssdeep":"","tlshash":"b7c012d8b0c66d002616a41028af28e8a0288026b44c1b968da4ec592a620f48227ead","size":170,"data":"","first_seen":"2025-10-12T16:34:39.92057Z","last_seen":"2026-06-01T14:38:39.517283Z","times_seen":62,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ofgxtw.help/#/home","fqdn":"ofgxtw.help","domain":"ofgxtw.help","tld":"help"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"dc094b1b256d5c643caee7dbb2759bd0","sha1":"adf30061bd73776882c9b3c4307b9da89a77e448","sha256":"1924a94a5275e97ac50fd4b9ceb9cd137670a857a159826847a1bf70e4aee577","sha512":"7a645e4da9bc62cd103bc2b66fdb43d40826816fa26b64e459fa8889e42b5a9a1b67ef8218e9cb6cd999a1b9121cb41b3d8baedb76d9b45e861e40d72279ad1d","ssdeep":"","tlshash":"4dc08cc9f1e73e1026566a1514af68e8a0344836b0891b8f9de4ecc83e630f08237edd","size":162,"data":"","first_seen":"2025-10-12T16:34:39.965367Z","last_seen":"2026-06-01T14:38:39.537478Z","times_seen":64,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ofgxtw.help/charting_library/charting_library.min.js","fqdn":"ofgxtw.help","domain":"ofgxtw.help","tld":"help"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"8573e89d9ec535663d75f21b1f08109c","sha1":"a8d9eea0b157ceeffc38d4254e6f6abc9d697d10","sha256":"cb0c6c9f1771d252eee7caa043bdd7cfffbd52c2cc4b18b7be7c4554ed069151","sha512":"55d728fa1e0682725f94b17387c6790792d3d34b43652a00097876118575bd6cefa20916d80674519005d72f20ecbb745e9645516c056e6f9bb6691d5efbcb33","ssdeep":"192:9fdWSo7ktFUnoBelr6lw2LfnzuIQPlaJ1i10K+Ei/ISJhvHIheu5Ph3Ffam:vWS2ktFUnoIlD2LfnqIJimK+5/ISJhvu","tlshash":"6e224f58ed2478720acb54f0427f180f8239e278d84944ed3cc4e6ec59fd44a6a6fbb8","size":10858,"data":"","first_seen":"2023-08-16T00:37:19Z","last_seen":"2026-06-13T12:10:03.125521Z","times_seen":1223,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ofgxtw.help/","fqdn":"ofgxtw.help","domain":"ofgxtw.help","tld":"help"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"528dd01eb509d1fc3c68b48e165c9d77","sha1":"8d702f33d869eb8c53cf75c17014f96385322395","sha256":"b508dff20bdbd9138e31aa48c45bc501805e509d2fd4709b39c4a60cd5c6b43a","sha512":"4c1edeec560f431005363ff5291acc80c1c42edf7c9a6d6e4fde2f7539b6a35a8e36f0bc228503263277bf5df4525dc579575faadca614c32e5dfa885a2d343b","ssdeep":"","tlshash":"78a012bb71b851710cd51ba7a40455e01c20123105052c101c8d5151c011c171d394c0","size":84,"data":"","first_seen":"2023-04-07T06:55:59Z","last_seen":"2026-06-13T17:11:14.857Z","times_seen":39772,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ofgxtw.help/assets/vendor-DVoNlCS0.js","fqdn":"ofgxtw.help","domain":"ofgxtw.help","tld":"help"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"e1c7c2ec3fa5fdd49c1e99ec9fe79b1f","sha1":"8109fa405467b1ccd766403898d413ac512c65d3","sha256":"3fe8c6d473f1d10a5c0ed389c8ccb10d6504f8f7664921cf37b255bf88fc291f","sha512":"fb17c1194e834e4bc2b086aaa332118ddf3412075a09ec379d6988963a37b4aa3833b8eb1294cd2d539e6c6386ebb487c9f73859431abf461f1564ef753bb7d0","ssdeep":"49152:FN2LD4rA7kDbDVdQZWAacs4ywGVa+URU4HLqsNMUE9LaRoIuU/Zv+ehV9wo8u:n+6XdeSc","tlshash":"25a53bb8b651b07507a720e5007f0907eb39690b704f84a8f669d8e67cbc94ad677f38","size":2239056,"data":"","first_seen":"2025-11-01T17:44:45.863769Z","last_seen":"2026-03-20T19:46:41.819913Z","times_seen":18,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ofgxtw.help/#/home","fqdn":"ofgxtw.help","domain":"ofgxtw.help","tld":"help"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"bdc665a91ce354b6b29e1440c087da1b","sha1":"e2a5463d1f014bc22029584c8aeb0e264b8d3d97","sha256":"4be21bc4b7d50194efc45e563be8018f241e8948620b38a2c86d596e205aebde","sha512":"512afe3cce7434e775517b216f6cd9bada0c4042df8187442824db9fc27105294161070a39f550c6ca7af711269f882ed2bd40488e243b6ed1d928f6e0efbfe2","ssdeep":"","tlshash":"02c08cc4a0c27e101602641020bf28e89024403674481b029d94dc482e720b08237e98","size":139,"data":"","first_seen":"2023-06-05T11:50:58Z","last_seen":"2026-06-09T19:08:33.203189Z","times_seen":205,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"wss","addr":"h5-api.ofgxtw.help/ws/fe058127-8779-4b17-a3de-924d830bd083","fqdn":"h5-api.ofgxtw.help","domain":"ofgxtw.help","tld":"help"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://ofgxtw.help/","date":"2026-03-20T18:48:57.844Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ofgxtw.help","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Mar 2026 11:30:51 GMT","end":"Mon, 15 Jun 2026 11:30:50 GMT"},"fingerprint":{"sha1":"44:64:B8:D3:FC:DF:BD:23:CB:ED:B7:16:5D:CA:F8:37:C4:6D:B8:D1","sha256":"EC:B7:49:85:AC:72:E4:BD:0F:B9:82:DC:5D:1D:0C:E0:03:1E:66:EC:CC:0D:25:BD:69:C7:15:D6:A7:12:9A:E3"}}},"request":{"raw":"GET /ws/fe058127-8779-4b17-a3de-924d830bd083 HTTP/1.1\r\nHost: h5-api.ofgxtw.help\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nSec-WebSocket-Version: 13\r\nOrigin: https://ofgxtw.help\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: dmRgKGaOanbyEgn4y/oEIg==\r\nDNT: 1\r\nConnection: keep-alive, Upgrade\r\nSec-Fetch-Dest: websocket\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 \r\nDate: Fri, 20 Mar 2026 18:48:58 GMT\r\nConnection: upgrade\r\nVary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nAccess-Control-Allow-Origin: https://ofgxtw.help\r\nAccess-Control-Allow-Credentials: true\r\nUpgrade: websocket\r\nSec-WebSocket-Accept: 2LprqoiONqOR2WvIqEnqlw9kqRs=\r\nSec-WebSocket-Extensions: permessage-deflate\r\nX-Content-Type-Options: nosniff\r\nX-XSS-Protection: 1; mode=block\r\nSet-Cookie: server_name_session=b6f350677751ea8a8c1798b55ea5007a; Max-Age=86400; httponly; path=/\r\ncf-cache-status: DYNAMIC\r\nReport-To: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=XYGRuIdHJoSEdEoabyK3F1DGQY%2FdkesrWedzpGW9%2FGS7GVZfFHCtbuswrr08AUbOhsbq7208l6%2F%2BVdHMuaUzx4V285bjfioWQ6INmkY8T0UYhlkooKtOAIRPp5owgI2L2mHnDBE%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nNEL: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nServer: cloudflare\r\nCF-RAY: 9df6e4e20be595bd-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=7755\u0026min_rtt=7658\u0026rtt_var=2322\u0026sent=4\u0026recv=7\u0026lost=0\u0026retrans=0\u0026sent_bytes=2336\u0026recv_bytes=1194\u0026delivery_rate=358637\u0026cwnd=52\u0026unsent_bytes=0\u0026cid=26a7307222edff3e\u0026ts=451\u0026x=0\"\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-13T17:33:37.826371Z","times_seen":16391923,"resource_available":true,"data":null}},"time_used":548,"timings":{"blocked":0,"dns":39,"connect":46,"send":0,"wait":438,"receive":0,"ssl":63},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-20","alert":"Phishing Block","trigger":"h5-api.ofgxtw.help","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-20","alert":"Sinkholed","trigger":"h5-api.ofgxtw.help","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.ofgxtw.help/api/common/type/defi_activity_type","fqdn":"h5-api.ofgxtw.help","domain":"ofgxtw.help","tld":"help"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ofgxtw.help/","date":"2026-03-20T18:49:00.538Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ofgxtw.help","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Mar 2026 11:30:51 GMT","end":"Mon, 15 Jun 2026 11:30:50 GMT"},"fingerprint":{"sha1":"44:64:B8:D3:FC:DF:BD:23:CB:ED:B7:16:5D:CA:F8:37:C4:6D:B8:D1","sha256":"EC:B7:49:85:AC:72:E4:BD:0F:B9:82:DC:5D:1D:0C:E0:03:1E:66:EC:CC:0D:25:BD:69:C7:15:D6:A7:12:9A:E3"}}},"request":{"raw":"POST /api/common/type/defi_activity_type HTTP/1.1\r\nHost: h5-api.ofgxtw.help\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nlanguage: en\r\nlang: en\r\nContent-Length: 2\r\nOrigin: https://ofgxtw.help\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":2,"data":"{}"}},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 20 Mar 2026 18:49:00 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://ofgxtw.help\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nset-cookie: server_name_session=969f10ab0ecf1323be38f9cf51714704; Max-Age=86400; httponly; path=/\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eIGuNkROcv6oVNB%2BMydaMVgDUALKxDcIkpCWb%2BGxZNazhAPCsLFX2xOL%2BcGbbjEQvNmMq72rRomMiVDE98ERqidiEPqCArCJL1bTIeCoVxAiQg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9df6e4f20bcede91-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":656,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"377547c8f767a60f400a02dae63eb33a","sha1":"90cd91d3318010114e6daa8f9e160beb4b0ac382","sha256":"3236498fcb921e4ac10b93fef88ecfda5469b4e2a3be7512090865a46e87d800","sha512":"a0116018b798349f620642b15c673ebf74df3b2a7eac2c1e0afc994b91ac5333b2301804efeff7f64544fd95553001b4d4b19a17c8b8ce7eef63218a74ea14c8","ssdeep":"","tlshash":"01f02814393dcebf095f65d745ec78183adc152b94e0bc60a8ab4f3c6be4171188a21c","first_seen":"2025-07-27T10:32:01.636668Z","last_seen":"2026-06-08T12:43:51.894662Z","times_seen":173,"resource_available":false,"data":null}},"time_used":219,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":219,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-20","alert":"Sinkholed","trigger":"h5-api.ofgxtw.help","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-20","alert":"Phishing Block","trigger":"h5-api.ofgxtw.help","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.ofgxtw.help/kline","fqdn":"h5-api.ofgxtw.help","domain":"ofgxtw.help","tld":"help"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ofgxtw.help/","date":"2026-03-20T18:49:00.540Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ofgxtw.help","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Mar 2026 11:30:51 GMT","end":"Mon, 15 Jun 2026 11:30:50 GMT"},"fingerprint":{"sha1":"44:64:B8:D3:FC:DF:BD:23:CB:ED:B7:16:5D:CA:F8:37:C4:6D:B8:D1","sha256":"EC:B7:49:85:AC:72:E4:BD:0F:B9:82:DC:5D:1D:0C:E0:03:1E:66:EC:CC:0D:25:BD:69:C7:15:D6:A7:12:9A:E3"}}},"request":{"raw":"POST /kline HTTP/1.1\r\nHost: h5-api.ofgxtw.help\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nlanguage: en\r\nlang: en\r\nContent-Length: 70\r\nOrigin: https://ofgxtw.help\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":70,"data":"{\"interval\":\"FIVE_MIN\",\"limit\":1000,\"market\":\"binance\",\"symbol\":\"eth\"}"}},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 20 Mar 2026 18:49:00 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://ofgxtw.help\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nset-cookie: server_name_session=ad58d77a8fd661df53586700f977ede4; Max-Age=86400; httponly; path=/\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iDmH5mcgPkqID%2BYTiORXc50DJdDUQr7NcKtAlUYxmegtaRFbI%2F7n84OSjs9Or1ov63ZV4hMk1Je9%2BaQp8sYQta0XE7KfCooJXhaTfXn%2BSbxaQA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9df6e4f20bd4de91-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":40609,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"cbbff3eb0bfe46bd9cfb0d9430610da1","sha1":"e566a71d64bcbdefe9f3b14a26da6c599817de45","sha256":"ceba62cbc8284a5517f20d8f5f8ad1fe13ee28e6049d4f45899a987df47e57f5","sha512":"80cec0dc3a08cd2e030c7f517218d91a3d8be67603e0999e47201dc881ce077b4dd7bd95b81144a6a3653e621362942ce0da1c18504955f20a7ffd796f79e310","ssdeep":"768:BP6l5OqqdphWqfa+YyAregF/WK5HYND1ZpEyGeZvF:B86dmqfjZgJWK5HYRug7","tlshash":"0903e4724a9bf4aced34ccca0bc7bfe08d2237c38add59560699910b5954330e197b9b","first_seen":"2026-03-20T18:49:28.981864Z","last_seen":"2026-03-20T18:49:28.981864Z","times_seen":1,"resource_available":false,"data":null}},"time_used":300,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":300,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-20","alert":"Sinkholed","trigger":"h5-api.ofgxtw.help","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-20","alert":"Phishing Block","trigger":"h5-api.ofgxtw.help","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.ofgxtw.help/kline","fqdn":"h5-api.ofgxtw.help","domain":"ofgxtw.help","tld":"help"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ofgxtw.help/","date":"2026-03-20T18:49:00.548Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ofgxtw.help","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Mar 2026 11:30:51 GMT","end":"Mon, 15 Jun 2026 11:30:50 GMT"},"fingerprint":{"sha1":"44:64:B8:D3:FC:DF:BD:23:CB:ED:B7:16:5D:CA:F8:37:C4:6D:B8:D1","sha256":"EC:B7:49:85:AC:72:E4:BD:0F:B9:82:DC:5D:1D:0C:E0:03:1E:66:EC:CC:0D:25:BD:69:C7:15:D6:A7:12:9A:E3"}}},"request":{"raw":"POST /kline HTTP/1.1\r\nHost: h5-api.ofgxtw.help\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nlanguage: en\r\nlang: en\r\nContent-Length: 71\r\nOrigin: https://ofgxtw.help\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":71,"data":"{\"interval\":\"FIVE_MIN\",\"limit\":1000,\"market\":\"binance\",\"symbol\":\"coti\"}"}},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 20 Mar 2026 18:49:00 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://ofgxtw.help\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nset-cookie: server_name_session=969f10ab0ecf1323be38f9cf51714704; Max-Age=86400; httponly; path=/\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5VZI8pl0rRyTgzJ3f4%2FiyYh160VuWwqGsy6bOuD5OOE8qjPVne9yJPuiFih5jQqKeyog0R6jrPPEYcHqjmDgor%2BgZHDMp2RuzXIYR82DFCJBXQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9df6e4f22bf5de91-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":40053,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"612bf6282e35157a48254d1b06b435b7","sha1":"791e8b11eaaa8787aaa36acfd9813ce987026f59","sha256":"8472109a625ae4b75b821d56d57ae7303850f9d60b86e1a21e6d3926eaa6bc0b","sha512":"e14ac32e67c4d6018ee9187fceec94d27de31d7aa04b99dcf3ca6b5ee17bde6d764b4c6dc279235b72d20ab2b117af7fd356316f1193ca4afc47c4267fcc6e1e","ssdeep":"384:15XXtQAsRvXOJhuRpGLs0HFP281LynTcSns5xIaw6:15XXtQAsRvAVswFu81LKaxNw6","tlshash":"510345748f9893cbc9316d8a2f93bff1094a39d74ecc9dc919dd5d08a94026e90847af","first_seen":"2026-03-20T18:49:28.985209Z","last_seen":"2026-03-20T18:49:28.985209Z","times_seen":1,"resource_available":false,"data":null}},"time_used":446,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":446,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-20","alert":"Phishing Block","trigger":"h5-api.ofgxtw.help","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-20","alert":"Sinkholed","trigger":"h5-api.ofgxtw.help","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.ofgxtw.help/kline","fqdn":"h5-api.ofgxtw.help","domain":"ofgxtw.help","tld":"help"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ofgxtw.help/","date":"2026-03-20T18:49:00.568Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ofgxtw.help","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Mar 2026 11:30:51 GMT","end":"Mon, 15 Jun 2026 11:30:50 GMT"},"fingerprint":{"sha1":"44:64:B8:D3:FC:DF:BD:23:CB:ED:B7:16:5D:CA:F8:37:C4:6D:B8:D1","sha256":"EC:B7:49:85:AC:72:E4:BD:0F:B9:82:DC:5D:1D:0C:E0:03:1E:66:EC:CC:0D:25:BD:69:C7:15:D6:A7:12:9A:E3"}}},"request":{"raw":"POST /kline HTTP/1.1\r\nHost: h5-api.ofgxtw.help\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nlanguage: en\r\nlang: en\r\nContent-Length: 69\r\nOrigin: https://ofgxtw.help\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":69,"data":"{\"interval\":\"FIVE_MIN\",\"limit\":1000,\"market\":\"mt5\",\"symbol\":\"eurusd\"}"}},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 20 Mar 2026 18:49:00 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://ofgxtw.help\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nset-cookie: server_name_session=969f10ab0ecf1323be38f9cf51714704; Max-Age=86400; httponly; path=/\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=atobeb4tpBOHRjcar8F9tv38ctMozFMGeI2V4SC3scOn5pfB9MPTtpYuXgU0sj9jsaPGjgCVkxXxlyDfCSLtTis4UILGTAbPHJuvUL6x0E3S1A%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9df6e4f24c53de91-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":42985,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"cd7488ab52201491a85f02a59b1a248a","sha1":"de42e85c284eac95c7c6b10a9d0541d11b1d313a","sha256":"b6e78741be7344dd1d6bdf5bf5f9a7404445da9b43a42b5091396f449b5fa311","sha512":"ce692ac38f88167951712f5b5bdff5d32b640881bec47f7efeb665a447e37227eae2628adf845939739fa5753967e89e1c5b324f11f454be9c0e77eaadac8c56","ssdeep":"768:yTQSaKV9baR6xuiVDdEtHXfrEO/PMU59i7vYnfftsxcE:JJw1aR6giVJERXfrEAPMyi7gfft/E","tlshash":"611369304fc89099c5738cc22fc3aea03d52f1f6dacd6d86c1995d15ee97268b109b9e","first_seen":"2026-03-20T18:49:28.987595Z","last_seen":"2026-03-20T18:49:28.987595Z","times_seen":1,"resource_available":false,"data":null}},"time_used":255,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":255,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-20","alert":"Sinkholed","trigger":"h5-api.ofgxtw.help","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-20","alert":"Phishing Block","trigger":"h5-api.ofgxtw.help","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.ofgxtw.help/kline","fqdn":"h5-api.ofgxtw.help","domain":"ofgxtw.help","tld":"help"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ofgxtw.help/","date":"2026-03-20T18:48:59.967Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ofgxtw.help","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Mar 2026 11:30:51 GMT","end":"Mon, 15 Jun 2026 11:30:50 GMT"},"fingerprint":{"sha1":"44:64:B8:D3:FC:DF:BD:23:CB:ED:B7:16:5D:CA:F8:37:C4:6D:B8:D1","sha256":"EC:B7:49:85:AC:72:E4:BD:0F:B9:82:DC:5D:1D:0C:E0:03:1E:66:EC:CC:0D:25:BD:69:C7:15:D6:A7:12:9A:E3"}}},"request":{"raw":"OPTIONS /kline HTTP/1.1\r\nHost: h5-api.ofgxtw.help\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,lang,language\r\nOrigin: https://ofgxtw.help\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 20 Mar 2026 18:49:00 GMT\r\ncontent-length: 0\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://ofgxtw.help\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: content-type, lang, language\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nset-cookie: server_name_session=969f10ab0ecf1323be38f9cf51714704; Max-Age=86400; httponly; path=/\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2cprUzgLFHViKswhpXvBf0FHSGzkyBbWIxbgMJ0QpSfVCHoH3l5yzGw3pV%2FCtmvriJrKA8i%2BrGfkHya1mz6bmAyUXy2eL020ERkJl87Au7UMzQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9df6e4eeae0ede91-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-13T17:33:37.826371Z","times_seen":16391923,"resource_available":true,"data":null}},"time_used":423,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":423,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-20","alert":"Sinkholed","trigger":"h5-api.ofgxtw.help","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-20","alert":"Phishing Block","trigger":"h5-api.ofgxtw.help","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.ofgxtw.help/kline","fqdn":"h5-api.ofgxtw.help","domain":"ofgxtw.help","tld":"help"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ofgxtw.help/","date":"2026-03-20T18:48:59.958Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ofgxtw.help","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Mar 2026 11:30:51 GMT","end":"Mon, 15 Jun 2026 11:30:50 GMT"},"fingerprint":{"sha1":"44:64:B8:D3:FC:DF:BD:23:CB:ED:B7:16:5D:CA:F8:37:C4:6D:B8:D1","sha256":"EC:B7:49:85:AC:72:E4:BD:0F:B9:82:DC:5D:1D:0C:E0:03:1E:66:EC:CC:0D:25:BD:69:C7:15:D6:A7:12:9A:E3"}}},"request":{"raw":"OPTIONS /kline HTTP/1.1\r\nHost: h5-api.ofgxtw.help\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,lang,language\r\nOrigin: https://ofgxtw.help\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 20 Mar 2026 18:49:00 GMT\r\ncontent-length: 0\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://ofgxtw.help\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: content-type, lang, language\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nset-cookie: server_name_session=969f10ab0ecf1323be38f9cf51714704; Max-Age=86400; httponly; path=/\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=f21d6kUa9M2qXOIwmjHXM35ng%2FIWj9m%2FbdToDv%2BryQ6d7g5G3E5o2F7Uix67D29RqkoKyHgqJF93P9vqBSQ1EepuKntY7zmv5pc9dBNz4jQGtA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9df6e4ee9deade91-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-13T17:33:37.826371Z","times_seen":16391923,"resource_available":true,"data":null}},"time_used":423,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":423,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-20","alert":"Phishing Block","trigger":"h5-api.ofgxtw.help","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-20","alert":"Sinkholed","trigger":"h5-api.ofgxtw.help","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"storage.googleapis.com/order-ress/order/dotdigital/ee8b3c1060024bf498dd012256182efa.jpeg?2.2.1772339973820","fqdn":"storage.googleapis.com","domain":"storage.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.251.143.155","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ofgxtw.help/","date":"2026-03-20T18:49:01.097Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"storage.googleapis.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Feb 2026 18:24:04 GMT","end":"Mon, 18 May 2026 18:24:03 GMT"},"fingerprint":{"sha1":"3C:31:BD:D2:EA:D9:B8:8E:67:17:8D:EB:DF:1B:C1:8E:89:2B:5D:7C","sha256":"C6:AF:0F:22:89:A9:F8:1D:21:85:65:8C:F4:6F:61:1C:6B:D2:10:68:AE:65:22:E2:69:75:62:C6:D8:2C:2A:08"}}},"request":{"raw":"GET /order-ress/order/dotdigital/ee8b3c1060024bf498dd012256182efa.jpeg?2.2.1772339973820 HTTP/1.1\r\nHost: storage.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/jpeg\r\nx-guploader-uploadid: AGQBYWyoPzZ_Hv2-37H256i_OjkJLvFHU4Ka-0zvgybsmoVrED0YBhBM_SYBjho9_BXxt_xw\r\nexpires: Fri, 20 Mar 2026 19:49:01 GMT\r\ndate: Fri, 20 Mar 2026 18:49:01 GMT\r\ncache-control: public, max-age=3600\r\nlast-modified: Fri, 18 Apr 2025 23:31:31 GMT\r\netag: \"ba6930f8a28e77f5659a2f42e82a7acd\"\r\nx-goog-generation: 1745019091846695\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 7177\r\nx-goog-hash: crc32c=KbQ4+w==, md5=umkw+KKOd/Vlmi9C6Cp6zQ==\r\nx-goog-storage-class: STANDARD\r\naccept-ranges: bytes\r\ncontent-length: 7177\r\nserver: UploadServer\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":7177,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 225x225, components 3","md5":"ba6930f8a28e77f5659a2f42e82a7acd","sha1":"a8486aa615dcb5fc601f66289b55a5cdd08cd8d5","sha256":"8bf7252f758e4f74fa910c3f1935501125d6589f26e2e2c8f397b3ae6ec0fe53","sha512":"35ee8e31b81d5474c5f1178161d3f908139b65e1f33bc30db61618cf0d4555bb38d0e7a6ffd06d7562ca41f51ab216b37320bdb29a968c891badff668a924051","ssdeep":"192:BnyBvvQqY4kabfz3lryvlFnkmnXGCvY1JBAQ9:By5JY4kabLZqFkmWCvKBAM","tlshash":"64e1af75df14718adbaf951d0e9e4440d2961a4a5cb2c30ef10c7de2eacf422531e836","first_seen":"2025-04-17T23:40:09.002327Z","last_seen":"2026-04-07T11:52:26.909048Z","times_seen":88,"resource_available":false,"data":null}},"time_used":226,"timings":{"blocked":68,"dns":0,"connect":0,"send":0,"wait":157,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ofgxtw.help/platform/twfxcc/config.js?1774032537888","fqdn":"ofgxtw.help","domain":"ofgxtw.help","tld":"help"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ofgxtw.help/","date":"2026-03-20T18:48:57.894Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ofgxtw.help","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Mar 2026 11:30:51 GMT","end":"Mon, 15 Jun 2026 11:30:50 GMT"},"fingerprint":{"sha1":"44:64:B8:D3:FC:DF:BD:23:CB:ED:B7:16:5D:CA:F8:37:C4:6D:B8:D1","sha256":"EC:B7:49:85:AC:72:E4:BD:0F:B9:82:DC:5D:1D:0C:E0:03:1E:66:EC:CC:0D:25:BD:69:C7:15:D6:A7:12:9A:E3"}}},"request":{"raw":"GET /platform/twfxcc/config.js?1774032537888 HTTP/1.1\r\nHost: ofgxtw.help\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: server_name_session=b3874cde180056c36016bf8f86315873\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 20 Mar 2026 18:48:58 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Sun, 01 Mar 2026 05:39:10 GMT\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Sat, 21 Mar 2026 06:48:58 GMT\r\ncache-control: max-age=43200\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KLdbzDBgXn1nZv892YwEv6nkML2IFvD5Kv6x1tmpeaPZxgO4e7K8k0OYP1uuvmIFnx8bZdNa%2Fif%2F3VhnhQ7O%2FwsD721d5h%2BUhcyO\"}]}\r\netag: W/\"69a3d0fe-db\"\r\ncontent-encoding: br\r\ncf-ray: 9df6e4e1e8cfde91-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":219,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text","md5":"bf4a50be346b56bbb39bbe0bc94cf4d3","sha1":"1da9457833f34ed3f043b0c77d7f8d35fcf555b5","sha256":"ea1cddbbe9b03685c2faaf79959af0139c3c5e3ae0f8eaf6409a4f026bb187d3","sha512":"6dd2d0596734826a559d310234c48c1a8f8c507afc2b656e64bd1d8b220c2f92d3b6911cf27912e9ef6f4940bf409cc42b9d761afcfb845f2c045cb195ded755","ssdeep":"","tlshash":"82d0c2f626b655853c44412f4ecc5931b1519237cc9e761d788d1c00af9f90c1a78432","first_seen":"2026-02-24T16:10:35.262693Z","last_seen":"2026-06-01T14:38:39.508156Z","times_seen":76,"resource_available":false,"data":null}},"time_used":412,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":412,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-20","alert":"Phishing Block","trigger":"ofgxtw.help","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-20","alert":"Sinkholed","trigger":"ofgxtw.help","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ofgxtw.help/resource/fonts/DINOT-Regular.ttf","fqdn":"ofgxtw.help","domain":"ofgxtw.help","tld":"help"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://ofgxtw.help/","date":"2026-03-20T18:48:59.805Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ofgxtw.help","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Mar 2026 11:30:51 GMT","end":"Mon, 15 Jun 2026 11:30:50 GMT"},"fingerprint":{"sha1":"44:64:B8:D3:FC:DF:BD:23:CB:ED:B7:16:5D:CA:F8:37:C4:6D:B8:D1","sha256":"EC:B7:49:85:AC:72:E4:BD:0F:B9:82:DC:5D:1D:0C:E0:03:1E:66:EC:CC:0D:25:BD:69:C7:15:D6:A7:12:9A:E3"}}},"request":{"raw":"GET /resource/fonts/DINOT-Regular.ttf HTTP/1.1\r\nHost: ofgxtw.help\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ofgxtw.help/assets/index-A8xeihCB.css\r\nCookie: server_name_session=b3874cde180056c36016bf8f86315873\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 20 Mar 2026 18:49:00 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 46828\r\nserver: cloudflare\r\nlast-modified: Sun, 01 Mar 2026 05:39:10 GMT\r\npriority: u=4,i=?0\r\netag: \"69a3d0fe-b6ec\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oHawbIXwU%2BWP3Jl1dcKS%2Fp%2BRfMTXJCIez%2Fvo17GbVZvLWrwUE4tViDVkyeoOvGG5zOjxOZK1qo5x7KH%2FS5d0TkKy6mVFq29pLmGI\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9df6e4edcc92de91-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":46828,"size_decoded":0,"mime_type":"application/octet-stream","magic":"TrueType Font data, 15 tables, 1st \"FFTM\", 32 names, Macintosh","md5":"3117fb8bc58475ec7dcf97fc721e5034","sha1":"db9717e9d42e4b84a2851447bfbae69d9e966455","sha256":"c87211b0403e88bfd50c1cd22fe930b294ecb35dca3c3e27bf62180244452d69","sha512":"38d3494e2a4178e9bf543a66d0b4caf5f975dbbf6719ca2b0854653299a80515d06a48a4c96ada4e5d89be0247723027347ba0e8a0a20362c545e1de3187b8bb","ssdeep":"768:SYCwdlARps23lxBus0JEg9vr5aZKSRSW9kzSJDr1LNu1E8c:y8mjxB90JEg9vr5eKEFLNEc","tlshash":"1b234a81b3154f8ec2a2ba3699171392e624be3977e647c7d8b981ff705c1c34d64a83","first_seen":"2023-08-16T00:37:20Z","last_seen":"2026-06-11T01:44:15.91201Z","times_seen":267,"resource_available":false,"data":null}},"time_used":837,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":430,"receive":407,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-20","alert":"Phishing Block","trigger":"ofgxtw.help","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-20","alert":"Sinkholed","trigger":"ofgxtw.help","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.ofgxtw.help/api/common/type/defi_activity_type","fqdn":"h5-api.ofgxtw.help","domain":"ofgxtw.help","tld":"help"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ofgxtw.help/","date":"2026-03-20T18:48:59.893Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ofgxtw.help","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Mar 2026 11:30:51 GMT","end":"Mon, 15 Jun 2026 11:30:50 GMT"},"fingerprint":{"sha1":"44:64:B8:D3:FC:DF:BD:23:CB:ED:B7:16:5D:CA:F8:37:C4:6D:B8:D1","sha256":"EC:B7:49:85:AC:72:E4:BD:0F:B9:82:DC:5D:1D:0C:E0:03:1E:66:EC:CC:0D:25:BD:69:C7:15:D6:A7:12:9A:E3"}}},"request":{"raw":"OPTIONS /api/common/type/defi_activity_type HTTP/1.1\r\nHost: h5-api.ofgxtw.help\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,lang,language\r\nOrigin: https://ofgxtw.help\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 20 Mar 2026 18:49:00 GMT\r\ncontent-length: 0\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://ofgxtw.help\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: content-type, lang, language\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nset-cookie: server_name_session=969f10ab0ecf1323be38f9cf51714704; Max-Age=86400; httponly; path=/\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4TaNS9%2Ft73mDvkA%2FLCDH%2Bw1svM2Os7wM%2Fps2uL9OyZFhxcho67OfRRaC82%2BM3ww1NrX%2FEkAUAk1XZ2k6Mywg%2B%2BHShruLaWq%2BtnTSoSM8doj7TQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9df6e4ee4d4ede91-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-13T17:33:37.826371Z","times_seen":16391923,"resource_available":true,"data":null}},"time_used":422,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":422,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-20","alert":"Phishing Block","trigger":"h5-api.ofgxtw.help","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-20","alert":"Sinkholed","trigger":"h5-api.ofgxtw.help","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"admin-api.twfxcc.vip/profile/upload/2025/09/24/LTC_20250924145733A033.png?2.2.1772339973820","fqdn":"admin-api.twfxcc.vip","domain":"twfxcc.vip","tld":"vip"},"ip":{"addr":"104.21.28.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ofgxtw.help/","date":"2026-03-20T18:48:59.588Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"twfxcc.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 20 Mar 2026 02:25:37 GMT","end":"Thu, 18 Jun 2026 03:24:23 GMT"},"fingerprint":{"sha1":"0E:30:73:B4:B4:1F:32:A0:62:A9:2E:5A:80:0F:65:89:CE:E0:F5:5E","sha256":"C4:FC:5B:2D:00:E0:8E:B8:F8:A0:1E:87:B0:21:7F:69:28:2B:AF:26:3E:BB:CD:E8:29:1D:62:A3:45:E7:38:1E"}}},"request":{"raw":"GET /profile/upload/2025/09/24/LTC_20250924145733A033.png?2.2.1772339973820 HTTP/1.1\r\nHost: admin-api.twfxcc.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 20 Mar 2026 18:49:00 GMT\r\ncontent-type: image/png\r\ncontent-length: 957\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Wed, 24 Sep 2025 06:57:33 GMT\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nset-cookie: server_name_session=228568081baa84a0bf6ee5f07bb603f7; Max-Age=86400; httponly; path=/\r\nx-cache: MISS\r\naccept-ranges: bytes\r\ncf-cache-status: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2F0DbKgCytNsdReZCkzF6YoxPkK5O0oa8gpXVzJBpW1lAue2%2BM0qa5Kbfu33gj4s%2BGwkk2kGTlmlI4la%2Bo3Kcb5ZAubWpbDyT8JAjrHN9b4YIkbmq\"}]}\r\ncf-ray: 9df6e4ecfc339e07-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":957,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 97 x 96, 8-bit colormap, non-interlaced","md5":"db1f13e46508474023e51dac9b924272","sha1":"976aea7b350c3d301a1bcc9350fa9b54bff9c8af","sha256":"50b7635088e72a9f004283284a8d63488fa127afa53e157393ca38bb55db1ff2","sha512":"08f80512e3edb58c31435f259a6d27f0ce55186594e94b3d5883245788edf4b503cae6f5361876896658070c159de7d4ea5457b0bdda11df6673f02e7c598181","ssdeep":"","tlshash":"c511b7abf5cceccad1b1414f118a4490e550cdb0147da74eea127e1bb839ab02d04f1a","first_seen":"2023-05-07T19:16:40Z","last_seen":"2026-06-12T10:35:22.487218Z","times_seen":514,"resource_available":false,"data":null}},"time_used":580,"timings":{"blocked":77,"dns":8,"connect":10,"send":0,"wait":432,"receive":0,"ssl":44},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.ofgxtw.help/kline","fqdn":"h5-api.ofgxtw.help","domain":"ofgxtw.help","tld":"help"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ofgxtw.help/","date":"2026-03-20T18:48:59.956Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ofgxtw.help","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Mar 2026 11:30:51 GMT","end":"Mon, 15 Jun 2026 11:30:50 GMT"},"fingerprint":{"sha1":"44:64:B8:D3:FC:DF:BD:23:CB:ED:B7:16:5D:CA:F8:37:C4:6D:B8:D1","sha256":"EC:B7:49:85:AC:72:E4:BD:0F:B9:82:DC:5D:1D:0C:E0:03:1E:66:EC:CC:0D:25:BD:69:C7:15:D6:A7:12:9A:E3"}}},"request":{"raw":"OPTIONS /kline HTTP/1.1\r\nHost: h5-api.ofgxtw.help\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,lang,language\r\nOrigin: https://ofgxtw.help\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 20 Mar 2026 18:49:00 GMT\r\ncontent-length: 0\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://ofgxtw.help\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: content-type, lang, language\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nset-cookie: server_name_session=969f10ab0ecf1323be38f9cf51714704; Max-Age=86400; httponly; path=/\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=p0cWMpWQdRRcSxfbuKh7fnxZRAzl7QjWS8GrMhmFEiaAszikbsQVmQQwTgpxZhvRSGKmOC3yUq7D%2BhcIY4zxO1thUckh2cTAjFara4M68Un%2Brw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9df6e4ee9ddede91-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-13T17:33:37.826371Z","times_seen":16391923,"resource_available":true,"data":null}},"time_used":424,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":424,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-20","alert":"Phishing Block","trigger":"h5-api.ofgxtw.help","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-20","alert":"Sinkholed","trigger":"h5-api.ofgxtw.help","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.ofgxtw.help/kline","fqdn":"h5-api.ofgxtw.help","domain":"ofgxtw.help","tld":"help"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ofgxtw.help/","date":"2026-03-20T18:48:59.972Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ofgxtw.help","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Mar 2026 11:30:51 GMT","end":"Mon, 15 Jun 2026 11:30:50 GMT"},"fingerprint":{"sha1":"44:64:B8:D3:FC:DF:BD:23:CB:ED:B7:16:5D:CA:F8:37:C4:6D:B8:D1","sha256":"EC:B7:49:85:AC:72:E4:BD:0F:B9:82:DC:5D:1D:0C:E0:03:1E:66:EC:CC:0D:25:BD:69:C7:15:D6:A7:12:9A:E3"}}},"request":{"raw":"OPTIONS /kline HTTP/1.1\r\nHost: h5-api.ofgxtw.help\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,lang,language\r\nOrigin: https://ofgxtw.help\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 20 Mar 2026 18:49:00 GMT\r\ncontent-length: 0\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://ofgxtw.help\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: content-type, lang, language\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nset-cookie: server_name_session=969f10ab0ecf1323be38f9cf51714704; Max-Age=86400; httponly; path=/\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1QCjJEa1a0XFybPC1IovXoZj%2FUOoAiUDLp2c0%2BVO7NnucH7F%2Fx%2FIFhRiO3QZX%2BteVoaRajrB6bPEQ1JWM0HBT8FDtlsNuVIa2AsE6NEd71Cx6g%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9df6e4eebe21de91-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-13T17:33:37.826371Z","times_seen":16391923,"resource_available":true,"data":null}},"time_used":423,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":423,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-20","alert":"Sinkholed","trigger":"h5-api.ofgxtw.help","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-20","alert":"Phishing Block","trigger":"h5-api.ofgxtw.help","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/font-awesome/6.5.1/css/all.min.css","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ofgxtw.help/","date":"2026-03-20T18:48:55.751Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 14 Mar 2026 00:38:49 GMT","end":"Fri, 12 Jun 2026 01:38:45 GMT"},"fingerprint":{"sha1":"7A:4A:F6:D6:63:62:70:CA:51:C5:5A:06:41:17:71:BF:9D:2C:C9:42","sha256":"7F:F5:F5:FE:73:1F:E7:AF:1A:82:5B:59:EE:E8:E9:65:D6:87:68:61:8C:11:1E:94:4A:9A:C4:14:BD:4B:04:BA"}}},"request":{"raw":"GET /ajax/libs/font-awesome/6.5.1/css/all.min.css HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 20 Mar 2026 18:48:55 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncontent-length: 18861\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"65692999-49ad\"\r\nlast-modified: Fri, 01 Dec 2023 00:32:25 GMT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/kv\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 47338\r\nexpires: Wed, 10 Mar 2027 18:48:55 GMT\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zERgd8a8v3eBQijfXVgjtmrISm6exyeMG6qlRgFHYbV7DkdSb8jydlSevQ4a1huLuy1dADwllcYtxiFusCA%2FqgxbXEZHYxD9fhjexDh4cLM6IHM%3D\"}]}\r\ncf-ray: 9df6e4d48cd44c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":102641,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (52276)","md5":"9402848c3d4bbc710c764326f8b887c9","sha1":"b6e555166eb1381392e00adcde9bf8863f16ff01","sha256":"c22cfb6520a7fdbb738632834019acf47c78b1279462c0eb4cb83bae83ecb5a7","sha512":"0d33903bd456087de9a46a9c59a100d41219382eb1c5a97012cc3d73641078021fb65f957a0a2f96779ed5cf505f84dcb6758c9f5dd36727be822326f1ed8bc0","ssdeep":"1536:iwMCMPMCMjMCM4MCMwMCM3sVMX709gbPMfjSFOTyPG9ZpgSLCJ:O709gMGFiyPG9ZiSLCJ","tlshash":"79a3a7f9e44c05d97732c44bab95b37c65b6f738d5810ca9f02f580c1ad26a822c6f7a","first_seen":"2023-12-02T04:06:15Z","last_seen":"2026-06-13T17:32:43.130723Z","times_seen":29727,"resource_available":false,"data":null}},"time_used":52,"timings":{"blocked":12,"dns":0,"connect":1,"send":0,"wait":11,"receive":2,"ssl":22},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ofgxtw.help/assets/index-DOvWnwTc.js","fqdn":"ofgxtw.help","domain":"ofgxtw.help","tld":"help"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ofgxtw.help/","date":"2026-03-20T18:48:55.753Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ofgxtw.help","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Mar 2026 11:30:51 GMT","end":"Mon, 15 Jun 2026 11:30:50 GMT"},"fingerprint":{"sha1":"44:64:B8:D3:FC:DF:BD:23:CB:ED:B7:16:5D:CA:F8:37:C4:6D:B8:D1","sha256":"EC:B7:49:85:AC:72:E4:BD:0F:B9:82:DC:5D:1D:0C:E0:03:1E:66:EC:CC:0D:25:BD:69:C7:15:D6:A7:12:9A:E3"}}},"request":{"raw":"GET /assets/index-DOvWnwTc.js HTTP/1.1\r\nHost: ofgxtw.help\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: server_name_session=b3874cde180056c36016bf8f86315873\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 20 Mar 2026 18:48:55 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Sun, 01 Mar 2026 05:39:32 GMT\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69a3d114-8c0f3\"\r\nexpires: Sat, 21 Mar 2026 03:57:21 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\nage: 10294\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MGBn%2BnBLQUMuC9DLKXA%2BgxWFB9eXsqDyPX%2FOmAiW4rrZoOET%2FKBeYj48CVOB7k4q2Z3ss92%2BrcPR2%2FgS1kM5EChOYUlP5gzSDqYS\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9df6e4d4792ade91-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":573683,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (64723)","md5":"4ddff6dbe6c91101caeaf87edebbbfee","sha1":"9251dfded69e2913b6f1a5b510c63fe3c721b33b","sha256":"5c7568fa3f12aab2fc03dcdd084a4a979ab7701ccb7f3ae5e6d1185520bb5e7a","sha512":"a804611277378c47ada35b03cc281248b42e4f9351982ac17364bf7409daf88d01c9d3586e6838e4ff528a5dae2807258dd0d26bce94372296034ad58d2c385c","ssdeep":"6144:vysJZejNx4F2f8GpkG22QqHrDqLYiB2sgVrL777Kyjp3KIn:qsJZejNesf8G3vQqHr9sQL7/KyhJ","tlshash":"d8c4f842f896d9bde7b7a495104e2410724c3fcad04848e6b5fe9e062b97db8371eb34","first_seen":"2026-03-02T14:13:32.426343Z","last_seen":"2026-03-20T19:46:41.78986Z","times_seen":4,"resource_available":true,"data":null}},"time_used":59,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":33,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-20","alert":"Sinkholed","trigger":"ofgxtw.help","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-20","alert":"Phishing Block","trigger":"ofgxtw.help","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.ofgxtw.help/api/common/getMt5Amount?coin=xag","fqdn":"h5-api.ofgxtw.help","domain":"ofgxtw.help","tld":"help"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ofgxtw.help/","date":"2026-03-20T18:48:58.849Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ofgxtw.help","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Mar 2026 11:30:51 GMT","end":"Mon, 15 Jun 2026 11:30:50 GMT"},"fingerprint":{"sha1":"44:64:B8:D3:FC:DF:BD:23:CB:ED:B7:16:5D:CA:F8:37:C4:6D:B8:D1","sha256":"EC:B7:49:85:AC:72:E4:BD:0F:B9:82:DC:5D:1D:0C:E0:03:1E:66:EC:CC:0D:25:BD:69:C7:15:D6:A7:12:9A:E3"}}},"request":{"raw":"OPTIONS /api/common/getMt5Amount?coin=xag HTTP/1.1\r\nHost: h5-api.ofgxtw.help\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,lang\r\nOrigin: https://ofgxtw.help\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 20 Mar 2026 18:48:59 GMT\r\ncontent-length: 0\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://ofgxtw.help\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: content-type, lang\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nset-cookie: server_name_session=8fac0f95e09a3645ff0cd72e07dfadaf; Max-Age=86400; httponly; path=/\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MFCnP8OX%2FPGKqpn7IPFGbrV22Eq0vO9KdGG2qWVpk0WCWsB9LYj3QsP7%2FeqWzmk8KiclVwotJMEfN1D39SchPxKQJOzeTdS7cIyZ0f4wEyKO7A%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9df6e4e7da9ade91-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-13T17:33:37.826371Z","times_seen":16391923,"resource_available":true,"data":null}},"time_used":219,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":219,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-20","alert":"Sinkholed","trigger":"h5-api.ofgxtw.help","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-20","alert":"Phishing Block","trigger":"h5-api.ofgxtw.help","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ofgxtw.help/assets/en-Dbrzt6Vj.js","fqdn":"ofgxtw.help","domain":"ofgxtw.help","tld":"help"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ofgxtw.help/","date":"2026-03-20T18:48:58.859Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ofgxtw.help","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Mar 2026 11:30:51 GMT","end":"Mon, 15 Jun 2026 11:30:50 GMT"},"fingerprint":{"sha1":"44:64:B8:D3:FC:DF:BD:23:CB:ED:B7:16:5D:CA:F8:37:C4:6D:B8:D1","sha256":"EC:B7:49:85:AC:72:E4:BD:0F:B9:82:DC:5D:1D:0C:E0:03:1E:66:EC:CC:0D:25:BD:69:C7:15:D6:A7:12:9A:E3"}}},"request":{"raw":"GET /assets/en-Dbrzt6Vj.js HTTP/1.1\r\nHost: ofgxtw.help\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: server_name_session=b3874cde180056c36016bf8f86315873\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 20 Mar 2026 18:48:59 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Sun, 01 Mar 2026 05:39:32 GMT\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69a3d114-d7e7\"\r\nexpires: Sat, 21 Mar 2026 06:48:59 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RfP5R%2BiHTh7lx09i6IOKjOXD8k9i%2BdN6V2gK9R2b3zAD7XUQl6oWJblrG4vUbc47DHMYJQi8wG4h874%2BsoBeHoL6TJ8ySW9F6bta\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9df6e4e7eab0de91-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":55271,"size_decoded":0,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text, with very long lines (54826)","md5":"fe50af114fc5e587f6c79c2be1e6273f","sha1":"9d02e02462df7ebc01a07cfc310a688e3c5ed53a","sha256":"5c2b59f8a163fabe36341e65215793395c096e4fe4dc18b4591707bb319d7659","sha512":"da633e18c213c8ac5ca71a40ad8948ad74b4fbc35e13a0f4465ba599c527669154ee5a7c6dbbe643c44a188e8e8ac6afe6ed8afd6448c1643ca118059dd6073c","ssdeep":"768:uVtZcEw/oPrZOuiUAtgzUgJ+PmvsYJ8HnxJou4/HiA9JYOuy:5poTZOozUgJzsYOHnxahJ3uy","tlshash":"7f43f88dbe165c9a04e3237a78ce6a6120f505c1c358881f5fec85fc83e1b6767a7629","first_seen":"2026-02-24T16:10:35.270307Z","last_seen":"2026-03-20T19:46:41.750165Z","times_seen":40,"resource_available":true,"data":null}},"time_used":612,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":416,"receive":196,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-20","alert":"Sinkholed","trigger":"ofgxtw.help","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-20","alert":"Phishing Block","trigger":"ofgxtw.help","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ofgxtw.help/resource/images/banner/1.jpg","fqdn":"ofgxtw.help","domain":"ofgxtw.help","tld":"help"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ofgxtw.help/","date":"2026-03-20T18:48:59.518Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ofgxtw.help","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Mar 2026 11:30:51 GMT","end":"Mon, 15 Jun 2026 11:30:50 GMT"},"fingerprint":{"sha1":"44:64:B8:D3:FC:DF:BD:23:CB:ED:B7:16:5D:CA:F8:37:C4:6D:B8:D1","sha256":"EC:B7:49:85:AC:72:E4:BD:0F:B9:82:DC:5D:1D:0C:E0:03:1E:66:EC:CC:0D:25:BD:69:C7:15:D6:A7:12:9A:E3"}}},"request":{"raw":"GET /resource/images/banner/1.jpg HTTP/1.1\r\nHost: ofgxtw.help\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: server_name_session=b3874cde180056c36016bf8f86315873\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 20 Mar 2026 18:48:59 GMT\r\ncontent-type: image/jpeg\r\nserver: cloudflare\r\nlast-modified: Sun, 01 Mar 2026 05:39:10 GMT\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69a3d0fe-8d53\"\r\nexpires: Sun, 19 Apr 2026 18:48:59 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eqiUTdCJ4UG2HVgy%2FGt5iVqFelHbwjRICryvKJAncCbt2RMFTwjWEScPylVx%2FPa0cbIbA5m761%2FV15UNZ9GCi1A3ldQG6h16uRXt\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9df6e4ec0963de91-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":36179,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 714x400, components 3","md5":"e58429ca30e42c6a30fc2a6952b6627e","sha1":"a9012798d41ee89a4b10fb8b6679a3d4aa36b12b","sha256":"0cd45dd6b5188cf087d1908eda005d6b6face1a3eb9b3c4f2213166a84b87124","sha512":"65de29c1b05a8882ff303a3191f9d6faef6428cd7cf9afbe3048a460971d1476f88a65ac4333c52d12f7543cf35f3fd81385e6b9aeb5f255106dbd13336d2911","ssdeep":"768:16ikoFtGa5F+mlsHe2PTphfS83Cr2yfiAS+dL1Mn2CDbIQY6lskUXZkmV6WAtzH:DLthrp8e2V88K2kxdU2wIQ09X7tA1","tlshash":"ebf2021ba8e0b1d3c65f82787617349f4d07e7057802ad4b37843ba6ba0d771b46e6d1","first_seen":"2025-10-12T16:34:39.842006Z","last_seen":"2026-06-01T14:38:39.448727Z","times_seen":78,"resource_available":false,"data":null}},"time_used":653,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":442,"receive":211,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-20","alert":"Phishing Block","trigger":"ofgxtw.help","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-20","alert":"Sinkholed","trigger":"ofgxtw.help","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ofgxtw.help/resource/images/light/ai2.svg","fqdn":"ofgxtw.help","domain":"ofgxtw.help","tld":"help"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ofgxtw.help/","date":"2026-03-20T18:48:59.683Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ofgxtw.help","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Mar 2026 11:30:51 GMT","end":"Mon, 15 Jun 2026 11:30:50 GMT"},"fingerprint":{"sha1":"44:64:B8:D3:FC:DF:BD:23:CB:ED:B7:16:5D:CA:F8:37:C4:6D:B8:D1","sha256":"EC:B7:49:85:AC:72:E4:BD:0F:B9:82:DC:5D:1D:0C:E0:03:1E:66:EC:CC:0D:25:BD:69:C7:15:D6:A7:12:9A:E3"}}},"request":{"raw":"GET /resource/images/light/ai2.svg HTTP/1.1\r\nHost: ofgxtw.help\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: server_name_session=b3874cde180056c36016bf8f86315873\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 20 Mar 2026 18:49:00 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Sun, 01 Mar 2026 05:39:10 GMT\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69a3d0fe-8462\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EmRmBt%2B4d8ZQflQs3%2Fp1H%2BGtDrXPQ3gpnj9yTLXYM%2BGdpftzTCKyb5lyXoEEPoxF8C62deS5yx%2BcHpLsneRcwyt8onnClKkQsFUY\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9df6e4ed0b15de91-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":33890,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"c47b527cb50c44f791e4c1bdb582c296","sha1":"b9d5e0c2a1aad9aa06872c84bd6c1ed50328bca1","sha256":"be31898c9ef6b0f26bbd66f381e89c250d44dcd5e7fe879ac913c3cbd9fe5bd4","sha512":"3c9087d90c856f7440339fa714c342e2583abe629991c6da2e1a8722b8ebb81e41f1fab72f693c069f7eed9566efb88061b35ae3da59b0d44bf5389471f46a6f","ssdeep":"768:b+F76xoi6BmlUAOAzlshwrePeuvj3ubsaKkmZD:b8PRAzlshwqP/3ubsa3kD","tlshash":"95e2f1aeef52980be9560ff9823761f113fb0bb604970c26967067c394d83b8355b49d","first_seen":"2024-10-31T21:21:10.414612Z","last_seen":"2026-06-01T14:38:39.426174Z","times_seen":167,"resource_available":false,"data":null}},"time_used":654,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":444,"receive":210,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-20","alert":"Sinkholed","trigger":"ofgxtw.help","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-20","alert":"Phishing Block","trigger":"ofgxtw.help","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.ofgxtw.help/api/notice/getAllNoticeList","fqdn":"h5-api.ofgxtw.help","domain":"ofgxtw.help","tld":"help"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ofgxtw.help/","date":"2026-03-20T18:48:59.891Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ofgxtw.help","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Mar 2026 11:30:51 GMT","end":"Mon, 15 Jun 2026 11:30:50 GMT"},"fingerprint":{"sha1":"44:64:B8:D3:FC:DF:BD:23:CB:ED:B7:16:5D:CA:F8:37:C4:6D:B8:D1","sha256":"EC:B7:49:85:AC:72:E4:BD:0F:B9:82:DC:5D:1D:0C:E0:03:1E:66:EC:CC:0D:25:BD:69:C7:15:D6:A7:12:9A:E3"}}},"request":{"raw":"OPTIONS /api/notice/getAllNoticeList HTTP/1.1\r\nHost: h5-api.ofgxtw.help\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,lang,language\r\nOrigin: https://ofgxtw.help\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 20 Mar 2026 18:49:00 GMT\r\ncontent-length: 0\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://ofgxtw.help\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: content-type, lang, language\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nset-cookie: server_name_session=969f10ab0ecf1323be38f9cf51714704; Max-Age=86400; httponly; path=/\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Vqu8W6yN3mE%2FUVBdA4FLmX%2Fvp%2F%2FVr%2BQem5UEFEKADrnqTWwomKjOVw4UdKvKFdBFH3okboqvdq%2BNVLtBVgfu5iXkBFJJYn2iEydHFNvaxRD82Q%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9df6e4ee4d4cde91-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-13T17:33:37.826371Z","times_seen":16391923,"resource_available":true,"data":null}},"time_used":218,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":218,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-20","alert":"Phishing Block","trigger":"h5-api.ofgxtw.help","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-20","alert":"Sinkholed","trigger":"h5-api.ofgxtw.help","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.ofgxtw.help/kline","fqdn":"h5-api.ofgxtw.help","domain":"ofgxtw.help","tld":"help"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ofgxtw.help/","date":"2026-03-20T18:48:59.954Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ofgxtw.help","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Mar 2026 11:30:51 GMT","end":"Mon, 15 Jun 2026 11:30:50 GMT"},"fingerprint":{"sha1":"44:64:B8:D3:FC:DF:BD:23:CB:ED:B7:16:5D:CA:F8:37:C4:6D:B8:D1","sha256":"EC:B7:49:85:AC:72:E4:BD:0F:B9:82:DC:5D:1D:0C:E0:03:1E:66:EC:CC:0D:25:BD:69:C7:15:D6:A7:12:9A:E3"}}},"request":{"raw":"OPTIONS /kline HTTP/1.1\r\nHost: h5-api.ofgxtw.help\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,lang,language\r\nOrigin: https://ofgxtw.help\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 20 Mar 2026 18:49:00 GMT\r\ncontent-length: 0\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://ofgxtw.help\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: content-type, lang, language\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nset-cookie: server_name_session=969f10ab0ecf1323be38f9cf51714704; Max-Age=86400; httponly; path=/\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DbUooUVgHrP7wyMPJudskUhyJHOTqpUa%2FiCBe6aR42ITT8j73XVwnI28CnQX77LwGSf5PDeI1FywzXY6e3QBnb68fLZpydNT6o%2F%2BmUqELhvERQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9df6e4ee8dcfde91-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-13T17:33:37.826371Z","times_seen":16391923,"resource_available":true,"data":null}},"time_used":424,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":424,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-20","alert":"Phishing Block","trigger":"h5-api.ofgxtw.help","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-20","alert":"Sinkholed","trigger":"h5-api.ofgxtw.help","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.ofgxtw.help/kline","fqdn":"h5-api.ofgxtw.help","domain":"ofgxtw.help","tld":"help"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ofgxtw.help/","date":"2026-03-20T18:48:59.969Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ofgxtw.help","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Mar 2026 11:30:51 GMT","end":"Mon, 15 Jun 2026 11:30:50 GMT"},"fingerprint":{"sha1":"44:64:B8:D3:FC:DF:BD:23:CB:ED:B7:16:5D:CA:F8:37:C4:6D:B8:D1","sha256":"EC:B7:49:85:AC:72:E4:BD:0F:B9:82:DC:5D:1D:0C:E0:03:1E:66:EC:CC:0D:25:BD:69:C7:15:D6:A7:12:9A:E3"}}},"request":{"raw":"OPTIONS /kline HTTP/1.1\r\nHost: h5-api.ofgxtw.help\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,lang,language\r\nOrigin: https://ofgxtw.help\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 20 Mar 2026 18:49:00 GMT\r\ncontent-length: 0\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://ofgxtw.help\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: content-type, lang, language\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nset-cookie: server_name_session=969f10ab0ecf1323be38f9cf51714704; Max-Age=86400; httponly; path=/\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OXLsLkN6AvOpO6QnP%2BR9NLdWTIJuG%2B2xvZQdmqFSHCtxO9GLjZLdY2L%2ByFCenxQHhWu9tGFbfqqSI7VkRTLS%2B6Am47Wj7RPfeMsEwObKCtI8%2Fw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9df6e4eeae17de91-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-13T17:33:37.826371Z","times_seen":16391923,"resource_available":true,"data":null}},"time_used":438,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":438,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-20","alert":"Phishing Block","trigger":"h5-api.ofgxtw.help","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-20","alert":"Sinkholed","trigger":"h5-api.ofgxtw.help","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.ofgxtw.help/kline","fqdn":"h5-api.ofgxtw.help","domain":"ofgxtw.help","tld":"help"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ofgxtw.help/","date":"2026-03-20T18:49:00.535Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ofgxtw.help","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Mar 2026 11:30:51 GMT","end":"Mon, 15 Jun 2026 11:30:50 GMT"},"fingerprint":{"sha1":"44:64:B8:D3:FC:DF:BD:23:CB:ED:B7:16:5D:CA:F8:37:C4:6D:B8:D1","sha256":"EC:B7:49:85:AC:72:E4:BD:0F:B9:82:DC:5D:1D:0C:E0:03:1E:66:EC:CC:0D:25:BD:69:C7:15:D6:A7:12:9A:E3"}}},"request":{"raw":"POST /kline HTTP/1.1\r\nHost: h5-api.ofgxtw.help\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nlanguage: en\r\nlang: en\r\nContent-Length: 70\r\nOrigin: https://ofgxtw.help\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":70,"data":"{\"interval\":\"FIVE_MIN\",\"limit\":1000,\"market\":\"binance\",\"symbol\":\"ltc\"}"}},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 20 Mar 2026 18:49:00 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://ofgxtw.help\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nset-cookie: server_name_session=ad58d77a8fd661df53586700f977ede4; Max-Age=86400; httponly; path=/\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mm%2BmUbNwqnrklTdXYOwZfbz9aY2SE1%2BjEEYoxFqe%2FbNCd%2F9a%2BW6%2F5SqZIWu%2BWTPZfPyRBEvVOCK9w89lvRJuNRK69nWPiKt4uMKMZwiolnw4YQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9df6e4f20bc8de91-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":36028,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"83d4c876ac06120dc85cd33dde192862","sha1":"77a2adb6c3f84c99c0924cc0c408e21a2858eb4c","sha256":"17676f7d9d8dff9e829155dd15116fc4d38b8a18174aaea5d0b0c92f6ba9416f","sha512":"b9cad8ef8b75288b831817db08169330bf358e9c4e5f85e855c5de3d9fb4e34deac517143efe194bbdb2bda7ed23b4bb2fb27ab081572e139c1f6c45d407ddfe","ssdeep":"384:09fZCWfrwvqKio3e94c4bkF6lNHocDXuDgHDNG0z8gOL:0ZZhrwSHo3nc4b1lNHrXuDCIgOL","tlshash":"58f24d304f88c0eae9749cc60bd3bce4b91333d74bde68d501aba6115d953b7a604f9a","first_seen":"2026-03-20T18:49:29.003135Z","last_seen":"2026-03-20T18:49:29.003135Z","times_seen":1,"resource_available":false,"data":null}},"time_used":291,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":291,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-20","alert":"Sinkholed","trigger":"h5-api.ofgxtw.help","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-20","alert":"Phishing Block","trigger":"h5-api.ofgxtw.help","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"storage.googleapis.com/order-ress/order/dotdigital/47b23749312240eda5e699d778e2c0ba.png?2.2.1772339973820","fqdn":"storage.googleapis.com","domain":"storage.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.251.143.155","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ofgxtw.help/","date":"2026-03-20T18:49:01.098Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"storage.googleapis.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Feb 2026 18:24:04 GMT","end":"Mon, 18 May 2026 18:24:03 GMT"},"fingerprint":{"sha1":"3C:31:BD:D2:EA:D9:B8:8E:67:17:8D:EB:DF:1B:C1:8E:89:2B:5D:7C","sha256":"C6:AF:0F:22:89:A9:F8:1D:21:85:65:8C:F4:6F:61:1C:6B:D2:10:68:AE:65:22:E2:69:75:62:C6:D8:2C:2A:08"}}},"request":{"raw":"GET /order-ress/order/dotdigital/47b23749312240eda5e699d778e2c0ba.png?2.2.1772339973820 HTTP/1.1\r\nHost: storage.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\nx-guploader-uploadid: AGQBYWyGhTe1MUOvq91puM9VeiwE1m4FxbNwEaEXDTyNy4wZ8jZCD5kRGbwCcRpVGlIQBTwK\r\nexpires: Fri, 20 Mar 2026 19:49:01 GMT\r\ndate: Fri, 20 Mar 2026 18:49:01 GMT\r\ncache-control: public, max-age=3600\r\nlast-modified: Fri, 18 Apr 2025 23:51:37 GMT\r\netag: \"966aaf41f4db84f6f0313f764e595f87\"\r\nx-goog-generation: 1745020297149372\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 1188\r\nx-goog-hash: crc32c=CwkW/Q==, md5=lmqvQfTbhPbwMT92Tllfhw==\r\nx-goog-storage-class: STANDARD\r\naccept-ranges: bytes\r\ncontent-length: 1188\r\nserver: UploadServer\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":1188,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 44 x 44, 8-bit/color RGBA, non-interlaced","md5":"966aaf41f4db84f6f0313f764e595f87","sha1":"ec31ebd55b615166aec1e4bff4a95366252f957d","sha256":"dbc3430ec06cacc10616c517f710085fd959912984173da9798bd95223efe816","sha512":"3bfbad89056f33eac8910a9d416780d6818aece383fce4b23f2a658b657a42e57a991a92c7ab958da140e3b293ff62b25771ccc0ce092c9d458d23e0ad646d9b","ssdeep":"","tlshash":"0921da29d5ed9095521586cecf0d4354d012ca70e4c42437bdd3b3f27651aa2405ad81","first_seen":"2024-12-03T23:58:43.681666Z","last_seen":"2026-06-04T15:28:13.451487Z","times_seen":104,"resource_available":false,"data":null}},"time_used":226,"timings":{"blocked":68,"dns":0,"connect":0,"send":0,"wait":158,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ofgxtw.help/resource/svg/dark/huazhuan.svg?2.2.1772339973820","fqdn":"ofgxtw.help","domain":"ofgxtw.help","tld":"help"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ofgxtw.help/","date":"2026-03-20T18:48:59.563Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ofgxtw.help","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Mar 2026 11:30:51 GMT","end":"Mon, 15 Jun 2026 11:30:50 GMT"},"fingerprint":{"sha1":"44:64:B8:D3:FC:DF:BD:23:CB:ED:B7:16:5D:CA:F8:37:C4:6D:B8:D1","sha256":"EC:B7:49:85:AC:72:E4:BD:0F:B9:82:DC:5D:1D:0C:E0:03:1E:66:EC:CC:0D:25:BD:69:C7:15:D6:A7:12:9A:E3"}}},"request":{"raw":"GET /resource/svg/dark/huazhuan.svg?2.2.1772339973820 HTTP/1.1\r\nHost: ofgxtw.help\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: server_name_session=b3874cde180056c36016bf8f86315873\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 20 Mar 2026 18:48:59 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Sun, 01 Mar 2026 05:39:10 GMT\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69a3d0fe-b39\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=snaEjVONhzq8qCdoor3NGW4UdvZ%2BgCvoYKJm5uzSozWF928Z4EVQrXwu5nXR6PytFzCw0BDdWR2YSc9YWL%2BfmbzUIrrvoxdjVdyi\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9df6e4ec49ecde91-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2873,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"39d82425ac5150ed01e5b427e55abc3f","sha1":"7627b7ff42018aad3ebdf473e73e1d93a5957558","sha256":"c8e61f65b639b0f4753bfacd166fb29a2191a9554e53c49fa02479af78bc36a1","sha512":"3ad79359f100f517e60bf898fbeec11276e119c4b3668e59a8b883c66a9d3686777f6674e45de7b5cb5dd32a598bdaa5fea5a70c83f158df67cb17e545982346","ssdeep":"","tlshash":"dc5186d4523d939de0089fa4e7b631c6353a30e737d01690f2cf12576b260ce458d9ab","first_seen":"2026-02-24T16:10:35.251591Z","last_seen":"2026-06-01T14:38:39.509521Z","times_seen":62,"resource_available":false,"data":null}},"time_used":426,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":426,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-20","alert":"Sinkholed","trigger":"ofgxtw.help","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-20","alert":"Phishing Block","trigger":"ofgxtw.help","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.ofgxtw.help/kline","fqdn":"h5-api.ofgxtw.help","domain":"ofgxtw.help","tld":"help"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ofgxtw.help/","date":"2026-03-20T18:48:59.949Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ofgxtw.help","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Mar 2026 11:30:51 GMT","end":"Mon, 15 Jun 2026 11:30:50 GMT"},"fingerprint":{"sha1":"44:64:B8:D3:FC:DF:BD:23:CB:ED:B7:16:5D:CA:F8:37:C4:6D:B8:D1","sha256":"EC:B7:49:85:AC:72:E4:BD:0F:B9:82:DC:5D:1D:0C:E0:03:1E:66:EC:CC:0D:25:BD:69:C7:15:D6:A7:12:9A:E3"}}},"request":{"raw":"OPTIONS /kline HTTP/1.1\r\nHost: h5-api.ofgxtw.help\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,lang,language\r\nOrigin: https://ofgxtw.help\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 20 Mar 2026 18:49:00 GMT\r\ncontent-length: 0\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://ofgxtw.help\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: content-type, lang, language\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nset-cookie: server_name_session=969f10ab0ecf1323be38f9cf51714704; Max-Age=86400; httponly; path=/\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sc5r4fWoYE8g7IBsAqk9yHTLQAhqkIThOtciHovUNwb39ygPmFNxfB8Ci%2BiK5QQzbTEMXLgQi12ESz45x7ylsnbs4Wun43W1XhWyNTd%2FHnF67Q%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9df6e4ee8dc4de91-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-13T17:33:37.826371Z","times_seen":16391923,"resource_available":true,"data":null}},"time_used":437,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":437,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-20","alert":"Sinkholed","trigger":"h5-api.ofgxtw.help","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-20","alert":"Phishing Block","trigger":"h5-api.ofgxtw.help","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.ofgxtw.help/kline","fqdn":"h5-api.ofgxtw.help","domain":"ofgxtw.help","tld":"help"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ofgxtw.help/","date":"2026-03-20T18:49:00.545Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ofgxtw.help","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Mar 2026 11:30:51 GMT","end":"Mon, 15 Jun 2026 11:30:50 GMT"},"fingerprint":{"sha1":"44:64:B8:D3:FC:DF:BD:23:CB:ED:B7:16:5D:CA:F8:37:C4:6D:B8:D1","sha256":"EC:B7:49:85:AC:72:E4:BD:0F:B9:82:DC:5D:1D:0C:E0:03:1E:66:EC:CC:0D:25:BD:69:C7:15:D6:A7:12:9A:E3"}}},"request":{"raw":"POST /kline HTTP/1.1\r\nHost: h5-api.ofgxtw.help\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nlanguage: en\r\nlang: en\r\nContent-Length: 70\r\nOrigin: https://ofgxtw.help\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":70,"data":"{\"interval\":\"FIVE_MIN\",\"limit\":1000,\"market\":\"binance\",\"symbol\":\"sol\"}"}},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 20 Mar 2026 18:49:00 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://ofgxtw.help\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nset-cookie: server_name_session=969f10ab0ecf1323be38f9cf51714704; Max-Age=86400; httponly; path=/\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UhuBvY46iIgvR1UjKntLsFUnx32qPr2h6Jw%2FSZDO7iMPhPd2uQWAsYkgh8vP2rvvG9Gbw1x2053FnBto1WouRTG2R4n1I2ccEGSTGbCTFzNu0Q%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9df6e4f21beade91-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":36524,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"07d5ae38199006e9db480dc88dc7985e","sha1":"6d26444f5a1fcb60c03bd93ff10d8902744db10a","sha256":"0ffc0feb88226bebc888761fcc1014a10fe5ff16b923a0ece99d82cba7dd159c","sha512":"a9021d6c30e4d02d30270659ee2299f245379fe9ba3e2210b01b76b5398157b42b88dceeb9225763c056f68887cef3660afa27ec87e4858691fb7f8bacf56778","ssdeep":"768:a6Xs2lOkd2bTm4MHEFOx6ZHGuINXCCmZlxdY2K/BGjr3Lx4D08s9U5MSfgnUqDvc:aN+XOp3LyB4jx8bj","tlshash":"13f28e308fa88359d435adea0ba7bce00d073bc34acc4d6542ed5a4129d6f7f9d16b86","first_seen":"2026-03-20T18:49:29.006783Z","last_seen":"2026-03-20T18:49:29.006783Z","times_seen":1,"resource_available":false,"data":null}},"time_used":361,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":361,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-20","alert":"Sinkholed","trigger":"h5-api.ofgxtw.help","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-20","alert":"Phishing Block","trigger":"h5-api.ofgxtw.help","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"storage.googleapis.com/order-ress/order/dotdigital/87261c686fde4971976ddc5b88358cbe.jpeg?2.2.1772339973820","fqdn":"storage.googleapis.com","domain":"storage.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.251.143.155","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ofgxtw.help/","date":"2026-03-20T18:49:01.094Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"storage.googleapis.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Feb 2026 18:24:04 GMT","end":"Mon, 18 May 2026 18:24:03 GMT"},"fingerprint":{"sha1":"3C:31:BD:D2:EA:D9:B8:8E:67:17:8D:EB:DF:1B:C1:8E:89:2B:5D:7C","sha256":"C6:AF:0F:22:89:A9:F8:1D:21:85:65:8C:F4:6F:61:1C:6B:D2:10:68:AE:65:22:E2:69:75:62:C6:D8:2C:2A:08"}}},"request":{"raw":"GET /order-ress/order/dotdigital/87261c686fde4971976ddc5b88358cbe.jpeg?2.2.1772339973820 HTTP/1.1\r\nHost: storage.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/jpeg\r\nx-guploader-uploadid: AGQBYWzAfb2-gmpAkzmjE-cGRf7SfiDybSUopHM0KqT0EqE5J1tL8rmcC1lOhwNjsQSOi6Eh\r\nexpires: Fri, 20 Mar 2026 19:49:01 GMT\r\ndate: Fri, 20 Mar 2026 18:49:01 GMT\r\ncache-control: public, max-age=3600\r\nlast-modified: Fri, 18 Apr 2025 23:29:24 GMT\r\netag: \"dd7d918fdc8691629436640c23093512\"\r\nx-goog-generation: 1745018964344619\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 3261\r\nx-goog-hash: crc32c=YMCRAw==, md5=3X2Rj9yGkWKUNmQMIwk1Eg==\r\nx-goog-storage-class: STANDARD\r\naccept-ranges: bytes\r\ncontent-length: 3261\r\nserver: UploadServer\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]}],"data":{"size":3261,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 225 x 225, 8-bit colormap, non-interlaced","md5":"dd7d918fdc8691629436640c23093512","sha1":"cdee6f46b4d5c790f3aa2c982541c7a85cc053ed","sha256":"9b62ba1641b776cc54c19c6cbdd6ba513943e00f5ab98570bcc5c3b643920228","sha512":"c793a7cf86cce56cccab025a402050ccbd7c0f2422d539858c329bb3b331a2b579d76db03e6f7ebd78a4cbfa90a2c873978238507dee8c6e7baf7a0109212fba","ssdeep":"","tlshash":"48616cd6795349161ce77d24833f066c8ac50e1f215e50956087a6ba39df6a0e0838f3","first_seen":"2025-02-06T02:55:20.496923Z","last_seen":"2026-03-20T19:46:41.804599Z","times_seen":44,"resource_available":false,"data":null}},"time_used":224,"timings":{"blocked":71,"dns":0,"connect":0,"send":0,"wait":152,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.ofgxtw.help/api/common/getAllSetting","fqdn":"h5-api.ofgxtw.help","domain":"ofgxtw.help","tld":"help"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ofgxtw.help/","date":"2026-03-20T18:48:58.387Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ofgxtw.help","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Mar 2026 11:30:51 GMT","end":"Mon, 15 Jun 2026 11:30:50 GMT"},"fingerprint":{"sha1":"44:64:B8:D3:FC:DF:BD:23:CB:ED:B7:16:5D:CA:F8:37:C4:6D:B8:D1","sha256":"EC:B7:49:85:AC:72:E4:BD:0F:B9:82:DC:5D:1D:0C:E0:03:1E:66:EC:CC:0D:25:BD:69:C7:15:D6:A7:12:9A:E3"}}},"request":{"raw":"POST /api/common/getAllSetting HTTP/1.1\r\nHost: h5-api.ofgxtw.help\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nlang: en-US\r\nContent-Length: 2\r\nOrigin: https://ofgxtw.help\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":2,"data":"{}"}},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 20 Mar 2026 18:48:58 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://ofgxtw.help\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nset-cookie: server_name_session=969f10ab0ecf1323be38f9cf51714704; Max-Age=86400; httponly; path=/\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NncfBbXHcsTEmZvClcqwj92%2Fn5%2BcHludOsi6OZBh94PHN88D7TnFvJ7k6wrRdFOojJag6cBvTTynqK6rjnexUz7aUSYwPXl9MZQUk7AumXwW1Q%3D%3D\"}]}\r\ncf-ray: 9df6e4e4ef431806-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15524,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"Unicode text, UTF-8 text, with very long lines (15050), with no line terminators","md5":"5b50271d963e0e8085d65b8008692d2e","sha1":"5bb54551cddf61b22b546e9e28b9b71a6b529558","sha256":"3160bdc9e19f356b683532c768e3cb231ddeea02d5568048bf6de68d0be91093","sha512":"c2f669e386e7298e6c41865194f166dd07fd8dfcd7d616ca3284b56a1dc71b2552f9447e59219a727b49d4104b4de05ddb2c99a367812a6e575f8241065be9a1","ssdeep":"384:hgXuGRlR8F0wHZ1wkoPQVR2eJPMJM+WwTSCS+O69deBhgc9yT/4GxZK+8dKK3Gm5:hgXxRlR8F0wHZ1wdPQVR7JK7W6SCS+OT","tlshash":"fc62338931ccc87dca5adaf650f73ea52a3c1456d84eac51c5fabf6cc9a86305c5320b","first_seen":"2026-03-20T18:49:29.010922Z","last_seen":"2026-03-20T19:46:41.762972Z","times_seen":2,"resource_available":false,"data":null}},"time_used":445,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":445,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-20","alert":"Phishing Block","trigger":"h5-api.ofgxtw.help","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-20","alert":"Sinkholed","trigger":"h5-api.ofgxtw.help","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ofgxtw.help/platform/twfxcc/favicon.ico?2.2.1772339973820","fqdn":"ofgxtw.help","domain":"ofgxtw.help","tld":"help"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ofgxtw.help/","date":"2026-03-20T18:48:58.234Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ofgxtw.help","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Mar 2026 11:30:51 GMT","end":"Mon, 15 Jun 2026 11:30:50 GMT"},"fingerprint":{"sha1":"44:64:B8:D3:FC:DF:BD:23:CB:ED:B7:16:5D:CA:F8:37:C4:6D:B8:D1","sha256":"EC:B7:49:85:AC:72:E4:BD:0F:B9:82:DC:5D:1D:0C:E0:03:1E:66:EC:CC:0D:25:BD:69:C7:15:D6:A7:12:9A:E3"}}},"request":{"raw":"GET /platform/twfxcc/favicon.ico?2.2.1772339973820 HTTP/1.1\r\nHost: ofgxtw.help\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: server_name_session=b3874cde180056c36016bf8f86315873\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 20 Mar 2026 18:48:58 GMT\r\ncontent-type: image/x-icon\r\nserver: cloudflare\r\nlast-modified: Sun, 01 Mar 2026 05:39:10 GMT\r\npriority: u=6,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rhIDWoObs%2BS9eMn4J7IqdnJqQ7ZaCDWSniZCXMDU0vA7Zj%2FFbNipHGi%2F%2BTt%2FHMlvYZFhicEpUO4Qu1sOqBlT6aJopBfjBqTyUk8w\"}]}\r\netag: W/\"69a3d0fe-b52c\"\r\ncontent-encoding: br\r\ncf-ray: 9df6e4e3fc78de91-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":46380,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 256x256 with PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced, 32 bits/pixel","md5":"1f43806265f1c1ac43ba7145fa576588","sha1":"d7ed2de2d608a9ee8250652dd474eb2bebeb17de","sha256":"4ea48de7a0fe431f9da475fee1e2a3920cd8e3faf75ba62b8f020adae6805cff","sha512":"4400966ad73e5f4a9e03477e5327c8693bef2a8bb28c028cf97847efbfc4af97b20ecbe316ed5b11c30fad60095920039fadb2bc8b98ad8f62047d671c7107c2","ssdeep":"768:xR86sUJ8MQclh5a1Ejvnl+5wXXcshAVgbehoLYkKa10zue3JHuVvFaQgGB5N9x+y:cq5lhgejv8wXMsWVueSEg1cue3Bu5LNB","tlshash":"36230223f1af0ac4eb4635b449123f12b55c9fe344468db287e54651dd29ec32cc9dad","first_seen":"2025-11-01T17:44:45.84035Z","last_seen":"2026-03-20T19:46:41.743381Z","times_seen":28,"resource_available":false,"data":null}},"time_used":836,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":429,"receive":407,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-20","alert":"Sinkholed","trigger":"ofgxtw.help","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-20","alert":"Phishing Block","trigger":"ofgxtw.help","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ofgxtw.help/resource/images/light/finance2.svg","fqdn":"ofgxtw.help","domain":"ofgxtw.help","tld":"help"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ofgxtw.help/","date":"2026-03-20T18:48:59.552Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ofgxtw.help","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Mar 2026 11:30:51 GMT","end":"Mon, 15 Jun 2026 11:30:50 GMT"},"fingerprint":{"sha1":"44:64:B8:D3:FC:DF:BD:23:CB:ED:B7:16:5D:CA:F8:37:C4:6D:B8:D1","sha256":"EC:B7:49:85:AC:72:E4:BD:0F:B9:82:DC:5D:1D:0C:E0:03:1E:66:EC:CC:0D:25:BD:69:C7:15:D6:A7:12:9A:E3"}}},"request":{"raw":"GET /resource/images/light/finance2.svg HTTP/1.1\r\nHost: ofgxtw.help\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: server_name_session=b3874cde180056c36016bf8f86315873\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 20 Mar 2026 18:48:59 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Sun, 01 Mar 2026 05:39:10 GMT\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69a3d0fe-f73\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BwNzYXdS%2FNcdfgARw96WJ9RRmyreiLV4OcdW9dzC6L59ZhPRWhJJ%2BF6MzTgXUNO9Ic9iGeRf8pqglZd5xE6Z7%2FMVuTMyTBV0phDc\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9df6e4ec39c2de91-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3955,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"15820c69df508a6f4594abb055110518","sha1":"53c2b28dcfca28a52709d483c588599263a526e1","sha256":"e8ff1bfa91a28bea1b4e9ed5045a365ed42df3536c30d346ca29b736eb3fcce2","sha512":"fcf282fc54d829e562658e8643a296e414e53ae0c70b436255ea1e275accbd40416b1eb73a166221a68d63e5322b69764c0c39f23fe7b1167cf87bd1cea54ce0","ssdeep":"","tlshash":"3181b7f6e3d972f4918beba8c411947175ab34ff7b294b4983c0ded4651606d85ccc84","first_seen":"2025-10-12T16:34:39.812214Z","last_seen":"2026-06-01T14:38:39.501063Z","times_seen":77,"resource_available":false,"data":null}},"time_used":412,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":412,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-20","alert":"Phishing Block","trigger":"ofgxtw.help","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-20","alert":"Sinkholed","trigger":"ofgxtw.help","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.ofgxtw.help/kline","fqdn":"h5-api.ofgxtw.help","domain":"ofgxtw.help","tld":"help"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ofgxtw.help/","date":"2026-03-20T18:49:00.542Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ofgxtw.help","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Mar 2026 11:30:51 GMT","end":"Mon, 15 Jun 2026 11:30:50 GMT"},"fingerprint":{"sha1":"44:64:B8:D3:FC:DF:BD:23:CB:ED:B7:16:5D:CA:F8:37:C4:6D:B8:D1","sha256":"EC:B7:49:85:AC:72:E4:BD:0F:B9:82:DC:5D:1D:0C:E0:03:1E:66:EC:CC:0D:25:BD:69:C7:15:D6:A7:12:9A:E3"}}},"request":{"raw":"POST /kline HTTP/1.1\r\nHost: h5-api.ofgxtw.help\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nlanguage: en\r\nlang: en\r\nContent-Length: 70\r\nOrigin: https://ofgxtw.help\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":70,"data":"{\"interval\":\"FIVE_MIN\",\"limit\":1000,\"market\":\"binance\",\"symbol\":\"gtc\"}"}},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 20 Mar 2026 18:49:00 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://ofgxtw.help\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nset-cookie: server_name_session=969f10ab0ecf1323be38f9cf51714704; Max-Age=86400; httponly; path=/\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=04poFiiB2J63cEhTtiWP6jBrTxcJQyr68Ko19hcJ1wySyc2jy74IqPnIxx6WWvrvGiqN1YpoAxsfxb5eyHQYyxNVEo%2BBPKyqJkOZUrLjwzQ0%2Bw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9df6e4f21be0de91-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":34879,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"227847a876328fd90d8032c52c194715","sha1":"c75d82e51c10b8150dcd30cb806bfd7f3048771f","sha256":"e37a9434e3867dddba70be70401e672c07e3f7ca2f69f3123a5656c854648e41","sha512":"f37ba2e4a344b692f16ad3e354ddf6aa63bb7b4aa8b52627fe0deef269402ecff5f95e5438e21ff3072ae55c757a4033ccc01c7aefe7e7af5db70032b807368e","ssdeep":"96:nZTjb6c4pwhTju4KlZyzp6c0wr7zNrCn2lY1/eJUFIswEBwuf1UTJigrfNcy3+vz:1bQ5Ip6srwnjMJUasAuNUTJRrfNd+","tlshash":"e5f27d341a489359d8316cee1f937fd09a063ac34edfdcc502ad2e0cea54365a3957ba","first_seen":"2026-03-20T18:49:29.014348Z","last_seen":"2026-03-20T18:49:29.014348Z","times_seen":1,"resource_available":false,"data":null}},"time_used":294,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":294,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-20","alert":"Phishing Block","trigger":"h5-api.ofgxtw.help","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-20","alert":"Sinkholed","trigger":"h5-api.ofgxtw.help","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"storage.googleapis.com/order-ress/order/dotdigital/a2a650f7246d4b0e96090af287b61841.png?2.2.1772339973820","fqdn":"storage.googleapis.com","domain":"storage.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.251.143.155","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ofgxtw.help/","date":"2026-03-20T18:49:01.092Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"storage.googleapis.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Feb 2026 18:24:04 GMT","end":"Mon, 18 May 2026 18:24:03 GMT"},"fingerprint":{"sha1":"3C:31:BD:D2:EA:D9:B8:8E:67:17:8D:EB:DF:1B:C1:8E:89:2B:5D:7C","sha256":"C6:AF:0F:22:89:A9:F8:1D:21:85:65:8C:F4:6F:61:1C:6B:D2:10:68:AE:65:22:E2:69:75:62:C6:D8:2C:2A:08"}}},"request":{"raw":"GET /order-ress/order/dotdigital/a2a650f7246d4b0e96090af287b61841.png?2.2.1772339973820 HTTP/1.1\r\nHost: storage.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\nx-guploader-uploadid: AGQBYWx596-pmDN3E-BRradtzO24yOOYeEjl2Dj1FaqRLk_bvC2uoE4E7gDAeEVGe-e-LXEv\r\nexpires: Fri, 20 Mar 2026 19:49:01 GMT\r\ndate: Fri, 20 Mar 2026 18:49:01 GMT\r\ncache-control: public, max-age=3600\r\nlast-modified: Fri, 18 Apr 2025 23:30:45 GMT\r\netag: \"c2bc890bd692362ef83ce2e9198d22ed\"\r\nx-goog-generation: 1745019044982235\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 8388\r\nx-goog-hash: crc32c=LBL3jw==, md5=wryJC9aSNi74POLpGY0i7Q==\r\nx-goog-storage-class: STANDARD\r\naccept-ranges: bytes\r\ncontent-length: 8388\r\nserver: UploadServer\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]}],"data":{"size":8388,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced","md5":"c2bc890bd692362ef83ce2e9198d22ed","sha1":"2da6624b154fa3c70f6d48fa0e32961622494791","sha256":"7c97f207862ee766fb394f50e87f423fd7285c44ce125fc51e97d38e54b949d8","sha512":"e801ff56b048aee4050bc1d689d8d375c5c04b5cd8c6864e4a283748084910fef16171feb86b114ea28bf4ca2da755f08a309b87f0d468b885a13ce6a34aaba1","ssdeep":"192:RX31VARGlYA23xrFPNtSbCPK+LBGVzBcv8VG51uDiXZtIJ9/2SYFrP:x3vARGlYA2RtSYL4V2UsuDiJ+b/2SYFD","tlshash":"1402cf08ff694f508cf499d2e1147aa278848df2b0210b48e3d7bab913983991ef35d5","first_seen":"2024-07-08T21:52:53Z","last_seen":"2026-06-01T14:32:25.092225Z","times_seen":65,"resource_available":false,"data":null}},"time_used":377,"timings":{"blocked":112,"dns":3,"connect":21,"send":0,"wait":143,"receive":2,"ssl":93},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ofgxtw.help/","fqdn":"ofgxtw.help","domain":"ofgxtw.help","tld":"help"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-20T18:48:55.018Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ofgxtw.help","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Mar 2026 11:30:51 GMT","end":"Mon, 15 Jun 2026 11:30:50 GMT"},"fingerprint":{"sha1":"44:64:B8:D3:FC:DF:BD:23:CB:ED:B7:16:5D:CA:F8:37:C4:6D:B8:D1","sha256":"EC:B7:49:85:AC:72:E4:BD:0F:B9:82:DC:5D:1D:0C:E0:03:1E:66:EC:CC:0D:25:BD:69:C7:15:D6:A7:12:9A:E3"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: ofgxtw.help\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 20 Mar 2026 18:48:55 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\nlast-modified: Sun, 01 Mar 2026 05:39:32 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\nset-cookie: server_name_session=b3874cde180056c36016bf8f86315873; Max-Age=86400; httponly; path=/\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BL7hf7f3cmPTAp9XZP9m9asl%2FJMLn4VBqKBoEnVWRRJyYgrfL0fyRfnxkthQh1%2B5UhehGorUPCi8RU11o3SwPhgCfHL2no2MNvGg\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9df6e4d05907b7b2-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8701,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1094)","md5":"1012e48b652c8fca20a9048acbfe5878","sha1":"3a27f0b72e345447b34526b56235490227b38edd","sha256":"56f60896cf1b9c55ae6647308a436534c802102a779ea2de06480ecb798d80a5","sha512":"3ddb95bc1e4bc12dff5b6ef1d72983b2061bfcb6b74fc57c7630be0c30a321c6d8c5471f0e6a8893a9600ef30fcb8862b738a3ce7953388f3dddf71cf8d0df54","ssdeep":"192:TFKbhmUgHUqRGMRrdiWK1FiUm9Al6ZI45ZCxfy2nftZbKuB1Xiair5fo:kCtU0pmcZCxq27Spr5A","tlshash":"0602c7a32cf0981a23a34326abebf4045b309147c61d8ca4badd54ed8fc1fd994e7761","first_seen":"2026-03-02T14:13:32.420567Z","last_seen":"2026-03-20T19:46:41.805186Z","times_seen":4,"resource_available":false,"data":null}},"time_used":559,"timings":{"blocked":71,"dns":43,"connect":8,"send":0,"wait":417,"receive":0,"ssl":18},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-20","alert":"Phishing Block","trigger":"ofgxtw.help","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-20","alert":"Sinkholed","trigger":"ofgxtw.help","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ofgxtw.help/assets/index-A8xeihCB.css","fqdn":"ofgxtw.help","domain":"ofgxtw.help","tld":"help"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ofgxtw.help/","date":"2026-03-20T18:48:55.756Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ofgxtw.help","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Mar 2026 11:30:51 GMT","end":"Mon, 15 Jun 2026 11:30:50 GMT"},"fingerprint":{"sha1":"44:64:B8:D3:FC:DF:BD:23:CB:ED:B7:16:5D:CA:F8:37:C4:6D:B8:D1","sha256":"EC:B7:49:85:AC:72:E4:BD:0F:B9:82:DC:5D:1D:0C:E0:03:1E:66:EC:CC:0D:25:BD:69:C7:15:D6:A7:12:9A:E3"}}},"request":{"raw":"GET /assets/index-A8xeihCB.css HTTP/1.1\r\nHost: ofgxtw.help\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: server_name_session=b3874cde180056c36016bf8f86315873\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 20 Mar 2026 18:48:55 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Sun, 01 Mar 2026 05:39:32 GMT\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69a3d114-b9851\"\r\nexpires: Sat, 21 Mar 2026 03:57:21 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\nage: 10294\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9EhP9nWSb3E2phhqZm3eWUNqLMMVl%2Fd6bD0hQ3aENICYLziSj9evToqwRZe4x3DXVWaKV4Ln9NapXmbgvhp6sQH6i4EoMMl2phVH\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9df6e4d4792ede91-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":759889,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (65018), with no line terminators","md5":"00281560f655a93890342603ecc2534b","sha1":"3ee2b225832fd7feb6ba7a2a89de7bba9ed85cea","sha256":"c22a6274fdca5c7755db904c150a5ae142010ab8362ede0bf194f8b92e3a5cde","sha512":"34ef4e8b826b35ee25611a6e70e2ea6427a4ae6582e16cdd9c1e65faac3c572b4983dd384a1a2c68dd8cf56e9d64cccc4f351fbe2b11c326ec3db379099daf18","ssdeep":"12288:qv1s9dZ8w71ZACkFDS3vyf58rBeV05TnUq4CA9VP5mmXV2Ru0se6knu:qv1s9dZ8w71ZACkFDS3vyf58rBeV05T8","tlshash":"f6f4d629b58410387e37d6a57fc85acce12cfa62d4434ee8f243605a4ec77f7276261a","first_seen":"2026-03-02T14:01:20.277263Z","last_seen":"2026-03-20T19:46:41.744805Z","times_seen":15,"resource_available":false,"data":null}},"time_used":56,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":21,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-20","alert":"Phishing Block","trigger":"ofgxtw.help","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-20","alert":"Sinkholed","trigger":"ofgxtw.help","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.ofgxtw.help/kline","fqdn":"h5-api.ofgxtw.help","domain":"ofgxtw.help","tld":"help"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ofgxtw.help/","date":"2026-03-20T18:48:59.973Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ofgxtw.help","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Mar 2026 11:30:51 GMT","end":"Mon, 15 Jun 2026 11:30:50 GMT"},"fingerprint":{"sha1":"44:64:B8:D3:FC:DF:BD:23:CB:ED:B7:16:5D:CA:F8:37:C4:6D:B8:D1","sha256":"EC:B7:49:85:AC:72:E4:BD:0F:B9:82:DC:5D:1D:0C:E0:03:1E:66:EC:CC:0D:25:BD:69:C7:15:D6:A7:12:9A:E3"}}},"request":{"raw":"OPTIONS /kline HTTP/1.1\r\nHost: h5-api.ofgxtw.help\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,lang,language\r\nOrigin: https://ofgxtw.help\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 20 Mar 2026 18:49:00 GMT\r\ncontent-length: 0\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://ofgxtw.help\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: content-type, lang, language\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nset-cookie: server_name_session=ad58d77a8fd661df53586700f977ede4; Max-Age=86400; httponly; path=/\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tR%2FG5XZ7ACSFzHnFSKlzOOCtMFEW6u6zuLJi2%2Bsm6RJ%2Fgo8qDxUmKSQ5GjFre46q0Nt4d1vKb9oj7xHdoXeYj3YMr%2Br0AFrSix%2FyWO3tICo8Yw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9df6e4eebe27de91-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-13T17:33:37.826371Z","times_seen":16391923,"resource_available":true,"data":null}},"time_used":422,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":422,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-20","alert":"Sinkholed","trigger":"h5-api.ofgxtw.help","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-20","alert":"Phishing Block","trigger":"h5-api.ofgxtw.help","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.ofgxtw.help/kline","fqdn":"h5-api.ofgxtw.help","domain":"ofgxtw.help","tld":"help"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ofgxtw.help/","date":"2026-03-20T18:48:59.969Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ofgxtw.help","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Mar 2026 11:30:51 GMT","end":"Mon, 15 Jun 2026 11:30:50 GMT"},"fingerprint":{"sha1":"44:64:B8:D3:FC:DF:BD:23:CB:ED:B7:16:5D:CA:F8:37:C4:6D:B8:D1","sha256":"EC:B7:49:85:AC:72:E4:BD:0F:B9:82:DC:5D:1D:0C:E0:03:1E:66:EC:CC:0D:25:BD:69:C7:15:D6:A7:12:9A:E3"}}},"request":{"raw":"OPTIONS /kline HTTP/1.1\r\nHost: h5-api.ofgxtw.help\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,lang,language\r\nOrigin: https://ofgxtw.help\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 20 Mar 2026 18:49:00 GMT\r\ncontent-length: 0\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://ofgxtw.help\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: content-type, lang, language\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nset-cookie: server_name_session=969f10ab0ecf1323be38f9cf51714704; Max-Age=86400; httponly; path=/\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=A6yR9KobI3eEpBu5IRhGBaNly53EQFYvhcRodLTrlCRNfXwJa%2BxJWexWeHZIfzs5xf401H%2BR0DMFsAboPC%2B3b1AVdxwmmEtfTzdNhJcn6gHZAA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9df6e4eeae18de91-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-13T17:33:37.826371Z","times_seen":16391923,"resource_available":true,"data":null}},"time_used":438,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":438,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-20","alert":"Phishing Block","trigger":"h5-api.ofgxtw.help","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-20","alert":"Sinkholed","trigger":"h5-api.ofgxtw.help","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.ofgxtw.help/kline","fqdn":"h5-api.ofgxtw.help","domain":"ofgxtw.help","tld":"help"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ofgxtw.help/","date":"2026-03-20T18:49:00.553Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ofgxtw.help","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Mar 2026 11:30:51 GMT","end":"Mon, 15 Jun 2026 11:30:50 GMT"},"fingerprint":{"sha1":"44:64:B8:D3:FC:DF:BD:23:CB:ED:B7:16:5D:CA:F8:37:C4:6D:B8:D1","sha256":"EC:B7:49:85:AC:72:E4:BD:0F:B9:82:DC:5D:1D:0C:E0:03:1E:66:EC:CC:0D:25:BD:69:C7:15:D6:A7:12:9A:E3"}}},"request":{"raw":"POST /kline HTTP/1.1\r\nHost: h5-api.ofgxtw.help\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nlanguage: en\r\nlang: en\r\nContent-Length: 70\r\nOrigin: https://ofgxtw.help\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":70,"data":"{\"interval\":\"FIVE_MIN\",\"limit\":1000,\"market\":\"binance\",\"symbol\":\"ray\"}"}},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 20 Mar 2026 18:49:00 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://ofgxtw.help\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nset-cookie: server_name_session=969f10ab0ecf1323be38f9cf51714704; Max-Age=86400; httponly; path=/\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6pLeZqkfQclM83DZqwnFTovlJutyBZFcVwxgrcJqOSy21wVSXJv20nNfT%2BkEWGKIghHnePtHlEUyCfHugkk5R3AoWH85zSl3XGKvLrVFWytcpg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9df6e4f22c0ade91-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":35396,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"92ea574317b3722e2122e82be1d97c5d","sha1":"3f7982621c5a9ef0d79e215dfbd73a849708d945","sha256":"0917d3264d55becf393582ff0de76c68f31e97db7ff6bcaf2bbd853f69f20c65","sha512":"65eac898c7836de6892ea9bcbe5e92d51cb5b0bb6277e6259626c93270975375f9879fae2483aa0d2eabac2fdeec4c731467dda2cafa2c2386119b4c434b031a","ssdeep":"192:aTCDC+8b9Rws1Q5u6I9NNNhLCqidjcpXlTQaBS4aCvfjkx9RELZyv:ICIRws1Q5ur9NNNFCqidjGsKIVqdyv","tlshash":"01f221314a8f864bd431dc8a9fd3aee04d213ae31edcd8c104a96ed12e55374d195fae","first_seen":"2026-03-20T18:49:29.021261Z","last_seen":"2026-03-20T18:49:29.021261Z","times_seen":1,"resource_available":false,"data":null}},"time_used":446,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":446,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-20","alert":"Sinkholed","trigger":"h5-api.ofgxtw.help","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-20","alert":"Phishing Block","trigger":"h5-api.ofgxtw.help","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.ofgxtw.help/kline","fqdn":"h5-api.ofgxtw.help","domain":"ofgxtw.help","tld":"help"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ofgxtw.help/","date":"2026-03-20T18:49:00.558Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ofgxtw.help","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Mar 2026 11:30:51 GMT","end":"Mon, 15 Jun 2026 11:30:50 GMT"},"fingerprint":{"sha1":"44:64:B8:D3:FC:DF:BD:23:CB:ED:B7:16:5D:CA:F8:37:C4:6D:B8:D1","sha256":"EC:B7:49:85:AC:72:E4:BD:0F:B9:82:DC:5D:1D:0C:E0:03:1E:66:EC:CC:0D:25:BD:69:C7:15:D6:A7:12:9A:E3"}}},"request":{"raw":"POST /kline HTTP/1.1\r\nHost: h5-api.ofgxtw.help\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nlanguage: en\r\nlang: en\r\nContent-Length: 68\r\nOrigin: https://ofgxtw.help\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":68,"data":"{\"interval\":\"FIVE_MIN\",\"limit\":1000,\"market\":\"metal\",\"symbol\":\"xau\"}"}},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 20 Mar 2026 18:49:00 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://ofgxtw.help\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nset-cookie: server_name_session=969f10ab0ecf1323be38f9cf51714704; Max-Age=86400; httponly; path=/\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CzMfHlCNzOdCcW7sGCeHZnR0Ualy2XAQUURSvjLpdMSvSkGn%2Bg5noLAuDHbmjh%2BcZEn44tK7sFqE21iJrqSjNw%2BJSeSAIGPpUmMZEu6Z5ahq4w%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9df6e4f23c19de91-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":45222,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"7d77059b2d577dca428f6f5f51e685db","sha1":"4b1100f8e969a8a5f9745186cb7df98ab0965bee","sha256":"a04f05fa514baac80ea1408e0132a47f55fc5dcda827b2590b89d56ae1fae828","sha512":"873ec27a147809e2b9fb37e5d3f8655d37d97d99a614bfe14ad0deb0e44c2114990d2a67597c76f2328cfd7c7779efe89c7e6dedf55227531dfeb9063d5c3503","ssdeep":"768:y5iVHyXbl6s5OCnOjAKnWhSompYalpawsvQdZN5mHY//ejyHq:y5iMlomOsEg7mpdraz0jQ4//ecq","tlshash":"6b13e4b94fb8d0dac83b9db25f87fce01d1677d257cd8c4295a9970249c033099a8f9a","first_seen":"2026-03-20T18:49:29.023659Z","last_seen":"2026-03-20T18:49:29.023659Z","times_seen":1,"resource_available":false,"data":null}},"time_used":283,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":282,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-20","alert":"Phishing Block","trigger":"h5-api.ofgxtw.help","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-20","alert":"Sinkholed","trigger":"h5-api.ofgxtw.help","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"storage.googleapis.com/order-ress/order/dotdigital/2faf9ce6c56a4d618efe4953d8c024ce.jpeg?2.2.1772339973820","fqdn":"storage.googleapis.com","domain":"storage.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.251.143.155","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ofgxtw.help/","date":"2026-03-20T18:49:01.096Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"storage.googleapis.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Feb 2026 18:24:04 GMT","end":"Mon, 18 May 2026 18:24:03 GMT"},"fingerprint":{"sha1":"3C:31:BD:D2:EA:D9:B8:8E:67:17:8D:EB:DF:1B:C1:8E:89:2B:5D:7C","sha256":"C6:AF:0F:22:89:A9:F8:1D:21:85:65:8C:F4:6F:61:1C:6B:D2:10:68:AE:65:22:E2:69:75:62:C6:D8:2C:2A:08"}}},"request":{"raw":"GET /order-ress/order/dotdigital/2faf9ce6c56a4d618efe4953d8c024ce.jpeg?2.2.1772339973820 HTTP/1.1\r\nHost: storage.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/jpeg\r\nx-guploader-uploadid: AGQBYWzaZfKSaJ4jq6VQmM2c0P-9t142SDXzvT4FmSvMK1FlhxrbOObq9Zh6GJFB_ItVhGQn\r\nexpires: Fri, 20 Mar 2026 19:49:01 GMT\r\ndate: Fri, 20 Mar 2026 18:49:01 GMT\r\ncache-control: public, max-age=3600\r\nlast-modified: Fri, 18 Apr 2025 23:31:04 GMT\r\netag: \"57b556aadaa16077838bb2ef1d3514d1\"\r\nx-goog-generation: 1745019064372382\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 9740\r\nx-goog-hash: crc32c=d0/XYQ==, md5=V7VWqtqhYHeDi7LvHTUU0Q==\r\nx-goog-storage-class: STANDARD\r\naccept-ranges: bytes\r\ncontent-length: 9740\r\nserver: UploadServer\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":9740,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 225x225, components 3","md5":"57b556aadaa16077838bb2ef1d3514d1","sha1":"f85a35bca10b9f1edcfa8c1697436d9569f4cd2f","sha256":"a657211e0a7d76e9c8e536f6c99e1bca3b335e42d03c857ef1615ab3f4675da5","sha512":"48bf1e4b91578de3c293203a774faab28de03c1e0cde2a734ffa867243723851614b0d52e89c6af368f470edf69dac8184c3f7b13840e38100f01ea1297fb8ff","ssdeep":"192:jvVBLKx0QCmJhGtRfIUiN99uvV6TJhDgYxBVtoBaye:xox0Zc99uN6FhD1BtJ","tlshash":"8b126a17ad41afc8fbcde36894ea1b3af363e62317ab8205402b591650cb93c480f579","first_seen":"2025-08-29T09:33:23.939266Z","last_seen":"2026-04-07T11:52:26.970303Z","times_seen":87,"resource_available":false,"data":null}},"time_used":235,"timings":{"blocked":69,"dns":0,"connect":0,"send":0,"wait":165,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ofgxtw.help/assets/vendor-DVoNlCS0.js","fqdn":"ofgxtw.help","domain":"ofgxtw.help","tld":"help"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ofgxtw.help/","date":"2026-03-20T18:48:55.985Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ofgxtw.help","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Mar 2026 11:30:51 GMT","end":"Mon, 15 Jun 2026 11:30:50 GMT"},"fingerprint":{"sha1":"44:64:B8:D3:FC:DF:BD:23:CB:ED:B7:16:5D:CA:F8:37:C4:6D:B8:D1","sha256":"EC:B7:49:85:AC:72:E4:BD:0F:B9:82:DC:5D:1D:0C:E0:03:1E:66:EC:CC:0D:25:BD:69:C7:15:D6:A7:12:9A:E3"}}},"request":{"raw":"GET /assets/vendor-DVoNlCS0.js HTTP/1.1\r\nHost: ofgxtw.help\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: server_name_session=b3874cde180056c36016bf8f86315873\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 20 Mar 2026 18:48:56 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Sun, 01 Mar 2026 05:39:32 GMT\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69a3d114-222a50\"\r\nexpires: Sat, 21 Mar 2026 06:48:56 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PIVjOUaVXRzIirCHS644sEWXIYRPY7emG4yDkeuO73IjPiWkULo5ZRCHRw%2F2vH7bUBOfI3s5mA2LXfUpNb%2F9rw5NqfCs9CcUMXBF\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9df6e4d5fba4de91-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2239056,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"bc2191ab3894e0604252a140749f6789","sha1":"e5f2b447cbee7fcaaf1d46b886250f8533400900","sha256":"a800073bff9028223e19de1a5081e735671fa1de330c200ba9b6533c73e592f7","sha512":"f79bfb80a0509f1ad194d60f47c433f0fa7cf052daceb7b3aae26049c8a222570aae1503f6e8c69e0e10b49b6e25ba1a393e3dc2bc51b13f3da6b56cbf7dd4e8","ssdeep":"24576:FN2LD4rA+kDbDVETSxXQZWAacs4yKd4vVa+URU4s:FN2LD4rA+kDbDVdQZWAacs4ywGVa+UR2","tlshash":"d02509d8b651b03143a725a5007f050bf33a590db44f85a8f669e8da7cbd84e627bf38","first_seen":"2025-11-01T17:44:45.79341Z","last_seen":"2026-03-20T18:49:29.028337Z","times_seen":13,"resource_available":false,"data":null}},"time_used":1413,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":422,"receive":991,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-20","alert":"Phishing Block","trigger":"ofgxtw.help","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-20","alert":"Sinkholed","trigger":"ofgxtw.help","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.ofgxtw.help/api/common/getMt5Amount?coin=xag","fqdn":"h5-api.ofgxtw.help","domain":"ofgxtw.help","tld":"help"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ofgxtw.help/","date":"2026-03-20T18:48:59.073Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ofgxtw.help","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Mar 2026 11:30:51 GMT","end":"Mon, 15 Jun 2026 11:30:50 GMT"},"fingerprint":{"sha1":"44:64:B8:D3:FC:DF:BD:23:CB:ED:B7:16:5D:CA:F8:37:C4:6D:B8:D1","sha256":"EC:B7:49:85:AC:72:E4:BD:0F:B9:82:DC:5D:1D:0C:E0:03:1E:66:EC:CC:0D:25:BD:69:C7:15:D6:A7:12:9A:E3"}}},"request":{"raw":"POST /api/common/getMt5Amount?coin=xag HTTP/1.1\r\nHost: h5-api.ofgxtw.help\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nlang: en-US\r\nContent-Length: 2\r\nOrigin: https://ofgxtw.help\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":2,"data":"{}"}},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 20 Mar 2026 18:48:59 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://ofgxtw.help\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nset-cookie: server_name_session=969f10ab0ecf1323be38f9cf51714704; Max-Age=86400; httponly; path=/\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZQafsGK4Gjh5kBAHTqQzXMkPGo1DuOWFUNX%2BprKYLkW8y2DI%2BoYEvzbePp188V%2BlhhVE0DsOL44sTlqYWPzikoBAzEPi7BDAkGTe%2FiZRLWUKTg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9df6e4e93ca8de91-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":69,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"cba5e7cfe85038c971477d9f185980d2","sha1":"79f2343ef28b5e091efbbbe7082c47f3312aba80","sha256":"ecd3c5577c0be68961802ad19931e73d4297616abb8da61274426fc18ff18b28","sha512":"10ee616d7470237afeb56c2221bee76ed42a77347301e857b27e01f3f0ff5a67dabc3ff9456b512010ec24792b2c3eef433cf3a4a6e8bc6464e00193050c8208","ssdeep":"","tlshash":"49a02208ec0c80c220230082820b020808f0308c22000a0cfe8ee230c2003ba3283c88","first_seen":"2026-03-20T18:49:29.029927Z","last_seen":"2026-03-20T18:49:29.029927Z","times_seen":1,"resource_available":false,"data":null}},"time_used":222,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":222,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-20","alert":"Sinkholed","trigger":"h5-api.ofgxtw.help","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-20","alert":"Phishing Block","trigger":"h5-api.ofgxtw.help","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ofgxtw.help/resource/images/light/ai.webp","fqdn":"ofgxtw.help","domain":"ofgxtw.help","tld":"help"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ofgxtw.help/","date":"2026-03-20T18:48:59.678Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ofgxtw.help","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Mar 2026 11:30:51 GMT","end":"Mon, 15 Jun 2026 11:30:50 GMT"},"fingerprint":{"sha1":"44:64:B8:D3:FC:DF:BD:23:CB:ED:B7:16:5D:CA:F8:37:C4:6D:B8:D1","sha256":"EC:B7:49:85:AC:72:E4:BD:0F:B9:82:DC:5D:1D:0C:E0:03:1E:66:EC:CC:0D:25:BD:69:C7:15:D6:A7:12:9A:E3"}}},"request":{"raw":"GET /resource/images/light/ai.webp HTTP/1.1\r\nHost: ofgxtw.help\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: server_name_session=b3874cde180056c36016bf8f86315873\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 20 Mar 2026 18:49:00 GMT\r\ncontent-type: image/webp\r\ncontent-length: 9016\r\nserver: cloudflare\r\nlast-modified: Sun, 01 Mar 2026 05:39:10 GMT\r\npriority: u=4,i=?0\r\netag: \"69a3d0fe-2338\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5nn0Q449f%2FNznN595B9zQQFAj77nUk0zEiAsS4MaMhB8xTcvebf6KBqcJqFCk1UL8DuwdyK4xwizNcBv2HNp6k84F0Q8XmKvofMI\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9df6e4ed0b0dde91-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9016,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"6ee434d763c325a57dc68dd5cd9342f9","sha1":"db594747347f4901f82ff0d9cb3ce71e95613f78","sha256":"40bd9102ca0e9c26e17694aa71ca21d20bf1f920a73ad03299e21f39eb59383c","sha512":"8a07454d75b9d85f457896ac8bbe209bb45fab6a45b8af5ca1731f443be0938a23f231c9491f76270d08a92e10e8ff453b5de08bbd3196d5c3c8645e5bee169b","ssdeep":"192:FwTdlXOaHnulmseQ++iVAr/wOr9fwO7+v3DeULFnXX0EXlTqKoh5b3:FwTXeaH4++i+X2n3qUJ0+lNoh5","tlshash":"20129e112be96767c912763dd1d05b9bde76fe0ccda8abaa4100895f09172d03d8c1df","first_seen":"2024-10-31T21:21:10.228315Z","last_seen":"2026-06-01T14:38:39.475463Z","times_seen":182,"resource_available":false,"data":null}},"time_used":442,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":442,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-20","alert":"Sinkholed","trigger":"ofgxtw.help","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-20","alert":"Phishing Block","trigger":"ofgxtw.help","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.ofgxtw.help/kline","fqdn":"h5-api.ofgxtw.help","domain":"ofgxtw.help","tld":"help"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ofgxtw.help/","date":"2026-03-20T18:49:00.562Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ofgxtw.help","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Mar 2026 11:30:51 GMT","end":"Mon, 15 Jun 2026 11:30:50 GMT"},"fingerprint":{"sha1":"44:64:B8:D3:FC:DF:BD:23:CB:ED:B7:16:5D:CA:F8:37:C4:6D:B8:D1","sha256":"EC:B7:49:85:AC:72:E4:BD:0F:B9:82:DC:5D:1D:0C:E0:03:1E:66:EC:CC:0D:25:BD:69:C7:15:D6:A7:12:9A:E3"}}},"request":{"raw":"POST /kline HTTP/1.1\r\nHost: h5-api.ofgxtw.help\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nlanguage: en\r\nlang: en\r\nContent-Length: 69\r\nOrigin: https://ofgxtw.help\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":69,"data":"{\"interval\":\"FIVE_MIN\",\"limit\":1000,\"market\":\"mt5\",\"symbol\":\"audusd\"}"}},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 20 Mar 2026 18:49:00 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://ofgxtw.help\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nset-cookie: server_name_session=969f10ab0ecf1323be38f9cf51714704; Max-Age=86400; httponly; path=/\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Nhbdi9CSy4EboRROeMDRXfKg2iBH5mhQIaqvCQljS4uMpRA%2B8CLgiwEaZvuAAMuUOc%2FNarUUStyl%2FUHPuljEma8Biy%2FE7wB%2Fn3j7RpJfTirvag%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9df6e4f23c26de91-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":42921,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"d9cb0484b39d6f43e50b3909693f1609","sha1":"f90246e0d1f26f7ecb268ddd7df8a30dc5f7f3eb","sha256":"64335582dcc1841603557898c873b1e4bc96e6c6f3603801e355319bc8d06b41","sha512":"defe08304cb7cdd427f525621fa907d00cccaf86affd4a5b33c3c95a2d830b6d9afb77ba13fadffc3e82887a44956471f037e821edf7c61f7f38e3a06f171b4c","ssdeep":"768:4HQ+1EEn3uO5sbyxJnODjOx4Vd4UuHL+RCSshPRoCV5Jk3F9qmBX51tA2H/ELgub:UnduYs2vCjM4Vd4UuHLkCSiPRoCV5Jka","tlshash":"ec1383704ba8c2c9d471fdaa4fd3afe8191239c34bcd0dc745ac1e256a546f8a144baf","first_seen":"2026-03-20T18:49:29.033748Z","last_seen":"2026-03-20T18:49:29.033748Z","times_seen":1,"resource_available":false,"data":null}},"time_used":271,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":271,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-20","alert":"Phishing Block","trigger":"h5-api.ofgxtw.help","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-20","alert":"Sinkholed","trigger":"h5-api.ofgxtw.help","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.ofgxtw.help/kline","fqdn":"h5-api.ofgxtw.help","domain":"ofgxtw.help","tld":"help"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ofgxtw.help/","date":"2026-03-20T18:49:00.566Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ofgxtw.help","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Mar 2026 11:30:51 GMT","end":"Mon, 15 Jun 2026 11:30:50 GMT"},"fingerprint":{"sha1":"44:64:B8:D3:FC:DF:BD:23:CB:ED:B7:16:5D:CA:F8:37:C4:6D:B8:D1","sha256":"EC:B7:49:85:AC:72:E4:BD:0F:B9:82:DC:5D:1D:0C:E0:03:1E:66:EC:CC:0D:25:BD:69:C7:15:D6:A7:12:9A:E3"}}},"request":{"raw":"POST /kline HTTP/1.1\r\nHost: h5-api.ofgxtw.help\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nlanguage: en\r\nlang: en\r\nContent-Length: 68\r\nOrigin: https://ofgxtw.help\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":68,"data":"{\"interval\":\"FIVE_MIN\",\"limit\":1000,\"market\":\"metal\",\"symbol\":\"xag\"}"}},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 20 Mar 2026 18:49:00 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://ofgxtw.help\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nset-cookie: server_name_session=969f10ab0ecf1323be38f9cf51714704; Max-Age=86400; httponly; path=/\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aGtpRmAwJDp7WPsOP1ZbIJ6ffvoVIWVp6s75CI9FpQLPwyXpx41xnh%2Fd6XFMT1szKzm%2FbuiMHyWjqJ7mqdcMG%2FUMtA%2FXLjJkXIdjcHasteaJGw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9df6e4f24c4cde91-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":41642,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"5f452777e7039ed799b85f4c2438beba","sha1":"f86b087a5f9e3244f2f634c4191b7b0fbb452b5c","sha256":"8ee03c2cc7945b08dfc0d9fce1b14edd83695160cccab0999f2275a5b40b5854","sha512":"ba5b30deabb70641889ab4ac167cea7fae7cc2e17a8459c038be07ed2c7492abe485ac7bc59569a2a6e2486eaef804550c7f69653ce5fc55babf93e63d394a71","ssdeep":"768:6kpWTSLHJV0+c6qpwCfPVWQqL+LBtgxKDPrx:6kpmwHJJtYX3wT+LPgxK5","tlshash":"e813e4709a88d2d9d431cee24be3bde35f1a70c64aed0d0115bd17116aa9f77b108b8b","first_seen":"2026-03-20T18:49:29.035961Z","last_seen":"2026-03-20T18:49:29.035961Z","times_seen":1,"resource_available":false,"data":null}},"time_used":260,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":259,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-20","alert":"Phishing Block","trigger":"h5-api.ofgxtw.help","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-20","alert":"Sinkholed","trigger":"h5-api.ofgxtw.help","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"storage.googleapis.com/order-ress/order/dotdigital/004a039a5eda4e7c9e00f0fc6434cd65.jpeg?2.2.1772339973820","fqdn":"storage.googleapis.com","domain":"storage.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.251.143.155","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ofgxtw.help/","date":"2026-03-20T18:49:01.095Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"storage.googleapis.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Feb 2026 18:24:04 GMT","end":"Mon, 18 May 2026 18:24:03 GMT"},"fingerprint":{"sha1":"3C:31:BD:D2:EA:D9:B8:8E:67:17:8D:EB:DF:1B:C1:8E:89:2B:5D:7C","sha256":"C6:AF:0F:22:89:A9:F8:1D:21:85:65:8C:F4:6F:61:1C:6B:D2:10:68:AE:65:22:E2:69:75:62:C6:D8:2C:2A:08"}}},"request":{"raw":"GET /order-ress/order/dotdigital/004a039a5eda4e7c9e00f0fc6434cd65.jpeg?2.2.1772339973820 HTTP/1.1\r\nHost: storage.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/jpeg\r\nx-guploader-uploadid: AGQBYWymqZ64icvxf4o7qskEbh1BKnRcjvsO5ej8B7tRnJan7X9ME0O2WLM2hdf5iybntQ31\r\nexpires: Fri, 20 Mar 2026 19:49:01 GMT\r\ndate: Fri, 20 Mar 2026 18:49:01 GMT\r\ncache-control: public, max-age=3600\r\nlast-modified: Fri, 18 Apr 2025 23:30:54 GMT\r\netag: \"f117e1ecb9a65992a4a127aae7147f3d\"\r\nx-goog-generation: 1745019054266672\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 9320\r\nx-goog-hash: crc32c=NRpzvw==, md5=8Rfh7LmmWZKkoSeq5xR/PQ==\r\nx-goog-storage-class: STANDARD\r\naccept-ranges: bytes\r\ncontent-length: 9320\r\nserver: UploadServer\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]}],"data":{"size":9320,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 225x225, components 3","md5":"f117e1ecb9a65992a4a127aae7147f3d","sha1":"d31cb59eef02bef662f2a32927486fdb0bba9938","sha256":"c41539a30a96d819192c0088fb339eb265079a33b835550da4d67e239ea658b9","sha512":"82a5726b19387f79608c7ca92ead96d09e0bce5d08ca0c607b93412e5110607926ae426b869bd993a72ad0f586bf82c39099ed02e051fa0a573db3ff1345444a","ssdeep":"192:afKC5CG/uzpL2j2tll1RXLhL2yjT0qLiaOTMNEdiq:ayCEaQLzRbV2cTLLiaOTMdq","tlshash":"90128d85bd31deecfdaec33917d3a316e293e93b26d149a851026b1048d3a3e5217635","first_seen":"2025-04-17T23:40:09.012509Z","last_seen":"2026-04-07T11:52:26.867546Z","times_seen":89,"resource_available":false,"data":null}},"time_used":237,"timings":{"blocked":70,"dns":0,"connect":0,"send":0,"wait":166,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"storage.googleapis.com/order-ress/order/dotdigital/88728f47fce24ffc9b058781d5511127.png?2.2.1772339973820","fqdn":"storage.googleapis.com","domain":"storage.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.251.143.155","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ofgxtw.help/","date":"2026-03-20T18:49:01.099Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"storage.googleapis.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Feb 2026 18:24:04 GMT","end":"Mon, 18 May 2026 18:24:03 GMT"},"fingerprint":{"sha1":"3C:31:BD:D2:EA:D9:B8:8E:67:17:8D:EB:DF:1B:C1:8E:89:2B:5D:7C","sha256":"C6:AF:0F:22:89:A9:F8:1D:21:85:65:8C:F4:6F:61:1C:6B:D2:10:68:AE:65:22:E2:69:75:62:C6:D8:2C:2A:08"}}},"request":{"raw":"GET /order-ress/order/dotdigital/88728f47fce24ffc9b058781d5511127.png?2.2.1772339973820 HTTP/1.1\r\nHost: storage.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\nx-guploader-uploadid: AGQBYWw3L_9OugTCM1zGLwBT5A_BZH73z8M3mV0crnXqtx9EO7wDgnE1In6bPJ_LUoM1gU-V\r\nexpires: Fri, 20 Mar 2026 19:49:01 GMT\r\ndate: Fri, 20 Mar 2026 18:49:01 GMT\r\ncache-control: public, max-age=3600\r\nlast-modified: Fri, 18 Apr 2025 23:52:14 GMT\r\netag: \"c03611f7e8a37ddf73e6a62a43ead196\"\r\nx-goog-generation: 1745020334043985\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 1717\r\nx-goog-hash: crc32c=Nlh/mQ==, md5=wDYR9+ijfd9z5qYqQ+rRlg==\r\nx-goog-storage-class: STANDARD\r\naccept-ranges: bytes\r\ncontent-length: 1717\r\nserver: UploadServer\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":1717,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 44 x 44, 8-bit/color RGBA, non-interlaced","md5":"c03611f7e8a37ddf73e6a62a43ead196","sha1":"f5d6f08be3d751747f618cd7af90f4ec8dc3d97c","sha256":"a19e79dd72b71fadceabd2a6cfcc04b18738157e104b54cf960eb17ccd1cd6ee","sha512":"968346372809cade34940284062a06ad5811a15ff481584675cdea3d77addda5b6da00562479f7ac4a98a8a289d70cde9d409d024048039f354cbc5b200edb08","ssdeep":"","tlshash":"39313a46b4497a5e02e204ff815da62b0f99ee43f0f89308ae60d04c3d718cfc91a0de","first_seen":"2024-12-03T23:58:43.643729Z","last_seen":"2026-06-04T15:28:13.437662Z","times_seen":106,"resource_available":false,"data":null}},"time_used":213,"timings":{"blocked":68,"dns":0,"connect":0,"send":0,"wait":145,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"storage.googleapis.com/order-ress/order/dotdigital/5ca8998ce9db42db9305ebcfcca0df4e.png","fqdn":"storage.googleapis.com","domain":"storage.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.251.143.155","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ofgxtw.help/","date":"2026-03-20T18:49:01.100Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"storage.googleapis.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Feb 2026 18:24:04 GMT","end":"Mon, 18 May 2026 18:24:03 GMT"},"fingerprint":{"sha1":"3C:31:BD:D2:EA:D9:B8:8E:67:17:8D:EB:DF:1B:C1:8E:89:2B:5D:7C","sha256":"C6:AF:0F:22:89:A9:F8:1D:21:85:65:8C:F4:6F:61:1C:6B:D2:10:68:AE:65:22:E2:69:75:62:C6:D8:2C:2A:08"}}},"request":{"raw":"GET /order-ress/order/dotdigital/5ca8998ce9db42db9305ebcfcca0df4e.png HTTP/1.1\r\nHost: storage.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\nx-guploader-uploadid: AGQBYWzTEaDr3l2MQ_-UAqn17zNZuJAMJ92qzbo5u7WBYf5RJen_hwO4bB0jHkZG7Z0bxYPa\r\nexpires: Fri, 20 Mar 2026 19:49:01 GMT\r\ndate: Fri, 20 Mar 2026 18:49:01 GMT\r\ncache-control: public, max-age=3600\r\nlast-modified: Mon, 21 Apr 2025 06:23:40 GMT\r\netag: \"d387ebeca489227155835bf44c221cd0\"\r\nx-goog-generation: 1745216620575234\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 548460\r\nx-goog-hash: crc32c=KghPuw==, md5=04fr7KSJInFVg1v0TCIc0A==\r\nx-goog-storage-class: STANDARD\r\naccept-ranges: bytes\r\ncontent-length: 548460\r\nserver: UploadServer\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":548460,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1200 x 494, 8-bit/color RGBA, non-interlaced","md5":"d387ebeca489227155835bf44c221cd0","sha1":"d67185a3b8f72e950e0a0c225f2afd5816014185","sha256":"1e066e832b57393740a83d024d8d99a87573eb3e0e4d7dea9d026ce30747d0c4","sha512":"e2322a68f9e9a69fb6ba5cb36b825afe173275c39f9a99d5bedb3fcf5ad0bc4e4a2d4c561a2c47f2533ba34f021097dad962e98fc4f3c6b3b5f60bdff34b6c91","ssdeep":"12288:hc2T1bkJbVrdpl1w09PRFKavw1IWj+AnU:hc2TObRpjw074PbqAnU","tlshash":"47c423683ae9c1c32daa9c9f503b58e5ea1097f8ec7117e6b1c7b0d170b5e880125df6","first_seen":"2025-11-01T17:44:45.749561Z","last_seen":"2026-03-20T19:46:41.805871Z","times_seen":28,"resource_available":false,"data":null}},"time_used":507,"timings":{"blocked":68,"dns":0,"connect":0,"send":0,"wait":185,"receive":254,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ofgxtw.help/assets/vendor-CGcHcJjv.css","fqdn":"ofgxtw.help","domain":"ofgxtw.help","tld":"help"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ofgxtw.help/","date":"2026-03-20T18:48:55.755Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ofgxtw.help","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Mar 2026 11:30:51 GMT","end":"Mon, 15 Jun 2026 11:30:50 GMT"},"fingerprint":{"sha1":"44:64:B8:D3:FC:DF:BD:23:CB:ED:B7:16:5D:CA:F8:37:C4:6D:B8:D1","sha256":"EC:B7:49:85:AC:72:E4:BD:0F:B9:82:DC:5D:1D:0C:E0:03:1E:66:EC:CC:0D:25:BD:69:C7:15:D6:A7:12:9A:E3"}}},"request":{"raw":"GET /assets/vendor-CGcHcJjv.css HTTP/1.1\r\nHost: ofgxtw.help\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: server_name_session=b3874cde180056c36016bf8f86315873\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 20 Mar 2026 18:48:55 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Sun, 01 Mar 2026 05:39:32 GMT\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69a3d114-1e27e\"\r\nexpires: Sat, 21 Mar 2026 03:57:21 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\nage: 10294\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=83R0Iultof5gYXgHHzaDXvqiu4EnsM%2BFr7ts5URB65t1uZj2NuKqGbrpwj9mD3BSFt6TiwG%2BFMey9XwuuJ%2BvXJRlKGcPXSnuO%2B2b\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9df6e4d4792dde91-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":123518,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (65018), with no line terminators","md5":"feacc9695c0732ee31fcb6e268741bd2","sha1":"97e89b2991314e67eb4ba4962f44019954cb7511","sha256":"0081b07e43a5742a0e4051cbca6450d88bf212c4e3423c8765f307b3953af9ba","sha512":"e3da2102d176b9c3c58c4de159f92fcac15deb55b265ba8ad2edd08ac31246f66e80b5ee9047e4f0087bd5e437c148646d27044841faa5d4239f773af452ca25","ssdeep":"1536:BtIyNBi3MFYaQj7FCwsBlDOFIxuVox8Dbf8IG1Ah5aIzW:BnNIClDsIxuVS8f9tQ","tlshash":"1ac3e5a5e6c491fc6f2bf2649b8766d8f23cf661dd01daa4f105515c0ec7bf10223a2a","first_seen":"2025-11-01T17:44:45.747081Z","last_seen":"2026-03-20T19:46:41.787073Z","times_seen":53,"resource_available":false,"data":null}},"time_used":46,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":30,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-20","alert":"Sinkholed","trigger":"ofgxtw.help","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-20","alert":"Phishing Block","trigger":"ofgxtw.help","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ofgxtw.help/resource/images/light/spot.svg","fqdn":"ofgxtw.help","domain":"ofgxtw.help","tld":"help"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ofgxtw.help/","date":"2026-03-20T18:48:59.546Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ofgxtw.help","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Mar 2026 11:30:51 GMT","end":"Mon, 15 Jun 2026 11:30:50 GMT"},"fingerprint":{"sha1":"44:64:B8:D3:FC:DF:BD:23:CB:ED:B7:16:5D:CA:F8:37:C4:6D:B8:D1","sha256":"EC:B7:49:85:AC:72:E4:BD:0F:B9:82:DC:5D:1D:0C:E0:03:1E:66:EC:CC:0D:25:BD:69:C7:15:D6:A7:12:9A:E3"}}},"request":{"raw":"GET /resource/images/light/spot.svg HTTP/1.1\r\nHost: ofgxtw.help\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: server_name_session=b3874cde180056c36016bf8f86315873\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 20 Mar 2026 18:48:59 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Sun, 01 Mar 2026 05:39:10 GMT\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69a3d0fe-59a\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vMh%2Fn%2Fa17PjDv3tRKuvTx6W6m%2BraHoGbIBOs58CsmyyCMV0cH7LNTxRzpdM5GIvU%2BkUU5Mn90yhXW1uCBwMqWcxa2MVRDxnj9VtO\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9df6e4ec39a7de91-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1434,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"06ff7119039a86ea843fced4a87b0c04","sha1":"acf0f480f5288cc094e99382bbaaa21b9949135c","sha256":"f72d9dfe237a308134226955b517b808c348468794ccab477bbf478cd1c49007","sha512":"30b10c415d76e26ff9105a1803919314a81a3234d1254f3210eefb9e98ac35bc52ecb242a7cc2dadd1f01ebb3a0cf4bd774e6cba135cb89fb416560c18c8b58a","ssdeep":"","tlshash":"b921e0bf97c536d0d56beba0d8138022f2b7647a3b2c8b854e74cfda530e059c8d9460","first_seen":"2025-09-28T11:01:39.207607Z","last_seen":"2026-06-01T14:38:39.403345Z","times_seen":78,"resource_available":false,"data":null}},"time_used":426,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":426,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-20","alert":"Sinkholed","trigger":"ofgxtw.help","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-20","alert":"Phishing Block","trigger":"ofgxtw.help","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ofgxtw.help/resource/svg/dark/notice.svg?2.2.1772339973820","fqdn":"ofgxtw.help","domain":"ofgxtw.help","tld":"help"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ofgxtw.help/","date":"2026-03-20T18:48:59.522Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ofgxtw.help","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Mar 2026 11:30:51 GMT","end":"Mon, 15 Jun 2026 11:30:50 GMT"},"fingerprint":{"sha1":"44:64:B8:D3:FC:DF:BD:23:CB:ED:B7:16:5D:CA:F8:37:C4:6D:B8:D1","sha256":"EC:B7:49:85:AC:72:E4:BD:0F:B9:82:DC:5D:1D:0C:E0:03:1E:66:EC:CC:0D:25:BD:69:C7:15:D6:A7:12:9A:E3"}}},"request":{"raw":"GET /resource/svg/dark/notice.svg?2.2.1772339973820 HTTP/1.1\r\nHost: ofgxtw.help\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: server_name_session=b3874cde180056c36016bf8f86315873\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 20 Mar 2026 18:48:59 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Sun, 01 Mar 2026 05:39:10 GMT\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69a3d0fe-76a\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PnfyKrQj1kFv0ZeS6ityva9uolx8fRbAcI7Hbi%2Fn5kpBBURS6jcFDc0eII7KFQRyz0mRy18nJzRzjyD%2Bp9Jn8bAF1K6jZ7sVwNhR\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9df6e4ec0972de91-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1898,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"f262267496bf86de09b562db82a676d9","sha1":"a9163b950a68f56705da45159ba44533507505c5","sha256":"8c02636fda22906716b1b028e7dfde4a436cb95da0029bdeac8e201030f344a0","sha512":"c9bda0880dbea6da7260578858be5402c6a62d85cb8f8639f2313e02f7fda87ae24d05de9b87efb86dd1341dab2165b9d90524dd44d2d1938b25b63a2e1a6c6e","ssdeep":"","tlshash":"364175c659f952e4f2cdc320d6a731051e6a747730e1026cfeeea5656b308f90f8e049","first_seen":"2025-07-27T10:32:31.414438Z","last_seen":"2026-06-04T15:28:13.440921Z","times_seen":107,"resource_available":false,"data":null}},"time_used":413,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":413,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-20","alert":"Phishing Block","trigger":"ofgxtw.help","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-20","alert":"Sinkholed","trigger":"ofgxtw.help","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ofgxtw.help/resource/images/light/ai4.svg","fqdn":"ofgxtw.help","domain":"ofgxtw.help","tld":"help"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ofgxtw.help/","date":"2026-03-20T18:48:59.686Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ofgxtw.help","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Mar 2026 11:30:51 GMT","end":"Mon, 15 Jun 2026 11:30:50 GMT"},"fingerprint":{"sha1":"44:64:B8:D3:FC:DF:BD:23:CB:ED:B7:16:5D:CA:F8:37:C4:6D:B8:D1","sha256":"EC:B7:49:85:AC:72:E4:BD:0F:B9:82:DC:5D:1D:0C:E0:03:1E:66:EC:CC:0D:25:BD:69:C7:15:D6:A7:12:9A:E3"}}},"request":{"raw":"GET /resource/images/light/ai4.svg HTTP/1.1\r\nHost: ofgxtw.help\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: server_name_session=b3874cde180056c36016bf8f86315873\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 20 Mar 2026 18:49:00 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Sun, 01 Mar 2026 05:39:10 GMT\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69a3d0fe-fde\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OHl5hyLr47%2BBGd6tyPKOoAfKA2Zq%2BpCW%2F%2F4TJqb05hTxbw9m4FpstLs%2BfHU7iETAjClhnf6L%2BMBAakWHKu3pCBuBAP%2B305OffKvi\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9df6e4ed0b1ade91-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4062,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"3f36289a67c02534f334b7a7ba82586a","sha1":"ea680334caae72af8027d42c36702e6bb6929f64","sha256":"0b143b746b8b6034e6dcb73cc78fe60cf59e42a9cba1a6cf605045a9c2e5bbde","sha512":"82bb649678fcb6313c60455f6cd283a1ae047d0f8ba4a0508cff06081b2c231702ddc603c823ebd3ce17eb4cd12b8df28d346c8a04faccddf905b79979f61aa3","ssdeep":"","tlshash":"8d81b62ab3b9e976f104e7b8d6059830355a48bbb5814250c3f5af2f91241cd1b3f8eb","first_seen":"2024-12-07T19:52:26.441151Z","last_seen":"2026-06-01T14:38:39.49296Z","times_seen":141,"resource_available":false,"data":null}},"time_used":413,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":413,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-20","alert":"Sinkholed","trigger":"ofgxtw.help","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-20","alert":"Phishing Block","trigger":"ofgxtw.help","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.ofgxtw.help/kline","fqdn":"h5-api.ofgxtw.help","domain":"ofgxtw.help","tld":"help"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ofgxtw.help/","date":"2026-03-20T18:48:59.897Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ofgxtw.help","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Mar 2026 11:30:51 GMT","end":"Mon, 15 Jun 2026 11:30:50 GMT"},"fingerprint":{"sha1":"44:64:B8:D3:FC:DF:BD:23:CB:ED:B7:16:5D:CA:F8:37:C4:6D:B8:D1","sha256":"EC:B7:49:85:AC:72:E4:BD:0F:B9:82:DC:5D:1D:0C:E0:03:1E:66:EC:CC:0D:25:BD:69:C7:15:D6:A7:12:9A:E3"}}},"request":{"raw":"OPTIONS /kline HTTP/1.1\r\nHost: h5-api.ofgxtw.help\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,lang,language\r\nOrigin: https://ofgxtw.help\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 20 Mar 2026 18:49:00 GMT\r\ncontent-length: 0\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://ofgxtw.help\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: content-type, lang, language\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nset-cookie: server_name_session=969f10ab0ecf1323be38f9cf51714704; Max-Age=86400; httponly; path=/\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=V%2BTR%2FW7VbFEfM8EiLYnRoPYPKeekWoLeQ2ewtms13BFsOktXfnq5F5n0w%2Fet3UkSXoHGpSlFCOrn%2Fd1n8mALkMqVxZf4DIbfM1Zeq5m3wy8ZwQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9df6e4ee4d5bde91-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-13T17:33:37.826371Z","times_seen":16391923,"resource_available":true,"data":null}},"time_used":423,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":423,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-20","alert":"Phishing Block","trigger":"h5-api.ofgxtw.help","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-20","alert":"Sinkholed","trigger":"h5-api.ofgxtw.help","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"storage.googleapis.com/order-ress/order/dotdigital/4c48ad4889d7422e9ac37bc128ca2bcb.png?2.2.1772339973820","fqdn":"storage.googleapis.com","domain":"storage.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.251.143.155","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ofgxtw.help/","date":"2026-03-20T18:49:01.089Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"storage.googleapis.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Feb 2026 18:24:04 GMT","end":"Mon, 18 May 2026 18:24:03 GMT"},"fingerprint":{"sha1":"3C:31:BD:D2:EA:D9:B8:8E:67:17:8D:EB:DF:1B:C1:8E:89:2B:5D:7C","sha256":"C6:AF:0F:22:89:A9:F8:1D:21:85:65:8C:F4:6F:61:1C:6B:D2:10:68:AE:65:22:E2:69:75:62:C6:D8:2C:2A:08"}}},"request":{"raw":"GET /order-ress/order/dotdigital/4c48ad4889d7422e9ac37bc128ca2bcb.png?2.2.1772339973820 HTTP/1.1\r\nHost: storage.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\nx-guploader-uploadid: AGQBYWynkqpKurmftx1lc3yfwdISW4xYofRTg8sgyxR9iusg6w0ZL0HimtdQAgJP3TO36jQi\r\nexpires: Fri, 20 Mar 2026 19:49:01 GMT\r\ndate: Fri, 20 Mar 2026 18:49:01 GMT\r\ncache-control: public, max-age=3600\r\nlast-modified: Fri, 18 Apr 2025 23:29:11 GMT\r\netag: \"12d9722461759cefff02d9076a3d2718\"\r\nx-goog-generation: 1745018951660884\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 9807\r\nx-goog-hash: crc32c=bTyaFQ==, md5=EtlyJGF1nO//AtkHaj0nGA==\r\nx-goog-storage-class: STANDARD\r\naccept-ranges: bytes\r\ncontent-length: 9807\r\nserver: UploadServer\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":9807,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 400x400, components 3","md5":"12d9722461759cefff02d9076a3d2718","sha1":"6b763fea0b17257a36b90c465593e1629aee0564","sha256":"af89450e1873196692af0d9d4d0c03218b4be8091171b9d8f7349298d4e82586","sha512":"8eb0f616162be914a3945fb383250796e1134da22e8ae612f403f28804ac04b7fd0f607e132403dc28505d80377c9281601cb23ef1f0814e08584428f3efa05f","ssdeep":"192:4V3ZO9Gxo9H+wp5qh6BKfMPaB2kXTfwoVqO2Rzhj7TfhBcHEhaI9yLKKD:4V4GxoYwp5wQKfMP6LXT7V+RzhzncpLb","tlshash":"7112bf66ab39a301d66d2bbe5cc59302db15ad10dfe14a3fcb840980370c6f9de5a6c4","first_seen":"2023-11-19T03:02:16Z","last_seen":"2026-06-13T13:54:53.5863Z","times_seen":608,"resource_available":false,"data":null}},"time_used":394,"timings":{"blocked":116,"dns":14,"connect":8,"send":0,"wait":147,"receive":1,"ssl":104},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"storage.googleapis.com/order-ress/order/dotdigital/2d45232a0b2345f1a9190f6222764c83.png?2.2.1772339973820","fqdn":"storage.googleapis.com","domain":"storage.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.251.143.155","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ofgxtw.help/","date":"2026-03-20T18:49:01.093Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"storage.googleapis.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Feb 2026 18:24:04 GMT","end":"Mon, 18 May 2026 18:24:03 GMT"},"fingerprint":{"sha1":"3C:31:BD:D2:EA:D9:B8:8E:67:17:8D:EB:DF:1B:C1:8E:89:2B:5D:7C","sha256":"C6:AF:0F:22:89:A9:F8:1D:21:85:65:8C:F4:6F:61:1C:6B:D2:10:68:AE:65:22:E2:69:75:62:C6:D8:2C:2A:08"}}},"request":{"raw":"GET /order-ress/order/dotdigital/2d45232a0b2345f1a9190f6222764c83.png?2.2.1772339973820 HTTP/1.1\r\nHost: storage.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\nx-guploader-uploadid: AGQBYWxwLMbSu9NPJVuh9JLul2Fk0e8un7MaM3Qcz4yc2-nQVSPn1-MEHbpsTK8zWUoJ9JpD\r\nexpires: Fri, 20 Mar 2026 19:49:01 GMT\r\ndate: Fri, 20 Mar 2026 18:49:01 GMT\r\ncache-control: public, max-age=3600\r\nlast-modified: Fri, 18 Apr 2025 23:29:00 GMT\r\netag: \"670c723abc22056bc5368ca2a97dd6a2\"\r\nx-goog-generation: 1745018940732464\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 25649\r\nx-goog-hash: crc32c=DU6x7w==, md5=ZwxyOrwiBWvFNoyiqX3Wog==\r\nx-goog-storage-class: STANDARD\r\naccept-ranges: bytes\r\ncontent-length: 25649\r\nserver: UploadServer\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]}],"data":{"size":25649,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 250 x 201, 8-bit/color RGBA, non-interlaced","md5":"670c723abc22056bc5368ca2a97dd6a2","sha1":"5ba69b915180c31e4d35a524a9de7b3409ef80a8","sha256":"11192935f626fdb37ddfd8418d754feee326fc6f0a3ce7aa6e61283a820d8b09","sha512":"546901ff0dd66b4768e7560c2ccdceedc3bdac577eea114e600613d98319bde07a84d4fd8a303f4c34c05b3a26c73f03602ba38aaa5436dfcdac6712e0868652","ssdeep":"768:9SDR4lelsfdJTM1JiB+mP9LsYKPlAgezlYWXu23fgiqs:9Alsfd9MqBZ1L5MGgQuW+2vLqs","tlshash":"feb2d076137254ea4442115b97364e812c39f4e3adea6e2c7507a40c7d4a33b30db6bf","first_seen":"2023-11-19T03:02:16Z","last_seen":"2026-06-13T13:54:53.583678Z","times_seen":685,"resource_available":false,"data":null}},"time_used":417,"timings":{"blocked":111,"dns":2,"connect":21,"send":0,"wait":163,"receive":28,"ssl":87},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ofgxtw.help/resource/images/light/enK_.gif","fqdn":"ofgxtw.help","domain":"ofgxtw.help","tld":"help"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ofgxtw.help/","date":"2026-03-20T18:48:59.664Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ofgxtw.help","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Mar 2026 11:30:51 GMT","end":"Mon, 15 Jun 2026 11:30:50 GMT"},"fingerprint":{"sha1":"44:64:B8:D3:FC:DF:BD:23:CB:ED:B7:16:5D:CA:F8:37:C4:6D:B8:D1","sha256":"EC:B7:49:85:AC:72:E4:BD:0F:B9:82:DC:5D:1D:0C:E0:03:1E:66:EC:CC:0D:25:BD:69:C7:15:D6:A7:12:9A:E3"}}},"request":{"raw":"GET /resource/images/light/enK_.gif HTTP/1.1\r\nHost: ofgxtw.help\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: server_name_session=b3874cde180056c36016bf8f86315873\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 20 Mar 2026 18:49:00 GMT\r\ncontent-type: image/gif\r\nserver: cloudflare\r\nlast-modified: Sun, 01 Mar 2026 05:39:10 GMT\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69a3d0fe-53921\"\r\nexpires: Sun, 19 Apr 2026 18:48:59 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IoNFzrIAHmrSs3veGr%2FGq%2F1sR0909r6v%2Bppb1S%2BfaJ525ZA%2BgXLWynF42GMUAG%2BkQ3jMB%2Be5HRy8ZIRlN%2B%2FyIJuU0QezGOMtbQ85\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9df6e4ecfafade91-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":342305,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1200 x 800","md5":"0c213c1a489e987b78d7328cfe1bd840","sha1":"41e5a53e41ffe0cc4c99e8e98e0eb750117e9d18","sha256":"a4594eed78ebd1cb2ad30a28e026fad3c9046ae5b1aa71dec4c6b9702c12bbf5","sha512":"4da3afc8eb4803cff493835c4cc85ab57fc816f70943978e502b55736ada97b1858a8f1b1a6e65f150d266f1c42bf570ab441e951217aee4f2801a1262e3118d","ssdeep":"6144:2E/igWxC6ej+F9A18h7+Zxuvve8n37lm4Wl+DVAXQbo/N2mAbwBI:5/igWo1j+fA107+qrnrlu8ZkN2mtBI","tlshash":"da74021ed12702b19d3f1679f41f5ac8295fa92c05323e278ca0b5e64a4969f39c4ecf","first_seen":"2024-10-31T21:21:10.450985Z","last_seen":"2026-06-07T01:05:18.921393Z","times_seen":193,"resource_available":false,"data":null}},"time_used":1206,"timings":{"blocked":2,"dns":0,"connect":0,"send":0,"wait":414,"receive":790,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-20","alert":"Phishing Block","trigger":"ofgxtw.help","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-20","alert":"Sinkholed","trigger":"ofgxtw.help","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.ofgxtw.help/kline","fqdn":"h5-api.ofgxtw.help","domain":"ofgxtw.help","tld":"help"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ofgxtw.help/","date":"2026-03-20T18:48:59.911Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ofgxtw.help","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Mar 2026 11:30:51 GMT","end":"Mon, 15 Jun 2026 11:30:50 GMT"},"fingerprint":{"sha1":"44:64:B8:D3:FC:DF:BD:23:CB:ED:B7:16:5D:CA:F8:37:C4:6D:B8:D1","sha256":"EC:B7:49:85:AC:72:E4:BD:0F:B9:82:DC:5D:1D:0C:E0:03:1E:66:EC:CC:0D:25:BD:69:C7:15:D6:A7:12:9A:E3"}}},"request":{"raw":"OPTIONS /kline HTTP/1.1\r\nHost: h5-api.ofgxtw.help\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,lang,language\r\nOrigin: https://ofgxtw.help\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 20 Mar 2026 18:49:00 GMT\r\ncontent-length: 0\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://ofgxtw.help\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: content-type, lang, language\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nset-cookie: server_name_session=969f10ab0ecf1323be38f9cf51714704; Max-Age=86400; httponly; path=/\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xKo22hnACCjToimWbtv7lHjAqD4Sx3zyu3OlvojD3X%2BpkSbiN4XC7cDCpv2LExvK3Nv6YeZt7QhQRcFDbaAyydnCD06yjACzEBqQgh%2BZgN0ckA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9df6e4ee5d77de91-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-13T17:33:37.826371Z","times_seen":16391923,"resource_available":true,"data":null}},"time_used":438,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":438,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-20","alert":"Phishing Block","trigger":"h5-api.ofgxtw.help","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-20","alert":"Sinkholed","trigger":"h5-api.ofgxtw.help","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.ofgxtw.help/kline","fqdn":"h5-api.ofgxtw.help","domain":"ofgxtw.help","tld":"help"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ofgxtw.help/","date":"2026-03-20T18:48:59.915Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ofgxtw.help","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Mar 2026 11:30:51 GMT","end":"Mon, 15 Jun 2026 11:30:50 GMT"},"fingerprint":{"sha1":"44:64:B8:D3:FC:DF:BD:23:CB:ED:B7:16:5D:CA:F8:37:C4:6D:B8:D1","sha256":"EC:B7:49:85:AC:72:E4:BD:0F:B9:82:DC:5D:1D:0C:E0:03:1E:66:EC:CC:0D:25:BD:69:C7:15:D6:A7:12:9A:E3"}}},"request":{"raw":"OPTIONS /kline HTTP/1.1\r\nHost: h5-api.ofgxtw.help\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,lang,language\r\nOrigin: https://ofgxtw.help\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 20 Mar 2026 18:49:00 GMT\r\ncontent-length: 0\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://ofgxtw.help\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: content-type, lang, language\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nset-cookie: server_name_session=ad58d77a8fd661df53586700f977ede4; Max-Age=86400; httponly; path=/\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yKZY7%2FUbk%2FXAhiHK75pIwfIYTxwkyioIvIsAgUB6Euahld59vZBq60e%2F9slrCrkCa4vaZz09vKlKWkQcufZh3s6f5%2BzlSe54NLLqfPUBbibilg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9df6e4ee5d7fde91-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-13T17:33:37.826371Z","times_seen":16391923,"resource_available":true,"data":null}},"time_used":408,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":408,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-20","alert":"Phishing Block","trigger":"h5-api.ofgxtw.help","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-20","alert":"Sinkholed","trigger":"h5-api.ofgxtw.help","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.ofgxtw.help/kline","fqdn":"h5-api.ofgxtw.help","domain":"ofgxtw.help","tld":"help"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ofgxtw.help/","date":"2026-03-20T18:48:59.922Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ofgxtw.help","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Mar 2026 11:30:51 GMT","end":"Mon, 15 Jun 2026 11:30:50 GMT"},"fingerprint":{"sha1":"44:64:B8:D3:FC:DF:BD:23:CB:ED:B7:16:5D:CA:F8:37:C4:6D:B8:D1","sha256":"EC:B7:49:85:AC:72:E4:BD:0F:B9:82:DC:5D:1D:0C:E0:03:1E:66:EC:CC:0D:25:BD:69:C7:15:D6:A7:12:9A:E3"}}},"request":{"raw":"OPTIONS /kline HTTP/1.1\r\nHost: h5-api.ofgxtw.help\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,lang,language\r\nOrigin: https://ofgxtw.help\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 20 Mar 2026 18:49:00 GMT\r\ncontent-length: 0\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://ofgxtw.help\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: content-type, lang, language\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nset-cookie: server_name_session=969f10ab0ecf1323be38f9cf51714704; Max-Age=86400; httponly; path=/\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XjbjGfh5JaQGBMJInXHYilGVMpZSdtlIGz4IFwtvCppRkHEG1rjofq75USK6cSn4J7GzqPCNAmfVlVVQpZ1adDLLvy7toR95FXfxKT%2B2CU9cnw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9df6e4ee6d9bde91-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-13T17:33:37.826371Z","times_seen":16391923,"resource_available":true,"data":null}},"time_used":423,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":423,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-20","alert":"Phishing Block","trigger":"h5-api.ofgxtw.help","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-20","alert":"Sinkholed","trigger":"h5-api.ofgxtw.help","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.ofgxtw.help/kline","fqdn":"h5-api.ofgxtw.help","domain":"ofgxtw.help","tld":"help"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ofgxtw.help/","date":"2026-03-20T18:49:00.561Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ofgxtw.help","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Mar 2026 11:30:51 GMT","end":"Mon, 15 Jun 2026 11:30:50 GMT"},"fingerprint":{"sha1":"44:64:B8:D3:FC:DF:BD:23:CB:ED:B7:16:5D:CA:F8:37:C4:6D:B8:D1","sha256":"EC:B7:49:85:AC:72:E4:BD:0F:B9:82:DC:5D:1D:0C:E0:03:1E:66:EC:CC:0D:25:BD:69:C7:15:D6:A7:12:9A:E3"}}},"request":{"raw":"POST /kline HTTP/1.1\r\nHost: h5-api.ofgxtw.help\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nlanguage: en\r\nlang: en\r\nContent-Length: 70\r\nOrigin: https://ofgxtw.help\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":70,"data":"{\"interval\":\"FIVE_MIN\",\"limit\":1000,\"market\":\"binance\",\"symbol\":\"dgb\"}"}},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 20 Mar 2026 18:49:00 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://ofgxtw.help\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nset-cookie: server_name_session=ad58d77a8fd661df53586700f977ede4; Max-Age=86400; httponly; path=/\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IGcAT5Cf2D29yTsKzjIohdnN0MetFb3m8Iwp0Y6JxEBniM6tnDSDEDpevNXnmqFZp5sH4CyYNRLMmf%2BwfhnmUl60Fm8EC9wtyN%2FNNufNQz5AJw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9df6e4f23c23de91-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":39873,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"bbae0d6fcaa7f89737d60f0e28c3f40e","sha1":"e8b2ae4f8519ce550cd95e4c39e2138a3ad5253c","sha256":"1a9a8332c8947846e6cad3731fc619dc9647f70792986620c1b17b843663a73c","sha512":"d76fbb0fc73ed90ecab65fa86b0add051d04301648b3d88ba822b93773ec42672e509d6bd31157ee0f204aeffc93ab4993f9e7d0198754f32a9bfeca5eb90052","ssdeep":"192:PSzhdiPRJQLtFCeLclMC1lcG+G02dc8FQkv9SdZfFo3:47LtUeYLlcafc2tKFo3","tlshash":"3403c6e04a4982c9c8337d8a1fa77eb0494179834acd5dc911f91f3cb950becb2957ae","first_seen":"2026-03-20T18:49:29.060769Z","last_seen":"2026-03-20T18:49:29.060769Z","times_seen":1,"resource_available":false,"data":null}},"time_used":445,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":445,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-20","alert":"Sinkholed","trigger":"h5-api.ofgxtw.help","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-20","alert":"Phishing Block","trigger":"h5-api.ofgxtw.help","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"storage.googleapis.com/order-ress/order/dotdigital/32722e3696ee4bd28f72666655705db9.png?2.2.1772339973820","fqdn":"storage.googleapis.com","domain":"storage.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.251.143.155","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ofgxtw.help/","date":"2026-03-20T18:49:01.091Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"storage.googleapis.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Feb 2026 18:24:04 GMT","end":"Mon, 18 May 2026 18:24:03 GMT"},"fingerprint":{"sha1":"3C:31:BD:D2:EA:D9:B8:8E:67:17:8D:EB:DF:1B:C1:8E:89:2B:5D:7C","sha256":"C6:AF:0F:22:89:A9:F8:1D:21:85:65:8C:F4:6F:61:1C:6B:D2:10:68:AE:65:22:E2:69:75:62:C6:D8:2C:2A:08"}}},"request":{"raw":"GET /order-ress/order/dotdigital/32722e3696ee4bd28f72666655705db9.png?2.2.1772339973820 HTTP/1.1\r\nHost: storage.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\nx-guploader-uploadid: AGQBYWwP2yZ5YMOTtaSuuMF1HC3U82faRf02ghz1z2jpzHhebaJR7j4bekeEEzMbLkKFve_v\r\nexpires: Fri, 20 Mar 2026 19:49:01 GMT\r\ndate: Fri, 20 Mar 2026 18:49:01 GMT\r\ncache-control: public, max-age=3600\r\nlast-modified: Fri, 18 Apr 2025 23:29:50 GMT\r\netag: \"674b0999f6083084a2a4b1d8b20f3bc1\"\r\nx-goog-generation: 1745018990111126\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 2274\r\nx-goog-hash: crc32c=m9RbuA==, md5=Z0sJmfYIMISipLHYsg87wQ==\r\nx-goog-storage-class: STANDARD\r\naccept-ranges: bytes\r\ncontent-length: 2274\r\nserver: UploadServer\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":2274,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 72 x 72, 8-bit/color RGBA, non-interlaced","md5":"674b0999f6083084a2a4b1d8b20f3bc1","sha1":"8d14a526e83604e323723b4d25f8f8066f1ede70","sha256":"632f9cacb6b3fbedece774a8d27c436f37dc359de3bb0872ea19603b70347708","sha512":"4c04d137c2448c0d52a4298c858f95c58116c1d77e75899f5acdf6bb61ed839dbdc99fd5556eb63793b81258de40e515540acaeab007da76664476c9be2e514f","ssdeep":"","tlshash":"cd414bd7c53300ed9128e735b8c3ee819c00628d183bb46b89f5ec60b2346d31a53a98","first_seen":"2024-01-05T03:21:29Z","last_seen":"2026-06-13T13:54:53.591687Z","times_seen":647,"resource_available":false,"data":null}},"time_used":306,"timings":{"blocked":73,"dns":11,"connect":10,"send":0,"wait":148,"receive":0,"ssl":57},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ofgxtw.help/resource/images/light/cfd.svg","fqdn":"ofgxtw.help","domain":"ofgxtw.help","tld":"help"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ofgxtw.help/","date":"2026-03-20T18:48:59.550Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ofgxtw.help","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Mar 2026 11:30:51 GMT","end":"Mon, 15 Jun 2026 11:30:50 GMT"},"fingerprint":{"sha1":"44:64:B8:D3:FC:DF:BD:23:CB:ED:B7:16:5D:CA:F8:37:C4:6D:B8:D1","sha256":"EC:B7:49:85:AC:72:E4:BD:0F:B9:82:DC:5D:1D:0C:E0:03:1E:66:EC:CC:0D:25:BD:69:C7:15:D6:A7:12:9A:E3"}}},"request":{"raw":"GET /resource/images/light/cfd.svg HTTP/1.1\r\nHost: ofgxtw.help\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: server_name_session=b3874cde180056c36016bf8f86315873\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 20 Mar 2026 18:48:59 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Sun, 01 Mar 2026 05:39:10 GMT\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69a3d0fe-4e6\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NkmhDgpEXAup0d%2Bg8LaqM651qEeBrBd3LcwbPy4ioYpY911k5Tgd5XzQulVkyXj3%2BdpNMwC7PZ8floKw6yAH5Q9qQOhEVb30ZQKg\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9df6e4ec39b9de91-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1254,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"b9115373205114c25f64dce056a8be78","sha1":"13d9c2d8ebedda0987493bec5ce299632f7acbab","sha256":"22269448e0257c0fd850d7c54387dba3d5db86bd4f3bbf651038653801c74a05","sha512":"399719ccaa22a2f3800f0daf2a973abdbdb84b6a8f24f546d49012362852772865eb78c94870511816b777f0354a9d1a291b39737ecab05f77f4cb322647464a","ssdeep":"","tlshash":"0821325b7386f190c5475b90c463b1a230e975faaf04c1958e49efc5a20e0bf48ceea0","first_seen":"2025-09-28T11:01:39.572211Z","last_seen":"2026-06-01T14:38:39.455097Z","times_seen":78,"resource_available":false,"data":null}},"time_used":412,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":412,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-20","alert":"Sinkholed","trigger":"ofgxtw.help","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-20","alert":"Phishing Block","trigger":"ofgxtw.help","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.ofgxtw.help/kline","fqdn":"h5-api.ofgxtw.help","domain":"ofgxtw.help","tld":"help"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ofgxtw.help/","date":"2026-03-20T18:48:59.904Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ofgxtw.help","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Mar 2026 11:30:51 GMT","end":"Mon, 15 Jun 2026 11:30:50 GMT"},"fingerprint":{"sha1":"44:64:B8:D3:FC:DF:BD:23:CB:ED:B7:16:5D:CA:F8:37:C4:6D:B8:D1","sha256":"EC:B7:49:85:AC:72:E4:BD:0F:B9:82:DC:5D:1D:0C:E0:03:1E:66:EC:CC:0D:25:BD:69:C7:15:D6:A7:12:9A:E3"}}},"request":{"raw":"OPTIONS /kline HTTP/1.1\r\nHost: h5-api.ofgxtw.help\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,lang,language\r\nOrigin: https://ofgxtw.help\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 20 Mar 2026 18:49:00 GMT\r\ncontent-length: 0\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://ofgxtw.help\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: content-type, lang, language\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nset-cookie: server_name_session=ad58d77a8fd661df53586700f977ede4; Max-Age=86400; httponly; path=/\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dqTDlUtzVdW%2BNlfWcBheN3RgngXlWtFYgbwddpSdGva10q%2FjskfcVoyRWKsnwtyYzl%2BeZeI5XZplc08kz84W2ybE6th5dcBJkRW4js2DbtdIfA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9df6e4ee5d65de91-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-13T17:33:37.826371Z","times_seen":16391923,"resource_available":true,"data":null}},"time_used":409,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":409,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-20","alert":"Phishing Block","trigger":"h5-api.ofgxtw.help","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-20","alert":"Sinkholed","trigger":"h5-api.ofgxtw.help","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.ofgxtw.help/kline","fqdn":"h5-api.ofgxtw.help","domain":"ofgxtw.help","tld":"help"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ofgxtw.help/","date":"2026-03-20T18:48:59.974Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ofgxtw.help","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Mar 2026 11:30:51 GMT","end":"Mon, 15 Jun 2026 11:30:50 GMT"},"fingerprint":{"sha1":"44:64:B8:D3:FC:DF:BD:23:CB:ED:B7:16:5D:CA:F8:37:C4:6D:B8:D1","sha256":"EC:B7:49:85:AC:72:E4:BD:0F:B9:82:DC:5D:1D:0C:E0:03:1E:66:EC:CC:0D:25:BD:69:C7:15:D6:A7:12:9A:E3"}}},"request":{"raw":"OPTIONS /kline HTTP/1.1\r\nHost: h5-api.ofgxtw.help\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,lang,language\r\nOrigin: https://ofgxtw.help\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 20 Mar 2026 18:49:00 GMT\r\ncontent-length: 0\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://ofgxtw.help\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: content-type, lang, language\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nset-cookie: server_name_session=ad58d77a8fd661df53586700f977ede4; Max-Age=86400; httponly; path=/\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=f7TWb9UHB9zF1shQE3X7Gv1%2BfAbaa0wdwNWIL7UhD4gaY7fjWs9QGZkwT1tHrDyoIAzWtPhqP4HRzfQBVktGtjuLMglHKogtEhB2xZfXCuDf9Q%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9df6e4eebe28de91-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-13T17:33:37.826371Z","times_seen":16391923,"resource_available":true,"data":null}},"time_used":423,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":423,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-20","alert":"Phishing Block","trigger":"h5-api.ofgxtw.help","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-20","alert":"Sinkholed","trigger":"h5-api.ofgxtw.help","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.ofgxtw.help/kline","fqdn":"h5-api.ofgxtw.help","domain":"ofgxtw.help","tld":"help"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ofgxtw.help/","date":"2026-03-20T18:49:00.539Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ofgxtw.help","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Mar 2026 11:30:51 GMT","end":"Mon, 15 Jun 2026 11:30:50 GMT"},"fingerprint":{"sha1":"44:64:B8:D3:FC:DF:BD:23:CB:ED:B7:16:5D:CA:F8:37:C4:6D:B8:D1","sha256":"EC:B7:49:85:AC:72:E4:BD:0F:B9:82:DC:5D:1D:0C:E0:03:1E:66:EC:CC:0D:25:BD:69:C7:15:D6:A7:12:9A:E3"}}},"request":{"raw":"POST /kline HTTP/1.1\r\nHost: h5-api.ofgxtw.help\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nlanguage: en\r\nlang: en\r\nContent-Length: 70\r\nOrigin: https://ofgxtw.help\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":70,"data":"{\"interval\":\"FIVE_MIN\",\"limit\":1000,\"market\":\"binance\",\"symbol\":\"trx\"}"}},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 20 Mar 2026 18:49:00 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://ofgxtw.help\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nset-cookie: server_name_session=ad58d77a8fd661df53586700f977ede4; Max-Age=86400; httponly; path=/\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7xwkZCTYeBtLypDx5Wl0paIU%2FUQ2Pg6TiP2bGxZI2tB5b0cL8bnzyhOsiHhQk0ZVJ799dzOuw6QRDS8HwLH8dlI%2BZZwG3wcRccF1%2BphTadUYug%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9df6e4f20bd1de91-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":38393,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"2542c7692936122537d7c208b6a7dc5f","sha1":"d532ca67d4aadb24cbe9c2683abccc0ff4504567","sha256":"a0e8bd4515070a50a752c81b9460aaf2891dbb5c4623e57cc0860b2117fc507f","sha512":"d8c4fc0d19f4a4deb18a54ace891eef79c71d40b0c99b0c7d8acde7bd44cdab93e7568084e8ca6cb8291bf4949c9d010250e805ffa4302478695ab96921925de","ssdeep":"384:YBDqnTHDUXZVIIL7EoYYGisEdIQWNy7Icvc+sLcgn7:YBOUXDIa7EoRGisEQyscvc+sLcgn7","tlshash":"b403a6304a84c658c935bc9a4ff7bee0194739cb5ecc1cc572fd1d902a546f8a291bba","first_seen":"2026-03-20T18:49:29.064644Z","last_seen":"2026-03-20T18:49:29.064644Z","times_seen":1,"resource_available":false,"data":null}},"time_used":289,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":289,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-20","alert":"Sinkholed","trigger":"h5-api.ofgxtw.help","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-20","alert":"Phishing Block","trigger":"h5-api.ofgxtw.help","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.ofgxtw.help/kline","fqdn":"h5-api.ofgxtw.help","domain":"ofgxtw.help","tld":"help"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ofgxtw.help/","date":"2026-03-20T18:49:00.563Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ofgxtw.help","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Mar 2026 11:30:51 GMT","end":"Mon, 15 Jun 2026 11:30:50 GMT"},"fingerprint":{"sha1":"44:64:B8:D3:FC:DF:BD:23:CB:ED:B7:16:5D:CA:F8:37:C4:6D:B8:D1","sha256":"EC:B7:49:85:AC:72:E4:BD:0F:B9:82:DC:5D:1D:0C:E0:03:1E:66:EC:CC:0D:25:BD:69:C7:15:D6:A7:12:9A:E3"}}},"request":{"raw":"POST /kline HTTP/1.1\r\nHost: h5-api.ofgxtw.help\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nlanguage: en\r\nlang: en\r\nContent-Length: 69\r\nOrigin: https://ofgxtw.help\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":69,"data":"{\"interval\":\"FIVE_MIN\",\"limit\":1000,\"market\":\"mt5\",\"symbol\":\"audjpy\"}"}},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 20 Mar 2026 18:49:00 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://ofgxtw.help\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nset-cookie: server_name_session=969f10ab0ecf1323be38f9cf51714704; Max-Age=86400; httponly; path=/\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FgjN5N7%2BdkZTzhcH9KuW2mxqqDCuMM1pFk9ejLhNWHhpfXhHYwwup80vbMr3WRKupe21w4%2F6kPRVZ8C%2BUmNHsaaGMLnyh8xE%2BGcwiA%2BwZ5PJmA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9df6e4f23c29de91-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":45100,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"57dbcb30386ea3b7e5672b2388beb9f6","sha1":"4db61a6d4660bdfb3d7b071a6df03f620e1115eb","sha256":"cad28309059b097b941c62a2101449a5d3b16862d993725e846d79e781dea464","sha512":"f69137e8c305f3ec46da16d7776897961319f27d714c706d60d808d421754c3aabd16fe56581ef0a7c084fe19d7957805455a50ef8f44f2afd0aef4105d9ecde","ssdeep":"768:9nkYZuyHiZ+yqdTjBPgUJe36Wum/LUV6HW0PcXi7gXPwxo5Q4sNMNHb/l4B:mGyohYUDE/LA6HW0PJcYxoy4UEp4B","tlshash":"5013c5358fcae179c4f54cc11f83bfec8d6635f25eee2d4106991a01dd50ba8a348b9a","first_seen":"2026-03-20T18:49:29.069058Z","last_seen":"2026-03-20T18:49:29.069058Z","times_seen":1,"resource_available":false,"data":null}},"time_used":266,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":266,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-20","alert":"Sinkholed","trigger":"h5-api.ofgxtw.help","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-20","alert":"Phishing Block","trigger":"h5-api.ofgxtw.help","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ofgxtw.help/resource/images/light/contract.svg","fqdn":"ofgxtw.help","domain":"ofgxtw.help","tld":"help"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ofgxtw.help/","date":"2026-03-20T18:48:59.543Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ofgxtw.help","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Mar 2026 11:30:51 GMT","end":"Mon, 15 Jun 2026 11:30:50 GMT"},"fingerprint":{"sha1":"44:64:B8:D3:FC:DF:BD:23:CB:ED:B7:16:5D:CA:F8:37:C4:6D:B8:D1","sha256":"EC:B7:49:85:AC:72:E4:BD:0F:B9:82:DC:5D:1D:0C:E0:03:1E:66:EC:CC:0D:25:BD:69:C7:15:D6:A7:12:9A:E3"}}},"request":{"raw":"GET /resource/images/light/contract.svg HTTP/1.1\r\nHost: ofgxtw.help\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: server_name_session=b3874cde180056c36016bf8f86315873\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 20 Mar 2026 18:48:59 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Sun, 01 Mar 2026 05:39:10 GMT\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69a3d0fe-594\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XOGoAssXIx2L8KAkR8lpjwm0vEBsHM8PTkhhioGAZQtzG4mKSDI%2BxeqwNs95VmpWuoi5AaVDWIMwFwqAQwjf9ZdypQWcQ7Kcag7q\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9df6e4ec29a4de91-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1428,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"efaacf17d8d90547953a7a9dd61ec2b4","sha1":"e3717b22a97be0eb581782ec087beb5b56ad036c","sha256":"8dc73b270dc5ae9a60c94191834deb88dbe59950f72be72bdda75ea3618facd0","sha512":"5cc2004dd6c6d614dc980531e6591e8f408dfcb0eb6e632da58375088015f761f630743b581225655dccd32464b2311b5513d2a70d43c4b5bd3ee18033d929fc","ssdeep":"","tlshash":"dc2141ebe7d8b5d0e905e780c91592a1b5b931f93b7e4b54ca90af08331c06cc88ec54","first_seen":"2025-09-28T11:01:39.541404Z","last_seen":"2026-06-01T14:38:39.451045Z","times_seen":78,"resource_available":false,"data":null}},"time_used":430,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":430,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-20","alert":"Sinkholed","trigger":"ofgxtw.help","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-20","alert":"Phishing Block","trigger":"ofgxtw.help","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ofgxtw.help/resource/images/light/cooperative2.svg","fqdn":"ofgxtw.help","domain":"ofgxtw.help","tld":"help"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ofgxtw.help/","date":"2026-03-20T18:48:59.699Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ofgxtw.help","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Mar 2026 11:30:51 GMT","end":"Mon, 15 Jun 2026 11:30:50 GMT"},"fingerprint":{"sha1":"44:64:B8:D3:FC:DF:BD:23:CB:ED:B7:16:5D:CA:F8:37:C4:6D:B8:D1","sha256":"EC:B7:49:85:AC:72:E4:BD:0F:B9:82:DC:5D:1D:0C:E0:03:1E:66:EC:CC:0D:25:BD:69:C7:15:D6:A7:12:9A:E3"}}},"request":{"raw":"GET /resource/images/light/cooperative2.svg HTTP/1.1\r\nHost: ofgxtw.help\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: server_name_session=b3874cde180056c36016bf8f86315873\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 20 Mar 2026 18:49:00 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Sun, 01 Mar 2026 05:39:10 GMT\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69a3d0fe-84f0\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fWbs23sBZnMtken06sQaNkop0wZydD5aI%2F9MdQqmX%2Bh9GQmvKkGhpTNFCNuYAP4K6%2BEEN385tQ3weERsjpVZVWxh4VfYVFNNxV9a\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9df6e4ed1b3dde91-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":34032,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"fc6256de7476e170f90ebf32758d40a1","sha1":"3acf9122d542d0db54b5f41f5ee0294d3f20823e","sha256":"03e40a172533b8d9fc4a1eff261af639cbfe5ba5a38bacf543e5924fed4ae7e9","sha512":"e68aaaeb9754eb430b00c049a3ba8130f72f746ee099af796d7795df90e6c71b6e6472ee63e54c53b5cc19059e4ab9ea45d279f7726b292261235298edfac324","ssdeep":"768:Jfs921W6+Jr1T/s8msmsCdvPtvMW7MOKKiq2d6Y/ML0XwUwCvrD:Jk9217+x1Tk8mDsaJx7MOlx2Mmk0Lrvn","tlshash":"d1e2e078f30a1c4ed7d1a64d6725ef68bf07a52fe3acd603f908a6014187d835a790da","first_seen":"2026-02-24T16:10:35.2349Z","last_seen":"2026-06-01T14:38:39.49734Z","times_seen":62,"resource_available":false,"data":null}},"time_used":631,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":429,"receive":202,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-20","alert":"Phishing Block","trigger":"ofgxtw.help","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-20","alert":"Sinkholed","trigger":"ofgxtw.help","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.ofgxtw.help/kline","fqdn":"h5-api.ofgxtw.help","domain":"ofgxtw.help","tld":"help"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ofgxtw.help/","date":"2026-03-20T18:48:59.955Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ofgxtw.help","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Mar 2026 11:30:51 GMT","end":"Mon, 15 Jun 2026 11:30:50 GMT"},"fingerprint":{"sha1":"44:64:B8:D3:FC:DF:BD:23:CB:ED:B7:16:5D:CA:F8:37:C4:6D:B8:D1","sha256":"EC:B7:49:85:AC:72:E4:BD:0F:B9:82:DC:5D:1D:0C:E0:03:1E:66:EC:CC:0D:25:BD:69:C7:15:D6:A7:12:9A:E3"}}},"request":{"raw":"OPTIONS /kline HTTP/1.1\r\nHost: h5-api.ofgxtw.help\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,lang,language\r\nOrigin: https://ofgxtw.help\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 20 Mar 2026 18:49:00 GMT\r\ncontent-length: 0\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://ofgxtw.help\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: content-type, lang, language\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nset-cookie: server_name_session=ad58d77a8fd661df53586700f977ede4; Max-Age=86400; httponly; path=/\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nYvuSbNhquVbZUhcXlWXczqhNY8woAvkoRECYaA19Seae%2Fo17ANTVcmhTCJT4l57AkVkaaM8M6UuLfDg43aCEHe62cK%2BL0vraOvkV8N80FWCag%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9df6e4ee8dd1de91-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-13T17:33:37.826371Z","times_seen":16391923,"resource_available":true,"data":null}},"time_used":424,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":424,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-20","alert":"Sinkholed","trigger":"h5-api.ofgxtw.help","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-20","alert":"Phishing Block","trigger":"h5-api.ofgxtw.help","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"storage.googleapis.com/order-ress/order/dotdigital/9669976d5d024b4f9ae92d2f01118bfa.png?2.2.1772339973820","fqdn":"storage.googleapis.com","domain":"storage.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.251.143.155","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ofgxtw.help/","date":"2026-03-20T18:49:01.100Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"storage.googleapis.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Feb 2026 18:24:04 GMT","end":"Mon, 18 May 2026 18:24:03 GMT"},"fingerprint":{"sha1":"3C:31:BD:D2:EA:D9:B8:8E:67:17:8D:EB:DF:1B:C1:8E:89:2B:5D:7C","sha256":"C6:AF:0F:22:89:A9:F8:1D:21:85:65:8C:F4:6F:61:1C:6B:D2:10:68:AE:65:22:E2:69:75:62:C6:D8:2C:2A:08"}}},"request":{"raw":"GET /order-ress/order/dotdigital/9669976d5d024b4f9ae92d2f01118bfa.png?2.2.1772339973820 HTTP/1.1\r\nHost: storage.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\nx-guploader-uploadid: AGQBYWzGbmaWh1s4x-YEbji44fi4Z0zpaBK22oEOOsAAFD6miZ3JpenLjtJWDpqqhGqqJW_U\r\nexpires: Fri, 20 Mar 2026 19:49:01 GMT\r\ndate: Fri, 20 Mar 2026 18:49:01 GMT\r\ncache-control: public, max-age=3600\r\nlast-modified: Fri, 18 Apr 2025 23:52:33 GMT\r\netag: \"e85cb050345d627e3fe342aa14eba1c5\"\r\nx-goog-generation: 1745020353527348\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 1265\r\nx-goog-hash: crc32c=gdb0vQ==, md5=6FywUDRdYn4/40KqFOuhxQ==\r\nx-goog-storage-class: STANDARD\r\naccept-ranges: bytes\r\ncontent-length: 1265\r\nserver: UploadServer\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":1265,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 44 x 44, 8-bit/color RGBA, non-interlaced","md5":"e85cb050345d627e3fe342aa14eba1c5","sha1":"966c36a1be038fd0bb9673e455ff3b6188f47453","sha256":"e9a792d1a596130e30d7b945e466f2691a563090f1ef06fe06fec57d7193e0e8","sha512":"3c97550a30076a06c1c785192fae5a5fcdc73aef866a69df4c5c4c891f35add2e58f895c7d671faec539ec3836898283385311e7479c7f4ef9ba7a6dd65893a7","ssdeep":"","tlshash":"0521b717faffd94437722d83839a85aeb07726082e004809345e49c5ec2a8885ceef44","first_seen":"2024-12-03T23:58:43.646323Z","last_seen":"2026-06-04T15:28:13.463069Z","times_seen":116,"resource_available":false,"data":null}},"time_used":210,"timings":{"blocked":68,"dns":0,"connect":0,"send":0,"wait":142,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.ofgxtw.help/api/common/getMt5Amount?coin=xau","fqdn":"h5-api.ofgxtw.help","domain":"ofgxtw.help","tld":"help"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ofgxtw.help/","date":"2026-03-20T18:48:58.847Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ofgxtw.help","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Mar 2026 11:30:51 GMT","end":"Mon, 15 Jun 2026 11:30:50 GMT"},"fingerprint":{"sha1":"44:64:B8:D3:FC:DF:BD:23:CB:ED:B7:16:5D:CA:F8:37:C4:6D:B8:D1","sha256":"EC:B7:49:85:AC:72:E4:BD:0F:B9:82:DC:5D:1D:0C:E0:03:1E:66:EC:CC:0D:25:BD:69:C7:15:D6:A7:12:9A:E3"}}},"request":{"raw":"OPTIONS /api/common/getMt5Amount?coin=xau HTTP/1.1\r\nHost: h5-api.ofgxtw.help\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,lang\r\nOrigin: https://ofgxtw.help\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 20 Mar 2026 18:48:59 GMT\r\ncontent-length: 0\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://ofgxtw.help\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: content-type, lang\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nset-cookie: server_name_session=8fac0f95e09a3645ff0cd72e07dfadaf; Max-Age=86400; httponly; path=/\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qwxqlGHn9nE4%2FgeXxFKUDy1d%2BKxnH9TpDL8HQs%2FnESI8WaY5odjm0WcAzO6g7zUreKKzQEgV82vP1FRaQWRll9ROYoQLFWX%2FTfOp2mFufyzldw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9df6e4e7da99de91-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-13T17:33:37.826371Z","times_seen":16391923,"resource_available":true,"data":null}},"time_used":221,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":221,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-20","alert":"Phishing Block","trigger":"h5-api.ofgxtw.help","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-20","alert":"Sinkholed","trigger":"h5-api.ofgxtw.help","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ofgxtw.help/resource/svg/dark/dui.svg?2.2.1772339973820","fqdn":"ofgxtw.help","domain":"ofgxtw.help","tld":"help"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ofgxtw.help/","date":"2026-03-20T18:48:59.559Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ofgxtw.help","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Mar 2026 11:30:51 GMT","end":"Mon, 15 Jun 2026 11:30:50 GMT"},"fingerprint":{"sha1":"44:64:B8:D3:FC:DF:BD:23:CB:ED:B7:16:5D:CA:F8:37:C4:6D:B8:D1","sha256":"EC:B7:49:85:AC:72:E4:BD:0F:B9:82:DC:5D:1D:0C:E0:03:1E:66:EC:CC:0D:25:BD:69:C7:15:D6:A7:12:9A:E3"}}},"request":{"raw":"GET /resource/svg/dark/dui.svg?2.2.1772339973820 HTTP/1.1\r\nHost: ofgxtw.help\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: server_name_session=b3874cde180056c36016bf8f86315873\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 20 Mar 2026 18:48:59 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Sun, 01 Mar 2026 05:39:10 GMT\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69a3d0fe-940\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NlR2rP15NGEs7m8YsindCJME7yQDOq%2BP2N2Ylrolx3z3j%2FI5QvQ8054kRtBOQOu6lyfbPpXVshfc2hNeoDv7SlX8vBdv9%2FaN0kN9\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9df6e4ec49dcde91-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2368,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"fedf984d20136bd338292c02f3678abc","sha1":"28408456ad6526e0e430a6eac75418fdb287cc04","sha256":"23cf0fb591ed527fa662ad48922a235379400ebacc2668334b5f41a148fd997e","sha512":"4d30fdecfec2b773ccfa10cfaaa9fc1a28f547603570757dfa77b0cceeacbd335382a73cd5f7f9a06ff3e3a52d5e895b1f339d6f2108b3719e1526aab6d8f15d","ssdeep":"","tlshash":"834130ea13bc45b8e406839453ba796ae26531eb2480d438f6cc1b24cf230b709c64af","first_seen":"2026-02-24T16:10:35.275496Z","last_seen":"2026-06-01T14:38:39.507418Z","times_seen":62,"resource_available":false,"data":null}},"time_used":443,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":443,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-20","alert":"Phishing Block","trigger":"ofgxtw.help","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-20","alert":"Sinkholed","trigger":"ofgxtw.help","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.ofgxtw.help/kline","fqdn":"h5-api.ofgxtw.help","domain":"ofgxtw.help","tld":"help"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ofgxtw.help/","date":"2026-03-20T18:48:59.896Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ofgxtw.help","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Mar 2026 11:30:51 GMT","end":"Mon, 15 Jun 2026 11:30:50 GMT"},"fingerprint":{"sha1":"44:64:B8:D3:FC:DF:BD:23:CB:ED:B7:16:5D:CA:F8:37:C4:6D:B8:D1","sha256":"EC:B7:49:85:AC:72:E4:BD:0F:B9:82:DC:5D:1D:0C:E0:03:1E:66:EC:CC:0D:25:BD:69:C7:15:D6:A7:12:9A:E3"}}},"request":{"raw":"OPTIONS /kline HTTP/1.1\r\nHost: h5-api.ofgxtw.help\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,lang,language\r\nOrigin: https://ofgxtw.help\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 20 Mar 2026 18:49:00 GMT\r\ncontent-length: 0\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://ofgxtw.help\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: content-type, lang, language\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nset-cookie: server_name_session=ad58d77a8fd661df53586700f977ede4; Max-Age=86400; httponly; path=/\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VinP1ugIZ6Sj3rg%2Bx4I3c%2BFyuiJBAYMJF6s7Ql2oC2pmue72Otdqg3sgqzDPcxNybsGb8tVzd%2FG2pPhiMGLJkp2C2HZGbLgw7PgHGs11GlbMbw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9df6e4ee4d56de91-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-13T17:33:37.826371Z","times_seen":16391923,"resource_available":true,"data":null}},"time_used":423,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":423,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-20","alert":"Sinkholed","trigger":"h5-api.ofgxtw.help","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-20","alert":"Phishing Block","trigger":"h5-api.ofgxtw.help","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.ofgxtw.help/kline","fqdn":"h5-api.ofgxtw.help","domain":"ofgxtw.help","tld":"help"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ofgxtw.help/","date":"2026-03-20T18:48:59.971Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ofgxtw.help","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Mar 2026 11:30:51 GMT","end":"Mon, 15 Jun 2026 11:30:50 GMT"},"fingerprint":{"sha1":"44:64:B8:D3:FC:DF:BD:23:CB:ED:B7:16:5D:CA:F8:37:C4:6D:B8:D1","sha256":"EC:B7:49:85:AC:72:E4:BD:0F:B9:82:DC:5D:1D:0C:E0:03:1E:66:EC:CC:0D:25:BD:69:C7:15:D6:A7:12:9A:E3"}}},"request":{"raw":"OPTIONS /kline HTTP/1.1\r\nHost: h5-api.ofgxtw.help\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,lang,language\r\nOrigin: https://ofgxtw.help\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 20 Mar 2026 18:49:00 GMT\r\ncontent-length: 0\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://ofgxtw.help\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: content-type, lang, language\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nset-cookie: server_name_session=ad58d77a8fd661df53586700f977ede4; Max-Age=86400; httponly; path=/\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1ydwHfxoCf9rXiQisBFrlgoqvdlJgQtSmdabct01wR9%2Be9mrscZCTrTfT%2F9y3x5%2FEad6OOkCrsNw01yuQswekyLw34F7k2WV9s8BalfFRq3gmg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9df6e4eebe1dde91-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-13T17:33:37.826371Z","times_seen":16391923,"resource_available":true,"data":null}},"time_used":423,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":423,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-20","alert":"Sinkholed","trigger":"h5-api.ofgxtw.help","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-20","alert":"Phishing Block","trigger":"h5-api.ofgxtw.help","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.ofgxtw.help/kline","fqdn":"h5-api.ofgxtw.help","domain":"ofgxtw.help","tld":"help"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ofgxtw.help/","date":"2026-03-20T18:49:00.557Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ofgxtw.help","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Mar 2026 11:30:51 GMT","end":"Mon, 15 Jun 2026 11:30:50 GMT"},"fingerprint":{"sha1":"44:64:B8:D3:FC:DF:BD:23:CB:ED:B7:16:5D:CA:F8:37:C4:6D:B8:D1","sha256":"EC:B7:49:85:AC:72:E4:BD:0F:B9:82:DC:5D:1D:0C:E0:03:1E:66:EC:CC:0D:25:BD:69:C7:15:D6:A7:12:9A:E3"}}},"request":{"raw":"POST /kline HTTP/1.1\r\nHost: h5-api.ofgxtw.help\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nlanguage: en\r\nlang: en\r\nContent-Length: 71\r\nOrigin: https://ofgxtw.help\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":71,"data":"{\"interval\":\"FIVE_MIN\",\"limit\":1000,\"market\":\"binance\",\"symbol\":\"link\"}"}},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 20 Mar 2026 18:49:00 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://ofgxtw.help\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nset-cookie: server_name_session=969f10ab0ecf1323be38f9cf51714704; Max-Age=86400; httponly; path=/\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2F4T00O3tkON15kdos%2BSfP6%2FXTnA%2FhWrlKt0jnVSGuJPJwF9gd2Wt4OFzYyjfvQ4Qq7ZVB%2BUhIveMpC914tvmUQoWTqEWBRkCUarIKC1QdWey2A%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9df6e4f22c14de91-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":34096,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"5ba2a3c03e5de9e100f88c9724a70e05","sha1":"8735ac235401f30672812ad30f294c7f8202a6a4","sha256":"57e1f230ca4dd71077d9075a931e0a1d672534124c606551ad9803ab3ffe4bcb","sha512":"a53c40c3e9a3adc09c0fd5666b9d9fc46ed873ddb8ecbabfa3b963bd0543865523526e0e8635470dc62642c458ec85e85979e8407b267838ae9adef61541703a","ssdeep":"768:jQwx+dHu9EX1YtxLDQ+AdrZqceCmf5FLW78UC5TGoz:OuL5FtX","tlshash":"53e240308b889989d434ccbb5fbbbed01945b7d74ecc0dc8cae85711ea60a30d175b9a","first_seen":"2026-03-20T18:49:29.083467Z","last_seen":"2026-03-20T18:49:29.083467Z","times_seen":1,"resource_available":false,"data":null}},"time_used":453,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":453,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-20","alert":"Sinkholed","trigger":"h5-api.ofgxtw.help","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-20","alert":"Phishing Block","trigger":"h5-api.ofgxtw.help","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ofgxtw.help/platform/twfxcc/logo_144.png?2.2.1772339973820","fqdn":"ofgxtw.help","domain":"ofgxtw.help","tld":"help"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ofgxtw.help/","date":"2026-03-20T18:48:58.233Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ofgxtw.help","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Mar 2026 11:30:51 GMT","end":"Mon, 15 Jun 2026 11:30:50 GMT"},"fingerprint":{"sha1":"44:64:B8:D3:FC:DF:BD:23:CB:ED:B7:16:5D:CA:F8:37:C4:6D:B8:D1","sha256":"EC:B7:49:85:AC:72:E4:BD:0F:B9:82:DC:5D:1D:0C:E0:03:1E:66:EC:CC:0D:25:BD:69:C7:15:D6:A7:12:9A:E3"}}},"request":{"raw":"GET /platform/twfxcc/logo_144.png?2.2.1772339973820 HTTP/1.1\r\nHost: ofgxtw.help\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: server_name_session=b3874cde180056c36016bf8f86315873\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 20 Mar 2026 18:48:58 GMT\r\ncontent-type: image/png\r\nserver: cloudflare\r\nlast-modified: Sun, 01 Mar 2026 05:39:10 GMT\r\npriority: u=6,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69a3d0fe-6d20\"\r\nexpires: Sun, 19 Apr 2026 18:48:58 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jOTBzy4nYfqBKH97Jdic8d2RzzTDlHVUM3532jt2yrwjjEmY67fZD4wz0JYzHAJZKx%2BDQIcyvROKgnQALG9DRt65RvFAknbKN%2Bln\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9df6e4e3fc77de91-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":27936,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 144 x 144, 8-bit/color RGBA, non-interlaced","md5":"acedc2fc84b1d368ef0751d235635c91","sha1":"bf33aef8b2240f957faabe248e34cc5628ce94b1","sha256":"cebc2d9fab508f2ad82dd2f9116f47980fd633f6f0e526d49bf58c1bf2ed7af0","sha512":"78a88144cafce742f7ed1fbae7e3a9ad90258f27e3516ef36dc5709d366c27020dde2ecde3b23b08c1da29a449783dd46ed88dbb59e50be875341de9afe4b307","ssdeep":"384:Jn0UpAPT3/+qdnTsa3L58FvT7vRehS3ihDnA1WpyTQ2mLPsS3kXsL6kuaqTTfT:J0UpQff5M5N3+ACukEEf67r","tlshash":"67c2e1bd1a81c560760d6d47d6958132c14bf012fb968ec6d11ee6fe9e24c588a8f3cb","first_seen":"2025-11-01T17:44:45.832117Z","last_seen":"2026-03-20T19:46:41.797658Z","times_seen":28,"resource_available":false,"data":null}},"time_used":633,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":431,"receive":202,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-20","alert":"Phishing Block","trigger":"ofgxtw.help","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-20","alert":"Sinkholed","trigger":"ofgxtw.help","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.ofgxtw.help/api/common/getMt5Amount?coin=xau","fqdn":"h5-api.ofgxtw.help","domain":"ofgxtw.help","tld":"help"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ofgxtw.help/","date":"2026-03-20T18:48:59.075Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ofgxtw.help","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Mar 2026 11:30:51 GMT","end":"Mon, 15 Jun 2026 11:30:50 GMT"},"fingerprint":{"sha1":"44:64:B8:D3:FC:DF:BD:23:CB:ED:B7:16:5D:CA:F8:37:C4:6D:B8:D1","sha256":"EC:B7:49:85:AC:72:E4:BD:0F:B9:82:DC:5D:1D:0C:E0:03:1E:66:EC:CC:0D:25:BD:69:C7:15:D6:A7:12:9A:E3"}}},"request":{"raw":"POST /api/common/getMt5Amount?coin=xau HTTP/1.1\r\nHost: h5-api.ofgxtw.help\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nlang: en-US\r\nContent-Length: 2\r\nOrigin: https://ofgxtw.help\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":2,"data":"{}"}},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 20 Mar 2026 18:48:59 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://ofgxtw.help\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nset-cookie: server_name_session=969f10ab0ecf1323be38f9cf51714704; Max-Age=86400; httponly; path=/\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=k4%2B%2B5oMDEEqjwjcdUPYur0JI77NM2Rpw3VcurtpK43EtfpeygTYKbaa8mUJCftUJaWT8CHBotj1d80gmg7j6lNjepo51BXQc6ijNQYi6vF0c%2Bg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9df6e4e93ca9de91-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":69,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"47afe0b586a5f3d1a6d0418cdd9c5223","sha1":"861cd1420f254dcfcc72e206fab251e3b72c9eac","sha256":"e3780317793f239655405d0ad2743ae36ebae90d8dcb6582c33b39e2adaa0cab","sha512":"f509fe8c993db909e5846f2c2d54af64fc01e5704d38955e0d8774d6175dc37bb96b1d5a1d1f3664f6ece63d81110ae66f1788575a1bc8a9548662b63b76797e","ssdeep":"","tlshash":"9da02228ec0c80c220030082220b030808f030ac22000b08fe8ee230c0082ba3083888","first_seen":"2026-03-20T18:49:29.086307Z","last_seen":"2026-03-20T18:49:29.086307Z","times_seen":1,"resource_available":false,"data":null}},"time_used":219,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":219,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-20","alert":"Sinkholed","trigger":"h5-api.ofgxtw.help","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-20","alert":"Phishing Block","trigger":"h5-api.ofgxtw.help","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ofgxtw.help/resource/images/more.svg","fqdn":"ofgxtw.help","domain":"ofgxtw.help","tld":"help"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ofgxtw.help/","date":"2026-03-20T18:48:59.556Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ofgxtw.help","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Mar 2026 11:30:51 GMT","end":"Mon, 15 Jun 2026 11:30:50 GMT"},"fingerprint":{"sha1":"44:64:B8:D3:FC:DF:BD:23:CB:ED:B7:16:5D:CA:F8:37:C4:6D:B8:D1","sha256":"EC:B7:49:85:AC:72:E4:BD:0F:B9:82:DC:5D:1D:0C:E0:03:1E:66:EC:CC:0D:25:BD:69:C7:15:D6:A7:12:9A:E3"}}},"request":{"raw":"GET /resource/images/more.svg HTTP/1.1\r\nHost: ofgxtw.help\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: server_name_session=b3874cde180056c36016bf8f86315873\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 20 Mar 2026 18:48:59 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Sun, 01 Mar 2026 05:39:10 GMT\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69a3d0fe-59b\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AhW%2Fa6NpRtRPhxLzLf1WoE1S9wH8xjh5EV2%2B2pZrhFS8QIDRqBqHLNRBrhKY3raaoCHTD7qVcb2DGRK9MJO6WCyNppbsWXOzosHZ\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9df6e4ec49cede91-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1435,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"63810c29f19cf606d16c0cf5fee50f39","sha1":"a78c6ae3bd094c40b29dba1ee1047ae74c6120d6","sha256":"f1d750f4e0385db35c7d1ab9f46537cd61986e2a58c72a49e21cdace58985ab6","sha512":"e07799ea4b257e23d17317e94bbcc7cd5c9b3c2f5893d3fbaa1e267811aa9b5e02ad2b26d224db1ba85af04d6dd5ff71fb9ce8b753bed248253271ab1513e356","ssdeep":"","tlshash":"a2218eae03c87058c116c7afe87e12f4fa6128ff5b504b5ab57c97341f46a4e8499cc2","first_seen":"2025-04-10T04:12:55.936161Z","last_seen":"2026-06-01T14:38:39.485431Z","times_seen":112,"resource_available":false,"data":null}},"time_used":430,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":430,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-20","alert":"Phishing Block","trigger":"ofgxtw.help","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-20","alert":"Sinkholed","trigger":"ofgxtw.help","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.ofgxtw.help/kline","fqdn":"h5-api.ofgxtw.help","domain":"ofgxtw.help","tld":"help"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ofgxtw.help/","date":"2026-03-20T18:48:59.952Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ofgxtw.help","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Mar 2026 11:30:51 GMT","end":"Mon, 15 Jun 2026 11:30:50 GMT"},"fingerprint":{"sha1":"44:64:B8:D3:FC:DF:BD:23:CB:ED:B7:16:5D:CA:F8:37:C4:6D:B8:D1","sha256":"EC:B7:49:85:AC:72:E4:BD:0F:B9:82:DC:5D:1D:0C:E0:03:1E:66:EC:CC:0D:25:BD:69:C7:15:D6:A7:12:9A:E3"}}},"request":{"raw":"OPTIONS /kline HTTP/1.1\r\nHost: h5-api.ofgxtw.help\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,lang,language\r\nOrigin: https://ofgxtw.help\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 20 Mar 2026 18:49:00 GMT\r\ncontent-length: 0\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://ofgxtw.help\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: content-type, lang, language\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nset-cookie: server_name_session=969f10ab0ecf1323be38f9cf51714704; Max-Age=86400; httponly; path=/\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dtXhWAtj8T4bVEFkKxxh4lNI5eRiF9xmZr9lKbYP4weIb945rh5NI6BDZxoXSlhSR3KigBnldLFYpue7GmRYkOu8EW9Mic1fURFKSTXKm8AStw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9df6e4ee8dcdde91-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-13T17:33:37.826371Z","times_seen":16391923,"resource_available":true,"data":null}},"time_used":439,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":439,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-20","alert":"Phishing Block","trigger":"h5-api.ofgxtw.help","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-20","alert":"Sinkholed","trigger":"h5-api.ofgxtw.help","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.ofgxtw.help/kline","fqdn":"h5-api.ofgxtw.help","domain":"ofgxtw.help","tld":"help"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ofgxtw.help/","date":"2026-03-20T18:48:59.960Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ofgxtw.help","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Mar 2026 11:30:51 GMT","end":"Mon, 15 Jun 2026 11:30:50 GMT"},"fingerprint":{"sha1":"44:64:B8:D3:FC:DF:BD:23:CB:ED:B7:16:5D:CA:F8:37:C4:6D:B8:D1","sha256":"EC:B7:49:85:AC:72:E4:BD:0F:B9:82:DC:5D:1D:0C:E0:03:1E:66:EC:CC:0D:25:BD:69:C7:15:D6:A7:12:9A:E3"}}},"request":{"raw":"OPTIONS /kline HTTP/1.1\r\nHost: h5-api.ofgxtw.help\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,lang,language\r\nOrigin: https://ofgxtw.help\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 20 Mar 2026 18:49:00 GMT\r\ncontent-length: 0\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://ofgxtw.help\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: content-type, lang, language\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nset-cookie: server_name_session=969f10ab0ecf1323be38f9cf51714704; Max-Age=86400; httponly; path=/\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=v32SiZNXb%2F9WcO7Zr8qc46YHZg09O0mlsL3nLzBMjiRtvq9kv3XY4BqyTJalJygHaqfP5eBdUc5780QBFtqE6L22UvhijSAW1kEqCXZfcl1smQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9df6e4ee9defde91-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-13T17:33:37.826371Z","times_seen":16391923,"resource_available":true,"data":null}},"time_used":438,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":438,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-20","alert":"Phishing Block","trigger":"h5-api.ofgxtw.help","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-20","alert":"Sinkholed","trigger":"h5-api.ofgxtw.help","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.ofgxtw.help/api/notice/list?key=ACTIVITY_NOTICE\u0026modelKey=HOME_ACTIVITY","fqdn":"h5-api.ofgxtw.help","domain":"ofgxtw.help","tld":"help"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ofgxtw.help/","date":"2026-03-20T18:48:59.887Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ofgxtw.help","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Mar 2026 11:30:51 GMT","end":"Mon, 15 Jun 2026 11:30:50 GMT"},"fingerprint":{"sha1":"44:64:B8:D3:FC:DF:BD:23:CB:ED:B7:16:5D:CA:F8:37:C4:6D:B8:D1","sha256":"EC:B7:49:85:AC:72:E4:BD:0F:B9:82:DC:5D:1D:0C:E0:03:1E:66:EC:CC:0D:25:BD:69:C7:15:D6:A7:12:9A:E3"}}},"request":{"raw":"OPTIONS /api/notice/list?key=ACTIVITY_NOTICE\u0026modelKey=HOME_ACTIVITY HTTP/1.1\r\nHost: h5-api.ofgxtw.help\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,lang,language\r\nOrigin: https://ofgxtw.help\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 20 Mar 2026 18:49:00 GMT\r\ncontent-length: 0\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://ofgxtw.help\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: content-type, lang, language\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nset-cookie: server_name_session=969f10ab0ecf1323be38f9cf51714704; Max-Age=86400; httponly; path=/\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mtqvDMTQoy4OJo7UGIyzrqpIO7cUtK2SrOB5IMJozMpk%2FSfGFry23dU0CI%2BuHg%2BOpWpABdbmXAc5NN2lAYJMPExv2ybE476vQpLSGgnadSsgPw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9df6e4ee4d43de91-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-13T17:33:37.826371Z","times_seen":16391923,"resource_available":true,"data":null}},"time_used":218,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":218,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-20","alert":"Phishing Block","trigger":"h5-api.ofgxtw.help","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-20","alert":"Sinkholed","trigger":"h5-api.ofgxtw.help","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.ofgxtw.help/kline","fqdn":"h5-api.ofgxtw.help","domain":"ofgxtw.help","tld":"help"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ofgxtw.help/","date":"2026-03-20T18:49:00.560Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ofgxtw.help","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Mar 2026 11:30:51 GMT","end":"Mon, 15 Jun 2026 11:30:50 GMT"},"fingerprint":{"sha1":"44:64:B8:D3:FC:DF:BD:23:CB:ED:B7:16:5D:CA:F8:37:C4:6D:B8:D1","sha256":"EC:B7:49:85:AC:72:E4:BD:0F:B9:82:DC:5D:1D:0C:E0:03:1E:66:EC:CC:0D:25:BD:69:C7:15:D6:A7:12:9A:E3"}}},"request":{"raw":"POST /kline HTTP/1.1\r\nHost: h5-api.ofgxtw.help\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nlanguage: en\r\nlang: en\r\nContent-Length: 69\r\nOrigin: https://ofgxtw.help\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":69,"data":"{\"interval\":\"FIVE_MIN\",\"limit\":1000,\"market\":\"mt5\",\"symbol\":\"gbpusd\"}"}},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 20 Mar 2026 18:49:00 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://ofgxtw.help\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nset-cookie: server_name_session=969f10ab0ecf1323be38f9cf51714704; Max-Age=86400; httponly; path=/\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=grJqA0CmxlbwQHjLtnY8CJzF0%2Ft5un%2FrJFaoCBL%2Fj5mfZeugwD%2FLTlEUF4GgsZcb6g0FePxWAJKtWaUPSfzlMUd0gk4rozShQ3nz1dqwRwSUhw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9df6e4f23c20de91-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":42676,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"52bfe9e8949338a208f62f255d14ccd5","sha1":"9a1cb4541735e301cb1259b08bfb491709cec030","sha256":"99cdc39584187dab4220ce9949c6b6c5f0571315c6e017195c437ee06f2310ee","sha512":"d801af4057e1fcc195d1944a9273ad8b6509f3bd2003a03e7c79ef38a1fe0bc6942116074c19f9b403bcc028ecfa717fe8bdc678c0a9bb7697641111a3bb42a3","ssdeep":"384:nPNnjElLmeUlCrR0P84B0TOxkkURdJzQAyDE+7uXU38jEk4:nPNnQlLOlIYd0TW/u/QAyIfXG8jEk4","tlshash":"c61385305e89c059c5328cc21fc3aeec3d1671c69acf2d063ead2f517dd5a68a18679b","first_seen":"2026-03-20T18:49:29.089616Z","last_seen":"2026-03-20T18:49:29.089616Z","times_seen":1,"resource_available":false,"data":null}},"time_used":263,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":263,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-20","alert":"Sinkholed","trigger":"h5-api.ofgxtw.help","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-20","alert":"Phishing Block","trigger":"h5-api.ofgxtw.help","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"storage.googleapis.com/order-ress/order/dotdigital/a428289bcfe346899355ed8bafdeb067.png?2.2.1772339973820","fqdn":"storage.googleapis.com","domain":"storage.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.251.143.155","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ofgxtw.help/","date":"2026-03-20T18:49:01.091Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"storage.googleapis.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Feb 2026 18:24:04 GMT","end":"Mon, 18 May 2026 18:24:03 GMT"},"fingerprint":{"sha1":"3C:31:BD:D2:EA:D9:B8:8E:67:17:8D:EB:DF:1B:C1:8E:89:2B:5D:7C","sha256":"C6:AF:0F:22:89:A9:F8:1D:21:85:65:8C:F4:6F:61:1C:6B:D2:10:68:AE:65:22:E2:69:75:62:C6:D8:2C:2A:08"}}},"request":{"raw":"GET /order-ress/order/dotdigital/a428289bcfe346899355ed8bafdeb067.png?2.2.1772339973820 HTTP/1.1\r\nHost: storage.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\nx-guploader-uploadid: AGQBYWwV5ALaVnfphXhIdkYf7RPvQ-IwtG08I9bL-0FfQoWT-G63WMCvZqVBFE-URsKyAQr0\r\nexpires: Fri, 20 Mar 2026 19:49:01 GMT\r\ndate: Fri, 20 Mar 2026 18:49:01 GMT\r\ncache-control: public, max-age=3600\r\nlast-modified: Fri, 18 Apr 2025 23:28:43 GMT\r\netag: \"a533eecdee5a789e7d94f8f79f95d588\"\r\nx-goog-generation: 1745018923182052\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 12869\r\nx-goog-hash: crc32c=YamtSA==, md5=pTPuze5aeJ59lPj3n5XViA==\r\nx-goog-storage-class: STANDARD\r\naccept-ranges: bytes\r\ncontent-length: 12869\r\nserver: UploadServer\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":12869,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced","md5":"a533eecdee5a789e7d94f8f79f95d588","sha1":"f1ae6df3a9baf6dbec969c6d1ab622850a282895","sha256":"ea257fac91d01858b7dfd0361f8b480caeb3d57b080570ef4b4f41d5d7e68c90","sha512":"e46ca5c2239c89c783805b1f4e17664118e57e95dff6513b8ff917aaaa763b922c6286b48d0e6daca644ae30c3e821674dade74a056837865353b451c50d074b","ssdeep":"192:3GSu8nGgOCcrSaheqQThcTrOcOAasSqXzcxfuZWfWOKJ6mVgCd7mOOwRB0IG:5/POzrSTThcTaPAaFqXzcqG6ekvP0IG","tlshash":"1442bfd83898c3e455233e69d56e4c138122251a66588517f22a2b7dbf03af27fcf1e6","first_seen":"2023-11-19T03:02:17Z","last_seen":"2026-06-13T13:54:53.605631Z","times_seen":684,"resource_available":false,"data":null}},"time_used":343,"timings":{"blocked":95,"dns":13,"connect":10,"send":0,"wait":138,"receive":2,"ssl":81},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"admin-api.twfxcc.vip/profile/upload/2025/09/24/LINK_20250924145937A037.png?2.2.1772339973820","fqdn":"admin-api.twfxcc.vip","domain":"twfxcc.vip","tld":"vip"},"ip":{"addr":"104.21.28.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ofgxtw.help/","date":"2026-03-20T18:48:59.607Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"twfxcc.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 20 Mar 2026 02:25:37 GMT","end":"Thu, 18 Jun 2026 03:24:23 GMT"},"fingerprint":{"sha1":"0E:30:73:B4:B4:1F:32:A0:62:A9:2E:5A:80:0F:65:89:CE:E0:F5:5E","sha256":"C4:FC:5B:2D:00:E0:8E:B8:F8:A0:1E:87:B0:21:7F:69:28:2B:AF:26:3E:BB:CD:E8:29:1D:62:A3:45:E7:38:1E"}}},"request":{"raw":"GET /profile/upload/2025/09/24/LINK_20250924145937A037.png?2.2.1772339973820 HTTP/1.1\r\nHost: admin-api.twfxcc.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 20 Mar 2026 18:49:00 GMT\r\ncontent-type: image/png\r\ncontent-length: 1008\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Wed, 24 Sep 2025 06:59:37 GMT\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nset-cookie: server_name_session=076db9e44fdded61b7080e8f50e6c08b; Max-Age=86400; httponly; path=/\r\nx-cache: MISS\r\naccept-ranges: bytes\r\ncf-cache-status: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lIQWDOO3HXQLyJo7D9MfXfMp1OQuzSD4gsH5kDY38Yx0DvsMb6AgkVLqlN5wbfus%2FgZMBLztqfCgeeHKwub%2BciBgC2hU1ZrkGqWZAjjWw3Bbv8Rz\"}]}\r\ncf-ray: 9df6e4ed0c5e9e07-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1008,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 96 x 96, 8-bit colormap, non-interlaced","md5":"1d8873b15ce7e65a262d1788f19912ef","sha1":"ef5b427eafdcd42ba4e2a785a49bbfb13fb0c1e0","sha256":"93d103ab945f2972cbdd53050d239c6b9df3d430e9343a21143e805b280e3967","sha512":"1d09a7cf6e12da2a6a2d7a16cba54408f3a90dd58acef01b268b37c3f0545b0541aca6725b894862af1de877dd6c7d2ab9cec94baa7584536e9011e6c5553dcb","ssdeep":"","tlshash":"5a11c461b9beb91ac362083381c121b0ca066c3b4120f2e7cc08b210a23c00ad7c782e","first_seen":"2023-05-07T19:16:40Z","last_seen":"2026-06-08T23:37:58.096592Z","times_seen":355,"resource_available":false,"data":null}},"time_used":588,"timings":{"blocked":69,"dns":0,"connect":9,"send":0,"wait":447,"receive":0,"ssl":51},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.ofgxtw.help/kline","fqdn":"h5-api.ofgxtw.help","domain":"ofgxtw.help","tld":"help"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ofgxtw.help/","date":"2026-03-20T18:49:00.547Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ofgxtw.help","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Mar 2026 11:30:51 GMT","end":"Mon, 15 Jun 2026 11:30:50 GMT"},"fingerprint":{"sha1":"44:64:B8:D3:FC:DF:BD:23:CB:ED:B7:16:5D:CA:F8:37:C4:6D:B8:D1","sha256":"EC:B7:49:85:AC:72:E4:BD:0F:B9:82:DC:5D:1D:0C:E0:03:1E:66:EC:CC:0D:25:BD:69:C7:15:D6:A7:12:9A:E3"}}},"request":{"raw":"POST /kline HTTP/1.1\r\nHost: h5-api.ofgxtw.help\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nlanguage: en\r\nlang: en\r\nContent-Length: 70\r\nOrigin: https://ofgxtw.help\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":70,"data":"{\"interval\":\"FIVE_MIN\",\"limit\":1000,\"market\":\"binance\",\"symbol\":\"bch\"}"}},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 20 Mar 2026 18:49:00 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://ofgxtw.help\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nset-cookie: server_name_session=969f10ab0ecf1323be38f9cf51714704; Max-Age=86400; httponly; path=/\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=S73qsXDhCxqkSXtVz5NGic0VTmM9MGpgMYDfZ9L5n2kQxTFF1yUzWJ4sEuxsphfG9bMDtBQujHQMuynUDPwwKXHuQIK%2FPmqbKkTiZHuzlpWVKA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9df6e4f21befde91-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":35648,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"d11adbb0a75f9ec18d875c9eeb1760b3","sha1":"e00f433cb687ad3d6b7ba78c297a823d09c29489","sha256":"02d5e7c5aafd2322090f3efb833e116707b83693ab279acd728a368f413debc5","sha512":"af7bf8d855dc311d6d0ccbe26b56bfbe7c6008ee1d5c32cecbcc8b34c446b9011514a533e05e38ae76b2acf2a451375fcc8f720d24ffaef582d25219553ff449","ssdeep":"768:t2zJG71bN/+1GCU6cI+m1gWTHCPl9fvUGEL354DO81kP5PJhswjNr6qtmzbr9Qeo:t2zJG71x/+1GCU3I+m1gWTHCPl9f8GEj","tlshash":"18f205784f6e81dae8335cbf4f97add01c1578c35bcc1d02a4aa67126a586b1d10afcb","first_seen":"2026-03-20T18:49:29.096851Z","last_seen":"2026-03-20T18:49:29.096851Z","times_seen":1,"resource_available":false,"data":null}},"time_used":451,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":451,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-20","alert":"Sinkholed","trigger":"h5-api.ofgxtw.help","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-20","alert":"Phishing Block","trigger":"h5-api.ofgxtw.help","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/font-awesome/6.5.1/webfonts/fa-solid-900.woff2","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://ofgxtw.help/","date":"2026-03-20T18:48:59.764Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 14 Mar 2026 00:38:49 GMT","end":"Fri, 12 Jun 2026 01:38:45 GMT"},"fingerprint":{"sha1":"7A:4A:F6:D6:63:62:70:CA:51:C5:5A:06:41:17:71:BF:9D:2C:C9:42","sha256":"7F:F5:F5:FE:73:1F:E7:AF:1A:82:5B:59:EE:E8:E9:65:D6:87:68:61:8C:11:1E:94:4A:9A:C4:14:BD:4B:04:BA"}}},"request":{"raw":"GET /ajax/libs/font-awesome/6.5.1/webfonts/fa-solid-900.woff2 HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://ofgxtw.help\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cdnjs.cloudflare.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 20 Mar 2026 18:48:59 GMT\r\ncontent-type: application/octet-stream; charset=utf-8\r\ncontent-length: 156496\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\netag: \"65692999-26350\"\r\nlast-modified: Fri, 01 Dec 2023 00:32:25 GMT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/kv\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 304692\r\nexpires: Wed, 10 Mar 2027 18:48:59 GMT\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UJRKiO6ov5hWAYPPI8H0NqkJcEkse5y4OiGolc1XQr5ygiuZCJjXv8rN7Sgh2%2BzM4%2Bf8vRR66gvGOMgZUHa6Oi8VPZjdUeEKFOX25HjL9RuoS7w%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\ncf-ray: 9df6e4eda9695a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":156496,"size_decoded":0,"mime_type":"application/octet-stream; charset=utf-8","magic":"Web Open Font Format (Version 2), TrueType, length 156496, version 773.768","md5":"6c4eee562650e53cee32496bdfbe534b","sha1":"1aae708e3b94ee981b452a918d28ed037fbb5e18","sha256":"9fc85f3a4544ab0d570c7f8f9bbb88db8d92c359b2707580ea8b07c75673eae2","sha512":"ebcb5a2e2a908228f77ecd03b45491778cad73ddc39fa3a6334b129aaf9fa36c16c0307aeaad74d77f616b5b34aac52d91e9f4816945253dc9a826ddd71f4d12","ssdeep":"3072:OvM6gZMLmY8uGpjVnlooQ+GQs8jic0f/KkMdE:OU65LoP5QSsuic0f/cdE","tlshash":"8ce31200d620498d9978fd5b2a1fa1ffa7a939c95ed210bad3c30cb93257143bbc2556","first_seen":"2023-12-02T04:06:15Z","last_seen":"2026-06-13T17:05:42.148498Z","times_seen":42895,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":15,"dns":1,"connect":0,"send":0,"wait":11,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.ofgxtw.help/kline","fqdn":"h5-api.ofgxtw.help","domain":"ofgxtw.help","tld":"help"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ofgxtw.help/","date":"2026-03-20T18:48:59.906Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ofgxtw.help","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Mar 2026 11:30:51 GMT","end":"Mon, 15 Jun 2026 11:30:50 GMT"},"fingerprint":{"sha1":"44:64:B8:D3:FC:DF:BD:23:CB:ED:B7:16:5D:CA:F8:37:C4:6D:B8:D1","sha256":"EC:B7:49:85:AC:72:E4:BD:0F:B9:82:DC:5D:1D:0C:E0:03:1E:66:EC:CC:0D:25:BD:69:C7:15:D6:A7:12:9A:E3"}}},"request":{"raw":"OPTIONS /kline HTTP/1.1\r\nHost: h5-api.ofgxtw.help\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,lang,language\r\nOrigin: https://ofgxtw.help\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 20 Mar 2026 18:49:00 GMT\r\ncontent-length: 0\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://ofgxtw.help\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: content-type, lang, language\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nset-cookie: server_name_session=ad58d77a8fd661df53586700f977ede4; Max-Age=86400; httponly; path=/\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vLL1clBHC%2BbP2TMK0EiZLB1fwwaQV9LSnoibOFYxjI%2FnobVExig1FidQuVJ0Rj%2FBnrLFEn64Bl0G16hzVgBtszmGrPIm5BKyyNBXBk7KUxywPw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9df6e4ee5d6bde91-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-13T17:33:37.826371Z","times_seen":16391923,"resource_available":true,"data":null}},"time_used":408,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":408,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-20","alert":"Phishing Block","trigger":"h5-api.ofgxtw.help","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-20","alert":"Sinkholed","trigger":"h5-api.ofgxtw.help","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.ofgxtw.help/kline","fqdn":"h5-api.ofgxtw.help","domain":"ofgxtw.help","tld":"help"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ofgxtw.help/","date":"2026-03-20T18:49:00.551Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ofgxtw.help","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Mar 2026 11:30:51 GMT","end":"Mon, 15 Jun 2026 11:30:50 GMT"},"fingerprint":{"sha1":"44:64:B8:D3:FC:DF:BD:23:CB:ED:B7:16:5D:CA:F8:37:C4:6D:B8:D1","sha256":"EC:B7:49:85:AC:72:E4:BD:0F:B9:82:DC:5D:1D:0C:E0:03:1E:66:EC:CC:0D:25:BD:69:C7:15:D6:A7:12:9A:E3"}}},"request":{"raw":"POST /kline HTTP/1.1\r\nHost: h5-api.ofgxtw.help\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nlanguage: en\r\nlang: en\r\nContent-Length: 72\r\nOrigin: https://ofgxtw.help\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":72,"data":"{\"interval\":\"FIVE_MIN\",\"limit\":1000,\"market\":\"binance\",\"symbol\":\"lever\"}"}},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 20 Mar 2026 18:49:00 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://ofgxtw.help\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nset-cookie: server_name_session=ad58d77a8fd661df53586700f977ede4; Max-Age=86400; httponly; path=/\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RpJurvbvyfsHX6IYskf3bb57q12G1BSvoX4kvVx98LLv3Nl4gSpXqMtHrnnX5tvrpvANm30i1SCqOLSp76XP6QVdN1Zv02Ubibi46xyF%2B7S9hg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9df6e4f22c01de91-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":41475,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"d7826cd69f978a2fedaf3b798123d99b","sha1":"9c82d610982f2d71ba60ff35bd26b8a42cf48fae","sha256":"ddfb6a822b4028b6d061b6b723b44cb5bf4a4d80640849061b9b52eaea395988","sha512":"344c6e49c29e0a3a03e3ca35b99b60d5ab889ac5916092942716c5f3c137b83113b6b6be29e5f0b798de370535994c9a03977da9073a10dfd4b01f22bf37788b","ssdeep":"768:NcW+9HS9mS6u1XMhX5PoOSGfA/Sa1q8pFXv65J/g54OXergy6K5jyszmq5eCSW5P:eW+9HS9mS6u18hX5PoOSGfA/Sa1q8pF2","tlshash":"6f1320f658bab086dd3c6c811fe37eb65d773a89cadd886c328900596953334c8c27b5","first_seen":"2025-10-12T16:34:39.857092Z","last_seen":"2026-06-01T14:38:39.440301Z","times_seen":77,"resource_available":false,"data":null}},"time_used":361,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":361,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-20","alert":"Phishing Block","trigger":"h5-api.ofgxtw.help","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-20","alert":"Sinkholed","trigger":"h5-api.ofgxtw.help","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.ofgxtw.help/api/common/getCoinList","fqdn":"h5-api.ofgxtw.help","domain":"ofgxtw.help","tld":"help"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ofgxtw.help/","date":"2026-03-20T18:48:58.385Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ofgxtw.help","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Mar 2026 11:30:51 GMT","end":"Mon, 15 Jun 2026 11:30:50 GMT"},"fingerprint":{"sha1":"44:64:B8:D3:FC:DF:BD:23:CB:ED:B7:16:5D:CA:F8:37:C4:6D:B8:D1","sha256":"EC:B7:49:85:AC:72:E4:BD:0F:B9:82:DC:5D:1D:0C:E0:03:1E:66:EC:CC:0D:25:BD:69:C7:15:D6:A7:12:9A:E3"}}},"request":{"raw":"POST /api/common/getCoinList HTTP/1.1\r\nHost: h5-api.ofgxtw.help\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nlang: en-US\r\nContent-Length: 2\r\nOrigin: https://ofgxtw.help\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":2,"data":"{}"}},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 20 Mar 2026 18:48:58 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://ofgxtw.help\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nset-cookie: server_name_session=969f10ab0ecf1323be38f9cf51714704; Max-Age=86400; httponly; path=/\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HBTXWJQ9mDaIlQkBE3eLq52Y19WuGU1gDvfcif4B82%2F8lYptj2HBrqwPST3UgCxoWhZGAmUHP0UML4y5tRC57hM75%2FFeDFxKK%2BzpiW6ypSYVqQ%3D%3D\"}]}\r\ncf-ray: 9df6e4e4ef2d1806-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":18670,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"7014be10fe70e1839a1f6e4a177d33dd","sha1":"559b148c183fe6168d02cf38568aac07aa2c48cd","sha256":"3525346cd7df680bf5c1bcf724375a24c3448aae95af64ce2bf61f8b66ccd683","sha512":"c8e563dbdd5f747850dfe263ca0997d483e2e2e1c411b0a33e4137734252d8287f26353ab62afa24db8053e382e23ad7d13c1f713a43e94e273c88e64bdf1b05","ssdeep":"384:cWdBXpYQ6Un4voS6s4bIW6g3xBR3vihRRJAHsLDNWGVGqj9:cWXZYQ7n4voRs4bIW6g3xBR3vihRnAHg","tlshash":"37821156612c44bec56dd1e229af3d13914c322fecc9ca1e82de8d99cee4a746907b07","first_seen":"2026-03-20T18:49:29.101021Z","last_seen":"2026-03-20T18:49:29.101021Z","times_seen":1,"resource_available":false,"data":null}},"time_used":447,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":447,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-20","alert":"Sinkholed","trigger":"h5-api.ofgxtw.help","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-20","alert":"Phishing Block","trigger":"h5-api.ofgxtw.help","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ofgxtw.help/resource/images/dark/next.png?2.2.1772339973820","fqdn":"ofgxtw.help","domain":"ofgxtw.help","tld":"help"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ofgxtw.help/","date":"2026-03-20T18:48:59.561Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ofgxtw.help","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Mar 2026 11:30:51 GMT","end":"Mon, 15 Jun 2026 11:30:50 GMT"},"fingerprint":{"sha1":"44:64:B8:D3:FC:DF:BD:23:CB:ED:B7:16:5D:CA:F8:37:C4:6D:B8:D1","sha256":"EC:B7:49:85:AC:72:E4:BD:0F:B9:82:DC:5D:1D:0C:E0:03:1E:66:EC:CC:0D:25:BD:69:C7:15:D6:A7:12:9A:E3"}}},"request":{"raw":"GET /resource/images/dark/next.png?2.2.1772339973820 HTTP/1.1\r\nHost: ofgxtw.help\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: server_name_session=b3874cde180056c36016bf8f86315873\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 20 Mar 2026 18:49:02 GMT\r\ncontent-type: image/png\r\ncontent-length: 822\r\nserver: cloudflare\r\nlast-modified: Sun, 01 Mar 2026 05:39:10 GMT\r\npriority: u=4,i=?0\r\netag: \"69a3d0fe-336\"\r\nexpires: Sun, 19 Apr 2026 18:49:02 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fdrmKvj4R1Ot5Ib136Of2eG4VK4asqDwE70AyWEB6a5TUU8kOZxhDIBKd3tgMKWzKOT2s5chkFS9lBfRPLeScjbszmtpgJ5lEsdx\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9df6e4ec49e0de91-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":822,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 44 x 44, 8-bit/color RGBA, non-interlaced","md5":"56f4c6bd26236cec628eca09228bd623","sha1":"0c0cd20cdad0053d2d88d9b2a9bdb45aa7548bb3","sha256":"bc7f7a772a5fef50a9499daf268bb6f82b915b33c10c2a2cf8afe24ec77da77a","sha512":"fdde6c6101a816389398341a64f8dd37cb4bf13a6392fa0379b5b7889da00c16ae38792f51e8025be530c28ae5ea90842e6c3d7ed43b80db094000dbfd788a88","ssdeep":"","tlshash":"5e0186a5364ef13ef1c3c935e5340364cb3b4c38857c28aaf6d09d2694c0b49719135a","first_seen":"2025-10-12T16:34:39.767715Z","last_seen":"2026-06-01T14:38:39.432219Z","times_seen":97,"resource_available":false,"data":null}},"time_used":2936,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2936,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-20","alert":"Sinkholed","trigger":"ofgxtw.help","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-20","alert":"Phishing Block","trigger":"ofgxtw.help","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.ofgxtw.help/kline","fqdn":"h5-api.ofgxtw.help","domain":"ofgxtw.help","tld":"help"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ofgxtw.help/","date":"2026-03-20T18:49:00.541Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ofgxtw.help","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Mar 2026 11:30:51 GMT","end":"Mon, 15 Jun 2026 11:30:50 GMT"},"fingerprint":{"sha1":"44:64:B8:D3:FC:DF:BD:23:CB:ED:B7:16:5D:CA:F8:37:C4:6D:B8:D1","sha256":"EC:B7:49:85:AC:72:E4:BD:0F:B9:82:DC:5D:1D:0C:E0:03:1E:66:EC:CC:0D:25:BD:69:C7:15:D6:A7:12:9A:E3"}}},"request":{"raw":"POST /kline HTTP/1.1\r\nHost: h5-api.ofgxtw.help\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nlanguage: en\r\nlang: en\r\nContent-Length: 70\r\nOrigin: https://ofgxtw.help\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":70,"data":"{\"interval\":\"FIVE_MIN\",\"limit\":1000,\"market\":\"binance\",\"symbol\":\"bnb\"}"}},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 20 Mar 2026 18:49:00 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://ofgxtw.help\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nset-cookie: server_name_session=969f10ab0ecf1323be38f9cf51714704; Max-Age=86400; httponly; path=/\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3HxBbJEmgiQKHosTW%2F9Bpb4WxygN2VUwIcoF%2FzxPbefzP13IftoLOajoPJKf0yFKiK9pENCsqLy2AHjCjb8ZxfnTpDaNqCRRszTbxC0GOdQ20w%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9df6e4f21bd7de91-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":37906,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"cf808bcb548af396b0657f364ee2274d","sha1":"77a0471bd5fcdd9aaa4bc7ff116084cba48883db","sha256":"a175c4ec4f6a4d78b265d398229a521311be6ae864f3e6fce31d4dc18087ba52","sha512":"7af32381e0d54d61aba58d6b9ac33c54d3012dbacd1d6c6f7059d5cb0439542f59c9974bbc522bf12629577682e76e12205a247e0e0493c8f3fefe7436615dcd","ssdeep":"768:/euVvUyIaJpUULUf3Rn40jTbexp0whl1C8HCnqOcBnbw+:duyIyBSh40jXejH+kE+","tlshash":"08037032bec9d099e838de86afc3bdfc080637d34bded98105ae95159950a30d119fda","first_seen":"2026-03-20T18:49:29.10434Z","last_seen":"2026-03-20T18:49:29.10434Z","times_seen":1,"resource_available":false,"data":null}},"time_used":352,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":351,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-20","alert":"Phishing Block","trigger":"h5-api.ofgxtw.help","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-20","alert":"Sinkholed","trigger":"h5-api.ofgxtw.help","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.ofgxtw.help/kline","fqdn":"h5-api.ofgxtw.help","domain":"ofgxtw.help","tld":"help"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ofgxtw.help/","date":"2026-03-20T18:48:59.895Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ofgxtw.help","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Mar 2026 11:30:51 GMT","end":"Mon, 15 Jun 2026 11:30:50 GMT"},"fingerprint":{"sha1":"44:64:B8:D3:FC:DF:BD:23:CB:ED:B7:16:5D:CA:F8:37:C4:6D:B8:D1","sha256":"EC:B7:49:85:AC:72:E4:BD:0F:B9:82:DC:5D:1D:0C:E0:03:1E:66:EC:CC:0D:25:BD:69:C7:15:D6:A7:12:9A:E3"}}},"request":{"raw":"OPTIONS /kline HTTP/1.1\r\nHost: h5-api.ofgxtw.help\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,lang,language\r\nOrigin: https://ofgxtw.help\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 20 Mar 2026 18:49:00 GMT\r\ncontent-length: 0\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://ofgxtw.help\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: content-type, lang, language\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nset-cookie: server_name_session=ad58d77a8fd661df53586700f977ede4; Max-Age=86400; httponly; path=/\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZrXYiK99N1uRSdiSSH6SR7mcrtGW9cFjZ%2FulJ8yJklL2chCKIpdjnii4TtkTWt7LuJypceUUM9a5N6QTuPF%2B44KaR3fsUpxbwvRXnFxtRlo6RQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9df6e4ee4d52de91-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-13T17:33:37.826371Z","times_seen":16391923,"resource_available":true,"data":null}},"time_used":407,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":407,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-20","alert":"Sinkholed","trigger":"h5-api.ofgxtw.help","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-20","alert":"Phishing Block","trigger":"h5-api.ofgxtw.help","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.ofgxtw.help/kline","fqdn":"h5-api.ofgxtw.help","domain":"ofgxtw.help","tld":"help"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ofgxtw.help/","date":"2026-03-20T18:48:59.941Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ofgxtw.help","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Mar 2026 11:30:51 GMT","end":"Mon, 15 Jun 2026 11:30:50 GMT"},"fingerprint":{"sha1":"44:64:B8:D3:FC:DF:BD:23:CB:ED:B7:16:5D:CA:F8:37:C4:6D:B8:D1","sha256":"EC:B7:49:85:AC:72:E4:BD:0F:B9:82:DC:5D:1D:0C:E0:03:1E:66:EC:CC:0D:25:BD:69:C7:15:D6:A7:12:9A:E3"}}},"request":{"raw":"OPTIONS /kline HTTP/1.1\r\nHost: h5-api.ofgxtw.help\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,lang,language\r\nOrigin: https://ofgxtw.help\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 20 Mar 2026 18:49:00 GMT\r\ncontent-length: 0\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://ofgxtw.help\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: content-type, lang, language\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nset-cookie: server_name_session=969f10ab0ecf1323be38f9cf51714704; Max-Age=86400; httponly; path=/\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XNyUlJCYXn1cx9Z3%2FhC6iWiLxm%2BZ7rDHvUa3JAlTLBGVziUMqW2f%2Fyg4uOO4ZKB4cjokb8G16l4AIN2tY7OBSFOC3ilwu9gMKn4IlAymKJ3H9Q%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9df6e4ee7dadde91-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-13T17:33:37.826371Z","times_seen":16391923,"resource_available":true,"data":null}},"time_used":422,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":422,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-20","alert":"Sinkholed","trigger":"h5-api.ofgxtw.help","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-20","alert":"Phishing Block","trigger":"h5-api.ofgxtw.help","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.ofgxtw.help/kline","fqdn":"h5-api.ofgxtw.help","domain":"ofgxtw.help","tld":"help"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ofgxtw.help/","date":"2026-03-20T18:49:00.564Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ofgxtw.help","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Mar 2026 11:30:51 GMT","end":"Mon, 15 Jun 2026 11:30:50 GMT"},"fingerprint":{"sha1":"44:64:B8:D3:FC:DF:BD:23:CB:ED:B7:16:5D:CA:F8:37:C4:6D:B8:D1","sha256":"EC:B7:49:85:AC:72:E4:BD:0F:B9:82:DC:5D:1D:0C:E0:03:1E:66:EC:CC:0D:25:BD:69:C7:15:D6:A7:12:9A:E3"}}},"request":{"raw":"POST /kline HTTP/1.1\r\nHost: h5-api.ofgxtw.help\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nlanguage: en\r\nlang: en\r\nContent-Length: 69\r\nOrigin: https://ofgxtw.help\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":69,"data":"{\"interval\":\"FIVE_MIN\",\"limit\":1000,\"market\":\"mt5\",\"symbol\":\"gbpjpy\"}"}},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 20 Mar 2026 18:49:00 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://ofgxtw.help\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nset-cookie: server_name_session=969f10ab0ecf1323be38f9cf51714704; Max-Age=86400; httponly; path=/\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aA8V3W3OoIDdEpPzp8CRmrU8dSPvyCCSxcIyldT6Q12Lic%2Ftq3A0WMZ3%2Fp6B2iYXLm0Vc1GYyL%2F%2Bfz%2FwzVeVjfqdFosFZuFLZrEofwkVgaVvhw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9df6e4f24c32de91-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":45309,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"900b25e176e90ae051650cf89ca22550","sha1":"91811dc046ec8c4504faad52183f4d2fb03be4be","sha256":"3488f0d3b4e506ac3fdbfd102a950b53a48031e6b56091dd0c09089275aa0695","sha512":"30e624af19f6e9046770e7bcfd7ae60fa6264b59cccc0da709c771a0e29f002c3ee89acae81d6037b9abfdf0a30c404bbc3d5f1e56838adf1c8e3adcc88b69c9","ssdeep":"768:JJ+pz7vAerwGDna9Jx8+EpqY8X5vh8jzi2tERHE4CkBkUSDl0UjHYca3TQ8jEfop:L+pz7vAebna9Jx8+EpqY8X5ajLtEW4CC","tlshash":"2d137d728a8ab54dc4f54cc11bc3bea08d5636e3daed4d420f991603dd50f60a39bb9b","first_seen":"2026-03-20T18:49:29.106376Z","last_seen":"2026-03-20T18:49:29.106376Z","times_seen":1,"resource_available":false,"data":null}},"time_used":255,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":255,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-20","alert":"Sinkholed","trigger":"h5-api.ofgxtw.help","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-20","alert":"Phishing Block","trigger":"h5-api.ofgxtw.help","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"storage.googleapis.com/order-ress/order/dotdigital/b6a414b3b0e749cb9efb1021dc8e42d2.png?2.2.1772339973820","fqdn":"storage.googleapis.com","domain":"storage.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.251.143.155","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ofgxtw.help/","date":"2026-03-20T18:49:01.093Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"storage.googleapis.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Feb 2026 18:24:04 GMT","end":"Mon, 18 May 2026 18:24:03 GMT"},"fingerprint":{"sha1":"3C:31:BD:D2:EA:D9:B8:8E:67:17:8D:EB:DF:1B:C1:8E:89:2B:5D:7C","sha256":"C6:AF:0F:22:89:A9:F8:1D:21:85:65:8C:F4:6F:61:1C:6B:D2:10:68:AE:65:22:E2:69:75:62:C6:D8:2C:2A:08"}}},"request":{"raw":"GET /order-ress/order/dotdigital/b6a414b3b0e749cb9efb1021dc8e42d2.png?2.2.1772339973820 HTTP/1.1\r\nHost: storage.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\nx-guploader-uploadid: AGQBYWym2FkBRYJq0MBDJYuK3RJvCGLlabp7QpDyQxXM8HdET7Z6CD_bRFyu6NwC3IJKtG89\r\nexpires: Fri, 20 Mar 2026 19:49:01 GMT\r\ndate: Fri, 20 Mar 2026 18:49:01 GMT\r\ncache-control: public, max-age=3600\r\nlast-modified: Fri, 18 Apr 2025 23:30:03 GMT\r\netag: \"5d98fad597969ca60b2c150b717d75c2\"\r\nx-goog-generation: 1745019003474375\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 14268\r\nx-goog-hash: crc32c=1eE/CQ==, md5=XZj61ZeWnKYLLBULcX11wg==\r\nx-goog-storage-class: STANDARD\r\naccept-ranges: bytes\r\ncontent-length: 14268\r\nserver: UploadServer\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]}],"data":{"size":14268,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced","md5":"5d98fad597969ca60b2c150b717d75c2","sha1":"f64fa05a8ddc3ee085768f308db5bdc1fa45dd6c","sha256":"47373b88482223e17220c976db2859b2ad928c0a8725a81a859371ca1e052a81","sha512":"b0ffafe604e293786aca6a044f6147651d117b31afa201c051689b499e25ddacde63628be24e98a99b55aeb67676d6121c182443367789b05f9535c3c2aa0231","ssdeep":"192:FNYSd3bjNhYk+506I3KsuOr/iYmT67DVDbnbQD8/QiXSXfV/+7wDlb+St4:Fhd3Nh06/iYxDlrbZ/QiXw1JDlb9t4","tlshash":"9c529e5ccc41dd1d910a2a35d37c29f0892290bb230ad0133a8defd5b3993815abf55b","first_seen":"2023-11-19T03:02:16Z","last_seen":"2026-06-09T19:08:41.702804Z","times_seen":103,"resource_available":false,"data":null}},"time_used":317,"timings":{"blocked":77,"dns":4,"connect":21,"send":0,"wait":155,"receive":2,"ssl":50},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"storage.googleapis.com/order-ress/order/dotdigital/65747cd90abe44c7a66f35d017b6952d.jpeg?2.2.1772339973820","fqdn":"storage.googleapis.com","domain":"storage.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.251.143.155","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ofgxtw.help/","date":"2026-03-20T18:49:01.097Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"storage.googleapis.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Feb 2026 18:24:04 GMT","end":"Mon, 18 May 2026 18:24:03 GMT"},"fingerprint":{"sha1":"3C:31:BD:D2:EA:D9:B8:8E:67:17:8D:EB:DF:1B:C1:8E:89:2B:5D:7C","sha256":"C6:AF:0F:22:89:A9:F8:1D:21:85:65:8C:F4:6F:61:1C:6B:D2:10:68:AE:65:22:E2:69:75:62:C6:D8:2C:2A:08"}}},"request":{"raw":"GET /order-ress/order/dotdigital/65747cd90abe44c7a66f35d017b6952d.jpeg?2.2.1772339973820 HTTP/1.1\r\nHost: storage.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/jpeg\r\nx-guploader-uploadid: AGQBYWzUWK_fTeQwPjIhpGAjZ6Q0u0EGbTRqy4rq_IDLjSmX3Ksuz3gT7uf5q0DaDoiIU2Z3\r\nexpires: Fri, 20 Mar 2026 19:49:01 GMT\r\ndate: Fri, 20 Mar 2026 18:49:01 GMT\r\ncache-control: public, max-age=3600\r\nlast-modified: Fri, 18 Apr 2025 23:31:19 GMT\r\netag: \"fa7ad75375cc7806857dbc6d590db21c\"\r\nx-goog-generation: 1745019079859499\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 3817\r\nx-goog-hash: crc32c=nHBXww==, md5=+nrXU3XMeAaFfbxtWQ2yHA==\r\nx-goog-storage-class: STANDARD\r\naccept-ranges: bytes\r\ncontent-length: 3817\r\nserver: UploadServer\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":3817,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 225 x 225, 8-bit colormap, non-interlaced","md5":"fa7ad75375cc7806857dbc6d590db21c","sha1":"973a54bcc76c2c86ad0a41a7eaccd8d2a2686a75","sha256":"8ed69043b1cea67b8ad4234d9fb6f18f44d424aeea7181930df009866ea5a452","sha512":"3934b78cb9f04296a8792c7ebd652454730ff8c5a97a4d7c1d6053f634a7d029d0577c20cdadb822430b57d5e59299f8e4564d9a2f4d84c8c08f10fcb3b43a87","ssdeep":"","tlshash":"1a718d22ecbbc800fc15db1a6d5b6562313b36e314d4e9f716cc0dbe2e1670486b0123","first_seen":"2025-08-29T09:33:23.930899Z","last_seen":"2026-04-07T11:52:26.857898Z","times_seen":87,"resource_available":false,"data":null}},"time_used":214,"timings":{"blocked":69,"dns":0,"connect":0,"send":0,"wait":144,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ofgxtw.help/assets/vendor-DVoNlCS0.js","fqdn":"ofgxtw.help","domain":"ofgxtw.help","tld":"help"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://ofgxtw.help/","date":"2026-03-20T18:48:57.728Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ofgxtw.help","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Mar 2026 11:30:51 GMT","end":"Mon, 15 Jun 2026 11:30:50 GMT"},"fingerprint":{"sha1":"44:64:B8:D3:FC:DF:BD:23:CB:ED:B7:16:5D:CA:F8:37:C4:6D:B8:D1","sha256":"EC:B7:49:85:AC:72:E4:BD:0F:B9:82:DC:5D:1D:0C:E0:03:1E:66:EC:CC:0D:25:BD:69:C7:15:D6:A7:12:9A:E3"}}},"request":{"raw":"GET /assets/vendor-DVoNlCS0.js HTTP/1.1\r\nHost: ofgxtw.help\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 20 Mar 2026 18:48:57 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Sun, 01 Mar 2026 05:39:32 GMT\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69a3d114-222a50\"\r\nexpires: Sat, 21 Mar 2026 06:48:56 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\nage: 1\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QS7d1ThHuZw7oS6hR%2FTNaOpAu%2F8%2Bm75eXrVKr8hxnjGGwy2yPo5GG4tSq2ES6mxHFtg4kLSp2rdwTPgmJXoDIdeygmsrammJqXbE\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9df6e4e0def1de91-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2239056,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"0645d6d2b48d3980f9cf17cac85d13b6","sha1":"60e02ae0bb01f7fa624edaa696734ac43975a465","sha256":"f8558e5500eb1736d6167b88cfd33180e484b08e9089b36a9452b1d8ce9231ca","sha512":"581deded0fd745691703a370a49cccad4e41d1d1c1bca4c6ee7370d65eecbae9c7a5011eeb23182a8ba522d6086433dae1ccc0b89527735a89c05431b0bbf195","ssdeep":"24576:FN2LD4rA7kDbDVETSxXQZWAacs4yKd4vVa+URU41:FN2LD4rA7kDbDVdQZWAacs4ywGVa+URP","tlshash":"732509d8b651b03143a725a5007f050bf33a590db44f85a8f669e8da7cbd84e627bf38","first_seen":"2025-11-01T17:44:45.831131Z","last_seen":"2026-03-20T19:46:41.751492Z","times_seen":69,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":12,"receive":14,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-20","alert":"Phishing Block","trigger":"ofgxtw.help","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-20","alert":"Sinkholed","trigger":"ofgxtw.help","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ofgxtw.help/resource/images/light/cooperative.svg","fqdn":"ofgxtw.help","domain":"ofgxtw.help","tld":"help"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ofgxtw.help/","date":"2026-03-20T18:48:59.697Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ofgxtw.help","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Mar 2026 11:30:51 GMT","end":"Mon, 15 Jun 2026 11:30:50 GMT"},"fingerprint":{"sha1":"44:64:B8:D3:FC:DF:BD:23:CB:ED:B7:16:5D:CA:F8:37:C4:6D:B8:D1","sha256":"EC:B7:49:85:AC:72:E4:BD:0F:B9:82:DC:5D:1D:0C:E0:03:1E:66:EC:CC:0D:25:BD:69:C7:15:D6:A7:12:9A:E3"}}},"request":{"raw":"GET /resource/images/light/cooperative.svg HTTP/1.1\r\nHost: ofgxtw.help\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: server_name_session=b3874cde180056c36016bf8f86315873\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 20 Mar 2026 18:49:00 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Sun, 01 Mar 2026 05:39:10 GMT\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69a3d0fe-13b4d\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=L127bMsamJiE2ScBSh1cKQAy2unQs%2FIHGKCjedSEm%2BFmgvZL4KiXt5L%2FHVhlWkutJvZDfI127cT%2BfBgbDFZmSqnkwWdgKx5X9d50\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9df6e4ed1b39de91-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":80717,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"290c86d36f158d49c3204227be9accd8","sha1":"447efd04768b92065766196f81da6c4b6876773c","sha256":"d9a2b25941f62153280d62d6605f788cbbf8c5630c212f5fc1c04d86af7005f3","sha512":"6a2f9ff25a25902e91b99f3a8c5871f5e82d755c3366062ad5ccdb86e3926208a32c536d73765111f5192c8d35ebae60499a00450fb3b787f2bf52cf6aeb7ff3","ssdeep":"1536:t7Ad+P9FV8MahIfiDJInr3Ya7Z1uMslhso/F:t7P9Fx2d9Ir3YsZIMjcF","tlshash":"cc73027ff819cc0bd6018a4ce88dae066c18be195211ca3f7648794386589ebd63d1bf","first_seen":"2026-02-24T16:10:35.271118Z","last_seen":"2026-06-01T14:38:39.413459Z","times_seen":62,"resource_available":false,"data":null}},"time_used":875,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":452,"receive":423,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-20","alert":"Phishing Block","trigger":"ofgxtw.help","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-20","alert":"Sinkholed","trigger":"ofgxtw.help","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.ofgxtw.help/api/common/getCoinList","fqdn":"h5-api.ofgxtw.help","domain":"ofgxtw.help","tld":"help"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ofgxtw.help/","date":"2026-03-20T18:48:57.916Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ofgxtw.help","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Mar 2026 11:30:51 GMT","end":"Mon, 15 Jun 2026 11:30:50 GMT"},"fingerprint":{"sha1":"44:64:B8:D3:FC:DF:BD:23:CB:ED:B7:16:5D:CA:F8:37:C4:6D:B8:D1","sha256":"EC:B7:49:85:AC:72:E4:BD:0F:B9:82:DC:5D:1D:0C:E0:03:1E:66:EC:CC:0D:25:BD:69:C7:15:D6:A7:12:9A:E3"}}},"request":{"raw":"OPTIONS /api/common/getCoinList HTTP/1.1\r\nHost: h5-api.ofgxtw.help\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,lang\r\nOrigin: https://ofgxtw.help\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 20 Mar 2026 18:48:58 GMT\r\ncontent-length: 0\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://ofgxtw.help\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: content-type, lang\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nset-cookie: server_name_session=8fac0f95e09a3645ff0cd72e07dfadaf; Max-Age=86400; httponly; path=/\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HCugywr9xj3dEY35CJvRqKanSI27Twpz1s%2BfdPdGFsV35u6Quc9Dv7RWaJo2BJOT3zdjlXfdttsMXAcIEAZPHkkPZkJCsmXh1CcoxceLPbJAoA%3D%3D\"}]}\r\ncf-ray: 9df6e4e2385d1806-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-13T17:33:37.826371Z","times_seen":16391923,"resource_available":true,"data":null}},"time_used":503,"timings":{"blocked":36,"dns":1,"connect":9,"send":0,"wait":427,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-20","alert":"Sinkholed","trigger":"h5-api.ofgxtw.help","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-20","alert":"Phishing Block","trigger":"h5-api.ofgxtw.help","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.ofgxtw.help/api/common/getAllSetting","fqdn":"h5-api.ofgxtw.help","domain":"ofgxtw.help","tld":"help"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ofgxtw.help/","date":"2026-03-20T18:48:57.913Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ofgxtw.help","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Mar 2026 11:30:51 GMT","end":"Mon, 15 Jun 2026 11:30:50 GMT"},"fingerprint":{"sha1":"44:64:B8:D3:FC:DF:BD:23:CB:ED:B7:16:5D:CA:F8:37:C4:6D:B8:D1","sha256":"EC:B7:49:85:AC:72:E4:BD:0F:B9:82:DC:5D:1D:0C:E0:03:1E:66:EC:CC:0D:25:BD:69:C7:15:D6:A7:12:9A:E3"}}},"request":{"raw":"OPTIONS /api/common/getAllSetting HTTP/1.1\r\nHost: h5-api.ofgxtw.help\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,lang\r\nOrigin: https://ofgxtw.help\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 20 Mar 2026 18:48:58 GMT\r\ncontent-length: 0\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://ofgxtw.help\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: content-type, lang\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nset-cookie: server_name_session=8fac0f95e09a3645ff0cd72e07dfadaf; Max-Age=86400; httponly; path=/\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Wxv1TjAmhg5m1tBm6Txx1U9s%2BU300b4NQxoN%2BKMfbfjF3CWse8i4eHgjEbucrGrMwbM9FLFLXzUOSPuzldmfY3Z3HD9iY2vaun5FLvhClrUzhw%3D%3D\"}]}\r\ncf-ray: 9df6e4e238561806-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-13T17:33:37.826371Z","times_seen":16391923,"resource_available":true,"data":null}},"time_used":506,"timings":{"blocked":37,"dns":1,"connect":8,"send":0,"wait":429,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-20","alert":"Sinkholed","trigger":"h5-api.ofgxtw.help","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-20","alert":"Phishing Block","trigger":"h5-api.ofgxtw.help","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.ofgxtw.help/kline","fqdn":"h5-api.ofgxtw.help","domain":"ofgxtw.help","tld":"help"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ofgxtw.help/","date":"2026-03-20T18:49:00.534Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ofgxtw.help","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Mar 2026 11:30:51 GMT","end":"Mon, 15 Jun 2026 11:30:50 GMT"},"fingerprint":{"sha1":"44:64:B8:D3:FC:DF:BD:23:CB:ED:B7:16:5D:CA:F8:37:C4:6D:B8:D1","sha256":"EC:B7:49:85:AC:72:E4:BD:0F:B9:82:DC:5D:1D:0C:E0:03:1E:66:EC:CC:0D:25:BD:69:C7:15:D6:A7:12:9A:E3"}}},"request":{"raw":"POST /kline HTTP/1.1\r\nHost: h5-api.ofgxtw.help\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nlanguage: en\r\nlang: en\r\nContent-Length: 70\r\nOrigin: https://ofgxtw.help\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":70,"data":"{\"interval\":\"FIVE_MIN\",\"limit\":1000,\"market\":\"binance\",\"symbol\":\"xrp\"}"}},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 20 Mar 2026 18:49:00 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://ofgxtw.help\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nset-cookie: server_name_session=ad58d77a8fd661df53586700f977ede4; Max-Age=86400; httponly; path=/\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lAJLsTo0xrenLRGnoOVQfc8Wg%2BkAnyNeuNvg7Mn00ud4ZgKR%2BGTKvSqSEn8TyOPgNlhuAouGG5PH07TD0aJE%2BuJwlAidy2Bs6aSpl5Hlg%2F%2FM7g%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9df6e4f20bc3de91-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":38425,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"297f7222826ca160fe27ddeafc28932c","sha1":"068d8466cdd7c9e14281ef9dd91cedad20f723d8","sha256":"41ba96f77f06df2f8a8496070070af6bb297d1291341bf0245732856bdb6225c","sha512":"5f984d97063b6fa6302415886734eb8fb7c6f0e7615af12d77c27d183007cac6cbb187d8fbfc16bffd407f8e74c971a9feb5e3778e701fca04d9ae45fbba4dbe","ssdeep":"768:U+eh4SR7lIYpA9fGR4GscvDlSkvxBLC7CAe1FtQbg5upwJqiph2/h1ctl3:s4SRxIYpA5GR4GbDlSkvxBLCuAe1FtQC","tlshash":"600320374bc4e489dd368cc22f83bee43d2231d6eedd2d0115999f04a9d06a8f155bae","first_seen":"2026-03-20T18:49:29.118442Z","last_seen":"2026-03-20T18:49:29.118442Z","times_seen":1,"resource_available":false,"data":null}},"time_used":293,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":293,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-20","alert":"Phishing Block","trigger":"h5-api.ofgxtw.help","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-20","alert":"Sinkholed","trigger":"h5-api.ofgxtw.help","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ofgxtw.help/resource/images/light/ai3.svg","fqdn":"ofgxtw.help","domain":"ofgxtw.help","tld":"help"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ofgxtw.help/","date":"2026-03-20T18:48:59.684Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ofgxtw.help","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Mar 2026 11:30:51 GMT","end":"Mon, 15 Jun 2026 11:30:50 GMT"},"fingerprint":{"sha1":"44:64:B8:D3:FC:DF:BD:23:CB:ED:B7:16:5D:CA:F8:37:C4:6D:B8:D1","sha256":"EC:B7:49:85:AC:72:E4:BD:0F:B9:82:DC:5D:1D:0C:E0:03:1E:66:EC:CC:0D:25:BD:69:C7:15:D6:A7:12:9A:E3"}}},"request":{"raw":"GET /resource/images/light/ai3.svg HTTP/1.1\r\nHost: ofgxtw.help\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: server_name_session=b3874cde180056c36016bf8f86315873\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 20 Mar 2026 18:49:00 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Sun, 01 Mar 2026 05:39:10 GMT\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69a3d0fe-1baf\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rLyaojQd8pbwL7kMDnlXOVBLWDZttzLY0pXvTw5bvrxRu5JX4IyzoF%2F%2BGm3EsWnFOaY4lCW1bWLiz7jjHPCDKR2wO3poNj7bL2aY\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9df6e4ed0b17de91-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7087,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"c53e7b1117a8526f6eb229df446cc722","sha1":"bd13b10b3d466c27cf406fae1a07adb3650dfd9e","sha256":"05d9270b980c401bbc75d3374fc10b459f661b3f5420d168daa5369d8fc8c48c","sha512":"0e693efa9349078257f94a89a7acb5f3d892ceba824440516c2c8fb88b71e937923ba1bd10b020d9cf2e80985fbd5f0ddefbf9176e6ad341a17caf9dfc7da856","ssdeep":"96:UN24KuLu7W0X/YIRcOMlit6YO+0hR8Kob/RfZcPRDg4rQA2EOAl6NkNLW4nW/1do:skuLu7CLOMlit6tvhRLlY5o","tlshash":"17e1652ab3aed97af148d3fcdb008435716640e3a951d261c2e5be1f982509d683e9c3","first_seen":"2024-11-30T14:01:13.939903Z","last_seen":"2026-06-01T14:38:39.487061Z","times_seen":141,"resource_available":false,"data":null}},"time_used":443,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":443,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-20","alert":"Sinkholed","trigger":"ofgxtw.help","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-20","alert":"Phishing Block","trigger":"ofgxtw.help","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ofgxtw.help/resource/images/light/chat.png","fqdn":"ofgxtw.help","domain":"ofgxtw.help","tld":"help"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ofgxtw.help/","date":"2026-03-20T18:48:59.695Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ofgxtw.help","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Mar 2026 11:30:51 GMT","end":"Mon, 15 Jun 2026 11:30:50 GMT"},"fingerprint":{"sha1":"44:64:B8:D3:FC:DF:BD:23:CB:ED:B7:16:5D:CA:F8:37:C4:6D:B8:D1","sha256":"EC:B7:49:85:AC:72:E4:BD:0F:B9:82:DC:5D:1D:0C:E0:03:1E:66:EC:CC:0D:25:BD:69:C7:15:D6:A7:12:9A:E3"}}},"request":{"raw":"GET /resource/images/light/chat.png HTTP/1.1\r\nHost: ofgxtw.help\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: server_name_session=b3874cde180056c36016bf8f86315873\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 20 Mar 2026 18:49:00 GMT\r\ncontent-type: image/png\r\nserver: cloudflare\r\nlast-modified: Sun, 01 Mar 2026 05:39:10 GMT\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69a3d0fe-279a\"\r\nexpires: Sun, 19 Apr 2026 18:49:00 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ARHNZ2kBAqeplMYcNGHIqkMTy37yC4TG9RwVU69QjodMm0PgnH62priK99JNaj5eYrDxTILCVwuHqw%2Bbb%2Bx89r1HlgQZjhz0ikG8\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9df6e4ed1b36de91-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10138,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 391 x 391, 8-bit/color RGBA, non-interlaced","md5":"c0b8583d102ab70eb5a9cd4e1ac47c2b","sha1":"ecc2a351a680d2c01b7070b167755e1d9c088de6","sha256":"33123e4b44608f7db2cfc5dc0e6d0fcf0cb06c5e8ac056a637e43dc79a55c407","sha512":"633def91d6eea6f4d338b49bc2d0540eadeb278b6510c824d8e2edd6a0d0bc6f205639cabb5db6bed89d6f7bf1fea63a51f8d877cc0592528b288a6e37210207","ssdeep":"192:LEJaISqTHLkndsrQKyeSZD1sOikJbazA0PkQJprNKIOqJPj9TDiXVLJxkK5DX:LIaI7HwndscKy3bziObazAWkQJPKU1DM","tlshash":"b522bfcd558e4520a9e9203191c6631adf38e9ac7a5bf6a1fc31c4c553a2ce2e74b618","first_seen":"2025-10-12T16:34:39.749254Z","last_seen":"2026-06-01T14:38:39.480971Z","times_seen":78,"resource_available":false,"data":null}},"time_used":414,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":414,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-20","alert":"Sinkholed","trigger":"ofgxtw.help","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-20","alert":"Phishing Block","trigger":"ofgxtw.help","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.ofgxtw.help/api/notice/list?key=ACTIVITY_NOTICE\u0026modelKey=HOME_ACTIVITY","fqdn":"h5-api.ofgxtw.help","domain":"ofgxtw.help","tld":"help"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ofgxtw.help/","date":"2026-03-20T18:49:00.360Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ofgxtw.help","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Mar 2026 11:30:51 GMT","end":"Mon, 15 Jun 2026 11:30:50 GMT"},"fingerprint":{"sha1":"44:64:B8:D3:FC:DF:BD:23:CB:ED:B7:16:5D:CA:F8:37:C4:6D:B8:D1","sha256":"EC:B7:49:85:AC:72:E4:BD:0F:B9:82:DC:5D:1D:0C:E0:03:1E:66:EC:CC:0D:25:BD:69:C7:15:D6:A7:12:9A:E3"}}},"request":{"raw":"POST /api/notice/list?key=ACTIVITY_NOTICE\u0026modelKey=HOME_ACTIVITY HTTP/1.1\r\nHost: h5-api.ofgxtw.help\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nlanguage: en\r\nlang: en\r\nContent-Length: 2\r\nOrigin: https://ofgxtw.help\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":2,"data":"{}"}},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 20 Mar 2026 18:49:00 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://ofgxtw.help\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nset-cookie: server_name_session=969f10ab0ecf1323be38f9cf51714704; Max-Age=86400; httponly; path=/\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XGFvcauhlE84LI9ymCPMJFwclmCiz0NbsPz1Qo%2BYv0y%2FY5hIAu%2Bl8R4f1hu08CjU3mAIgnzHPulMJzZupgqOgyUtIZHsz7pR8Z0w7ClKhs1R4w%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9df6e4efc826de91-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":596,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"95721dd5a24171ec52616de5d5ad0d83","sha1":"5389bfd65fb67640cacac4350d747757f4762d62","sha256":"b08199ddde975cb2ad77820d87258be7f5aa6fe0598fe8c5dfc86faa6ceef3e8","sha512":"8bb3c300238a49bc493d6caab6b3872b719431e07b862333e0d24fee0eae48dcaeb7afa891e45b88ae00d2967caeb88e33ef8f674ab9d3f1bc81e5036a5f17e0","ssdeep":"","tlshash":"4ff0464e657c8e794c194ae721ca7dc8666e02479660cc70ab6bcf3c81f497b2b17208","first_seen":"2025-11-01T17:44:45.803082Z","last_seen":"2026-03-20T19:46:41.758995Z","times_seen":28,"resource_available":false,"data":null}},"time_used":222,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":222,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-20","alert":"Sinkholed","trigger":"h5-api.ofgxtw.help","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-20","alert":"Phishing Block","trigger":"h5-api.ofgxtw.help","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.ofgxtw.help/kline","fqdn":"h5-api.ofgxtw.help","domain":"ofgxtw.help","tld":"help"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ofgxtw.help/","date":"2026-03-20T18:49:00.549Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ofgxtw.help","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Mar 2026 11:30:51 GMT","end":"Mon, 15 Jun 2026 11:30:50 GMT"},"fingerprint":{"sha1":"44:64:B8:D3:FC:DF:BD:23:CB:ED:B7:16:5D:CA:F8:37:C4:6D:B8:D1","sha256":"EC:B7:49:85:AC:72:E4:BD:0F:B9:82:DC:5D:1D:0C:E0:03:1E:66:EC:CC:0D:25:BD:69:C7:15:D6:A7:12:9A:E3"}}},"request":{"raw":"POST /kline HTTP/1.1\r\nHost: h5-api.ofgxtw.help\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nlanguage: en\r\nlang: en\r\nContent-Length: 71\r\nOrigin: https://ofgxtw.help\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":71,"data":"{\"interval\":\"FIVE_MIN\",\"limit\":1000,\"market\":\"binance\",\"symbol\":\"kava\"}"}},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 20 Mar 2026 18:49:00 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://ofgxtw.help\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nset-cookie: server_name_session=969f10ab0ecf1323be38f9cf51714704; Max-Age=86400; httponly; path=/\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=T673HaZls79%2F124qUm%2Fwx1hCr3r1tQnx2KmunG981UFU0WHrovCV0nC9lGfJWpBdciKJizpkHCrDY9lN8EaMyTlncAjaDU%2FuBSMROBMRGDKY8w%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9df6e4f22bfdde91-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":39824,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"d83e6c28312d0343ec281e99dc29a80b","sha1":"1b4d1f1cbe4a64a6a3aca8a3748a8432ff5ad135","sha256":"90e975b44ea8a7ff26ed377de030ed77d46193b462139f7014c2c9402b5e8812","sha512":"be8e92141f4be889ae8791a13d43b8e90dd6f40ceda99c2beb9be89c59fd81ea2200abf51632d89f309c1623392f75f87c41ba2804f45f649766176ebe554fce","ssdeep":"768:MYMHxWGG5KKm1l5quhxYyJrFYbRoMro79LcwtczUAOvvgzG:MY+xwy/quhxYyJrFYbRo179LcwtczUA+","tlshash":"2e0362704ec89659c9714c8a0f93bff0081639c79edd1ec141995e0dbab4364be98fab","first_seen":"2026-03-20T18:49:29.124758Z","last_seen":"2026-03-20T18:49:29.124758Z","times_seen":1,"resource_available":false,"data":null}},"time_used":450,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":450,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-20","alert":"Phishing Block","trigger":"h5-api.ofgxtw.help","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-20","alert":"Sinkholed","trigger":"h5-api.ofgxtw.help","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.ofgxtw.help/kline","fqdn":"h5-api.ofgxtw.help","domain":"ofgxtw.help","tld":"help"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ofgxtw.help/","date":"2026-03-20T18:49:00.565Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ofgxtw.help","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Mar 2026 11:30:51 GMT","end":"Mon, 15 Jun 2026 11:30:50 GMT"},"fingerprint":{"sha1":"44:64:B8:D3:FC:DF:BD:23:CB:ED:B7:16:5D:CA:F8:37:C4:6D:B8:D1","sha256":"EC:B7:49:85:AC:72:E4:BD:0F:B9:82:DC:5D:1D:0C:E0:03:1E:66:EC:CC:0D:25:BD:69:C7:15:D6:A7:12:9A:E3"}}},"request":{"raw":"POST /kline HTTP/1.1\r\nHost: h5-api.ofgxtw.help\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nlanguage: en\r\nlang: en\r\nContent-Length: 70\r\nOrigin: https://ofgxtw.help\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":70,"data":"{\"interval\":\"FIVE_MIN\",\"limit\":1000,\"market\":\"binance\",\"symbol\":\"tlm\"}"}},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 20 Mar 2026 18:49:00 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://ofgxtw.help\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nset-cookie: server_name_session=ad58d77a8fd661df53586700f977ede4; Max-Age=86400; httponly; path=/\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nWD15m6tKanBMXEVftflieotpawdZpixxdCX4tG4U7%2FYRYlcUUZAvUk7ul2ntEOA4aruYn8YH88UA%2FUq3bxpjs2CbqlcJU9wsG5%2B%2BBjvGPvdrQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9df6e4f24c47de91-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":42484,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"6f2fa73e1d95ec9f8610064e2525afef","sha1":"d206c91ad3f92b9ce02a9f0abb6837ed10e12be8","sha256":"b9abd781af70febe69a467bde29d6fcf7ee8b23ef04d0ebc0314bfdc7f0f67d1","sha512":"ebd2c2bfabdf87463f7c5d2a3273e0106743989a039d0ae4e2d4844544a95e76d7a7b71baf986c781955ac275be3cb6da8c98aad16ab59727663321df50e73b3","ssdeep":"192:raD4avua3bushOY1VXtYn1YICmtHeb7fWfYc2KRxEwOZK7pe/QomG1KmDDtt4OCS:5SxbY2K/kXYiByDWZj0O4G","tlshash":"ce138af44ecc82eac6717c892ff77ea10b5639d74edd4cd201a9ed04aa446e0a1c47a7","first_seen":"2026-03-20T18:49:29.126774Z","last_seen":"2026-03-20T18:49:29.126774Z","times_seen":1,"resource_available":false,"data":null}},"time_used":453,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":453,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-20","alert":"Phishing Block","trigger":"h5-api.ofgxtw.help","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-20","alert":"Sinkholed","trigger":"h5-api.ofgxtw.help","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"storage.googleapis.com/order-ress/order/dotdigital/df71f72a24c8464082c7b899e80626c2.jpeg?2.2.1772339973820","fqdn":"storage.googleapis.com","domain":"storage.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.251.143.155","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ofgxtw.help/","date":"2026-03-20T18:49:01.094Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"storage.googleapis.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Feb 2026 18:24:04 GMT","end":"Mon, 18 May 2026 18:24:03 GMT"},"fingerprint":{"sha1":"3C:31:BD:D2:EA:D9:B8:8E:67:17:8D:EB:DF:1B:C1:8E:89:2B:5D:7C","sha256":"C6:AF:0F:22:89:A9:F8:1D:21:85:65:8C:F4:6F:61:1C:6B:D2:10:68:AE:65:22:E2:69:75:62:C6:D8:2C:2A:08"}}},"request":{"raw":"GET /order-ress/order/dotdigital/df71f72a24c8464082c7b899e80626c2.jpeg?2.2.1772339973820 HTTP/1.1\r\nHost: storage.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/jpeg\r\nx-guploader-uploadid: AGQBYWxazwIRzr9ervT2dk1Nk_dsHYpOtMkdLPrW4k8dV15oNSbG0kpEw7uesiulBUfcltdv\r\nexpires: Fri, 20 Mar 2026 19:49:01 GMT\r\ndate: Fri, 20 Mar 2026 18:49:01 GMT\r\ncache-control: public, max-age=3600\r\nlast-modified: Fri, 18 Apr 2025 23:30:25 GMT\r\netag: \"e8cb7255942399d415c6d0c88718ed13\"\r\nx-goog-generation: 1745019025514851\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 2839\r\nx-goog-hash: crc32c=WDrOQA==, md5=6MtyVZQjmdQVxtDIhxjtEw==\r\nx-goog-storage-class: STANDARD\r\naccept-ranges: bytes\r\ncontent-length: 2839\r\nserver: UploadServer\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]}],"data":{"size":2839,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 225x225, components 3","md5":"e8cb7255942399d415c6d0c88718ed13","sha1":"b06fdc75eb1e209cba9fad0bd5606a6ba2c459e9","sha256":"bdf49f472e48c3909baf009837595007a60f504776cedde9275226178397049f","sha512":"b8ea7212148eba88461da09375de04cc7f28e5f8a6487b8e9decaff5037acff542156ddeae584aaf45712946ab95e11b7e1b39d97f1f3b41f3faf2c84c70ffcb","ssdeep":"","tlshash":"0c513b9b6ba46137c8e04a3217503a788f060d2f9bc6dd7670c0c655b9617e2e838e0c","first_seen":"2025-08-29T09:33:23.956448Z","last_seen":"2026-03-20T19:46:41.757855Z","times_seen":41,"resource_available":false,"data":null}},"time_used":217,"timings":{"blocked":70,"dns":0,"connect":0,"send":0,"wait":147,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ofgxtw.help/resource/fonts/Arial.ttf","fqdn":"ofgxtw.help","domain":"ofgxtw.help","tld":"help"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://ofgxtw.help/","date":"2026-03-20T18:48:55.961Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ofgxtw.help","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Mar 2026 11:30:51 GMT","end":"Mon, 15 Jun 2026 11:30:50 GMT"},"fingerprint":{"sha1":"44:64:B8:D3:FC:DF:BD:23:CB:ED:B7:16:5D:CA:F8:37:C4:6D:B8:D1","sha256":"EC:B7:49:85:AC:72:E4:BD:0F:B9:82:DC:5D:1D:0C:E0:03:1E:66:EC:CC:0D:25:BD:69:C7:15:D6:A7:12:9A:E3"}}},"request":{"raw":"GET /resource/fonts/Arial.ttf HTTP/1.1\r\nHost: ofgxtw.help\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ofgxtw.help/assets/index-A8xeihCB.css\r\nCookie: server_name_session=b3874cde180056c36016bf8f86315873\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 20 Mar 2026 18:48:56 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 1047012\r\nserver: cloudflare\r\nlast-modified: Sun, 01 Mar 2026 05:39:10 GMT\r\npriority: u=4,i=?0\r\netag: \"69a3d0fe-ff9e4\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xc9rWiIjdMAPAdt5BJ3OH11A2mRPqYy7eX0N126oEROze7tzI72%2BQxlx9zzi4ntBDq%2Fb2kmtWjoDgou2QT0W182glaw6PdG4mLZN\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9df6e4d5cb5dde91-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1047012,"size_decoded":0,"mime_type":"application/octet-stream","magic":"TrueType Font data, digitally signed, 25 tables, 1st \"DSIG\", 58 names, Unicode, � 2017 The Monotype Corporation. All Rights Reserved. ","md5":"ffe66dbfc4b07f36ef38dd621ad2c7cc","sha1":"e032b102cfc37c3226d17e1b462edea5fbf8fe1c","sha256":"c1216a01b3cc4e94df72577a6f618154058a1d8999ed58fa31ab7e54c7e4be4b","sha512":"3c7952b71c8117938c5284efca0e0b3e8c20d7b84c74a4890f76a72af3b26295786b0f7c33d9b6c980527b4c4c8dad628d1f5e7e5f202d11076367f082349bb3","ssdeep":"24576:NoQIQRjo/Y7wjgTmKJ4WxA7EAD4OBfDamXKE6AMra:NHIQJo/Y7wjgTm0PxAwJHE6hG","tlshash":"f125be0bf3929f0fe3902b38c9a5d761939b76189b2743b73d8c5858ecc85a45e487d2","first_seen":"2023-07-29T15:16:45Z","last_seen":"2026-06-13T13:54:53.586929Z","times_seen":1891,"resource_available":false,"data":null}},"time_used":1741,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":443,"receive":1298,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-20","alert":"Phishing Block","trigger":"ofgxtw.help","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-20","alert":"Sinkholed","trigger":"ofgxtw.help","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.ofgxtw.help/kline","fqdn":"h5-api.ofgxtw.help","domain":"ofgxtw.help","tld":"help"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ofgxtw.help/","date":"2026-03-20T18:48:59.944Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ofgxtw.help","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Mar 2026 11:30:51 GMT","end":"Mon, 15 Jun 2026 11:30:50 GMT"},"fingerprint":{"sha1":"44:64:B8:D3:FC:DF:BD:23:CB:ED:B7:16:5D:CA:F8:37:C4:6D:B8:D1","sha256":"EC:B7:49:85:AC:72:E4:BD:0F:B9:82:DC:5D:1D:0C:E0:03:1E:66:EC:CC:0D:25:BD:69:C7:15:D6:A7:12:9A:E3"}}},"request":{"raw":"OPTIONS /kline HTTP/1.1\r\nHost: h5-api.ofgxtw.help\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,lang,language\r\nOrigin: https://ofgxtw.help\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 20 Mar 2026 18:49:00 GMT\r\ncontent-length: 0\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://ofgxtw.help\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: content-type, lang, language\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nset-cookie: server_name_session=969f10ab0ecf1323be38f9cf51714704; Max-Age=86400; httponly; path=/\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IIwZYwOnjySe%2B9YqR9gPQG7lJOEcf2cZ6SF3%2FPpXzalFD74YYYSHCxWtaV8F0PZJ3TOYLpRUdcVunZLhTQSDLN8vfN41ug4fi%2BTZjjjtr4lmvw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9df6e4ee7db4de91-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-13T17:33:37.826371Z","times_seen":16391923,"resource_available":true,"data":null}},"time_used":423,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":423,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-20","alert":"Sinkholed","trigger":"h5-api.ofgxtw.help","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-20","alert":"Phishing Block","trigger":"h5-api.ofgxtw.help","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.ofgxtw.help/api/notice/getAllNoticeList","fqdn":"h5-api.ofgxtw.help","domain":"ofgxtw.help","tld":"help"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ofgxtw.help/","date":"2026-03-20T18:49:00.386Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ofgxtw.help","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Mar 2026 11:30:51 GMT","end":"Mon, 15 Jun 2026 11:30:50 GMT"},"fingerprint":{"sha1":"44:64:B8:D3:FC:DF:BD:23:CB:ED:B7:16:5D:CA:F8:37:C4:6D:B8:D1","sha256":"EC:B7:49:85:AC:72:E4:BD:0F:B9:82:DC:5D:1D:0C:E0:03:1E:66:EC:CC:0D:25:BD:69:C7:15:D6:A7:12:9A:E3"}}},"request":{"raw":"POST /api/notice/getAllNoticeList HTTP/1.1\r\nHost: h5-api.ofgxtw.help\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nlanguage: en\r\nlang: en\r\nContent-Length: 2\r\nOrigin: https://ofgxtw.help\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":2,"data":"{}"}},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 20 Mar 2026 18:49:00 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://ofgxtw.help\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nset-cookie: server_name_session=969f10ab0ecf1323be38f9cf51714704; Max-Age=86400; httponly; path=/\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YYWbq7PM%2B0kN7sERQ2rZ5yWrkNgOlKc0WKVJRE4EW6VaEmuqa5fsomVUvvnp2GzxYmzFagiwx2w3VTe5jXO0kPLDFwaCqNunmdKmzfaMOzeo8Q%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9df6e4eff85dde91-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1264,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"54922af9694d75e28abe73387c30aba3","sha1":"567c6870ce13632ea87d69cdf9a457a06fbff526","sha256":"8e3e7a20f025ddf20928399993472738bc5ca08088f321d549c9df8e2d32d172","sha512":"218a0ff8a786c805b918e2f2b1bb6feeb37f62d1d28a75f6e79be5a1b0ce5864963152da2446c26613986616851c5c355550fcffa34482a4a305cccba0abd155","ssdeep":"","tlshash":"3221a84f217c8e790c1a89c321c97ccc916e0743e2a4cc74876bcf6c82f15ba5b2b608","first_seen":"2025-11-01T17:44:45.836729Z","last_seen":"2026-03-20T19:46:41.73868Z","times_seen":28,"resource_available":false,"data":null}},"time_used":226,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":226,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-20","alert":"Sinkholed","trigger":"h5-api.ofgxtw.help","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-20","alert":"Phishing Block","trigger":"h5-api.ofgxtw.help","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.ofgxtw.help/kline","fqdn":"h5-api.ofgxtw.help","domain":"ofgxtw.help","tld":"help"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ofgxtw.help/","date":"2026-03-20T18:49:00.531Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ofgxtw.help","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Mar 2026 11:30:51 GMT","end":"Mon, 15 Jun 2026 11:30:50 GMT"},"fingerprint":{"sha1":"44:64:B8:D3:FC:DF:BD:23:CB:ED:B7:16:5D:CA:F8:37:C4:6D:B8:D1","sha256":"EC:B7:49:85:AC:72:E4:BD:0F:B9:82:DC:5D:1D:0C:E0:03:1E:66:EC:CC:0D:25:BD:69:C7:15:D6:A7:12:9A:E3"}}},"request":{"raw":"POST /kline HTTP/1.1\r\nHost: h5-api.ofgxtw.help\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nlanguage: en\r\nlang: en\r\nContent-Length: 70\r\nOrigin: https://ofgxtw.help\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":70,"data":"{\"interval\":\"FIVE_MIN\",\"limit\":1000,\"market\":\"binance\",\"symbol\":\"btc\"}"}},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 20 Mar 2026 18:49:00 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://ofgxtw.help\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nset-cookie: server_name_session=ad58d77a8fd661df53586700f977ede4; Max-Age=86400; httponly; path=/\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1C3LBsZN%2FeEgl3zJq28MtRFWGh8a6KddY2vZbKtKocqZBWtu0w5LnzjdXLF%2Bxdznj6kWO6ONnTO4WnePTwJ1auRny1YqJuTqvWTfbDUPYQI6WQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9df6e4f20bc2de91-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":42356,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"dedb56c9169403cd8eb34a6fc0690250","sha1":"6340471e929b4bb05a83ce8df7133c4e7576ce85","sha256":"16a82080802545ce313911617ab0f9504940f84b0f412c51b131fb86f5b9fd7b","sha512":"ef1e4febac9a940775d4e5825fe8f211115a42d7f538af98b91ba2320d25f1e94487ee13ed40d4b81dc85e3e13e94f797e216db1f52ea55a9cfa5593e869633e","ssdeep":"768:WRnF9fMhCN1cyutNGgeHuRwkAh7pkBv2fIsvq2ybWYi+H8sYGm:WRnc9leHSwku7pkBefDvhsWxsYGm","tlshash":"741348707fa5904cd9349dfa0ba3ecf30a0eb3c70bdd4e9415ba16536aa4279d118b87","first_seen":"2026-03-20T18:49:29.138146Z","last_seen":"2026-03-20T18:49:29.138146Z","times_seen":1,"resource_available":false,"data":null}},"time_used":444,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":444,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-20","alert":"Phishing Block","trigger":"h5-api.ofgxtw.help","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-20","alert":"Sinkholed","trigger":"h5-api.ofgxtw.help","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.ofgxtw.help/kline","fqdn":"h5-api.ofgxtw.help","domain":"ofgxtw.help","tld":"help"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ofgxtw.help/","date":"2026-03-20T18:49:00.544Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ofgxtw.help","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Mar 2026 11:30:51 GMT","end":"Mon, 15 Jun 2026 11:30:50 GMT"},"fingerprint":{"sha1":"44:64:B8:D3:FC:DF:BD:23:CB:ED:B7:16:5D:CA:F8:37:C4:6D:B8:D1","sha256":"EC:B7:49:85:AC:72:E4:BD:0F:B9:82:DC:5D:1D:0C:E0:03:1E:66:EC:CC:0D:25:BD:69:C7:15:D6:A7:12:9A:E3"}}},"request":{"raw":"POST /kline HTTP/1.1\r\nHost: h5-api.ofgxtw.help\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nlanguage: en\r\nlang: en\r\nContent-Length: 71\r\nOrigin: https://ofgxtw.help\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":71,"data":"{\"interval\":\"FIVE_MIN\",\"limit\":1000,\"market\":\"binance\",\"symbol\":\"doge\"}"}},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 20 Mar 2026 18:49:00 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://ofgxtw.help\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nset-cookie: server_name_session=969f10ab0ecf1323be38f9cf51714704; Max-Age=86400; httponly; path=/\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9pnebR5XIaPuiSzBy5geZaBU5JmrdMQNLTMhyFwBu0zZcTbI2TulKGV3UCVgDLIAaFOjeHt90H5D01I5%2FCkpIuMA5ArOhpf64lo8mCv4fBW5tg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9df6e4f21be7de91-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":40749,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"9b2d2ced0fbecc8689d5fefdc0dc6fdc","sha1":"bf29b3230a09114c8ed70e1b2f84b649c5bec339","sha256":"efc3622b22d8c2706abbaada9c119ed6680f29912dac67ccce708a2f9c771d05","sha512":"2163b8d36e8d590e1925f4cefc3cfde81a79c201deba9986275e1d8c4c396a4f554ea4d354b43887a5ffff4b195d91d8bc0919c582a092e568473951fe8454fc","ssdeep":"384:+4FW2bw5s6ixDPQyZ+V4z/chpxV9rxpWNuomiJ85TgTlaS/ag2kLWVNijHmorCbr:DFWg6IPQyotxgmdgka8Gza","tlshash":"16037f744a988255d4324c8bef93bef4181639c35ecd4dc521eb1e0daa4132fa1b5fba","first_seen":"2026-03-20T18:49:29.139893Z","last_seen":"2026-03-20T18:49:29.139893Z","times_seen":1,"resource_available":false,"data":null}},"time_used":369,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":369,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-20","alert":"Phishing Block","trigger":"h5-api.ofgxtw.help","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-20","alert":"Sinkholed","trigger":"h5-api.ofgxtw.help","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"storage.googleapis.com/order-ress/order/dotdigital/c3814e70d39e45f49ea590f4c4e37d3c.png?2.2.1772339973820","fqdn":"storage.googleapis.com","domain":"storage.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.251.143.155","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ofgxtw.help/","date":"2026-03-20T18:49:01.098Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"storage.googleapis.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Feb 2026 18:24:04 GMT","end":"Mon, 18 May 2026 18:24:03 GMT"},"fingerprint":{"sha1":"3C:31:BD:D2:EA:D9:B8:8E:67:17:8D:EB:DF:1B:C1:8E:89:2B:5D:7C","sha256":"C6:AF:0F:22:89:A9:F8:1D:21:85:65:8C:F4:6F:61:1C:6B:D2:10:68:AE:65:22:E2:69:75:62:C6:D8:2C:2A:08"}}},"request":{"raw":"GET /order-ress/order/dotdigital/c3814e70d39e45f49ea590f4c4e37d3c.png?2.2.1772339973820 HTTP/1.1\r\nHost: storage.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\nx-guploader-uploadid: AGQBYWxkluDL-7eHdmWkuWgYBweQvC1u-xN-9ZqVsmPdsnabQXzmi0456grcFOv5JT_F1wzO\r\nexpires: Fri, 20 Mar 2026 19:49:01 GMT\r\ndate: Fri, 20 Mar 2026 18:49:01 GMT\r\ncache-control: public, max-age=3600\r\nlast-modified: Fri, 18 Apr 2025 23:51:31 GMT\r\netag: \"8061eb8408a13b457654ab13953198fb\"\r\nx-goog-generation: 1745020290975795\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 1936\r\nx-goog-hash: crc32c=aCP/tA==, md5=gGHrhAihO0V2VKsTlTGY+w==\r\nx-goog-storage-class: STANDARD\r\naccept-ranges: bytes\r\ncontent-length: 1936\r\nserver: UploadServer\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":1936,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced","md5":"8061eb8408a13b457654ab13953198fb","sha1":"b3c6ec63544ec3bfdce48b8595c1d0776b9a373c","sha256":"24694648b0f76973506d291e2206c941e5d55be5ea85ed6c11fc408a0d518894","sha512":"ee8c844a1d8ac78116b89df7ea1e2880e8425f7c5ff8ebbc59dc0bbb1aa963d2c49a8db92337c3709bc1c412606d88c5a3f3c5005d5c6c05b7e002aaea4f3a29","ssdeep":"","tlshash":"f2412c4b12016e699ab1060d5ae1134c54fec8b4d496ac907d30ff98eb87f588ec934a","first_seen":"2024-12-03T23:58:43.639463Z","last_seen":"2026-06-04T15:28:13.46644Z","times_seen":104,"resource_available":false,"data":null}},"time_used":222,"timings":{"blocked":68,"dns":0,"connect":0,"send":0,"wait":154,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ofgxtw.help/charting_library/charting_library.min.js","fqdn":"ofgxtw.help","domain":"ofgxtw.help","tld":"help"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ofgxtw.help/","date":"2026-03-20T18:48:55.748Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ofgxtw.help","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Mar 2026 11:30:51 GMT","end":"Mon, 15 Jun 2026 11:30:50 GMT"},"fingerprint":{"sha1":"44:64:B8:D3:FC:DF:BD:23:CB:ED:B7:16:5D:CA:F8:37:C4:6D:B8:D1","sha256":"EC:B7:49:85:AC:72:E4:BD:0F:B9:82:DC:5D:1D:0C:E0:03:1E:66:EC:CC:0D:25:BD:69:C7:15:D6:A7:12:9A:E3"}}},"request":{"raw":"GET /charting_library/charting_library.min.js HTTP/1.1\r\nHost: ofgxtw.help\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: server_name_session=b3874cde180056c36016bf8f86315873\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 20 Mar 2026 18:48:55 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Sun, 01 Mar 2026 05:39:10 GMT\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69a3d0fe-2a6a\"\r\nexpires: Sat, 21 Mar 2026 03:57:21 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\nage: 10294\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tVIfdtJjFxFJPldBlQZy1UhoC%2F4LftgoFC2FoysBwMW4j%2FVWO51feDgzDidET3C5EBZgxZ9oBrOvAwYHFoa0QNdlRbn3ZbemhcKQ\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9df6e4d458fade91-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10858,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (10857)","md5":"8573e89d9ec535663d75f21b1f08109c","sha1":"a8d9eea0b157ceeffc38d4254e6f6abc9d697d10","sha256":"cb0c6c9f1771d252eee7caa043bdd7cfffbd52c2cc4b18b7be7c4554ed069151","sha512":"55d728fa1e0682725f94b17387c6790792d3d34b43652a00097876118575bd6cefa20916d80674519005d72f20ecbb745e9645516c056e6f9bb6691d5efbcb33","ssdeep":"192:9fdWSo7ktFUnoBelr6lw2LfnzuIQPlaJ1i10K+Ei/ISJhvHIheu5Ph3Ffam:vWS2ktFUnoIlD2LfnqIJimK+5/ISJhvu","tlshash":"6e224f58ed2478720acb54f0427f180f8239e278d84944ed3cc4e6ec59fd44a6a6fbb8","first_seen":"2023-08-16T00:37:19Z","last_seen":"2026-06-13T12:10:03.125521Z","times_seen":1223,"resource_available":true,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-20","alert":"Phishing Block","trigger":"ofgxtw.help","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-20","alert":"Sinkholed","trigger":"ofgxtw.help","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ofgxtw.help/resource/images/light/ai1.svg","fqdn":"ofgxtw.help","domain":"ofgxtw.help","tld":"help"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ofgxtw.help/","date":"2026-03-20T18:48:59.681Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ofgxtw.help","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Mar 2026 11:30:51 GMT","end":"Mon, 15 Jun 2026 11:30:50 GMT"},"fingerprint":{"sha1":"44:64:B8:D3:FC:DF:BD:23:CB:ED:B7:16:5D:CA:F8:37:C4:6D:B8:D1","sha256":"EC:B7:49:85:AC:72:E4:BD:0F:B9:82:DC:5D:1D:0C:E0:03:1E:66:EC:CC:0D:25:BD:69:C7:15:D6:A7:12:9A:E3"}}},"request":{"raw":"GET /resource/images/light/ai1.svg HTTP/1.1\r\nHost: ofgxtw.help\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: server_name_session=b3874cde180056c36016bf8f86315873\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 20 Mar 2026 18:49:00 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Sun, 01 Mar 2026 05:39:10 GMT\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69a3d0fe-2d31\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sRX7QotwN5hUtC7HKWLPIgOV7as7PjhXEzY6mlwH8BlYhaCybHHAk8KNtGTrU1Y4mAwmWM14mL4E3OKZUOMIK2Z08OGVq%2FQMP7S2\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9df6e4ed0b13de91-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11569,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"fad7f348370ad25512357d8c7c20b3ac","sha1":"a451230898d83bb5a76762e1f4bdc9deccf49462","sha256":"b6501107cf61530810ec864b8d58f3ec21275ffa0467d01a7a969663588158f3","sha512":"1510f8c8cf0d9c49b23035370f90fc58d88300d3c649ecc29b8454296f967c16e6cc8339eeeaabbd6e6cfb1c9cacf26d48d06b41d1351070bacef700092aeb91","ssdeep":"192:oreDaEOJ8rpKaEJtym9iiSEYrydZm94rUD3o:oreDWJ8rpKRxDS4YE","tlshash":"4132742ab3aaed7af140d3e8ca42c035215556e37641d1a1c6e06f6fd8201cd1a7fdcb","first_seen":"2024-10-31T21:21:10.384677Z","last_seen":"2026-06-01T14:38:39.501865Z","times_seen":166,"resource_available":false,"data":null}},"time_used":430,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":430,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-20","alert":"Phishing Block","trigger":"ofgxtw.help","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-20","alert":"Sinkholed","trigger":"ofgxtw.help","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.ofgxtw.help/kline","fqdn":"h5-api.ofgxtw.help","domain":"ofgxtw.help","tld":"help"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ofgxtw.help/","date":"2026-03-20T18:48:59.966Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ofgxtw.help","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Mar 2026 11:30:51 GMT","end":"Mon, 15 Jun 2026 11:30:50 GMT"},"fingerprint":{"sha1":"44:64:B8:D3:FC:DF:BD:23:CB:ED:B7:16:5D:CA:F8:37:C4:6D:B8:D1","sha256":"EC:B7:49:85:AC:72:E4:BD:0F:B9:82:DC:5D:1D:0C:E0:03:1E:66:EC:CC:0D:25:BD:69:C7:15:D6:A7:12:9A:E3"}}},"request":{"raw":"OPTIONS /kline HTTP/1.1\r\nHost: h5-api.ofgxtw.help\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,lang,language\r\nOrigin: https://ofgxtw.help\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 20 Mar 2026 18:49:00 GMT\r\ncontent-length: 0\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://ofgxtw.help\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: content-type, lang, language\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nset-cookie: server_name_session=969f10ab0ecf1323be38f9cf51714704; Max-Age=86400; httponly; path=/\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AZZvC8HbnZkHgZqq3cX6TGMhKA9mymxGysLkMvurMGVecZmFRTuDi2x9vqQgTiaDi%2BRmLV7aXTHDbKgQFa1GehZU4FiNB2zkzH%2BEGfzoW5ZBOg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9df6e4eeae0cde91-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-13T17:33:37.826371Z","times_seen":16391923,"resource_available":true,"data":null}},"time_used":437,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":437,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-20","alert":"Phishing Block","trigger":"h5-api.ofgxtw.help","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-20","alert":"Sinkholed","trigger":"h5-api.ofgxtw.help","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.ofgxtw.help/kline","fqdn":"h5-api.ofgxtw.help","domain":"ofgxtw.help","tld":"help"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ofgxtw.help/","date":"2026-03-20T18:49:00.554Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ofgxtw.help","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Mar 2026 11:30:51 GMT","end":"Mon, 15 Jun 2026 11:30:50 GMT"},"fingerprint":{"sha1":"44:64:B8:D3:FC:DF:BD:23:CB:ED:B7:16:5D:CA:F8:37:C4:6D:B8:D1","sha256":"EC:B7:49:85:AC:72:E4:BD:0F:B9:82:DC:5D:1D:0C:E0:03:1E:66:EC:CC:0D:25:BD:69:C7:15:D6:A7:12:9A:E3"}}},"request":{"raw":"POST /kline HTTP/1.1\r\nHost: h5-api.ofgxtw.help\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nlanguage: en\r\nlang: en\r\nContent-Length: 70\r\nOrigin: https://ofgxtw.help\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":70,"data":"{\"interval\":\"FIVE_MIN\",\"limit\":1000,\"market\":\"binance\",\"symbol\":\"lrc\"}"}},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 20 Mar 2026 18:49:00 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://ofgxtw.help\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nset-cookie: server_name_session=969f10ab0ecf1323be38f9cf51714704; Max-Age=86400; httponly; path=/\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eT%2Fgs6QYjzNSh%2BeULQujCBCiOS%2FoY2VcrlH35vpxthmEqqrZlCme0gghsPRB%2BygcPZmLSiMo8UBFQxXwNbT5Q2wCqL63ERQ8b1q%2FZzR1MBiyNw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9df6e4f22c0fde91-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":40225,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"1ec131dc582c6e59503d5e0c384b9e8b","sha1":"dd46b687d2dc31cda9099a0c161cc69641fa8498","sha256":"8afab302b0803beaa4851b8ab23fa13240dbb3f4d10e1a5a590e6f67ac51f65c","sha512":"4d2e1e4a183f3cdc5c4e0208e8eadec66d0381ddacacd5c35abc9facdf38e622276265a8be638a62fe4f6b3e3a67526900b929133ae3d7cfa8e9ee41b1a5e376","ssdeep":"768:ZnLKvXJ2wN/kjVjtgO/jN3GkfFHU4iK2c7oJbs3gLK:mIwN/2VjtgO/jN3Gkd04X2c7oJbAgLK","tlshash":"2d0383344a999209c8337c8a2fdb7ee0495239d35ecd9dc501ed9e4c6a443e8d39c7ab","first_seen":"2026-03-20T18:49:29.15113Z","last_seen":"2026-03-20T18:49:29.15113Z","times_seen":1,"resource_available":false,"data":null}},"time_used":451,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":451,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-20","alert":"Sinkholed","trigger":"h5-api.ofgxtw.help","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-20","alert":"Phishing Block","trigger":"h5-api.ofgxtw.help","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"storage.googleapis.com/order-ress/order/dotdigital/06368c6873eb44bb883a140223b29d6c.jpeg?2.2.1772339973820","fqdn":"storage.googleapis.com","domain":"storage.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.251.143.155","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ofgxtw.help/","date":"2026-03-20T18:49:01.096Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"storage.googleapis.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Feb 2026 18:24:04 GMT","end":"Mon, 18 May 2026 18:24:03 GMT"},"fingerprint":{"sha1":"3C:31:BD:D2:EA:D9:B8:8E:67:17:8D:EB:DF:1B:C1:8E:89:2B:5D:7C","sha256":"C6:AF:0F:22:89:A9:F8:1D:21:85:65:8C:F4:6F:61:1C:6B:D2:10:68:AE:65:22:E2:69:75:62:C6:D8:2C:2A:08"}}},"request":{"raw":"GET /order-ress/order/dotdigital/06368c6873eb44bb883a140223b29d6c.jpeg?2.2.1772339973820 HTTP/1.1\r\nHost: storage.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/jpeg\r\nx-guploader-uploadid: AGQBYWziniAdGHKDC3CFvMZB1SpfMTb1xhDd17VN6GteBLRMO_cJKfqoVyC51y-TR0n7fqzG\r\nexpires: Fri, 20 Mar 2026 19:49:01 GMT\r\ndate: Fri, 20 Mar 2026 18:49:01 GMT\r\ncache-control: public, max-age=3600\r\nlast-modified: Fri, 18 Apr 2025 23:31:11 GMT\r\netag: \"908f16320a0a32c8117ca943c2aa231c\"\r\nx-goog-generation: 1745019071782236\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 7196\r\nx-goog-hash: crc32c=tCfjHQ==, md5=kI8WMgoKMsgRfKlDwqojHA==\r\nx-goog-storage-class: STANDARD\r\naccept-ranges: bytes\r\ncontent-length: 7196\r\nserver: UploadServer\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":7196,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 225x225, components 3","md5":"908f16320a0a32c8117ca943c2aa231c","sha1":"b49e31cd823528649adf1b0fcab343e4e6055b33","sha256":"2a03254b988fdcf3c84ae977a221b83ce9d10f896b0ec508fcbe877c22ad9161","sha512":"531db683a9c449a6d0ace9b1e73a6bd3561c54d71f0421d4255b9698d7bd12c74779b7805cafcebd0fd50c437c64f29d6d761af58e57fa57874b7df5cbe1c06c","ssdeep":"96:cmO7bsMr5XAG3VBRynGlNqbRuYrkVkls7VOZ1d3AHI1K9v3Tv9Cre:0xrqGlanNbgYoWelkyZCre","tlshash":"8de19de8986016208ecac5f0598578a3d4f893cabebb7e4a44896e01c6555ad3f52f34","first_seen":"2025-02-06T02:55:20.514077Z","last_seen":"2026-04-07T11:52:26.924617Z","times_seen":91,"resource_available":false,"data":null}},"time_used":222,"timings":{"blocked":69,"dns":0,"connect":0,"send":0,"wait":152,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}