{"report_id":"86997793-9af3-4053-8da9-64705cf29fd7","version":6,"status":"done","tags":[],"date":"2026-01-24T22:33:15Z","url":{"schema":"https","addr":"origindefi.live/","fqdn":"origindefi.live","domain":"origindefi.live","tld":"live"},"ip":{"addr":"104.21.53.97","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"origindefi.live/","fqdn":"origindefi.live","domain":"origindefi.live","tld":"live"},"title":"Origin","dom":{"size":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-10T18:57:29.026751Z","times_seen":17822672,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"origindefi.live/","fqdn":"origindefi.live","domain":"origindefi.live","tld":"live"},"ip":{"addr":"104.21.53.97","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-02-28T22:33:15Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"origindefi.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null},"summary":[{"fqdn":"origindefi.live","ip":{"addr":"104.21.53.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-01-24T14:02:42.244223Z","last_seen":"2026-01-24T14:02:42.244223Z","alert_count":7,"request_count":7,"received_data":7159050,"sent_data":3310,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"origindefi.live/38e91018-4fd1-424f-9a07-8b4f2fe4d924","fqdn":"origindefi.live","domain":"origindefi.live","tld":"live"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"f11bcdc7b7757c117a8de0db3a4c25b8","sha1":"962e4d08a960106c829d0f9d492d7b891927adab","sha256":"b60b89c0c92cf57329c8590a2c5540cece4def64e4e7bf04f2d39b8ffa3b2748","sha512":"7461553dadb09db423bda8c47a58f8cdade82aa710a0f4415cde912e7a88cd4471ea86aa58a2e5097c90e2cb45ac410104019c56a04c35955e827f0bb0796040","ssdeep":"6144:vkWGL6BSn5NGCk3zi0mCw8wLPNU2HZjGfty3:cjkSnv1k20mCwFnHRGfty3","tlshash":"1044810609ac4f7986ec22e015f72cc401794e0ad9dc3cbfb9ada1579e25bd6e0c279d","size":259964,"data":"","first_seen":"2025-07-13T03:04:16.940864Z","last_seen":"2026-08-10T18:12:06.649103Z","times_seen":5109,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"origindefi.live/cdn-cgi/challenge-platform/scripts/jsd/main.js","fqdn":"origindefi.live","domain":"origindefi.live","tld":"live"},"ip":{"addr":"104.21.53.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9fdcf15910f6b8b6546e906b4b7682ec","sha1":"f8c869121b6e3349c88151ee1d4d66fc9653ea63","sha256":"5b1f580ac57105696632e53cefabe7d03ef61dd2ce49306ca2012ac9ee30d3ab","sha512":"4aaf0e42c37aa899281b3944f6a45b0f2d2b93ceb8717ba51a3dab39433b48c9b601a25866af6d231df500cfbc64cf7c8993e26d6fbc94d274629a6c7bf125f9","ssdeep":"384:SQCE3PU2jeB+OLxr0MhcMu6XPnUnwES2QGKKl5nDTDviOKNMbPN7FDAb:pCSPU26Bxr0Mfu6XPn8S2R5DTfM","tlshash":"6982a5d93da9b56432af3894002f31fa73a96d51341a5f5a9310d4e0be6070a6bfff18","size":19201,"data":"","first_seen":"2026-01-24T22:33:16.98834Z","last_seen":"2026-01-24T22:33:16.98834Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"origindefi.live/swiper-10.0.4.min.js","fqdn":"origindefi.live","domain":"origindefi.live","tld":"live"},"ip":{"addr":"104.21.53.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"1a19d46f14ec019c883315e5873718f5","sha1":"431ae8e824bdc043f279601ac75a8333f58b3b73","sha256":"b4b6df004a4864963672290f0a749ae7e10395b8f592072bc39a05836c3846c7","sha512":"a699f3a5b76f4c3c66aca1ade192a173ec342c18a370b45f5c30f0da83fe0aab9e10fff76b3225a08ffed74f6f81ce93e8416e4b025e0d03b27c726b922d06e4","ssdeep":"768:S8yy4ci5B67ox5aZdrl7GJyx6ChgSc6J7/FeAZcxjSc1B868/XycphnJegfgcHGU:66uaZLSIEChLbJ7/FdJeguC","tlshash":"3153a7ea540ad0d98d1150cdd473f809e4680993cdacf1a3ea6cddc6b81ef6ac44727b","size":65194,"data":"","first_seen":"2026-01-20T01:58:37.422501Z","last_seen":"2026-07-27T12:10:30.295718Z","times_seen":20,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"about","addr":"about:blank","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"9d22554e323e8075d9f53871c1a21081","sha1":"e5c3b92bc84117b1fbe996056bb9cb984ba9270c","sha256":"4a4981a373b2065ee656bdf22fdf67f1105639b34c03ff74a8a4597fa9327e4f","sha512":"8d33bf0e1ffb92e5c4d404e10f260917955b8ccf2841c0c6c369173a8382873bb6793866dda72886568769ba645c8fff265d9183f4521116f10f6990bd08c130","ssdeep":"","tlshash":"05d023fa2875893065d8024e61f5d3f96665316077137244c2d9cc1f7f21dd344b165c","size":217,"data":"","first_seen":"2026-01-24T22:33:16.992437Z","last_seen":"2026-01-24T22:33:16.992437Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"origindefi.live/","fqdn":"origindefi.live","domain":"origindefi.live","tld":"live"},"ip":{"addr":"104.21.53.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"96520dfb52f314de62746c77370ef7e9","sha1":"69ddd139c0dce5840e918704b4dce1cf6b49d645","sha256":"36709fe926c6a9679653c98babb0b65ed99ccbdcef5b500ab63f5f2438a31480","sha512":"8adc85ac488ac3a7560592a959c1f788fc25da72663711b765f2b5be633f1cb7aba8c868dc747f75f0149cabc0f55c3709a7fb6e4c7c31684a7e0f5ae17ad0cc","ssdeep":"","tlshash":"0811c0b93a1a5534cac5418b31bee7b93e3260717a02a184c36ccc295d58e8714efdbe","size":902,"data":"","first_seen":"2026-01-24T22:33:16.993379Z","last_seen":"2026-01-24T22:33:16.993379Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"origindefi.live/","fqdn":"origindefi.live","domain":"origindefi.live","tld":"live"},"ip":{"addr":"104.21.53.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"762d046021096eb788ae1c9478f197f7","sha1":"47b979eb953ed4f3d4edc28d60673cb84ea9c8b8","sha256":"99e010c11037930058f53b616c1396a45d291c60e389d9b14b628589bc73d354","sha512":"34bafc49e21299b69fbae0dfff7fa5ed6eb166910bbcd76937326420c322739bd11ff3c4ec2c89dae06d70d35b7fa6e3f53e0662555c55ce560f44412f7c78e8","ssdeep":"768:lg+ykcwZBm/gC7wsiws2atWMvIr3eAPcHfScrBwX/XycJFn5IMLUcHyc0Pp9:TmY5s2Or315IMST","tlshash":"c553a5e5591bd4e88e5120ded873e906e4280e63cd6cf263a62cedc1781df66c48727b","size":62253,"data":"","first_seen":"2026-01-20T01:58:37.429846Z","last_seen":"2026-07-27T12:10:30.337699Z","times_seen":20,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"origindefi.live/cdn-cgi/challenge-platform/scripts/jsd/main.js","fqdn":"origindefi.live","domain":"origindefi.live","tld":"live"},"ip":{"addr":"104.21.53.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://origindefi.live/","date":"2026-01-24T22:32:49.958Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"origindefi.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 21 Dec 2025 09:32:05 GMT","end":"Sat, 21 Mar 2026 10:30:38 GMT"},"fingerprint":{"sha1":"F4:64:E5:11:64:AB:0C:90:38:87:2B:DC:3A:D8:F9:EB:2F:F0:B3:39","sha256":"1A:B4:8A:A9:33:3D:A6:66:19:1B:40:43:03:6B:42:0E:AE:5B:F6:50:7C:DC:85:BF:8B:5F:0F:2B:D2:A8:85:A1"}}},"request":{"raw":"GET /cdn-cgi/challenge-platform/scripts/jsd/main.js HTTP/1.1\r\nHost: origindefi.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 302 Found\r\ndate: Sat, 24 Jan 2026 22:32:49 GMT\r\npriority: u=3,i=?0\r\ncf-ray: 9c32fd303a6eb50b-OSL\r\nlocation: /cdn-cgi/challenge-platform/h/b/scripts/jsd/d251aa49a8a3/main.js?\r\ncache-control: max-age=300, stale-if-error=10800, stale-while-revalidate=10800, public\r\naccess-control-allow-origin: *\r\ncontent-length: 0\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=SWHL56%2FOITs6eAI09uM5D%2F%2Fks8lmobO6eLmstrJzbxwARXL2g579W%2BNh4pt3PylYBuem5OpCD1lZPjnKhBprO%2BasiDGzecST1Yuj8%2BNuYIL3fZI8%2FiyS5VIkGBgupw5YISY%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri, cfL4;desc=\"?proto=QUIC\u0026rtt=813\u0026min_rtt=505\u0026rtt_var=350\u0026sent=448\u0026recv=42\u0026lost=0\u0026retrans=0\u0026sent_bytes=513318\u0026recv_bytes=3460\u0026delivery_rate=67892507\u0026ipace=0\u0026icwnd=12000\u0026ss_exit_cwnd=100595\u0026ss_exit_bw=67890386\u0026ss_exit_reason=2\u0026cwnd=82724\u0026unsent_bytes=0\u0026cid=c5b5873733229095\u0026ts=763\u0026inflight_dur=70\u0026x=55\"\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19201,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-10T18:57:29.026751Z","times_seen":17822672,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"origindefi.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"origindefi.live/secureproxy?e=jscdn/getFile","fqdn":"origindefi.live","domain":"origindefi.live","tld":"live"},"ip":{"addr":"104.21.53.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://origindefi.live/","date":"2026-01-24T22:32:49.965Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"origindefi.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 21 Dec 2025 09:32:05 GMT","end":"Sat, 21 Mar 2026 10:30:38 GMT"},"fingerprint":{"sha1":"F4:64:E5:11:64:AB:0C:90:38:87:2B:DC:3A:D8:F9:EB:2F:F0:B3:39","sha256":"1A:B4:8A:A9:33:3D:A6:66:19:1B:40:43:03:6B:42:0E:AE:5B:F6:50:7C:DC:85:BF:8B:5F:0F:2B:D2:A8:85:A1"}}},"request":{"raw":"POST /secureproxy?e=jscdn/getFile HTTP/1.1\r\nHost: origindefi.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nContent-Length: 37\r\nOrigin: https://origindefi.live\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":37,"data":"{\"permit_key\":\"mg1pwpm0u0vtjw373zsf\"}"}},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 24 Jan 2026 22:32:50 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncast-mode: default\r\ncontent-security-policy: frame-ancestors http: https:, frame-ancestors http: https:\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,PUT,POST,DELETE,PATCH,OPTIONS\r\naccess-control-allow-headers: Content-Type, Authorization, Content-Length, X-Requested-With, Accept, Origin\r\naccess-control-allow-credentials: true\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding, origin, access-control-request-method, access-control-request-headers\r\nx-content-type-options: nosniff, nosniff\r\nx-xss-protection: 1; mode=block, 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=X8hjdsQKY3awQIcFWGTMwmWpFedxnIfI92fvKd%2BKi5YfZ5yrr3tq6L0cmh2eVF%2FCdEJYmQVFniCYx89MNx1xM4vWjH7Dp%2FdWc3sNbiWIb08j%2BQ%3D%3D\"}]}\r\ncontent-encoding: gzip\r\nalt-svc: h3=\":443\"; ma=86400\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\npriority: u=4,i=?0\r\ncf-ray: 9c32fd304a6fb50b-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3974655,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"bfeb51ae500d646ea73d572bb77e8cf0","sha1":"d7e832daf15259fcdbb6c77ccd09ebee75cac21a","sha256":"cda79ab2d4641750e793a71d920386b948c1b0bde27c25a5b19d477e2f4d4cea","sha512":"01e07d210f7654bfc893e25ba943878134b294f5ca7c26befc4c460cba1dd7f79e646d9a0f391a062ab843cf453fc6a57a4ec3918ceb9ac73f002200bc9ef317","ssdeep":"24576:yXOZ4GfBX8AV3AXHNRB1S1QtWocCWm1LTs0Hiq1AUx+7OJzhZ35UaCA:yXM7ZX/3kHrS1iWobxpdhl5UO","tlshash":"052522e5e041ead6292459ba65f07eceb8de40affed567311090fd4074e60a9c2dcf82","first_seen":"2026-01-24T22:33:16.98677Z","last_seen":"2026-01-24T22:33:16.98677Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1362,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":728,"receive":634,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"origindefi.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"origindefi.live/cdn-cgi/challenge-platform/h/b/scripts/jsd/d251aa49a8a3/main.js?","fqdn":"origindefi.live","domain":"origindefi.live","tld":"live"},"ip":{"addr":"104.21.53.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://origindefi.live/","date":"2026-01-24T22:32:49.977Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"origindefi.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 21 Dec 2025 09:32:05 GMT","end":"Sat, 21 Mar 2026 10:30:38 GMT"},"fingerprint":{"sha1":"F4:64:E5:11:64:AB:0C:90:38:87:2B:DC:3A:D8:F9:EB:2F:F0:B3:39","sha256":"1A:B4:8A:A9:33:3D:A6:66:19:1B:40:43:03:6B:42:0E:AE:5B:F6:50:7C:DC:85:BF:8B:5F:0F:2B:D2:A8:85:A1"}}},"request":{"raw":"GET /cdn-cgi/challenge-platform/h/b/scripts/jsd/d251aa49a8a3/main.js? HTTP/1.1\r\nHost: origindefi.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 24 Jan 2026 22:32:49 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=Wmmhe%2BpqYxIrV5aBViBLyXT%2BWTtARwc%2FXhXX6EoxkMDbv78gmlvjztbD1bEvfFLUocjBkcuQrolPawY2bbXQAnoQGASxkmRh%2F2fif8uZz1X1fLKdukM%2FA1D5ThuK6kfWbi0%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncontent-encoding: br\r\ncache-control: max-age=14400, stale-if-error=10800, stale-while-revalidate=10800, public\r\nx-content-type-options: nosniff\r\ncf-ray: 9c32fd305a70b50b-OSL\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri, cfL4;desc=\"?proto=QUIC\u0026rtt=813\u0026min_rtt=505\u0026rtt_var=350\u0026sent=450\u0026recv=43\u0026lost=0\u0026retrans=0\u0026sent_bytes=514118\u0026recv_bytes=3726\u0026delivery_rate=67892507\u0026ipace=0\u0026icwnd=12000\u0026ss_exit_cwnd=100595\u0026ss_exit_bw=67890386\u0026ss_exit_reason=2\u0026cwnd=82724\u0026unsent_bytes=0\u0026cid=c5b5873733229095\u0026ts=777\u0026inflight_dur=70\u0026x=55\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19201,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (19201), with no line terminators","md5":"9fdcf15910f6b8b6546e906b4b7682ec","sha1":"f8c869121b6e3349c88151ee1d4d66fc9653ea63","sha256":"5b1f580ac57105696632e53cefabe7d03ef61dd2ce49306ca2012ac9ee30d3ab","sha512":"4aaf0e42c37aa899281b3944f6a45b0f2d2b93ceb8717ba51a3dab39433b48c9b601a25866af6d231df500cfbc64cf7c8993e26d6fbc94d274629a6c7bf125f9","ssdeep":"384:SQCE3PU2jeB+OLxr0MhcMu6XPnUnwES2QGKKl5nDTDviOKNMbPN7FDAb:pCSPU26Bxr0Mfu6XPn8S2R5DTfM","tlshash":"6982a5d93da9b56432af3894002f31fa73a96d51341a5f5a9310d4e0be6070a6bfff18","first_seen":"2026-01-24T22:33:16.98834Z","last_seen":"2026-01-24T22:33:16.98834Z","times_seen":1,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":9,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"origindefi.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"origindefi.live/cdn-cgi/challenge-platform/h/b/jsd/oneshot/d251aa49a8a3/0.5809739697929515:1769290002:C3XtoYylUF6Jk9M2ttjAv_67SHvY4ulFx2YUhoweOCw/9c32fd2b4c1da0f0","fqdn":"origindefi.live","domain":"origindefi.live","tld":"live"},"ip":{"addr":"104.21.53.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://origindefi.live/","date":"2026-01-24T22:32:50.087Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"origindefi.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 21 Dec 2025 09:32:05 GMT","end":"Sat, 21 Mar 2026 10:30:38 GMT"},"fingerprint":{"sha1":"F4:64:E5:11:64:AB:0C:90:38:87:2B:DC:3A:D8:F9:EB:2F:F0:B3:39","sha256":"1A:B4:8A:A9:33:3D:A6:66:19:1B:40:43:03:6B:42:0E:AE:5B:F6:50:7C:DC:85:BF:8B:5F:0F:2B:D2:A8:85:A1"}}},"request":{"raw":"POST /cdn-cgi/challenge-platform/h/b/jsd/oneshot/d251aa49a8a3/0.5809739697929515:1769290002:C3XtoYylUF6Jk9M2ttjAv_67SHvY4ulFx2YUhoweOCw/9c32fd2b4c1da0f0 HTTP/1.1\r\nHost: origindefi.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 12132\r\nOrigin: https://origindefi.live\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://origindefi.live/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":12132,"data":"NwY-ZUEFr+TsEsECPoY-vYyP64PIPR-413-rnPA-KBrhBk1hyPt-NB-MkPCPXXPn6XFPbqrGCP+IDEplamYEKQauYPoJJPP+0PNywAoPCb$SH4Ncb+A$PCiFu72gFh4P4UCw9S494KnRJhZ-PnxbcEUaEPKaSVJZ5YZHg-3r6p6o$ctn7Y8naY8pP+UaShQH1oPPxXacG5Vp$KGQMxo-Pzy3PQ-rLRXBPckm+TLTzjIf4PwoXZ3XgPI-Psx3P9sCaS28Z+2qPtJ2iutoUgPPJXCb-3UPPhee3CUPxY-EhjCYUaDvZYi-PLxA-IU00qx9I9IUwR3P0uqYX6gePPn4647wxrp30p3sp3P1rpPVA7k3PYXr3ozUbR43EuIRwO4lLaDZpuZxA99wwXtKxYDkwxnYUy3wkj9TYEM--rrR3x8cMPrRx0ZrLLco$3bL6QLrBvG6vf3vV-Z$u2F3E700-NPLlbrpY4pGkc2PR$zUCa2sXgZMP8m9+t6s5RJyzN7CxbZZb9YPBy4r-uYzboAIIUPPJqfs+s1ZwpjAxRnlnYx4xyfygrb89b2zkmCqn2lQ10xRDblGOnG8xcMGrx+mc2PTetk3df8HMhTdiTTYeV878Z7ksHXs3NxBXr5RQklE41+mpVyPFz2r2kR2nyTBwxcACa6Kx5-DvK3VjBge82Xbi9DHhwhVpJaryyoH9S3n-rzO2lPDqvmKsRcP2m$Q75u0XoNPOjKJr7mmL+TLMEBok7Iu-YNKyI2AZypcMA4QL9bDtlq0$rE0PEjaUAnAa$7np3-yUwgAeq2bEQdVn-qrsNqKrSBDkP90DtT4x7I9s47077E17r00A6eP6yoTwL$hJh9PnEw27xl207Ers5a74pa-gnw3$dXrV7dkw5aC4Yr13kpY3qPd43$r4tatqkZ-qEwk3pd5EReaPJbBuY03BiU27qePKpV$4FAPQsDJFGAtv6E4R3gePA3qynPRekrXAhRY07fXUxpGspdZ134lPyU4I-C$4uihxr8xA4Mfp1krF6kXq3IbGGs6FPcwXUXY6$FrAL$U84sxJz$JI1kM-yvrrOIPkMk138Ujigxxoe7NA07x4wR3P3wvIDUBRAwsFvM3dptv6$cQ1$pMr-Dxn-E96--iPZpuR$ARERqF$L94N$qxwlwwBAyn0IA2qyU$G9aLBI$Decy$p2Y0$wu+FAG95QPLIa-4-0yMl66nv$J4Y+Ppuwllo9YQonpwQoc4EsPJeak37ZyyZrnXg41bS9Y5l4q$lk45dArBDdirmjEoraMnRe5VqqnLDn3TJuMhlfFa1dw+ED$x9qq4YY1YxGRA4L0L7DacBwia06RBzAYHOK2JqrI$tip8TsEYOhGKmdwY31TPB10p5lE10pPat6B07Uu52qFQgS$01PFi8++07-B+JRXetkEgVSB-F9mq-G44t8EbqL0TP+JBTR5O8CHIqfawI1$q$llE-IwJ7D95E56Oku4ulQiFtjQMk1QQcu5Y05uxEU68mB9BOx6MkEx3h6goH8DQqa8$AoPVm4jgV27mV3DgtS81-PPIO9P2BXPPXPIV0q4TXE-9-+M3ElD91g7yehR3crSw59up-iEYPlBnnPQ-sEErFn17PrFVqcqHHdRmUqaBiFsi7RZyIPP6zq43ZRoED9kJ2J-AsFE2NYrqb$y-xnIQoXu6+1$EEDub8bAhMFK62Kp08Aq3-FLk90e-tC+eLIUoLY303FrPAnN4Ci0q3uMBHk5yBQqQPxyKTskSPgQ3iRF3jrYN7YYFy5ZF0uIGX-JnijSQJ3aDk4LGEFE0EBE3QPhmqTrC40LFP7ZUFLbCcow30Zx-mt5MLr$DTk4qIaxL3rRZc63+yRrg$sZN92RUvzsMq$cV43yR3ATZTP+VQdNow$bRq+tL0mEMx04rIrrGCtw$ETU3ksPlE-b4jSz4faEAUACAciy3-S$gGGPxNoa-3-TZCuiiiRcCPo$dR6ClQxDXwiX0xl2VPg3kHJNdAkH-vqDXyZdtn9Gi3Vk-4AJfb4mE0oDRfUYQw62xyuYPNYU9kKR3ySykiAu650pYRmeTNcSkRC17tZXdECADtwkAcrU4mzQ3yZ-eLBppQ3S-bpr$jLMQvACy$GIkvbz+2qUYVBY-6sYCMyEexovx32lY3Jhe4lXEL-PuXsSxK+xxvJJuBBuYmaw-zIRr11icn1ELrtyQ1FLZpFcE3VTuoRe-dyy8RLkE4Ga081VFcfxYg-24YCS94QU59mC16D96tFTPEp6AHFqE$kwVKdFJc-oFnQ74XFTQJ3JXI3ilUt35pc-Agx5CnUaqLy69CCuB6+wZFxSxoucsP9z7RUzA4sMnJcFEG$yUYC3J-v1m8ce-RumNqe$iCEFnNbimk1TRFYYRoJddLUiIR9pEkhd1spNB9GZEal1xxixO1xYZxoK4Gqq3Z6BQ-7PZSrpHpqTrPCFqTCKNkjmalLYbXE3f4fLMBP7udvqmGXX8rRA3ZZfYUhuBoUX-xmDyiz3Bdr+tk5dEaFMp1u7MF8HBn2G1+APZ4pR+GzCEtjfoPNnQdjsAT9zqJ5fRy$irkRUsS77$EzjS8BGP+w80JI$zwVq-Y3JD2ktAXuLulohkF5tGvJN3JxkP4upBHZ9LPnAsa5RA2E6U9bVHxIm3A4r-BZcurqslUCUR$Pg0BINKGBy5nex5T1-AkBl33NbdrGvb6UAhP5ob8sxfV3KrD24oQ5ygbPx49rNhpRMiULnQgh0DzSYh2F6x8g-Y$kRR+94m7lPrJkdpFUkYA$1tM+5PEPKBRiBZi$TKuuRqcU5bjqdZJipb7567xy$f1$kdFQwnEkYN6cIE-SCf6RFvYPluuEBY0t1fQLpNLDo7twz9Q2siK$VruDLJeRCB9ylJKRlIcTC4+S3S-C4E9LMNqy5l++sff8l3hvPLweGIoTFNLq$PsT21I34w$OUnExfszqx-y+C5JVkBw8T038NMUUzbKM22CtXVJA4K4$PSms+BLe2N9sZRodPBnx$Y$+Rq9VJ1vXIXsvcD3E1qQuQgI$ObXazoMGwg7jam3VDwBUndxpYbPFZK1-Ub7eReKwU0IsKz8ZCHnJDRq+0pbt6iPsFYgDFykiSvcX$aDnuTz$+IVb0rkbBcfQtaZy8nGIq$rEaMxe1eOxFmeKzAFc$aJP0+74RX6XUscbA84d1JAq+Xu3tJ5$Uy6vClh0BCaJHQwGJoI+q1cyg$xP8iV6aSey-0zJ9y$ooZ8JE6ocxV2qj3a1sgy44ikPCQ1rxV4x25tH7-iUJpqBFqgrxGyy1kS+vgVA8Is0SyDjcZ6OdnSyIE-Y-EDlayhnpNf2Hm9NaVjU4qlB+jY1508flGxE+o0T-amzFpfJtaMLzjR2Z$J7Dv-NKtM2IY14Yy7noPzbrnEyDou$$et-n3rJFtk38KjCA4rrfdSvj7Uv6ujGkdQ7iv$rdvVokcsT8-MoEG$0pEBGefX$8dRv6u+EBXVABntGzQ1uInx20jl2wm1AT2x3jnkmGmY4Aek9YP$PkcrUQL3jJvMnx7Z$5T5EqvqqpKJ06c1P-fPKsXnmM7n-yLyuU-GEnlZUSLMPmXJ2l$PcM954Vjx$5k+QPL-J9v$EFnB41jToovbuAEXoXuB3p9AQ4AtfFetcd4YnzkURSP$4e71-imm0AQkTwP1UrkwK9okvqcqY4aX--ZImpK-Y0f0un2lm2N6PfLGRclxj2+glK0vvLqyGA4HmkQ4$$vU0rkzGejvPiLweNne7$rn0wEL-Ff8fyX8c7j9AHu2XJ3AvX3Od+obkAnXjl$TcxLlct2SYhvTf3JE3sZYCQkYP0Z$402JoerUYovTmxYgjGKNLBlLnykw9qEn+f0L+22YmI4SCSYHoSaPTBAXr0d-2XdyrxaRfsCS-jT5TpmU$wdDQ5RdjnZO$mct$tUwRVcHce0OjfQbdd$F0$LGnlqsmlmJU$rBRUfyUcmTvUQX9yAhK9oMr0PbfqCcmp9LqHfB$Q3tmdN64Jq$JqfT3ilwLsPVc2-oXufrc$9z$nqFcdn+TULEL3K9ccUTvbZg0w0$4MqFml3Jn3RgKVq+PEaGjxXY4S+rGr$n7Tmlvb$C4B9kT7-g7Tmm0wlx-yGCNm05u$nC+JuZvQ-RCdcJ0jkkRPCwlPaXX1cxkRaR+Y9Y9Kl5K1c$nJK44XrE3woM24PwLwd1X6qXY6lcN0PERRUr2sfR9okw4B95T60BLE3RdjR2UYJHRZ3kf-2j2wnjfBXn2X0$C1ZU0X4r4PN$rT7wAjEclqP$f+nnU4TBQC4dcTNYTMCZ2p9F2ERH-y-i2J3wL54pT275NnGt+yCGqeZnYEuoYuC-7M4wRpTvCh71u4YRYjdiXYqErUkCv5ECcE4evbGE-TZP9v$0T8eIKQ3F+GAlmaK4-lCFGe7u0wEo7boM93u$9d2eYfAUryj8ckkH+oAAYAYJ4gRcUUl8J$Qw72Z0jUJfQxj7cHmoKI7pc4A5AgRnvAu4TIKR+PpqN$EnZPYA96q+47+p3E9qnOme3xn3KpKqqPiLCv7P+PhyRB9QEBG6YPsVfVfpxUXMYDlC3iZEfi+jXiC$qQZNEa-+9K0XLCksrBeNn22wu+CxJzehGGeQ+-zif-yfNf32v8UtAbvfZMTkypEw4+PNZd3bKl$EqGUbeEZ4Nm$5l92Ml4eMa08Gnil4KMkkYNGiGlJaAP4XrpR1XFxPamdBnVvkxEjJAGNpTlY7KJdKmt27GG38jikQlsh3ZMNoJ2Q$PvU4fC+xqnloJG0pZd3oYF7P2AEsGw4FGvcxkA7Mr5ndR+ri7F2aotLVqrnkaHN$qSU+x5UEQU2HQb2QU8u6iFfsdSlOvSpCQcTpmqTem-Q0i$P9f$a0u+PCaSJ$P8XcXe3sJc3FmSpvuzKTQvna9S4w4B70R3KoAXXn2nxH0Xnd9oXqmUknZU3JPpR3yE2QCTQmlr4lUtQz$eaRjL2EaN7qnczJGjdaK8XgPJnUdLlq4MJvunccTxrBPwhLG6paur$6jUEwiEN6E8vuJUiddkxdYPsJoICPjLp1Nwyy$3kUrAKshi$9ft-c8yiUadlMvbpmlfuZuaoMCd-49MfriVaCp$Pm$na9PK2+E$sX0G4SvUzcL67XarGMKJQXnJRuLBs-oTlJdaz4hbCSU6sYmA$539ureEpr$cnSl49UG5mIdt2YEK27USsDmdsUJtsSavKmppQgTnoHv9+R+hhikXA73meBhYsX3UpfYzfe2CjkP+nQ+yxnK92PCk7pR44G9GT5pJ4pkfhgiNE+cVoN9aJiklkNKPpFqJ9LYByxNA$BnGZddKNf3FmnEPvP2Yn4KZZjvTZnJs4GJtctdIl5rGyw0B$DlKYdpsftu7LbNpZMNnjMdH-rmcYJPvdPc83sCAyXf7sXN7K-hcc62UEUzpRBfCRm2eCXXqyNZV3kA9lECtzt85ELiTLHeXoOj2TX0t86uJxBUaUrYpddGuYicijQkRqvCTjUhxr5-m2+kGvD8U9t4D41K$ZEuA9-CpreuiX5-+T8$UZ0q9fL++Nt+Pa1GNxg4JZt+idACYsRK6j$rtZdme3Vhzfkc6jiqaufiTJEuiiAUdRHlgyCyp6wlXPozYhe2$a0rpLrGSsXPvUfQgTc-IU8ugPdLceV2lXCJ8QxZI$H7MC7YylthkN+n70kFNGpr0C6x6mlNpE$pRuJURdmXACcl$qPiof$aE+lUMrMRgn0qm-iqI87GqL$X0PrFuvz2Px$PyC$PFmm3g8k4$u5e6dCaPfaRUde426KyPETsBUHmkV49oeblgusKUECR-cC2S+F65RAnRdzhEJS0leIZ5KMr9ZPb7pmpp0JQvyyzTZysasbhbhduZxJ4+n+40qsx1vTa4I-dpKJznxg7V2H0V3vqHLHov+iKEc4x$jo-lXn2AfAf+oJmmLEsVdCKvC8NJen6+E+P+imJ17ckBT$YBsJdy9fpP8J$QkpPhln9F+lzA-m-sN-3E3sZvzkFZYJP4qNmQ3HCcZb-iqHx8u0Yw-+ZsTZGIKpYprB+Env3YL0PXk9krsclS7FBe+DJZxs7jnwG5tscSnEqPs4ZbTKprUwr+YRpEdIiUoO7phYpLzs+7krGLUUX0FR4dN4yr71-fNLjq6k6hb0EhBGI9+7x4PexsTSi-p1sahRzdlde-8Fx8LHyHpy$AtnmMYa3BsAfe4EVxm+9-VYnQsoUNZzNNJBhxs1Iih-71BBxt0ptN8SzQdoGeG6tQ3k3ImMk+RnctAZzpm9cmVCAmtRhYm0sipEjsxzLMRnjuQG0dA4En5LxB-c$QuiZx5v71XM7N0-KmabpZmpCdX595RBa4BxEwUt+mfNNoiUuJt6nrszvFzHpeNJJZhkVZzbzNN8N6RYmJXuCwfVA6CnbIdoLfF4s$viCyPu2CLIYeCkxPV7ii5wYImhaV8ZfJv9-yeVxNdh$4E+6s4Ds3Zay49rrmqFcuCpEIvSiuc$9ILymMGBPm7wGpFwG54MyqqEENxjsA90tvV5rgoTiyaZiy5u8J5BnFEHaiB50n4UnS-ARE8HoSruiTBaoFJU6F88j2Rh6qbqBDeqI8$4jbdM2oCX2s4drs9gpivBBaovsBtj6NQMb021soVdeRi-HZsiX9JtsXdRx44oJym2kELoL0QSXfZnjHpRySzpE5uZ60+XPujS$7CNQhL8suIhFPzZa4ZSiKcIovFQF0jIQ+PivA0YPkuI-dr+Vw+buNYtKgCYjbA4Bfo2weXO+oNIRqqMnUczYAnCJbIsbB3K585qMjGJ8JLG6gNtGzxS66Fcp+zRQRoLI0BdoYa-D+Bs2ozzCXy7cf00m18e6Vsp85cpLER9jkRjxMVUrbLDoA$cr8ahmJl2x0mEbGbn8t4c6x4sE61yYpumJ5kKaVc3in79TDI-safamRbjxBD38XC8N1dfyGoGoiuvbn5yEeC0Rjm+HrhLGecG6EQ1IadU$2zeAaGCE1k$Fp8oygrLLZpThR3Uy220pPprx0SEtgc9QHQct3NgPZlU9gL+X4hkV48KoIN+9w5zGAjSkfeNbrCjTxiXoY+EBBsz8r44tr$St+m4rT78toIcacR8I88$dtXmoD6nc5A38JbsNhM2u5TKV7OxAT+2CxLZ8Fj4npIAhX0y67RB1wMHXaO+wyH8bEtAnzV5nBuiz0R4sArFk2kXSicvpGOU9hz092JSqDaPhsIj79EZxdMamKYrfA0UBZd2N$402Zcw-3ff-XBR4fUr3AP98ejBzIn3nFMxi7IC8LRnvHNXUuY0RuZbjXv8lX9SR09ylSXjhBgZF2ggf2grUxs03+MCAjutSp4SC9AMlkF0tcG06ErKFL85RMc9Y8643j08CININQdtBivIK2mJX$oJl66U5j3UbTInu6FlkndnuQLqhEMx$p+XZMCapHDHOz1PTAsnEu6SwO7SgMQY89AUH+KX4S+lOToDZ3CdYJRMQ1SbFQs1hazoY42ug$oGMxusOdt046N4aJiU0upS$pNXKrEo1g4Z3xY+F9+zOYonY-+xa+iPSTNn+FLrEDPNM$9BJnukhYnYYrS0EPAnq+PDPXCQsV9Gwj$ZhXwLDCJ7YIR+PRsqsQQYACBrhiFYY60oFZiRGMbiaME7R6bE-2hTN0fd7JRfzQclw$1t-iqF-9rLxUHPR0Dn6yZj99cltt-n0VQXDR+rHErBUHaXXq2IqwEt-pqVDnPrhadPxkS-lBJY4g$6m0B2nE3tb7$-zuBUJ-gJNYacPeatY+bE3RhdC7MTAwcUJqEYX2$fAFPaTFdGpafrdqZ-2abPxtmEPbAgk3-oxaA3+r3mc3B3yNE4KkEATY6CYKpZ4NRwUw4$6rBJT4YlE7rAFl0CnCLRz$Aw9+pYBpIh7LRRrqLwkb-3A09o40c$m3-6Cc-icNrc+I2upP2ZEENT2E06ZPAHEq93b33b+3Sx2afrxEx-BP+B50Nn7zTQpEOrFC0CjLo4wLbdCBo5LGPUP1x+DY+C0a3bP32nTRtBLYE2MAplLd$QB02NC95Av$15uYIkKLRzY4$C3p+EbTSyXTxL1YRUJKUF3HE8$vs9wCSafr+3$P2KJlCLrM313Up924Yosra-HapAE$YYbYKaTqeGhH2Pq-mdyHCA0ASGt4b2Y+JL1FArEA4bDTMTot92y0Bk3UY7nVA+F8q7JZiR4EF0y-1Y0B+qUhMXrq3rsYpARRPxa7wppYAk5UGGLrUt-QLbfEdkrTp2fAl3AOYvrXnc1Es4wr057lCrGbk54YU3V7fbM8a3AK++PIsZBc11HYu+o6TnqlEpUspbbIbNLCi7wr5B7b3ZJ4acTdevC1Y443o7C9UEqf1YA3oTrDRdrYAL6+262PzRE$spoq2+5nat4DYzhDcNY050pTZPfFF-7BVbnka-E07pBMBAGasUwwF70o+pQGN1-Xmr7UO04KU$jrO3aqQP6sIrJGPCrmrgPr4rpTw$uTf$5J6j4FCM9zr0$zVQP+uqend++d3BTJETvq7er3AlAustheR9GPx0A1IdxcNinFEM7+wc49M+HL7kCYZBvFACrGTNAt7iBSkChRsaTagpA3OfCQUZ4HE2wZ154n+Zfb$NFPhBDcC7Rx9HpOY0TYpFAkIAUUXPXPR-4DRk6CAOdpY3rFE+wr3mFxHq97EC9oUrFy$96drISN0EY+-fv-ZF05CGLBoxwpY5xZXLvUIRC0xBB4+gR4rwPgPy-Rsdef01n31Cw32qRllLqp7awCLdT47RrEdE0FPdNU6tnA-hptYn1Y3K7aqrM3P-BkkPYFAcynack+kiQij41MGSIB3cE4JqoJB+uf0Mi+XeJNkEsSjFy-uwTMuqE9DTct+P8i0nQBmXtGS0RUIZGnq-SvPIgIwrpTXA27v65ZQqPbU+cP7Q+DkZ2o-Lpnp433gRr$r7K$ZfT2pEZ33E0RpGGPPP0l29bPFr9P08nD46ewPfe62kU5fiP306UEg4JjPclo9hLR71EC3E7ZBeS4H-cFOkp19pahoq$0E5-G+GgqQnNo6rdZA-8ZkwodrD-gHEzlUmfEXE6G-Y639p+2$I1XP5aKqVrElwdsoECqZKrq9MX2Li64wrJofanRayFC3BJM$Rvg1trxPa1T2VbQaPs7q-Bph4RQToRE-fyHHPr5BRdlk$L0BpevE1TRRKPA6M2YOhLPbewP5BBphsb+l5lMpd5vrtMtb3bbtTP3SYBMidYQA6D33OkQ0buN5l4B7AwYL4CfYlrCAe4L9TFIr+BTgAgkA+ppQha0EveQyokbKyoKaPkck3D+m+NnP2e0XohFqBJR$qSTGPh-xCLKRLZSnwRcPIBfTyKREESPmpq-b00nRnrJea-13T2QBRx6d$xPTqRwC0lEoVoep6-u+4mu4euexwDkaw4NK6TqXebFQ9GPyLgq+0Zb32xfo$qy-0Egba0FcEYNdBwEHYykL5KbP+$n3jbx2bBRNarB-P8bcwDq4qRUyhvMBkF10z9CBPCT1P7-Vqng7+HfAe-d66C0tGzeyvK$lsv7ErGM3Fop1m3CgClC$-bcOs2FSg8la0P+E-1CFvMYCetXze3pNB2C0jZIXSm61-MaJ4SAHlyEwwKsvh3BT2MEkC1IB8LZQaweybJ1okcaC1R76ltYkIgb531PEASSjb1-JCVlK+rnqHPIscIKYnpRguHYASORJpYHX9clpIs8diVaCMXAN1gF8dxu4Pc$XZBDSm3nKKUTfAf-j14gdHZOGUP43Asy-4Phce2Bxp8SlQk5+P0MSuB9FSE0KZ-QVkI1gFXUr$0rvf31P0FNfQYnOawJw1gF7CbV-HX5342mhNf0YZlX3JGPaV9gQ3yEU2Zm-k2VCLqsm7icc55frxNvrCvcEQ-bfFfQl74rY+jbqrOPxX3HG0oV2IrD4e3i4ddq-rlrmV+HT4u01M7IshnLYr5U6R6Rq9JeKr9kQpJ70V1+AQ-COXGJIAI+Y7AjN2eT7v2frD0AiEeG+qSRoUxqPPhYQhZKBiFA7AFnho7qjROUXC3qh1eEZkRQUwaLPh9X$Zo+VFf$Fl3do5JI4M5bgQ1rLQEJ0XYiVC6+4XlLeE-NUMEA2TcQLvN$v-ThP9KeRF3jFdrjhR082EivGPNfLoYpL4uNJXcAcLfCKCoIjppnZUOO8lCp19YpnTLvA0uobU57o1nGQyAoPsQpJSrHN5y5jKservSr9xbyVbPE48Np+Jc$b5spMuvJC1xc1f4+8YYicm1u-ryVlNYPXPiPQk9cKlJi-laC2tFE$0Szuo-pH1gFk4V-4Ju4w1wueFY9Sycixm6RYJ2JaFiJvfAJP+3EnAjKs$qisRp0RsB8cAuQoPbNPs$t0T2wQTHY0q3KEonXcF1CRekf$5rUadq-f7Y-PXIIa$a4wohIss5PXkoHfAY+f2AXFOmTeyqHY83QJYZKfGn35R8q8RVbL9c83IRpY+CFSpglUA8-j4rwbJzHUjZe4g9TcarKXdOThY84E4aOvATeTdRiq$cRZKApLxt-8swmB+4$QUcvukFH7LzNNugJwXrTJm5LPv9R+5ygf0mBvY5BnyQARPp+KwTq7PyJ7jU19snyfPXZ26w6hduZYulMEqmDkr-EH+NQ5vQuMSOfAC4oQ0P-1fFzN5SxGTIc61$xGCBlZo0XiXLcFG-awTZutR$uQ4QNbG8iug3MmKJfuLHro7XiL1b6UhIdhHuMiebDF$zB6zIl8m$m-M0bBfy9QAJ2mYMgaoCs93AJ7mM331BxslGz7um+SUGPMssrZvC4sYS1Vcsudkpl1$xqzVfza$Kw14gMm-4UkSdniv1Xr7ztVKQ0fx8X$xXg694nH8x91J-NgL5suuM2umNxSEQ5suQ-Zyme6SEQCs-2qZPX+nHS--iPjqJ$7LnmELgyddBJ2mCr$uo68qdGyTuy67zL3skdJicRYSI$pfhpdDiJNFeFDomRkJNifR66D$ACsNuFJGh8rHF-YijaTrIuwUqDQ78cPLZAmUxMAoz0BmcZxNIn7AbLhB2xZvmVdAAhj+uu6JtRpw7uVpzUvIxfY4G4eBayzRPITCuUDCuay02apaJt6faFwyxuBI8RpnjTtwi304I8Rsrpetws32CIqXJnvv6b--jCI-X2nqmBkxsmdPsXJwHDV1Er2gpgAwdyTF0pzuXZzmhL$Z50EtdNifXsSGv5XxdQQx+zR+ZbQz+uu16fB$GMbF+xjubITuyckbFyyzQu6JBkczNVuyJmtZvm7cOb5XXBfJifz7dvb62yHnHZcP6cjib2xB$z6DXvdS1dGiLf8TdJu-oSQxikES3y$zwyIIyU19wpERuCKvPqRYd-$ZPjL9IIv$42HEmqoq5k5LTI0G4YPxBrpPSEJu7xOJDwjIR+rqxHElpVPYOi5fm9SxAyEFVPltfrRMTHYCHuMLX8e0OIBA+6qYYDhAnc64aVIQX5czoE5PRk3-LPPP9p+tusDDziCdGqF9-CCSqa6ERTK$k46kIAPSr2oxA0qLMFqKz-5E2MT4Pku+Nadv0PPrbBPC9-Tw$44TqQB9194EvXZ3pQRqpm9peerm7cYawT4Z0UuLI4hwrQQdNX2wP2qCqT3CvpPP033ASPP4ygtkhv-n2o6xy$IPoPtrPIpFR-EL0YhvpnZp7mxMNtGhsjt3J4TsMS3HCkSCipPTFHCsjB-XDjZPPDHCvdTPT3TC$mthhDlVgeAU0P+tcPT3r54ofaHft+UJBPbndPBHpPw5DQ3IhOJ4P$w0Lu+T9yBTkotPHfOqYb$fxy$DPPPdGyryrateP3qYrzjPmMGPD58pR-4s$NMPuX2L24GzpT2EGDIPLrY33lP9LnEd-h0a6TALj1K5bULr9b9V4EAO0xBa0NnRim2A+YnFfp$i4NRXTaMF3rMb9KlJ5aMpDFu+nfp7m5Ed-AsaVo1mAP3RZ3ACzOY197mKRYYumVB+ozoEQP9D34v$a64oj7Hl3S5pLKP9bjYEkPkPtraPToTc3-qe+jTKu4F$0e0qwJ5l5NY8R0eYYBa4SkLZYk7PI3oqQxPBrBPpnfDCPBctq99qf-6T9xUxY3bqPf-a$6xl6neKBny-PP7aKhqJ33vzaHdGre8fHpMstig890+XU-BMI3J+03TwGhPPEVA32PP"}},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 24 Jan 2026 22:32:50 GMT\r\ncontent-type: text/plain; charset=UTF-8\r\npriority: u=3,i=?0\r\ncf-ray: 9c32fd310a7fb50b-OSL\r\ncf-chl-out-s: Qjk35sVOZKvuYlF9CkDurQ==$X+uiEDt62xAoWCpkAFwtUA==\r\nset-cookie: cf_clearance=CSNw5ARAHrGShWh9HXvl2nZ6qcBqXTMDgjPR6ulcwtE-1769293970-1.2.1.1-7l45u5s4raLYwTZEknXFGhRsYOTGgzpl74oggC1CHeu52Q.zoZOW2t6BLu7URWF.2kqYLkBnieEbdvlwnOVT4gvOdK63Yrdx35R8s77txKqq7R9ljUTsoayNQ6cT_ED8A13uq4kRy86yOKpP8.qD.wQi8ewQmYdZjdS2ej1MQiE75GsZ5rQZRGKYlCt4wMYAAeGyAKSKbJ3bBRFW6ha0GKI2vmm4JL9czo3hvFb24g0; HttpOnly; SameSite=None; Partitioned; Secure; Path=/; Domain=origindefi.live; Expires=Sun, 24 Jan 2027 22:32:50 GMT\r\ntiming-allow-origin: https://origindefi.live\r\ncontent-length: 0\r\nserver: cloudflare\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=rPTWyTfZ%2Bl1Z8785avn61%2BNO8V9ywqNkNnJu%2FBCfJFeprqHqd1JSLpDhk7Q2ogt0u9grhSfWQcenIc2obd7iGNZR6KZK2ur81eExt9jiRm86VOWFK3MqzoH8Y10djOpohaM%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri, cfL4;desc=\"?proto=QUIC\u0026rtt=837\u0026min_rtt=505\u0026rtt_var=232\u0026sent=463\u0026recv=55\u0026lost=0\u0026retrans=0\u0026sent_bytes=523922\u0026recv_bytes=16721\u0026delivery_rate=67892507\u0026ipace=0\u0026icwnd=12000\u0026ss_exit_cwnd=100595\u0026ss_exit_bw=67890386\u0026ss_exit_reason=2\u0026cwnd=82724\u0026unsent_bytes=0\u0026cid=c5b5873733229095\u0026ts=895\u0026inflight_dur=86\u0026x=55\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-10T18:57:29.026751Z","times_seen":17822672,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"origindefi.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"origindefi.live/","fqdn":"origindefi.live","domain":"origindefi.live","tld":"live"},"ip":{"addr":"104.21.53.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-01-24T22:32:49.083Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"origindefi.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 21 Dec 2025 09:32:05 GMT","end":"Sat, 21 Mar 2026 10:30:38 GMT"},"fingerprint":{"sha1":"F4:64:E5:11:64:AB:0C:90:38:87:2B:DC:3A:D8:F9:EB:2F:F0:B3:39","sha256":"1A:B4:8A:A9:33:3D:A6:66:19:1B:40:43:03:6B:42:0E:AE:5B:F6:50:7C:DC:85:BF:8B:5F:0F:2B:D2:A8:85:A1"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: origindefi.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 24 Jan 2026 22:32:49 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Sun, 21 Dec 2025 10:18:25 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FGmamYQ2gyfENk%2FedbzuG8n30uA2Liwks1Q66mbSOYxZiYrfZ6RyV4mpFI6OlG2r1OPYrfJPsFpWBqNBr5VGpMg728rcBdfw0AHW9Jcx4g%3D%3D\"}]}\r\nage: 30633\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncf-ray: 9c32fd2b4c1da0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1536702,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (65395)","md5":"c4e189f169de0564b25a944f6791356c","sha1":"6dae7635169b9e2bc3c79fa8ae90ba679c761b59","sha256":"4ae8e0922bfe07a2b94607e6a96353ddb20ec11c23dff5cc568dd5b92654d500","sha512":"690d87c6d39b920a652d02026ff36e594d5aad0c62f8bdfea358d313ff19f32cf3fc69fd2fce22819b0f240c304225eac6d406fc9b5718f98f7fd949c87abf22","ssdeep":"24576:r8IL5hXd0yCpuCp7CpoCpDCpuCp7CpoCpACpuCp7CL:hLFkRSnqRSnvRi","tlshash":"5d25f172f6406177b52e8a6c26d1ea8c7f5cb447dda156d931ace0404febfbb22e1204","first_seen":"2026-01-20T01:58:37.419208Z","last_seen":"2026-06-22T11:54:58.922028Z","times_seen":20,"resource_available":false,"data":null}},"time_used":210,"timings":{"blocked":85,"dns":73,"connect":1,"send":0,"wait":35,"receive":0,"ssl":14},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"origindefi.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"origindefi.live/swiper-10.0.4.min.js","fqdn":"origindefi.live","domain":"origindefi.live","tld":"live"},"ip":{"addr":"104.21.53.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://origindefi.live/","date":"2026-01-24T22:32:49.432Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"origindefi.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 21 Dec 2025 09:32:05 GMT","end":"Sat, 21 Mar 2026 10:30:38 GMT"},"fingerprint":{"sha1":"F4:64:E5:11:64:AB:0C:90:38:87:2B:DC:3A:D8:F9:EB:2F:F0:B3:39","sha256":"1A:B4:8A:A9:33:3D:A6:66:19:1B:40:43:03:6B:42:0E:AE:5B:F6:50:7C:DC:85:BF:8B:5F:0F:2B:D2:A8:85:A1"}}},"request":{"raw":"GET /swiper-10.0.4.min.js HTTP/1.1\r\nHost: origindefi.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://origindefi.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 24 Jan 2026 22:32:49 GMT\r\ncontent-type: application/javascript\r\ncast-mode: default\r\nlast-modified: Sun, 21 Dec 2025 10:18:25 GMT\r\netag: W/\"6947c971-feaa\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nage: 30633\r\npriority: u=2,i=?0\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0rYn3dyGIHanUY7u3LjuCMA%2FmjQeX7psnssiULlOa45boAKj4pcCmZYgutKHNYvqHbRUyuboOGEJaN6g0EojQLacx6Xd1SMZyRJX%2B4U%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9c32fd2cea43b50b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":65194,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65194), with no line terminators","md5":"1a19d46f14ec019c883315e5873718f5","sha1":"431ae8e824bdc043f279601ac75a8333f58b3b73","sha256":"b4b6df004a4864963672290f0a749ae7e10395b8f592072bc39a05836c3846c7","sha512":"a699f3a5b76f4c3c66aca1ade192a173ec342c18a370b45f5c30f0da83fe0aab9e10fff76b3225a08ffed74f6f81ce93e8416e4b025e0d03b27c726b922d06e4","ssdeep":"768:S8yy4ci5B67ox5aZdrl7GJyx6ChgSc6J7/FeAZcxjSc1B868/XycphnJegfgcHGU:66uaZLSIEChLbJ7/FdJeguC","tlshash":"3153a7ea540ad0d98d1150cdd473f809e4680993cdacf1a3ea6cddc6b81ef6ac44727b","first_seen":"2026-01-20T01:58:37.422501Z","last_seen":"2026-07-27T12:10:30.295718Z","times_seen":20,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"origindefi.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"origindefi.live/","fqdn":"origindefi.live","domain":"origindefi.live","tld":"live"},"ip":{"addr":"104.21.53.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://origindefi.live/","date":"2026-01-24T22:32:49.749Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"origindefi.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 21 Dec 2025 09:32:05 GMT","end":"Sat, 21 Mar 2026 10:30:38 GMT"},"fingerprint":{"sha1":"F4:64:E5:11:64:AB:0C:90:38:87:2B:DC:3A:D8:F9:EB:2F:F0:B3:39","sha256":"1A:B4:8A:A9:33:3D:A6:66:19:1B:40:43:03:6B:42:0E:AE:5B:F6:50:7C:DC:85:BF:8B:5F:0F:2B:D2:A8:85:A1"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: origindefi.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 24 Jan 2026 22:32:49 GMT\r\ncontent-type: text/html\r\ncast-mode: default\r\nlast-modified: Sun, 21 Dec 2025 10:18:25 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nvary: accept-encoding\r\nage: 30634\r\ncontent-encoding: br\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HX3He%2B96HNxEvHNoT8AMoJOovBTMjxLE3iF28esj7mwrtZB%2BZZHs3lqkpQhgvCyQP%2FsInzT6qDtZ8hAUBpnV3777mFQEHGVmBBX%2BtO4%3D\"}]}\r\npriority: u=3,i=?0\r\ncf-ray: 9c32fd2eea63b50b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1536702,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (65395)","md5":"c4e189f169de0564b25a944f6791356c","sha1":"6dae7635169b9e2bc3c79fa8ae90ba679c761b59","sha256":"4ae8e0922bfe07a2b94607e6a96353ddb20ec11c23dff5cc568dd5b92654d500","sha512":"690d87c6d39b920a652d02026ff36e594d5aad0c62f8bdfea358d313ff19f32cf3fc69fd2fce22819b0f240c304225eac6d406fc9b5718f98f7fd949c87abf22","ssdeep":"24576:r8IL5hXd0yCpuCp7CpoCpDCpuCp7CpoCpACpuCp7CL:hLFkRSnqRSnvRi","tlshash":"5d25f172f6406177b52e8a6c26d1ea8c7f5cb447dda156d931ace0404febfbb22e1204","first_seen":"2026-01-20T01:58:37.419208Z","last_seen":"2026-06-22T11:54:58.922028Z","times_seen":20,"resource_available":false,"data":null}},"time_used":48,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":35,"receive":13,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"origindefi.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}}]}